[Samba] samba logs utility?
hi all.. question... i'm looking for a utility that can read samba logs and make them more human readable... the main reason i need such a utility is to keep an eye on add/move/delete/rename of files and folders... looking at the raw samba logs, using loglevel 3, shows me a lot of information but nothing about add/move/delete/rename |ing of files. do the logs even log these events? i couldn't find any entries. regards z -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] problem with printing server
I have a problem with printing in samba The problem is when printing from win98 or other windows machines via samba ! Is printing ASCI characters - that's a lot of garbage. What are the settings for the driver in order to stop printing this and print the actual document ? What I have to do in order to use the printer Any answer is wellcome Thanks a lot Andrei -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: So SAMBA no longer supports print driver downloads
Hi Jerry, On Mon, 3 Feb 2003, Hansjoerg Maurer wrote: we have solaris 2.8 here (I initially described the problem at our site), and I can help testing to. Could there be any connections to the Solaris fcntl bug, described in other E-Mails, or is this a completly differnt area. This looks like a Samba on Solaris bug. I will fix it when I get back into the office next week. cheers, jerry Have you already found any time to look into this? Any efforts? I think there are quite a lot of people waiting for this. Thanks, Christopher -- == Dipl.-Ing. Christopher Odenbach HNI Rechnerbetrieb [EMAIL PROTECTED] Tel.: +49 5251 60 6215 == -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba and CUPS
I have Samba version 2.2.7a and CUPS version 1.1.15. I have been unable to successfully use the 'cupsaddsmb' utility. Any time I execute this utility, I get the following error: Warning - No PPD file found for 'printer_name'! The printer is question has been configured in CUPS and it is visible when browsing from a Windows client. Where is it looking for these PPD files? Is it /etc/cups/ppd? Could it be that it does not recognize the PPD files for some reason? Also, could someone further develop Any suggestions are welcome. Thank you. Regards, James Nallen, Systems Progrmmer, NUI Maynooth, Maynooth, Co. Kildare, Ireland. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[SAMBA] how to define share for sharing lmhosts?
Hi All, Probably simple question: I want to make a share for sharing an lmhosts file which gets included by the clients. This share has to be very public and accept nullsessions (whatever that me be (no username and password?)). I want this because I need to generate aliases on the fly for for our fileserver for some clients (terminalservers specifically). So I thought that having an server side maintained lmhosts file that is included by the terminalserver clients would do the trick. The lmhosts file on the clients contains: === 172.16.16.9fileserver#PRE #DOM:network #BEGIN_INCLUDE #INCLUDE \\fileserver\public\lmhosts #END_INCLUDE === The share on the fileserver (which is running in userlevel security) has been defined as: === [public] path = /usr/local/samba/public guest ok = yes guest only = yes map to guest = Bad Password read only = yes === Although I suspected this would do the trick the logfile shows the following messages: === asisis (172.16.64.3) connect to service public as user smbguest (uid=97, gid=9 7) (pid 14578) [2003/02/16 20:11:21, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'root': authentication failed [2003/02/16 20:12:04, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'root': authentication failed [2003/02/16 20:12:42, 1] smbd/service.c:close_cnum(677) asisis (172.16.64.3) closed connection to service public === Why is user root rejected? This share is totally public isn't it? TIA -- René Nieuwenhuizen Afdeling Informatietechnologie Centraal Planbureau Bezoekadres: Van Stolkweg 14, 2585 JR Den Haag Postadres: Postbus 80510, 2508 GM Den Haag T (070) 3383 342 F (070) 3383 350 I http://www.cpb.nl/nl/general/org/afdelingen/it/ -- Aan dit bericht kunnen geen rechten worden ontleend. Het bericht is alleen bestemd voor de geadresseerde. Indien dit bericht niet voor u is bestemd, verzoeken wij u dit onmiddellijk aan ons te melden en de inhoud van het bericht te vernietigen. This message shall not constitute any obligations. This message is intended solely for the addressee. If you have received this message in error, please inform us immediately and delete its contents. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] How to define share for sharing lmhosts?
Hi All, Probably simple question: I want to make a share for sharing an lmhosts file which gets included by the clients. This share has to be very public and accept nullsessions (whatever that me be (no username and password?)). I want this because I need to generate aliases on the fly for for our fileserver for some clients (terminalservers specifically). So I thought that having an server side maintained lmhosts file that is included by the terminalserver clients would do the trick. The lmhosts file on the clients contains: === 172.16.16.9fileserver#PRE #DOM:network #BEGIN_INCLUDE #INCLUDE \\fileserver\public\lmhosts #END_INCLUDE === The share on the fileserver (which is running in userlevel security) has been defined as: === [public] path = /usr/local/samba/public guest ok = yes guest only = yes map to guest = Bad Password read only = yes === Although I suspected this would do the trick the logfile shows the following messages: === asisis (172.16.64.3) connect to service public as user smbguest (uid=97, gid=9 7) (pid 14578) [2003/02/16 20:11:21, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'root': authentication failed [2003/02/16 20:12:04, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'root': authentication failed [2003/02/16 20:12:42, 1] smbd/service.c:close_cnum(677) asisis (172.16.64.3) closed connection to service public === Why is user root rejected? This share is totally public isn't it? TIA -- René Nieuwenhuizen Afdeling Informatietechnologie Centraal Planbureau Bezoekadres: Van Stolkweg 14, 2585 JR Den Haag Postadres: Postbus 80510, 2508 GM Den Haag T (070) 3383 342 F (070) 3383 350 I http://www.cpb.nl/nl/general/org/afdelingen/it/ -- Aan dit bericht kunnen geen rechten worden ontleend. Het bericht is alleen bestemd voor de geadresseerde. Indien dit bericht niet voor u is bestemd, verzoeken wij u dit onmiddellijk aan ons te melden en de inhoud van het bericht te vernietigen. This message shall not constitute any obligations. This message is intended solely for the addressee. If you have received this message in error, please inform us immediately and delete its contents. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] How to define share for sharing lmhosts?
Hi All, Probably simple question: I want to make a share for sharing an lmhosts file which gets included by the clients. This share has to be very public and accept nullsessions (whatever that me be (no username and password?)). I want this because I need to generate aliases on the fly for for our fileserver for some clients (terminalservers specifically). So I thought that having an server side maintained lmhosts file that is included by the terminalserver clients would do the trick. The lmhosts file on the clients contains: -- 172.16.16.9fileserver#PRE #DOM:network #BEGIN_INCLUDE #INCLUDE \\fileserver\public\lmhosts #END_INCLUDE -- The share on the fileserver (which is running in userlevel security) has been defined as: -- [public] path = /usr/local/samba/public guest ok = yes guest only = yes map to guest = Bad Password read only = yes -- Although I suspected this would do the trick the logfile shows the following messages: -- asisis (172.16.64.3) connect to service public as user smbguest (uid=97, gid=9 7) (pid 14578) [2003/02/16 20:11:21, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'root': authentication failed [2003/02/16 20:12:04, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'root': authentication failed [2003/02/16 20:12:42, 1] smbd/service.c:close_cnum(677) asisis (172.16.64.3) closed connection to service public -- Why is user root rejected? This share is totally public isn't it? TIA -- Rene Nieuwenhuizen Afdeling Informatietechnologie Centraal Planbureau Bezoekadres: Van Stolkweg 14, 2585 JR Den Haag Postadres: Postbus 80510, 2508 GM Den Haag T (070) 3383 342 F (070) 3383 350 I http://www.cpb.nl/nl/general/org/afdelingen/it/ -- Aan dit bericht kunnen geen rechten worden ontleend. Het bericht is alleen bestemd voor de geadresseerde. Indien dit bericht niet voor u is bestemd, verzoeken wij u dit onmiddellijk aan ons te melden en de inhoud van het bericht te vernietigen. This message shall not constitute any obligations. This message is intended solely for the addressee. If you have received this message in error, please inform us immediately and delete its contents. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] logging by name and ip address in 3.0a21
On Mon, 2003-02-17 at 14:40, Bradley W. Langhorst wrote: Does anybody else see two sets of logs with log file = /var/log/samba/log.smbd.%m ? i get both logs like log.smbd.192.168.0.3 and log.smbd.testpc when testpc has the ip address 192.168.0.3 I've tried %M and with no obvious effect The problem is that when a client first connects to us, we don't have any details about the client. Previously, this would not be a problem, because very shortly thereafter, the client would send it's first packet - the name exchange. However, now that we open port 445, we don't get that name and so we can only use the IP address. If the logon is via NTLMSSP, we might get the name later, but if it is kerberos, we would never get another name. If you set 'hostname lookups = yes' we will use the reverse DNS name for %m and %M, instead of the IP address. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] help
i have problem with samba server No domain server was available to validate password when in Win98 give -Username: -Password: -Domain: win98 say 'Incorrect Parameter' what can i do Please help, Thanks. Regards, Mustahsan . -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] no access by set as NT Domain Member
Hallo... I use Suse Linux 8.0 with Samba 2.2.7a in a Network with WinNT 4.0 PDC and W2000 Clients. Samba is set as Domain Member with security = Domain. I join Samba to the Domain successfully. So existing users can be validate by WinNT Server. Make Linux user as NT user and fill in File smbusers admin = Admin,hans = Hans. Test Samba via smbclient on Server. ...but if I click on the Linux-Samba-Server Icon in the Network environment on a W2000 Client a dialog opens: Wrong Password or unknown user for \\LinServer and fields to enter Name and Password ...if I enter correct Name and Password for NT User the dialog opens again and again. smb.conf (some) -- workgroup = NT_DOMAIN security = Domain encrypt passwords = Yes password server = NT_S os level = 2 preferred master = No domain master = No -- Error in log.smbd are: rpc_client/cli_netlogon.c:cli_net_sam_logon_internal(406) cli_net_sam_logon_internal: NT_STATUS_NO_SUCH_USER smbd/password.c:domain_client_validate(1619) domain_client_validate: unable to validate password for user xxx in domain APC to Domain controller NT_S. Error was NT_STATUS_NO_SUCH_USER smbd/password.c:pass_check_smb(545) Coudn't find user 'xxx' in passdb. smbd/reply_sesssetup_and_X(1001) Rejecting user 'xxx': authentication failed --- ...user xxx in domain APC could be wrong? Domain Name is NT_DOMAIN and APC is the PC name of the Client where i try to access to LinServer. If I change security option in smb.conf from Domain to server everything is ok. I see 2 share Directories. Home Directory of the user and a forall Directory. No Dialog opens for enter Name or Password. But it takes 5-10 Seconds to access and open the Directories. Can I make the access over server option faster?? Or what is wrong with the domain option and Error NT_STATUS_NO_SUCH_USER? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Fw: help No domain server was available to validatepassword
- Original Message - From: Mustahsan Siddiq To: [EMAIL PROTECTED] Sent: Monday, February 17, 2003 5:02 PM Subject: help i have problem with samba server No domain server was available to validate password when in Win98 give -Username: -Password: -Domain: win98 say 'Incorrect Parameter' what can i do Please help, Thanks. Regards, Mustahsan . here my smb.conf file Load smb config files from /etc/samba/smb.conf params.c:Parameter() - Ignoring badly formed line in configuration file: *passwd:*all*authentication*tokens*updated*successfully* Processing section [homes] Processing section [tmp] Processing section [sismac] Loaded services file OK. Press enter to see a dump of your service definitions # Global parameters [global] coding system = client code page = 850 code page directory = /usr/share/samba/codepages workgroup = DATASERVER netbios name = DATASERVER netbios aliases = netbios scope = server string = Samba Server interfaces = bind interfaces only = No security = USER encrypt passwords = Yes update encrypted = No allow trusted domains = Yes hosts equiv = min passwd length = 5 map to guest = Never null passwords = No obey pam restrictions = No password server = smb passwd file = /etc/samba/smbpasswd root directory = pam password change = No passwd program = /bin/passwd passwd chat = *new*password* %n\n *new*password* %n\n *changed* passwd chat debug = No username map = /home password level = 0 username level = 0 unix password sync = No restrict anonymous = No lanman auth = Yes use rhosts = No log level = 2 syslog = 1 syslog only = No log file = /var/log/samba/%m.log max log size = 50 timestamp logs = Yes debug hires timestamp = No debug pid = No debug uid = No protocol = NT1 large readwrite = No max protocol = NT1 min protocol = CORE read bmpx = No read raw = Yes write raw = Yes nt smb support = Yes nt pipe support = Yes nt acl support = Yes announce version = 4.5 announce as = NT max mux = 50 max xmit = 65535 name resolve order = lmhosts host bcast max packet = 65535 max ttl = 259200 max wins ttl = 518400 min wins ttl = 21600 time server = No change notify timeout = 60 deadtime = 0 getwd cache = Yes keepalive = 300 lpq cache time = 10 max smbd processes = 0 max disk size = 0 max open files = 1 read size = 16384 socket options = TCP_NODELAY stat cache size = 50 total print jobs = 0 load printers = Yes printcap name = /etc/printcap enumports command = addprinter command = deleteprinter command = show add printer wizard = Yes os2 driver map = strip dot = No character set = mangled stack = 50 stat cache = Yes domain admin group = root domain guest group = machine password timeout = 604800 add user script = delete user script = logon script = scripts\%U.bat logon path = \\%N\%U\profile logon drive = z: logon home = \\%N\%U\profile domain logons = Yes os level = 65 lm announce = Auto lm interval = 60 preferred master = True local master = Yes domain master = True browse list = Yes enhanced browsing = Yes dns proxy = No wins proxy = No wins server = wins support = No wins hook = kernel oplocks = Yes oplock break wait time = 0 add share command = /sismac change share command = delete share command = config file = preload = lock dir = /var/cache/samba default service = message command = dfree command = valid chars = remote announce = remote browse sync = socket address = 0.0.0.0 homedir map = auto.home time offset = 0 NIS homedir = No source environment = panic action = hide local users = No host msdfs = No winbind uid = winbind gid = template homedir = /home/%D/%U template shell = /bin/false winbind separator = \ winbind cache time = 15 comment = path = /sismac alternate permissions = No username = guest account = nobody invalid users = valid users = admin users = mustahsan tahir imran read list = write list = printer admin = force user = force group = read only = Yes create mask = 0744 force create mode = 00 security mask = 0777 force security mode = 00 directory mask = 0755 force directory mode = 00 directory security mask = 0777 force directory security mode = 00 inherit permissions = No guest only = No guest ok = No only user = No hosts allow = hosts deny = status = Yes max connections = 0 min print space = 0 strict sync = No sync always = No write cache size = 0 max print jobs = 1000 printable = No postscript = No printing = bsd print command = lpr -r -P%p %s lpq command = lpq -P%p lprm command = lprm -P%p %j lppause command = lpresume command = queuepause command = queueresume command = printer name = printer driver = printer driver file = /etc/samba/printers.def printer driver location = default case = lower case sensitive = No preserve case = Yes short preserve
Re: [Samba] problem with printing server
Andrei Baldes schrieb: From any windows machine the print is only 5mm of the first row. (For instance I'm on win2000 and I gave from Printers Property - Print a test Page - it will print 5 mm from the upper part of the test page (this mean 5 mm from the Win logo and upper part of Windows 2000 (upper half - only 5mm - windows 2000 on test page has almost 1 cm height) and then eject paper and said - Job's Done. I hope you understand. Below is my smb.conf it seems ok And the printcap file - this is autoconfig. hp930c:\ :ml=0:\ :mx=0:\ :sd=/var/spool/lpd/hp930c:\ :af=/var/spool/lpd/hp930c/hp930c.acct:\ :sh:\ :lp=/dev/lp0:\ :lpd_bounce=true:\ :if=/usr/share/printconf/util/mf_wrapper: try to configure the printcap manual (e.g. over /var/lib/apsfilter/SETUP) because there's the failure (missing raw statement?). but i strongly recomment to read the relevant manuals *before* usage (i'm not the strongest in theme printing over linux) look at this (correct) printcap entry. ==v= hpusb|lp4|cdj970-a4-raw-hp970|cdj970 a4 raw:\ :lp=/dev/usblp0:\ :sd=/var/spool/lpd/cdj970-a4-raw-hp970:\ :lf=/var/spool/lpd/cdj970-a4-raw-hp970/log:\ :af=/var/spool/lpd/cdj970-a4-raw-hp970/acct:\ :if=/var/lib/apsfilter/bin/cdj970-a4-raw-hp970:\ :la@:mx#0:\ :tr=:cl:sh:sf: Thanks for your help Best Regards Andrei -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Novell EDirectory as LDAP backend
Hi, is anybody out there who is using Novell Edir. with samba? I have searched the archive and found some random notes but no real success story. Here is what I have achived so far. Maybe someone can give me some hints. I have tried the samba-nds.schema that comes with the 2.2.7a tar ball. While I was able to import/add it to EDir. it did not work for me, because the lmPassword and ntPassword attributes had a SyntaxID of SYN_INTEGER which I think is wrong, because samba tries to store some hex.Strings in these attributes. After changing them to SYN_CI_STRING I was able to authenticate against edir. The only thing that does not work is to ldapadd or ldif import users with objectClass sambaAccount. Adding posixAccount users and then adding the sambaAccount objectClass via Novells ConsoleOne works, so I guess this is a edir. specific problem which is OT here. So right now, I can manually add machine and user accounts, join (W2K) clients to the samba domain and log in as an user. Changing passwords works, too. I have attached the modified schema file. Can anyone give me a hint about adding users w/o using ConsoleOne? Setting this up with openldap was no problem at all, btw, but I have to use edirectory, because my university wants it that way. Any help is greatly appreceated, -Rolf -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba and CUPS
James Nallen wrote on Samba-Digest: Date: Mon, 17 Feb 2003 09:23:10 + From: James Nallen [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: [Samba] Samba and CUPS Message-ID: [EMAIL PROTECTED] Content-Type: text/plain; charset=us-ascii; format=flowed MIME-Version: 1.0 Precedence: list Message: 20 I have Samba version 2.2.7a and CUPS version 1.1.15. Hi, James! I have been unable to successfully use the 'cupsaddsmb' utility. Any time I execute this utility, I get the following error: Warning - No PPD file found for 'printer_name'! So -- *is* there a PPD associated to the printer-in-question? It should be in /etc/cups/ppd/printer-in-question.ppd... The printer is question has been configured in CUPS and it is visible when browsing from a Windows client. Where is it looking for these PPD files? Is it /etc/cups/ppd? Yes. But then, in a second step, cupsaddsmb is retrieving a copy of it (using an IPP call) from there and temporarily storing it in the CUPS spool directory, sub directory tmp under a weird name: /var/spool/cups/tmp/3cd1cc66376c0 Do you have a tmp in /var/spool/cups/ (or whatever is dafined to be the CUPS spool dir -- see the TempDir directive in cupsd.conf) ? What are the access rights? If cupsaddsmb can't store the PPD in the TempDir, it could lead to the error message you are seeing... After the PPD is in cupsd's TempDir, cupsaddsmb makes a smbclient connection to the Samba server's [print$] share to put it there (alongside the rest of the needed PostScript driver files). Cheers, Kurt Could it be that it does not recognize the PPD files for some reason? Also, could someone further develop Any suggestions are welcome. Thank you. Regards, James Nallen, Systems Progrmmer, NUI Maynooth, Maynooth, Co. Kildare, Ireland. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Novell EDirectory as LDAP backend
Forgot the attachment, sorry.
--
-- Submitted by Bruno Gimenes Pereti pereti@ut mp dot edu dot br
-- Modified by Rolf Offermanns rolf.offermanns(at)gmx DOT net
--
-- schema file for Novell's eDirectory 8.6/8.7
--
SambaAccountSchemaExtensions DEFINITIONS ::=
BEGIN
-- Password hashes
lmPassword ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 1 }
}
ntPassword ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 2 }
}
-- Account flags in string format ([UWDX ])
acctFlags ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 4 }
}
-- Password timestamps policies
pwdLastSet ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 3 }
}
logonTime ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 5 }
}
logoffTime ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 6 }
}
kickoffTime ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 7 }
}
pwdCanChange ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 8 }
}
pwdMustChange ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 9 }
}
-- string settings
homeDrive ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 10 }
}
scriptPath ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 5 1 4 1 7165 2 1 11 }
}
profilePath ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 12 }
}
userWorkstations ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 13 }
}
smbHome ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_CI_STRING,
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 17 }
}
domain ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_CI_STRING,
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 18 }
}
-- user and group RID
rid ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 14 }
}
primaryGroupID ATTRIBUTE ::=
{
Operation ADD,
SyntaxIDSYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 15 }
}
sambaAccount OBJECT-CLASS ::=
{
Operation ADD,
Flags {DS_AUXILIARY_CLASS},
SubClassOf {TOP},
MustContain { uid},
MustContain { rid},
MayContain { CN},
MayContain { lmPassword},
MayContain { ntPassword},
MayContain { pwdLastSet},
MayContain { logonTime},
MayContain { logoffTime},
MayContain { kickoffTime},
MayContain { pwdCanChange},
MayContain { pwdMustChange},
MayContain { acctFlags},
MayContain { displayName},
MayContain { smbHome},
MayContain { homeDrive},
MayContain { scriptPath},
MayContain
[Samba] slow connection to shares
I've got 50 win98 clients connecting to a samba 2.2.7a server. Everything works fine. Connecting a share is made within a second. Connections made from a winNT 4 also works fine. However, when trying to connect to a share from a XP client it takes up to 5 seconds before a connection is made. What could be a problem? Martin Boltje web: http://www.boltje.com web: http://www.yamnis.com email: [EMAIL PROTECTED] messenger: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Novell EDirectory as LDAP backend
Hi Rolf, I spent a long time last year trying to use Edirectory with Samba but I didn´t get it working. That file in the tar ball is a translation I did from samba.schema to the sintaxe of the ndssch program that is installed with Edir 8.6.2 for linux. The SyntaxID error is probably my mistake. I didn´t get your file attached and I think you should send it to Jerry to update it in the CVS tree. I stopped working with that and now I´m using OpenLDAP but I remember that the object Account was missing in the rfc2307-usergroup.sch that comes with the Edir for linux. I suppose the user that you are using in the ldapclient and samba have the right privilege to insert and alter information in you Edir. What is the messages in you log file? Bruno Gimenes Pereti. - Original Message - From: Rolf Offermanns [EMAIL PROTECTED] Subject: [Samba] Novell EDirectory as LDAP backend Hi, is anybody out there who is using Novell Edir. with samba? I have searched the archive and found some random notes but no real success story. Here is what I have achived so far. Maybe someone can give me some hints. I have tried the samba-nds.schema that comes with the 2.2.7a tar ball. While I was able to import/add it to EDir. it did not work for me, because the lmPassword and ntPassword attributes had a SyntaxID of SYN_INTEGER which I think is wrong, because samba tries to store some hex.Strings in these attributes. After changing them to SYN_CI_STRING I was able to authenticate against edir. The only thing that does not work is to ldapadd or ldif import users with objectClass sambaAccount. Adding posixAccount users and then adding the sambaAccount objectClass via Novells ConsoleOne works, so I guess this is a edir. specific problem which is OT here. So right now, I can manually add machine and user accounts, join (W2K) clients to the samba domain and log in as an user. Changing passwords works, too. I have attached the modified schema file. Can anyone give me a hint about adding users w/o using ConsoleOne? Setting this up with openldap was no problem at all, btw, but I have to use edirectory, because my university wants it that way. Any help is greatly appreceated, -Rolf -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] No domain server was available to validate your password.
You are right, I am using security = domain at the PDC, isn't it suppose to be? security = domain means, that your samba looks for an password server in this domain and uses this authentication. the password server is written in password server = so samba could not find the password server, and responses an error. if your samba server is the authentication server, so u have to use security=user please the refer the samba HOWTO's e.g. http://at.samba.org/samba/docs/ man smb.conf Samba-HOWTO-Collection.pdf in your samba distribution. Anyway, I have forwarded my smb.conf for your reference. Please comment accordingly. Thanks. please be not angry - i have to work too. - so i will answer as short as possile... please refer the doc's as discripted upwards. [global] passwd program = /usr/bin/smbpasswrd % *) as i know it sounds like smbpasswd not smbpasswrd ;-) *) as far as i know, u have to use the unix/linux program (as passwd) for this next, u do not use password sync (as u wrote below...) - unnessecary. dns proxy = yes u have it? logon path = \\%N\%U\.profile encrypt passwords = yes u use encrypt password: did u create the unix user and added them with smbpasswd -a [user] to your smb database? debug level = 3 security = user this is ok..., but u wrote, that u used domain? local master = yes this means: this server is the PDC... server string = Samba %v on Redhat 8 *attention* firewall - redhat 8's default is to block netbios... os level = 34 u can increase this to 65, if it's the primary controler. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Novell EDirectory as LDAP backend
Bruno Gimenes Pereti wrote: I spent a long time last year trying to use Edirectory with Samba but I didn´t get it working. That file in the tar ball is a translation I did from samba.schema to the sintaxe of the ndssch program that is installed with Edir 8.6.2 for linux. The SyntaxID error is probably my mistake. Hi Bruno, I know it was your file and I forgot to CC: you in my previous mail, sorry for that. I didn´t get your file attached and I think you should send it to Jerry to update it in the CVS tree. I will send him the file once I got everthing to work. I guess there still is a problem with the schema. I stopped working with that and now I´m using OpenLDAP but I remember that the object Account was missing in the rfc2307-usergroup.sch that comes with the Edir for linux. The rfc2307 stuff works without problems. I can add and modify posixAccounts with the ldapclient tools from openldap. The problems start when I add a sambaAccount objectClass attribute. I suppose the user that you are using in the ldapclient and samba have the right privilege to insert and alter information in you Edir. What is the messages in you log file? The priviledges shouldn't be a problem. I get a missing mandatory (609) error, but all required (as in the schema file) attributes are set. (that is: uid and rid) A simple test that should work is to export (ldif) a working sambaAccount user(set up using consoleone), delete the entry and import it again, without changing anything. This should work, shouldn't it? But I get an object class violation, without any further detail. I also tried various tracing levels (ndstrace) but got no information about what is causing the problem. -Rolf -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba 302 alpha cupsaddmdriver failed
Hi, I am working on samba 302 alpha with cups-1-1-18. Cupsaddm failed on setdriver command and upon two differents servers: Using rpcclient 227a version with smbserver 30alpha2 provides the same error. [root@ tmp]# rpcclient localhost -N -U'root%xx' -c 'setdriver lx98 lx98' -d3 lp_load: refreshing parameters Initialising global parameters params.c:pm_process() - Processing configuration file /usr/local/samba/lib/smb.conf Processing section [global] added interface ip=X.X.X.X bcast= nmask=255.255.248.0 resolve_wins: Attempting wins lookup for name localhost0x20 resolve_wins: using WINS server 127.0.0.1 and tag '*' Got a positive name query response from 127.0.0.1 ( 127.0.0.1 ) Connecting to host=localhost share=IPC$ Connecting to 127.0.0.1 at port 445 Doing spnego session setup (blob length=58) got OID=1 3 6 1 4 1 311 2 2 10 got principal=NONE lsa_io_sec_qos: length c does not match size 8 SetPrinter call failed! result was NT_STATUS_UNSUCCESSFUL On level 99 debug one error : rpc_check_hdr: rdata-data_size = 28 00 smb_io_rpc_hdr rpc_hdr major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 001c 000a auth_len : 000c call_id : 0009 10 smb_io_rpc_hdr_resp rpc_hdr_resp 0010 alloc_hint: 0004 0014 context_id: 0016 cancel_ct : 00 0017 reserved : 00 rpc_api_pipe: len left: 0 smbtrans read: 28 rpc_api_pipe: fragment first and last both set 18 spoolss_io_r_setprinter 0018 status: WERR_ACCESS_DENIED Printers OK: Got a positive name query response from 127.0.0.1 ( 127.0.0.1 ) Doing spnego session setup (blob length=58) flags:[0x80] name:[\\serv5\lx98] description:[\\serv5\lx98,,] comment:[] Drivers OK: [root@ tmp]# rpcclient localhost -N -U'root%XXX' -c 'enumdrivers' added interface ip= bcast= nmask=255.255.248.0 Got a positive name query response from 127.0.0.1 ( 127.0.0.1 ) Doing spnego session setup (blob length=58) [Windows 4.0] Printer Driver Info 1: Driver Name: [lx98] [Windows NT x86] Printer Driver Info 1: Driver Name: [lx98] Any ideas ? Thanks. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Roaming profiles issues
This might be simple, but I have been banging my head against google for awhile now and not an answer in sight... Anyway, Samba PDC with roaming profiles. When a user logs out the profile isn't written because it says that The specified network name is no longer available Whatever that is supposed to mean. Following is my smb.conf. Please CC me in replies as I am not subbed to the list. Thanks in advance. --Gabe [global] workgroup = CFN server string = Confederation File Server log file = /var/log/samba/log.%m max log size = 1000 log level = 1 syslog = 0 security = user encrypt passwords = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 wins support = yes strict allocate = yes time server = yes add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /dev/null -M %u local master = yes os level = 64 domain master = yes preferred master = yes domain logons = yes domain admin group = ntadmin,gabe admin users = ntadmin logon path = \\%L\%U\.profile logon drive = Q: logon script = scripts\%U.bat logon home = \\%L\%U utmp = yes hide unreadable = yes dns proxy = no preserve case = yes short preserve case = yes unix password sync = yes passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n . obey pam restrictions = yes #=== Share Definitions === [netlogon] comment = Network Logon Service path = /home/samba/netlogon writable = no write list = ntadmin browseable = yes [profiles] path = /home/%U/.profile read only = no create mask = 0600 directory mask = 0700 browseable = yes profile acls = yes [homes] comment = Home Directories browseable = no writable = yes create mask = 0600 directory mask = 0700 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Which Samba versions will work of AIX 5.1? Thank you
Ron Schwingel Technical Support NDS Solutions 303.755.4411(phone) 303.755.4545(fax) [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Roaming profiles issues
Maybe try logon path = \\%L\profiles\%U\ \\LocalSambaMachine\YourProfilesShare\username [profiles] path = /home/%U/ read only = no create mask = 0600 directory mask = 0700 browseable = yes profile acls = yes -Original Message- From: Gabriel Rocha [mailto:[EMAIL PROTECTED]] Sent: Monday, February 17, 2003 8:36 AM To: [EMAIL PROTECTED] Subject: [Samba] Roaming profiles issues This might be simple, but I have been banging my head against google for awhile now and not an answer in sight... Anyway, Samba PDC with roaming profiles. When a user logs out the profile isn't written because it says that The specified network name is no longer available Whatever that is supposed to mean. Following is my smb.conf. Please CC me in replies as I am not subbed to the list. Thanks in advance. --Gabe [global] workgroup = CFN server string = Confederation File Server log file = /var/log/samba/log.%m max log size = 1000 log level = 1 syslog = 0 security = user encrypt passwords = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 wins support = yes strict allocate = yes time server = yes add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /dev/null -M %u local master = yes os level = 64 domain master = yes preferred master = yes domain logons = yes domain admin group = ntadmin,gabe admin users = ntadmin logon path = \\%L\%U\.profile logon drive = Q: logon script = scripts\%U.bat logon home = \\%L\%U utmp = yes hide unreadable = yes dns proxy = no preserve case = yes short preserve case = yes unix password sync = yes passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n . obey pam restrictions = yes #=== Share Definitions === [netlogon] comment = Network Logon Service path = /home/samba/netlogon writable = no write list = ntadmin browseable = yes [profiles] path = /home/%U/.profile read only = no create mask = 0600 directory mask = 0700 browseable = yes profile acls = yes [homes] comment = Home Directories browseable = no writable = yes create mask = 0600 directory mask = 0700 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Novell EDirectory as LDAP backend
- Original Message - From: Rolf Offermanns [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Novell EDirectory as LDAP backend [...] A simple test that should work is to export (ldif) a working sambaAccount user(set up using consoleone), delete the entry and import it again, without changing anything. This should work, shouldn't it? But I get an object class violation, without any further detail. I also tried various tracing levels (ndstrace) but got no information about what is causing the problem. Yes, that should work. Please, check if you have the object Account in you Edir because when I added this object to mime I stopped receiving the object class violation error when using ldapadd. This object is metioned in a documentation from Novell (the name of the file is a020602.pf. I´ll send it to you in private). Probably this is not what is causing the error because this document talks about authenticating system users and you already got it working, but I don´t think it´s a wast of time trying that. I can´t install Edir here (at work) but I´ll install it at home and see what I can get with your help. Bruno Gimenes Pereti. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE : [Samba] samba 302 alpha cupsaddmdriver failed
Answering to myself. Using rpcclient 227a version with smbserver 30alpha2 provides the same error. I've made un mistake it works.( except on ldap parameter coming with 302 alpha ) Ignoring unknown parameter passdb backend Unknown parameter encountered: ldap machine suffix Ignoring unknown parameter ldap machine suffix Unknown parameter encountered: ldap user suffix Ignoring unknown parameter ldap user suffix cmd = setdriver lx98 lx98 Succesfully set lx98 to driver lx98. bug with 302alpha ? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] XP cannot get into smb-PDC domain
Trying to authenticate a machine named testmachine on a pdc-smb domain. If manually creating machine account as described in how-tos I get access denied. If automatically generating a new mach.account I get another wierd msg telling me something like I am using a workstation account and I have to use a normal user account or local account to access this server. If I say that this xp-box should use a workgroup I can use the server but cannot authenticate. Any ideas where to start searching? Robert -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] XP cannot get into smb-PDC domain
Hi Robert, there was something about a SignOrSeal registry entry on XP boxes in the HOWTO. Could that be the problem? -Rolf Robert Schott wrote: Trying to authenticate a machine named testmachine on a pdc-smb domain. If manually creating machine account as described in how-tos I get access denied. If automatically generating a new mach.account I get another wierd msg telling me something like I am using a workstation account and I have to use a normal user account or local account to access this server. If I say that this xp-box should use a workgroup I can use the server but cannot authenticate. Any ideas where to start searching? Robert -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Error messages about locking.tdb
Hi list, I am using Samba 2.2.3a-12 and it works fine, exept for error messages that fill up my log files. The messages are: smbd[1198]: [2003/02/12 22:53:53, 0] tdb/tdbutil.c:tdb_log(475) smbd[1198]: tdb(/var/run/samba/locking.tdb): expand_file ftruncate to 8192 failed (Permission denied) smbd[1198]: [2003/02/12 22:53:54, 0] tdb/tdbutil.c:tdb_log(475) smbd[1198]: tdb(/var/run/samba/locking.tdb): expand_file ftruncate to 8192 failed (Permission denied) The permission of /var/run/samba/locking.tdb is 600 root:root, the process trying to access it is an smbd running under a user account, so there seems to bee a configuration problem. I chnged the perms to 666 for a few seconds and now the log is quiet. Searching google did not show any solution. What's wrong here? System is Linux 2.4.18 SMP. Thanks for any help Heinrich -- Heinrich Rebehn University of Bremen Physics / Electrical and Electronics Engineering - Department of Telecommunications - E-mail: mailto:[EMAIL PROTECTED] Phone : +49/421/218-4664 Fax :-3341 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Groups with Samba domain controler or domain member
Does anybody know more about groups? I am considering switching from NT to Samba domain and have made some test. Unfortunately I need to make two additional groups, except Domain Admin (one of them is Domain Users). Is it possible to make that with the stable version of Samba? And another, but not so important (for now) question. Currently I have a Samba server, providing files and printers as a part of NT domain. It has winbind running, and I can list all NT rous and users in the samba box. However, manipulating group ownership on files works only with groups that don't have spaces in their names. Does anybody know how to overcome this? __ Do You Yahoo!? Everything you'll ever need on one web page from News and Sport to Email and Music Charts http://uk.my.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Locking between GNU/Linux and Microsoft Windows
Hi Jeremy,
On Wed, Feb 12, 2003 at 06:31:06PM +, [EMAIL PROTECTED] wrote:
How does Clipper on Linux do locking ?
access(/home/freddy/tmp/clipper.locking/freddy.dbf, F_OK) = 0
open(/home/freddy/tmp/clipper.locking/freddy.dbf, O_RDWR) = 3
fcntl64(0x3, 0x6, 0xbfffeab0, 0x3) = 0
ioctl(3, 0xc0286e04, 0xbfffea40)= -1 ENOTTY (Inappropriate ioctl for device)
fstat64(3, {st_mode=S_IFREG|0644, st_size=1639, ...}) = 0
mmap2(NULL, 1639, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x40018000
ioctl(3, 0xc0286e04, 0xbfffea00)= -1 ENOTTY (Inappropriate ioctl for device)
fcntl64(0x3, 0x6, 0xbfffeac0, 0x3) = 0
fstat64(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 9), ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40019000
It seems to me it's
Remember, doing EXCLUSIVE in Windows Clipper code may use share
modes to lock a file, not byte ranges. The Linux kernel has
no such concept as share modes, and so will probably use byte
ranges instead.
H, I can see. Well, the EXCLUSIVE lock is not that necessary.
It was just a test of mine.
I'll try the SHARED way of locking in Clipper. Dunno what
will happen, but I'll just try.
open(/home/freddy/tmp/clipper.locking/mnt/freddy/be01.dat, O_RDWR) = 3
fcntl64(0x3, 0x6, 0xbfffea90, 0x3) = 0
ioctl(3, 0xc0286e04, 0xbfffea20)= -1 EINVAL (Invalid argument)
fstat64(3, {st_mode=S_IFREG|0755, st_size=1922, ...}) = 0
mmap2(NULL, 1922, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x40018000
ioctl(3, 0xc0286e04, 0xbfffe9e0)= -1 EINVAL (Invalid argument)
fcntl64(0x3, 0x6, 0xbfffeaa0, 0x3) = 0
fstat64(3, {st_mode=S_IFREG|0755, st_size=1922, ...}) = 0
At http://www.dusktilldawn.nl/~freddy/misc/samba/ you can find
the complete output of the strace in sl.strace and
exclusiv.strace . As well as the files sl.prg and exclusiv.prg .
They are the Clipper sources.
Here is some more information out of the var/locks/locking.tdb:
/* Before anything */
$ sudo ~/src/samba/upstream/samba-2.2.7a/source/tdb/tdbdump locking.tdb
/* Starting sl on GNU/Linux */
$ sudo ~/src/samba/upstream/samba-2.2.7a/source/tdb/tdbdump locking.tdb
{
key = \07\03\00\00\00\00\00\00\14\00\00\00\00\00\00\00
data = \01\00\00\00\FC\98\16@\15\00\00\00\AC\A8\ED6\04\96J\AB\94l\E5\B6\B8\0B\0
0\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\BD\05\00\00\00\00\00\00B\00
\00\00\03\00\00\00\F1\0DQ\BF\00\06\00\07\03\00\00\00\00\00\00\14\00\00\00\00\00
\00\00\02\00\00\00/opt/db/administratie/freddy/be01.i01\00
}
{
key = \07\03\00\00\00\00\00\00\13\00\00\00\00\00\00\00
data = \01\00\00\00\14\9B\16@\15\00\00\00\AC\A8\ED6\04\96J\AB\94l\E5\B6\B8\0B\0
0\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\BD\05\00\00\00\00\00\00B\00
\00\00\03\00\00\00\F1\0DQ]\E7\05\00\07\03\00\00\00\00\00\00\13\00\00\00\00\00\0
0\00\01\00\00\00/opt/db/administratie/freddy/be01.dat\00
}
/* Starting sl.exe on Microsoft Windows 2000 */
$ sudo ~/src/samba/upstream/samba-2.2.7a/source/tdb/tdbdump locking.tdb
{
key = \07\03\00\00\00\00\00\00\14\00\00\00\00\00\00\00
data = \02\00\00\00\FC\98\16@\15\00\00\00\AC\A8\ED6\04\96J\AB\94l\E5\B6\B8\0B\0
0\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\E6\04\00\00\00\00\00\00B\80
\00\00\9F\01\02\00\18\0EQ\DDX\02\00\07\03\00\00\00\00\00\00\14\00\00\00\00\00\0
0\00\1D\00\00\00\BD\05\00\00\00\00\00\00B\00\00\00\03\00\00\00\F1\0DQ\BF\00\06\
00\07\03\00\00\00\00\00\00\14\00\00\00\00\00\00\00\02\00\00\00/opt/db/administra
tie/freddy/be01.i01\00
}
{
key = \07\03\00\00\00\00\00\00\13\00\00\00\00\00\00\00
data = \02\00\00\00\14\9B\16@\15\00\00\00\AC\A8\ED6\04\96J\AB\94l\E5\B6\B8\0B\0
0\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\E6\04\00\00\00\00\00\00B\80
\00\00\9F\01\02\00\18\0EQ\F01\02\00\07\03\00\00\00\00\00\00\13\00\00\00\00\00\0
0\00\1C\00\00\00\BD\05\00\00\00\00\00\00B\00\00\00\03\00\00\00\F1\0DQ]\E7\05\00
\07\03\00\00\00\00\00\00\13\00\00\00\00\00\00\00\01\00\00\00/opt/db/administrati
e/freddy/be01.dat\00
}
{
key = \07\03\00\00\00\00\00\00\12\00\00\00\00\00\00\00
data = \01\00\00\00t\99\16@n\00\00\00\01\00\00\00,\00\00\00\00\00\00\00p\BB\83\
04\0C\00\00\00\00\00\00\00\0C\00\00\00\5C\00\5C\00\E6\04\00\00\00\00\00\00 \80\0
0\00\89\01\02\00\18\0EQ\D3\BD\01\00\07\03\00\00\00\00\00\00\12\00\00\00\00\00\0
0\00\1B\00\00\00/opt/db/administratie/freddy/sl.exe\00
}
/* Stopping sl on GNU/Linux */
$ sudo ~/src/samba/upstream/samba-2.2.7a/source/tdb/tdbdump locking.tdb
{
key = \07\03\00\00\00\00\00\00\14\00\00\00\00\00\00\00
data = \01\00\00\00\FC\98\16@\15\00\00\00\AC\A8\ED6\04\96J\AB\94l\E5\B6\B8\0B\0
0\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\E6\04\00\00\00\00\00\00B\80
\00\00\9F\01\02\00\18\0EQ\DDX\02\00\07\03\00\00\00\00\00\00\14\00\00\00\00\00\0
0\00\1D\00\00\00/opt/db/administratie/freddy/be01.i01\00
}
{
key = \07\03\00\00\00\00\00\00\13\00\00\00\00\00\00\00
data = \01\00\00\00\14\9B\16@\15\00\00\00\AC\A8\ED6\04\96J\AB\94l\E5\B6\B8\0B\0
RE: OT: suggestion! (was Re: [Samba] !!ATTENTION NEWBIES!!)
-Original Message- From: Robert Adkins II [mailto:[EMAIL PROTECTED]] I have read a few more of your responses. It appears that you believe wholeheartedly that your more advanced questions are going unanswered simply because of the volume of lower skilled questions. I see it go both ways. The really interesting problems that uncover new bugs in the Samba code generally get a lot of attention. (Sometimes forwarding them to samba-technical can be productive, incidentally.) The easy problems generally get answered eventually, too, even if it's just with a pointer to the right section of the manual. It's the ones in between, the tricky problems that are difficult to work out, but probably not actual bugs, that sometimes tend to languish unanswered. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] !!ATTENTION NEWBIES!!
-Original Message- From: John H Terpstra [mailto:[EMAIL PROTECTED]] Well Chris, I to invite you to help answer more newbie questions. If you can spare that time, then please do try to help others who have not attained our level of proficiency in doing our home work before we go live. I'm reminded of something my father said to me, once: You never really fully understand something until you've had to explain it to someone else. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] pam_winbind.so - How do I create it?
Hello, I'm installing 2.2.7a, or attempting to at any rate. I've compiled it from source using the following instructions: http://us2.samba.org/samba/docs/Samba-HOWTO-Collection.html Anyways, I've got it set up so that it works. Now I'm trying to get to a point where I can interface it like I have with a different Linux box that is working without any problems. When I did the other box, I did a binary distribution, so the file had apparently already existed. In following the instructions in the above link, this command doesn't seem to do anything: root# make nsswitch/pam_winbind.so Here's a quick quote from the manual: You will need a PAM module to use winbindd with these other services. This module will be compiled in the ../source/nsswitch directory by invoking the command root# make nsswitch/pam_winbind.so from the ../source directory. The pam_winbind.so file should be copied to the location of your other pam security modules. On Linux and Solaris systems, this is the /lib/security directory. As far as I can tell, I'm doing something wrong, but maybe not. Can anyone offer some advise? Oh, btw, this is a RedHat 7.3 box that I'm trying to get all this configured on. Same with the other successful one that I have running. Thanks! Scott -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] pam_winbind.so - How do I create it?
-Original Message- From: Scott Wrosch [mailto:[EMAIL PROTECTED]] When I did the other box, I did a binary distribution, so the file had apparently already existed. In following the instructions in the above link, this command doesn't seem to do anything: root# make nsswitch/pam_winbind.so Scott, look in the nsswitch subdirectory of your samba source directory and see if pam_winbind.so is there. If it is, you just have to copy it to /lib/secure/ with the other pam libraries. You'll also need to copy libnss_winbind.so to your /lib directory and make a softlink to libnss_winbind.so.2. None of these steps are done for you by 'make install'. If this doesn't help, maybe I've misunderstood your problem. I think the reason 'make nsswitch/pam_winbind.so' isn't doing anything is because the file's already been built, though. The regular 'make' routine seems to do this automatically. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] !!ATTENTION NEWBIES!!
On Mon, 17 Feb 2003, David Brodbeck wrote: I'm reminded of something my father said to me, once: You never really fully understand something until you've had to explain it to someone else. My dad used to say that an expert is someone who can explain simple things to complex people in such a way that when the answer is read by the expert 1 year later the answer still makes sense. I still have much to learn from my dad! :) - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] pam_winbind.so - How do I create it?
pam_winbind.so doesn't seem to exist. I even did a 'find' to see if it did somewhere else, but not such luck. The libnss_winbind.so was there though. Just the pam_winbind.so isn't there. -Original Message- From: David Brodbeck [mailto:[EMAIL PROTECTED]] Sent: Monday, February 17, 2003 12:01 PM To: Scott Wrosch; Samba Subject: RE: [Samba] pam_winbind.so - How do I create it? -Original Message- From: Scott Wrosch [mailto:[EMAIL PROTECTED]] When I did the other box, I did a binary distribution, so the file had apparently already existed. In following the instructions in the above link, this command doesn't seem to do anything: root# make nsswitch/pam_winbind.so Scott, look in the nsswitch subdirectory of your samba source directory and see if pam_winbind.so is there. If it is, you just have to copy it to /lib/secure/ with the other pam libraries. You'll also need to copy libnss_winbind.so to your /lib directory and make a softlink to libnss_winbind.so.2. None of these steps are done for you by 'make install'. If this doesn't help, maybe I've misunderstood your problem. I think the reason 'make nsswitch/pam_winbind.so' isn't doing anything is because the file's already been built, though. The regular 'make' routine seems to do this automatically. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] pam_winbind.so - How do I create it?
-Original Message- From: Scott Wrosch [mailto:[EMAIL PROTECTED]] pam_winbind.so doesn't seem to exist. I even did a 'find' to see if it did somewhere else, but not such luck. The libnss_winbind.so was there though. Just the pam_winbind.so isn't there. Hmm. Odd. I wonder if you need to use the --with-pam flag when you run ./configure to get that file to compile? I don't remember if I had to. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Groups with Samba domain controler or domain member
--- [EMAIL PROTECTED] wrote: Does anybody know more about groups? I am considering switching from NT to Samba domain and have made some test. Unfortunately I need to make two additional groups, except Domain Admin (one of them is Domain Users). Is it possible to make that with the stable version of Samba? And another, but not so important (for now) question. Currently I have a Samba server, providing files and printers as a part of NT domain. It has winbind running, and I can list all NT rous and users in the samba box. However, manipulating group ownership on files works only with groups that don't have spaces in their names. Does anybody know how to overcome this? chgrp 'Domain Admins' some_file.txt Good luck, /dev/idal __ Do you Yahoo!? Yahoo! Shopping - Send Flowers for Valentine's Day http://shopping.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: pam_winbind.so - How do I create it?
--- Scott Wrosch [EMAIL PROTECTED] wrote: When I did the other box, I did a binary distribution, so the file had apparently already existed. In following the instructions in the above link, this command doesn't seem to do anything: root# make nsswitch/pam_winbind.so Here's a quick quote from the manual: You will need a PAM module to use winbindd with these other services. This module will be compiled in the ../source/nsswitch directory by invoking the command root# make nsswitch/pam_winbind.so from the ../source directory. The pam_winbind.so file should be copied to the location of your other pam security modules. On Linux and Solaris systems, this is the /lib/security directory. As far as I can tell, I'm doing something wrong, but maybe not. Can anyone offer some advise? Oh, btw, this is a RedHat 7.3 box that I'm trying to get all this configured on. Same with the other successful one that I have running. You'd follow these instructions if you were compiling from source. Samba 2.2.7a can be installed on RedHat 7.3 using RPMs from Samba's FTP site. Once installed, make sure you have the library: [supcd@hjx-app-01 supcd]$ ls -l /lib/security/pam_winbind.so -rwxr-xr-x1 root root17148 01-27 17:26 /lib/security/pam_winbind.so Good luck, /dev/idal __ Do you Yahoo!? Yahoo! Shopping - Send Flowers for Valentine's Day http://shopping.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] RE: pam_winbind.so - How do I create it?
That's what I'm trying to do though, is install from source. I know I wouldn't be having the problems if I was using the RPMs, but I figure I gotta learn somehow. So I decided to try source, and this is the only thing (so far) that I'm having troubles with. But, that's the file I'm looking for. You'd follow these instructions if you were compiling from source. Samba 2.2.7a can be installed on RedHat 7.3 using RPMs from Samba's FTP site. Once installed, make sure you have the library: [supcd@hjx-app-01 supcd]$ ls -l /lib/security/pam_winbind.so -rwxr-xr-x1 root root17148 01-27 17:26 /lib/security/pam_winbind.so -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: OT: suggestion! (was Re: [Samba] !!ATTENTION NEWBIES!!)
On Mon, 17 Feb 2003, David Brodbeck wrote: -Original Message- From: Robert Adkins II [mailto:[EMAIL PROTECTED]] I have read a few more of your responses. It appears that you believe wholeheartedly that your more advanced questions are going unanswered simply because of the volume of lower skilled questions. I see it go both ways. The really interesting problems that uncover new bugs in the Samba code generally get a lot of attention. (Sometimes forwarding them to samba-technical can be productive, incidentally.) Obviously, any real bugs need to be fixed asap. Many bugs are NOT interesting - just a right royal pain! The easy problems generally get answered eventually, too, even if it's just with a pointer to the right section of the manual. I can not speak for anyone else, but my approach is to look carefully at the posting (typically about 10 seconds). I answer if: - the user is new and shows they have tried to solve the problem - the user is experienced and made an obvious error - some else's help is wrong - the problem is not well documented either in samba code or through the mailing list archives - the problem pertains to something I can contribute something to I do NOT answer if the answer can be readily found. This demonstrates that the enquirer is lazy and wants to abuse my time and energy. It's the ones in between, the tricky problems that are difficult to work out, but probably not actual bugs, that sometimes tend to languish unanswered. You will note that sometimes I do NOT provide the answer, but I do ask a question that contains the answer. Example: Recently someone who had a clear name resolution problem was not using WINS. They did not want to use WINS: I do NOT have time to educate every subscriber who does NOT WANT to use WINS as to it's benefits in a NetBIOS over TCP/IP environment. Some of my help in this area has gone on for over 10 interchanges - and I am tired of that. So I simply sent back a reply that asked Why are you sure you do not want to use WINS? - from that point forward it's up to the recipient to do some more home work. From my analysis of my January respsonses the average time I spent per reply was around 13 minutes. Most replies take about 1-2 minutes, but a few too MUCH longer. Several took over 1 hour. I do carefully take note of problem areas and then try to capture useful hints and answers. These get fed back into documentation. Most of the new documentation is going into Samba-3.0.0. Hopefully the 3.0.0 release will set a new standard in helpful documentation. We need to be realistic though: the new documentation will largely close gaps in older samba functionality. It will take a while to prepare and include this same level of utility in documentation pertaining to new features. This is a slow but beneficial process and is a key reason why I often ask people who have solved a problem to document their solution and to contribute it. Unfortunately, most people we help do NOT contribute back in this manner (but human nature is like that). - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] RE: pam_winbind.so - How do I create it?
On Mon, 17 Feb 2003, Scott Wrosch wrote: That's what I'm trying to do though, is install from source. I know I wouldn't be having the problems if I was using the RPMs, but I figure I gotta learn somehow. So I decided to try source, and this is the only thing (so far) that I'm having troubles with. But, that's the file I'm looking for. Scott, Obviously someone has already solved how to build Samba for RH7.3 - there are RPMs for it. Would it perhaps be a good idea to look in ~samba/packaging/samba2.spec.tmpl to see HOW that problem of building and installing this file was solved in the RPM specification file? - John T. You'd follow these instructions if you were compiling from source. Samba 2.2.7a can be installed on RedHat 7.3 using RPMs from Samba's FTP site. Once installed, make sure you have the library: [supcd@hjx-app-01 supcd]$ ls -l /lib/security/pam_winbind.so -rwxr-xr-x1 root root17148 01-27 17:26 /lib/security/pam_winbind.so -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] RE: pam_winbind.so - How do I create it?
--- Scott Wrosch [EMAIL PROTECTED] wrote: That's what I'm trying to do though, is install from source. I know I wouldn't be having the problems if I was using the RPMs, but I figure I gotta learn somehow. So I decided to try source, and this is the only thing (so far) that I'm having troubles with. But, that's the file I'm looking for. Hm. Well if you need it, the RPMs are there, are current, and I can testify that they work (: Well, they work after you create the libnss_winbind.so.2 link: [supcd@hjx-app-01 supcd]$ ls -l /lib/libnss_winbind.so* -rwxr-xr-x1 root root16664 01-27 17:26 /lib/libnss_winbind.so lrwxrwxrwx1 root root 22 01-28 15:47 /lib/libnss_winbind.so.2 - /lib/libnss_winbind.so Back to your problem, someone else suggested you go into your samba-X.X.X/source directory, run make nsswitch/pam_winbind.so, and then manually copy nsswitch/pam_winbind.so to /lib/security, then set up a link to /lib/security/pam_winbind.so in /lib. I have no pam* files in /lib and it's working: [supcd@hjx-app-01 supcd]$ ls -l /lib/pam* ls: /lib/pam*: No such file or directory It can't hurt to make that link, but try first without it. You probably tried all of this already, but please carefully review your steps. Good luck, /dev/idal __ Do you Yahoo!? Yahoo! Shopping - Send Flowers for Valentine's Day http://shopping.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Groups with Samba domain controler or domain member
--- Jim Wharton [EMAIL PROTECTED] wrote: It appears to me that there are only two groups these days... Domain Admins and Domain Users. I did remember that countless groups could be added and mapped to Unix groups. Is this still possible without downgrading to samba-2.2? Sorry, I don't know. I see all of my NT groups with getent group in Samba 2.2.7a. Anyone else know? /dev/idal __ Do you Yahoo!? Yahoo! Shopping - Send Flowers for Valentine's Day http://shopping.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] win9x-cachehandling.reg
Why should I install win9x-cachehandling.reg. Thanks -- Dariusz Knap mailto:[EMAIL PROTECTED] Technical University of Szczecin, tel. +48(91) 4494234 ACI - Academic Center of Computer Science+48(91) 4494207 Al. Piastow 41, 71-065 Szczecin, Poland fax: +48(91) 4494652 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[samba] Help request setting w2000 to use Lexmark z25 printer onlinux RH7.3 running samba.
Hi, I am a newbie on samba. I use a vmware version which is slightly modified but I hope this group can still help. On the Linux machine I have set a Lexmark printer using Lexmark driver. This works fine but the way it works is that the filter does the actual connection to the printer (which uses USB port) whereas the lp directive is set to lp=/dev/null. (in case this piece of information is relevant). On smb.conf I set the printer definition to: [lexmarkz25-z35] comment = lexmarkz25-z35 browseable = yes printable = yes I can see the printers from the w2000 client when I contact the server using \\Linuxmachine\ When I try to use any of the printers I get the message: Before you can use the printer \\Linuxmachine\lexmark it must be setup on your computer. Do you want Windows to set up the printer and continue the operation? Click the Yes button gives me another dialog: The server on which 'NULL' printer reside does not have the correct printer driver installed. If you want to install the driver on the your computer click OK. Now I click OK. and wait for a long time until eventually I can set up a driver which I install using Lexmark original CD. Eventually this does not work. I also set a printer to check transport. This is called raw printer. In the printcap file I set it to write a file in /tmp lp=/tmp/rawprintfile. In smb.conf I set the print definition to: [raw] comment = lx3 browseable = yes printable = yes print command = lpr -b -Praw %s And on the w2000 machine I set the printer driver to generic/text. This case works. I suppose the problem is to install the correct driver on the w2000 machine. I do not know which. Also I read the article: http://de.samba.org/samba/ftp/docs/htmldocs/Samba-HOWTO-Collection.html#AEN833 which confused me even further. I will appreciate your help but please be patient with me. As I was saying I am new in the samba business. -- Thanks. David Harel, == Home office +972 4 6921986 Fax:+972 4 6921986 Cellular: +972 54 534502 Snail Mail: Amuka D.N Merom Hagalil 13802 Israel Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] win9x-cachehandling.reg
On Mon, 17 Feb 2003, Dariusz Knap wrote: Why should I install win9x-cachehandling.reg. How can we possibly answer your question? We do not know what software you are trying to run that might need this option. If the intent of your question is to ask: What does this registry change do? When should it be used? The answer to that question is that in 1999 one of my customers had a financial business application that could not work with the default setting for this registry key on MS Windows 98. This registry change worked around the problem until an application update was shipped to all software users. I do not know of any software that today requires this change. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: pam_winbind.so - How do I create it?
--- Scott Wrosch [EMAIL PROTECTED] wrote: Back to your problem, someone else suggested you go into your samba-X.X.X/source directory, run make nsswitch/pam_winbind.so, and then manually copy nsswitch/pam_winbind.so to /lib/security, then set up a link to /lib/security/pam_winbind.so in /lib. I have no pam* files in /lib and it's working: [supcd@hjx-app-01 supcd]$ ls -l /lib/pam* ls: /lib/pam*: No such file or directory It can't hurt to make that link, but try first without it. That's the problem. I can't even make it. I keep getting errors galore. And, from what I've been reading, the pam_winbind.so file gets copied to /lib/security .. So you might have it there. I may just try and copy it from the RPM version I have installed on my other Linux box, but I'm really confused as to why it isn't even working in the first place. I have a thought. Do you have the pam-devel package installed? rpm -q pam-devel If not, install it and try make nsswitch/pam_winbind.so again. If so, cut out the last dozen errors and post them to me and the list. Good luck, /dev/idal __ Do you Yahoo!? Yahoo! Shopping - Send Flowers for Valentine's Day http://shopping.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba:connection only works one time
Hi all, using samba 2.2.5; security=server connecting as user1 (user logged in on PC) works (12:28:55), disconnecting and connecting as another user2 (not the user logged in on PC) works too (12:30:22), but disconnecting and connecting again as user1 (user logged in on PC) fails (12:34:29) as well as user2 (12:38:19). It seems it works only once and never again after one time logged in as user2 ? The log file is like following [2003/02/17 12:28:55, 1] smbd/service.c:make_connection(651) khs (...144) connect to service home as user user1 (uid=2003, gid=100) (pid 27667) [2003/02/17 12:29:23, 1] smbd/service.c:close_cnum(692) khs (...144) closed connection to service home [2003/02/17 12:30:22, 1] smbd/password.c:server_validate(1173) password server AD1 rejected the password [2003/02/17 12:30:22, 0] passdb/pdb_nisplus.c:make_sam_from_nisresult(460) NIS+ lookup failure: Database for table does not exist [2003/02/17 12:30:22, 1] smbd/password.c:pass_check_smb(545) Couldn't find user 'user2' in passdb. [2003/02/17 12:30:22, 0] passdb/pdb_nisplus.c:make_sam_from_nisresult(460) NIS+ lookup failure: Database for table does not exist [2003/02/17 12:30:22, 1] smbd/password.c:pass_check_smb(545) Couldn't find user 'user2' in passdb. [2003/02/17 12:30:22, 1] smbd/reply.c:reply_sesssetup_and_X(998) Rejecting user 'user2': authentication failed [2003/02/17 12:31:36, 1] smbd/service.c:make_connection(651) khs (...144) connect to service home as user user2 (uid=2910, gid=100) (pid 27667) [2003/02/17 12:32:14, 1] smbd/service.c:close_cnum(692) khs (...144) closed connection to service home [2003/02/17 12:34:29, 0] lib/util_sock.c:write_socket_data(499) write_socket_data: write failure. Error = Broken pipe [2003/02/17 12:34:29, 0] lib/util_sock.c:write_socket(524) write_socket: Error writing 176 bytes to socket 22: ERRNO = Broken pipe [2003/02/17 12:34:29, 0] libsmb/clientgen.c:cli_send_smb(96) Error writing 176 bytes to client. -1 [2003/02/17 12:34:29, 1] smbd/password.c:server_validate(1173) password server AD1 rejected the password [2003/02/17 12:34:29, 0] passdb/pdb_nisplus.c:make_sam_from_nisresult(460) NIS+ lookup failure: Database for table does not exist [2003/02/17 12:34:29, 1] smbd/password.c:pass_check_smb(545) Couldn't find user 'user1' in passdb. [2003/02/17 12:34:29, 0] passdb/pdb_nisplus.c:make_sam_from_nisresult(460) NIS+ lookup failure: Database for table does not exist [2003/02/17 12:34:29, 1] smbd/password.c:pass_check_smb(545) Couldn't find user 'user1' in passdb. [2003/02/17 12:34:29, 1] smbd/reply.c:reply_sesssetup_and_X(998) Rejecting user 'user1': authentication failed [2003/02/17 12:35:19, 1] smbd/password.c:server_validate(1173) password server AD1 rejected the password [2003/02/17 12:35:19, 0] passdb/pdb_nisplus.c:make_sam_from_nisresult(460) NIS+ lookup failure: Database for table does not exist [2003/02/17 12:35:19, 1] smbd/password.c:pass_check_smb(545) Couldn't find user 'user1' in passdb. [2003/02/17 12:35:19, 0] passdb/pdb_nisplus.c:make_sam_from_nisresult(460) NIS+ lookup failure: Database for table does not exist [2003/02/17 12:35:19, 1] smbd/password.c:pass_check_smb(545) Couldn't find user 'user1' in passdb. [2003/02/17 12:35:19, 1] smbd/reply.c:reply_sesssetup_and_X(998) Rejecting user 'user1': authentication failed [2003/02/17 12:36:21, 1] smbd/password.c:server_validate(1173) password server AD1 rejected the password [2003/02/17 12:36:21, 0] passdb/pdb_nisplus.c:make_sam_from_nisresult(460) NIS+ lookup failure: Database for table does not exist [2003/02/17 12:36:21, 1] smbd/password.c:pass_check_smb(545) Couldn't find user 'user1' in passdb. [2003/02/17 12:36:21, 0] passdb/pdb_nisplus.c:make_sam_from_nisresult(460) NIS+ lookup failure: Database for table does not exist [2003/02/17 12:36:21, 1] smbd/password.c:pass_check_smb(545) Couldn't find user 'user1' in passdb. [2003/02/17 12:36:21, 1] smbd/reply.c:reply_sesssetup_and_X(998) Rejecting user 'user1': authentication failed [2003/02/17 12:36:54, 1] smbd/password.c:server_validate(1173) password server AD1 rejected the password [2003/02/17 12:36:54, 0] passdb/pdb_nisplus.c:make_sam_from_nisresult(460) NIS+ lookup failure: Database for table does not exist [2003/02/17 12:36:54, 1] smbd/password.c:pass_check_smb(545) Couldn't find user 'user1' in passdb. [2003/02/17 12:36:54, 0] passdb/pdb_nisplus.c:make_sam_from_nisresult(460) NIS+ lookup failure: Database for table does not exist [2003/02/17 12:36:54, 1] smbd/password.c:pass_check_smb(545) Couldn't find user 'user1' in passdb. [2003/02/17 12:36:54, 1] smbd/reply.c:reply_sesssetup_and_X(998) Rejecting user 'user1': authentication failed [2003/02/17 12:37:54, 0] lib/util_sock.c:write_socket_data(499) write_socket_data: write failure. Error = Bad file number [2003/02/17 12:38:19, 1] smbd/password.c:server_validate(1099) password server is not connected [2003/02/17 12:38:19, 0]
RE: [Samba] Re: Groups with Samba domain controler or domain member
Besides how to overcome the issue with permissions using group names with spaces, what other kind of information do you need to know about groups? Regards, Robert Adkins II IT Manager/Buyer Impel Industries, Inc. 586-254-5800 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Chris de Vidal Sent: Monday, February 17, 2003 12:14 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: [Samba] Re: Groups with Samba domain controler or domain member --- [EMAIL PROTECTED] wrote: Does anybody know more about groups? I am considering switching from NT to Samba domain and have made some test. Unfortunately I need to make two additional groups, except Domain Admin (one of them is Domain Users). Is it possible to make that with the stable version of Samba? And another, but not so important (for now) question. Currently I have a Samba server, providing files and printers as a part of NT domain. It has winbind running, and I can list all NT rous and users in the samba box. However, manipulating group ownership on files works only with groups that don't have spaces in their names. Does anybody know how to overcome this? chgrp 'Domain Admins' some_file.txt Good luck, /dev/idal __ Do you Yahoo!? Yahoo! Shopping - Send Flowers for Valentine's Day http://shopping.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba:connection only works one time
using samba 2.2.5; security=server connecting as user1 (user logged in on PC) works (12:28:55), disconnecting and connecting as another user2 (not the user logged in on PC) works too (12:30:22), but disconnecting and connecting again as user1 (user logged in on PC) fails (12:34:29) as well as user2 (12:38:19). It seems it works only once and never again after one time logged in as user2 ? My experience (and, based on feedback from the list, others' experience) is that security=server Just Doesn't Work in any reliable fashion. It's just a really, really nasty hack. Use security=domain if at all possible. Otherwise you'll have to figure out some other approach. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] RE: pam_winbind.so - How do I create it?
Hi Chris, It looks like that did the trick. Apparently the necessary package wasn't installed! Thanks for all your assistance! Who knows how long I would have been beating my head against the keyboard. Thanks! Scott Wrosch desk 248.333.7700 x227 email [EMAIL PROTECTED] -Original Message- From: Chris de Vidal [mailto:[EMAIL PROTECTED]] Sent: Monday, February 17, 2003 12:58 PM To: Scott Wrosch Cc: [EMAIL PROTECTED] Subject: Re: pam_winbind.so - How do I create it? --- Scott Wrosch [EMAIL PROTECTED] wrote: Back to your problem, someone else suggested you go into your samba-X.X.X/source directory, run make nsswitch/pam_winbind.so, and then manually copy nsswitch/pam_winbind.so to /lib/security, then set up a link to /lib/security/pam_winbind.so in /lib. I have no pam* files in /lib and it's working: [supcd@hjx-app-01 supcd]$ ls -l /lib/pam* ls: /lib/pam*: No such file or directory It can't hurt to make that link, but try first without it. That's the problem. I can't even make it. I keep getting errors galore. And, from what I've been reading, the pam_winbind.so file gets copied to /lib/security .. So you might have it there. I may just try and copy it from the RPM version I have installed on my other Linux box, but I'm really confused as to why it isn't even working in the first place. I have a thought. Do you have the pam-devel package installed? rpm -q pam-devel If not, install it and try make nsswitch/pam_winbind.so again. If so, cut out the last dozen errors and post them to me and the list. Good luck, /dev/idal __ Do you Yahoo!? Yahoo! Shopping - Send Flowers for Valentine's Day http://shopping.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Difficulties getting Windows 2000 and NT working with Samba on Redhat 8
Having set up the Windows clients and Samba (version 2.2.5-10) with a 'tmp' share the share cannot be accessed from the Windows clients. On the Windows clients, after attempting to map a network drive to the Samba share using Windows Explorer the message 'No service is operating at the destination network endpoint on the remote system' is diplayed. I believe I have checked all the settings and get the smb prompt successfully on the Samba server using the Windows user login using 'smbclient //server/tmp -U username' after inputting the required password. Can someone please suggest what may be wrong? Regards Roger Harden -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] valid users = too long?
We are controlling access to a share based on userid under the guidelines of HIPPA. So only our health care professionals in the dental hygeine labs can gain access to patient records. The problem is I've vonverted the long line to \CR entended lines and now I get : ERROR: string overflow by 358 in safe_strcpy [hammgab test2 billtest lb310453 lb293100 ab298138 ] ERROR: string overflow by 358 in safe_strcpy [hammgab test2 billtest lb310453 lb293100 ab298138 ] Should i go back to the long line version or can i have multiple valid users = entries? this is the line from smb.conf... valid users = hammgab test2 billtest lb310453 lb293100 ab298138 cb279555 \ nb227745 kb290706 sc252690 kc286429 bc310444 ad311182 dd287678 md186249 \ td234396 pe310426 dg310423 sg311292 lh114194 ai295270 jj311649 kj265897 \ vl311647 nm280995 jm313266 vn294102 jn292235 jp310412 lp245762 tp310402 \ jr310398 cs310397 as287424 fs102871 rs291043 ss293212 ds27 ss300173 \ es310881 mt102306 lw300638 lw310386 sw300508 richatau tr100655 bryankim \ karinkar cintrvir riccieli romanjud willicyn montrbar daviscat galleann \ bellemar defeomar mitchdaw henleros jonaskat shattkar dillocol walshchr \ scottjam mcgovmic baldwkar conwatam fernaamy miranthe ab293558 mb310427 \ cb355479 bc357413 tc356646 yc310339 dd285533 kd312440 ld268678 pe310426 \ sf367240 af357712 mg280837 hg316061 jg355922 jg361344 hh299963 ah310507 \ th313839 jj262590 ej356696 oj120575 jk312066 hk310753 ol081328 kl319475 \ rl354723 rl292811 km276169 km131085 km312924 jm317561 sm318542 mm234897 \ so293199 ks212727 ks212165 ys218521 kt277768 tt354440 nv314087 mw081593 \ sy357592 giganeva ab293558 mb310427 cb355479 tc356646 yc310339 dd285533 \ kd312440 bc357413 sf367240 af357712 mg280837 hg316061 jg355922 jg361344 \ hh299963 ah310507 th313839 jj262590 ej356696 oj120575 jk312066 hk310753 \ ol081328 kl319475 rl293811 km276169 jm131085 jm317561 sm318542 mm234897 \ so293199 ks312727 ks312165 ys286521 tt354440 nv314087 mw081593 sy357592 \ chicknad vartimar bd357413 Thanks! Bill -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Difficulties getting Windows 2000 and NT working withSamba on Redhat 8
On Mon, 17 Feb 2003, Roger Harden wrote: Having set up the Windows clients and Samba (version 2.2.5-10) with a 'tmp' share the share cannot be accessed from the Windows clients. On the Windows clients, after attempting to map a network drive to the Samba share using Windows Explorer the message 'No service is operating at the destination network endpoint on the remote system' is diplayed. I believe I have checked all the settings and get the smb prompt successfully on the Samba server using the Windows user login using 'smbclient //server/tmp -U username' after inputting the required password. Can someone please suggest what may be wrong? Did you disable the firewall? - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: permission issues
Good catch, Thanks. I agree with the sec ish and have moved away from this and now use a combo of uid/gid creat mode-dir mode flags in the .conf. Bri- __ Do you Yahoo!? Yahoo! Shopping - Send Flowers for Valentine's Day http://shopping.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Difficulties getting Windows 2000 and NT working withSamba on Redhat 8
On Mon, Feb 17, 2003 at 06:40:46PM -, Roger Harden wrote: Having set up the Windows clients and Samba (version 2.2.5-10) with a 'tmp' share the share cannot be accessed from the Windows clients. On the Windows clients, after attempting to map a network drive to the Samba share using Windows Explorer the message 'No service is operating at the destination network endpoint on the remote system' is diplayed. I believe I have checked all the settings and get the smb prompt successfully on the Samba server using the Windows user login using 'smbclient //server/tmp -U username' after inputting the required password. Have you verified that the server does not have firewall rules configured? Red Hat's default installation sets up some default rules if you say yes, I want a secure machine but doesn't exactly tell you what it's doing, so it's a fairly common problem. -- Michael Heironimus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Help setting up on AIX 4.3.3
Hello, I have tried to setup Samba version 2.2.5.0 on my RS6000 server. First I downloaded the new version from samba.org and it said that gcc -O failed. How do i go about setting up samba on my RS6000 running 4.3.3?? I have a book but it is very limited. I tried to setup a simple domain after setting it UP I got this message. # smbclient -U% -L localhost added interface ip=192.42.xxx.xxx bcast=192.42.xxx.xxx nmask=255.255.255.0 error connecting to 127.0.0.1:139 (Connection refused) Error connecting to 127.0.0.1 (Connection refused) Connection to localhost failed I did then this but not sure if it is working or not. # ps -aef | grep smbd root 8570 27712 3 13:21:07 pts/5 0:00 grep smbd # ps -aef | grep mbd root 8572 27712 4 13:21:14 pts/5 0:00 grep mbd root 34168 1 0 13:20:30 - 0:00 /usr/local/sbin/nmbd -D I would actually like to install the latest but it did not work the first time. I need to setup a share so I can access it from a win98 PC also from a NT server. (I am in the process of moving files and thought that this might be easier to setup then to do what I was trying to do.) -- Ron Bramblett Sys Admin Fuller Brush Company -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] segmentation fault
Hi all, I'm running Samba 2.2.3a on a SuSE Linux 7.0 machine as a domain controller without any problems until now. Everything works fine, except when I try to connect to my server via smbmount (installed with SuSE 8.0, with samba 2.2.3a). example: # smbmount //server/share /mnt/servershare -o username=nome,password=pass It takes a couple of seconds, and then the prompt comes up again, with no errors, but when I do a ls on it, it'll hang for a moment and the come with the error segmentation fault. If I use an invalid login, it'll give the usual bad password error. Does anyone had a similar problem? Thanks, Pedro -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] segmentation fault
On Mon, 17 Feb 2003, Pedro Marques wrote: Hi all, I'm running Samba 2.2.3a on a SuSE Linux 7.0 machine as a domain controller without any problems until now. Everything works fine, except when I try to connect to my server via smbmount (installed with SuSE 8.0, with samba 2.2.3a). example: # smbmount //server/share /mnt/servershare -o username=nome,password=pass It takes a couple of seconds, and then the prompt comes up again, with no errors, but when I do a ls on it, it'll hang for a moment and the come with the error segmentation fault. If I use an invalid login, it'll give the usual bad password error. Does anyone had a similar problem? Recommend that you update to at least samba-2.2.7a (there will be further fixes for smbfs support in 2.2.8). - John T -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: pam_winbind.so - How do I create it?
--- Scott Wrosch [EMAIL PROTECTED] wrote: It looks like that did the trick. Apparently the necessary package wasn't installed! Thanks for all your assistance! Who knows how long I would have been beating my head against the keyboard. Cool. Future reference: Include those errors (: Here's a good document to increase your likelihood of a quick answer: http://www.google.com/search?hl=enlr=ie=ISO-8859-1q=Eric+Raymond+%22Ask+Questions+The+Smart+Way%22btnG=Google+Search Good luck, /dev/idal __ Do you Yahoo!? Yahoo! Shopping - Send Flowers for Valentine's Day http://shopping.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] home directory mapping can cause strange Windows errors
I've just spent several hours trying to solve an unexpected error occurred while I was accessing my Local Area Connection properties on a Windows 2000 machine. I'm sending this message as penance for blaming Samba. The an unexpected error occurred message came up everytime I tried to view the properties of my Local Area Connection but there were other problems within Network and Dial-up Connections. For example, the Make New Connection wizard would only allow Dial-up to the Internet connections even though I am an Administrator. These problems would only manifest themselves if I logged into our Samba domain. My local account worked just fine. If I disconnected my network cable and logged in using my locally cached profile (we're using roaming profiles in the domain), the problem also went away. Another clue was only Windows 2000 machines were affected; Windows NT and Windows XP domain members worked just fine. The problem turned out to be a file in my [homes] share. At one time I had copied SETUPAPI.DLL to my H: drive ([homes] share) to fix a Windows NT problem. This SETUPAPI.DLL file was in the root directory of my [homes] share and somehow, this file caused all my problems. After I removed or changed the name of this file, everything worked the way it should. The SETUPAPI.DLL was from a Windows NT machine so I'm guessing it was used by the Windows 2000 machine and broke any functions that use SETUPAPI.DLL. I had no idea a .dll file in a Windows share could cause operating system errors (or maybe SETUPAPI.DLL is the only one, in which case lucky me). If you come across an unexplainable Windows error in the future, try changing the location of your [homes] share to a temporary empty directory or see if you have any dll's in that share. -- Michael Hulet Network System Administrator ITTC, University of Kansas -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] valid users = too long?
We are controlling access to a share based on userid under the guidelines of HIPPA. So only our health care professionals in the dental hygeine labs can gain access to patient records. The problem is I've vonverted the long line to \CR entended lines and now I get : ERROR: string overflow by 358 in safe_strcpy [hammgab test2 billtest lb310453 lb293100 ab298138 ] ERROR: string overflow by 358 in safe_strcpy [hammgab test2 billtest lb310453 lb293100 ab298138 ] Have you thought about using user mappings ? It may help. CU -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] AIX 4.3.3 smbd won't start
Hello, I have just downloaded Samba 2.2.7.a and I have tried to set it up on AIX 4.3.3 and am not having luck. Last week I installed samba on my linux machine and it works pretty well. The boss asked on Friday if I could set it up on my AIX machine. I have samba installed in /usr/local/samba. After running /usr/local/samba/smbd -D and /usr/local/samba/nmbd -D I can do this ps -aef | grep mbd and it only shows nmbd -D. On the linux box both items show up. after typing in a simple smb.conf file like this below [global] workgroup = SIMPLE1 code page directory = /var/ron_temp/usr/local/lib/codepages hosts allow = 192.42.nnn. 127.0.0.1 localhost # log file = /usr/local/samba/var/log.%m log file = /usr/local/samba/var/log log level = 3 max log size = 50 [rondir] comment = For Testing only path = /var/ron_temp read only = no guest ok = yes I then run smbclient -U% -L localhost and get the following error smbclient -U% -L localhost added interface ip=192.42.nnn.nnn bcast=192.42.nnn.255 nmask=255.255.255.0 error connecting to 127.0.0.1:139 (Connection refused) Error connecting to 127.0.0.1 (Connection refused) Connection to localhost failed output of Log [2003/02/17 16:00:57, 2] lib/interface.c:add_interface(81) added interface ip=192.42.nnn.nnn bcast=192.42.nnn.255 nmask=255.255.255.0 [2003/02/17 16:00:57, 3] lib/interface.c:add_interface(61) not adding duplicate interface 192.42.nnn.nnn [2003/02/17 16:00:57, 0] passdb/secrets.c:secrets_init(43) Failed to open /usr/local/samba/private/secrets.tdb [2003/02/17 16:00:57, 3] smbd/server.c:main(747) loaded services [2003/02/17 16:00:57, 3] smbd/server.c:main(762) Becoming a daemon. [2003/02/17 16:00:57, 0] passdb/machine_sid.c:pdb_generate_sam_sid(163) pdb_generate_sam_sid: Failed to store generated machine SID. [2003/02/17 16:00:57, 0] smbd/server.c:main(793) ERROR: Samba cannot create a SAM SID. any ideas -- Ron Bramblett Sys Admin Fuller Brush Company -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] remote swat enabling
I've done this before and can't remember how. Also I have searched the archives and can't find it. Maybe some of us can come up with a better way searching the archives. My current way takes a lot of time. Anyway I am trying to enable swat from a remote location and there is some file somewhere that says only allow it from local but I can't remember what file that is. Can anyone help? Tony McGrew www.multicam.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba]
Hi All, I'm trying to create a share that acts like the [homes] share. IE: it is only visible (and browseable) to a specific user when they are logged in. I have read that the [homes] share inherits the global browseable variable and therefore is only visible when the user is logged in - this is want I want - how do I do it? Thanks! Richard /~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/ ~\~/~\~/~\~/~\ /~\ /~\ Richard Torr /~\ /~\ Computer Resources Manager / Computer Support Person /~\ Human Nutrition Department /~\ University of Otago /~\ PO Box 56 /~\ Dunedin /~\ NEW ZEALAND /~\ /~\ (03) 479 5683 /~\ [EMAIL PROTECTED] /~\ /~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/~\~/ ~\~/~\~/~\~/~\ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba]
Hi, Try- logon drive = h; [homes] browseable = no writeable = yes valid user = %S create mode = 600 directory mode = 700 Bri- __ Do you Yahoo!? Yahoo! Shopping - Send Flowers for Valentine's Day http://shopping.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] problems with ldap tls
Hallo! I have a problem using samba with ldap and tls: starting ldap using slapd -d1 -h ldaps://0.0.0.0/ Why does not it work? using ldap ssl = no working thanx Here my smb.conf: ldap server = localhost #ldap port = 389 ldap port = 636 ldap suffix = o=zolnott,dc=de ldap admin dn = uid=ldaproot,o=zolnott,dc=de ldap filter = ((uid=%u)(objectclass=sambaAccount)) ldap ssl = start_tls Here my slapd.conf: TLSCipherSuite HIGH:MEDIUM:+SSLv2:RSA TLSCertificateFile /etc/openldap/www.zolnott.de-ldap-crt.pem TLSCertificateKeyFile /etc/openldap/www.zolnott.de-ldap-key-nopw.pem Here my log.smbd: [2003/02/18 01:40:12, 0] passdb/pdb_ldap.c:ldap_open_connection(182) Failed to issue the StartTLS instruction: Can't contact LDAP server [2003/02/18 01:40:12, 1] smbd/password.c:pass_check_smb(545) Couldn't find user 'drow' in passdb. [2003/02/18 01:40:12, 2] smbd/reply.c:reply_sesssetup_and_X(975) NT Password did not match for user 'drow'! [2003/02/18 01:40:12, 2] smbd/reply.c:reply_sesssetup_and_X(985) Defaulting to Lanman password for drow [2003/02/18 01:40:12, 0] passdb/pdb_ldap.c:ldap_open_connection(182) Failed to issue the StartTLS instruction: Can't contact LDAP server [2003/02/18 01:40:12, 1] smbd/password.c:pass_check_smb(545) Couldn't find user 'drow' in passdb. [2003/02/18 01:40:12, 1] smbd/reply.c:reply_sesssetup_and_X(1001) Rejecting user 'drow': authentication failed [2003/02/18 01:40:12, 2] smbd/server.c:exit_server(461) Closing connections Here my slapd-log: connection_get(9): got connid=4 connection_read(9): checking for input on id=4 TLS trace: SSL_accept:before/accept initialization TLS trace: SSL_accept:error in SSLv2/v3 read client hello A TLS: can't accept. TLS: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol s23_srvr.c:565 connection_read(9): TLS accept error error=-1 id=4, closing connection_closing: readying conn=4 sd=9 for close connection_close: conn=4 sd=9 connection_get(9): got connid=5 connection_read(9): checking for input on id=5 TLS trace: SSL_accept:before/accept initialization TLS trace: SSL_accept:error in SSLv2/v3 read client hello A TLS: can't accept. TLS: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol s23_srvr.c:565 connection_read(9): TLS accept error error=-1 id=5, closing connection_closing: readying conn=5 sd=9 for close connection_close: conn=5 sd=9 -- CU Michael .--. |o_o | --||_/ | /-\// \ \ | Michael Ott, Glockenhofstr. 29a, 90478 Nuernberg | (| | ) | e-mail: [EMAIL PROTECTED], Tel. +49 9 11 41 88 576 | /'\_ _/`\ \-/ \___)=(___/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] remote swat enabling
On Mon, 17 Feb 2003, Tony McGrew wrote: I've done this before and can't remember how. Also I have searched the archives and can't find it. Maybe some of us can come up with a better way searching the archives. My current way takes a lot of time. Anyway I am trying to enable swat from a remote location and there is some file somewhere that says only allow it from local but I can't remember what file that is. Can anyone help? Check /etc/hosts.deny and /etc/hosts.allow. If your system is using xinetd, then also check /etc/xinet.d/swat (or wherever it is located on your system. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Newbie question
I'm trying to create a binary package of the latest version of Samba for LRP (Linux Router Project) and was wondering where I can find information on what binaries and files have to be included. I'm only interested in using Samba as a server and only need the essentials. Any info/help would be greatly appreciated. Thanks. -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Infrasoft MX very slow loading from Samba share
We are experiencing long delays when loading MX files stored on our samba fileserver. We are running version 2.2.7a of Samba on Solaris 8 servers. Using MX version 2.5 and higher on windows 2000 and XP workstations When the files are stored locally they load in a few seconds, whilst taking more than a minute to run from the Samba server. Our current workaround is to store the files locally, but this is not ideal. Other application files(e.g. Word, etc) of similar size load from the server in seconds. Problem seems to be confined to MX files. Just wondering if anyone is aware of any conflicts between MX and Samba. Or if anyone is successfully storing MX files on their Samba server. thanks for any information -peter. Opinions contained in this e-mail do not necessarily reflect the opinions of the Queensland Department of Main Roads, Queensland Transport or National Transport Secretariat, or endorsed organisations utilising the same infrastructure. If you have received this electronic mail message in error, please immediately notify the sender and delete the message from your computer. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problems with the Perl scripts smbldap-tools
I can't get the Perl script that is commonly used in the 'add user script' line to work (smbldap-useradd.pl). It works fine from the command line but when I try to join a domain it will not add the new computer. If I add the computer manually I have no trouble joining the domain. I've tried both of the following lines: add user script = /usr/bin/smbldap-useradd.pl -w -d /dev/null -g Machines -c 'Machine Account' -s /bin/false %u add user script = /usr/bin/smbldap-useradd.pl -w -d /dev/null -g Machines -s /bin/false %u Note that /usr/bin/smbldap-useradd.pl is a link. This must be a common problem. Can anyone enlighten me in regards to who the usual suspects are? Jim C. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] ACL changing problem
hi all, i've a litte problem with my samba 2.2.7a running on SuSE 7.3 with a kernel 2.5.59: if i try to change any file acl from my win-client an error occurs the network name is not longer avaiable (orig: Der angegebene Netzwerkname ist nicht mehr verfügbar.) does someone know whats the problem and how to solve it? thanks NetRacer -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Signal 11 (SEGV - Segmentation Fault) after tdb_unpack
I recently newly built Samba 3.0 from CVS, and tried it. I have a problem with it. On connection to it - that is, when giving the password, the connection terminates In the log file for the machine, after a few things like: tdb_unpack(ddffd, 23) - 19 [2003/02/17 12:06:05, 18] ../source/tdb/tdbutil.c:tdb_unpack(558) tdb_unpack(d, 4) - 4 [2003/02/17 12:06:05, 18] ../source/tdb/tdbutil.c:tdb_unpack(558) tdb_unpack(ddffd, 30) - 26 [2003/02/17 12:06:05, 18] ../source/tdb/tdbutil.c:tdb_unpack(558) tdb_unpack(d, 4) - 4 I have: [2003/02/17 12:06:05, 0] ../source/lib/fault.c:fault_report(36) === [2003/02/17 12:06:05, 0] ../source/lib/fault.c:fault_report(37) INTERNAL ERROR: Signal 11 in pid 49179 (post3.0-HEAD) Please read the file BUGS.txt in the distribution [2003/02/17 12:06:05, 0] ../source/lib/fault.c:fault_report(39) === [2003/02/17 12:06:05, 0] ../source/lib/util.c:smb_panic(1415) PANIC: internal error A problem it is. That is when trying to connect to a share, both with Windows and smbclient, after giving the password. The source is slightly patched - with an auth module and a passdb module added, but it used to work previously with the same modifications, and it does not seem related. I don't know what exactly other information would help, I cannot really guess a direction, except the tdb routines, which seem to be fine. A BUGS.txt file does not seem to exist. Will somewhen go into deeper debugging of it, but I wondered if anyone has any idea... Thank you, any help appreciated, -- Tom -- A man on a boat... A cat on a train. He's clearing his throat... She's smearing a stain.
Patch: (Problem with nt acl support when saving Excel or WordFiles)
Hi all,
tried to dig into it, testing with various clients, browsing level 10 logs
and hacking posic_acls.c, which are all almost equally trivial (read: oh
dear it got my head spinning. :).
I think there are basically two problem:
1. Windows clients do not always send ACEs for SMB_ACL_USER_OBJ, SMB_ACL_GROUP_OBJ,
and SMB_ACL_OTHER.
The function ensure_canon_entry_valid() is prepared for that, but tries
to guess values from group or other permissions, respectively, otherwise
falling back to minimum r-- for the owner. Even if the owner had full
permissions before setting ACL. This is the problem with W2k clients.
2. Function set_nt_acl() always chowns *before* attempting to set POSIX ACLs.
This is ok in a take-ownership situation, but must fail if the file is
to be given away. This is the problem with XP clients, trying to transfer
ownership of the original file to the temp file.
The problem with NT4 clients (no ACEs are transferred to the temp file, thus
are lost after moving the temp file to the original name) is a client problem.
It simply doesn't attempt to.
I have played around with that using posic_acls.c from 3.0 merged into 2.2.
As a result I can now present two patches, one for each branch. They
basically modify:
1. Interpret missing SMB_ACL_USER_OBJ, SMB_ACL_GROUP_OBJ, or SMB_ACL_OTHER
as preserve current value instead of attempting to build one ourself.
The original code is still in, but only as fallback in case current values
can't be retrieved.
2. Rearrange set_nt_acl() such that chown is only done before setting
ACLs if there is either no change of owning user, or change of owning
user is towards the current user. Otherwise chown is done after setting
ACLs.
It now seems to produce reasonable results. (Well, as far as it can. If
NT4 doesn't even try to transfer ACEs, only deliberate use of named default
ACEs and/or force group or the crystal ball can help :)
I have tested this with HP-UX, but it shouldn't be platform dependent.
Maybe someone could try on a different platform?
Cheers!
Michael
Index: source/smbd/posix_acls.c
===
RCS file: /cvsroot/samba/source/smbd/posix_acls.c,v
retrieving revision 1.1.4.67
diff -u -r1.1.4.67 posix_acls.c
--- source/smbd/posix_acls.c8 Oct 2002 00:19:43 - 1.1.4.67
+++ source/smbd/posix_acls.c17 Feb 2003 09:47:51 -
@@ -1,8 +1,8 @@
/*
- Unix SMB/Netbios implementation.
- Version 1.9.
+ Unix SMB/CIFS implementation.
SMB NT Security Descriptor / Unix permission conversion.
- Copyright (C) Jeremy Allison 1994-2000
+ Copyright (C) Jeremy Allison 1994-2000.
+ Copyright (C) Andreas Gruenbacher 2002.
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
@@ -105,7 +105,7 @@
dbgtext( canon_ace index %d. Type = %s , num, pace-attr == ALLOW_ACE ?
allow : deny );
dbgtext( SID = %s , sid_to_string( str, pace-trustee));
if (pace-owner_type == UID_ACE) {
- char *u_name = uidtoname(pace-unix_ug.uid);
+ const char *u_name = uidtoname(pace-unix_ug.uid);
dbgtext( uid %u (%s) , (unsigned int)pace-unix_ug.uid, u_name);
} else if (pace-owner_type == GID_ACE) {
char *g_name = gidtoname(pace-unix_ug.gid);
@@ -331,6 +331,32 @@
}
/
+ Check if we need to return NT4.x compatible ACL entries.
+/
+
+static BOOL nt4_compatible_acls(void)
+{
+ /*
+* Should be
+*
+* const char *compat = lp_acl_compatibility();
+*
+* but we don't have this parameter in 2.2, yet. Always
+* adapt to client.
+*/
+ const char *compat = ;
+
+ if (*compat == '\0') {
+ enum remote_arch_types ra_type = get_remote_arch();
+
+ /* Automatically adapt to client */
+ return (ra_type = RA_WINNT);
+ } else
+ return (strequal(compat, winnt));
+}
+
+
+/
Map canon_ace perms to permission bits NT.
The attr element is not used here - we only process deny entries on set,
not get. Deny entries are implicit on get with ace-perms = 0.
@@ -346,7 +372,19 @@
if ((ace-perms ALL_ACE_PERMS) == ALL_ACE_PERMS) {
nt_mask = UNIX_ACCESS_RWX;
} else if ((ace-perms ALL_ACE_PERMS) == (mode_t)0) {
- nt_mask = UNIX_ACCESS_NONE;
+ /*
+* Windows NT refuses to display ACEs with no permissions in them (but
+* they are perfectly legal with Windows 2000). If the ACE has empty
+* permissions we cannot use 0, so we use
problem with oplocks.
Hi. I use samba with linux 7.2 kernel 4.7, samba 2.2.1a I have this in ma station's log: log.irek [2003/02/17 12:32:07, 0] lib/util_sock.c:read_socket_data(478) read_socket_data: recv failure for 4. Error = Connection reset by peer [2003/02/17 12:48:33, 0] lib/util_sock.c:read_socket_data(478) read_socket_data: recv failure for 4. Error = Connection reset by peer [2003/02/17 13:01:38, 0] smbd/oplock.c:oplock_break(769) oplock_break: receive_smb timed out after 30 seconds. oplock_break failed for file Irek.bat (dev = 900, inode = 915838). [2003/02/17 13:01:38, 0] smbd/oplock.c:oplock_break(843) oplock_break: client failure in oplock break in file Irek.bat What is goin on ? My dos application (writen in foxpro) opened tables, at start very slow, later goes fine, fast. The content of log.irek i show above. Is there any solution to avoid these errors ?? With redhat 6.2 and samba 2.0.2 (?) tehere were no errors. Regards, Irek --r-e-k-l-a-m-a- Tanie bilety lotnicze! http://samoloty.onet.pl
Re: problem with oplocks.
On Mon, 2003-02-17 at 14:42, Ireneusz Piasecki wrote: Hi. I use samba with linux 7.2 kernel 4.7, samba 2.2.1a Is there any solution to avoid these errors ?? With redhat 6.2 and samba 2.0.2 (?) tehere were no errors. Hi, I had the same problems. Upgrade your samba to 2.2.7a and it will work OK. It was fixed about 2.2.6 AFAIK. BTW, oplocks are unreliable by definition, so I don't use them. The small speed improvement (if any) is not worth loosing data integrity from my point of view. Regards, Olaf Fraczyk
crash when setting up default page properties in samba 3.0alpha20
Hello, we have a printserver, which was originally build with samba 2.2.5. For some reason, we switched to samba 3.0alpha20 later, which worked fine. The only problem is, that it crashes when changing the default page properties (NT4: printer - right mouse button - default page properties (translated from german)), like shown in the attached debug output. The printer driver is a HP LaserJet 2100 Series PS Driver. The UNC-Name of the printer is 40 chars long, and in rpc_server/srv_spoolss_nt.c, function convert_devicemode(), is the following code: rpcstr_pull(nt_devmode-devicename,devmode-devicename.buffer, 31, -1, 0); rpcstr_pull(nt_devmode-formname,devmode-formname.buffer, 31, -1, 0); Unfortunatly changing the 31 to some greater value, didn't help. Any hints? Greetings, Peter api_rpcTNP: api_spoolss_rpc op 0x7 - api_rpcTNP: rpc command: SPOOLSS_SETPRINTER [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_debug(81) 00 spoolss_io_q_setprinter [2003/02/06 14:08:59, 6] rpc_parse/parse_prs.c:prs_debug(81) 00 smb_io_pol_hnd printer handle [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) data1: [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0004 data2: 0001 [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint16(582) 0008 data3: [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint16(582) 000a data4: [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint8s(698) 000c data5: 65 5e 42 3e f8 42 00 00 [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0014 level: 0002 [2003/02/06 14:08:59, 6] rpc_parse/parse_prs.c:prs_debug(81) 18 spool_io_printer_info_level [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0018 level: 0002 [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 001c info_ptr: 029a7b00 [2003/02/06 14:08:59, 7] rpc_parse/parse_prs.c:prs_debug(81) 20 spool_io_printer_info_level_2 [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0020 servername_ptr: 0018d140 [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0024 printername_ptr: 0018d168 [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0028 sharename_ptr: 0018d1c8 [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 002c portname_ptr: 0018d210 [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0030 drivername_ptr: 0018d244 [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0034 comment_ptr: 0018d288 [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0038 location_ptr: 0018d2b8 [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 003c devmode_ptr: 0018d31c [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0040 sepfile_ptr: 0018d2c8 [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0044 printprocessor_ptr: 0018d2d8 [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0048 datatype_ptr: 0018d2f8 [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 004c parameters_ptr: 0018d30c [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0050 secdesc_ptr: [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0054 attributes: 0018 [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0058 priority: 0001 [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 005c default_priority: 0001 [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0060 starttime: [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0064 untiltime: [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0068 status: [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 006c cjobs: [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0070 averageppm: [2003/02/06 14:08:59, 8] rpc_parse/parse_prs.c:prs_debug(81) 74 smb_io_unistr2 servername [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0074 uni_max_len: 000d [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 0078 undoc : [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611) 007c uni_str_len: 000d [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:dbg_rw_punival(783) 0080 buffer : \.\.p.r.i.n.t.a.d.m.i.n... [2003/02/06 14:08:59, 8] rpc_parse/parse_prs.c:prs_debug(81) 9a smb_io_unistr2 printername [2003/02/06 14:08:59, 5] rpc_parse/parse_prs.c:prs_uint32(611)
Re: Build problem with libiconv
On Mon, Feb 17, 2003 at 07:04:55AM -0500, Ken Cross wrote:
Samba-folk:
When building SAMBA_3_0 on NetBSD (and I think any OS except Linux,
Solaris, or OSF) with iconv support, configure can't figure out that
iconv is really present. It's because in iconv.h, it defines:
#ifndef LIBICONV_PLUG
#define iconv_open libiconv_open
#endif
where LIBICONV_PLUG is defined on OS's with plug libraries (Linux,
Solaris, or OSF). What I've done locally to fix it is:
Index: configure.in
===
RCS file: /cvsroot/samba/source/configure.in,v
retrieving revision 1.300.2.43
diff -p -u -r1.300.2.43 configure.in
--- configure.in14 Feb 2003 00:47:27 - 1.300.2.43
+++ configure.in17 Feb 2003 11:56:37 -
@@ -1490,7 +1490,7 @@ AC_ARG_WITH(libiconv,
AC_MSG_RESULT(yes)
CFLAGS=$CFLAGS -I$withval/include
LDFLAGS=$LDFLAGS -L$withval/lib
-AC_CHECK_LIB(iconv, iconv_open)
+AC_CHECK_LIB(iconv, libiconv_open)
AC_DEFINE_UNQUOTED(WITH_LIBICONV, ${withval},[Path to iconv])
;;
esac ],
However, I think this'll break OS's with plug libraries (Linux, Solaris,
or OSF). What configure should really do is try one (iconv_open) then
the other (libiconv_open). (I'm not sure what's involved in that or I'd
have done it.)
The better approach is to use a code which allows to find all types of ICONV(3).
We use following in Midgard's core for years:
dnl From Bruno Haible.
AC_DEFUN(jm_ICONV,
[
dnl Some systems have iconv in libc, some have it in libiconv (OSF/1 and
dnl those with the standalone portable libiconv installed).
AC_MSG_CHECKING(for iconv in $1)
jm_cv_func_iconv=no
jm_cv_lib_iconv=no
jm_cv_giconv=no
AC_TRY_LINK([#include stdlib.h
#include giconv.h],
[iconv_t cd = iconv_open(,);
iconv(cd,NULL,NULL,NULL,NULL);
iconv_close(cd);],
jm_cv_func_iconv=yes
jm_cv_giconv=yes)
if test $jm_cv_func_iconv != yes; then
AC_TRY_LINK([#include stdlib.h
#include iconv.h],
[iconv_t cd = iconv_open(,);
iconv(cd,NULL,NULL,NULL,NULL);
iconv_close(cd);],
jm_cv_func_iconv=yes)
if test $jm_cv_lib_iconv != yes; then
jm_save_LIBS=$LIBS
LIBS=$LIBS -lgiconv
AC_TRY_LINK([#include stdlib.h
#include giconv.h],
[iconv_t cd = iconv_open(,);
iconv(cd,NULL,NULL,NULL,NULL);
iconv_close(cd);],
jm_cv_lib_iconv=yes
jm_cv_func_iconv=yes
jm_cv_giconv=yes)
LIBS=$jm_save_LIBS
if test $jm_cv_func_iconv != yes; then
jm_save_LIBS=$LIBS
LIBS=$LIBS -liconv
AC_TRY_LINK([#include stdlib.h
#include iconv.h],
[iconv_t cd = iconv_open(,);
iconv(cd,NULL,NULL,NULL,NULL);
iconv_close(cd);],
jm_cv_lib_iconv=yes
jm_cv_func_iconv=yes)
LIBS=$jm_save_LIBS
fi
fi
fi
if test $jm_cv_func_iconv = yes; then
if test $jm_cv_giconv = yes; then
AC_DEFINE(HAVE_GICONV, 1, [Define if you have the iconv() function.])
ICONV_INCLUDE=giconv.h
AC_MSG_RESULT(yes)
ICONV_FOUND=yes
else
AC_DEFINE(HAVE_ICONV, 1, [Define if you have the iconv() function.])
ICONV_INCLUDE=iconv.h
AC_MSG_RESULT(yes)
ICONV_FOUND=yes
fi
else
AC_MSG_RESULT(no)
fi
if test $jm_cv_lib_iconv = yes; then
if test $jm_cv_giconv = yes; then
LIBS=$LIBS -lgiconv
else
LIBS=$LIBS -liconv
fi
fi
])
--
/ Alexander Bokovoy
---
ignorance, n.:
When you don't know anything, and someone else finds out.
RE: WINS server incorrectly ignores 127.0.0.1 requests
Please disregard this stale e-mail. It has been subsumed by bug fix?: 2.2.7a, nmbd/nmbd_packets.c, listen_for_packets() Thanks, Peter Hurley [EMAIL PROTECTED]
[patch] libsmbclient: shared or static libs, never both?
Currently, SAMBA_3_0 uses the following code to decide whether to build
shared or static libs:
[ case $withval in
no)
AC_MSG_RESULT(no)
;;
*)
if test $BLDSHARED = true; then
INSTALLCLIENTCMD_SH=\$(INSTALLCMD)
LIBSMBCLIENT_SHARED=bin/libsmbclient.$SHLIBEXT
LIBSMBCLIENT=libsmbclient
AC_MSG_RESULT(yes)
else
INSTALLCLIENTCMD_A=\$(INSTALLCMD)
LIBSMBCLIENT=libsmbclient
AC_MSG_RESULT(no shared library support -- will supply static library)
fi
;;
esac ],
This makes it an either-or choice. Sometimes, it's useful to be able to
build (and install) static libraries even on platforms that support
shared libraries. The attached patch brings in a few macros from
libtool's aclocal.m4, to add --enable-shared and --enable-static options
to configure as a step in this direction.
--
Steve Langasek
postmodern programmer
diff -uNr samba-3.0alpha21.orig/source/aclocal.m4 samba-3.0alpha21/source/aclocal.m4
--- samba-3.0alpha21.orig/source/aclocal.m4 2003-02-16 19:34:05.0 -0600
+++ samba-3.0alpha21/source/aclocal.m4 2003-02-16 22:00:20.0 -0600
@@ -485,3 +485,67 @@
done
$1=[$]ac_new_flags
])
+
+dnl AC_ENABLE_SHARED - implement the --enable-shared flag
+dnl Usage: AC_ENABLE_SHARED[(DEFAULT)]
+dnl Where DEFAULT is either `yes' or `no'. If omitted, it defaults to
+dnl `yes'.
+AC_DEFUN([AC_ENABLE_SHARED],
+[define([AC_ENABLE_SHARED_DEFAULT], ifelse($1, no, no, yes))dnl
+AC_ARG_ENABLE(shared,
+changequote(, )dnl
+ --enable-shared[=PKGS]build shared libraries
+[default=AC_ENABLE_SHARED_DEFAULT],
+changequote([, ])dnl
+[p=${PACKAGE-default}
+case $enableval in
+yes) enable_shared=yes ;;
+no) enable_shared=no ;;
+*)
+ enable_shared=no
+ # Look at the argument we got. We use all the common list separators.
+ IFS=${IFS= }; ac_save_ifs=$IFS; IFS=${IFS}:,
+ for pkg in $enableval; do
+if test X$pkg = X$p; then
+ enable_shared=yes
+fi
+
+ done
+ IFS=$ac_save_ifs
+ ;;
+esac],
+enable_shared=AC_ENABLE_SHARED_DEFAULT)dnl
+])
+
+dnl AC_ENABLE_STATIC - implement the --enable-static flag
+dnl Usage: AC_ENABLE_STATIC[(DEFAULT)]
+dnl Where DEFAULT is either `yes' or `no'. If omitted, it defaults to
+dnl `yes'.
+AC_DEFUN([AC_ENABLE_STATIC],
+[define([AC_ENABLE_STATIC_DEFAULT], ifelse($1, no, no, yes))dnl
+AC_ARG_ENABLE(static,
+changequote(, )dnl
+ --enable-static[=PKGS]build static libraries
+[default=AC_ENABLE_STATIC_DEFAULT],
+changequote([, ])dnl
+[p=${PACKAGE-default}
+case $enableval in
+yes) enable_static=yes ;;
+no) enable_static=no ;;
+*)
+ enable_static=no
+ # Look at the argument we got. We use all the common list separators.
+ IFS=${IFS= }; ac_save_ifs=$IFS; IFS=${IFS}:,
+ for pkg in $enableval; do
+if test X$pkg = X$p; then
+ enable_static=yes
+fi
+ done
+ IFS=$ac_save_ifs
+ ;;
+esac],
+enable_static=AC_ENABLE_STATIC_DEFAULT)dnl
+])
+
+dnl AC_DISABLE_STATIC - set the default static flag to --disable-static
+AC_DEFUN([AC_DISABLE_STATIC],
+[AC_BEFORE([$0],[AC_LIBTOOL_SETUP])dnl
+AC_ENABLE_STATIC(no)])
diff -uNr samba-3.0alpha21.orig/source/configure.in
samba-3.0alpha21/source/configure.in
--- samba-3.0alpha21.orig/source/configure.in 2003-02-16 19:34:08.0 -0600
+++ samba-3.0alpha21/source/configure.in2003-02-16 22:05:07.0 -0600
@@ -6,6 +6,9 @@
AC_INIT(include/includes.h)
AC_CONFIG_HEADER(include/config.h)
+AC_DISABLE_STATIC
+AC_ENABLE_SHARED
+
#
# Directory handling stuff to support both the
# legacy SAMBA directories and FHS compliant
@@ -983,9 +986,8 @@
AC_LIBTESTFUNC(security, getprpwnam)
AC_LIBTESTFUNC(sec, getprpwnam)
-# this bit needs to be modified for each OS that is suported by
-# smbwrapper. You need to specify how to created a shared library and
-# how to compile C code to produce PIC object files
+# Assume non-shared by default and override below
+BLDSHARED=false
# these are the defaults, good for lots of systems
HOST_OS=$host_os
@@ -996,12 +998,16 @@
PICSUFFIX=po
POBAD_CC=#
SHLIBEXT=so
-# Assume non-shared by default and override below
-BLDSHARED=false
-AC_MSG_CHECKING([ability to build shared libraries])
-# and these are for particular systems
-case $host_os in
+if test $enable_shared = yes; then
+ # this bit needs to be modified for each OS that is suported by
+ # smbwrapper. You need to specify how to created a shared library and
+ # how to compile C code to produce PIC object files
+
+ AC_MSG_CHECKING([ability to build shared libraries])
+
+ # and these are for particular systems
+ case $host_os in
*linux*) AC_DEFINE(LINUX,1,[Whether the host os is linux])
BLDSHARED=true
LDSHFLAGS=-shared
@@ -1145,13 +1151,14 @@
*)
AC_DEFINE(STAT_ST_BLOCKSIZE,512)
;;
-esac
-AC_SUBST(DYNEXP)
-AC_MSG_RESULT($BLDSHARED)
Question about srv_spoolss_send_event_to_client()
In rpc_server/srv_spoolss_nt.c:srv_spoolss_send_event_to_client(): Could someone tell me why the following lines of code were added? if (Printer-printer_type == PRINTER_HANDLE_IS_PRINTSERVER) msg-flags |= PRINTER_MESSAGE_ATTRIBUTES; The problem is that sending expanded NOTIFY_INFO_DATA in the RRPCN request for a printserver causes W2k clients to ** NOT ** send RFNPCNEX requests. The upshot is that when a W2k client opens the Printers window on the print server and selects a printer, the printer status will not change during subsequent operations (say pausing and unpausing). Commenting out the lines of code above had the desired effect (i.e., fixed that problem), but I'm concerned since someone put it in to begin with. If the above is absolutely necessary, then the fix is much more complicated. Thanks, Peter Hurley [EMAIL PROTECTED]
Re: problem with oplocks.
On Mon, Feb 17, 2003 at 02:53:14PM +0100, Olaf Fr?czyk wrote: On Mon, 2003-02-17 at 14:42, Ireneusz Piasecki wrote: Hi. I use samba with linux 7.2 kernel 4.7, samba 2.2.1a Is there any solution to avoid these errors ?? With redhat 6.2 and samba 2.0.2 (?) tehere were no errors. Hi, I had the same problems. Upgrade your samba to 2.2.7a and it will work OK. It was fixed about 2.2.6 AFAIK. BTW, oplocks are unreliable by definition, so I don't use them. The small speed improvement (if any) is not worth loosing data integrity from my point of view. Um... Just curious, but how are oplocks are unreliable by definition? Chris -)- -- Samba Team -- http://www.samba.org/ -)- Christopher R. Hertel jCIFS Team -- http://jcifs.samba.org/ -)- ubiqx development, uninq. ubiqx Team -- http://www.ubiqx.org/ -)- [EMAIL PROTECTED] OnLineBook -- http://ubiqx.org/cifs/-)- [EMAIL PROTECTED]
Max file size limit in Samba
Hi I am using Samba on Linux. I noticed that I cannot create a file size of more than 2 GB. Is there a fix for this? Thanks a lot. Mary
Re: Max file size limit in Samba
On Mon, 17 Feb 2003, mary manohar wrote: Hi I am using Samba on Linux. I noticed that I cannot create a file size of more than 2 GB. Is there a fix for this? Update to Linux kernel 2.4.x and to a recent version of samba that has been compiled on kernel 2.4.x. - John T. -- John H Terpstra Email: [EMAIL PROTECTED]
Re: Annoying Minor Bug In Winbind 2.2.x
On 17 Feb 2003, Boyce, Nick [EMAIL PROTECTED] wrote: OK - I've been trying to apply the patch that Tim posted (to supersede Martin's first cut) to the Samba 2.2.7a source file for util_sock.c, but get errors applying the patch no matter what I do. Thanks for trying that. I guess the posted patch was against CVS, so could someone please repost the patch for the 2.2.7a-rel version of the file ? I'll do that. -- Martin If it's worth doing, it's worth doing for money.
Re: Annoying Minor Bug In Winbind 2.2.x
On 17 Feb 2003, Boyce, Nick [EMAIL PROTECTED] wrote: Here's what I get if I apply the posted patch : As I said I'll send you an update just for 2.2. But in general, in case you're interested, here are some tips on applying mismatched patches: MYBOX:/usr/local/src/samba-2.2.7a/source/lib# patch util_sock.c patch-util_sock.txt.orig patching file util_sock.c Hunk #1 succeeded at 1018 with fuzz 2 (offset 133 lines). Hunk #2 FAILED at 1037. Hunk #3 FAILED at 1094. 2 out of 3 hunks FAILED -- saving rejects to file util_sock.c.rej In general the best thing to do now is leave the main diff alone, and only work on the rejected parts in the .rej file. Basically you need to work out why patch thinks the 2.2 source file doesn't look like the before version of the rejected patch. After deleting the line containing #ifdef HAVE_UNIXSOCKET (because I noticed it doesn't appear in my 2.2.7a version of util_sock.c), I get a little further : MYBOX:/usr/local/src/samba-2.2.7a/source/lib# patch util_sock.c patch-util_sock.txt patching file util_sock.c Hunk #1 succeeded at 1018 with fuzz 2 (offset 133 lines). patch: malformed patch at line 102: @@ -966,25 +961,26 @@ Do you mean you deleted that line from the patch? That's probably what is causing the malformed patch error: the line numbers in the patch no longer add up. However, if you install the patchutils package, then you can run recountdiff to fix the lines up after you edit a diff, and it should then apply. patchutils is very very cool. -- Martin
Detecting true64
Does anyone know how to detect a truu64 system in configure.in ? I'm going through my patchlist and there is a big optimisation that can be done on systems where the getgrnam() call works (True64 is listed as the only broken system) and I'd like to add this to all branches by adding a BROKEN_GETGRNAM define for True64. Jeremy.
interesting fact about StrCaseCmp
StrCaseCmp (and strequal) in HEAD has the interesting side-effect that it only compares the first PSTRING_LEN (1024) bytes of the strings. I suppose comparing strings longer than that is probably a bit unlikely, but it still seems kind of dangerous. Would it be OK to change it to use dynamic allocation? -- Martin
Re: interesting fact about StrCaseCmp
On Tue, 2003-02-18 at 11:01, Martin Pool wrote: StrCaseCmp (and strequal) in HEAD has the interesting side-effect that it only compares the first PSTRING_LEN (1024) bytes of the strings. I suppose comparing strings longer than that is probably a bit unlikely, but it still seems kind of dangerous. Would it be OK to change it to use dynamic allocation? I think so. Possibly only for long strings? But then that is probably micro-optimization. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
Re: interesting fact about StrCaseCmp
On 18 Feb 2003, Andrew Bartlett [EMAIL PROTECTED] wrote:
Possibly only for long strings? But then that is probably
micro-optimization.
If we really cared about optimizing this function, then we would
compare character-by-character rather than converting both strings to
uppercase first. This is a bit hard for some wierd encodings I know,
but it ought to be possible to do it in charcnv.c.
The case where we compare, for example, a thousand-character string to
the empty string is ridiculously slow at the moment.
I don't know if this is a problem for Samba overall or not, so I'm not
touching it at the moment.
int StrCaseCmp(const char *s, const char *t)
{
pstring buf1, buf2;
unix_strupper(s, strlen(s)+1, buf1, sizeof(buf1));
unix_strupper(t, strlen(t)+1, buf2, sizeof(buf2));
return strcmp(buf1,buf2);
}
--
Martin
RE: bug fix?: 2.2.7a, nmbd/nmbd_packets.c, listen_for_packets()
On Mon, 2003-02-17 at 14:02, Peter Hurley wrote: When running a WINS server using the following configuration: [global] wins support = yes interfaces = 192.168.1.0/24 bind interfaces only = true the WINS server erroneously discards 127.0.0.1 requests from SMBD children. This happens whenever libsmb/resolve_wins() is called. I ran into this trying to understand why bringing up a Print dialog would take 6 secs, but I would guess that there are other places this would come up. I don't see how this is erroneous. If you specifically configure Samba not to listen on an interface, I might imagine that it might just happen to not listen on that interface. The documentation is quite clear on this matter - you really should include localhost in your interface list. I think there are several good reasons to include this fix: 1) I think the documentation is ambiguous on this subject. Then this is a very good argument for a doco patch. 2) interfaces= is an overloaded option. Setting the loopback address in interfaces= has both SMBD and NMBD listening to it. But in the default mode, SMBD will only listen to all broadcast addresses EXCEPT loopback, whereas NMBD will listen to every address. This is incorrect. SMBD listens on wildcard, while NMBD listens on each detected broadcast interface and on the wildcard. NMBD later discards packets if 'bind interfaces only' is set, as an attempted security measure. Given that we might be running a different nmbd on localhost, and that we don't always have a wins server running locally, I'm not sure that forcing localhost into the list is the best idea. 3) I've seen quite a few misconfigured interfaces=. I think this is probably a very common oversight that goes largely undetected. In my case, I was running this misconfiguration on one server for two years, and on another for 9 mos. It was only because I decided to seriously bulldog a seemlingly unrelated problem (long time to bring up Print dialog) that I uncovered the misconfiguration for myself. I think that some extra testparm logic would go a long way here. 4) I believe this to be the most serious. The only indication that something is wrong is that things run slow or sporadically slow. But slow-running stuff is hard to diagnose. It could be network hardware, server hardware, misconfigured network hardware, corrupted firewalls, complex multi-subnet installations, etc. The security-conscious (a lot of people) are going to and do use bind interfaces only = yes, without realizing all the ramifications. A lot of posts on the samba list are about complex problems that start: it's running slow. Remember the thread, How Samba let us down? Quite a furor: interestingly, Chris de Vidal states in his e-mail of 23 October 2002, 10:46:29, I did try WINS in testing; I would see WINS server appears to be down...Have you seen better documents on implementing Samba WINS... I think in this situation a small change could go a long way. It may do so, but we need to make sure it's also the 'correct' fix. We sill need a way to control the way nmbd binds to interfaces, and to allow multiple nmbd servers per physical machine. (People do multi-hosting like this). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
Re: Detecting true64
On Mon, 17 Feb 2003 [EMAIL PROTECTED] wrote: Does anyone know how to detect a truu64 system in configure.in ? I'm going through my patchlist and there is a big optimisation that can be done on systems where the getgrnam() call works (True64 is listed as the only broken system) and I'd like to add this to all branches by adding a BROKEN_GETGRNAM define for True64. You figure out whether or not the OS is confused about what it is: Tru64 (formerly known as Digital UNIX, formerly known as DEC OSF/1 ...) Regards - Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, sharpe[at]ethereal.com, http://www.richardsharpe.com
Re: Detecting true64
On 17 Feb 2003, [EMAIL PROTECTED] wrote: Does anyone know how to detect a truu64 system in configure.in ? I'm going through my patchlist and there is a big optimisation that can be done on systems where the getgrnam() call works (True64 is listed as the only broken system) and I'd like to add this to all branches by adding a BROKEN_GETGRNAM define for True64. Note that it really is Tru64. I guess misspelling makes it more dynamic. config.guess should detect a hostname of something like alphaev7-dec-osf4.0f See e.g. http://studio.imagemagick.org/pipermail/magick-bugs/2002-November/000881.html configure.in should call AC_CANONICAL_HOST, and then examine $host_os, probably with something like case $host_os in osf*) ;; The config.guess is actually quite old compared to the current GNU distribution, so I might update that in HEAD and 3_0. This might improve correctness or robustness in detecting some platforms. -- Martin We use Film Gimp on all talking animal jobs -- Caroline Dahllöf
Re: Detecting true64
On Tue, 2003-02-18 at 10:08, [EMAIL PROTECTED] wrote: Does anyone know how to detect a truu64 system in configure.in ? I'm going through my patchlist and there is a big optimisation that can be done on systems where the getgrnam() call works (True64 is listed as the only broken system) and I'd like to add this to all branches by adding a BROKEN_GETGRNAM define for True64. Yikes - I didn't really look at that code before - it's horrid! That must really cost on winbind-appliance systems. For the record, this call is not made any more since my @group expansion patch for 'boring' logins, but some 'force group' variants, 'security=share' setups and the SAMR 'add/delete user from group' we still need to call it. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
Doxygen janitor?
Is there any kind of consensus (he says, hopefully) that Doxygen is a good idea? If I'm looking at code is it OK to cleanup comments into standard form? -- Martin
Re: Doxygen janitor?
On Tue, 2003-02-18 at 10:50, Martin Pool wrote: Is there any kind of consensus (he says, hopefully) that Doxygen is a good idea? If I'm looking at code is it OK to cleanup comments into standard form? Go for it! Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
Re: Doxygen janitor?
On Tue, 18 Feb 2003, Martin Pool wrote: Is there any kind of consensus (he says, hopefully) that Doxygen is a good idea? If I'm looking at code is it OK to cleanup comments into standard form? Yes, please do ... Regards - Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, sharpe[at]ethereal.com, http://www.richardsharpe.com
Re: interesting fact about StrCaseCmp
On Tue, 18 Feb 2003 11:35:32 +1100
Martin Pool [EMAIL PROTECTED] wrote:
On 18 Feb 2003, Andrew Bartlett [EMAIL PROTECTED] wrote:
Possibly only for long strings? But then that is probably
micro-optimization.
If we really cared about optimizing this function, then we would
compare character-by-character rather than converting both strings to
uppercase first. This is a bit hard for some wierd encodings I know,
but it ought to be possible to do it in charcnv.c.
Actually you got me thinking and it's not all that hard. In fact I think
there are a lot of good optamizations you can make in this function. For
example you only have to convert to wide characters if *both* characters
are multibyte sequences. If only one has the high bit on they cannot
possibly match even caseless so *str1 != *str2 clause will return.
Here's some rough code. I didn't even try to compile this.
int
utf8casecmp(const char *str1, size_t sn1, const char *str2, size_t sn2)
{
size_t n1, n2;
wchar_t ucs1, ucs2;
mbstate_t ps1, ps2;
unsigned char uc1, uc2;
memset(ps1, 0, sizeof(ps1));
memset(ps2, 0, sizeof(ps2));
while (sn1 0 sn2 0) {
if ((*str1 0x80) (*str2 0x80)) { /* both multibyte */
if ((n1 = mbrtowc(ucs1, str1, sn, ps1)) 0 ||
(n2 = mbrtowc(ucs2, str2, sn, ps2)) 0) {
perror(mbrtowc);
return -1;
}
if (ucs1 != ucs2
(ucs1 = towupper(ucs1)) != (ucs2 = towupper(ucs2))) {
return ucs1 ucs2 ? -1 : 1;
}
sn1 -= n1; str1 += n1;
sn2 -= n2; str2 += n2;
} else { /* neither or one multibyte */
uc1 = toupper(*str1);
uc2 = toupper(*str2);
if (uc1 != uc2) {
return uc1 uc2 ? -1 : 1;
} else if (uc1 == '\0') {
return 0;
}
sn1--; str1++;
sn2--; str2++;
}
}
return 0;
}
Note this assumes you're running in a UTF-8 locale. I don't know how
you handle locales. Otherwise you'll need to switch out the mbrtowc
functions. But I think the algorithm is sound.
Mike
--
A program should be written to model the concepts of the task it
performs rather than the physical world or a process because this
maximizes the potential for it to be applied to tasks that are
conceptually similar and, more important, to tasks that have not
yet been conceived.
Re: interesting fact about StrCaseCmp
On Tue, Feb 18, 2003 at 11:01:53AM +1100, Martin Pool wrote: StrCaseCmp (and strequal) in HEAD has the interesting side-effect that it only compares the first PSTRING_LEN (1024) bytes of the strings. I suppose comparing strings longer than that is probably a bit unlikely, but it still seems kind of dangerous. Would it be OK to change it to use dynamic allocation? What exactly do you want to do here ? I'm not clear what you mean ? Jeremy.
