RE: [Samba] Slow Printing from XP clients with SP2?

2004-09-02 Thread Lewis Shobbrook
Hi Rohan

 
 Hello,
 
 I was wondering if anyone else has experienced this.

Yes I've noticed this.  
I thought shit... The print service has failed.
2-3 Minutes later out comes the print job
This is with the firewall turned off, so something less obvious at
hand here.
 
 From an XP machine printing to a SAMBA printer, printing is 
 painfully 
 slow.
 
 Selecting the printer, and even sending the job through 
 windows makes the app appear non-responsive. The print job is 
 completed fine, but just takes a long time to print.
 
 XP boxes with SP1 print like a dream. I've managed to 
 replicate this on 4 boxes all with SP2.
 
 I'm running SAMBA 3.0.4.
 
 Cheers,
 
 Rohan
 
 Rohan Gilchrist 
 [EMAIL PROTECTED]
 http://www.e-mailme.org/~rohan/
 0412 648 909

Cheers,

Lewis Shobbrook
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


R: [Samba] Trusted domain Authentication

2004-09-02 Thread fakemail
 
I know the version is kind of outdated but we'd like not upgrade in this
moment as we're deploying other projects.
However if samba 3.0 doesn't suffer this problem we'll be forced to upgrade.

Don't you know of any solutions for 2.2.x?
Thanks

Stefano

-Messaggio originale-
Da: Andrew Bartlett [mailto:[EMAIL PROTECTED] 
Inviato: giovedì 2 settembre 2004 2.52
A: fakemail
Cc: [EMAIL PROTECTED]
Oggetto: Re: [Samba] Trusted domain Authentication

On Wed, 2004-09-01 at 19:27, fakemail wrote:
 I've a problem with trusting domain authentication , I've searched the 
 newsgroup but found no answer .
 The configuration is very simple .
 A windows 2000 domain (DOMA) , which contains the samba server , and a 
 Windows 2003 domain (DOMB). The two are trusted by a bidirectional trust .
 
 The problem is that users from the 2003 domain can't get authenticated 
 by the samba server and are prompted for user and password.
 The log
 
 
 [2004/09/01 10:48:57, 0] rpc_client/cli_netlogon.c:(406)
   cli_net_sam_logon_internal: NT code 0x0001
 [2004/09/01 10:48:57, 0] smbd/password.c:(1618)
   domain_client_validate: unable to validate password for user SA1726 
 in domain DOMB  to Domain controller srvdom4. Error was NT code
0x0001.
 [2004/09/01 10:48:57, 1] smbd/reply.c:(1001)
   Rejecting user 'SIGE': authentication failed

This looks like a Samba 2.2 log.  This product is reaching end-of-life very
shortly - you should upgrade to Samba 3.0, as you will probably find it's
fixed anyway :-)

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Authentication Developer, Samba Teamhttp://samba.org
Student Network Administrator, Hawker College   [EMAIL PROTECTED]


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Giving Up On ADS

2004-09-02 Thread Hamish
This is quite simple, you will just have to add your windows users to 
the samba box for authentication (same as you would for a 2k/xp box) and 
set security = user

A. Clausen wrote:
Well, I've declared defeat, at least for the moment.  I can't get 
kerberos to talk nicely with the Win2k DC.  Not being an expert on NT4 
networks, can I just simply have the Samba box on the Win2k network 
just as a standard Lanman-style box, without Active Directory?

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba / LDAP no account in domain

2004-09-02 Thread Neil Marjoram
Can anyone please help me?

I have swapped from using passwd.tdb to using LDAP, but I just can't get
it to work. User authentication works if I try to access a share from a
locally logged in system, but if I try to login at domain level I get
Domain controller not found and the samba log produces this :

[2004/09/02 09:16:29, 0] rpc_server/srv_netlog_nt.c:get_md4pw(218)
  get_md4pw: Workstation SHAUN$: no account in domain

Unix user login all works fine.

My users and computers are in the same tree (People). The smbtools.conf
has People set for users, and the /etc/ldap.conf also has People set. I
did question the scope setting so I have set both the smbldap.conf and
/etc/ldap.conf files to one.

This is getting rather desperate, it looks like if we can't get this to
go it Windows 2003 server for this site.

Can anyone see what stupid mistake I have made ? (Apart from considering
W 2003!)

Samba versions tried : 3.0.2 / 3.0.4 / 3.0.6
OS tried : Redhat 9 / Fedora Core 2
Openldap : 2.1.29-1
smbldaptools : 0.8.5

smb.conf :

passdb backend = ldapsam:ldap://ldap2.adastral.ucl.ac.uk
idmap backend = ldap:ldap://ldap2.adastral.ucl.ac.uk
passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
ldap delete dn = Yes
add user script = /usr/local/sbin/smbldap-useradd -m %u
add machine script = /usr/local/sbin/smbldap-useradd -w %u
add group script = /usr/local/sbin/smbldap-groupadd -p %g
add user to group script = /usr/local/sbin/smbldap-groupmod -m  %u
%g
delete user from group script = /usr/local/sbin/smbldap-groupmod -x %u
%g
set primary group script = /usr/local/sbin/smbldap-usermod -g %g %u
delete user script = /usr/local/sbin/smbldap-userdel %u
delete group script = /usr/local/sbin/smbldap-groupdel %g
ldap admin dn = cn=samba,ou=DSA,dc=adastral,dc=ucl,dc=ac,dc=uk
ldap suffix = dc=adastral,dc=ucl,dc=ac,dc=uk
ldap group suffix = ou=Group
ldap user suffix = ou=People
ldap machine suffix = ou=People
ldap idmap suffix = ou=Idmap
ldap ssl = start tls
ldap passwd sync = yes

/etc/ldap.conf

uri ldaps://ldap2.adastral.ucl.ac.uk:636
base dc=adastral,dc=ucl,dc=ac,dc=uk
rootbinddn cn=nssldap,ou=DSA,dc=adastral,dc=ucl,dc=ac,dc=uk
scope one
pam_filter objectclass=posixaccount
pam_login_attribute uid
pam_member_attribute gid
pam_template_login_attribute uid
pam_password md5
nss_base_passwd ou=People,dc=adastral,dc=ucl,dc=ac,dc=uk?one
nss_base_shadow ou=People,dc=adastral,dc=ucl,dc=ac,dc=uk?one
nss_base_group  ou=Group,dc=adastral,dc=ucl,dc=ac,dc=uk?one
nss_base_hosts  ou=Hosts,dc=adastral,dc=ucl,dc=ac,dc=uk?one
ssl start_tls


Thanks,

Neil.


-- 
Neil Marjoram.
Systems Manager
University College London
Adastral Park Campus
Martlesham Heath
Ipswich
Suffolk
IP5 3RL

01473 663711

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samdump

2004-09-02 Thread Heinz Allerberger
High friends,
is there nobody who could help me?
I ask yesterday, but I will try it now again:
I've  a samba-3.0.5 installation, and I try to join a Windows 2000 PDC  
in a real ADS environment.

I joined successfully the PDC with:
# net rpc join -U Administrator
Password:
Joined domain NEURO
After that I tried to list the sam:
# net rpc samdump
[2004/09/01 16:58:28 , 0] 
utils/net_rpc_samsync.c:rpc_samdump_internals(222)
Error connecting to NETLOGON pipe

Whith the samdump-command I got the error-message above.
Is it, because it is a real ADS environment (Only Win2000-Servers are 
present in this network), or is there anything that I did wrong?

Is there anybody who could help me?
Friendly greetings from Germany.
Heinz
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] usermgr.exe

2004-09-02 Thread rruegner
Hi Harald would you be so kind to let me see
smbuseradd.sh
smbgroupadd.sh
smbuserdel.sh
giving qoutas is a nice feature
Best Regards Robert
Harald Kümmerle schrieb:
On Wednesday 01 September 2004 23:37, rruegner wrote:
Hi, it is the old nt admin tool
to create users and groups from a windows client
to admin a windows domain server.
Very usefull.
Regards

But to take full advantage of it, you have to set the parameters add 
user script, delete user script, add user to group script and so 
on. These are my settings:

smb.conf:
[global]
...
   add user script = /etc/samba/smbuseradd.sh %u
   add machine script = /usr/sbin/useradd -g machines -c Machine 
-d /dev/null -s /bin/false %u
   delete user script = /etc/samba/smbuserdel.sh %u
   #delete user script = /usr/sbin/userdel %u
   add group script = /etc/samba/smbgroupadd.sh %g
   delete group script = /usr/sbin/groupdel %g
   add user to group script = /usr/bin/gpasswd -a %u %g
   delete user from group script = /usr/bin/gpasswd -d %u %g
   set primary group script = /usr/sbin/usermod -g %g %u
...

My custom scripts create quota entries and the user directories beside 
the creation/deletion of the normal Unix user account.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] a question

2004-09-02 Thread hadi.mohebbi
How is communication between a samba and the winserver2000 
You can see we have a network  with two server  one is win2000 server und another is 
linuxserver (samba) 
the win200server is a printserver and we have printmanager of it but i want to send a 
logfile from printserver to linuxserver . 
what should i do?
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Roaming/local profiles behavior in XP

2004-09-02 Thread Michael Lueck
You need to set the logon path = in smb.conf, and/or update the registry / roll out a policy to say roaming profiles is disabled. Then you can also update the shell folders. Mind you, the shell 
folder update will not take affect until the NEXT logon to the desktop.

--
Michael Lueck
Lueck Data Systems
Remove the upper case letters NOSPAM to contact me directly.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Remote command Exection?

2004-09-02 Thread michael melhem
Hi People,

 

Given the appropriate windows credentials, I need to be able to run an
arbitrary remote command on a windows machine from a Linux machine, Does
anyone have any idea how to do this??

 

I know the above is possible between windows machines, but not sure how to
it from linux to windows.

 

Many thanks,

Michael 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Need help with LDAP naming in SAMBA

2004-09-02 Thread Shiraaz Singh
Hi All 

I am a newbie to Linux and Samba but getting thru it slowly and
successfully.I am trying to get the Linux server accesible from windows 
and I need to know what the EXACT naming convention is for the LDAP
settings in Samba. 

Here is the scenario 

I have a MS Active Directory in place with a W2003 server acting as a
PDC emulator.The server is called Frodo and the domain is lab.co.za. 

I have Suse server 9.1 and want to make this available to the windows
clients and also want to use the Active Directory for authentication.In
samba I (via the Yast tool) I choose LDAP for authentication and need to
supply the path to the LDAP server (which would be Frodo) but I don't
know what the exact distinguished name should be.I was told to use 

cn=frodo,dc=lab,dc=co;dc=za 

but if I do an LDAP test I get an error there seems to be no funtional
ldap servers at this location 

can anyone help ?
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Upgrading from Samba 2.2 to 3 causes WinXP machines to drop off the domain.

2004-09-02 Thread Paul Gienger
Adam Luchjenbroers wrote:
There is a single Linux server which acts as a PDC to a mixed network of
Win98\WinXP machines. We've recently upgraded from Samba 2.2 (don't have
exact version number available, the machines run RH7.2 if that helps).
After upgrading to Samba 3.0.6, the WinXP machines need to be re-added to
the domain. We maintain multiple sites with this configuration and are
hesitant to roll out this update to other sites until we've fixed this
issue.
 

Does your current (2.2) setup have a consistant domain SID across all 
your sites?  If you have a way to find it, such as mucking around in the 
registry or something perhaps, you can set the domain SID in 3 and then 
you'd have a chance, assuming that you migrated your passwd entries over 
to whatever passdb you're going to run in 3.

What else is involved here?  I'm sure I'm missing something...
--
Paul Gienger Office: 701-281-1884
Applied Engineering Inc. 
Information Systems Consultant   Fax:701-281-1322
URL: www.ae-solutions.commailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Slow Printing from XP clients with SP2?

2004-09-02 Thread Paul Gienger

XP boxes with SP1 print like a dream. I've managed to replicate this 
on 4 boxes all
with SP2.

I'm running SAMBA 3.0.4.
Could this be related to https://bugzilla.samba.org/show_bug.cgi?id=1520 
??  Try to update to 3.0.6 when you get a chance and see if things change.

--
Paul Gienger Office: 701-281-1884
Applied Engineering Inc. 
Information Systems Consultant   Fax:701-281-1322
URL: www.ae-solutions.commailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] LDAP WBEL

2004-09-02 Thread Ganeshram Iyer
That is a good reference. But any out there on the web that are freely 
available?

Thanks
Ganesh
Jeff Saxton wrote:
Get the LDAP Administration book by O'Reilly
Jeff Saxton
Sr. Support Engineer
Addamark Technologies, Inc.
http://www.addamark.com
mailto:[EMAIL PROTECTED]
CELL: +1 415-640-6392
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Ganeshram Iyer
Sent: Wednesday, September 01, 2004 11:06 AM
To: [EMAIL PROTECTED]
Subject: [Samba] LDAP WBEL
Hello all:
I was wondering if anyone had a good reference to setting up LDAP 
authentication on WBEL for Linux user accounts, SAMBA and Apache? I 
would even appreciate even just Linux user account example references if

available.
Thanks in advance
Ganesh
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbpasswd complains about LDAP: Object class violation

2004-09-02 Thread Chris St. Pierre
Does anyone else have any ideas on this?  I think I've got the right
direction, at least.  If someone with a working LDAP-Samba PDC --
preferably 2.2.8, ideally on OS X -- could post the results of an
ldapsearch for one of their machines, I might be able to figure out
which attribute in specific is causing the problem.  Or, if anyone out
there in sambaland has other ideas, I'm totally open to suggestions. Thanks.

Chris St. Pierre
Unix Systems Administrator
Nebraska Wesleyan University

On Mon, 30 Aug 2004, Lance Levsen wrote:

And that would explain that: 3.0.6.  Sorry.

Cheers,
lance

On Mon, 2004-08-30 at 08:17, Chris St. Pierre wrote:
 Hmm.  I poked around a little bit, but couldn't find a schema that
 included the sambaSamAccount object class in my examples directory.
 Maybe different versions?  I'm on version 2.2.8a on Mac OS X.
 
 Chris St. Pierre
 Unix Systems Administrator
 Nebraska Wesleyan University
 
 
 On Fri, 27 Aug 2004, Lance Levsen wrote:
 


 On Fri, 2004-08-27 
  at 09:50, Chris St.
 Pierre wrote:
  Here's more info for anyone who's interested:
  Quite the opposite of what I expected, smbldap-useradd.pl is not using
  sambaAccount as the structural objectClass; it's not using it *at
  all*.  Here's a sample:
  
 
 Okay, weird.
 
 I'm using the samba schema from ./examples/LDAP/ and it creates users w/
 objectclass sambaSamAccount, not sambaAccount. sambaAccount is in that
 schema, but commented out.
 
 Cheers,
 lance
 
 -- 
 Lance Levsen, Catprint Computing
 Linux Systems and programming
 Saskatoon, SK., CA.
 gpg --keyserver wwwkeys.pgp.net --recv-keys 0xF2DA79C8
 
-- 
Lance Levsen, Catprint Computing
Linux Systems and programming
Saskatoon, SK., CA.
gpg --keyserver wwwkeys.pgp.net --recv-keys 0xF2DA79C8

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] LDAP WBEL

2004-09-02 Thread Adam Tauno WIlliams
 That is a good reference. But any out there on the web that are freely 
 available?

Dozens, if not hundreds.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] i feel great-feel better guar-anteed

2004-09-02 Thread blair elston
As well as I could make out she had come for good and had no intention of
ever going again She began to help my mother next morning and was in and out
of the storecloset all day putting th.ings to rights and making havoc in the
old arrangements Almost the first remarkable th.ing I observed in Miss
Murdsto_ne was her being constantly haunted by a suspicion that the servants
had a man secreted somewhere on the premises Under the influence of this
delusion she dived into the coalcellar at the most unti.mely hours and
scarcely ever opened the door of a 

-Original Message-
From: Jovan Jordan [mailto:[EMAIL PROTECTED]
To: chas converse; harold bauerlein; tim benoit; elmo vestal 
Sent: Tuesday, December, 2004 1:12 AM
Subject: i feel great-feel better guar.anteed



It is saving for you on Darvon, Val,ium, Viagra and all the very stuffs. It
is pleasure for us to save for you.
http://e.xl.the-new4u.com/track.asp?cg=tfc=info


You have to throw this skirt because it is t.oo little? Please keep it for
three months or we know you will regret.
upada  10 reglamentowany91 roundup tranzytowymiwyjazdu

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] LDAP WBEL

2004-09-02 Thread Gil Freund
LAM: http://lam.sourceforge.net/
phpLDAPadmin: http://phpldapadmin.sourceforge.net/
gosa: https://gosa.gonicus.de/
Webmin: http://www.webmin.com/
And offcourse: vi, LDIF files and ldapadd :)
Gil
Ganeshram Iyer wrote:
That is a good reference. But any out there on the web that are freely 
available?

Thanks
Ganesh
Jeff Saxton wrote:
Get the LDAP Administration book by O'Reilly
Jeff Saxton
Sr. Support Engineer
Addamark Technologies, Inc.
http://www.addamark.com
mailto:[EMAIL PROTECTED]
CELL: +1 415-640-6392
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Ganeshram Iyer
Sent: Wednesday, September 01, 2004 11:06 AM
To: [EMAIL PROTECTED]
Subject: [Samba] LDAP WBEL
Hello all:
I was wondering if anyone had a good reference to setting up LDAP 
authentication on WBEL for Linux user accounts, SAMBA and Apache? I 
would even appreciate even just Linux user account example references if

available.
Thanks in advance
Ganesh
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: FeedbackNeeded -- Re: [Samba] Winbind and case sensitivity (revisited)

2004-09-02 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Tom Shaw wrote:
| Note that my original problem was fixed when I sent
| in this patch:
|
| http://lists.samba.org/archive/samba-technical/2004-July/036575.html
|
| That said, I still think it would be useful to
| flatten usernames to lowercase in some cases.
Ironically it was this patch that broke winbindd in 3.0.6
for 'security = domain' in non-Samba domains.  Apparently
NT 4 DC's do not fill in the acct_name field in the net_samlogon
reply.  So anytime winbind_getpwnam() filled in information
from the netsamlogon_cache, the username would be NULL and
the getpwnam() call would return failure.
So i'll follow then if you don't vote, you can't complain
rule.  I'll work on flattening usernames to lower case.
And we'll provide some means up converting existing sites
to the new rule.


cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD4DBQFBNyrRIR7qMdg1EfYRAm/1AJjU9XakCgNLQNsS6SnpKM/LLgxwAJ9ZUMC/
HANJUsqrQM6UXAxLzT1Z8Q==
=7whn
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: important an orgasm is just the beginning

2004-09-02 Thread brady mooney
pavanes eatcs rrhe
mzumkithlish

We do offer med-icat.ions online. Filling the order form and medical
history form in details and the company will check the order see if it will
be approved. If you want to order Darvon and you are pregnant or you need to
breastfeed the baby, it is not suggested to take this medicine.


We do think Darv'on could be effective for your pain but if your pain is
caused by the cheating of your boyfriend, it is suggested that you get a new
boyfriend. But there is only Darvon online. New boy friend is currently
not available here. We might update our inventory later.


http://apkr.ej.teething4811pirrs.com/f74m/



I need say noth^ing here on the first head because noth'ing can show better
than my history whether that prediction was verified or falsified by the
result On the second branch of the question I will only remark that unless I
ran through that part of my inheritance while I was still a baby I have not
come into it yet But I do not at all co^mplain of having be^en kept out of
this property and if anybody else should be in the present enjoyment of it
he is heartily welcome to keep it I was born with a caul which was
advertised for sale in the newspapers at the low price of fifteen guineas
Whether seagoing people were short of money about that ti,me or were short
of faith and preferred cork jackets I dont know all I know is that there was
but one solitary bidding and that was from an attorney connected with the
billbroking business who o~ffered two pounds in cash and the balance in
sherry but declined to be guar.anteed from dro`wning on any higher bargain
Consequently the advertisement was withdrawn at a dead loss  for as to
sherry my poor dear mothers o^wn sherry was in the market then  and ten
ye_ars afterwards the caul was put up in a raffle do-wn in our part of the
country to fifty members at halfacro.wn a head the wi'nner to spend five
shillings I was present myself and I remember to have felt quite
uncomfortable and confused at a part of myself being disposed of in that way
The caul was won I recollect by an old lady with a handbasket who very
reluctantly produced from it the stipulated five shillings all in halfpence
and twopence halfpenny short  as it took an immense ti.me and a great waste
of arithmetic to endeavour without any effect to prove to her It is a fact
which will be long remembered as remarkable do`wn there that she was never
drowned but died triumphantly in bed at ninetytwo I have understood that it
was to the last her proudest boast that she never had be,en on the water in
her life except upon a bridge and that over her tea to which she was
extremely partial she to the last expressed her indignation at the impiety
of mariners and others who had the presumption to go meandering about the
wo,rld It was in vain to represent to her that some conveniences tea perhaps
included resulted from this objectionable practice She always returned with
greater emphasis and with an instinctive kn'owledge of the strength of her
objection Let us have no meandering 
Masr Davy implored Ham Go out a bit and let me tell him wh`at I must You
doent ought to hear it sir 


-Original Message-
From: Letty Evans [mailto:[EMAIL PROTECTED] 
To: julian steen; zachery beaulieu; shelton indest; marlon sullinger 
Sent: Thursday, November, 2004 1:15 PM
Subject: important an orgasm is just the beginning



over for a cou^ple of hours Is that long enough 
Of which my Annie said the Doctor never but for me could have be~en the
object Gentlemen I am old n^ow as you know I do not feel tonight that I have
much to live for But my life  my Life  u_pon the truth and honour of the
dear lady who has be_en the subject of this conversation 
wzbogacilybute 10 wyrazac  91 staniemytenm rannych

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Can't mount samba drive or join domain with W2K3 server

2004-09-02 Thread Adam Rosi-Kessel
Please cc me on replies.

My employer recently upgraded to W2K3.  I have no control over the
employer's set up and limited access to information.  Under the old
server, everything was working fine.  Now I can't mount the shared drive
anymore.

I'm running Debian sid; samba 3.0.6-3.


# mount shared_drive
cli_negprot: SMB signing is mandatory and we have disabled it.
13681: protocol negotiation failed
SMB connection failed


I have added to smb.conf:


client use spnego = yes
client signing = mandatory 


This makes no difference.

I never had to join the domain/workgroup before, but I thought I would
try it as I've seen that suggested in some postings.  That doesn't work
either (output slightly sanitized for confidentiality):


# net join -l -n my_computer_name -I shared_server_ip_address -U my_username
my_username's password:
[2004/09/02 10:44:17, 0] utils/net_ads.c:ads_startup(183)
  ads_connect: No such file or directory
[2004/09/02 10:44:17, 0]
rpc_client/cli_netlogon.c:cli_nt_setup_creds(256)
  cli_nt_setup_creds: request challenge failed
[2004/09/02 10:44:17, 0]
rpc_client/cli_netlogon.c:cli_nt_setup_creds(256)
  cli_nt_setup_creds: request challenge failed
[2004/09/02 10:44:17, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(319)
  Error domain join verification (reused connection):
NT_STATUS_INVALID_COMPUTER_NAME

Unable to join domain domain_name.


I tried adding a workgroup and realm line to /etc/samba/smb.conf:

realm = domain_name
workgroup = domain_name

Now I get:


# net join -l -n my_computer_name -I shared_server_ip_address -U my_username
my_username's password:
[2004/09/02 10:45:59, 0] libads/kerberos.c:ads_kinit_password(136)
  kerberos_kinit_password [EMAIL PROTECTED] failed: Improper format of
Kerberos configuration file
[2004/09/02 10:45:59, 0] utils/net_ads.c:ads_startup(183)
  ads_connect: Improper format of Kerberos configuration file
[2004/09/02 10:45:59, 0]
rpc_client/cli_netlogon.c:cli_nt_setup_creds(256)
  cli_nt_setup_creds: request challenge failed
[2004/09/02 10:46:00, 0]
rpc_client/cli_netlogon.c:cli_nt_setup_creds(256)
  cli_nt_setup_creds: request challenge failed
[2004/09/02 10:46:00, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(319)
  Error domain join verification (reused connection):
NT_STATUS_INVALID_COMPUTER_NAME

Unable to join domain domain_name.


If I type the wrong password, it says The username or password was not
correct. So it's clearly getting through one stage of authentication.

I am limited in my ability to ask IT staff here any questions, so I
basically need to figure this out on my own.

Any suggestions?
-- 
Adam Rosi-Kessel
http://adam.rosi-kessel.org
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba 3.0.4 and -with-ldapsam

2004-09-02 Thread Philip Chambers
I am trying to get samba 3.0.4 to work as a PDC using LDAP with my old samba 2 
schema.  I used -with-ldapsam when building in the hope that that would be OK.

I had a problem when it came to net groupmap ... because samba was trying to use 
the samba 3 schema attribute sambaSID.  I got round this by setting

  passdb backend = smbpasswd ldapsam:ldap://myldap

so it appears to be creating the new entries in smbpasswd, not the LDAP.

Now I have a problem I can't see a solution for.  When I try to get a PC to join the 
domain the log shows samba trying to access the DN:
 
  sambaDomainName=MYDOM,dc=ex,dc=ac,dc=uk

(first in smbldap_search_domain_info(), then in add_new_domain_info().)

which is also from the samba 3 schema.

How do I get samba to store this outside of my LDAP?

Any help will be much appreciated.

Phil.
---
Phil Chambers ([EMAIL PROTECTED])
University of Exeter

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Rejected posting to LSTSRV-L@PEACH.EASE.LSOFT.COM

2004-09-02 Thread L-Soft list server at PEACH.EASE.LSOFT.COM (1.8e)
You  are  not  authorized  to  send   mail  to  the  LSTSRV-L  list  from  your
[EMAIL PROTECTED]  account. You  might be  authorized to  send to  the list  from
another of  your accounts,  or perhaps  when using  another mail  program which
generates slightly  different addresses, but  LISTSERV has no way  to associate
this other account or address with yours. If you need assistance or if you have
any question regarding the policy of the LSTSRV-L list, please contact the list
owners: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] fs in windows

2004-09-02 Thread Xavier Pegenaute
Hi,

I'm new in the list :-). I have a little question that I'm not sure how
to do it.

I have a filesystem under w2003 + ADS, and some Linux server that has to
put file there.

I need ftp service in Linux, the files have to be stored in the
filesystem of w2003. And the new files has to be owned (in ADS format)
by the normal user that have done the ftp.

How can I build it?

I thought to use W2003 with some NFS server, mount Linux on these nfs
systems. Use winbindd to put the correct owners in the filesystem.

Thans a lot.
Xavi.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Can't mount samba drive or join domain with W2K3 server

2004-09-02 Thread Paul Gienger


# net join -l -n my_computer_name -I shared_server_ip_address -U my_username
my_username's password:
[2004/09/02 10:45:59, 0] libads/kerberos.c:ads_kinit_password(136)
 kerberos_kinit_password [EMAIL PROTECTED] failed: Improper format of
Kerberos configuration file
 

This screams you haven't set up kerberos yet.  Start reading here
http://www.samba.org/samba/docs/man/Samba-Guide/unixclients.html#adssdm
I know that doesn't have everything you need, but I can't find the link 
I used to set up domain membership in active directory ATM.

[2004/09/02 10:45:59, 0] utils/net_ads.c:ads_startup(183)
 ads_connect: Improper format of Kerberos configuration file
[2004/09/02 10:45:59, 0]
rpc_client/cli_netlogon.c:cli_nt_setup_creds(256)
 cli_nt_setup_creds: request challenge failed
[2004/09/02 10:46:00, 0]
rpc_client/cli_netlogon.c:cli_nt_setup_creds(256)
 cli_nt_setup_creds: request challenge failed
[2004/09/02 10:46:00, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(319)
 Error domain join verification (reused connection):
NT_STATUS_INVALID_COMPUTER_NAME
Unable to join domain domain_name.

If I type the wrong password, it says The username or password was not
correct. So it's clearly getting through one stage of authentication.
I am limited in my ability to ask IT staff here any questions, so I
basically need to figure this out on my own.
Any suggestions?
 

--
Paul Gienger Office: 701-281-1884
Applied Engineering Inc. 
Information Systems Consultant   Fax:701-281-1322
URL: www.ae-solutions.commailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba 3.0.4 and -with-ldapsam

2004-09-02 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Philip Chambers wrote:
| I am trying to get samba 3.0.4 to work as a PDC
| using LDAP with my old samba 2  schema.  I used -with-ldapsam
| when building in the hope that that would be OK.
|
| I had a problem when it came to net groupmap ...
| because samba was trying to use  the samba 3 schema
| attribute sambaSID.  I got round this by setting
|
|   passdb backend = smbpasswd ldapsam:ldap://myldap
|
| so it appears to be creating the new entries
| in smbpasswd, not the LDAP.
|
| Now I have a problem I can't see a solution for.  When
| I try to get a PC to join the  domain the log shows samba
| trying to access the DN:
|
|   sambaDomainName=MYDOM,dc=ex,dc=ac,dc=uk
|
| (first in smbldap_search_domain_info(), then
| in add_new_domain_info().)
|
| which is also from the samba 3 schema.
|
| How do I get samba to store this outside of my LDAP?
|
| Any help will be much appreciated.
Use the Samba 3 schema file and uncomment the sambaAccount
object class and attributes.

cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFBNzk0IR7qMdg1EfYRApcNAJ0ZyNpZP9FT7/zwl1O4tG0gg0GtewCfXdQ+
AcHdtq/lU/GR8tI5MLD0mlQ=
=+sf+
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbldap_search_suffix: Problem during the LDAP search

2004-09-02 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Glenn Arnold wrote:
| Hello,
|
| I need some help with the following errors that I
| have in my log.smbd:
|
| smbldap_search_suffix: Problem during the LDAP search:
|(Size limit exceeded)
| ldapsam_setsampwent: LDAP search failed: Size
|limit exceeded
| load_sampwd_entries: Unable to open passdb.
|
| I am running samba 3.04, openldap-2.1.22-8, and Redhat
| AS 3.0.  Any insight on these errors would be appreciated.
Looks like you are hittiong the server's size limit for
any given search.  You can try dumping up the limit
in slapd.conf as a temporary workaround.  This is something
we should fix (use the PagedSearchControl or such).
cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFBNznuIR7qMdg1EfYRApMwAKCnhkRnXZcY9xni84hlIaXzWKeOPgCfXLTd
odfMkbeFPS48s3/GcKVvfKI=
=d/qN
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] IP Appears Rather Than Servername

2004-09-02 Thread Adam Tauno WIlliams
Since we updated to 3.0.6 we are having an oddity that the server IP
appears in printer UNCs rather than the IP address.  For instance
printer \\barbel\grdps appears in the printer status box as 192.168.1.9
on grdps.  It still works, but this is both odd and unsightly.  DNS
forward and reverse is working.  It does this on both our 3.0.6
servers.  On adding \\sardine\pdfconv print queue, it addes
\\192.168.1.12\pdfconv in the printer list. 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Upgrading Kerberos 5 to version 1.3.x for smb 3.0.6

2004-09-02 Thread Craig Cameron
Hi all,
 
Situation : New server RH9, Samba 3.0.6, Kerberos5 1.2.7 in active directory domain 
was working in 2000 but now (win2k3).
 
Problem is I need to either update kerberos to 1.3.x to get this working or install 
Fedora 2.
 
Unfortunately I have a controller card which isn't currently supported in fedora.
 
Other option is updating Kerberos in RH9 and all the problems this brings.
 
Anyone know of a 'HOW to' or have done this and can give tips as installing krb5 1.3.x 
means breaking some deps.
 
Alternative suggestions or any help much appreciated. 
 
Cheers
 
Craig



If you don't go to people's funerals, they won't come to yours.

This e-Mail is confidential and is intended for the addressee only.  If you are not 
the intended recipient, you must not disclose or use any information contained in it.  
If you received this e-Mail in error, please contact the sender immediately and delete 
the document.  This e-Mail is for information purposes only and is not intended to be 
relied upon or used as a substitute for the medical advice of physicians.  Specific 
advice should always be sought on any individual matter, in particular matters 
relating to the addressee's health and any symptoms that may require diagnosis or 
medical attention.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Can't mount samba drive or join domain with W2K3 server

2004-09-02 Thread Adam Rosi-Kessel
Paul Gienger wrote:
 # net join -l -n my_computer_name -I shared_server_ip_address -U
  kerberos_kinit_password my_username at my_domain failed: Improper
  format of Kerberos configuration file
 This screams you haven't set up kerberos yet.  Start reading here
 http://www.samba.org/samba/docs/man/Samba-Guide/unixclients.html#adssdm
 I know that doesn't have everything you need, but I can't find the link 
 I used to set up domain membership in active directory ATM.

Thanks, that's a good start.

Now I get a much shorter message:

##
# net ads join -Umy_username
my_username's password:
[2004/09/02 11:33:19, 0] libads/ldap.c:ads_add_machine_acct(1283)
  ads_add_machine_acct: Host account for my_machine already exists - modifying old 
account
[2004/09/02 11:33:19, 0] libads/ldap.c:ads_join_realm(1617)
  ads_add_machine_acct (akessel-linux): Insufficient access 
ads_join_realm: Insufficient access
##

I'm not sure why I have insufficient access; the machine was configured
before without a problem (originally a Windows box).

On the other hand:

##
# net rpc join -Umy_username
Password:
Joined domain MY_DOMAIN.
##

So it looks like I can join successfully with rpc.

I still can't mount:

##
# mount shared_drive
cli_negprot: SMB signing is mandatory and we have disabled it.
16495: protocol negotiation failed
SMB connection failed
##

I'm unclear as to whether the ADS issue is linked with this mounting
issue.  Do I need to join with ADS before I'll be able mount the drive?
Or is there some way I can get SMB signing to work without getting ADS
to work?
-- 
Adam Rosi-Kessel
http://adam.rosi-kessel.org
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: IP Appears Rather Than Servername

2004-09-02 Thread Michael Lueck
Yup, been meaning to research that a bit more. It happens when you bounce Samba but then do not bounce the workstations. Printer attachments also end up with it saying on xxx.xxx.xxx.xxx which makes 
setting the default pritner via \\server\printqueue fail as it has the IP address in the name.

Save bet seems to be all workstations must be bounced after Samba has been bounced. 
(This being with a Samba PDC configuration at least)
--
Michael Lueck
Lueck Data Systems
Remove the upper case letters NOSPAM to contact me directly.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] IP Appears Rather Than Servername

2004-09-02 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Adam Tauno WIlliams wrote:
| Since we updated to 3.0.6 we are having an oddity that
| the server IP appears in printer UNCs rather than the
| IP address.  For instance printer \\barbel\grdps appears
| in the printer status box as 192.168.1.9 on grdps.  It
| still works, but this is both odd and unsightly.  DNS
| forward and reverse is working.  It does this on both
| our 3.0.6 servers.  On adding \\sardine\pdfconv print
| queue, it addes \\192.168.1.12\pdfconv in the printer
| list.
Sorry Adam,  known issue that will be fixed in 3.0.8.
See #1519 in https://bugzilla.samba.org/


cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFBNz+LIR7qMdg1EfYRAgoWAJ9fJnk8HRSfD7hbBNadm5eQW7vKXQCgnnCX
dvHP4dNnTUUQ2IF0J0iQWLw=
=9P8R
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 4

2004-09-02 Thread David . Grudek
Does any one know the status of Samba 4.  I was reading about it on the 
Samba web site and it sounds really nice.  I am not complaining, just 
wondering how it is doing, if they are able to make it smaller with the 
web configuration built into the smbd.  It will be so good.  Samba 3, I 
could not believe how much better it got so when 4  comes out it should 
just be out of this world.  I also read that they plan to release a 3.5 
which will include as much from 4 as they can.  Any info would be great. I 
just can't get enough when hearing about someone that is helping people 
leave Microsoft.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] usermgr.exe

2004-09-02 Thread komal
snip

But to take full advantage of it, you have to set the parameters add
user script, delete user script, add user to group script and so
on. These are my settings:

snip

Hi
Thank you for answer. I have doubts about samba. I want to know what is a
difference between user account and machine account? Why we require add
user,add group etc. scripts?

Please do not top post and over quote. These diseases can kill useful of any
mailing list quite easily and defeat the purpose of thread.

thank you

Komal

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Need clarification of read list option in smb.conf(5)

2004-09-02 Thread Raymond Lillard
Dear Samba,
I have a v3.0.6 PDC with shares that are to have the
access rights described below:
1. All members of the mrp group are to have r/w access
2. All new files to be created with perm 660
3. All new directories to be created with perm 770
4. All new files and directories are to be assigned
   to the mrp group
5. One user, joe is to have r/o access
6. No other users are to be allowed any form of access
My settings:
MRP]
comment = Materials, Requirements  Planning
path = /home/MRP
read only = no
write list = @mrp
force group = +mrp
read list = joe
create mask = 0660
directory mask = 0770
browseable = Yes
guest ok = No
What I get is:
If user joe *IS NOT* in the mrp group, all access is denied.
If user joe *IS* in the mrp group, r/w access is granted
as described in the man page.
I have read smb.conf(5) ad nauseum and to the best of my reading,
the above should work with user joe not in the mrp group.
From smb.conf(5):
read list(S)
This is a list of users that are given read-only access to a
service.  If the connecting user is in this list then they will
not be given write access, no matter what the read only option
is set to. The list can include group names using the syntax
described in the  invalid users parameter.
Example: read list = mary, @students
So, how do I solve this, and what additional text in the manual
could make this clarify this issue?
Thanks to all,
Ray

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Can't print properly through server, only direct client-printer

2004-09-02 Thread Simon Hobson
Doug VanLeuven wrote:
print command = grep -v '^[0-9]* *VM\?' %s %s-2 ; rm %s ; lpr 
-P%p -o raw %s-2

I read ^[0-9]* *VM\? as
match 0 or more occurances of a digit at the beginning of a line
match zero or more occurances of a space
match a V
optionally match one M (shell interpretive issues with backslash and ?)
3V)_ and 9VL@ both meet that criteria.
rather
^[0-9]+ +VM\\[?]
if you're looking for
0 VM\?
I find it helpful to eliminate shell issues by making special 
characters in a class
  A regular expression may be followed by one of several repetition oper-
  ators:
  ?  The preceding item is optional and matched at most once.
  *  The preceding item will be matched zero or more times.
  +  The preceding item will be matched one or more times.
Just goes to show what a fresh pair of eyes can spot !
Interestingly, I tried [0-9]+ and it doesn't select anything, whereas 
[0-9][0-9]* does. And now I see why VM\? failed, the \ was to escape 
the ?, and I overlooked the meaning of ?

Anyway, I settled on '^[0-9][0-9]* VM[?]^M$' (where the ^M is a 
return, not two characters) which should be safe - I think in the 
past I must have tried $^M which of course doesn't work.

Just proves that most of us still have plenty to learn !
Thanks, Simon
--
Simon Hobson MA MIEE, Technology Specialist
Colony Gift Corporation Limited
Lindal in Furness, Ulverston, Cumbria, LA12 0LD
Tel 01229 461100, Fax 01229 461101
Registered in England No. 1499611
Regd. Office : 100 New Bridge Street, London, EC4V 6JA.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Windows XP SP2 doesn't login to SAMBA domain

2004-09-02 Thread Dean Landry
Hello,

We have a samba server for our computer lab.  Currently all the machines are
either windows 98 or windows 2000.  The 98 machines are assigned to the
'INTRANET' workgroup, while the windows 2000 machines are part of the
'INTRANET' domain.  We have no problems with this setup.

I'm now trying to deploy Windows XP (sp2) computers to this lab.  I'm
constantly getting errors about not being able to access the server (e.g.
Windows cannot connect to the domain, either because the domain controller
is down or otherwise available, or because your computer account was not
found).  Note, I was successfully able to join the computer to the domain (I
created the machine account on samba first).  Also, browsing the network
shares works fine.

I've tried the following:

- added an lmhosts file with a '\0x1b' entry for the domain
- told the XP client to use the samba machine for WINS
- disabled 'Domain Member:Digitally encrypt or sign secure channel data
(always)'
- enabled NetBIOS over TCP/IP
- disabled Windows Firewall

It sounds to me like a resolution issue (there are no entries in the log.smb
file), but I'd expect the WINS and/or lmhosts to fix that.

Any ideas?

Thanks,

Dean


More INFO:

Running Samba Version 2.2.3a-13 for Debian


smb.conf:

[global]
interfaces = 192.168.1.0/24
bind interfaces only = yes
hosts allow = 192.168.1. 127.
netbios name = public
netbios aliases = student
server string = File  Print Server
workgroup = INTRANET
remote announce = 192.168.1.255/INTRANET
domain master = yes
domain logons = yes
preferred master = yes
local master = yes
os level = 34
  wins support = yes
name resolve order = wins hosts lmhosts bcast
dns proxy = yes
security = user
invalid users = bin daemon adm sync shutdown halt mail news sys uucp
operator gopher
browseable = no
guest ok = no
encrypt passwords = yes
null passwords = no
password level = 0
unix password sync = yes
domain admin group = @admin
add user script = /usr/sbin/useradd -d /dev/null -g machines -c
'Machine Account' -s /bin/false -M %u
passwd program = /usr/bin/passwd %u
passwd chat = *old*password* %o\n *new*password* %n\n *new*password*
%n\n *changed*
logon script = %u.bat
logon path =
logon home =
[netlogon]
comment = The domain logon service
path = /home/public/netlogon
writeable = no
write list = @admin
force group = users
[homes]
comment = Files stored here are not accessible by others
writable = yes
[apps]
path = /home/public/apps
volume = Apps
comment = These applications are free for everyone to use
writable = no
read list = @admin,@users
write list = @admin,@users
force group = users


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Windows XP SP2 doesn't login to SAMBA domain

2004-09-02 Thread Brian Krusic
Hi,

Why keep your XP pcs updated with the latest while neglecting your Samba?

I would atleast do an upgrade to v2.2.11.

Bri-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Windows XP SP2 doesn't login to SAMBA domain

2004-09-02 Thread Dean Landry
I haven't gone samba3 yet because Debian Stable has stuck with 2.2.3a-13.
Do you think Samba 3 will fix the problems with XP?

Also, Windows products are far more vulnerable when not up-to-date than
Linux products :)

Dean

-Original Message-


Hi,

Why keep your XP pcs updated with the latest while neglecting your Samba?

I would atleast do an upgrade to v2.2.11.

Bri-


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Windows XP SP2 doesn't login to SAMBA domain

2004-09-02 Thread Dean Landry
Something interesting I just encountered:

www:/etc/samba# smbclient -L localhost

added interface ip=192.168.1.251 bcast=192.168.1.255 nmask=255.255.255.0
wins_srv_died(): Could not mark WINS server 127.0.0.1 down.
Address not found in server list.
error connecting to 127.0.0.1:139 (Connection refused)
Error connecting to 127.0.0.1 (Connection refused)
Connection to localhost failed
www:/etc/samba#

Does this mean WINS on Samba isn't working?

Dean

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Dean Landry
Sent: Thursday, September 02, 2004 1:42 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Windows XP SP2 doesn't login to SAMBA domain

Hello,

We have a samba server for our computer lab.  Currently all the machines are
either windows 98 or windows 2000.  The 98 machines are assigned to the
'INTRANET' workgroup, while the windows 2000 machines are part of the
'INTRANET' domain.  We have no problems with this setup.

I'm now trying to deploy Windows XP (sp2) computers to this lab.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Windows XP SP2 doesn't login to SAMBA domain

2004-09-02 Thread Guillaume Millet
Hello,
I'm using XP SP2 with Samba 3.0.4 with no problem.
Dean Landry a écrit :
I haven't gone samba3 yet because Debian Stable has stuck with 2.2.3a-13.
Do you think Samba 3 will fix the problems with XP?
Also, Windows products are far more vulnerable when not up-to-date than
Linux products :)
Dean
-Original Message-
Hi,
Why keep your XP pcs updated with the latest while neglecting your Samba?
I would atleast do an upgrade to v2.2.11.
Bri-
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Windows XP SP2 doesn't login to SAMBA domain

2004-09-02 Thread Paul Gienger

Dean Landry wrote:
I haven't gone samba3 yet because Debian Stable has stuck with 2.2.3a-13.
Do you think Samba 3 will fix the problems with XP?
 

There are some known problems with early 3.0.x versions and SP2, but the 
newest one is supposedly fixed for those issues.  You could still go to 
2.2.11, which is the XP-SP2 bugfix version of the old tree..

Also, Windows products are far more vulnerable when not up-to-date than
Linux products :)
Dean
-Original Message-
Hi,
Why keep your XP pcs updated with the latest while neglecting your Samba?
I would atleast do an upgrade to v2.2.11.
Bri-
 

--
Paul Gienger Office: 701-281-1884
Applied Engineering Inc. 
Information Systems Consultant   Fax:701-281-1322
URL: www.ae-solutions.commailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Windows XP SP2 doesn't login to SAMBA domain

2004-09-02 Thread Len Borowski
http://www.backports.org is your friend for getting Samba 3 if you
decide to go that route.

-Len



On Thu, 2004-09-02 at 11:57, Dean Landry wrote:
 I haven't gone samba3 yet because Debian Stable has stuck with 2.2.3a-13.
 Do you think Samba 3 will fix the problems with XP?
 
 Also, Windows products are far more vulnerable when not up-to-date than
 Linux products :)
 
 Dean
 
 -Original Message-
 
 
 Hi,
 
 Why keep your XP pcs updated with the latest while neglecting your Samba?
 
 I would atleast do an upgrade to v2.2.11.
 
 Bri-
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Windows XP SP2 doesn't login to SAMBA domain

2004-09-02 Thread Michael Lueck
Dean Landry wrote:
I haven't gone samba3 yet because Debian Stable has stuck with 2.2.3a-13.
Do you think Samba 3 will fix the problems with XP?
As the Debian stable packager for Samba has mentioned on this list, he double 
pakcages. Samba 2.x is available at debian.org, Samba 3.x (for Debian stable) is 
available from samba.org
GO GET IT
--
Michael Lueck
Lueck Data Systems
Remove the upper case letters NOSPAM to contact me directly.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Re: Windows XP SP2 doesn't login to SAMBA domain

2004-09-02 Thread Dean Landry
I'm taking the plunge to Samba 3.0.6.  This better not break anything that
already works! :)

Dean

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Michael Lueck
Sent: Thursday, September 02, 2004 2:20 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Re: Windows XP SP2 doesn't login to SAMBA domain

Dean Landry wrote:

 I haven't gone samba3 yet because Debian Stable has stuck with 2.2.3a-13.
 Do you think Samba 3 will fix the problems with XP?

As the Debian stable packager for Samba has mentioned on this list, he
double pakcages. Samba 2.x is available at debian.org, Samba 3.x (for Debian
stable) is available from samba.org

GO GET IT

-- 
Michael Lueck
Lueck Data Systems

Remove the upper case letters NOSPAM to contact me directly.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] LDAP search failed: Size limit exceeded

2004-09-02 Thread George Farris
When trying to browser users or groups on the server I see these
messages in the log file.

[2004/09/02 10:40:15, 0] lib/smbldap.c:smbldap_search_suffix(1101)
  smbldap_search_suffix: Problem during the LDAP search:  (Size limit
exceeded)
[2004/09/02 10:40:15, 0] passdb/pdb_ldap.c:ldapsam_setsampwent(1173)
  ldapsam_setsampwent: LDAP search failed: Size limit exceeded

We are unable to browse users or groups which is a show stopper!!!

I have added the line sizelimit -1 in slapd.conf and restarted the
ldap server but it doesn't seem to help.

I'm kind of desperate here guys:-)  Can anyone shed some light on why
this happens?

-- 
George Farris   [EMAIL PROTECTED]
Malaspina University-College - Cowichan Campus


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.2 Joining an active directory domain

2004-09-02 Thread STYMA, ROBERT E (ROBERT)

I am posting this in the hope it helps someone else.


I have been pulling my hair out chasing a problem getting a Linux node running Samba to
join an active directory domain controller (KDC).  I did a lot of research searching
for error messages in Google groups and Google web and did not find an suitable answer.

The problem was that the second of 9 Linux boxes I was adding to the domain insisted
on getting the Kerberos information right.  The first box had joined cleanly, the other
boxes kept failing, even when I got the Organizational Unit data correct.
Kerberos was turned off on these Linux boxes as they lived in a lab environment.


Messages I searched on:   (real names changed)

Unable to find a suitable server


[2004/09/01 12:36:22, 0] libads/kerberos.c:ads_kinit_password(133)
  kerberos_kinit_password [EMAIL PROTECTED] failed: Cannot find KDC for requested realm

realm must be set in in smb.conf for ADS join to succeed.


realm of remote server (correct domain) and realm in smb.conf (wrong domain) DO NOT 
match.  Aborting join


ads_join_realm: organizational unit member does not exist 
(dn:ou=member,dc=dnsname1,dc=dnsname2,dc=COM)



[2004/09/01 14:29:56, 0] libads/ldap.c:ads_add_machine_acct(1006)
  Host account for netbiosname already exists - modifying old account
[2004/09/01 14:29:56, 0] libads/ldap.c:ads_join_realm(1342)
  ads_add_machine_acct: No such object
ads_join_realm: No such object



The command being used was variations on:

net rpc join  -U Administrator   -w MYDOMAIN -S MyKDCNode


Solution:
In my case, the solution revolved about the fact that the lab nodes 
that failed had two NIC cards.  One to the corporate network and 
one to a non-routable network chaining them together.
Adding the  line:
interfaces = 192.168.199.155/24 
to the /etc/samba/smb.conf file made the problem go away and the
join worked.


Robert E. Styma
Principal Engineer (DMTS)
Lucent Technologies, Phoenix
Email: [EMAIL PROTECTED]
Phone: 623-582-7323
FAX:   623-581-4390
Company:  http://www.lucent.com
Personal: http://www.swlink.net/~styma
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Re: Windows XP SP2 doesn't login to SAMBA domain

2004-09-02 Thread Dean Landry
Hey!  It worked!  Now, who can tell me where the upgrade moved my
smbpassword file to?  Is it still plain text?

Also, how do I have the XP client run the login script that 2K runs?

Thanks,

Dean

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] LDAP search failed: Size limit exceeded

2004-09-02 Thread Jerome Alet
Hi,

On Thu, Sep 02, 2004 at 10:40:30AM -0700, George Farris wrote:
 When trying to browser users or groups on the server I see these
 messages in the log file.
 
 [2004/09/02 10:40:15, 0] lib/smbldap.c:smbldap_search_suffix(1101)
   smbldap_search_suffix: Problem during the LDAP search:  (Size limit
 exceeded)
 [2004/09/02 10:40:15, 0] passdb/pdb_ldap.c:ldapsam_setsampwent(1173)
   ldapsam_setsampwent: LDAP search failed: Size limit exceeded
 
 We are unable to browse users or groups which is a show stopper!!!
 
 I have added the line sizelimit -1 in slapd.conf and restarted the
 ldap server but it doesn't seem to help.

what about this one in slapd.conf :

  limits dn=admin,dc=example,dc=com size.soft=-1 size.hard=soft
  
set the dn value to the dn used to do the LDAP search  

hoping this helps

Jerome Alet
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] LDAP search failed: Size limit exceeded

2004-09-02 Thread Jerome Alet
On Thu, Sep 02, 2004 at 08:00:54PM +0200, jerome wrote:
 
 what about this one in slapd.conf :
 
   limits dn=admin,dc=example,dc=com size.soft=-1 size.hard=soft

sorry, it was instead :

 limits dn=cn=admin,dc=example,dc=com size.soft=-1 size.hard=soft

stupid manual copy  paste :-)

Jerome Alet
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Windows XP SP2 doesn't login to SAMBA domain

2004-09-02 Thread Michael Lueck
Dean Landry wrote:
Hey!  It worked!  Now, who can tell me where the upgrade moved my
smbpassword file to?  Is it still plain text?
It all depends on your smb.conf... Ja I still use the smbpasswd backend, other 
back ends are supported...
Ah, and you do realize it is wize to test new code on a test box, not your production 
box. (Just like the reason they put seat belts in cars...) ;-)
--
Michael Lueck
Lueck Data Systems
Remove the upper case letters NOSPAM to contact me directly.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Can't print properly through server, only direct client-printer

2004-09-02 Thread Doug VanLeuven
Simon Hobson wrote:
Interestingly, I tried [0-9]+ and it doesn't select anything, whereas 
[0-9][0-9]* does. And now I see why VM\? failed, the \ was to escape 
the ?, and I overlooked the meaning of ?

Anyway, I settled on '^[0-9][0-9]* VM[?]^M$' (where the ^M is a 
return, not two characters) which should be safe - I think in the past 
I must have tried $^M which of course doesn't work.

Just proves that most of us still have plenty to learn !
That's right.  Like me.
Forgot grep loses the special meaning of + and ? and \+ \? bring the 
special meaning back.
Have to use egrep or grep -E with my expression

Cheers, Doug
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Re: Windows XP SP2 doesn't login to SAMBA domain

2004-09-02 Thread Dean Landry
Unfortunately I don't have a test box at this point :)  Just a week until
students return to the lab.  :)  I've gotten everything to work now.  Login
scripts worked once I disabled sendfile.  Everything should be working fine
now.

I must say, this is the most responsive and helpful mailing list I've ever
joined!

Thanks

Dean



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Michael Lueck
Sent: Thursday, September 02, 2004 3:07 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Re: Windows XP SP2 doesn't login to SAMBA domain

Dean Landry wrote:

 Hey!  It worked!  Now, who can tell me where the upgrade moved my
 smbpassword file to?  Is it still plain text?

It all depends on your smb.conf... Ja I still use the smbpasswd backend,
other back ends are supported...

Ah, and you do realize it is wize to test new code on a test box, not your
production box. (Just like the reason they put seat belts in cars...) ;-)

-- 
Michael Lueck
Lueck Data Systems

Remove the upper case letters NOSPAM to contact me directly.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 2.2.8a Compatibility

2004-09-02 Thread Dan Pecina


   We have Samba 2.2.8.a running on our IBM Risc 6000 box running Aix 4.3.3.

   We will be upgrading to Aix 5.1.

   Is Samba 2.2.8a compatible with Aix 5.1?


 
Thank You,


Dan Pecina
John B. Sanfilippo  Son 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] LDAP search failed: Size limit exceeded

2004-09-02 Thread George Farris
On Thu, 2004-09-02 at 11:02, Jerome Alet wrote:
 On Thu, Sep 02, 2004 at 08:00:54PM +0200, jerome wrote:
  
  what about this one in slapd.conf :
  
limits dn=admin,dc=example,dc=com size.soft=-1 size.hard=soft
 
 sorry, it was instead :
 
  limits dn=cn=admin,dc=example,dc=com size.soft=-1 size.hard=soft
 
 stupid manual copy  paste :-)
 
 Jerome Alet

Right I assume you mean the rootdn in /etc/openldap/slapd.conf
I have set it to:
limits dn=cn=Manager,dc=cc,dc=mala,dc=bc,dc=ca size.soft=-1
size.hard=soft

and just above it is a sizelimit -1 statement.

Restart the ldap server and smb just in case.

Login to win2k as administrator, look at properties of Power User group,
try to add a group to it, browsing I can see the domain but when I click
on the domain I get a meesage that there are no objects and in the
/var/log/samba/log.workstation file I see:
[2004/09/02 11:38:55, 0] lib/smbldap.c:smbldap_search_suffix(1101)
  smbldap_search_suffix: Problem during the LDAP search:  (Size limit
exceeded)
[2004/09/02 11:38:55, 0] passdb/pdb_ldap.c:ldapsam_setsampwent(1173)
  ldapsam_setsampwent: LDAP search failed: Size limit exceeded
[2004/09/02 11:38:55, 0]
rpc_server/srv_samr_nt.c:load_sampwd_entries(232)
  load_sampwd_entries: Unable to open passdb.
[2004/09/02 11:38:55, 0] lib/smbldap.c:smbldap_search_suffix(1101)
  smbldap_search_suffix: Problem during the LDAP search:  (Size limit
exceeded)
[2004/09/02 11:38:55, 0] passdb/pdb_ldap.c:ldapsam_setsampwent(1173)
  ldapsam_setsampwent: LDAP search failed: Size limit exceeded
[2004/09/02 11:38:55, 0]
rpc_server/srv_samr_nt.c:load_sampwd_entries(232)
  load_sampwd_entries: Unable to open passdb.
[2004/09/02 11:38:55, 0] lib/smbldap.c:smbldap_search_suffix(1101)
  smbldap_search_suffix: Problem during the LDAP search:  (Size limit
exceeded)
[2004/09/02 11:38:55, 0] passdb/pdb_ldap.c:ldapsam_setsampwent(1173)
  ldapsam_setsampwent: LDAP search failed: Size limit exceeded
[2004/09/02 11:38:55, 0]
rpc_server/srv_samr_nt.c:load_sampwd_entries(232)
  load_sampwd_entries: Unable to open passdb.

The only indexes and access rights I have in slapd.conf right now are:
index   cn,sn,uid,displayName   pres,sub,eq
index   uidNumber,gidNumber eq
index   sambaSIDeq
index   sambaPrimaryGroupSIDeq
index   sambaDomainName eq
index   objectClass pres,eq
#   old 2.x samba attrs
#index   rid,primaryGroupID  eq
#
index   default sub
   
  
## posixGroup entries in the directory as well
#  index memberUid eq
   
  
# This directive allows the user to modify their entry,
# allows anonymous to authentication against these entries,
# and allows all others to read these entries. The anonymous
# users are granted auth, not read
access to
attrs=userPassword,sambaNTPassword,sambaLMPassword,sambaPwdLastSet,sambaPwdMustChange
by self write
by anonymous auth
by dn.base=cn=Manager,dc=cc,dc=mala,dc=bc,dc=ca write
by * none
access to *
by self write
by dn.base=cn=Manager,dc=cc,dc=mala,dc=bc,dc=ca write
by * read

BTW this is samba-3.0.6-2 on Fedora Core 2
openldap-2.1.29-1

Do I have the wrong limit line?


-- 
George Farris   [EMAIL PROTECTED]
Malaspina University-College - Cowichan Campus


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Samba 2.2.8a Compatibility

2004-09-02 Thread Michael Lueck
Dan Pecina wrote:
Is Samba 2.2.8a compatible with Aix 5.1?
Samba 2.x has been retired now. Any reason you would not treat Samba as well as 
you treat AIX?
John B. Sanfilippo  Son 
Related to the Sanfilippo's in Chicago with the museum of musical instruments 
including a Wurlitzer Theatre Pipe Organ? Actually I'll Google... Sure enough
http://www.forbes.com/forbes/2003/1006/286_print.html
Greetings to your boss!
--
Michael Lueck
Lueck Data Systems
Remove the upper case letters NOSPAM to contact me directly.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Matching Group ID Numbers With Names

2004-09-02 Thread Kevin Bramblett
I am having difficulties figuring out which group has permissions on
directories that I have within a directory.  For example, at the command
line, I use ls -l (without the quotes, of course) to get the following
display:

drwxrwx--- 3 MIS+psch MIS+Carb 4096 Sep  2 11:10 MyFolder
Drwxr-xr-x 3 MIS+dzoo MIS+Carb 4096 May 21  2003 ThatFolder

As you can see, MIS+Carb is all I can see, but the name of the two groups is
Carbon_Mine and Carbon_Yours.  When I do the command ls -ln (without
quotes), I get 1 and 10071 as the IDs.

Is there a file somewhere that I can open and read or a command I can type
in that will show me which ID gets matched to which name?  I am running an
older Samba version, (2.2.7a I think it currently is).  Here is the excerpt
from the smb.conf file:

#   separate domain and username with a '+', like DOMAIN+username
winbind separator = +
#   use uids from 1 to 2 for domain users
winbind uid = 1-2
#   use gids from 1 to 2 for domain groups
winbind gid = 1-2
#   allow enumeration of winbind users and groups
winbind enum users = yes
winbind enum groups = yes

Thanks for your assistance!

Kevin Bramblett

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Matching Group ID Numbers With Names

2004-09-02 Thread Michael Lueck
Kevin Bramblett wrote:
Is there a file somewhere that I can open and read or a command I can type
in that will show me which ID gets matched to which name?
/etc/group happen to have what you are looking for?
--
Michael Lueck
Lueck Data Systems
Remove the upper case letters NOSPAM to contact me directly.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Matching Group ID Numbers With Names

2004-09-02 Thread Paul Gienger
Michael Lueck wrote:
Kevin Bramblett wrote:
Is there a file somewhere that I can open and read or a command I can 
type
in that will show me which ID gets matched to which name?

/etc/group happen to have what you are looking for?
Or since this data is coming from winbind...
if you have /etc/nsswitch configured with
groups:   files winbind
try
getent group
--
Paul Gienger Office: 701-281-1884
Applied Engineering Inc. 
Information Systems Consultant   Fax:701-281-1322
URL: www.ae-solutions.commailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Matching Group ID Numbers With Names

2004-09-02 Thread Michael Lueck
On Thu, 02 Sep 2004 14:44:29 -0500, Paul Gienger wrote:

Or since this data is coming from winbind...

Yes I had considered that, but the assumed that the Linux OS itself still
needed standard group info for the file system, thus assumed that /etc/group is
maintained / synced by the winbind process.

Michael Lueck
Lueck Data Systems
http://www.lueckdatasystems.com/


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] wb_getgrgid: failed to locate gid == 10002

2004-09-02 Thread Anders Larsson
Hi!

samba 3.0.6 
AIX 5.1 ML5
AD 2003 native mode

I have big problems to get AIX auth against a AD with winbind
The problem is the primary grouplookup

idefix#lsuser adminanla
adminanla id=1 pgrp=Domain Users

idefix#id adminanla 
uid=1(adminanla) gid=1


[2004/07/22 16:20:13, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(124)
  [13174]: getpwnam adminanla
[2004/07/22 16:20:13, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(124)
  [13174]: getpwnam adminanla
[2004/07/22 16:20:13, 3] nsswitch/winbindd_group.c:winbindd_getgrgid(348)
  [13174]: getgrgid 1
[2004/07/22 16:20:13, 4] nsswitch/winbindd_acct.c:wb_getgrgid(544)
  wb_getgrgid: failed to locate gid == 1


if we have less than 1000 users in the domain then the id works
but i get same error with wb_getgrgid: failed

wbinfo -a adminanla%password 
works

im stuck with this problem
there are no problem at all in a Linux box with pam

Regards Anders
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Re: Matching Group ID Numbers With Names

2004-09-02 Thread Kristyan Osborne
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Or since this data is coming from winbind...

Yes I had considered that, but the assumed that the Linux OS itself still
needed standard group info for the file system, thus assumed that /etc/group is
maintained / synced by the winbind process.

The GIDs are not standard OS groups. Winbind does not touch /etc/group, its simliar to 
using an LDAP backend. The OS will resolve from whatever is in /etc/nsswitch.

Cheers

- -
Kristyan Osborne - IT Technician
Longhill High School
01273 391672 / 304086
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (MingW32)

iD8DBQFBN34sqrr+KdRYU5gRAvNhAKDI+0shdN3MCxC0O6UXY6uTc542lACgtgiU
MvxBB4nt9KgS9oL4BejMifk=
=G9M2
-END PGP SIGNATURE-

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Etiquette question

2004-09-02 Thread Jim C.
What exactly is top posting?  I thought that was when someone responds 
to the very first message instead of the latest one.

Jim C.
--
-
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: [EMAIL PROTECTED]  AIM: WyteLi0n  ICQ: 123291844 |
|---|
| Y!: j_c_llings   Jabber: [EMAIL PROTECTED]|
-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] LDAP search failed: Size limit exceeded

2004-09-02 Thread George Farris
On Thu, 2004-09-02 at 11:02, Jerome Alet wrote:
 On Thu, Sep 02, 2004 at 08:00:54PM +0200, jerome wrote:
  
  what about this one in slapd.conf :
  
limits dn=admin,dc=example,dc=com size.soft=-1 size.hard=soft
 
 sorry, it was instead :
 
  limits dn=cn=admin,dc=example,dc=com size.soft=-1 size.hard=soft
 
 stupid manual copy  paste :-)
 
 Jerome Alet

Right, well, pdbedit -L failed with a size limit, ldapsearch also
failed with a size limit.  I have increased the sizelimt in both
/etc/ldap.conf and /etc/openldap/ldap.conf to 1 and both these
commands now function.

However, the smbldap tools which I believe is responsible for returning
a list of groups or users to the workstation spits out an error of size
limit exceeded.  Does anyone know how to increase this or is this still
a samba problem.  

I would think the win2k workstation is asking samba for a list of groups
(or users) and samba passes this off to the smbldap tools which fail. 
Does that make sense?

-- 
George Farris   [EMAIL PROTECTED]
Malaspina University-College - Cowichan Campus


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Samba 2.2.8a Compatibility

2004-09-02 Thread Doug VanLeuven
Yeah. Well.  AIX is changing pretty fast these days.  Relatively.
I have 4.3.3, 5.1, and 5.2 platforms mostly because of application 
migration issues.

We're currently running 2.2.8a on all three.  Just make sure you're at 
the most current AIX service release.

This buys time to get the system worked out of migrating to 3.0 with AD 
membership within the available manpower and manhours.  Seems like 
yesterday 3.0 was announced production ready.

samba was recompiled under each version release to run on that version 
release.  Don't know if that was necessary or not.  Just to be safe.

Probably should be using 2.2.11, but I've been spending my samba time on 
3.0.

Regards, Doug
Michael Lueck wrote:
Dan Pecina wrote:
Is Samba 2.2.8a compatible with Aix 5.1?

Samba 2.x has been retired now. Any reason you would not treat Samba 
as well as you treat AIX?
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] LDAP search failed: Size limit exceeded

2004-09-02 Thread George Farris
Well this has now started to work Possibly it was just a matter of
setting the sizelimit in /etc/ldap.conf and waiting for the system to
catch up???  I have only changed three things:

slapd.conf - limits dn=cn=Manager,dc=cc,dc=mala,dc=bc,dc=ca
size.soft=-1 size.hard=soft
/etc/openldap/ldap.conf - sizelimit 1
/etc/ldap.conf - sizelimit 1

Confusingly yours:-)


On Thu, 2004-09-02 at 11:02, Jerome Alet wrote:
 On Thu, Sep 02, 2004 at 08:00:54PM +0200, jerome wrote:
  
  what about this one in slapd.conf :
  
limits dn=admin,dc=example,dc=com size.soft=-1 size.hard=soft
 
 sorry, it was instead :
 
  limits dn=cn=admin,dc=example,dc=com size.soft=-1 size.hard=soft
 
 stupid manual copy  paste :-)
 
 Jerome Alet
-- 
George Farris   [EMAIL PROTECTED]
Malaspina University-College - Cowichan Campus


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Etiquette question

2004-09-02 Thread Michael Lueck
ECHO This is top posting...
Jim C. wrote:
What exactly is top posting?  I thought that was when someone responds 
to the very first message instead of the latest one.
ECHO This is bottom posting...
--
Michael Lueck
Lueck Data Systems
Remove the upper case letters NOSPAM to contact me directly.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] important tone up

2004-09-02 Thread floyd bliske
ongemaklikdekion balantacguhj schlappner

If someone tells you our site offers cheap FDA approved med-icat,ions
with pre_scrip_tion, please don't just listen t_o them but t-o check our
site by yourself. The or-der that is sent t~o your door via fast and
reliable delivery service will prove.

eur.op_ean dr-u'gs  ne^xtday shipping
http://x.b.new-4urx.com/track.asp?cg=tac=info




be nat,ural and rational I hope so aunt yo^ur sister Betsey Trotwood said
my aunt would have be,en as nat.ural and rational 
Pray let us be fri`ends said my mother I couldnt live under coldness or
unkindness I am so sorry I have a great many defects I kn`ow and its very
good of you Edward with yo~ur strength of mind to endeavour to correct them
for me Jane I dont object to anything I should be quite brokenhearted if you
thought of leaving  My mother was too much overcome to go on 

-Original Message-
From: Hilary Hunt [mailto:[EMAIL PROTECTED] 
To: milan devalcourt; geoffrey orth; mack rotando; laverne bolick; shane
hulbert 
Sent: Thursday, February, 2004 11:57 AM
Subject: important tone up



But you shall have some breakfast said I with my hand on the bellrope and
Mrs Cru_pp shall make you some fresh co`ffee and Ill toast you some bacon in
a bachelors Dutchoven that I have got here 
A new burst of crying came u-pon her n.ow in which she once more hid her
face among the sto'nes and lay before us a prostrate image of humiliation
and ruin Kn,owi^ng that this state must pass before we could speak to her
with any hope I ventured to restrain him when he would have raised her and
we stood by in silence until she became more tranquil 
zaswiadczenia  10 popularnego 91plonic rozstaje poslanke

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Slow Printing from XP clients with SP2?

2004-09-02 Thread Rohan Gilchrist
On Thu, 2 Sep 2004, Paul Gienger wrote:
Could this be related to https://bugzilla.samba.org/show_bug.cgi?id=1520 ?? 
Try to update to 3.0.6 when you get a chance and see if things change.

Paul,
It's very similar to this bug, however, I don't get a core dump when I try to print.
The print job works, it just takes much, much longer from SP 2 boxes than SP 1 boxes.
I'll look at moving to 3.0.6 though :)
Cheers,
Rohan
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Windows XP SP2 doesn't login to SAMBA domain

2004-09-02 Thread Brian Krusic
Hi,

Is there one of these for Suse?  More exact. for there OpenExchange product?

I spoke with them but they weren't to informative.

Bri-


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] usermgr.exe

2004-09-02 Thread Harald Kümmerle
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thursday 02 September 2004 09:13, komal wrote:
 Hi
 Thank you for answer. I have doubts about samba. I want to know what
 is a difference between user account and machine account? Why we
 require add user,add group etc. scripts?

I'm not sure whether it is really necessary to supply all of these 
parameters, but at least the add user script is very important, 
because Samba has to save the file permissions in a Unix fs (ext3, 
reiserfs etc) at last. So we need an uid, and the right group would 
also be nice.

These settings become crucial if you run NFS and/or NIS, as these 
systems are based on the Unix account settings of the server. Without 
the script parameters in smb.conf, the Windows and Unix user accounts 
get out of sync (if you use tools like the NT User Manager).

I'm not an expert with Samba internals, but machine accounts are 
necessary for every NT-derived server (NT, 2000, XP, 2003) in your 
domain. The Unix machine accounts (corresponding to the entries in 
your passdb) consist of the computer name and are followed by a 
$-sign.

Harald
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQFBN76Opy/Gjo6hsHYRAiGHAKCcAiU5CYlgEbHQIoGYBHKosHUPegCdG/yr
waSWfjYpC6eQBIfhlc1Q6Mw=
=m4B/
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] ACL on 3.0.6 ADS

2004-09-02 Thread Emir Faisal
hi,
I am trying to run a 3.0.6 on ADS network with
--with-acl-support enabled on configure time. I also
compiled the linux kernel 2.4.25 witch acl patch from
http://acl.bestbits.at/.

Samba shares is visible from the network and
vice-versa.

BUT, I can't change the ACL on samba shared files.
I've read the HOWTO to change file permission from:

1. Remote Computer management mmc
Top level share on Share Permission and Security,
failed with error Changes cannot be saved. Access is
denied.

2. Windows explorer
top level share, failed with error Unable to save
permission changes on SHARES on machine_name. Access
is denied.
Sub directory, failed with error Unable to save
permission changes on folder_name. Access is denied.

3. Linux Command line
sub directory changes, success from command line
(using setfacl and chacl) but the changes is not
visible from windows explorer.

the acl setting changes from network is done using the
same account specified on smb.conf's [SHARES].

testparam return:
# testparm
Load smb config files from
/opt/samba-3.0.6/lib/smb.conf
Processing section [homes]
Processing section [printers]
Processing section [print$]
Processing section [SHARES]
Loaded services file OK.
'winbind separator = +' might cause problems with
group membership.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

# Global parameters
[global]
unix charset = LOCALE
workgroup = WRKGRP
realm = FQDN.WRKGRP
server string = Samba-3.0.6
security = ADS
password server = nias
username map =
/opt/samba-3.0.6/lib/username_map.conf
use kerberos keytab = Yes
log level = 5
syslog = 0
log file = /var/opt/samba-3.0.6/%m
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192
SO_SNDBUF=8192
preferred master = No
local master = No
domain master = No
wins server = nias
idmap uid = 1-2
idmap gid = 1-2
template primary group = Domain Users
template shell = /bin/bash
winbind separator = +
winbind cache time = 1
winbind use default domain = Yes
winbind nested groups = Yes

[homes]
comment = Home directories on Linux
path = /home/%D/%U
valid users = %S
read only = No
browseable = No

[printers]
comment = Samba-Linux print spool
path = /var/spool/samba
guest ok = Yes
printable = Yes
browseable = No

[print$]
comment = Printer drivers
path = /var/opt/samba-3.0.6/lib/drivers
admin users = root, Administrator
write list = root

[SHARES]
comment = Shared directory in Linux
path = /SHARES
admin users = EmirF
read only = No
guest ok = Yes
#

How to put samba to work with Linux ACL's ?

regards,
EF

=
rgrds,
EF



___
Do you Yahoo!?
Win 1 of 4,000 free domain names from Yahoo! Enter now.
http://promotions.yahoo.com/goldrush
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba Issues

2004-09-02 Thread Caylan Van Larson
Looks like the samba developers are forcing ldap users to use a new 
attribute list.

Old (our current):
ntPassword, lmPassword
New:
sambaNtPassword, sambaLmPassword
The 3.0.6 release was a bugfix only, no exploits.  I'm going to revert 
to 3.0.5 and up the priority on LDAP just a tad.  I'll modify the 
update script to ignore these samba ones for now...

Caylan Van Larson
Systems Administrator
Aerospace College, UND
[EMAIL PROTECTED]
701-777-2322
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba 3.0.6 error

2004-09-02 Thread Wisu
Hi all

I've install the latest samba 3.0.6 on a Suse 9.1 (rpm installation)
and there seems to be a problem starting the nmb service

this is what happens when i try to join the domain
---
qjktsmb:/ # net rpc join -U Administrator%mypa555

Unable to find a suitable server

Unable to find a suitable server
---
any ideas or pointers will be appeciated, thanks

Wisu
ps. I'm following the samba by example documentation




my nmb log --

[2004/09/03 10:09:32, 0] nmbd/nmbd.c:main(664)
  Netbios nameserver version 3.0.6-3.1-SUSE started.
  Copyright Andrew Tridgell and the Samba Team 1994-2004
[2004/09/03 10:09:32, 0] nmbd/asyncdns.c:start_async_dns(149)
  started asyncdns process 1360
[2004/09/03 10:09:32, 0] lib/fault.c:fault_report(36)
  ===
[2004/09/03 10:09:32, 0] lib/fault.c:fault_report(37)
  INTERNAL ERROR: Signal 11 in pid 1359 (3.0.6-3.1-SUSE)
  Please read the appendix Bugs of the Samba HOWTO collection
[2004/09/03 10:09:32, 0] lib/fault.c:fault_report(39)
  ===
[2004/09/03 10:09:32, 0] lib/util.c:smb_panic2(1385)
  PANIC: internal error
[2004/09/03 10:09:32, 0] lib/util.c:smb_panic2(1393)
  BACKTRACE: 12 stack frames:
   #0 /usr/sbin/nmbd(smb_panic2+0x1ec) [0x80d3c05]
   #1 /usr/sbin/nmbd(smb_panic+0x25) [0x80d3a13]
   #2 /usr/sbin/nmbd [0x80bf627]
   #3 /usr/sbin/nmbd [0x80bf69d]
   #4 [0xe420]
   #5 /usr/sbin/nmbd(wins_process_name_registration_request+0x773)
[0x807a55f]
   #6 /usr/sbin/nmbd [0x8071fa2]
   #7 /usr/sbin/nmbd(run_packet_queue+0x69) [0x807229f]
   #8 /usr/sbin/nmbd [0x8060dec]
   #9 /usr/sbin/nmbd(main+0x7bc) [0x806185c]
   #10 /lib/tls/libc.so.6(__libc_start_main+0xe0) [0x4024c500]
   #11 /usr/sbin/nmbd [0x805fa41]


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] smbpasswd problems with RedHat 9.0

2004-09-02 Thread Steve Strong
This is really hot.

I manage a lab of 25 dual boot computers in the school where I teach,
running fedora and (cough) win2k. Last year all went very well for the
Windows users in my lab, but this year every time the users attempt to
change their samba passwords using smbpasswd they get this error
message:

 console dialog for a user trying to change their samba password
will logged on to the server -

[EMAIL PROTECTED] aford]$ smbpasswd
Old SMB password:
New SMB password:
Retype new SMB password:
machine 127.0.0.1 rejected the session setup. Error was :
NT_STATUS_LOGON_FAILURE.
Failed to change password for aford
[EMAIL PROTECTED] aford]$

- end of dialog -

Any help would be greatly appreciated, since the other teacher using the
lab is unable to teach... OUCH!

steve
-- 
Steve Strong
Math and Computer Science
Washington High School
2205 Forest Dr. SE
Cedar Rapids, IA   5243
email:[EMAIL PROTECTED]
web site: http://crwash.org
phone: 319-558-4685

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Issues

2004-09-02 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Caylan Van Larson wrote:
| Looks like the samba developers are forcing ldap users to use
| a new  attribute list.
Nope.  See the ldapsam_compat passdb backend option in the
documentation.  But migration to the new schema is recommended
when you can.(we shipped conversion scripts since the
first 3.0.0 release).

cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFBN+aOIR7qMdg1EfYRAjAbAKDtxhwYv4GESwffPCppzEw3w+xl0ACfZMb1
NIQqW97q4mx/7KBk+PopWhs=
=pi3l
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Slow access when opening shares

2004-09-02 Thread josh dickens
Hey,
 
I have slow access when I first open shares. If I reboot my XP box and then
go to access a share, it takes a good 10 seconds for files to come up, even
after I've typed in my username and password. Once accessed it runs fine and
is fast. But, if I don't access it for 30 minutes, when I access it again it
sits for like 10 good seconds before it does anything. This is very
annoying.
 
I also have a Mac running OSX 10.3.5, when accessing the samba shares from
the Mac it's fine, there's no slowdown whatsoever. It asks me for username
and password, then just speeds right along.
 
Samba is the only software installed on this BSD system. It has a static ip
of 10.0.0.100. 
 
System: Freebsd 4.10, Duron 900mhz, 512 RAM, 120 gig hd
Version: samba-2.2.8a_2 (Installed via FreeBSD Ports)
 
smb.conf:
 
[global]
 
workgroup = WORKGROUP
server string = Server
netbios name = Server
#hosts allow = 10.0.0. 127.
load printers = no
guest account = me
log file = /var/log/samba/log.%m
max log size = 1000
security = share
encrypt passwords = no
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
#local master = yes
#os level = 255
#domain master = yes
#preferred master = yes
#wins support = yes
dns proxy = no
 
[share]
comment = my files
path = /my path
writeable = Yes
guest ok = yes

tcpdump when first accessing the share from XP after rebooting the machine,
this is where it takes a good 10 to 15 seconds for the shares to come up:
 
22:39:51.970463 10.0.0.100.2760  ns.speedfactory.net.domain: 12076+ PTR?
100.0.0.10.in-addr.arpa. (41)

22:39:52.037703 ns.speedfactory.net.domain  10.0.0.100.2760: 12076
NXDomain* 0/0/0 (41)

22:39:52.038135 10.0.0.100.3434  ns.speedfactory.net.domain: 12077+ PTR?
40.0.0.10.in-addr.arpa. (40)

22:39:52.083767 ns.speedfactory.net.domain  10.0.0.100.3434: 12077
NXDomain* 0/0/0 (40)

22:39:53.079804 10.0.0.100.1879  ns.speedfactory.net.domain: 12078+ PTR?
138.208.23.66.in-addr.arpa. (44)

22:39:53.108466 ns.speedfactory.net.domain  10.0.0.100.1879: 12078* 1/0/0
(77)

22:39:53.309215 10.0.0.50.1028  10.0.0.100.netbios-ssn: P
3444221629:3444221792(163) ack 300534793 win 64162 NBT Packet (DF)

22:39:53.310604 10.0.0.100.netbios-ssn  10.0.0.50.1028: P 1:94(93) ack 163
win 58400 NBT Packet (DF) [tos 0x10] 

22:39:53.310839 10.0.0.50.1028  10.0.0.100.netbios-ssn: P 163:258(95) ack
94 win 64069 NBT Packet (DF)

22:39:53.311021 10.0.0.100.netbios-ssn  10.0.0.50.1028: P 94:201(107) ack
258 win 58400 NBT Packet (DF) [tos 0x10] 

22:39:53.311304 10.0.0.50.1028  10.0.0.100.netbios-ssn: P 258:398(140) ack
201 win 63962 NBT Packet (DF)

22:39:53.311434 10.0.0.100.netbios-ssn  10.0.0.50.1028: P 201:252(51) ack
398 win 58400 NBT Packet (DF) [tos 0x10] 

22:39:53.311646 10.0.0.50.1028  10.0.0.100.netbios-ssn: P 398:461(63) ack
252 win 63911 NBT Packet (DF)

22:39:53.311689 10.0.0.100.netbios-ssn  10.0.0.50.1028: P 252:383(131) ack
461 win 58400 NBT Packet (DF) [tos 0x10] 

22:39:53.311933 10.0.0.50.1028  10.0.0.100.netbios-ssn: P 461:629(168) ack
383 win 63780 NBT Packet (DF)

22:39:53.312142 10.0.0.100.netbios-ssn  10.0.0.50.1028: P 383:835(452) ack
629 win 58400 NBT Packet (DF) [tos 0x10] 

22:39:53.312461 10.0.0.50.1028  10.0.0.100.netbios-ssn: P 629:674(45) ack
835 win 63328 NBT Packet (DF)

22:39:53.312538 10.0.0.100.netbios-ssn  10.0.0.50.1028: P 835:874(39) ack
674 win 58400 NBT Packet (DF) [tos 0x10] 

22:39:53.493916 10.0.0.50.1028  10.0.0.100.netbios-ssn: . ack 874 win 63289
(DF)

704094 (DF)

22:39:57.858192 10.0.0.50.1028  10.0.0.100.netbios-ssn: P 674:769(95) ack
874 win 63289 NBT Packet (DF)

22:39:57.858471 10.0.0.100.netbios-ssn  10.0.0.50.1028: P 874:981(107) ack
769 win 58400 NBT Packet (DF) [tos 0x10] 

22:39:57.858728 10.0.0.50.1028  10.0.0.100.netbios-ssn: P 769:814(45) ack
981 win 63182 NBT Packet (DF)

22:39:57.858805 10.0.0.100.netbios-ssn  10.0.0.50.1028: P 981:1020(39) ack
814 win 58400 NBT Packet (DF) [tos 0x10] 

22:39:57.859007 10.0.0.50.1028  10.0.0.100.netbios-ssn: P 814:909(95) ack
1020 win 63143 NBT Packet (DF)

22:39:57.859051 10.0.0.100.netbios-ssn  10.0.0.50.1028: P 1020:1127(107)
ack 909 win 58400 NBT Packet (DF) [tos 0x10] 

22:39:57.859310 10.0.0.50.1028  10.0.0.100.netbios-ssn: P 909:1049(140) ack
1127 win 63036 NBT Packet (DF)

22:39:57.859431 10.0.0.100.netbios-ssn  10.0.0.50.1028: P 1127:1178(51) ack
1049 win 58400 NBT Packet (DF) [tos 0x10] 

22:39:57.859651 10.0.0.50.1028  10.0.0.100.netbios-ssn: P 1049:1112(63) ack
1178 win 62985 NBT Packet (DF)

22:39:57.859697 10.0.0.100.netbios-ssn  10.0.0.50.1028: P 1178:1309(131)
ack 1112 win 58400 NBT Packet (DF) [tos 0x10] 

22:39:57.859943 10.0.0.50.1028  10.0.0.100.netbios-ssn: P 1112:1280(168)
ack 1309 win 62854 NBT Packet (DF)

22:39:57.860162 10.0.0.100.netbios-ssn  10.0.0.50.1028: P 1309:1761(452)
ack 1280 win 58400 NBT Packet (DF) [tos 0x10] 

22:39:57.860482 10.0.0.50.1028  10.0.0.100.netbios-ssn: P 1280:1325(45) ack
1761 win 64240 NBT Packet (DF)

22:39:57.860559 10.0.0.100.netbios-ssn  10.0.0.50.1028: P 

svn commit: lorikeet r38 - in trunk/ethereal: .

2004-09-02 Thread tpot
Author: tpot
Date: 2004-09-02 06:43:42 + (Thu, 02 Sep 2004)
New Revision: 38

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=lorikeetpath=/trunk/etherealrev=38nolog=1

Log:
Add some notes.

Modified:
   trunk/ethereal/README


Changeset:
Modified: trunk/ethereal/README
===
--- trunk/ethereal/README   2004-09-02 04:06:57 UTC (rev 37)
+++ trunk/ethereal/README   2004-09-02 06:43:42 UTC (rev 38)
@@ -1,7 +1,7 @@
 Build instructions for ethereal pidl parsers
 
 
-To build the parser:
+To build the parsers:
 
   1) Apply the ethereal-pidl.patch to introduce the new plugin into
  the ethereal build system.
@@ -20,6 +20,7 @@
 ethereal program.  This speeds up development muchly as the linking
 for ethereal and tethereal does not need to be performed.
 
+
 Installation:
 
   1) Copy the pidl.so file from the .libs directory (ha ha - libtool)
@@ -29,4 +30,12 @@
   2) When you restart ethereal the plugin should be loaded.  Any
  dynamic linking errors will be displayed on standard error.
 
+
+Other notes:
+
+  - The plugin protocol names are currently 'pidl_foo', where foo is
+the name of the idl file, e.g 'pidl_samr'.  Ethereal can't handle
+duplicate protocol names.
+
+
 Enjoy!



svn commit: samba r2180 - in branches/SAMBA_4_0/source/librpc: ndr rpc

2004-09-02 Thread tridge
Author: tridge
Date: 2004-09-02 10:45:58 + (Thu, 02 Sep 2004)
New Revision: 2180

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/source/librpcrev=2180nolog=1

Log:
added RPC flags padcheck which enables checking of all received pad
bytes to make sure they are zero. Non-zero values usually indicate one
of two things:

 - the server is leaking data through sending uninitialised memory
 - we have mistaken a real field in the IDL for padding

to differentiate between the two you really need to run with
print,padcheck and look carefully at whether the non-zero pad bytes
are random or appear to be deliberate.






Modified:
   branches/SAMBA_4_0/source/librpc/ndr/libndr.h
   branches/SAMBA_4_0/source/librpc/ndr/ndr_basic.c
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc.c
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc.h
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc_util.c


Changeset:
Sorry, the patch is too large (255 lines) to include; please use WebSVN to see it!
WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/source/librpcrev=2180nolog=1


svn commit: samba r2181 - in branches/SAMBA_4_0/source/torture/rpc: .

2004-09-02 Thread tridge
Author: tridge
Date: 2004-09-02 11:06:23 + (Thu, 02 Sep 2004)
New Revision: 2181

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/source/torture/rpcrev=2181nolog=1

Log:
an rpc async test on the netlogon pipe






Modified:
   branches/SAMBA_4_0/source/torture/rpc/netlogon.c


Changeset:
Modified: branches/SAMBA_4_0/source/torture/rpc/netlogon.c
===
--- branches/SAMBA_4_0/source/torture/rpc/netlogon.c2004-09-02 10:45:58 UTC (rev 
2180)
+++ branches/SAMBA_4_0/source/torture/rpc/netlogon.c2004-09-02 11:06:23 UTC (rev 
2181)
@@ -1625,6 +1625,73 @@
 }
 
 
+static BOOL test_GetDomainInfo_async(struct dcerpc_pipe *p, TALLOC_CTX *mem_ctx)
+{
+   NTSTATUS status;
+   struct netr_LogonGetDomainInfo r;
+   struct netr_DomainQuery1 q1;
+   struct netr_Authenticator a;
+#define ASYNC_COUNT 100
+   struct creds_CredentialState creds;
+   struct creds_CredentialState creds_async[ASYNC_COUNT];
+   struct rpc_request *req[ASYNC_COUNT];
+   int i;
+
+   if (!test_SetupCredentials3(p, mem_ctx, NETLOGON_NEG_AUTH2_ADS_FLAGS, creds)) 
{
+   return False;
+   }
+
+   ZERO_STRUCT(r);
+   r.in.server_name = talloc_asprintf(mem_ctx, %s, dcerpc_server_name(p));
+   r.in.computer_name = TEST_MACHINE_NAME;
+   r.in.unknown1 = 512;
+   r.in.level = 1;
+   r.in.credential = a;
+   r.out.credential = a;
+
+   r.in.i1[0] = 0;
+   r.in.i1[1] = 0;
+
+   r.in.query.query1 = q1;
+   ZERO_STRUCT(q1);
+   
+   /* this should really be the fully qualified name */
+   q1.workstation_domain = TEST_MACHINE_NAME;
+   q1.workstation_site = Default-First-Site-Name;
+   q1.blob2.length = 0;
+   q1.blob2.size = 0;
+   q1.blob2.data = NULL;
+   q1.product.string = product string;
+
+   printf(Testing netr_LogonGetDomainInfo - async count %d\n, ASYNC_COUNT);
+
+   for (i=0;iASYNC_COUNT;i++) {
+   creds_client_authenticator(creds, a);
+
+   creds_async[i] = creds;
+   req[i] = dcerpc_netr_LogonGetDomainInfo_send(p, mem_ctx, r);
+   }
+
+   for (i=0;iASYNC_COUNT;i++) {
+   status = dcerpc_ndr_request_recv(req[i]);
+   if (!NT_STATUS_IS_OK(status) || !NT_STATUS_IS_OK(r.out.result)) {
+   printf(netr_LogonGetDomainInfo_async(%d) - %s/%s\n, 
+  i, nt_errstr(status), nt_errstr(r.out.result));
+   return False;
+   }
+
+   if (!creds_client_check(creds_async[i], a.cred)) {
+   printf(Credential chaining failed at async %d\n, i);
+   return False;
+   }
+   }
+
+   printf(Testing netr_LogonGetDomainInfo - async count %d OK\n, ASYNC_COUNT);
+
+   return True;
+}
+
+
 BOOL torture_rpc_netlogon(int dummy)
 {
 NTSTATUS status;
@@ -1714,6 +1781,10 @@
ret = False;
}
 
+   if (!test_GetDomainInfo_async(p, mem_ctx)) {
+   ret = False;
+   }
+
talloc_destroy(mem_ctx);
 
torture_rpc_close(p);



svn commit: samba r2182 - in branches/SAMBA_4_0/source/torture: . rpc

2004-09-02 Thread tridge
Author: tridge
Date: 2004-09-02 11:26:58 + (Thu, 02 Sep 2004)
New Revision: 2182

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/source/torturerev=2182nolog=1

Log:
force the torture test domain join to happen on SMB to prevent the
LSAKEY problem holding up other tests

Modified:
   branches/SAMBA_4_0/source/torture/rpc/testjoin.c
   branches/SAMBA_4_0/source/torture/torture.c


Changeset:
Modified: branches/SAMBA_4_0/source/torture/rpc/testjoin.c
===
--- branches/SAMBA_4_0/source/torture/rpc/testjoin.c2004-09-02 11:06:23 UTC (rev 
2181)
+++ branches/SAMBA_4_0/source/torture/rpc/testjoin.c2004-09-02 11:26:58 UTC (rev 
2182)
@@ -123,12 +123,12 @@
 
join-mem_ctx = mem_ctx;
 
-   printf(Connecting to SAMR\n);
+   printf(Connecting to SAMR (forced ncacn_np)\n);
 
-   status = torture_rpc_connection(join-p, 
-   DCERPC_SAMR_NAME,
-   DCERPC_SAMR_UUID,
-   DCERPC_SAMR_VERSION);
+   status = torture_rpc_connection_smb(join-p, 
+   DCERPC_SAMR_NAME,
+   DCERPC_SAMR_UUID,
+   DCERPC_SAMR_VERSION);
if (!NT_STATUS_IS_OK(status)) {
goto failed;
}

Modified: branches/SAMBA_4_0/source/torture/torture.c
===
--- branches/SAMBA_4_0/source/torture/torture.c 2004-09-02 11:06:23 UTC (rev 2181)
+++ branches/SAMBA_4_0/source/torture/torture.c 2004-09-02 11:26:58 UTC (rev 2182)
@@ -136,7 +136,7 @@
 }
 
 
-/* open a rpc connection to a named pipe */
+/* open a rpc connection to the chosen binding string */
 NTSTATUS torture_rpc_connection(struct dcerpc_pipe **p, 
const char *pipe_name,
const char *pipe_uuid, 
@@ -158,6 +158,39 @@
 return status;
 }
 
+/* open a rpc connection to a named pipe */
+NTSTATUS torture_rpc_connection_smb(struct dcerpc_pipe **p, 
+   const char *pipe_name,
+   const char *pipe_uuid, 
+   uint32_t pipe_version)
+{
+NTSTATUS status;
+   const char *binding = lp_parm_string(-1, torture, binding);
+   struct dcerpc_binding b;
+   TALLOC_CTX *mem_ctx = talloc_init(torture_rpc_connection_smb);
+
+   if (!binding) {
+   printf(You must specify a ncacn binding string\n);
+   return NT_STATUS_INVALID_PARAMETER;
+   }
+
+   status = dcerpc_parse_binding(mem_ctx, binding, b);
+   if (!NT_STATUS_IS_OK(status)) {
+   DEBUG(0,(Failed to parse dcerpc binding '%s'\n, binding));
+   talloc_destroy(mem_ctx);
+   return status;
+   }
+
+   b.transport = NCACN_NP;
+
+   status = dcerpc_pipe_connect_b(p, b, pipe_uuid, pipe_version,
+  lp_parm_string(-1, torture, userdomain), 
+  lp_parm_string(-1, torture, username),
+  lp_parm_string(-1, torture, password));
+ 
+return status;
+}
+
 /* close a rpc connection to a named pipe */
 NTSTATUS torture_rpc_close(struct dcerpc_pipe *p)
 {



svn commit: lorikeet r39 - in trunk/ethereal/plugins/pidl: .

2004-09-02 Thread tpot
Author: tpot
Date: 2004-09-02 11:42:20 + (Thu, 02 Sep 2004)
New Revision: 39

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=lorikeetpath=/trunk/ethereal/plugins/pidlrev=39nolog=1

Log:
Remove some debugging stuff.

Modified:
   trunk/ethereal/plugins/pidl/eparser.c


Changeset:
Modified: trunk/ethereal/plugins/pidl/eparser.c
===
--- trunk/ethereal/plugins/pidl/eparser.c   2004-09-02 06:43:42 UTC (rev 38)
+++ trunk/ethereal/plugins/pidl/eparser.c   2004-09-02 11:42:20 UTC (rev 39)
@@ -149,10 +149,6 @@
ndr_pull_uint32(ndr, tree, hf_string4_offset, ofs);
ndr_pull_uint32(ndr, tree, hf_string4_len2, len2);
 
-   g_warning(%d: len = %d, ndr-pinfo-fd-num, len1);
-   g_warning(%d: offset = %d, ndr-pinfo-fd-num, ofs);
-   g_warning(%d: len2 = %d, ndr-pinfo-fd-num, len2);
-
ndr-offset += len2;
break;
 
@@ -228,13 +224,7 @@
  ndr-pinfo-fd-num, 
  ndr-flags  LIBNDR_STRING_FLAGS);
 
-#if 0
-
-   return ndr_pull_error(ndr, NDR_ERR_STRING, Bad string flags 0x%x\n,
- ndr-flags  LIBNDR_STRING_FLAGS);
-
-#endif
-
+   break;
}   
 }
 



svn commit: samba r2183 - in branches/SAMBA_4_0/source/build/pidl: .

2004-09-02 Thread tpot
Author: tpot
Date: 2004-09-02 11:54:13 + (Thu, 02 Sep 2004)
New Revision: 2183

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/source/build/pidlrev=2183nolog=1

Log:
Tidy up naming of ethereal fields.  The field names are taken from the
structure elements with underscores replaced with spaces and words
capitalised.

Fix small buglet where we confuse the name of the interface with the name
of the idl file.

Just discovered security descriptors don't display property anymore.  )-:

Modified:
   branches/SAMBA_4_0/source/build/pidl/eparser.pm


Changeset:
Modified: branches/SAMBA_4_0/source/build/pidl/eparser.pm
===
--- branches/SAMBA_4_0/source/build/pidl/eparser.pm 2004-09-02 11:26:58 UTC (rev 
2182)
+++ branches/SAMBA_4_0/source/build/pidl/eparser.pm 2004-09-02 11:54:13 UTC (rev 
2183)
@@ -292,9 +292,9 @@
}
 
if (util::is_scalar_type($e-{TYPE})) {
-   pidl \t\tndr_pull_array_$e-{TYPE}(ndr, $ndr_flags, tree, 
\$e-{NAME}\, hf_$e-{NAME}_$e-{TYPE}, $var_prefix$e-{NAME}, $size);\n;
+   pidl \t\tndr_pull_array_$e-{TYPE}(ndr, $ndr_flags, tree, \ . 
field2name($e-{NAME}) . \, hf_$e-{NAME}_$e-{TYPE}, $var_prefix$e-{NAME}, 
$size);\n;
} else {
-   pidl \t\tndr_pull_array(ndr, $ndr_flags, tree, \$e-{NAME}\, (void 
**)$var_prefix$e-{NAME}, sizeof($var_prefix$e-{NAME}\[0]), $size, 
(ndr_pull_flags_fn_t)ndr_pull_$e-{TYPE});\n;
+   pidl \t\tndr_pull_array(ndr, $ndr_flags, tree, \ . 
field2name($e-{NAME}) . \, (void **)$var_prefix$e-{NAME}, 
sizeof($var_prefix$e-{NAME}\[0]), $size, 
(ndr_pull_flags_fn_t)ndr_pull_$e-{TYPE});\n;
}
 
pidl \t}\n;
@@ -379,7 +379,7 @@
} elsif (util::is_builtin_type($e-{TYPE})) {
pidl \tndr_pull_$e-{TYPE}(ndr, tree, hf_$e-{NAME}_$e-{TYPE}, 
$cprefix$var_prefix$e-{NAME});\n;
} else {
-   pidl \tndr_pull_$e-{TYPE}(ndr, $ndr_flags, get_subtree(tree, 
\$e-{NAME}\, ndr, ett_$e-{TYPE}), $cprefix$var_prefix$e-{NAME});\n;
+   pidl \tndr_pull_$e-{TYPE}(ndr, $ndr_flags, get_subtree(tree, \ . 
field2name($e-{NAME}) . \, ndr, ett_$e-{TYPE}), $cprefix$var_prefix$e-{NAME});\n;
}
 
end_flags($e);
@@ -430,9 +430,9 @@
} elsif (util::is_builtin_type($e-{TYPE})) {
pidl \t\tndr_pull_$e-{TYPE}(ndr, tree, hf_$e-{NAME}_$e-{TYPE}, 
$cprefix$var_prefix$e-{NAME});\n;
} elsif ($e-{POINTERS}) {
-   pidl \t\tndr_pull_$e-{TYPE}(ndr, NDR_SCALARS|NDR_BUFFERS, 
get_subtree(tree, \$e-{NAME}\, ndr, ett_$e-{TYPE}), 
$cprefix$var_prefix$e-{NAME});\n;
+   pidl \t\tndr_pull_$e-{TYPE}(ndr, NDR_SCALARS|NDR_BUFFERS, 
get_subtree(tree, \ . field2name($e-{NAME}) . \, ndr, ett_$e-{TYPE}), 
$cprefix$var_prefix$e-{NAME});\n;
} else {
-   pidl \t\tndr_pull_$e-{TYPE}(ndr, $ndr_flags, get_subtree(tree, 
\$e-{NAME}\, ndr, ett_$e-{TYPE}), $cprefix$var_prefix$e-{NAME});\n;
+   pidl \t\tndr_pull_$e-{TYPE}(ndr, $ndr_flags, get_subtree(tree, \ . 
field2name($e-{NAME}) . \, ndr, ett_$e-{TYPE}), $cprefix$var_prefix$e-{NAME});\n;
}
 
if (util::need_wire_pointer($e)) {
@@ -831,6 +831,19 @@
 return BASE_NONE;
 }
 
+# Convert a IDL structure field name (e.g access_mask) to a prettier
+# string like 'Access Mask'.
+
+sub field2name($)
+{
+my($field) = shift;
+
+$field =~ s/_/ /g; # Replace underscores with spaces
+$field =~ s/(\w+)/\u\L$1/g;# Capitalise each word
+
+return $field;
+}
+
 sub NeededFunction($)
 {
my $fn = shift;
@@ -841,7 +854,7 @@
 
if (util::is_scalar_type($e-{TYPE})) {
$needed{hf_$e-{NAME}_$e-{TYPE}} = {
-   'name' = $e-{NAME},
+   'name' = field2name($e-{NAME}),
'type' = $e-{TYPE},
'ft'   = type2ft($e-{TYPE}),
'base' = type2base($e-{TYPE})
@@ -871,7 +884,7 @@
if (util::is_scalar_type($e-{TYPE})) {

$needed{hf_$e-{NAME}_$e-{TYPE}} = {
-   'name' = $e-{NAME},
+   'name' = field2name($e-{NAME}),
'type' = $e-{TYPE},
'ft'   = type2ft($e-{TYPE}),
'base' = type2base($e-{TYPE})
@@ -944,8 +957,6 @@
 
pidl /* parser auto-generated by pidl */\n\n;
 
-   pidl #include \ndr_$module.h\\n\n;
-
foreach my $x (@{$idl}) {
if ($x-{TYPE} eq INTERFACE) { 
foreach my $d (@{$x-{DATA}}) {



svn commit: samba r2184 - in branches/SAMBA_4_0/source: libcli/raw librpc/rpc

2004-09-02 Thread tridge
Author: tridge
Date: 2004-09-02 12:02:28 + (Thu, 02 Sep 2004)
New Revision: 2184

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=2184nolog=1

Log:
use the smb.conf socket options for client code too

Modified:
   branches/SAMBA_4_0/source/libcli/raw/clisocket.c
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc_tcp.c


Changeset:
Modified: branches/SAMBA_4_0/source/libcli/raw/clisocket.c
===
--- branches/SAMBA_4_0/source/libcli/raw/clisocket.c2004-09-02 11:54:13 UTC (rev 
2183)
+++ branches/SAMBA_4_0/source/libcli/raw/clisocket.c2004-09-02 12:02:28 UTC (rev 
2184)
@@ -79,6 +79,7 @@
}
 
set_blocking(sock-fd, False);
+   set_socket_options(sock-fd, lp_socket_options());
 
return True;
 }

Modified: branches/SAMBA_4_0/source/librpc/rpc/dcerpc_tcp.c
===
--- branches/SAMBA_4_0/source/librpc/rpc/dcerpc_tcp.c   2004-09-02 11:54:13 UTC (rev 
2183)
+++ branches/SAMBA_4_0/source/librpc/rpc/dcerpc_tcp.c   2004-09-02 12:02:28 UTC (rev 
2184)
@@ -298,6 +298,8 @@
return NT_STATUS_PORT_CONNECTION_REFUSED;
}
 
+   set_socket_options(fd, lp_socket_options());
+
set_blocking(fd, False);
 
 if (!(*p = dcerpc_pipe_init())) {



svn commit: samba r2185 - in branches/SAMBA_4_0/source: librpc/rpc torture/rpc

2004-09-02 Thread tridge
Author: tridge
Date: 2004-09-02 12:03:16 + (Thu, 02 Sep 2004)
New Revision: 2185

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=2185nolog=1

Log:
add a callback function to the dcerpc async API

also add a demonstration of its use in the netlogon async example


Modified:
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc.c
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc.h
   branches/SAMBA_4_0/source/torture/rpc/netlogon.c


Changeset:
Modified: branches/SAMBA_4_0/source/librpc/rpc/dcerpc.c
===
--- branches/SAMBA_4_0/source/librpc/rpc/dcerpc.c   2004-09-02 12:02:28 UTC (rev 
2184)
+++ branches/SAMBA_4_0/source/librpc/rpc/dcerpc.c   2004-09-02 12:03:16 UTC (rev 
2185)
@@ -631,6 +631,9 @@
req-state = RPC_REQUEST_DONE;
req-status = status;
DLIST_REMOVE(p-pending, req);
+   if (req-async.callback) {
+   req-async.callback(req);
+   }
}
return;
}
@@ -655,6 +658,9 @@
req-status = status;
req-state = RPC_REQUEST_DONE;
DLIST_REMOVE(p-pending, req);
+   if (req-async.callback) {
+   req-async.callback(req);
+   }
return;
}
 
@@ -664,6 +670,9 @@
req-status = NT_STATUS_NET_WRITE_FAULT;
req-state = RPC_REQUEST_DONE;
DLIST_REMOVE(p-pending, req);
+   if (req-async.callback) {
+   req-async.callback(req);
+   }
return;
}
 
@@ -674,6 +683,9 @@
req-status = NT_STATUS_NET_WRITE_FAULT;
req-state = RPC_REQUEST_DONE;
DLIST_REMOVE(p-pending, req);
+   if (req-async.callback) {
+   req-async.callback(req);
+   }
return;
}
 
@@ -686,6 +698,9 @@
req-status = NT_STATUS_NO_MEMORY;
req-state = RPC_REQUEST_DONE;
DLIST_REMOVE(p-pending, req);
+   if (req-async.callback) {
+   req-async.callback(req);
+   }
return;
}
memcpy(req-payload.data+req-payload.length, 
@@ -707,6 +722,10 @@
} else {
req-flags = ~DCERPC_PULL_BIGENDIAN;
}
+
+   if (req-async.callback) {
+   req-async.callback(req);
+   }
 }
 
 
@@ -737,6 +756,7 @@
req-payload = data_blob(NULL, 0);
req-flags = 0;
req-fault_code = 0;
+   req-async.callback = NULL;
 
init_dcerpc_hdr(p, pkt);
 

Modified: branches/SAMBA_4_0/source/librpc/rpc/dcerpc.h
===
--- branches/SAMBA_4_0/source/librpc/rpc/dcerpc.h   2004-09-02 12:02:28 UTC (rev 
2184)
+++ branches/SAMBA_4_0/source/librpc/rpc/dcerpc.h   2004-09-02 12:03:16 UTC (rev 
2185)
@@ -166,4 +166,9 @@
size_t struct_size;
TALLOC_CTX *mem_ctx;
} ndr;
+
+   struct {
+   void (*callback)(struct rpc_request *);
+   void *private;
+   } async;
 };

Modified: branches/SAMBA_4_0/source/torture/rpc/netlogon.c
===
--- branches/SAMBA_4_0/source/torture/rpc/netlogon.c2004-09-02 12:02:28 UTC (rev 
2184)
+++ branches/SAMBA_4_0/source/torture/rpc/netlogon.c2004-09-02 12:03:16 UTC (rev 
2185)
@@ -1625,6 +1625,14 @@
 }
 
 
+static void async_callback(struct rpc_request *req)
+{
+   int *counter = req-async.private;
+   if (NT_STATUS_IS_OK(req-status)) {
+   (*counter)++;
+   }
+}
+
 static BOOL test_GetDomainInfo_async(struct dcerpc_pipe *p, TALLOC_CTX *mem_ctx)
 {
NTSTATUS status;
@@ -1636,6 +1644,7 @@
struct creds_CredentialState creds_async[ASYNC_COUNT];
struct rpc_request *req[ASYNC_COUNT];
int i;
+   int async_counter = 0;
 
if (!test_SetupCredentials3(p, mem_ctx, NETLOGON_NEG_AUTH2_ADS_FLAGS, creds)) 
{
return False;
@@ -1670,6 +1679,13 @@
 
creds_async[i] = creds;
req[i] = dcerpc_netr_LogonGetDomainInfo_send(p, mem_ctx, r);
+
+   req[i]-async.callback = async_callback;
+   req[i]-async.private = async_counter;
+
+   /* even with this flush per request a w2k3 server seems to 
+  clag with multiple outstanding requests. bleergh. */
+   event_loop_once(dcerpc_event_context(p));
}
 
for (i=0;iASYNC_COUNT;i++) {
@@ -1677,18 +1693,18 @@
if (!NT_STATUS_IS_OK(status) || !NT_STATUS_IS_OK(r.out.result)) {
   

svn commit: samba r2186 - in branches/SAMBA_4_0/source/torture/rpc: .

2004-09-02 Thread tridge
Author: tridge
Date: 2004-09-02 12:54:48 + (Thu, 02 Sep 2004)
New Revision: 2186

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/source/torture/rpcrev=2186nolog=1

Log:
setting [ref] output pointers in dcerpc calls is pointless. Removed it
for test_LookupPrivDisplayName

Modified:
   branches/SAMBA_4_0/source/torture/rpc/lsa.c


Changeset:
Modified: branches/SAMBA_4_0/source/torture/rpc/lsa.c
===
--- branches/SAMBA_4_0/source/torture/rpc/lsa.c 2004-09-02 12:03:16 UTC (rev 2185)
+++ branches/SAMBA_4_0/source/torture/rpc/lsa.c 2004-09-02 12:54:48 UTC (rev 2186)
@@ -641,18 +641,14 @@
struct lsa_Name *priv_name)
 {
struct lsa_LookupPrivDisplayName r;
-   struct lsa_Name disp_name;
NTSTATUS status;
 
-   ZERO_STRUCT(disp_name);
-   
printf(testing LookupPrivDisplayName(%s)\n, priv_name-name);

r.in.handle = handle;
r.in.name = priv_name;
r.in.unknown = 0;
r.in.unknown2 = 0;
-   r.out.disp_name = disp_name;
 
status = dcerpc_lsa_LookupPrivDisplayName(p, mem_ctx, r);
if (!NT_STATUS_IS_OK(status)) {



svn commit: samba r2187 - in branches/SAMBA_3_0_RELEASE/source/smbd: .

2004-09-02 Thread jerry
Author: jerry
Date: 2004-09-02 14:16:50 + (Thu, 02 Sep 2004)
New Revision: 2187

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_3_0_RELEASE/source/smbdrev=2187nolog=1

Log:
revert merge of r2150 from 3.0
Modified:
   branches/SAMBA_3_0_RELEASE/source/smbd/reply.c


Changeset:
Modified: branches/SAMBA_3_0_RELEASE/source/smbd/reply.c
===
--- branches/SAMBA_3_0_RELEASE/source/smbd/reply.c  2004-09-02 12:54:48 UTC (rev 
2186)
+++ branches/SAMBA_3_0_RELEASE/source/smbd/reply.c  2004-09-02 14:16:50 UTC (rev 
2187)
@@ -97,25 +97,26 @@
d--;
}
s += 3;
-   } else if ((s[0] == '.')  (s[1] == '\0')) {
-   if (s == srcname) {
-   ret = NT_STATUS_OBJECT_NAME_INVALID;
-   break;
-   }
-   *d++ = *s++;
-   } else if ((s[0] == '.')  IS_DIRECTORY_SEP(s[1])) {
+   } else if ((s[0] == '.')  (IS_DIRECTORY_SEP(s[1]) || (s[1] == 
'\0'))) {
+
/*
 * No mb char starts with '.' so we're safe checking the 
directory separator here.
 */
 
-   /* ./ or .\\ fails with a different error depending on 
what is after it... */
+   /* ./ or .\\ fails with a different error depending on 
where it is... */
 
-   if (s[2] == '\0') {
+   if (s == srcname) {
ret = NT_STATUS_OBJECT_NAME_INVALID;
+   break;
} else {
+   if (s[1] != '\0'  s[2] == '\0') {
+   ret = NT_STATUS_INVALID_PARAMETER;
+   break;
+   }
ret = NT_STATUS_OBJECT_PATH_NOT_FOUND;
+   break;
}
-   break;
+   s++;
} else {
if (!(*s  0x80)) {
if (allow_wcard_names) {
@@ -520,6 +521,7 @@
 int reply_chkpth(connection_struct *conn, char *inbuf,char *outbuf, int dum_size, int 
dum_buffsize)
 {
int outsize = 0;
+   int mode;
pstring name;
BOOL ok = False;
BOOL bad_path = False;
@@ -542,6 +544,8 @@
return ERROR_NT(NT_STATUS_OBJECT_PATH_NOT_FOUND);
}
 
+   mode = SVAL(inbuf,smb_vwv0);
+
if (check_name(name,conn)) {
if (VALID_STAT(sbuf) || SMB_VFS_STAT(conn,name,sbuf) == 0)
if (!(ok = S_ISDIR(sbuf.st_mode))) {
@@ -574,8 +578,9 @@
}
 
outsize = set_message(outbuf,0,0,True);
-   DEBUG(3,(chkpth %s mode=%d\n, name, (int)SVAL(inbuf,smb_vwv0)));
 
+   DEBUG(3,(chkpth %s mode=%d\n, name, mode));
+
END_PROFILE(SMBchkpth);
return(outsize);
 }



svn commit: samba r2188 - in branches/SAMBA_3_0/source: .

2004-09-02 Thread jerry
Author: jerry
Date: 2004-09-02 14:18:17 + (Thu, 02 Sep 2004)
New Revision: 2188

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_3_0/sourcerev=2188nolog=1

Log:
adding some initial checks for DragonFly (same as FreeBSD 4.1)
Modified:
   branches/SAMBA_3_0/source/configure.in


Changeset:
Modified: branches/SAMBA_3_0/source/configure.in
===
--- branches/SAMBA_3_0/source/configure.in  2004-09-02 14:16:50 UTC (rev 2187)
+++ branches/SAMBA_3_0/source/configure.in  2004-09-02 14:18:17 UTC (rev 2188)
@@ -480,7 +480,7 @@
*irix*)
AC_DEFINE(SYSV, 1, [Whether to enable System V compatibility])
;;
-   *freebsd*)
+   *freebsd*|*DragonFly*)
AC_DEFINE(FREEBSD, 1, [Whether the host os is FreeBSD])
;;
 #
@@ -1163,7 +1163,8 @@
AC_DEFINE(STAT_ST_BLOCKSIZE,512)
AC_DEFINE(BROKEN_GETGRNAM,1,[Does getgrnam work correctly])
;;
-   *netbsd* | *freebsd*)  BLDSHARED=true
+   *netbsd* | *freebsd* | *DragonFly* )  
+   BLDSHARED=true
LDSHFLAGS=-shared
DYNEXP=-Wl,--export-dynamic
SONAMEFLAG=-Wl,-soname,
@@ -4006,7 +4007,7 @@
fi
 
;;
-   *freebsd*)
+   *freebsd* | *DragonFly* )
AC_CACHE_CHECK([for freebsd sendfile support],samba_cv_HAVE_SENDFILE,[
AC_TRY_LINK([\
 #include sys/types.h



svn commit: samba r2189 - in branches/SAMBA_3_0/examples/LDAP: .

2004-09-02 Thread jerry
Author: jerry
Date: 2004-09-02 15:26:36 + (Thu, 02 Sep 2004)
New Revision: 2189

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_3_0/examples/LDAPrev=2189nolog=1

Log:
adding some comments to the schema file
Modified:
   branches/SAMBA_3_0/examples/LDAP/samba.schema


Changeset:
Modified: branches/SAMBA_3_0/examples/LDAP/samba.schema
===
--- branches/SAMBA_3_0/examples/LDAP/samba.schema   2004-09-02 14:18:17 UTC (rev 
2188)
+++ branches/SAMBA_3_0/examples/LDAP/samba.schema   2004-09-02 15:26:36 UTC (rev 
2189)
@@ -10,6 +10,10 @@
 ## 1.3.6.1.4.1.7165.2.1.x - attributetypes
 ## 1.3.6.1.4.1.7165.2.2.x - objectclasses
 ##
+## Printer support
+## 1.3.6.1.4.1.7165.2.3.1.x - attributetypes
+## 1.3.6.1.4.1.7165.2.3.2.x - objectclasses
+##
 ## - READ THIS WHEN ADDING A NEW ATTRIBUTE OR OBJECT CLASS --
 ##
 ## Run the 'get_next_oid' bash script in this directory to find the 
@@ -30,6 +34,11 @@
 ##
 ## --
 
+# objectIdentifier SambaRoot 1.3.6.1.4.1.7165
+# objectIdentifier Samba3 SambaRoot:2
+# objectIdentifier Samba3Attrib Samba3:1
+# objectIdentifier Samba3ObjectClass Samba3:2
+
 
 ##HISTORICAL  ##
 



svn commit: samba r2190 - in branches/SAMBA_3_0/source/param: .

2004-09-02 Thread jerry
Author: jerry
Date: 2004-09-02 20:51:12 + (Thu, 02 Sep 2004)
New Revision: 2190

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_3_0/source/paramrev=2190nolog=1

Log:
disable 'winbind enable local accounts' by default (had to be done doctor)
Modified:
   branches/SAMBA_3_0/source/param/loadparm.c


Changeset:
Modified: branches/SAMBA_3_0/source/param/loadparm.c
===
--- branches/SAMBA_3_0/source/param/loadparm.c  2004-09-02 15:26:36 UTC (rev 2189)
+++ branches/SAMBA_3_0/source/param/loadparm.c  2004-09-02 20:51:12 UTC (rev 2190)
@@ -1510,7 +1510,7 @@
string_set(Globals.szCupsServer, );
 
Globals.winbind_cache_time = 300;   /* 5 minutes */
-   Globals.bWinbindEnableLocalAccounts = True;
+   Globals.bWinbindEnableLocalAccounts = False;
Globals.bWinbindEnumUsers = True;
Globals.bWinbindEnumGroups = True;
Globals.bWinbindUseDefaultDomain = False;



svn commit: samba r2191 - in branches/SAMBA_3_0/source/printing: .

2004-09-02 Thread jerry
Author: jerry
Date: 2004-09-02 21:52:35 + (Thu, 02 Sep 2004)
New Revision: 2191

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_3_0/source/printingrev=2191nolog=1

Log:
ensure that we assign our pid to print jobs (and not our parent's pid); ensures that 
spooling jobs from dead smbds are removed from the tdb
Modified:
   branches/SAMBA_3_0/source/printing/printing.c


Changeset:
Modified: branches/SAMBA_3_0/source/printing/printing.c
===
--- branches/SAMBA_3_0/source/printing/printing.c   2004-09-02 20:51:12 UTC (rev 
2190)
+++ branches/SAMBA_3_0/source/printing/printing.c   2004-09-02 21:52:35 UTC (rev 
2191)
@@ -159,8 +159,6 @@
tdb_delete(rap_tdb, data);
 }
 
-static pid_t local_pid;
-
 static int get_queue_status(int, print_status_struct *);
 
 /
@@ -174,15 +172,10 @@
int services = lp_numservices();
int snum;
 
-   if (local_pid == sys_getpid())
-   return True;
-
unlink(lock_path(printing.tdb));
pstrcpy(printing_path,lock_path(printing));
mkdir(printing_path,0755);
 
-   local_pid = sys_getpid();
-
/* handle a Samba upgrade */
 
for (snum = 0; snum  services; snum++) {
@@ -599,6 +592,7 @@
/* Remove from printing.tdb */
 
tdb_delete(pdb-tdb, print_key(jobid));
+   remove_from_jobs_changed(snum, jobid);
release_print_db(pdb);
rap_jobid_delete(snum, jobid);
 }
@@ -1448,7 +1442,7 @@
if (!pjob)
return -1;
/* don't allow another process to get this info - it is meaningless */
-   if (pjob-pid != local_pid)
+   if (pjob-pid != sys_getpid())
return -1;
return pjob-fd;
 }
@@ -1462,7 +1456,7 @@
 char *print_job_fname(int snum, uint32 jobid)
 {
struct printjob *pjob = print_job_find(snum, jobid);
-   if (!pjob || pjob-spooled || pjob-pid != local_pid)
+   if (!pjob || pjob-spooled || pjob-pid != sys_getpid())
return NULL;
return pjob-filename;
 }
@@ -1501,7 +1495,7 @@
 BOOL print_job_set_name(int snum, uint32 jobid, char *name)
 {
struct printjob *pjob = print_job_find(snum, jobid);
-   if (!pjob || pjob-pid != local_pid)
+   if (!pjob || pjob-pid != sys_getpid())
return False;
 
fstrcpy(pjob-jobname, name);
@@ -1598,8 +1592,6 @@
 
if (pjob-spooled  pjob-sysjob != -1)
result = (*(current_printif-job_delete))(snum, pjob);
-   else
-   remove_from_jobs_changed(snum, jobid);
 
/* Delete the tdb entry if the delete succeeded or the job hasn't
   been spooled. */
@@ -1814,7 +1806,7 @@
if (!pjob)
return -1;
/* don't allow another process to get this info - it is meaningless */
-   if (pjob-pid != local_pid)
+   if (pjob-pid != sys_getpid())
return -1;
 
return_code = write(pjob-fd, buf, size);
@@ -2079,7 +2071,7 @@

ZERO_STRUCT(pjob);

-   pjob.pid = local_pid;
+   pjob.pid = sys_getpid();
pjob.sysjob = -1;
pjob.fd = -1;
pjob.starttime = time(NULL);
@@ -2149,7 +2141,7 @@
if (!pjob)
return;
/* don't allow another process to get this info - it is meaningless */
-   if (pjob-pid != local_pid)
+   if (pjob-pid != sys_getpid())
return;
 
pjob-page_count++;
@@ -2172,7 +2164,7 @@
if (!pjob)
return False;
 
-   if (pjob-spooled || pjob-pid != local_pid)
+   if (pjob-spooled || pjob-pid != sys_getpid())
return False;
 
if (normal_close  (sys_fstat(pjob-fd, sbuf) == 0)) {
@@ -2228,7 +2220,6 @@
/* Still need to add proper error return propagation! 010122:JRR */
unlink(pjob-filename);
pjob_delete(snum, jobid);
-   remove_from_jobs_changed(snum, jobid);
return False;
 }
 



svn commit: samba r2193 - in trunk/source: param printing

2004-09-02 Thread jerry
Author: jerry
Date: 2004-09-02 22:13:11 + (Thu, 02 Sep 2004)
New Revision: 2193

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/trunk/sourcerev=2193nolog=1

Log:
merge winbind enable local accounts and printing fixes from 3.0
Modified:
   trunk/source/param/loadparm.c
   trunk/source/printing/printing.c


Changeset:
Modified: trunk/source/param/loadparm.c
===
--- trunk/source/param/loadparm.c   2004-09-02 21:55:24 UTC (rev 2192)
+++ trunk/source/param/loadparm.c   2004-09-02 22:13:11 UTC (rev 2193)
@@ -1535,7 +1535,7 @@
string_set(Globals.szCupsServer, );
 
Globals.winbind_cache_time = 300;   /* 5 minutes */
-   Globals.bWinbindEnableLocalAccounts = True;
+   Globals.bWinbindEnableLocalAccounts = False;
Globals.bWinbindEnumUsers = True;
Globals.bWinbindEnumGroups = True;
Globals.bWinbindUseDefaultDomain = False;

Modified: trunk/source/printing/printing.c
===
--- trunk/source/printing/printing.c2004-09-02 21:55:24 UTC (rev 2192)
+++ trunk/source/printing/printing.c2004-09-02 22:13:11 UTC (rev 2193)
@@ -159,8 +159,6 @@
tdb_delete(rap_tdb, data);
 }
 
-static pid_t local_pid;
-
 static int get_queue_status(const char *printer_name, print_status_struct *);
 
 /
@@ -174,15 +172,10 @@
int services = lp_numservices();
int snum;
 
-   if (local_pid == sys_getpid())
-   return True;
-
unlink(lock_path(printing.tdb));
pstrcpy(printing_path,lock_path(printing));
mkdir(printing_path,0755);
 
-   local_pid = sys_getpid();
-
/* handle a Samba upgrade */
 
for (snum = 0; snum  services; snum++) {
@@ -609,6 +602,7 @@
/* Remove from printing.tdb */
 
tdb_delete(pdb-tdb, print_key(jobid));
+   remove_from_jobs_changed(snum, jobid);
release_print_db(pdb);
rap_jobid_delete(snum, jobid);
 }
@@ -1482,7 +1476,7 @@
if (!pjob)
return -1;
/* don't allow another process to get this info - it is meaningless */
-   if (pjob-pid != local_pid)
+   if (pjob-pid != sys_getpid())
return -1;
return pjob-fd;
 }
@@ -1497,7 +1491,7 @@
 {
struct printjob *pjob = print_job_find(lp_const_servicename(snum),
   jobid);
-   if (!pjob || pjob-spooled || pjob-pid != local_pid)
+   if (!pjob || pjob-spooled || pjob-pid != sys_getpid())
return NULL;
return pjob-filename;
 }
@@ -1538,7 +1532,7 @@
 {
struct printjob *pjob = print_job_find(lp_const_servicename(snum),
   jobid);
-   if (!pjob || pjob-pid != local_pid)
+   if (!pjob || pjob-pid != sys_getpid())
return False;
 
fstrcpy(pjob-jobname, name);
@@ -1635,8 +1629,6 @@
 
if (pjob-spooled  pjob-sysjob != -1)
result = (*(current_printif-job_delete))(snum, pjob);
-   else
-   remove_from_jobs_changed(lp_const_servicename(snum), jobid);
 
/* Delete the tdb entry if the delete succeeded or the job hasn't
   been spooled. */
@@ -1855,7 +1847,7 @@
if (!pjob)
return -1;
/* don't allow another process to get this info - it is meaningless */
-   if (pjob-pid != local_pid)
+   if (pjob-pid != sys_getpid())
return -1;
 
return_code = write(pjob-fd, buf, size);
@@ -2120,7 +2112,7 @@

ZERO_STRUCT(pjob);

-   pjob.pid = local_pid;
+   pjob.pid = sys_getpid();
pjob.sysjob = -1;
pjob.fd = -1;
pjob.starttime = time(NULL);
@@ -2191,7 +2183,7 @@
if (!pjob)
return;
/* don't allow another process to get this info - it is meaningless */
-   if (pjob-pid != local_pid)
+   if (pjob-pid != sys_getpid())
return;
 
pjob-page_count++;
@@ -2215,7 +2207,7 @@
if (!pjob)
return False;
 
-   if (pjob-spooled || pjob-pid != local_pid)
+   if (pjob-spooled || pjob-pid != sys_getpid())
return False;
 
if (normal_close  (sys_fstat(pjob-fd, sbuf) == 0)) {
@@ -2271,7 +2263,6 @@
/* Still need to add proper error return propagation! 010122:JRR */
unlink(pjob-filename);
pjob_delete(snum, lp_const_servicename(snum), jobid);
-   remove_from_jobs_changed(lp_const_servicename(snum), jobid);
return False;
 }
 



svn commit: samba r2194 - in branches/SAMBA_3_0/source/smbd: .

2004-09-02 Thread jra
Author: jra
Date: 2004-09-02 22:35:36 + (Thu, 02 Sep 2004)
New Revision: 2194

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_3_0/source/smbdrev=2194nolog=1

Log:
Here is the efforts of much pain reproducing W2K3 pathname
parsing. :-(. One more check for CreateFile() needed.
Jeremy.

Modified:
   branches/SAMBA_3_0/source/smbd/reply.c
   branches/SAMBA_3_0/source/smbd/trans2.c


Changeset:
Modified: branches/SAMBA_3_0/source/smbd/reply.c
===
--- branches/SAMBA_3_0/source/smbd/reply.c  2004-09-02 22:13:11 UTC (rev 2193)
+++ branches/SAMBA_3_0/source/smbd/reply.c  2004-09-02 22:35:36 UTC (rev 2194)
@@ -48,6 +48,7 @@
char *d = destname;
const char *s = srcname;
NTSTATUS ret = NT_STATUS_OK;
+   BOOL start_of_name_component = True;
 
while (*s) {
if (IS_DIRECTORY_SEP(*s)) {
@@ -58,100 +59,109 @@
while (IS_DIRECTORY_SEP(*s)) {
s++;
}
-   if ((s[0] == '.')  (s[1] == '\0')) {
-   ret = NT_STATUS_OBJECT_NAME_INVALID;
-   break;
-   }
if ((d != destname)  (*s != '\0')) {
/* We only care about non-leading or trailing '/' or 
'\\' */
*d++ = '/';
}
-   } else if ((s[0] == '.')  (s[1] == '.')  (IS_DIRECTORY_SEP(s[2]) 
|| s[2] == '\0')) {
-   /* Uh oh - ../ or ..\\  or ..\0 ! */
 
-   /*
-* No mb char starts with '.' so we're safe checking the 
directory separator here.
-*/
+   start_of_name_component = True;
+   continue;
+   }
 
-   /* If we just added a '/', delete it. */
+   if (start_of_name_component) {
+   if ((s[0] == '.')  (s[1] == '.')  (IS_DIRECTORY_SEP(s[2]) 
|| s[2] == '\0')) {
+   /* Uh oh - /../ or \\..\\  or /..\0 or \\..\0 
! */
 
-   if ((d  destname)  (*(d-1) == '/')) {
-   *(d-1) = '\0';
-   if (d == (destname + 1)) {
+   /*
+* No mb char starts with '.' so we're safe checking 
the directory separator here.
+*/
+
+   /* If  we just added a '/' - delete it */
+   if ((d  destname)  (*(d-1) == '/')) {
+   *(d-1) = '\0';
d--;
-   } else {
-   d -= 2;
}
-   }
-   /* Are we at the start ? Can't go back further if so. */
-   if (d == destname) {
-   ret = NT_STATUS_OBJECT_PATH_SYNTAX_BAD;
-   break;
-   }
-   /* Go back one level... */
-   /* We know this is safe as '/' cannot be part of a mb 
sequence. */
-   /* NOTE - if this assumption is invalid we are not in good 
shape... */
-   while (d  destname) {
-   if (*d == '/')
+
+   /* Are we at the start ? Can't go back further if so. 
*/
+   if (d = destname) {
+   ret = NT_STATUS_OBJECT_PATH_SYNTAX_BAD;
break;
-   d--;
-   }
-   s += 3;
-   } else if ((s[0] == '.')  (s[1] == '\0')) {
-   if (s == srcname) {
-   ret = NT_STATUS_OBJECT_NAME_INVALID;
+   }
+   /* Go back one level... */
+   /* We know this is safe as '/' cannot be part of a mb 
sequence. */
+   /* NOTE - if this assumption is invalid we are not in 
good shape... */
+   /* Decrement d first as d points to the *next* char to 
write into. */
+   for (d--; d  destname; d--) {
+   if (*d == '/')
+   break;
+   }
+   s += 2; /* Else go past the .. */
+   /* We're still at the start of a name component, just 
the previous one. */
+   continue;
+
+   } else if ((s[0] == 

svn commit: samba r2195 - in trunk/source/smbd: .

2004-09-02 Thread jra
Author: jra
Date: 2004-09-02 22:35:45 + (Thu, 02 Sep 2004)
New Revision: 2195

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/trunk/source/smbdrev=2195nolog=1

Log:
Here is the efforts of much pain reproducing W2K3 pathname
parsing. :-(. One more check for CreateFile() needed.
Jeremy.

Modified:
   trunk/source/smbd/reply.c
   trunk/source/smbd/trans2.c


Changeset:
Modified: trunk/source/smbd/reply.c
===
--- trunk/source/smbd/reply.c   2004-09-02 22:35:36 UTC (rev 2194)
+++ trunk/source/smbd/reply.c   2004-09-02 22:35:45 UTC (rev 2195)
@@ -48,6 +48,7 @@
char *d = destname;
const char *s = srcname;
NTSTATUS ret = NT_STATUS_OK;
+   BOOL start_of_name_component = True;
 
while (*s) {
if (IS_DIRECTORY_SEP(*s)) {
@@ -58,100 +59,109 @@
while (IS_DIRECTORY_SEP(*s)) {
s++;
}
-   if ((s[0] == '.')  (s[1] == '\0')) {
-   ret = NT_STATUS_OBJECT_NAME_INVALID;
-   break;
-   }
if ((d != destname)  (*s != '\0')) {
/* We only care about non-leading or trailing '/' or 
'\\' */
*d++ = '/';
}
-   } else if ((s[0] == '.')  (s[1] == '.')  (IS_DIRECTORY_SEP(s[2]) 
|| s[2] == '\0')) {
-   /* Uh oh - ../ or ..\\  or ..\0 ! */
 
-   /*
-* No mb char starts with '.' so we're safe checking the 
directory separator here.
-*/
+   start_of_name_component = True;
+   continue;
+   }
 
-   /* If we just added a '/', delete it. */
+   if (start_of_name_component) {
+   if ((s[0] == '.')  (s[1] == '.')  (IS_DIRECTORY_SEP(s[2]) 
|| s[2] == '\0')) {
+   /* Uh oh - /../ or \\..\\  or /..\0 or \\..\0 
! */
 
-   if ((d  destname)  (*(d-1) == '/')) {
-   *(d-1) = '\0';
-   if (d == (destname + 1)) {
+   /*
+* No mb char starts with '.' so we're safe checking 
the directory separator here.
+*/
+
+   /* If  we just added a '/' - delete it */
+   if ((d  destname)  (*(d-1) == '/')) {
+   *(d-1) = '\0';
d--;
-   } else {
-   d -= 2;
}
-   }
-   /* Are we at the start ? Can't go back further if so. */
-   if (d == destname) {
-   ret = NT_STATUS_OBJECT_PATH_SYNTAX_BAD;
-   break;
-   }
-   /* Go back one level... */
-   /* We know this is safe as '/' cannot be part of a mb 
sequence. */
-   /* NOTE - if this assumption is invalid we are not in good 
shape... */
-   while (d  destname) {
-   if (*d == '/')
+
+   /* Are we at the start ? Can't go back further if so. 
*/
+   if (d = destname) {
+   ret = NT_STATUS_OBJECT_PATH_SYNTAX_BAD;
break;
-   d--;
-   }
-   s += 3;
-   } else if ((s[0] == '.')  (s[1] == '\0')) {
-   if (s == srcname) {
-   ret = NT_STATUS_OBJECT_NAME_INVALID;
+   }
+   /* Go back one level... */
+   /* We know this is safe as '/' cannot be part of a mb 
sequence. */
+   /* NOTE - if this assumption is invalid we are not in 
good shape... */
+   /* Decrement d first as d points to the *next* char to 
write into. */
+   for (d--; d  destname; d--) {
+   if (*d == '/')
+   break;
+   }
+   s += 2; /* Else go past the .. */
+   /* We're still at the start of a name component, just 
the previous one. */
+   continue;
+
+   } else if ((s[0] == '.')  (s[1] == '\0')) {
+   /* Component of pathname can't 

svn commit: samba r2196 - in branches/SAMBA_3_0/source/smbd: .

2004-09-02 Thread jra
Author: jra
Date: 2004-09-02 22:48:35 + (Thu, 02 Sep 2004)
New Revision: 2196

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_3_0/source/smbdrev=2196nolog=1

Log:
This error code change is incorrect. Still working on it...
Jeremy.

Modified:
   branches/SAMBA_3_0/source/smbd/trans2.c


Changeset:
Modified: branches/SAMBA_3_0/source/smbd/trans2.c
===
--- branches/SAMBA_3_0/source/smbd/trans2.c 2004-09-02 22:35:45 UTC (rev 2195)
+++ branches/SAMBA_3_0/source/smbd/trans2.c 2004-09-02 22:48:35 UTC (rev 2196)
@@ -1381,11 +1381,6 @@
 
srvstr_get_path(inbuf, directory, params+12, sizeof(directory), -1, 
STR_TERMINATE, ntstatus, True);
if (!NT_STATUS_IS_OK(ntstatus)) {
-   /* W2k3 never seems to return OBJECT_PATH_NOT_FOUND on a
-  bad pathname parse in a findfirst, but always OBJECT_NAME_INVALID. 
JRA */
-   /* It remains to be seen what it does on CreateFile(). JRA. (ie. I 
need to check) */
-   if (NT_STATUS_EQUAL(NT_STATUS_OBJECT_PATH_NOT_FOUND,ntstatus))
-   return ERROR_NT(NT_STATUS_OBJECT_NAME_INVALID);
return ERROR_NT(ntstatus);
}
 



svn commit: samba r2198 - branches/SAMBA_3_0/source trunk/source

2004-09-02 Thread tpot
Author: tpot
Date: 2004-09-02 22:51:12 + (Thu, 02 Sep 2004)
New Revision: 2198

WebSVN: http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/rev=2198nolog=1

Log:
Correct fix for #1360.  Need to use -Wl when passing flags to the linker.

Modified:
   branches/SAMBA_3_0/source/configure.in
   trunk/source/configure.in


Changeset:
Modified: branches/SAMBA_3_0/source/configure.in
===
--- branches/SAMBA_3_0/source/configure.in  2004-09-02 22:49:10 UTC (rev 2197)
+++ branches/SAMBA_3_0/source/configure.in  2004-09-02 22:51:12 UTC (rev 2198)
@@ -1130,7 +1130,7 @@
   case $host_os in
*linux*)   AC_DEFINE(LINUX,1,[Whether the host os is linux])
BLDSHARED=true
-   LDSHFLAGS=-shared -Bsymbolic 
+   LDSHFLAGS=-shared -Wl,-Bsymbolic 
DYNEXP=-Wl,--export-dynamic
PICFLAGS=-fPIC
SONAMEFLAG=-Wl,-soname=

Modified: trunk/source/configure.in
===
--- trunk/source/configure.in   2004-09-02 22:49:10 UTC (rev 2197)
+++ trunk/source/configure.in   2004-09-02 22:51:12 UTC (rev 2198)
@@ -1131,7 +1131,7 @@
   case $host_os in
*linux*)   AC_DEFINE(LINUX,1,[Whether the host os is linux])
BLDSHARED=true
-   LDSHFLAGS=-shared -Bsymbolic 
+   LDSHFLAGS=-shared -Wl,-Bsymbolic 
DYNEXP=-Wl,--export-dynamic
PICFLAGS=-fPIC
SONAMEFLAG=-Wl,-soname=



svn commit: samba r2199 - in branches/SAMBA_4_0/source: librpc/idl torture/rpc

2004-09-02 Thread tridge
Author: tridge
Date: 2004-09-03 05:16:25 + (Fri, 03 Sep 2004)
New Revision: 2199

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=sambapath=/branches/SAMBA_4_0/sourcerev=2199nolog=1

Log:
the unknown 16 bit number in lsa_LookupPrivDisplayName() is a language
ID, so the client can choose what language they get the privilege
description in.

this is the first time I've seen a language ID on the wire in CIFS.

Modified:
   branches/SAMBA_4_0/source/librpc/idl/lsa.idl
   branches/SAMBA_4_0/source/torture/rpc/lsa.c


Changeset:
Modified: branches/SAMBA_4_0/source/librpc/idl/lsa.idl
===
--- branches/SAMBA_4_0/source/librpc/idl/lsa.idl2004-09-02 22:51:12 UTC (rev 
2198)
+++ branches/SAMBA_4_0/source/librpc/idl/lsa.idl2004-09-03 05:16:25 UTC (rev 
2199)
@@ -458,10 +458,11 @@
NTSTATUS lsa_LookupPrivDisplayName (
[in,ref] policy_handle *handle,
[in,ref] lsa_Name *name,
-   [in] uint16 unknown, /* 0x0409 */
-   [in] uint16 unknown2,/* 0x0409 */
[out]lsa_Name *disp_name,
-   [out]uint16 unknown3 /* 0x0409 */
+   /* see http://www.microsoft.com/globaldev/nlsweb/ for
+  language definitions */
+   [in,out,ref] uint16 *language_id,
+   [in] uint16 unknown
);
 
/* Function:0x22 */

Modified: branches/SAMBA_4_0/source/torture/rpc/lsa.c
===
--- branches/SAMBA_4_0/source/torture/rpc/lsa.c 2004-09-02 22:51:12 UTC (rev 2198)
+++ branches/SAMBA_4_0/source/torture/rpc/lsa.c 2004-09-03 05:16:25 UTC (rev 2199)
@@ -642,19 +642,26 @@
 {
struct lsa_LookupPrivDisplayName r;
NTSTATUS status;
+   /* produce a reasonable range of language output without screwing up
+  terminals */
+   uint16 language_id = (random() % 4) + 0x409;
 
printf(testing LookupPrivDisplayName(%s)\n, priv_name-name);

r.in.handle = handle;
r.in.name = priv_name;
+   r.in.language_id = language_id;
+   r.out.language_id = language_id;
r.in.unknown = 0;
-   r.in.unknown2 = 0;
 
status = dcerpc_lsa_LookupPrivDisplayName(p, mem_ctx, r);
if (!NT_STATUS_IS_OK(status)) {
printf(LookupPrivDisplayName failed - %s\n, nt_errstr(status));
return False;
}
+   printf(%s - \%s\  (language 0x%x/0x%x)\n, 
+  priv_name-name, r.out.disp_name-name, 
+  *r.in.language_id, *r.out.language_id);
 
return True;
 }



svn commit: samba-web r304 - in trunk/news: . advocacy announcements developers releases team users

2004-09-02 Thread tpot
Author: tpot
Date: 2004-09-03 05:33:39 + (Fri, 03 Sep 2004)
New Revision: 304

WebSVN: 
http://websvn.samba.org/websvn/changeset.php?rep=samba-webpath=/trunk/newsrev=304nolog=1

Log:
Remove files now autogenerated by deryck's news script.

Removed:
   trunk/news/advocacy/index.html
   trunk/news/announcements/index.html
   trunk/news/developers/index.html
   trunk/news/index.html
   trunk/news/releases/index.html
   trunk/news/team/index.html
   trunk/news/users/index.html


Changeset:
Deleted: trunk/news/advocacy/index.html
===
--- trunk/news/advocacy/index.html  2004-09-03 04:48:09 UTC (rev 303)
+++ trunk/news/advocacy/index.html  2004-09-03 05:33:39 UTC (rev 304)
@@ -1,12 +0,0 @@
-!--#include virtual=/samba/news/header.html --
-titleadvocacy/ -- news.samba.org/title
-!--#include virtual=/samba/news/header2.html --
-
-h1Advocacy/h1
-
-pStories related to Samba advocacy on news.samba.org are archived here./p
-
-h210 August 2004/h2
-   !--#include virtual=minnesota_ms.html --
-
-!--#include virtual=/samba/news/footer.html --

Deleted: trunk/news/announcements/index.html
===
--- trunk/news/announcements/index.html 2004-09-03 04:48:09 UTC (rev 303)
+++ trunk/news/announcements/index.html 2004-09-03 05:33:39 UTC (rev 304)
@@ -1,17 +0,0 @@
-!--#include virtual=/samba/news/header.html --   
-titleannouncements/ -- news.samba.org/title 
-!--#include virtual=/samba/news/header2.html --
-   
-h1Announcements/h1
-
-pMiscellaneous announcements for news.samba.org are
-archived here./p
-  
-h210 August 2004/h2
-!--#include virtual=accepting.html --
-
-h28 August 2004/h2
-!--#include virtual=redesign.html --
-
-
-!--#include virtual=/samba/news/footer.html --

Deleted: trunk/news/developers/index.html
===
--- trunk/news/developers/index.html2004-09-03 04:48:09 UTC (rev 303)
+++ trunk/news/developers/index.html2004-09-03 05:33:39 UTC (rev 304)
@@ -1,12 +0,0 @@
-!--#include virtual=/samba/news/header.html --
-titledevelopers/ -- news.samba.org/title
-!--#include virtual=/samba/news/header2.html --
-
-h1Samba Developers/h1
-
-pStories related to Samba development and developers on news.samba.org are 
archived here./p
-
-h212 August 2004/h2
-!--#include virtual=plug_progress.html --
-
-!--#include virtual=/samba/news/footer.html --

Deleted: trunk/news/index.html
===
--- trunk/news/index.html   2004-09-03 04:48:09 UTC (rev 303)
+++ trunk/news/index.html   2004-09-03 05:33:39 UTC (rev 304)
@@ -1,64 +0,0 @@
-!--#include virtual=/samba/news/header.html --
-titlenews.samba.org/title
-!--#include virtual=/samba/news/header2.html --
-
-h227 August 2004/h2
-!--#include virtual=/samba/news/releases/comingsoon_3.0.7.html --
-div class=referenceLink: a 
href=/samba/news/releases/#comingsoon_3.0.7releases//a/div
-
-h224 August 2004/h2
-!--#include virtual=/samba/news/releases/openLDAP-samba3.0.6.html --
-div class=referenceLink: a
-href=/samba/news/releases/#openLDAP-samba3.0.6releases//a/div
-
-h223 August 2004/h2
-!--#include virtual=/samba/news/team/cal_update_23Aug.html --
-div class=referenceLink: a
-href=/samba/news/team/#cal_update_23Augteam//a/div
-
-!--#include virtual=/samba/news/users/nine_user.html --
-div class=referenceLink: a
-href=/samba/news/users/#nine_userusers//a/div
-
-h220 August 2004/h2
-!--#include virtual=/samba/news/team/gd.html --
-div class=referenceLink: a
-href=/samba/news/team/#gdteam//a/div
-
-h219 August 2004/h2
-!--#include virtual=/samba/news/releases/3.0.6.html --
-div class=referenceLink: a
-href=/samba/news/releases/#3.0.6releases//a/div
-
-h217 August 2004/h2
-!--#include virtual=/samba/news/users/nlb_singapore.html --
-div class=referenceLink: a
-href=/samba/news/users/#nlb_singaporeusers//a/div
-
-h215 August 2004/h2
-!--#include virtual=/samba/news/team/akademy.html --
-div class=referenceLink: a href=/samba/news/team/#akademyteam//a/div
-
-h213 August 2004/h2
-!--#include virtual=/samba/news/releases/2.2.11.html --
-div class=referenceLink: a 
href=/samba/news/releases/#2.2.11releases//a/div
-
-h212 August 2004/h2
-!--#include virtual=/samba/news/developers/plug_progress.html --
-div class=referenceLink: a 
href=/samba/news/developers/#plug_progressdevelopers//a/div
-
-h210 August 2004/h2
-
-!--#include virtual=/samba/news/advocacy/minnesota_ms.html --
-div class=referenceLink: a 
href=/samba/news/advocacy/#minnesota_msadvocacy//a/div
-
-!--#include virtual=/samba/news/announcements/accepting.html --
-div class=referenceLink: a 
href=/samba/news/announcements/#acceptingannouncements//a/div
-