[Samba] LDAP Account Manager 0.4.7 released

2004-12-19 Thread Roland Gruber
LDAP Account Manager (LAM) 0.4.7 - December 19th, 2004
==
A web frontend for managing accounts stored in an OpenLDAP server.
Announcement:
-
This version closes several minor bugs.
LAM is a set of PHP-scripts to administrate entries of a LDAP server.
User, group and Samba accounts can be displayed, searched, filtered,
added, removed and edited over an easy to use web interface. Even the
configuration options are embedded in the interface.
Features:
-
- management of Unix user and group accounts (posixAccount/posixGroup)
- management of Samba 2.x/3 user and host accounts
   (sambaAccount/sambaSamAccount)
- profiles for account creation
- editor for organizational units (OU)
- account creation via file upload
- automatic creation/deletion of home directories
- setting quotas
- support for LDAP+SSL
- multi-language support (English, French, German, Hungarian, Japanese)
- multiple configuration files
- PDF output for user/group/host accounts
- additional text for user PDFs
- supports multiple password hashes

Availability:
-
This software is available under the GNU General Public License V2.0.
You can get the newest version at http://lam.sf.net.
File formats: DEB, tar.gz
There is also a FreeBSD port.
Debian users may use the packages in unstable.
Support:

If you find a bug please file a bug report. For questions or
implementing new features please use the forum and feature request
tracker at our Sourceforge homepage http://www.sf.net/projects/lam.

Author  Copyright:
---
Copyright (C) 2003 - 2004:
Michael Duergner [EMAIL PROTECTED]
Roland Gruber [EMAIL PROTECTED]
Tilo Lutz [EMAIL PROTECTED]
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307
USA




signature.asc
Description: OpenPGP digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] how to check out samba-docs from SVN ?

2004-12-19 Thread Ilia Chipitsine
Dear Sirs,
I cannot find how to check out samba-docs according to
docs/README-NOW:
ATTENTION
DOCS TREE REMOVED
---
This docs tree has been moved to a separate SVN
module on svn.samba.org name 'samba-docs'.
See http://svnanon.samba.org/ for details on accessing
Samba svn trees.

Cheers,
Ilia Chipitsine
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba-3.0.10-2

2004-12-19 Thread alton bailey
yesterday I upgrade my samba from 3.09-1 to the current 3.0.10-2 after 
completing the upgrade process I can nolonger connect to my samba sever from 
windows xp client. I start the serveces list to see what smbd  nmbd is doing, 
and notice that smbd has 6 pid running and nmbd has only 2 running. Winbind is 
not running as well
how can I solve this problem and what step should I take to correct this 
multiple pid running.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] suggestion to Samba-HOWTO-Collection

2004-12-19 Thread Ilia Chipitsine
Hello!
I'd suggest to change
26.4.3 HOSTS File
C:\WINNT\SYSTEM32\DRIVERS\ETC -- %SystemRoot%\System32\Drivers\Etc
Cheers,
Ilia Chipitsine
P.S. would it be better to submit fixes via bugzilla ?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] [2.6 patch] remove outdated smbfs ChangeLog

2004-12-19 Thread Adrian Bunk
The patch below removes an outdated samba ChangeLog file.


diffstat output:
 fs/smbfs/ChangeLog |  160 -
 1 files changed, 160 deletions(-)


Signed-off-by: Adrian Bunk [EMAIL PROTECTED]

--- linux-2.6.10-rc3-mm1-full/fs/smbfs/ChangeLog2004-10-18 
23:54:55.0 +0200
+++ /dev/null   2004-11-25 03:16:25.0 +0100
@@ -1,160 +0,0 @@
-ChangeLog for smbfs.
-
-2002-04-19 John Newbigin [EMAIL PROTECTED]
-
-   * Implementation of CIFS Extensions for UNIX systems, including soft
- and hard links.
-
-2001-08-03 Urban Widmark [EMAIL PROTECTED]
-
-   * *.c: Unicode support
-
-2001-08-23 Jochen Dolze [EMAIL PROTECTED]
-
-   * proc.c: Correct rsize/wsize computation for readX/writeX
-
-2001-0?-?? Urban Widmark [EMAIL PROTECTED]
-
-   * *.c: Add LFS
-   * *.c: Move to a driver style handling of different servertypes.
-  (Not all operations are done this way. yet.)
-2001-12-31 René Scharfe [EMAIL PROTECTED]
-
-   * inode.c: added smb_show_options to show mount options in /proc/mounts
-   * inode.c, getopt.c, getopt.h: merged flag and has_arg in struct option
-   * inode.c: use S_IRWXUGO where appropriate
-
-2001-12-22 Urban Widmark [EMAIL PROTECTED]
-
-   * file.c, proc.c: Fix problems triggered by the fsx test
-
-2001-09-17 Urban Widmark [EMAIL PROTECTED]
-
-   * proc.c: Use 4096 (was 512) as the blocksize for better write
- performance (patch originally by Jan Kratochvil)
-   * proc.c: Skip disconnect smb, allows umount on unreachable servers.
-   * proc.c: Go back to the interruptible sleep as reconnects seem to
- handle it now.
-   * *.c: use autogenerated and private proto.h
-
-2000-11-22 Igor Zhbanov [EMAIL PROTECTED]
-
-   * proc.c: fixed date_unix2dos for dates earlier than 01/01/1980
- and date_dos2unix for date==0 (from 2.2)
-
-2001-07-13 Rob Radez [EMAIL PROTECTED]
-
-   * proc.c: make smb_errno return negative error values
-
-2001-07-09 Jochen Dolze [EMAIL PROTECTED]
-
-   * inode.c: smb_statfs always returned success.
-   * proc.c, ioctl.c: Allow smbmount to signal failure to reconnect with
- a NULL argument to SMB_IOC_NEWCONN (speeds up error detection).
-   * proc.c: Add some of the missing error codes to smb_errno
-
-2001-06-12 Urban Widmark [EMAIL PROTECTED]
-
-   * proc.c: replace the win95-flush fix with smb_seek, when needed.
-   * proc.c: readdir 'lastname' bug (NetApp dir listing fix)
-
-2001-05-08 Urban Widmark [EMAIL PROTECTED]
-
-   * inode.c: Fix for changes on the server side not being detected
- properly. Must always drop cached pages when updating an inode with
- new size.
-
-2001-05-05 Urban Widmark [EMAIL PROTECTED]
-
-   * file.c, proc.c: Drop SMB_F_LOCALWRITE to detect changes made on
- both server and client, using flush with to force win9x to remember
- the right filesize.
-
-2001-04-25 René Scharfe [EMAIL PROTECTED]
-
-   * inode.c: Don't clear s_flags and allow ro mounts
-
-2001-04-21 Urban Widmark [EMAIL PROTECTED]
-
-   * dir.c, proc.c: replace tests on conn_pid with tests on state to
- fix smbmount reconnect on smb_retry timeout and up the timeout to 30s.
-   * proc.c: smb_newconn must have the server locked while updating it.
-   * inode.c, proc.c: need flush after truncate on some servers (win9x)
-   * file.c: add call to send SMBflush on fsync
- (as suggested by Jochen Dolze [EMAIL PROTECTED])
-
-2001-03-06 Urban Widmark [EMAIL PROTECTED]
-
-   * cache.c: d_add on hashed dentries corrupts d_hash list and
- causes loops in d_lookup. Inherited bug. :)
-   * inode.c: tail -f fix for non-readonly opened files
- (related to the smb_proc_open change).
-   * inode.c: tail -f fix for fast size changes with the same mtime.
-
-2001-03-02 Michael Kockelkorn [EMAIL PROTECTED]
-
-   * proc.c: fix smb_proc_open to allow open being called more than once
- with different modes (O_RDONLY - O_WRONLY) without closing.
-
-2001-02-10 Urban Widmark [EMAIL PROTECTED]
-
-   * dir.c, cache.c: replace non-bigmem safe cache with cache code
- from ncpfs and fix some other bigmem bugs in smbfs.
-   * inode.c: root dentry not properly initialized
-   * proc.c, sock.c: adjust max parameters  max data to follow max_xmit
- lots of servers were having find_next trouble with this.
-   * proc.c: use documented write method of truncating (NetApp fix)
-
-2000-08-14 Urban Widmark [EMAIL PROTECTED]
-
-   * dir.c: support case sensitive shares
-   * inode.c: ascii mount options
-   * proc.c: check length of paths to avoid buffer overflow
-   * proc.c: don't do interruptable_sleep in smb_retry to avoid signal
- problem/race.
-   * proc.c: O_RDONLY  smb_revalidate_inode fix (tail -f)
-   * proc.c: add nls support
-   * sock.c: attempt to fix 

Re: [Samba] how to check out samba-docs from SVN ?

2004-12-19 Thread Deryck Hodge
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Ilia Chipitsine wrote:
| Dear Sirs,
|
| I cannot find how to check out samba-docs according to
|
To check out samba-docs from the Subversion repo:
svn co svn://svnanon.samba.org/samba-docs/trunk samba-docs
Cheers,
- --deryck
- --
Deryck Hodge   http://www.devurandom.org/
Cataloging Department  http://www.lib.auburn.edu/
Samba Team  http://www.samba.org/
GnuPG Keyhttp://www.devurandom.org/gpg_pubkey.asc
I am flawed but I am cleaning up so well.
- --Dashboard Confessional, from Vindicated(2004)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBxYxo4glRK0DaE8gRAsHuAKCiyw8zJFKVbgVGXywKJDdJZFGWmACg1H1I
gn7CtlcBP6RDh0ldIKyjkZw=
=dUV6
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] how to check out samba-docs from SVN ?

2004-12-19 Thread Ilia Chipitsine
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Ilia Chipitsine wrote:
| Dear Sirs,
|
| I cannot find how to check out samba-docs according to
|
To check out samba-docs from the Subversion repo:
svn co svn://svnanon.samba.org/samba-docs/trunk samba-docs
hmm...
trunk seems to be the same as HEAD in CVS ?
I expected Samba-HOWTO-Collection for samba-3 to be included in 
samba-3-release, not in trunk.

thank You for the answer!
I guess it should be documented somewhere on the site.
Cheers,
- --deryck
- --
Deryck Hodge   http://www.devurandom.org/
Cataloging Department  http://www.lib.auburn.edu/
Samba Team  http://www.samba.org/
GnuPG Keyhttp://www.devurandom.org/gpg_pubkey.asc
I am flawed but I am cleaning up so well.
- --Dashboard Confessional, from Vindicated(2004)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBxYxo4glRK0DaE8gRAsHuAKCiyw8zJFKVbgVGXywKJDdJZFGWmACg1H1I
gn7CtlcBP6RDh0ldIKyjkZw=
=dUV6
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: suggestion to Samba-HOWTO-Collection

2004-12-19 Thread John H Terpstra
On Sunday 19 December 2004 06:41, Ilia Chipitsine wrote:
 Hello!

 I'd suggest to change

 26.4.3 HOSTS File

 C:\WINNT\SYSTEM32\DRIVERS\ETC -- %SystemRoot%\System32\Drivers\Etc

Done. Thanks.

- John T.



 Cheers,
 Ilia Chipitsine

 P.S. would it be better to submit fixes via bugzilla ?

Yes please.

Cheers,
John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] (no subject)

2004-12-19 Thread autoreply
Dear [EMAIL PROTECTED],

Thank you for sending email to [EMAIL PROTECTED] 

Sadly Martin gets too much unsolicited at this email address, so
please could you send your mail instead to [EMAIL PROTECTED] ?

Yours faithfully,
--
Martin Oldfield
AdamsNames Ltd.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Samba-HOWTO-Collection/StandAloneServer.html#simplynice

2004-12-19 Thread Julius Junghans
Jim C. wrote:
| After reading smb.conf the option passdb backend = guest looks wrong?
| guest isnt listed as a possibility in the manpage.
| Ive changed nothing in my passwd/smbpasswd file.
| Why is it not working?
passdb backend tells samba where to find it's records.  You need to read
up on this.
http://us2.samba.org/samba/docs/man/Samba-HOWTO-Collection/passdb.html
Jim C.
--
-
| I can be reached on the following Instant Messenger services: |
|---|
| MSN: j_c_llings @ hotmail.com  AIM: WyteLi0n  ICQ: 123291844  |
|---|
| Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| 

Yes, but reading the mentioned site doesnt helpguest still looks 
wrong :(
there should be a password backend like tdbsam, ldapsam or mysqlsam.
It makes no sense.

Regards
Julius
-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Samba-HOWTO-Collection/StandAloneServer.html#simplynice

2004-12-19 Thread Jelmer Vernooij
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Julius Junghans wrote:
| Jim C. wrote:
|
| | After reading smb.conf the option passdb backend = guest looks wrong?
| | guest isnt listed as a possibility in the manpage.
| | Ive changed nothing in my passwd/smbpasswd file.
| | Why is it not working?
|
| passdb backend tells samba where to find it's records.  You need to read
| up on this.
|
| http://us2.samba.org/samba/docs/man/Samba-HOWTO-Collection/passdb.html
|
|
| Jim C.
| --
| -
| | I can be reached on the following Instant Messenger services: |
| |---|
| | MSN: j_c_llings @ hotmail.com  AIM: WyteLi0n  ICQ: 123291844  |
| |---|
| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz|
|
|
|
| Yes, but reading the mentioned site doesnt helpguest still looks
| wrong :(
| there should be a password backend like tdbsam, ldapsam or mysqlsam.
| It makes no sense.
the 'guest' passdb backend doesn't have to be specified explicitly
anymore (Samba adds it if necessary), so I think using just 'passdb
backend = ' should suffice. Specifying 'guest' doesn't hurt though.
Cheers,
Jelmer
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBxc1MPa9Uoh7vUnYRArvxAJ9hBaNLbSVbjbT0yavUdDAukcDoYgCcCuNy
YTnlcQfLQxrSTlPNX/Fh4qU=
=O4na
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] AutoNotify: Error

2004-12-19 Thread Spam_Agent
Message [19c_2103inofa1b.pro] triggered rule [Cing SPAM] at 9:03:10 PM 
12/19/2004

Sender: [EMAIL PROTECTED]
Recipient(s): [EMAIL PROTECTED]
Subject: Error

**
The contents of this email and any attachments are confidential.
It is intended for the named recipient(s) only.
If you have received this email in error please notify the system manager or  
the 
sender immediately and do not disclose the contents to any one or make copies.

** CING Security System scanned this email for viruses, vandals and malicious 
content **
**
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] This is an alert from eSafe

2004-12-19 Thread eSafe
*** CING Security System has  detected a hostile content in this email. ***


Time: 19 Dec 2004 21:01:52
Scan result: Mail modified to remove malicious content
Protocol: SMTP in
File Name\Mail Subject: mail_1103474299: Error
Source: [EMAIL PROTECTED]
Destination: [EMAIL PROTECTED]
Details: data.doc   
.pif   Infected with Win32.Netsky.q (Non-Removable), Blocked 

**
The contents of this email and any attachments are confidential.
It is intended for the named recipient(s) only.
If you have received this email in error please notify the system manager or  
the 
sender immediately and do not disclose the contents to any one or make copies.

** CING Security System scanned this email for viruses, vandals and malicious 
content **
**
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] how to check out samba-docs from SVN ?

2004-12-19 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Ilia Chipitsine wrote:
| Dear Sirs,
|
| I cannot find how to check out samba-docs according to
|
| docs/README-NOW:
|
...
| See http://svnanon.samba.org/ for details on accessing
| Samba svn trees.
svn co svn://svnanon.samba.org/samba-docs/trunk samba-docs


cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (Darwin)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBxZB7IR7qMdg1EfYRAqB4AKDs62aUzmwrHHLnlJfB2Ec3QpLzDACgnnKv
DJlpuUX5XnOzmTZDs1fq0jg=
=OR1+
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] how to check out samba-docs from SVN ?

2004-12-19 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Ilia Chipitsine wrote:
| trunk seems to be the same as HEAD in CVS ?
| I expected Samba-HOWTO-Collection for samba-3 to be included in
| samba-3-release, not in trunk.
The samba-docs svn repo is nor currently using branches.

cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (Darwin)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBxf5wIR7qMdg1EfYRApb8AJ9oIzyKk8aVtsvorqesMk3qF80KvwCg7zcG
lu6DAKDmKUAThrORh7Augnc=
=IQhK
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] (no subject)

2004-12-19 Thread Walter Schirmer

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba + LDAP + Automount maps

2004-12-19 Thread Prakash Velayutham
Hi Samba Gurus,
We have an OpenLDAP server (openldap2-2.1.22-65) and a separate NFS 
server for home dirs. Currently LDAP NIS maps are being used by the 
Linux users in the department for home dir mounting on Linux clients.

As everybody does, I started to look at Samba to accommodate the 
Windows users and have a single user database (in LDAP) to work with. 
Now I have a Samba PDC running samba3-3.0.9-1 version in my LDAP server 
with passdb backend being ldapsam:ldap://127.0.0.1. PDC itself works 
just fine right now with roaming profiles etc.

The NFS server is the only system with big disks and hence we would 
like to have the home dirs in that system. I am not sure how automount 
plays into the whole setting of Samba and OpenLDAP. When a user logs 
into a windows machine, his home directory should get mounted from the 
NFS server automatically. The (Windows) profile would also live inside 
the (UNIX) home directory of the user and hence would also has to get 
mounted.

Hopefully I am clear enough. Please send any configuration settings if 
you can. I tried some googling, but just saw one link where somebody 
discussed something similar with Sun's LDAP server and Samba. I tried 
that but did not work with OpenLDAP.

The constraint is that the home dir NFS server is also a server for a 
Linux cluster we maintain and I do not want to touch that server 
currently for anything.

Any help greatly appreciated.
Thanks,
Prakash
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] file recovery

2004-12-19 Thread Josh Dickens
i tried to save a flash file back onto my freebsd server running samba 
and when i hit save, windows xp gave some message but i hit enter to 
quickly to see what it said. it was basically saying that i could not 
save over a previous file for some reason.

so i closed the file i was trying to save and went to look for the file 
that was there on the server and it's no longer there. so i have no file 
anymore. i didn't delete it. but it's not there. i desperately need to 
recover this file. if there somewhere I can look in the file system? Or 
does samba put files somewhere that I don't know?

i tried file recovery in windows xp, but nothing can find the file. is 
there anyway to do file recovery on samba running in freebsd 4.10.

thanks,
josh
--
Josh Dickens
Only Creative
165 Bridge Landing
Douglasville, GA 30134
770.363.3214
www.onlycreative.net
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Guest Printing Broke after upgrade from 2.28 to 3.010

2004-12-19 Thread Dan Willis
I'm running a CUPS print server with SuSe 9.0 Pro with printers shared through 
Samba. I've recently upgraded from 2.28 to 3.010.  My server is a member of an 
NT 4 domain.  I run winbind to authenticate users to the domain; however, I 
also allow guest printing because many laptop users' machines are not domain 
members.  

There has been a change in guest printing behavior after the upgrade.  Domain 
authentication is working fine. Guest printing (desired) is working OK if the 
guest's username is not a valid domain username. However, guest printing for 
laptop users who have domain accounts but are not logged in to the domain does 
not work and actually locks the user's domain account.  In Samba 2.28, these 
users would map to nobody and could print as desired. 

I have tried changing the winbind use default domain parameter, the allow 
trusted domains parameter, etc. with no change.  I'd like to be able to 
authenticate users if possible, but still provide guest printing to laptop 
users.  I've pasted a sanitized version of my smb.conf file below.  What am I 
overlooking? 

Thanks,
Dan Willis

# Samba config file created using SWAT
# from 0.0.0.0 (0.0.0.0)
 # Date: 2004/12/19 23:29:05 
# Global parameters [global]
workgroup = DOMAINNAME 
server string = Print server
security = DOMAIN
 auth methods = guest, sam, winbind 
allow trusted domains = No
 min password length = 6
 map to guest = Bad Password
 pam password change = Yes
 unix password sync = Yes 
client NTLMv2 auth = Yes
 client lanman auth = No
 client plaintext auth = No
 log level = 2 
log file = /var/log/samba/log.%m 
acl compatibility = win2k
 name resolve order = wins lmhosts host bcast
 time server = Yes
 paranoid server security = No 
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
 printcap name = CUPS
 domain master = No 
dns proxy = No 
wins server = IP ADDRESS
 ldap ssl = no 
idmap uid = 1-2 
idmap gid = 1-2
 winbind trusted domains only = Yes
 invalid users = 
printer admin = 
 hosts deny = 
 veto files = /*.eml/*.nws/riched20.dll/*.{*}/ 
level2 oplocks = No 
[homes]
 comment = Home Directories
 valid users = %D/%U/%S 
read only = No 
create mask = 0640
 directory mask = 0750
 browseable = No 
[printers]
comment = All Printers
 path = /var/tmp 
create mask = 0600 
guest ok = Yes
 printable = Yes 
use client driver = Yes
 browseable = No 
[print$]
 comment = Printer Drivers 
path = /var/lib/samba/drivers
 write list = @ntadmin, root 
force group = ntadmin 
create mask = 0664 
directory mask = 0775
 [Lexmark]
 comment = Lexmark example printer
 path = /var/tmp
 printer admin = Mydomain\myusername
read only = No
 create mask = 0600 
guest ok = Yes 
printable = Yes 
printer name = Lexmark example printer
use client driver = Yes 
oplocks = No

idmap backend = 
idmap uid = 1-2
 idmap gid = 1-2
 template primary group = nobody
 template homedir = /home/%D/%U 
template shell = /bin/false
 winbind separator = \ 
winbind cache time = 300
 winbind enable local accounts = No 
winbind enum users = Yes 
winbind enum groups = Yes
 winbind use default domain = No 
winbind trusted domains only = Yes
 winbind nested groups = No
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Warning for SP2 net share point on Samba 3.0.7

2004-12-19 Thread Lewis Shobbrook
Hi All,
Just a word of caution for those who are intending to roll out XP SP2
via a network share.  I've encoutered an issue with SP2 and Debian Samba
3.07 when more than 5 simultaneous connections are in place. I'd set-up
and tested a rollout using the samba share, but come roll-out day most
of the 20 odd machines were still copying files some 48 hours after.  No
specific errors were apparent in system/smb logs and regular share
access continued without disruption to the usual quality of service.
i.e. Everything was still working fine as a regular user, just SP2 fell
into a heap.  The share used had been tested previosuly utilising the
same scripted method for SP2 rollout pilots, with up to simultaneous 5
users without issue; it appears that only higher volumes of SP2 cause an
issue. The rollout was repeated using a 2003 server, without issue. Just
thought I'd raise this rather strange occurrence, and potentially cover
a pitfall.

Cheers,

Lewis Shobbrook

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

svn commit: samba r4281 - in branches/SAMBA_4_0/source/lib/ldb/ldb_tdb: .

2004-12-19 Thread tridge
Author: tridge
Date: 2004-12-19 10:56:29 + (Sun, 19 Dec 2004)
New Revision: 4281

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4281

Log:
fixed an ldb indexing bug in ldb found by volker.

index entries were not always being removed on modify

Modified:
   branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_index.c
   branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_tdb.c
   branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_tdb.h


Changeset:
Modified: branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_index.c
===
--- branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_index.c   2004-12-19 
07:50:19 UTC (rev 4280)
+++ branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_index.c   2004-12-19 
10:56:29 UTC (rev 4281)
@@ -746,8 +746,8 @@
 /*
   delete an index entry for one message element
 */
-static int ltdb_index_del1(struct ldb_module *module, const char *dn, 
-  struct ldb_message_element *el, int v_idx)
+int ltdb_index_del_value(struct ldb_module *module, const char *dn, 
+struct ldb_message_element *el, int v_idx)
 {
struct ldb_context *ldb = module-ldb;
struct ldb_message msg;
@@ -826,7 +826,7 @@
continue;
}
for (j=0;jmsg-elements[i].num_values;j++) {
-   ret = ltdb_index_del1(module, msg-dn, 
msg-elements[i], j);
+   ret = ltdb_index_del_value(module, msg-dn, 
msg-elements[i], j);
if (ret == -1) {
return -1;
}

Modified: branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_tdb.c
===
--- branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_tdb.c 2004-12-19 07:50:19 UTC 
(rev 4280)
+++ branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_tdb.c 2004-12-19 10:56:29 UTC 
(rev 4281)
@@ -403,10 +403,11 @@
 /*
   delete all elements having a specified attribute name
 */
-static int msg_delete_attribute(struct ldb_context *ldb,
+static int msg_delete_attribute(struct ldb_module *module,
+   struct ldb_context *ldb,
struct ldb_message *msg, const char *name)
 {
-   unsigned int i, count=0;
+   unsigned int i, j, count=0;
struct ldb_message_element *el2;
 
el2 = ldb_malloc_array_p(ldb, struct ldb_message_element, 
msg-num_elements);
@@ -419,6 +420,9 @@
if (ldb_attr_cmp(msg-elements[i].name, name) != 0) {
el2[count++] = msg-elements[i];
} else {
+   for (j=0;jmsg-elements[i].num_values;j++) {
+   ltdb_index_del_value(module, msg-dn, 
msg-elements[i], j);
+   }
ldb_free(ldb, msg-elements[i].values);
}
}
@@ -460,7 +464,7 @@
}
el-num_values--;
if (el-num_values == 0) {
-   return msg_delete_attribute(ldb, msg, name);
+   return msg_delete_attribute(module, ldb, msg, 
name);
}
return 0;
}
@@ -532,7 +536,7 @@
case LDB_FLAG_MOD_REPLACE:
/* replace all elements of this attribute name with the 
elements
   listed. The attribute not existing is not an error */
-   msg_delete_attribute(ldb, msg2, msg-elements[i].name);
+   msg_delete_attribute(module, ldb, msg2, 
msg-elements[i].name);
 
/* add the replacement element, if not empty */
if (msg-elements[i].num_values != 0 
@@ -545,7 +549,7 @@
/* we could be being asked to delete all
   values or just some values */
if (msg-elements[i].num_values == 0) {
-   if (msg_delete_attribute(ldb, msg2, 
+   if (msg_delete_attribute(module, ldb, msg2, 
 msg-elements[i].name) 
!= 0) {
ltdb-last_err_string = No such 
attribute;
goto failed;
@@ -560,6 +564,9 @@
ltdb-last_err_string = No such 
attribute;
goto failed;
}
+   if (ltdb_index_del_value(module, msg-dn, 
msg-elements[i], j) != 0) {
+   goto failed;
+   }
}
break;
}

Modified: branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_tdb.h

svn commit: samba r4282 - in branches/SAMBA_4_0/source/lib/ldb/ldb_tdb: .

2004-12-19 Thread tridge
Author: tridge
Date: 2004-12-19 10:58:36 + (Sun, 19 Dec 2004)
New Revision: 4282

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4282

Log:
removed a spurious error message now we remove index entries in the modify call

Modified:
   branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_index.c


Changeset:
Modified: branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_index.c
===
--- branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_index.c   2004-12-19 
10:56:29 UTC (rev 4281)
+++ branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_index.c   2004-12-19 
10:58:36 UTC (rev 4282)
@@ -769,7 +769,6 @@
if (ret == 0) {
/* it wasn't indexed. Did we have an earlier error? If we did 
then
   its gone now */
-   ldb_debug(ldb, LDB_DEBUG_ERROR, ERROR: dn_key %s was not 
indexed\n, dn_key);
ldb_free(ldb, dn_key);
return 0;
}



svn commit: samba r4283 - in branches/SAMBA_4_0/source/rpc_server/lsa: .

2004-12-19 Thread tridge
Author: tridge
Date: 2004-12-19 11:34:19 + (Sun, 19 Dec 2004)
New Revision: 4283

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4283

Log:
adding a privilege that an account already has is not an error


Modified:
   branches/SAMBA_4_0/source/rpc_server/lsa/dcesrv_lsa.c


Changeset:
Modified: branches/SAMBA_4_0/source/rpc_server/lsa/dcesrv_lsa.c
===
--- branches/SAMBA_4_0/source/rpc_server/lsa/dcesrv_lsa.c   2004-12-19 
10:58:36 UTC (rev 4282)
+++ branches/SAMBA_4_0/source/rpc_server/lsa/dcesrv_lsa.c   2004-12-19 
11:34:19 UTC (rev 4283)
@@ -878,7 +878,57 @@
return NT_STATUS_OK;
 }
 
+/* 
+  lsa_EnumAccountRights 
+*/
+static NTSTATUS lsa_EnumAccountRights(struct dcesrv_call_state *dce_call, 
+ TALLOC_CTX *mem_ctx,
+ struct lsa_EnumAccountRights *r)
+{
+   struct dcesrv_handle *h;
+   struct lsa_policy_state *state;
+   int ret, i;
+   struct ldb_message **res;
+   const char * const attrs[] = { privilege, NULL};
+   const char *sidstr;
+   struct ldb_message_element *el;
 
+   DCESRV_PULL_HANDLE(h, r-in.handle, LSA_HANDLE_POLICY);
+
+   state = h-data;
+
+   sidstr = dom_sid_string(mem_ctx, r-in.sid);
+   if (sidstr == NULL) {
+   return NT_STATUS_NO_MEMORY;
+   }
+
+   ret = samdb_search(state-sam_ctx, mem_ctx, NULL, res, attrs, 
+  objectSid=%s, sidstr);
+   if (ret != 1) {
+   return NT_STATUS_OBJECT_NAME_NOT_FOUND;
+   }
+
+   el = ldb_msg_find_element(res[0], privilege);
+   if (el == NULL || el-num_values == 0) {
+   return NT_STATUS_OBJECT_NAME_NOT_FOUND;
+   }
+
+   r-out.rights-count = el-num_values;
+   r-out.rights-names = talloc_array_p(r-out.rights, 
+ struct lsa_String, 
r-out.rights-count);
+   if (r-out.rights-names == NULL) {
+   return NT_STATUS_NO_MEMORY;
+   }
+
+   for (i=0;iel-num_values;i++) {
+   r-out.rights-names[i].string = el-values[i].data;
+   }
+
+   return NT_STATUS_OK;
+}
+
+
+
 /* 
   helper for lsa_AddAccountRights and lsa_RemoveAccountRights
 */
@@ -886,7 +936,7 @@
   TALLOC_CTX *mem_ctx,
   struct lsa_policy_state *state,
   int ldb_flag,
-  const struct dom_sid *sid,
+  struct dom_sid *sid,
   const struct lsa_RightSet *rights)
 {
const char *sidstr;
@@ -894,6 +944,7 @@
struct ldb_message_element el;
int i, ret;
const char *dn;
+   struct lsa_EnumAccountRights r2;
 
sidstr = dom_sid_string(mem_ctx, sid);
if (sidstr == NULL) {
@@ -917,22 +968,54 @@
if (el.name == NULL) {
return NT_STATUS_NO_MEMORY;
}
-   el.num_values = rights-count;
-   el.values = talloc_array_p(mem_ctx, struct ldb_val, el.num_values);
+
+   if (ldb_flag == LDB_FLAG_MOD_ADD) {
+   NTSTATUS status;
+
+   r2.in.handle = state-handle-wire_handle;
+   r2.in.sid = sid;
+   r2.out.rights = talloc_p(mem_ctx, struct lsa_RightSet);
+
+   status = lsa_EnumAccountRights(dce_call, mem_ctx, r2);
+   if (!NT_STATUS_IS_OK(status)) {
+   ZERO_STRUCTP(r2.out.rights);
+   }
+   }
+
+   el.num_values = 0;
+   el.values = talloc_array_p(mem_ctx, struct ldb_val, rights-count);
if (el.values == NULL) {
return NT_STATUS_NO_MEMORY;
}
-   for (i=0;iel.num_values;i++) {
+   for (i=0;irights-count;i++) {
if (sec_privilege_id(rights-names[i].string) == -1) {
return NT_STATUS_NO_SUCH_PRIVILEGE;
}
-   el.values[i].length = strlen(rights-names[i].string);
-   el.values[i].data = talloc_strdup(mem_ctx, 
rights-names[i].string);
-   if (el.values[i].data == NULL) {
+
+   if (ldb_flag == LDB_FLAG_MOD_ADD) {
+   int j;
+   for (j=0;jr2.out.rights-count;j++) {
+   if (StrCaseCmp(r2.out.rights-names[j].string, 
+  rights-names[i].string) == 0) {
+   break;
+   }
+   }
+   if (j != r2.out.rights-count) continue;
+   }
+
+
+   el.values[el.num_values].length = 
strlen(rights-names[i].string);
+   el.values[el.num_values].data = talloc_strdup(mem_ctx, 
rights-names[i].string);
+   if 

svn commit: samba-web r479 - in trunk/docs: .

2004-12-19 Thread deryck
Author: deryck
Date: 2004-12-19 14:28:17 + (Sun, 19 Dec 2004)
New Revision: 479

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=479

Log:

Adding info on getting docs from subversion.

--deryck

Modified:
   trunk/docs/index.html


Changeset:
Modified: trunk/docs/index.html
===
--- trunk/docs/index.html   2004-12-17 19:37:49 UTC (rev 478)
+++ trunk/docs/index.html   2004-12-19 14:28:17 UTC (rev 479)
@@ -131,6 +131,12 @@
   community, and any help is much appreciated.  Contributions can be 
simple 
   typo corrections or a write up of new or previously undocumented 
features./p
 
+pTo get the lastest docs sources from Subversion, run:/p
+
+pre
+svn co svn://svnanon.samba.org/samba-docs/trunk samba-docs
+/pre
+
 pDocumentation patches can be reported through 
a href=https://bugzilla.samba.org;bugzilla/a.  From the bugzilla 
home 
 page, select 'Enter a new bug report,' choose the appropriate Samba 
branch, 



svn commit: samba-docs r306 - in trunk/Samba-HOWTO-Collection: .

2004-12-19 Thread jht
Author: jht
Date: 2004-12-19 16:26:02 + (Sun, 19 Dec 2004)
New Revision: 306

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=306

Log:
Replace drive root with environment variable that is portable.
Modified:
   trunk/Samba-HOWTO-Collection/Integrating-with-Windows.xml


Changeset:
Modified: trunk/Samba-HOWTO-Collection/Integrating-with-Windows.xml
===
--- trunk/Samba-HOWTO-Collection/Integrating-with-Windows.xml   2004-12-16 
12:33:57 UTC (rev 305)
+++ trunk/Samba-HOWTO-Collection/Integrating-with-Windows.xml   2004-12-19 
16:26:02 UTC (rev 306)
@@ -442,7 +442,7 @@
 para
 indextermprimaryLMHOSTS/primary/indexterm
 This file is usually located in MS Windows NT 4.0 or Windows 200x/XP in the 
directory
-filenameC:\WINNT\SYSTEM32\DRIVERS\ETC/filename and contains the IP Address
+filename%SystemRoot%\SYSTEM32\DRIVERS\ETC/filename and contains the IP 
Address
 and the machine name in matched pairs. The filenameLMHOSTS/filename file
 performs NetBIOS name to IP address mapping.
 /para
@@ -538,7 +538,7 @@
 
 para
 This file is usually located in MS Windows NT 4.0 or Windows 200x/XP in 
-the directory filenameC:\WINNT\SYSTEM32\DRIVERS\ETC/filename and contains 
+the directory filename%SystemRoot%\SYSTEM32\DRIVERS\ETC/filename and 
contains 
 the IP Address and the IP hostname in matched pairs. It can be 
 used by the name resolution infrastructure in MS Windows, depending 
 on how the TCP/IP environment is configured. This file is in 



svn commit: samba r4284 - in branches/SAMBA_4_0/source/smb_server: .

2004-12-19 Thread tridge
Author: tridge
Date: 2004-12-20 03:12:09 + (Mon, 20 Dec 2004)
New Revision: 4284

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4284

Log:
fixed a problem with very large EA lists and OS/2 clients. These
checks on allocations need to go in a lot more places, but at least
this is a start.

Modified:
   branches/SAMBA_4_0/source/smb_server/trans2.c


Changeset:
Modified: branches/SAMBA_4_0/source/smb_server/trans2.c
===
--- branches/SAMBA_4_0/source/smb_server/trans2.c   2004-12-19 11:34:19 UTC 
(rev 4283)
+++ branches/SAMBA_4_0/source/smb_server/trans2.c   2004-12-20 03:12:09 UTC 
(rev 4284)
@@ -35,36 +35,43 @@
 /* grow the data allocation size of a trans2 reply - this guarantees
that requests to grow the data size later will not change the
pointer */
-static void trans2_grow_data_allocation(struct smbsrv_request *req, 
+static BOOL trans2_grow_data_allocation(struct smbsrv_request *req, 
struct smb_trans2 *trans,
-   uint16_t new_size)
+   uint32_t new_size)
 {
if (new_size = trans-out.data.length) {
-   return;
+   return True;
}
trans-out.data.data = talloc_realloc(req, trans-out.data.data, 
new_size);
+   return (trans-out.data.data != NULL);
 }
 
 
 /* grow the data size of a trans2 reply */
-static void trans2_grow_data(struct smbsrv_request *req, 
+static BOOL trans2_grow_data(struct smbsrv_request *req, 
 struct smb_trans2 *trans,
-uint16_t new_size)
+uint32_t new_size)
 {
-   trans2_grow_data_allocation(req, trans, new_size);
+   if (!trans2_grow_data_allocation(req, trans, new_size)) {
+   return False;
+   }
trans-out.data.length = new_size;
+   return True;
 }
 
 /* grow the data, zero filling any new bytes */
-static void trans2_grow_data_fill(struct smbsrv_request *req, 
+static BOOL trans2_grow_data_fill(struct smbsrv_request *req, 
  struct smb_trans2 *trans,
- uint16_t new_size)
+ uint32_t new_size)
 {
-   uint16_t old_size = trans-out.data.length;
-   trans2_grow_data(req, trans, new_size);
+   uint32_t old_size = trans-out.data.length;
+   if (!trans2_grow_data(req, trans, new_size)) {
+   return False;
+   }
if (new_size  old_size) {
memset(trans-out.data.data + old_size, 0, new_size - old_size);
}
+   return True;
 }
 
 
@@ -1004,7 +1011,7 @@
 /*
   fill a single entry in a trans2 find reply 
 */
-static void find_fill_info(struct smbsrv_request *req,
+static BOOL find_fill_info(struct smbsrv_request *req,
   struct smb_trans2 *trans, 
   struct find_state *state,
   union smb_search_data *file)
@@ -1065,11 +1072,15 @@
case RAW_SEARCH_EA_LIST:
ea_size = ea_list_size(file-ea_list.eas.num_eas, 
file-ea_list.eas.eas);
if (state-flags  FLAG_TRANS2_FIND_REQUIRE_RESUME) {
-   trans2_grow_data(req, trans, ofs + 27 + ea_size);
+   if (!trans2_grow_data(req, trans, ofs + 27 + ea_size)) {
+   return False;
+   }
SIVAL(trans-out.data.data, ofs, 
file-ea_list.resume_key);
ofs += 4;
} else {
-   trans2_grow_data(req, trans, ofs + 23 + ea_size);
+   if (!trans2_grow_data(req, trans, ofs + 23 + ea_size)) {
+   return False;
+   }
}
data = trans-out.data.data + ofs;
srv_push_dos_date2(req-smb_conn, data, 0, 
file-ea_list.create_time);
@@ -1200,6 +1211,8 @@
SIVAL(data,  0, trans-out.data.length - ofs);
break;
}
+
+   return True;
 }
 
 /* callback function for trans2 findfirst/findnext */
@@ -1211,10 +1224,8 @@
 
old_length = trans-out.data.length;
 
-   find_fill_info(state-req, trans, state, file);
-
-   /* see if we have gone beyond the user specified maximum */
-   if (trans-out.data.length  trans-in.max_data) {
+   if (!find_fill_info(state-req, trans, state, file) ||
+   trans-out.data.length  trans-in.max_data) {
/* restore the old length and tell the backend to stop */
trans2_grow_data(state-req, trans, old_length);
return False;