[Samba] LDAP Account Manager 0.4.7 released
LDAP Account Manager (LAM) 0.4.7 - December 19th, 2004 == A web frontend for managing accounts stored in an OpenLDAP server. Announcement: - This version closes several minor bugs. LAM is a set of PHP-scripts to administrate entries of a LDAP server. User, group and Samba accounts can be displayed, searched, filtered, added, removed and edited over an easy to use web interface. Even the configuration options are embedded in the interface. Features: - - management of Unix user and group accounts (posixAccount/posixGroup) - management of Samba 2.x/3 user and host accounts (sambaAccount/sambaSamAccount) - profiles for account creation - editor for organizational units (OU) - account creation via file upload - automatic creation/deletion of home directories - setting quotas - support for LDAP+SSL - multi-language support (English, French, German, Hungarian, Japanese) - multiple configuration files - PDF output for user/group/host accounts - additional text for user PDFs - supports multiple password hashes Availability: - This software is available under the GNU General Public License V2.0. You can get the newest version at http://lam.sf.net. File formats: DEB, tar.gz There is also a FreeBSD port. Debian users may use the packages in unstable. Support: If you find a bug please file a bug report. For questions or implementing new features please use the forum and feature request tracker at our Sourceforge homepage http://www.sf.net/projects/lam. Author Copyright: --- Copyright (C) 2003 - 2004: Michael Duergner [EMAIL PROTECTED] Roland Gruber [EMAIL PROTECTED] Tilo Lutz [EMAIL PROTECTED] This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA signature.asc Description: OpenPGP digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] how to check out samba-docs from SVN ?
Dear Sirs, I cannot find how to check out samba-docs according to docs/README-NOW: ATTENTION DOCS TREE REMOVED --- This docs tree has been moved to a separate SVN module on svn.samba.org name 'samba-docs'. See http://svnanon.samba.org/ for details on accessing Samba svn trees. Cheers, Ilia Chipitsine -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba-3.0.10-2
yesterday I upgrade my samba from 3.09-1 to the current 3.0.10-2 after completing the upgrade process I can nolonger connect to my samba sever from windows xp client. I start the serveces list to see what smbd nmbd is doing, and notice that smbd has 6 pid running and nmbd has only 2 running. Winbind is not running as well how can I solve this problem and what step should I take to correct this multiple pid running. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] suggestion to Samba-HOWTO-Collection
Hello! I'd suggest to change 26.4.3 HOSTS File C:\WINNT\SYSTEM32\DRIVERS\ETC -- %SystemRoot%\System32\Drivers\Etc Cheers, Ilia Chipitsine P.S. would it be better to submit fixes via bugzilla ? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] [2.6 patch] remove outdated smbfs ChangeLog
The patch below removes an outdated samba ChangeLog file. diffstat output: fs/smbfs/ChangeLog | 160 - 1 files changed, 160 deletions(-) Signed-off-by: Adrian Bunk [EMAIL PROTECTED] --- linux-2.6.10-rc3-mm1-full/fs/smbfs/ChangeLog2004-10-18 23:54:55.0 +0200 +++ /dev/null 2004-11-25 03:16:25.0 +0100 @@ -1,160 +0,0 @@ -ChangeLog for smbfs. - -2002-04-19 John Newbigin [EMAIL PROTECTED] - - * Implementation of CIFS Extensions for UNIX systems, including soft - and hard links. - -2001-08-03 Urban Widmark [EMAIL PROTECTED] - - * *.c: Unicode support - -2001-08-23 Jochen Dolze [EMAIL PROTECTED] - - * proc.c: Correct rsize/wsize computation for readX/writeX - -2001-0?-?? Urban Widmark [EMAIL PROTECTED] - - * *.c: Add LFS - * *.c: Move to a driver style handling of different servertypes. - (Not all operations are done this way. yet.) -2001-12-31 René Scharfe [EMAIL PROTECTED] - - * inode.c: added smb_show_options to show mount options in /proc/mounts - * inode.c, getopt.c, getopt.h: merged flag and has_arg in struct option - * inode.c: use S_IRWXUGO where appropriate - -2001-12-22 Urban Widmark [EMAIL PROTECTED] - - * file.c, proc.c: Fix problems triggered by the fsx test - -2001-09-17 Urban Widmark [EMAIL PROTECTED] - - * proc.c: Use 4096 (was 512) as the blocksize for better write - performance (patch originally by Jan Kratochvil) - * proc.c: Skip disconnect smb, allows umount on unreachable servers. - * proc.c: Go back to the interruptible sleep as reconnects seem to - handle it now. - * *.c: use autogenerated and private proto.h - -2000-11-22 Igor Zhbanov [EMAIL PROTECTED] - - * proc.c: fixed date_unix2dos for dates earlier than 01/01/1980 - and date_dos2unix for date==0 (from 2.2) - -2001-07-13 Rob Radez [EMAIL PROTECTED] - - * proc.c: make smb_errno return negative error values - -2001-07-09 Jochen Dolze [EMAIL PROTECTED] - - * inode.c: smb_statfs always returned success. - * proc.c, ioctl.c: Allow smbmount to signal failure to reconnect with - a NULL argument to SMB_IOC_NEWCONN (speeds up error detection). - * proc.c: Add some of the missing error codes to smb_errno - -2001-06-12 Urban Widmark [EMAIL PROTECTED] - - * proc.c: replace the win95-flush fix with smb_seek, when needed. - * proc.c: readdir 'lastname' bug (NetApp dir listing fix) - -2001-05-08 Urban Widmark [EMAIL PROTECTED] - - * inode.c: Fix for changes on the server side not being detected - properly. Must always drop cached pages when updating an inode with - new size. - -2001-05-05 Urban Widmark [EMAIL PROTECTED] - - * file.c, proc.c: Drop SMB_F_LOCALWRITE to detect changes made on - both server and client, using flush with to force win9x to remember - the right filesize. - -2001-04-25 René Scharfe [EMAIL PROTECTED] - - * inode.c: Don't clear s_flags and allow ro mounts - -2001-04-21 Urban Widmark [EMAIL PROTECTED] - - * dir.c, proc.c: replace tests on conn_pid with tests on state to - fix smbmount reconnect on smb_retry timeout and up the timeout to 30s. - * proc.c: smb_newconn must have the server locked while updating it. - * inode.c, proc.c: need flush after truncate on some servers (win9x) - * file.c: add call to send SMBflush on fsync - (as suggested by Jochen Dolze [EMAIL PROTECTED]) - -2001-03-06 Urban Widmark [EMAIL PROTECTED] - - * cache.c: d_add on hashed dentries corrupts d_hash list and - causes loops in d_lookup. Inherited bug. :) - * inode.c: tail -f fix for non-readonly opened files - (related to the smb_proc_open change). - * inode.c: tail -f fix for fast size changes with the same mtime. - -2001-03-02 Michael Kockelkorn [EMAIL PROTECTED] - - * proc.c: fix smb_proc_open to allow open being called more than once - with different modes (O_RDONLY - O_WRONLY) without closing. - -2001-02-10 Urban Widmark [EMAIL PROTECTED] - - * dir.c, cache.c: replace non-bigmem safe cache with cache code - from ncpfs and fix some other bigmem bugs in smbfs. - * inode.c: root dentry not properly initialized - * proc.c, sock.c: adjust max parameters max data to follow max_xmit - lots of servers were having find_next trouble with this. - * proc.c: use documented write method of truncating (NetApp fix) - -2000-08-14 Urban Widmark [EMAIL PROTECTED] - - * dir.c: support case sensitive shares - * inode.c: ascii mount options - * proc.c: check length of paths to avoid buffer overflow - * proc.c: don't do interruptable_sleep in smb_retry to avoid signal - problem/race. - * proc.c: O_RDONLY smb_revalidate_inode fix (tail -f) - * proc.c: add nls support - * sock.c: attempt to fix
Re: [Samba] how to check out samba-docs from SVN ?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ilia Chipitsine wrote: | Dear Sirs, | | I cannot find how to check out samba-docs according to | To check out samba-docs from the Subversion repo: svn co svn://svnanon.samba.org/samba-docs/trunk samba-docs Cheers, - --deryck - -- Deryck Hodge http://www.devurandom.org/ Cataloging Department http://www.lib.auburn.edu/ Samba Team http://www.samba.org/ GnuPG Keyhttp://www.devurandom.org/gpg_pubkey.asc I am flawed but I am cleaning up so well. - --Dashboard Confessional, from Vindicated(2004) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBxYxo4glRK0DaE8gRAsHuAKCiyw8zJFKVbgVGXywKJDdJZFGWmACg1H1I gn7CtlcBP6RDh0ldIKyjkZw= =dUV6 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] how to check out samba-docs from SVN ?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ilia Chipitsine wrote: | Dear Sirs, | | I cannot find how to check out samba-docs according to | To check out samba-docs from the Subversion repo: svn co svn://svnanon.samba.org/samba-docs/trunk samba-docs hmm... trunk seems to be the same as HEAD in CVS ? I expected Samba-HOWTO-Collection for samba-3 to be included in samba-3-release, not in trunk. thank You for the answer! I guess it should be documented somewhere on the site. Cheers, - --deryck - -- Deryck Hodge http://www.devurandom.org/ Cataloging Department http://www.lib.auburn.edu/ Samba Team http://www.samba.org/ GnuPG Keyhttp://www.devurandom.org/gpg_pubkey.asc I am flawed but I am cleaning up so well. - --Dashboard Confessional, from Vindicated(2004) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBxYxo4glRK0DaE8gRAsHuAKCiyw8zJFKVbgVGXywKJDdJZFGWmACg1H1I gn7CtlcBP6RDh0ldIKyjkZw= =dUV6 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: suggestion to Samba-HOWTO-Collection
On Sunday 19 December 2004 06:41, Ilia Chipitsine wrote: Hello! I'd suggest to change 26.4.3 HOSTS File C:\WINNT\SYSTEM32\DRIVERS\ETC -- %SystemRoot%\System32\Drivers\Etc Done. Thanks. - John T. Cheers, Ilia Chipitsine P.S. would it be better to submit fixes via bugzilla ? Yes please. Cheers, John T. -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] (no subject)
Dear [EMAIL PROTECTED], Thank you for sending email to [EMAIL PROTECTED] Sadly Martin gets too much unsolicited at this email address, so please could you send your mail instead to [EMAIL PROTECTED] ? Yours faithfully, -- Martin Oldfield AdamsNames Ltd. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Samba-HOWTO-Collection/StandAloneServer.html#simplynice
Jim C. wrote: | After reading smb.conf the option passdb backend = guest looks wrong? | guest isnt listed as a possibility in the manpage. | Ive changed nothing in my passwd/smbpasswd file. | Why is it not working? passdb backend tells samba where to find it's records. You need to read up on this. http://us2.samba.org/samba/docs/man/Samba-HOWTO-Collection/passdb.html Jim C. -- - | I can be reached on the following Instant Messenger services: | |---| | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | |---| | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| Yes, but reading the mentioned site doesnt helpguest still looks wrong :( there should be a password backend like tdbsam, ldapsam or mysqlsam. It makes no sense. Regards Julius - -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Samba-HOWTO-Collection/StandAloneServer.html#simplynice
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Julius Junghans wrote: | Jim C. wrote: | | | After reading smb.conf the option passdb backend = guest looks wrong? | | guest isnt listed as a possibility in the manpage. | | Ive changed nothing in my passwd/smbpasswd file. | | Why is it not working? | | passdb backend tells samba where to find it's records. You need to read | up on this. | | http://us2.samba.org/samba/docs/man/Samba-HOWTO-Collection/passdb.html | | | Jim C. | -- | - | | I can be reached on the following Instant Messenger services: | | |---| | | MSN: j_c_llings @ hotmail.com AIM: WyteLi0n ICQ: 123291844 | | |---| | | Y!: j_c_llingsJabber: jcllings @ njs.netlab.cz| | | | | Yes, but reading the mentioned site doesnt helpguest still looks | wrong :( | there should be a password backend like tdbsam, ldapsam or mysqlsam. | It makes no sense. the 'guest' passdb backend doesn't have to be specified explicitly anymore (Samba adds it if necessary), so I think using just 'passdb backend = ' should suffice. Specifying 'guest' doesn't hurt though. Cheers, Jelmer -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBxc1MPa9Uoh7vUnYRArvxAJ9hBaNLbSVbjbT0yavUdDAukcDoYgCcCuNy YTnlcQfLQxrSTlPNX/Fh4qU= =O4na -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] AutoNotify: Error
Message [19c_2103inofa1b.pro] triggered rule [Cing SPAM] at 9:03:10 PM 12/19/2004 Sender: [EMAIL PROTECTED] Recipient(s): [EMAIL PROTECTED] Subject: Error ** The contents of this email and any attachments are confidential. It is intended for the named recipient(s) only. If you have received this email in error please notify the system manager or the sender immediately and do not disclose the contents to any one or make copies. ** CING Security System scanned this email for viruses, vandals and malicious content ** ** -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] This is an alert from eSafe
*** CING Security System has detected a hostile content in this email. *** Time: 19 Dec 2004 21:01:52 Scan result: Mail modified to remove malicious content Protocol: SMTP in File Name\Mail Subject: mail_1103474299: Error Source: [EMAIL PROTECTED] Destination: [EMAIL PROTECTED] Details: data.doc .pif Infected with Win32.Netsky.q (Non-Removable), Blocked ** The contents of this email and any attachments are confidential. It is intended for the named recipient(s) only. If you have received this email in error please notify the system manager or the sender immediately and do not disclose the contents to any one or make copies. ** CING Security System scanned this email for viruses, vandals and malicious content ** ** -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] how to check out samba-docs from SVN ?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ilia Chipitsine wrote: | Dear Sirs, | | I cannot find how to check out samba-docs according to | | docs/README-NOW: | ... | See http://svnanon.samba.org/ for details on accessing | Samba svn trees. svn co svn://svnanon.samba.org/samba-docs/trunk samba-docs cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBxZB7IR7qMdg1EfYRAqB4AKDs62aUzmwrHHLnlJfB2Ec3QpLzDACgnnKv DJlpuUX5XnOzmTZDs1fq0jg= =OR1+ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] how to check out samba-docs from SVN ?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ilia Chipitsine wrote: | trunk seems to be the same as HEAD in CVS ? | I expected Samba-HOWTO-Collection for samba-3 to be included in | samba-3-release, not in trunk. The samba-docs svn repo is nor currently using branches. cheers, jerry - - Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc If we're adding to the noise, turn off this song--Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (Darwin) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFBxf5wIR7qMdg1EfYRApb8AJ9oIzyKk8aVtsvorqesMk3qF80KvwCg7zcG lu6DAKDmKUAThrORh7Augnc= =IQhK -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] (no subject)
-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba + LDAP + Automount maps
Hi Samba Gurus, We have an OpenLDAP server (openldap2-2.1.22-65) and a separate NFS server for home dirs. Currently LDAP NIS maps are being used by the Linux users in the department for home dir mounting on Linux clients. As everybody does, I started to look at Samba to accommodate the Windows users and have a single user database (in LDAP) to work with. Now I have a Samba PDC running samba3-3.0.9-1 version in my LDAP server with passdb backend being ldapsam:ldap://127.0.0.1. PDC itself works just fine right now with roaming profiles etc. The NFS server is the only system with big disks and hence we would like to have the home dirs in that system. I am not sure how automount plays into the whole setting of Samba and OpenLDAP. When a user logs into a windows machine, his home directory should get mounted from the NFS server automatically. The (Windows) profile would also live inside the (UNIX) home directory of the user and hence would also has to get mounted. Hopefully I am clear enough. Please send any configuration settings if you can. I tried some googling, but just saw one link where somebody discussed something similar with Sun's LDAP server and Samba. I tried that but did not work with OpenLDAP. The constraint is that the home dir NFS server is also a server for a Linux cluster we maintain and I do not want to touch that server currently for anything. Any help greatly appreciated. Thanks, Prakash -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] file recovery
i tried to save a flash file back onto my freebsd server running samba and when i hit save, windows xp gave some message but i hit enter to quickly to see what it said. it was basically saying that i could not save over a previous file for some reason. so i closed the file i was trying to save and went to look for the file that was there on the server and it's no longer there. so i have no file anymore. i didn't delete it. but it's not there. i desperately need to recover this file. if there somewhere I can look in the file system? Or does samba put files somewhere that I don't know? i tried file recovery in windows xp, but nothing can find the file. is there anyway to do file recovery on samba running in freebsd 4.10. thanks, josh -- Josh Dickens Only Creative 165 Bridge Landing Douglasville, GA 30134 770.363.3214 www.onlycreative.net -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Guest Printing Broke after upgrade from 2.28 to 3.010
I'm running a CUPS print server with SuSe 9.0 Pro with printers shared through Samba. I've recently upgraded from 2.28 to 3.010. My server is a member of an NT 4 domain. I run winbind to authenticate users to the domain; however, I also allow guest printing because many laptop users' machines are not domain members. There has been a change in guest printing behavior after the upgrade. Domain authentication is working fine. Guest printing (desired) is working OK if the guest's username is not a valid domain username. However, guest printing for laptop users who have domain accounts but are not logged in to the domain does not work and actually locks the user's domain account. In Samba 2.28, these users would map to nobody and could print as desired. I have tried changing the winbind use default domain parameter, the allow trusted domains parameter, etc. with no change. I'd like to be able to authenticate users if possible, but still provide guest printing to laptop users. I've pasted a sanitized version of my smb.conf file below. What am I overlooking? Thanks, Dan Willis # Samba config file created using SWAT # from 0.0.0.0 (0.0.0.0) # Date: 2004/12/19 23:29:05 # Global parameters [global] workgroup = DOMAINNAME server string = Print server security = DOMAIN auth methods = guest, sam, winbind allow trusted domains = No min password length = 6 map to guest = Bad Password pam password change = Yes unix password sync = Yes client NTLMv2 auth = Yes client lanman auth = No client plaintext auth = No log level = 2 log file = /var/log/samba/log.%m acl compatibility = win2k name resolve order = wins lmhosts host bcast time server = Yes paranoid server security = No socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY printcap name = CUPS domain master = No dns proxy = No wins server = IP ADDRESS ldap ssl = no idmap uid = 1-2 idmap gid = 1-2 winbind trusted domains only = Yes invalid users = printer admin = hosts deny = veto files = /*.eml/*.nws/riched20.dll/*.{*}/ level2 oplocks = No [homes] comment = Home Directories valid users = %D/%U/%S read only = No create mask = 0640 directory mask = 0750 browseable = No [printers] comment = All Printers path = /var/tmp create mask = 0600 guest ok = Yes printable = Yes use client driver = Yes browseable = No [print$] comment = Printer Drivers path = /var/lib/samba/drivers write list = @ntadmin, root force group = ntadmin create mask = 0664 directory mask = 0775 [Lexmark] comment = Lexmark example printer path = /var/tmp printer admin = Mydomain\myusername read only = No create mask = 0600 guest ok = Yes printable = Yes printer name = Lexmark example printer use client driver = Yes oplocks = No idmap backend = idmap uid = 1-2 idmap gid = 1-2 template primary group = nobody template homedir = /home/%D/%U template shell = /bin/false winbind separator = \ winbind cache time = 300 winbind enable local accounts = No winbind enum users = Yes winbind enum groups = Yes winbind use default domain = No winbind trusted domains only = Yes winbind nested groups = No -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Warning for SP2 net share point on Samba 3.0.7
Hi All, Just a word of caution for those who are intending to roll out XP SP2 via a network share. I've encoutered an issue with SP2 and Debian Samba 3.07 when more than 5 simultaneous connections are in place. I'd set-up and tested a rollout using the samba share, but come roll-out day most of the 20 odd machines were still copying files some 48 hours after. No specific errors were apparent in system/smb logs and regular share access continued without disruption to the usual quality of service. i.e. Everything was still working fine as a regular user, just SP2 fell into a heap. The share used had been tested previosuly utilising the same scripted method for SP2 rollout pilots, with up to simultaneous 5 users without issue; it appears that only higher volumes of SP2 cause an issue. The rollout was repeated using a 2003 server, without issue. Just thought I'd raise this rather strange occurrence, and potentially cover a pitfall. Cheers, Lewis Shobbrook -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
svn commit: samba r4281 - in branches/SAMBA_4_0/source/lib/ldb/ldb_tdb: .
Author: tridge Date: 2004-12-19 10:56:29 + (Sun, 19 Dec 2004) New Revision: 4281 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4281 Log: fixed an ldb indexing bug in ldb found by volker. index entries were not always being removed on modify Modified: branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_index.c branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_tdb.c branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_tdb.h Changeset: Modified: branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_index.c === --- branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_index.c 2004-12-19 07:50:19 UTC (rev 4280) +++ branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_index.c 2004-12-19 10:56:29 UTC (rev 4281) @@ -746,8 +746,8 @@ /* delete an index entry for one message element */ -static int ltdb_index_del1(struct ldb_module *module, const char *dn, - struct ldb_message_element *el, int v_idx) +int ltdb_index_del_value(struct ldb_module *module, const char *dn, +struct ldb_message_element *el, int v_idx) { struct ldb_context *ldb = module-ldb; struct ldb_message msg; @@ -826,7 +826,7 @@ continue; } for (j=0;jmsg-elements[i].num_values;j++) { - ret = ltdb_index_del1(module, msg-dn, msg-elements[i], j); + ret = ltdb_index_del_value(module, msg-dn, msg-elements[i], j); if (ret == -1) { return -1; } Modified: branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_tdb.c === --- branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_tdb.c 2004-12-19 07:50:19 UTC (rev 4280) +++ branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_tdb.c 2004-12-19 10:56:29 UTC (rev 4281) @@ -403,10 +403,11 @@ /* delete all elements having a specified attribute name */ -static int msg_delete_attribute(struct ldb_context *ldb, +static int msg_delete_attribute(struct ldb_module *module, + struct ldb_context *ldb, struct ldb_message *msg, const char *name) { - unsigned int i, count=0; + unsigned int i, j, count=0; struct ldb_message_element *el2; el2 = ldb_malloc_array_p(ldb, struct ldb_message_element, msg-num_elements); @@ -419,6 +420,9 @@ if (ldb_attr_cmp(msg-elements[i].name, name) != 0) { el2[count++] = msg-elements[i]; } else { + for (j=0;jmsg-elements[i].num_values;j++) { + ltdb_index_del_value(module, msg-dn, msg-elements[i], j); + } ldb_free(ldb, msg-elements[i].values); } } @@ -460,7 +464,7 @@ } el-num_values--; if (el-num_values == 0) { - return msg_delete_attribute(ldb, msg, name); + return msg_delete_attribute(module, ldb, msg, name); } return 0; } @@ -532,7 +536,7 @@ case LDB_FLAG_MOD_REPLACE: /* replace all elements of this attribute name with the elements listed. The attribute not existing is not an error */ - msg_delete_attribute(ldb, msg2, msg-elements[i].name); + msg_delete_attribute(module, ldb, msg2, msg-elements[i].name); /* add the replacement element, if not empty */ if (msg-elements[i].num_values != 0 @@ -545,7 +549,7 @@ /* we could be being asked to delete all values or just some values */ if (msg-elements[i].num_values == 0) { - if (msg_delete_attribute(ldb, msg2, + if (msg_delete_attribute(module, ldb, msg2, msg-elements[i].name) != 0) { ltdb-last_err_string = No such attribute; goto failed; @@ -560,6 +564,9 @@ ltdb-last_err_string = No such attribute; goto failed; } + if (ltdb_index_del_value(module, msg-dn, msg-elements[i], j) != 0) { + goto failed; + } } break; } Modified: branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_tdb.h
svn commit: samba r4282 - in branches/SAMBA_4_0/source/lib/ldb/ldb_tdb: .
Author: tridge Date: 2004-12-19 10:58:36 + (Sun, 19 Dec 2004) New Revision: 4282 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4282 Log: removed a spurious error message now we remove index entries in the modify call Modified: branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_index.c Changeset: Modified: branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_index.c === --- branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_index.c 2004-12-19 10:56:29 UTC (rev 4281) +++ branches/SAMBA_4_0/source/lib/ldb/ldb_tdb/ldb_index.c 2004-12-19 10:58:36 UTC (rev 4282) @@ -769,7 +769,6 @@ if (ret == 0) { /* it wasn't indexed. Did we have an earlier error? If we did then its gone now */ - ldb_debug(ldb, LDB_DEBUG_ERROR, ERROR: dn_key %s was not indexed\n, dn_key); ldb_free(ldb, dn_key); return 0; }
svn commit: samba r4283 - in branches/SAMBA_4_0/source/rpc_server/lsa: .
Author: tridge Date: 2004-12-19 11:34:19 + (Sun, 19 Dec 2004) New Revision: 4283 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4283 Log: adding a privilege that an account already has is not an error Modified: branches/SAMBA_4_0/source/rpc_server/lsa/dcesrv_lsa.c Changeset: Modified: branches/SAMBA_4_0/source/rpc_server/lsa/dcesrv_lsa.c === --- branches/SAMBA_4_0/source/rpc_server/lsa/dcesrv_lsa.c 2004-12-19 10:58:36 UTC (rev 4282) +++ branches/SAMBA_4_0/source/rpc_server/lsa/dcesrv_lsa.c 2004-12-19 11:34:19 UTC (rev 4283) @@ -878,7 +878,57 @@ return NT_STATUS_OK; } +/* + lsa_EnumAccountRights +*/ +static NTSTATUS lsa_EnumAccountRights(struct dcesrv_call_state *dce_call, + TALLOC_CTX *mem_ctx, + struct lsa_EnumAccountRights *r) +{ + struct dcesrv_handle *h; + struct lsa_policy_state *state; + int ret, i; + struct ldb_message **res; + const char * const attrs[] = { privilege, NULL}; + const char *sidstr; + struct ldb_message_element *el; + DCESRV_PULL_HANDLE(h, r-in.handle, LSA_HANDLE_POLICY); + + state = h-data; + + sidstr = dom_sid_string(mem_ctx, r-in.sid); + if (sidstr == NULL) { + return NT_STATUS_NO_MEMORY; + } + + ret = samdb_search(state-sam_ctx, mem_ctx, NULL, res, attrs, + objectSid=%s, sidstr); + if (ret != 1) { + return NT_STATUS_OBJECT_NAME_NOT_FOUND; + } + + el = ldb_msg_find_element(res[0], privilege); + if (el == NULL || el-num_values == 0) { + return NT_STATUS_OBJECT_NAME_NOT_FOUND; + } + + r-out.rights-count = el-num_values; + r-out.rights-names = talloc_array_p(r-out.rights, + struct lsa_String, r-out.rights-count); + if (r-out.rights-names == NULL) { + return NT_STATUS_NO_MEMORY; + } + + for (i=0;iel-num_values;i++) { + r-out.rights-names[i].string = el-values[i].data; + } + + return NT_STATUS_OK; +} + + + /* helper for lsa_AddAccountRights and lsa_RemoveAccountRights */ @@ -886,7 +936,7 @@ TALLOC_CTX *mem_ctx, struct lsa_policy_state *state, int ldb_flag, - const struct dom_sid *sid, + struct dom_sid *sid, const struct lsa_RightSet *rights) { const char *sidstr; @@ -894,6 +944,7 @@ struct ldb_message_element el; int i, ret; const char *dn; + struct lsa_EnumAccountRights r2; sidstr = dom_sid_string(mem_ctx, sid); if (sidstr == NULL) { @@ -917,22 +968,54 @@ if (el.name == NULL) { return NT_STATUS_NO_MEMORY; } - el.num_values = rights-count; - el.values = talloc_array_p(mem_ctx, struct ldb_val, el.num_values); + + if (ldb_flag == LDB_FLAG_MOD_ADD) { + NTSTATUS status; + + r2.in.handle = state-handle-wire_handle; + r2.in.sid = sid; + r2.out.rights = talloc_p(mem_ctx, struct lsa_RightSet); + + status = lsa_EnumAccountRights(dce_call, mem_ctx, r2); + if (!NT_STATUS_IS_OK(status)) { + ZERO_STRUCTP(r2.out.rights); + } + } + + el.num_values = 0; + el.values = talloc_array_p(mem_ctx, struct ldb_val, rights-count); if (el.values == NULL) { return NT_STATUS_NO_MEMORY; } - for (i=0;iel.num_values;i++) { + for (i=0;irights-count;i++) { if (sec_privilege_id(rights-names[i].string) == -1) { return NT_STATUS_NO_SUCH_PRIVILEGE; } - el.values[i].length = strlen(rights-names[i].string); - el.values[i].data = talloc_strdup(mem_ctx, rights-names[i].string); - if (el.values[i].data == NULL) { + + if (ldb_flag == LDB_FLAG_MOD_ADD) { + int j; + for (j=0;jr2.out.rights-count;j++) { + if (StrCaseCmp(r2.out.rights-names[j].string, + rights-names[i].string) == 0) { + break; + } + } + if (j != r2.out.rights-count) continue; + } + + + el.values[el.num_values].length = strlen(rights-names[i].string); + el.values[el.num_values].data = talloc_strdup(mem_ctx, rights-names[i].string); + if
svn commit: samba-web r479 - in trunk/docs: .
Author: deryck Date: 2004-12-19 14:28:17 + (Sun, 19 Dec 2004) New Revision: 479 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=479 Log: Adding info on getting docs from subversion. --deryck Modified: trunk/docs/index.html Changeset: Modified: trunk/docs/index.html === --- trunk/docs/index.html 2004-12-17 19:37:49 UTC (rev 478) +++ trunk/docs/index.html 2004-12-19 14:28:17 UTC (rev 479) @@ -131,6 +131,12 @@ community, and any help is much appreciated. Contributions can be simple typo corrections or a write up of new or previously undocumented features./p +pTo get the lastest docs sources from Subversion, run:/p + +pre +svn co svn://svnanon.samba.org/samba-docs/trunk samba-docs +/pre + pDocumentation patches can be reported through a href=https://bugzilla.samba.org;bugzilla/a. From the bugzilla home page, select 'Enter a new bug report,' choose the appropriate Samba branch,
svn commit: samba-docs r306 - in trunk/Samba-HOWTO-Collection: .
Author: jht Date: 2004-12-19 16:26:02 + (Sun, 19 Dec 2004) New Revision: 306 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=306 Log: Replace drive root with environment variable that is portable. Modified: trunk/Samba-HOWTO-Collection/Integrating-with-Windows.xml Changeset: Modified: trunk/Samba-HOWTO-Collection/Integrating-with-Windows.xml === --- trunk/Samba-HOWTO-Collection/Integrating-with-Windows.xml 2004-12-16 12:33:57 UTC (rev 305) +++ trunk/Samba-HOWTO-Collection/Integrating-with-Windows.xml 2004-12-19 16:26:02 UTC (rev 306) @@ -442,7 +442,7 @@ para indextermprimaryLMHOSTS/primary/indexterm This file is usually located in MS Windows NT 4.0 or Windows 200x/XP in the directory -filenameC:\WINNT\SYSTEM32\DRIVERS\ETC/filename and contains the IP Address +filename%SystemRoot%\SYSTEM32\DRIVERS\ETC/filename and contains the IP Address and the machine name in matched pairs. The filenameLMHOSTS/filename file performs NetBIOS name to IP address mapping. /para @@ -538,7 +538,7 @@ para This file is usually located in MS Windows NT 4.0 or Windows 200x/XP in -the directory filenameC:\WINNT\SYSTEM32\DRIVERS\ETC/filename and contains +the directory filename%SystemRoot%\SYSTEM32\DRIVERS\ETC/filename and contains the IP Address and the IP hostname in matched pairs. It can be used by the name resolution infrastructure in MS Windows, depending on how the TCP/IP environment is configured. This file is in
svn commit: samba r4284 - in branches/SAMBA_4_0/source/smb_server: .
Author: tridge Date: 2004-12-20 03:12:09 + (Mon, 20 Dec 2004) New Revision: 4284 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4284 Log: fixed a problem with very large EA lists and OS/2 clients. These checks on allocations need to go in a lot more places, but at least this is a start. Modified: branches/SAMBA_4_0/source/smb_server/trans2.c Changeset: Modified: branches/SAMBA_4_0/source/smb_server/trans2.c === --- branches/SAMBA_4_0/source/smb_server/trans2.c 2004-12-19 11:34:19 UTC (rev 4283) +++ branches/SAMBA_4_0/source/smb_server/trans2.c 2004-12-20 03:12:09 UTC (rev 4284) @@ -35,36 +35,43 @@ /* grow the data allocation size of a trans2 reply - this guarantees that requests to grow the data size later will not change the pointer */ -static void trans2_grow_data_allocation(struct smbsrv_request *req, +static BOOL trans2_grow_data_allocation(struct smbsrv_request *req, struct smb_trans2 *trans, - uint16_t new_size) + uint32_t new_size) { if (new_size = trans-out.data.length) { - return; + return True; } trans-out.data.data = talloc_realloc(req, trans-out.data.data, new_size); + return (trans-out.data.data != NULL); } /* grow the data size of a trans2 reply */ -static void trans2_grow_data(struct smbsrv_request *req, +static BOOL trans2_grow_data(struct smbsrv_request *req, struct smb_trans2 *trans, -uint16_t new_size) +uint32_t new_size) { - trans2_grow_data_allocation(req, trans, new_size); + if (!trans2_grow_data_allocation(req, trans, new_size)) { + return False; + } trans-out.data.length = new_size; + return True; } /* grow the data, zero filling any new bytes */ -static void trans2_grow_data_fill(struct smbsrv_request *req, +static BOOL trans2_grow_data_fill(struct smbsrv_request *req, struct smb_trans2 *trans, - uint16_t new_size) + uint32_t new_size) { - uint16_t old_size = trans-out.data.length; - trans2_grow_data(req, trans, new_size); + uint32_t old_size = trans-out.data.length; + if (!trans2_grow_data(req, trans, new_size)) { + return False; + } if (new_size old_size) { memset(trans-out.data.data + old_size, 0, new_size - old_size); } + return True; } @@ -1004,7 +1011,7 @@ /* fill a single entry in a trans2 find reply */ -static void find_fill_info(struct smbsrv_request *req, +static BOOL find_fill_info(struct smbsrv_request *req, struct smb_trans2 *trans, struct find_state *state, union smb_search_data *file) @@ -1065,11 +1072,15 @@ case RAW_SEARCH_EA_LIST: ea_size = ea_list_size(file-ea_list.eas.num_eas, file-ea_list.eas.eas); if (state-flags FLAG_TRANS2_FIND_REQUIRE_RESUME) { - trans2_grow_data(req, trans, ofs + 27 + ea_size); + if (!trans2_grow_data(req, trans, ofs + 27 + ea_size)) { + return False; + } SIVAL(trans-out.data.data, ofs, file-ea_list.resume_key); ofs += 4; } else { - trans2_grow_data(req, trans, ofs + 23 + ea_size); + if (!trans2_grow_data(req, trans, ofs + 23 + ea_size)) { + return False; + } } data = trans-out.data.data + ofs; srv_push_dos_date2(req-smb_conn, data, 0, file-ea_list.create_time); @@ -1200,6 +1211,8 @@ SIVAL(data, 0, trans-out.data.length - ofs); break; } + + return True; } /* callback function for trans2 findfirst/findnext */ @@ -1211,10 +1224,8 @@ old_length = trans-out.data.length; - find_fill_info(state-req, trans, state, file); - - /* see if we have gone beyond the user specified maximum */ - if (trans-out.data.length trans-in.max_data) { + if (!find_fill_info(state-req, trans, state, file) || + trans-out.data.length trans-in.max_data) { /* restore the old length and tell the backend to stop */ trans2_grow_data(state-req, trans, old_length); return False;