Re: [Samba] home network

2005-02-18 Thread Andrew Bartlett
On Wed, 2005-02-16 at 07:58 +0100, kurt weiss wrote:
 windows XP does not allow login with empty password in default.
 also you may install the signorseal registry file.

With all supported Samba versions (That is, Samba 3.0) this registry
patch is not required, and using it may harm network security (by
allowing certain attacks, that Microsoft implemented these restrictions
to avoid).

Andrew Bartlett
-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Print Issues

2005-02-18 Thread Wisu
Hi all,

I have a Samba PDC (SuSE 9.1 + Samba 3.0.9) which is also a Print
Server...

Problem is whenever I reboot the system, printer drivers under
\\PDC\print$ disapear... so I have to reinstalling printer drivers again
from a typical Windows client...

Any Ideas???

TIA, Wisu

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] srvtools doesn't recognize groups and ACL can't be changed from windows

2005-02-18 Thread Adi Nugraha
Hi,

I tried changing the user groups from the srvtool but it returns invalid
groups eventhough I can see the groups that I'v created, also I can't seem
to set password never expires, I tried setting it and looking at the account
using pdbedit still says it will expires in dd/mm/, what's wrong ?? also
before in a test box I have working acl, I can change the acl from a windows
box but now everytime I tried to change the ACL from windows, NOTHING
HAPPENS, the dialog box just stops and when I checked the acl from server it
was unchanged why ?? any ideas, I have nt acl support = yes and I'm quite
sure that the file system on the samba box supports posix ACL as I''ve tried
setting it from the box
BTW I'm using Mandrake 10 and samba 3.02a (can anyone give me a link to a
newer version ? RPM package for mandrake pls I can't found a mandrake
package in the samba site)
thanks



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Limit user groups

2005-02-18 Thread Bruno Guerreiro
Hi Gerald,
Sorry for the late answer, but only know i've got the oppportunity to test
it...
The problem still exists.

[2005/02/18 10:37:16, 0] lib/util.c:smb_panic2(1495)
  PANIC: internal error
[2005/02/18 10:37:16, 0] lib/util.c:smb_panic2(1503)
  BACKTRACE: 28 stack frames:
   #0 smbd(smb_panic2+0x111) [0x81de2d1]
   #1 smbd(smb_panic+0x1a) [0x81de1ba]
   #2 smbd [0x81cb9b8]
   #3 /lib/tls/libc.so.6 [0x2aef48]
   #4 /lib/tls/libc.so.6 [0x2e8e6a]
   #5 /lib/tls/libc.so.6(malloc+0x8d) [0x2e825d]
   #6 smbd(pdb_default_enum_group_memberships+0x4b) [0x81c2adb]
   #7 smbd [0x81b8272]
   #8 smbd [0x81ad464]
   #9 smbd(pdb_enum_group_memberships+0x4e) [0x81aec0e]
   #10 smbd(_samr_query_usergroups+0x1ed) [0x8149f5d]
   #11 smbd [0x8141b90]
   #12 smbd(api_rpcTNP+0x16c) [0x815a8fc]
   #13 smbd(api_pipe_request+0xba) [0x815a6aa]
   #14 smbd [0x8155038]
   #15 smbd [0x81553af]
   #16 smbd [0x81555a4]
   #17 smbd [0x8155803]
   #18 smbd(write_to_pipe+0xfb) [0x815574b]
   #19 smbd [0x808ce17]
   #20 smbd(reply_trans+0x57c) [0x808d82c]
   #21 smbd [0x80d47c6]
   #22 smbd [0x80d4a50]
   #23 smbd(process_smb+0x8c) [0x80d4c5c]
   #24 smbd(smbd_process+0x168) [0x80d59a8]
   #25 smbd(main+0x505) [0x8254c15]
   #26 /lib/tls/libc.so.6(__libc_start_main+0xe4) [0x29cad4]
   #27 smbd [0x8079291]

In addition, this messages started do appear in the logs.

[2005/02/18 10:37:17, 3] lib/smbldap.c:smbldap_connect_system(866)
  ldap_connect_system: succesful connection to the LDAP server
  ldap_connect_system: LDAP server does not support paged results

Any ideas?
Wrong LDAP Server configuration?

Best regards,
Bruno Guerreiro

-Original Message-
From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED]
Sent: quarta-feira, 9 de Fevereiro de 2005 16:55
To: Bruno Guerreiro
Cc: samba@lists.samba.org
Subject: Re: [Samba] Limit user groups


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Bruno Guerreiro wrote:
| Hello,
| I'm trying to add a user to big list of Samba groups,
| 74 groups to be precise.
| The problem is that when the user reaches around 65 to
| 70 groups, it starts giving errors in User Manager
| for Domains, and causes a panic in Samba.
| Is there a limit for how many groups a user may belong?
| I'm using Samba-3.0.10 with openldap.
|
| This is what I get in the logs.
|
| [2005/02/07 13:22:42, 0] lib/util.c:smb_panic2(1482)
|   PANIC: internal error


Can you try to reproduce this against 3.0.11?  Thanks.








cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
I never saved anything for the swim back. Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCCkB2IR7qMdg1EfYRAgZ1AJ9r4KY0qSng98lyWEaZn3UoE89oJACeLQJc
2Jm6Yjy7/ZCE45SfGmdOP60=
=WtzL
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] can't specify username under WinXP

2005-02-18 Thread Andrei Voropaev
Hello!

One little problem when accessing Samba shares that require password
authentication. I have WinXP. When clicking on the name of share in the
Network Neighbourhood, I get prompt for password. But the user name
field is greyed out and is preset to guest. So I can't specify needed
username. If I try to access password protected share created on some
other Windows machine, then the dialog is normal and allows to enter
username. So I guess it is connected with Samba somehow.

Currently we have to mount samba shares as disks. Then we can provide
user name and password during mounting.

What could possibly cause the above behaviour?

Thanks

-- 
Minds, like parachutes, function best when open

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Howto delete printer driver for only one architecture?

2005-02-18 Thread Christoph Peus
Gerald (Jerry) Carter wrote:
| Therefore I would like to delete these old drivers, but
| I don't know how to achieve this without
| deleting the drivers for all architectures
Use a windows 200 or later client.  Browse to the
server's 'printers and faxes' folder.
Now File - Server properties and got to the driver
tab.  You can select the specific driver and architectures
there.
Thanks for your quick reply, but it doesn't solve the problem for me, 
because the add and delete buttons are grayed out (not usable) in this 
context, though I logged in with admin rigths. (I hope so)
(Besides of that - a scriptable solution would be very helpfull, because I 
have to do this for  about 90 printers...)

Is there something special about using Windows Server 2003 for client os?
From my smb.conf:
[printers]
 comment = All Printers
 path = /var/spool/samba
 browseable = no
 public = yes
 guest ok = yes
 writable = no
 printable = yes
 printer admin = @bit
[print$]
 comment = Printer Drivers
 path = /etc/samba/drivers
 create mask = 774
 directory mask = 775
 browseable = yes
 guest ok = no
 read only = yes
 write list = ntroot
I logged in as user ntroot which is member of the bit group. Something 
wrong with this?
Thanks!

Christoph
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Delay opening office files

2005-02-18 Thread Martin Bobbert
Hi,
we're running a pretty old samba server (Suse 7.0, Samba 2.0.7) 
authenticating against a NT server and it always worked fine. Never 
change a running system?

Since we switched our clients to win2k, we sometimes have delays opening 
office files. The delays occur irregularly, 4 or 5 times a day and take 
up to 1 minute. I wonder if this might be an authentication problem.

If anyone has an idea, I can also post our smb.conf or a debug log of 
such a delay situation.

thx
--
Martin Bobbert
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] ACL questions

2005-02-18 Thread Cisowski, Daniel
Hi all,

I'm planning a migration from Sun Microsystems' PCNetLink CIFS service to
Samba and have a problem I cannot solve:

Is there a possibility to map Windows ACLs to reflect the following:

We have user groups with their own group directories. We need to provide
some users in their group directories the ability to
read/create/modify/remove files, but they must not be able to change
permissions on the files/directories. In particular they must not take
ownership of files they are not owners of.

I've tried to test this using Samba 3.0.10 on Solaris 9 and compiled with
--with-acl-support. The configuration for my test share has the following
ACL relevant settings:
security mask = 0777
force security mode = 0
directory security mask = 0777
force directory security mask = 0
But, if I try to set the following permissions (all except Full Control):
Modify,
Read  Execute
List Folder Contents
Read
Write
using Windows Explorer connected to the share on a subdirectory of the
share, I get 777 on UNIX file system and my Windows client sees 'full
access'.

I'd be glad if anybody could confirm if the situation described above is
normal Samba behavior or not and if my problem can be solved at all (using
Samba).

Thanks in advance

Best regards,

Daniel

--
Daniel Cisowski
EDS Operations Services GmbH
EAD DP
Eisenstr. 58 (58-5-M)
D-65428 Ruesselsheim
mailto:[EMAIL PROTECTED]
jabber:[EMAIL PROTECTED]
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] ipfilter rules for samba

2005-02-18 Thread Norbert Beckers
I'm going to ask a question that has been asked
before, but I couldn't find it in the archive.
So here it comes:

Which ports need to be open in the firewall to let
Samba function properly?
I want to get a tight (read sercure)as possible rule
set for this?
I already found out that port 137-139 tcp/udp need be
open, because these are used by a number of netbios
services.

Norbert Beckers, NL
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Problems building samba+AD/LDAP support on Solaris 8

2005-02-18 Thread James Tullett
Hello all,

I am in the process of building a samba 3.0.11 service on a Solaris 8
server. I want to authenticate Windows Network accounts using a Win2000
Domain Controller.  The Solaris machine is intended to act as an ADS
Domain Member, and to authenticate Windows Network domain user accounts
on the Sun using winbindd.  The network operates in mixed mode in order
to operate some old NT workstations and servers.

I had some issues using the SUNW LDAP libraries, and decided to try
OpenLDAP instead.

I have downloaded the OpenLDAP libraries (1.2.11) from
sunfreesoftware.com, and installed them.  I was however unable to
configure Samba to have LDAP support.  An inspection of the config.log
file showed that there was a missing symbol (a function?) in the
library, ldap_initialise.

LDFLAGS and CFLAGS were set thus :-

LDFLAGS=-L/usr/local/lib -R/usr/local/lib
CFLAGS=-I /usr/local/include

Inspection of the ldap library on /usr/local/lib, libldap.a, shows that
there is no ldap_initialise function, only a openldap_initialise
function.

What versions of Kerberos and OpenLDAP would be most suitable to use on
Solaris 8 and samba 3.0.11 for use with ADS?

Thankyou for your patience.
--
James Tullett
Programmer/Analyst, The British Museum
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problems building samba+AD/LDAP support on Solaris 8

2005-02-18 Thread Tim Evans

What versions of Kerberos and OpenLDAP would be most suitable to use on
Solaris 8 and samba 3.0.11 for use with ADS?

Go to www.sysadminmag.com and located the December Solaris Supplement issue; 
it has a step-by-step.
--
Tim Evans, TKEvans.com, Inc.|5 Chestnut Court
[EMAIL PROTECTED]   |Owings Mills, MD 21117
http://www.tkevans.com/ |443-394-3864
http://www.come-here.com/News/  |

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba PDC + OpenLDAP + Samba BDC

2005-02-18 Thread Robert Becskei
Hello everyone,
the time for me to use a OpenLDAP server is getting closer ( :( yikes..I'm 
still scared sorta) ,
I currently have a Samba PDC with tdbsam with 50 users goes fine, our 
company will grow (doing our best)
in this year by a minimum of 25-30 computers, and I've stuided the TOSHARG , 
and it says that for every
50 computer a bdc is suggested.

The questions :
1.how does the client who is logging in to the domain know which server to 
use pdc bdc1 bdc2 ? , how is this decided.
2.is it a good idea to place the pdc and bdc close to each other , on the 
same switch ? , or should they be far from each other
(closer to the clients they are supposed to validate in the domain).

Thank you foreward for your time.
Sincerely
Robert Becskei
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Migrating data from W2K - losing Windows ACL's

2005-02-18 Thread Gibbs, Simon
Hi,

I've been running some test data copying from a W2K box to our new Samba box
but have noticed that the assigned Windows ACL's are lost when copying.
The only ACL's specified are those assigned to the directory in Linux that
the data is being copied to.

Is there any way to retain the Windows ACL's? Either through an smb.conf
parameter or some other feature?

System config is Redhat ES 3 Taroon update 3 running Samba 3.0.11 compiled
with acl support. Mounted luns have ext3 filesystem and are mounted with acl
option.

Any help/info appreciated.

Thanks

Simon 





The information contained in this email message may be confidential. If you are 
not the intended recipient, any use, interference with, disclosure or copying 
of this material is unauthorised and prohibited. Although this message and any 
attachments are believed to be free of viruses, no responsibility is accepted 
by TF Informa for any loss or damage arising in any way from receipt or use 
thereof.  Messages to and from the company are monitored for operational 
reasons and in accordance with lawful business practices. 
If you have received this message in error, please notify us by return and 
delete the message and any attachments.  Further enquiries/returns can be sent 
to [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Howto delete printer driver for only one architecture?

2005-02-18 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Christoph Peus wrote:
| Gerald (Jerry) Carter wrote:
|
| | Therefore I would like to delete these old drivers, but
| | I don't know how to achieve this without
| | deleting the drivers for all architectures
|
| Use a windows 200 or later client.  Browse to the
| server's 'printers and faxes' folder.
|
| Now File - Server properties and got to the driver
| tab.  You can select the specific driver and architectures
| there.
|
| Thanks for your quick reply, but it doesn't solve
| the problem for me, because the add and delete
| buttons are grayed out (not usable) in
| this context, though I logged in with admin rigths. (I hope so)
If they are greyed out, you don't have admin rights.  You have to
defined the 'printer admin' option in [global] to get things to work
well.  And I realize that this is kind of a documentation bug.
Or you can use the SePrintOperatorPrivilege in Samba 3.0.11
| (Besides of that - a scriptable solution would
| be very helpfull, because I have to do this for
| about 90 printers...)
rpcclient $ deldriverex
Usage: deldriverex driver [arch] [version]



cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
I never saved anything for the swim back. Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCFep9IR7qMdg1EfYRAl3tAJ4oV7B+Tj4uusrqPLeCrrL80n+j6wCg8Kc/
D6nDBCWxKBx7RKwMyctMB44=
=hTNX
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Power SMB

2005-02-18 Thread Larry McElderry
Has anyone here actually seen or perhaps even used PowerSMB?  It sounds like it 
could be areal timesaver if it actually works or
exists for that matter.

TIA,

Larry

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Delay opening office files

2005-02-18 Thread Hartmut Guist
Hi,
after we changed our server, we had a similar problem, that opening of 
Word documents took up to 1 minute. But this was not a problem of samba, 
but of the word document itself. The word documents which had this 
problem contained a path to a template which was on the old server and 
could not be found anymore. To fix this, you must open the document and 
update the template path Extras--Vorlagen und 
Add-Ins--Dokumentvorlagen. It is also possible to remove the complete 
path, then the local normal.dot will be used as template.
Hope this helps.

Regards.
Martin Bobbert wrote:
Hi,
we're running a pretty old samba server (Suse 7.0, Samba 2.0.7) 
authenticating against a NT server and it always worked fine. Never 
change a running system?

Since we switched our clients to win2k, we sometimes have delays opening 
office files. The delays occur irregularly, 4 or 5 times a day and take 
up to 1 minute. I wonder if this might be an authentication problem.

If anyone has an idea, I can also post our smb.conf or a debug log of 
such a delay situation.

thx
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Limit user groups

2005-02-18 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Bruno Guerreiro wrote:
| Hi Gerald,
| Sorry for the late answer, but only know i've
| got the oppportunity to test it...
| The problem still exists.
|
| [2005/02/18 10:37:16, 0] lib/util.c:smb_panic2(1495)
|   PANIC: internal error
| [2005/02/18 10:37:16, 0] lib/util.c:smb_panic2(1503)
|   BACKTRACE: 28 stack frames:
Can you include --enable-debug in the options
to ./configure and try again?  This should give us
a better stack trace to work with.  Thanks.
| In addition, this messages started do appear in the logs.
|
| [2005/02/18 10:37:17, 3] lib/smbldap.c:smbldap_connect_system(866)
|   ldap_connect_system: succesful connection to the LDAP server
|   ldap_connect_system: LDAP server does not support paged results
Pretty much emans what is says.  The server doesn't support the
page search result LDAP control.  So we can't use it to enumerate
large search results.

cheers,jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
I never saved anything for the swim back. Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCFfoyIR7qMdg1EfYRAs4bAKC3/9zeO8QTntKjbVE8/f0jrU3zkQCggvah
sqDbRe1USp+19O0/HLJJ5pg=
=IxTb
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Ghost logons / Recycle Bin Options (related)

2005-02-18 Thread sysrm
Hi all. Long time no write :)

Have been looking at recycle bin options using the VFS options.

Everything works fine, but I have one question/snag.

We use a script that uses smbclient to send a message to a machine to warn
them they are low on space.

So the user thinks oh dear and deletes stuff. Problem is on the quota
system its still counted as part of their user space... Is there anywhere
you can set the user it copies it to? i.e change the owner on the fly to
root?

Currently it copies to .recycle (which by default they cant see) problem is
also some students are deleting work and blaming it on the system... And its
not in the recycle bin. If the user was changed they couldn't do this :)
Have thought about running a script on everyones .recycle bin, but decided
against that :)

Also as part of the script that sends messages to people, since upgrading to
version 3.05 +, ive noticed ghost logons

That is to say when I do a smbstatus, there is more than one person logged
onto that machine. They get the ghost users space warning, and then come to
us. We check their quota and its fine, but they will still get the message
15 mins later. The only way I can clear this is to either kill the PID, or
reboot the machine. Any ideas on either would be great :)



Cheers

Ross

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] fast reads, slow writes

2005-02-18 Thread Karel Rericha
Thanks for fast reply, but alas it didn't help.
There is even STRANGE behaviour: When I copy big file to server, speed 
is around 12MB/s,
but if I start another copying to server from different machine, speed 
of copying goes significantly
up on both machines. What the hell ?

Robert Schetterer napsal(a):
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi Karel,
upgrade samba
ftp://ftp.suse.com/pub/projects/samba/3.0/x86_64/
upgraded, didn't help
as well there a perfomance issues known to the webclient service
in win xp , so just stop it.
disabled, didn't help
slow down logging at samba , try set sendfile parameter to no,
log level is 1, just info of connections; 0 didn't help
read
http://info.ccone.at/INFO/Samba/speed.html
tested all hints,  no  impact on performace at all
check your nic ,switching, firewalling ( if exist )
tested two gigabit switches, two nics
try settings like this
[bigshare]
~ path = /home/jeremy/tmp/manyfilesdir
~ read only = no
~  case sensitive = True
~ default case = upper
~ preserve case = no
~ short preserve case = no
tried, no success
Best Regards
Robert
Karel Rericha schrieb:
| We have two SUSE SLES 9.0 x86-64 servers on gigabit network, one with
| RAID1 and samba 3.0.4,
| and one with RAID10 upgraded to samba 3.0.9. Both have the same 
problem:
| when you copy from
| server to client, speeds are on big files about 40MB/s for RAID1 and
| about 60MB/s for RAID10.
| But when you copy to server, speed are about 8MB/s. I have set up ftp
| servers on them just to try
| ftp protocol upload, and  it is happy full speed both directions.
|
| After few hours of googling, I found security = share hint, which
| didn't help, and after little more
| time use sendfile  =  yes hint, which helped little bit, speeds are
| now 10-12MB/s, but still not
| acceptable.
|
| We don't intend to use samba servers as PDC, but just only as workgroup
| NAS.
|
| Original smb.conf is attached (before security and sendfile tweaking).
|
| One more question: does anybody know good utility to test speed of
| remote volumes ?
|
|
| 

|
| No virus found in this outgoing message.
| Checked by AVG Anti-Virus.
| Version: 7.0.300 / Virus Database: 265.8.8 - Release Date: 14.2.2005
|

- --
Mit freundlichen Gruessen
Best Regards
Robert Schetterer
robert_at_schetterer.org
Munich / Bavaria / Germany
https://www.schetterer.org
\**
\* gnupgp
\* public key:
\* https://www.schetterer.org/public.key
\**
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCFKPN+Jw+56iSjEkRAqy6AKC1+qQab2fw3Wm1xf6+BxP/XFZ3bACfWIMn
l6q8nflxH3nNHojIHV/rbZg=
=eZ2S
-END PGP SIGNATURE-
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.8.8 - Release Date: 14.2.2005
 


--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.8.8 - Release Date: 14.2.2005
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba PDC + OpenLDAP + Samba BDC

2005-02-18 Thread John H Terpstra
On Friday 18 February 2005 06:05, Robert Becskei wrote:
 Hello everyone,

  the time for me to use a OpenLDAP server is getting closer ( :( yikes..I'm
 still scared sorta) ,
  I currently have a Samba PDC with tdbsam with 50 users goes fine, our
 company will grow (doing our best)
 in this year by a minimum of 25-30 computers, and I've stuided the TOSHARG
 , and it says that for every
 50 computer a bdc is suggested.

I wrote that advice and it believe it has been updated in the on-line version 
available from:
http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf

Do not take that guideline as cast in stone. Most sites can get away with much 
more than that. I know of sites with around 500 windows clients and just a 
PDC.

The key determinants of how many xDCs are needed are:
a. Network band-width
b. Load level on the DCs

If the network bandwidth usage is low and the load on the PDC is relatively 
low you may get away with 500 or more windows clients without any BDCs.


 The questions :

  1.how does the client who is logging in to the domain know which server to
 use pdc bdc1 bdc2 ? , how is this decided.

Usually from WINS.

  2.is it a good idea to place the pdc and bdc close to each other , on the
 same switch ? , or should they be far from each other
 (closer to the clients they are supposed to validate in the domain).

The old advice with NT4 was to have a PDC and a BDC on the one subnet and then 
at least one BDC per subnet. But you shoud first check to see if you really 
need to indulge in the complexity of adding a BDC. The sure sign is when you 
start to get sporadic network logon failures that succeed on the second oor 
third retry.

The failure message on the client that gives the tell-tale is a message that a 
domain controller could not be found.



  Thank you foreward for your time.

  Sincerely
  Robert Becskei

I hope this helps.

- John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Ghost logons / Recycle Bin Options (related)

2005-02-18 Thread Robert Schetterer
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi, maybe you should empty the recycle folder via find script periodic
by cron
like this
#!/bin/bash
#will delete all files older 7 days in all homes .recycle and its subfolders
find /home/*/.recycle/ -mtime +7 -type f -exec rm {} ;
also make sure not needed stuff isnt store to the recycle bin
like this
[files3]
~comment = public files
~path = /files3
~read only = No
~guest ok = Yes
~browseable = Yes
~csc policy = disable
~vfs objects = netatalk, extd_audit, recycle
~recycle:keeptree = yes
~recycle:versions = yes
~recycle:touch = yes
~recycle:exclude = ?~$*,~$*,*.tmp,index*.pl,index*.htm*,*.temp,*.TMP
~recycle:exclude_dir=  /tmp,/temp,/cache
~recycle:repository = .recycle/.recycle.%u
~recycle:noversions = *.doc,*.xls,*.ppt
~#hide files = /.recycle.*/.recycle/
~#veto files = /.recycle.*/.recycle/
Regards
sysrm schrieb:
| Hi all. Long time no write :)
|
| Have been looking at recycle bin options using the VFS options.
|
| Everything works fine, but I have one question/snag.
|
| We use a script that uses smbclient to send a message to a machine to warn
| them they are low on space.
|
| So the user thinks oh dear and deletes stuff. Problem is on the quota
| system its still counted as part of their user space... Is there anywhere
| you can set the user it copies it to? i.e change the owner on the fly to
| root?
|
| Currently it copies to .recycle (which by default they cant see)
problem is
| also some students are deleting work and blaming it on the system...
And its
| not in the recycle bin. If the user was changed they couldn't do this :)
| Have thought about running a script on everyones .recycle bin, but decided
| against that :)
|
| Also as part of the script that sends messages to people, since
upgrading to
| version 3.05 +, ive noticed ghost logons
|
| That is to say when I do a smbstatus, there is more than one person logged
| onto that machine. They get the ghost users space warning, and then
come to
| us. We check their quota and its fine, but they will still get the message
| 15 mins later. The only way I can clear this is to either kill the PID, or
| reboot the machine. Any ideas on either would be great :)
|
|
|
| Cheers
|
| Ross
|
- --
Mit freundlichen Gruessen
Best Regards
Robert Schetterer
robert_at_schetterer.org
Munich / Bavaria / Germany
https://www.schetterer.org
\**
\* gnupgp
\* public key:
\* https://www.schetterer.org/public.key
\**
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCFgJ/+Jw+56iSjEkRAttxAJ9vW2E3qDaAv94gpnwMZIMSQwraZACdGHUK
fnVugwlosnfR+aCTzXqh4Tw=
=O3pe
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Ghost logons / Recycle Bin Options (related)

2005-02-18 Thread Adam Tauno Williams
 Currently it copies to .recycle (which by default they cant see) problem is
 also some students are deleting work and blaming it on the system... And its
 not in the recycle bin. If the user was changed they couldn't do this :)
 Have thought about running a script on everyones .recycle bin, but decided
 against that :)

We have a volume /var/pcnet/trash.  We have the recycle VFS place all
trash in this volume (/var/pcnet/trash/%U).  So it isn't within the
quotaed area (home directories, whatever...).   Since the recycle bin
seems to be relative to the root of the share we create a .trash
sym-link to /var/pcnet/trash and have samba veto the file so the user
can't see it.  Then we have a trash share with a root
of /var/pcnet/trash that only administrators can access.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] fast reads, slow writes

2005-02-18 Thread Robert Schetterer
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi Karel,
as i cant see your smb.conf cause attachs are killed on the list
this way i cant help more 
do you any antivirus ( clamd ...) on the server? this slows down
in some cases, have you tried to use another non gb nic?
do you use ext3, reiser acl mounted?
what are your logs telling, have you done a tcp dump?
did you ask on the suse list for known problems with that kernel?
Regards
Karel Rericha schrieb:
| Thanks for fast reply, but alas it didn't help.
|
| There is even STRANGE behaviour: When I copy big file to server, speed
| is around 12MB/s,
| but if I start another copying to server from different machine, speed
| of copying goes significantly
| up on both machines. What the hell ?
|
| Robert Schetterer napsal(a):
|
| Hi Karel,
| upgrade samba
| ftp://ftp.suse.com/pub/projects/samba/3.0/x86_64/
|
|
| upgraded, didn't help
|
| as well there a perfomance issues known to the webclient service
| in win xp , so just stop it.
|
|
| disabled, didn't help
|
| slow down logging at samba , try set sendfile parameter to no,
|
|
| log level is 1, just info of connections; 0 didn't help
|
| read
| http://info.ccone.at/INFO/Samba/speed.html
|
|
| tested all hints,  no  impact on performace at all
|
| check your nic ,switching, firewalling ( if exist )
|
|
| tested two gigabit switches, two nics
|
| try settings like this
| [bigshare]
| ~ path = /home/jeremy/tmp/manyfilesdir
| ~ read only = no
| ~  case sensitive = True
| ~ default case = upper
| ~ preserve case = no
| ~ short preserve case = no
|
|
| tried, no success
|
| Best Regards
| Robert
|
| Karel Rericha schrieb:
| | We have two SUSE SLES 9.0 x86-64 servers on gigabit network, one with
| | RAID1 and samba 3.0.4,
| | and one with RAID10 upgraded to samba 3.0.9. Both have the same
| problem:
| | when you copy from
| | server to client, speeds are on big files about 40MB/s for RAID1 and
| | about 60MB/s for RAID10.
| | But when you copy to server, speed are about 8MB/s. I have set up ftp
| | servers on them just to try
| | ftp protocol upload, and  it is happy full speed both directions.
| |
| | After few hours of googling, I found security = share hint, which
| | didn't help, and after little more
| | time use sendfile  =  yes hint, which helped little bit, speeds are
| | now 10-12MB/s, but still not
| | acceptable.
| |
| | We don't intend to use samba servers as PDC, but just only as workgroup
| | NAS.
| |
| | Original smb.conf is attached (before security and sendfile tweaking).
| |
| | One more question: does anybody know good utility to test speed of
| | remote volumes ?
| |
| |
| |
| 
| |
| | No virus found in this outgoing message.
| | Checked by AVG Anti-Virus.
| | Version: 7.0.300 / Virus Database: 265.8.8 - Release Date: 14.2.2005
| |
|
| --
| Mit freundlichen Gruessen
| Best Regards
| Robert Schetterer
|
| robert_at_schetterer.org
| Munich / Bavaria / Germany
| https://www.schetterer.org
|
| \**
| \* gnupgp
| \* public key:
| \* https://www.schetterer.org/public.key
| \**
|
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.8.8 - Release Date: 14.2.2005
|

- --
Mit freundlichen Gruessen
Best Regards
Robert Schetterer
robert_at_schetterer.org
Munich / Bavaria / Germany
https://www.schetterer.org
\**
\* gnupgp
\* public key:
\* https://www.schetterer.org/public.key
\**
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCFgPr+Jw+56iSjEkRAliNAJ4j1aLHK5UhKqITWSTZ/5sDTEHvTgCgqpbF
w/sYpTJhEMxBQNgqfkzY5iw=
=ri8y
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: rpcclient error / printer driver issue

2005-02-18 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Ryan Novosielski wrote:
| How about this one (on 3.0.11, matter of fact)?
|
| rpcclient $ enumdrivers
|
| [Windows NT x86]
| Printer Driver Info 1:
| Driver Name: [HP 2500C Series Printer]
|
| Printer Driver Info 1:
| Driver Name: [HP 2500C Series PS3]
|
| rpcclient $ getdriver HP 2500C Series PS3
| Error opening printer handle for HP 2500C Series PS3!
| result was NT_STATUS_UNSUCCESSFUL
getdriver has to be called on a printer name
(not driver name).


cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCFgnRIR7qMdg1EfYRAqudAKDQTFmpRbD4hP28Cl9sfSHHp3tWPwCggBd/
c9jb54rPpqyR7IIFcAmzA3g=
=Mj/x
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Howto delete printer driver for only one architecture?

2005-02-18 Thread Christoph Peus
Gerald (Jerry) Carter wrote:
| | Therefore I would like to delete these old drivers, but
| | I don't know how to achieve this without
| | deleting the drivers for all architectures
|
| Use a windows 200 or later client.  Browse to the
| server's 'printers and faxes' folder.
|
| Now File - Server properties and got to the driver
| tab.  You can select the specific driver and architectures
| there.
|
| Thanks for your quick reply, but it doesn't solve
| the problem for me, because the add and delete
| buttons are grayed out (not usable) in
| this context, though I logged in with admin rigths. (I hope so)
If they are greyed out, you don't have admin rights.  You have to
defined the 'printer admin' option in [global] to get things to work
well.  And I realize that this is kind of a documentation bug.
Or you can use the SePrintOperatorPrivilege in Samba 3.0.11
Thanks a lot! With printer admin defined in the global section it works 
as expected.

Christoph
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Drive Imaging and Domain Membership

2005-02-18 Thread David Sonenberg
In my office we use dd to create harddirve images.  We are getting ready 
to put our Samba PDC/BDC into production.  The question is...  Is there 
a way to create drive images that are already domain members?  My 
understanding is that each domain member must have a unique netbios 
name.  Is there a way to get around this?

--
David Sonenberg
Systems / Network Administrator
Stroz Friedberg, LLC
15 Maiden Lane
15th Floor
New York, NY 10038
212.981.6527 (o) | 917.495.4918 (c)
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Username map broken on Solaris ??

2005-02-18 Thread Rod Rioux
Gerald thanks for your help.. that's what I was looking for..

For anyone else with this issue:

If the usernames in windows are the same as unix ie test1 = test1 it works
fine.

If the usernames differ ie test2 = myuser you must replace with test2 =
domain1\myuser and with multiple domains test2 = domain1\myuser
domain2\myuser domain3\myuser etc.. to access under all logins.

Thanks, for the quick response .. samba rocks!

/roddy


-Original Message-
From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED] 
Sent: Thursday, February 17, 2005 6:54 PM
To: Rod Rioux
Cc: 'samba@lists.samba.org'
Subject: Re: [Samba] Username map broken on Solaris ??

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Rod Rioux wrote:

| So I have installed samba 3, now joining the
| domain is fine, and on linux
| everything works perfectly, but on solaris it seems to
| ignore the username map option.

Please read the WHATSNEW for the 3.0.8 release.





cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
I never saved anything for the swim back. Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCFVi4IR7qMdg1EfYRAg6xAKCd9D7ae9JjscYQE8jaZwN6EWAYIACg1p2x
+dKiLRe/DS7YAHfp387Ydxc=
=ytxR
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Drive Imaging and Domain Membership

2005-02-18 Thread Stuart Highlander
david,

i think this is a microsoft thing more than a samba issue.

i use a microsoft utility called sysprep on a workstation before i take an
image of it.  it basically takes the image back before the license key input
and machine name input.  i then take an image of the workstation using the
g4u program.  when the imaged machine is booted up, you re-enter the
information this information.  scripts can be written to automate the
process for large deployments.

here is more information on the subject:

http://support.microsoft.com/default.aspx?scid=kb;en-us;302577sd=tech

i hope this helps.

stuart


- Original Message - 
From: David Sonenberg [EMAIL PROTECTED]
To: samba@lists.samba.org
Sent: Friday, February 18, 2005 10:28 AM
Subject: [Samba] Drive Imaging and Domain Membership


 In my office we use dd to create harddirve images.  We are getting ready
 to put our Samba PDC/BDC into production.  The question is...  Is there
 a way to create drive images that are already domain members?  My
 understanding is that each domain member must have a unique netbios
 name.  Is there a way to get around this?

 -- 
 David Sonenberg
 Systems / Network Administrator
 Stroz Friedberg, LLC
 15 Maiden Lane
 15th Floor
 New York, NY 10038
 212.981.6527 (o) | 917.495.4918 (c)

 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Stand-alone server authenticate with LDAP?

2005-02-18 Thread Matt Ingram
Can anyone tell me if a stand-alone samba server can authenticate and 
get account info from an LDAP server or does this only work for domains ?

Thanks in advance.
Matt.
--
http://www.joethrasher.com
--
Oh, they have the internet on computers now
-H.J. Simpson
--
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba PDC + OpenLDAP + Samba BDC

2005-02-18 Thread David Trask
[EMAIL PROTECTED] on Friday, February 18, 2005 at 9:58 AM + wrote:
I wrote that advice and it believe it has been updated in the on-line
version 
available from:
http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf

Do not take that guideline as cast in stone. Most sites can get away with
much 
more than that. I know of sites with around 500 windows clients and just
a 
PDC.

The key determinants of how many xDCs are needed are:
   a. Network band-width
   b. Load level on the DCs

If the network bandwidth usage is low and the load on the PDC is
relatively 
low you may get away with 500 or more windows clients without any BDCs.

I'm one of themI have 100+ clients on a network with no BDC...one
thing I can recommend though is putting the PDC on a gigabit backbone if
possible.  Any time you are using gigabit on the server and serving it
full speed by connecting to a gigabit port on a switch...it makes a
tremendous difference in the server's ability to work.  My PDC is a
Samba/LDAP server and it works fantastic with many LTSP clients100+
WinXp clients with romaing profilesand 200 Mac OS X laptops (this is
Maine, remember)and the server is connected via gigabit.  That's my
$.02.  

David N. Trask
Technology Teacher/Coordinator
Vassalboro Community School
[EMAIL PROTECTED]
(207)923-3100

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Power SMB

2005-02-18 Thread Greg Folkert
On Fri, 2005-02-18 at 08:05 -0600, Larry McElderry wrote:
 Has anyone here actually seen or perhaps even used PowerSMB?  It sounds like 
 it could be areal timesaver if it actually works or
 exists for that matter.
 
 TIA,

http://www.essay-software.com/

It appears to be a product pre-configured to a set of standards they
setup.

You could do all the same work and save $$$ and understand the whole
shooting match rather than pointy clicky.

-- 
greg, [EMAIL PROTECTED]

The technology that is
Stronger, better, faster: Linux


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Migrating data from W2K - losing Windows ACL's

2005-02-18 Thread Greg Folkert
On Fri, 2005-02-18 at 13:05 +, Gibbs, Simon wrote:
 Hi,
 
 I've been running some test data copying from a W2K box to our new Samba box
 but have noticed that the assigned Windows ACL's are lost when copying.
 The only ACL's specified are those assigned to the directory in Linux that
 the data is being copied to.
 
 Is there any way to retain the Windows ACL's? Either through an smb.conf
 parameter or some other feature?
 
 System config is Redhat ES 3 Taroon update 3 running Samba 3.0.11 compiled
 with acl support. Mounted luns have ext3 filesystem and are mounted with acl
 option.
 
 Any help/info appreciated.

As John Terpstra has said many a time here (and as recently as Wed, 16
Feb 2005 06:01:05 -0700):

Use robocopy (search for it on tucows.com) or scopy (part of the
NT4 Server  Resource Kit). The use of explorer does not preserve
ACLs.

Hope this helps.
-- 
greg, [EMAIL PROTECTED]

The technology that is
Stronger, better, faster: Linux


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] PDC x Windows XP probleman

2005-02-18 Thread Márcio Luciano Donada
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I am configuring the PDC but I am with the following problem:
Error during the attempt of ingression of the domain AURORA.
~ Was not made mapping enters the names of account and the
identifications of security
My smb.conf is:
[global]
~workgroup = AURORA
~netbios name = SRV-PDC
~server string = SAMBA-LDAP PDC Server
~enable privileges = yes
~socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
~log level = 2
~announce version = 4.9
~announce as = NT
~hosts allow = 192.168.1. 192.168.2.
~interfaces = 192.168.1.253/255.255.255.0
192.168.2.253/255.255.255.0
~domain logons = Yes
~os level = 64
~preferred master = Yes
~domain master = Yes
~dns proxy = No
~wins support = Yes
~use client driver = Yes
~passwd program = /usr/local/sbin/smbldap-passwd %u
~nt acl support = Yes
~create mask = 600
~directory mask = 0700
~passwd chat = *new*password* %n\n *new*password* %n\n *sucessfully*
~passdb backend = ldapsam:ldapi://%2fvar%2frun%2fopenldap%2fldapi/
~ldap admin dn = cn=Manager,dc=auroraalimentos,dc=com,dc=br
~ldap suffix = dc=auroraalimentos,dc=com,dc=br
~ldap group suffix = ou=Groups
~ldap user suffix = ou=People
~ldap machine suffix = ou=Computers
~ldap idmap suffix = ou=Idmap
~#ldap ssl = no
~ldap passwd sync = Yes
~#ldap filter = (uid=%u)
~idmap backend = ldap:ldap://127.0.0.1
~idmap uid = 1-15000
~idmap gid = 1-15000
~security = user
~ldap delete dn = Yes
~password server = localhost
~encrypt passwords = yes
~add machine script = /usr/local/sbin/smbldap-useradd -w %u
~add user script = /usr/local/sbin/smbldap-useradd -m %u
~delete user script = /usr/local/sbin/smbldap-userdel %u
~add group script = /usr/local/sbin/smbldap-groupadd -p %g
~delete group script = /usr/local/sbin/smbldap-groupdel %g
~add user to group script = /usr/local/sbin/smbldap-groupmod -m
%u %g
~delete user from group script = /usr/local/sbin/smbldap-groupmod
- -x %u %g
~set primary group script = /usr/local/sbin/smbldap-usermod -g
%g %u
~Dos charset = 850
~Unix charset = ISO8859-1
~logon script = logon.bat
~#logon drive = H:
~#logon path = \\%N\profiles\%U
~#logon home = \\%N\profiles\%U
~preserve case = yes
~short preserve case = yes
~case sensitive = no
[homes]
~ comment = Cooperativa Central Oeste Catarinense
~ path = /home/%U
~ valid users = %U
~ read only = No
~ browseable = No
~ writable = Yes
~ create mask = 0664
~ directory mask = 0775
[netlogon]
~ path = /home/samba/netlogon/
~ browseable = No
~ read only = yes
[profiles]
~ path = /home/samba/profiles
~ read only = No
~ create mask = 0600
~ directory mask = 0700
~ browseable = No
~ guest ok = Yes
~ profile acls = Yes
~ csc policy = disable
~ # next line is a great way to secure the profiles
~ force user = %U
~ # next line allows administrator to access all profiles
~ valid users = %U
Some ideia?
__
Márcio Luciano Donada
mdonada at auroraalimentos dot com dot br
FreeBSD - The uptime is mesuared in years!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCFjQQyJq2hZEymxcRAq9aAJwJ8HPrvBsorhZdCsu2zZTIgmhJ7wCgs38J
UMWgJu05YIwrLkO7/twpH+Q=
=hhMC
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Limit user groups

2005-02-18 Thread Bruno Guerreiro
Jerry,
I'll be going on parental leave for the next two weeks (Vacations!!! YES!!!
:-) ), so if no new samba-many-groups-fixed-version is released, I'll enable
debug, ok? 
A little bit OT, is there anyway to enable pagged search on
OpenLDAP-2.1.29-1?

Best Regards,
Bruno Guerreiro

-Original Message-
From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED]
Sent: sexta-feira, 18 de Fevereiro de 2005 14:23
To: Bruno Guerreiro
Cc: samba@lists.samba.org
Subject: Re: [Samba] Limit user groups


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Bruno Guerreiro wrote:
| Hi Gerald,
| Sorry for the late answer, but only know i've
| got the oppportunity to test it...
| The problem still exists.
|
| [2005/02/18 10:37:16, 0] lib/util.c:smb_panic2(1495)
|   PANIC: internal error
| [2005/02/18 10:37:16, 0] lib/util.c:smb_panic2(1503)
|   BACKTRACE: 28 stack frames:

Can you include --enable-debug in the options
to ./configure and try again?  This should give us
a better stack trace to work with.  Thanks.

| In addition, this messages started do appear in the logs.
|
| [2005/02/18 10:37:17, 3] lib/smbldap.c:smbldap_connect_system(866)
|   ldap_connect_system: succesful connection to the LDAP server
|   ldap_connect_system: LDAP server does not support paged results

Pretty much emans what is says.  The server doesn't support the
page search result LDAP control.  So we can't use it to enumerate
large search results.




cheers,jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
I never saved anything for the swim back. Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCFfoyIR7qMdg1EfYRAs4bAKC3/9zeO8QTntKjbVE8/f0jrU3zkQCggvah
sqDbRe1USp+19O0/HLJJ5pg=
=IxTb
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] smbmount problem

2005-02-18 Thread Victor Warner
I wish to mount a Windows network share in Linux (Windows running WinXP)
I can successfully connect to the Windows network share with smbclient:
smbclient //andyson01/clientfiles -U victor%password
But when I try to mount this share with the following:
smbmount //andyson01/clientfiles /home/victor/client -o username=victor 
password=password I get the following error messages:

(the directory client exists before trying the smbmount command)
cli_negprot: SMB signing is mandatory and we have disabled it.
2172: protocol negotiation failed
SMB connection failed
I can use the smbmount for shared directories on another Windows 98 machine.
I am new to Linux, and would appreciate any help.
Victor Warner
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] locking limit errors with Peachtree

2005-02-18 Thread Jeremy Allison
On Thu, Feb 17, 2005 at 03:40:26PM -0600, Andrew Gaffney wrote:
 In the samba domain I admin, one of the computers runs the Peachtree 
 accounting software. Today, McAfee antivirus was installed on that box (not 
 my doing) and now Peachtree keeps giving Locking table limit reached 
 errors. Is this an error from samba, Windows, or Peachtree? Is there a 
 limit to the number of file locks samba can grant at one time?

What version of Samba, what server OS platform. A little more info
would help.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Power SMB

2005-02-18 Thread Eric Wood
- Original Message - 
From: Greg Folkert
http://www.essay-software.com/

Weird, the purchase function doesn't even work on their web site.  Looks 
good though.

-eric wood
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] locking limit errors with Peachtree

2005-02-18 Thread Paul Gienger

Andrew Gaffney wrote:
In the samba domain I admin, one of the computers runs the Peachtree 
accounting software. Today, McAfee antivirus was installed on that box 
(not my doing) and now Peachtree keeps giving Locking table limit 
reached errors. Is this an error from samba, Windows, or Peachtree? 
Is there a limit to the number of file locks samba can grant at one time?
I'd be willing to bet that the error message is actually 'Lock Table 
Full'.  This is a peachtree error.   I can't tell you what caused it 
specifically, because we dropped peachtree, but it is definately 
Peachtree. 

--
--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] locking limit errors with Peachtree

2005-02-18 Thread Andrew Gaffney
Jeremy Allison wrote:
On Thu, Feb 17, 2005 at 03:40:26PM -0600, Andrew Gaffney wrote:
In the samba domain I admin, one of the computers runs the Peachtree 
accounting software. Today, McAfee antivirus was installed on that box (not 
my doing) and now Peachtree keeps giving Locking table limit reached 
errors. Is this an error from samba, Windows, or Peachtree? Is there a 
limit to the number of file locks samba can grant at one time?
What version of Samba, what server OS platform. A little more info
would help.
Samba 3.0.7 running on Linux with a 2.4 kernel. Samba is acting as a PDC for a 
NT-style domain (non-AD). smb.conf for that share is:

[skylinef]
path = /share/skylinef
valid users = @accounting,rgetter
read only = No
create mask = 0777
directory mask = 0777
Nothing in the global section is relevant (all domain related). The Windows box 
is running XP Pro SP2.

--
Andrew Gaffney
Network Administrator
Skyline Aeronautics, LLC.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] locking limit errors with Peachtree

2005-02-18 Thread Paul Gienger

In the samba domain I admin, one of the computers runs the Peachtree 
accounting software. Today, McAfee antivirus was installed on that 
box (not my doing) and now Peachtree keeps giving Locking table 
limit reached errors. Is this an error from samba, Windows, or 
Peachtree? Is there a limit to the number of file locks samba can 
grant at one time?

I'd be willing to bet that the error message is actually 'Lock Table 
Full'.  This is a peachtree error.   I can't tell you what caused it 
specifically, because we dropped peachtree, but it is definately 
Peachtree.
Oh yeah, fyi, we also saw this error on the win2k3 file server that we 
moved the data to during migration, so it's more than likely in the data 
somehow.  The peachtree people were of little/no help figuring it out.  
They kept saying we've never seen anyone actually get that error.


--
--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Howto delete printer driver for only one architecture?

2005-02-18 Thread Christoph Peus
Gerald (Jerry) Carter wrote:
| | Therefore I would like to delete these old drivers, but
| | I don't know how to achieve this without
| | deleting the drivers for all architectures
|
| Use a windows 200 or later client.  Browse to the
| server's 'printers and faxes' folder.
|
| Now File - Server properties and got to the driver
| tab.  You can select the specific driver and architectures
| there.
|
| Thanks for your quick reply, but it doesn't solve
| the problem for me, because the add and delete
| buttons are grayed out (not usable) in
| this context, though I logged in with admin rigths. (I hope so)
If they are greyed out, you don't have admin rights.  You have to
defined the 'printer admin' option in [global] to get things to work
well.  And I realize that this is kind of a documentation bug.
Or you can use the SePrintOperatorPrivilege in Samba 3.0.11
I fear that I have reported success a little bit to hastily, because I 
accidentlly tested your solution with a printer driver which was not in use 
by any printer at this time. This indeed worked fine, but when I try to 
delete a driver which is still associated to a printer, Windows is 
complaining that the driver is in use and therefore cannot be deleted.

The same problem with rpcclient:
lunkwill root # rpcclient localhost -U ntroot -c 'deldriverex mathe9102 
Windows NT x86 2'
Password:
Failed to remove driver mathe9102 for arch [Windows NT x86] (version: 2): 
WERR_PRINTER_DRIVER_IN_USE
result was WERR_UNKNOWN_PRINTER_DRIVER

Samba (3.0.11) seems to behave different here than a real Windows printer 
server: using Windows you can delete as many different architecture 
specific drivers as you like, even when they are associated to an existing 
printer - as long as there's at least one architecture's driver left for 
the printer. This concept makes perfect sense to me.
With samba it seems that all architecture's drivers are in use as long as 
they are associated to a printer and therefore cannot be deleted as long as 
the printer exists.

Or do I get something wrong here?
Christoph
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] smbumount error

2005-02-18 Thread Nina Pham
my linux server use smbmount mount to another linux server. The host 
server crashed.  Now, I can't even do smbumount . The error message was 
Could not open /tmp: Input/output error (/tmp is a mount point). I 
also failed trying umount. Is there any way I can unmount or get rid of 
the mount point?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Problems building samba+AD/LDAP support on Solaris 8

2005-02-18 Thread William Enestvedt
James Tullett asked:
 
  What versions of Kerberos and OpenLDAP would be most 
  suitable to use on Solaris 8 and samba 3.0.11 for use with ADS?
 
   The current Kerberos from MIT is 1.3.6, I think, and the current
OpenLDAP is 2.2.23. I have been trying to get these to work with Samba
3.0.11 on Solaris 8 for two weeks, with little or nothing to show. :7(
   Tim Evans pointed out:
 
 Go to www.sysadminmag.com and located the December Solaris 
 Supplement issue; it has a step-by-step.

   Beware of a few small parts that are left as an exercise for the
reader *cough* like Kerberos, winbind, and PAM.
-wde
P.S. I love the British Museum!
--
Will Enestvedt
UNIX System Administrator
Johnson  Wales University -- Providence, RI
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Drive Imaging and Domain Membership

2005-02-18 Thread Andrew Bartlett
On Fri, 2005-02-18 at 10:38 -0600, Stuart Highlander wrote:
 david,
 
 i think this is a microsoft thing more than a samba issue.

At my site, I use unattended.sf.net for this purpose.

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] RedHat+Samba+Winbind to ADS

2005-02-18 Thread Andrew Bartlett
On Wed, 2005-02-16 at 10:09 -0500, Greg Folkert wrote:
 On Wed, 2005-02-16 at 11:49 +0100, Antn wrote:
  Hi,
  
  I 've a gateway and I want to use squid authenticated with Windows 2000
  Active Directory users.
  
  I've a development platform with Debian/Sarge as gateway, and it works.
  (samba 3.0.10-1 and Kerberos 1.3.6-1)
  
  On the other side the production platform uses RedHat Enterprise AS3,
  initially with Samba 3.0.6 and Kerberos 1.2.7-28. I was not able to use
  Active directory groups without get smb panic errors in winbindd, so I
  update to Samba 3.0.9-1.3E.2 and Kerberos 1.2.7-38 (last available
  updates).
 
 You *ABSOLUTELY MUST USE* a version of MIT Kerberos5 v1.3.1 or newer.

Yes and no.  My understanding is that the issues regarding MIT  1.3.1
have been again resolved, in the latest Samba (including what has been
released for RHEL by RedHat).  Linking to another kerberos
implementation is a real pain (you would need to statically link to even
start).

(Of course, life is much easier with krb5 1.3.1 or later, but I know
what a pain it is for RHEL users)

I think the issue here is that the machine must be rejoined to the
domain, after the upgrade.

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] ldap / username issue

2005-02-18 Thread Chris McKeever
I apologize for the cross post here - but I am pulling my hair out on this one.

I have openldap working well integrating with the unix/samba usernames so
getent passwd displays all the ldap accounts

I had a bit of a fat finger today and nuked an account
I rebuilt it, and for the most part everything is identical (including
uidnumber)
I can ldapsearch for it fine -

however if I:  getent passwd | grep agent-guest , nothing appears
yet everything that the account relies upon still seems functional --

is there something that toggles it being in the output?  am I missing
something very simple?

thanks in advance -

-- 
--
please respond to the list .. if you need to contact me direct
cgmckeever is the account
prupref.com is the domain

A href=http://www.prupref.com;Simply Chicago Real Estate/A
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: ldap / username issue

2005-02-18 Thread Chris McKeever
On Fri, 18 Feb 2005 17:22:26 -0600, Chris McKeever [EMAIL PROTECTED] wrote:
 I apologize for the cross post here - but I am pulling my hair out on this 
 one.
 
 I have openldap working well integrating with the unix/samba usernames so
 getent passwd displays all the ldap accounts
 
 I had a bit of a fat finger today and nuked an account
 I rebuilt it, and for the most part everything is identical (including
 uidnumber)
 I can ldapsearch for it fine -
 
 however if I:  getent passwd | grep agent-guest , nothing appears
 yet everything that the account relies upon still seems functional --
 
 is there something that toggles it being in the output?  am I missing
 something very simple?
 
 thanks in advance -
 
 --

ldap comparison - cgmckeever displays, agent-guest does not


dn: uid=cgmckeever, ou=People, dc=prupref,dc=comdn: uid=agent-guest,
ou=People, dc=prupref,dc=com
objectClass: topobjectClass: top
objectClass: person objectClass: person
objectClass: organizationalPerson   objectClass: 
organizationalPerson
objectClass: inetOrgPerson  objectClass: 
inetOrgPerson
objectClass: accountobjectClass: account
objectClass: posixaccount   objectClass: 
posixaccount
objectClass: shadowaccount  objectClass: 
shadowaccount
objectClass: kerberosSecurityObject objectClass: 
kerberosSecurityObject
objectClass: sambaAccount   objectClass: 
sambaAccount
sn: McKeeversn: guest
givenName: Chris McKeever   givenName: agent guest
mail: [EMAIL PROTECTED] mail: [EMAIL PROTECTED]
shadowLastChange: 11761 shadowLastChange: 11761 

shadowMin: -1   shadowMin: -1
shadowMax: 9shadowMax: 9
shadowWarning: -1   shadowWarning: -1
shadowInactive: -1  shadowInactive: -1
shadowExpire: -1shadowExpire: -1
shadowFlag: 7100670 shadowFlag: 7100670
krbName: [EMAIL PROTECTED]  krbName: [EMAIL 
PROTECTED]
loginShell: /bin/false  loginShell: /bin/false
uidNumber: 1277 uidNumber: 49344
gidNumber: 1002 gidNumber: 1002
homeDirectory: /home/   homeDirectory: /home/
gecos: Chris McKeever   gecos: agent guest
creatorsName: cn=root,dc=prupref,dc=com creatorsName:
cn=root,dc=prupref,dc=com
createTimestamp: 20030502214502ZcreateTimestamp: 
20050218204327Z
userPassword:: e01ENX1IZk8z userPassword:: 
e01ENX01UlhmRF
uid: cgmckeever uid: agent-guest
pwdLastSet: 1093903956  pwdLastSet: 1108759458  

logonTime: 0logonTime: 0

logoffTime: 0   logoffTime: 2147483647  

kickoffTime: 0  kickoffTime: 2147483647 

pwdCanChange: 0 pwdCanChange: 0
displayName: Chris McKeever displayName: agent guest
cn: Chris McKeever  cn: agent guest
rid: 3554   rid: 99688
primaryGroupID: 3005primaryGroupID: 3005
lmPassword: 6E265BE9lmPassword: A356673D
ntPassword: 95A69025ntPassword: 2E6E2DA74
acctFlags: [UX ]acctFlags: [UX ]
pwdMustChange: 108696195100 pwdMustChange: 
108696195100
modifiersName: cn=root,dc=prupref,dc=commodifiersName:
cn=root,dc=prupref,dc=com
modifyTimestamp: 20040830221237ZmodifyTimestamp: 
20050218204419Z





 --
 please respond to the list .. if you need to contact me direct
 cgmckeever is the account
 prupref.com is the domain
 
 A href=http://www.prupref.com;Simply Chicago Real Estate/A
 


-- 
--
please respond to the list .. if you need to contact me direct
cgmckeever is the account
prupref.com is the domain

A href=http://www.prupref.com;Simply Chicago Real Estate/A
-- 
To unsubscribe from this list go to the 

[Samba] PDC with NSVSD/smbpasswd ok, but MySQL backend not quite

2005-02-18 Thread James MacLean
Hi Folks,
Samba-3.0.11.
. Using /etc/passwd, /etc/group, smbpasswd - everything in the PDC world 
seems fine.

. Using /etc/passwd, /etc/group, MySQL backend - I can join the domain 
but get an error about not being able to find a domain controller when I 
try to login to the domain with an mysql user. Logging in as root is ok, 
but likely that is because I use both mysql and smbpasswd backends.

. Using the new NSS http://fssos.sourceforge.net/ works ok if I use 
smbpasswd.

. Once I switch to NSVS(NSS) and MySQL, I can not log any new users in, 
but, if I log in as user who originally got in by being in smbpasswd but 
has since been deleted from smbpasswd, I can continue to login 
successfully if they exist in the MySQL.

. net rpc group info smbpasswd user  gives all group info from /etc/group.
. net rpc group info mysql only user  shows none of the groups they 
belong to regardless of there existance in /etc/passwd

Long story short... I can only get a new user logged into a PC via the 
domain for their first time if they have an entry in smbpasswd. After 
that, being in the MySQL backend appears to be enough.

I can pass along configs if needed, but since it works accept for the 
mysql change I didn't want to confuse the problem. I don't see the 
NSS/NSVS being any influence, but wanted to show how the solution was 
meant to fit together :).

Is this a known limitation in the MySQL backend or more likely, am I 
setting something up incorrectly?

thanks,
JES
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Help with freebsd and windows domain

2005-02-18 Thread Zeldar The Destroyer
I'm trying to add samba to our freebsd staging server and make it part
of the domain, so us developers can browse to files on it like we do
our other windows servers. I've been going through the setup on the
page and got wbinfo -u returing a list of users and such, but i don't
see a nsswitch.conf file any where on my system and also there is no
getent. I can't chmod a file to a user from the domain it says that
user does not exist, i can net rpc join into the domain and that
worked also. When i try to connect to the freebsd server from a
windows to see if i can see the shares i get an error saying i don't
have the proper trust settings to access the system. just wondering if
i can get some more info on completing this setup. Let me know if more
info or config files or anything is needed. Thanks for your help, i
hope i'm posting this to the right list, if this is the worng list
please let me know what list i should be sending this too.

Thanks
Justin
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] NEW DV LOTTERY RESULT

2005-02-18 Thread DV-LOTTERY RESULT

Main address: 
U.S. Department of State Public communication Division:
2201 C Street NW PA/PL,Rm.2206
Washington, DC 20520 U.S Department of state
www.dvlottery.state.gov  2201C Street NW  
 Washington,D.C.20520
Dear Client, 
Congratulations !
You have been selected as one of the lucky winners 
on our internet screening machine,DV-2005-2006 USA national visa lottery 
program. 
 
   It is our pleasure to congratulate you on your success in the America 
DV-2005-2006 VISA LOTTERY GREENCARD which was applied and processed by our 
immigration service. Your visa lottery winner's identity is ID-GRN777#4200DV# 
and 
the serial net visa passport attached to your case number is SNVPh700IU# .
In this respect,you are directed to forward the following requirements 
for further correspondence: 
(a) Your present contact address(for correspondent)
(b) Your recent passport photograph: REGULAR MAIL: You can also send your photo
 by regular mail. The photo must be between 1 ½ by 1 ½ and 2 by 2 
inches (37-50 mm) square, with the applicant's, spouse's, or child's name 
printed on the back. Please mail the photos to:
Immigration Services
211 South St. #334
Philadelphia, PA 19147
United States.
NOTE: Preferably for faster delivery and  processing you are implored 
to make a scanned copy of your recent  passport photograph and send it via 
online(email) to our immigration service  ([EMAIL PROTECTED])   
(c) Clearance/acceptance fees of ($740)for single and ($1,200) for spouse and 
children 
Details of requirements: 
Your present contact address should be forwarded strictly to our 
attached network receieving email address for correspondent: 
Alternatvely for faster processing, a scanned copy of your passport 
photograph should be send via our attached network  recieving email addresses:  
 
[EMAIL PROTECTED]OR [EMAIL PROTECTED]
A clearance/acceptance fees payment ($740)/($1,200) SINGLE /MARRIED STATUS.
We accept only western union money transfer payment method due 
to some reasons from our past experiences. (credit card is not 
accepted, please.)
 Your western union or other means of money transfer payment 
information should be forwarded as directed on payment procedures via our 
attached 
network recieving email addresses:
[EMAIL PROTECTED] OR [EMAIL PROTECTED]
Your payment confirmation shall be sent to you as soon as clarification
is done on your payment. Providing the above requirements will assure 
you your visa lottery acknowledgement card and visa lottery security case code 
which would be sent to your email addresses as provided.
Important notice :Please make sure you report and forward your lottery 
visa case code and acknowledgement card to the USA embassy in individual 
country 
for other necessary claims as soon as you have been sent all the 
necessary migration credentials via our attached courier service on 
accomplishing 
all necessary process and payment procedure. 
According to the united states code of conduct and constitution 
Vol.176/866 :Act 690SN guiding all immigration, green card permit 
agencies if non-response after 21days on receiving this notification, your 
winner's 
status shall reveal no interest and we would inresponse refer your lottery 
winning code and acknowledgement card back to the USA government/immigration 
service center. 
We shall be anticipating for your response soonest. 
 
Thanks. 
Marykate Purchia.
Online Co-ordinator  
   
CONGRATULATIONS !!! 
Kevin Powell 

PLEASE REPLY THROUGH OUR EMAIL[EMAIL PROTECTED] or[EMAIL PROTECTED]
 




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Stand-alone server authenticate with LDAP?

2005-02-18 Thread John H Terpstra
On Friday 18 February 2005 09:47, Matt Ingram wrote:
 Can anyone tell me if a stand-alone samba server can authenticate and
 get account info from an LDAP server or does this only work for domains ?

Yes, it can.

- John T.


 Thanks in advance.

 Matt.

 --
 http://www.joethrasher.com

 --
 Oh, they have the internet on computers now
   -H.J. Simpson
 --

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


svn commit: samba r5440 - in branches/SAMBA_4_0/source/build/pidl: .

2005-02-18 Thread jelmer
Author: jelmer
Date: 2005-02-18 11:11:21 + (Fri, 18 Feb 2005)
New Revision: 5440

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5440

Log:
Some more generalizations

Modified:
   branches/SAMBA_4_0/source/build/pidl/ndr.pm


Changeset:
Modified: branches/SAMBA_4_0/source/build/pidl/ndr.pm
===
--- branches/SAMBA_4_0/source/build/pidl/ndr.pm 2005-02-18 01:29:18 UTC (rev 
5439)
+++ branches/SAMBA_4_0/source/build/pidl/ndr.pm 2005-02-18 11:11:21 UTC (rev 
5440)
@@ -212,19 +212,10 @@
$name = $1;
}
 
-   if ($fn-{TYPE} eq FUNCTION) {
-   for my $e2 (@{$fn-{ELEMENTS}}) {
-   if ($e2-{NAME} eq $name) {
-   return $e2;
-   }
-   }
-   }
-
for my $e2 (@{$fn-{ELEMENTS}}) {
-   if ($e2-{NAME} eq $name) {
-   return $e2;
-   }
+   return $e2 if ($e2-{NAME} eq $name);
}
+
die invalid sibling '$name';
 }
 
@@ -238,13 +229,9 @@
 
my($fn) = $e-{PARENT};
 
-   if (util::is_constant($size)) {
-   return $size;
-   }
+   return $size if (util::is_constant($size));
 
-   if ($size =~ /ndr-|\(/) {
-   return $size;
-   }
+   return $size if ($size =~ /ndr-|\(/);
 
my $prefix = ;
 
@@ -262,9 +249,11 @@
if (util::has_property($e2, in)  util::has_property($e2, out)) {
return $prefix . $var_prefix$size;
}
+   
if (util::has_property($e2, in)) {
return $prefix . r-in.$size;
}
+   
if (util::has_property($e2, out)) {
return $prefix . r-out.$size;
}
@@ -295,7 +284,6 @@
}
 }
 
-
 #
 # work out is a parse function should be declared static or not
 sub fn_prefix($)
@@ -315,7 +303,6 @@
return static ;
 }
 
-
 ###
 # setup any special flags for an element or structure
 sub start_flags($)
@@ -913,9 +900,7 @@
 {
my($struct) = shift;

-   if (! defined $struct-{ELEMENTS}) {
-   return;
-   }
+   return unless defined($struct-{ELEMENTS});
 
start_flags($struct);
 
@@ -1112,11 +1097,12 @@
 sub ParseStructPrint($)
 {
my($struct) = shift;
+   my($name) = $struct-{PARENT}-{NAME};
 
-   if (! defined $struct-{ELEMENTS}) {
-   return;
-   }
+   return unless defined $struct-{ELEMENTS};
 
+   pidl ndr_print_struct(ndr, name, \$name\);;
+
start_flags($struct);
 
pidl ndr-depth++;;
@@ -1135,9 +1121,7 @@
my($struct) = shift;
my $conform_e;
 
-   if (! defined $struct-{ELEMENTS}) {
-   return;
-   }
+   return unless defined $struct-{ELEMENTS};
 
# see if the structure contains a conformant array. If it
# does, then it must be the last element of the structure, and
@@ -1324,7 +1308,9 @@
 {
my $e = shift;
my $have_default = 0;
+   my($name) = $e-{PARENT}-{NAME};
 
+   pidl ndr_print_union(ndr, name, level, \$name\);;
start_flags($e);
 
pidl switch (level) {;
@@ -1525,31 +1511,23 @@
 
if ($e-{DATA}-{TYPE} eq STRUCT) {
pidl void ndr_print_$e-{NAME}(struct ndr_print *ndr, const 
char *name, struct $e-{NAME} *r);
-   pidl {;
-   indent;
-   pidl ndr_print_struct(ndr, name, \$e-{NAME}\);;
}
 
if ($e-{DATA}-{TYPE} eq UNION) {
pidl void ndr_print_$e-{NAME}(struct ndr_print *ndr, const 
char *name, int level, union $e-{NAME} *r);
-   pidl {;
-   indent;
-   pidl ndr_print_union(ndr, name, level, \$e-{NAME}\);;
}
 
if ($e-{DATA}-{TYPE} eq ENUM) {
pidl void ndr_print_$e-{NAME}(struct ndr_print *ndr, const 
char *name, enum $e-{NAME} r);
-   pidl {;
-   indent;
}
 
if ($e-{DATA}-{TYPE} eq BITMAP) {
my $type_decl = util::bitmap_type_decl($e-{DATA});
pidl void ndr_print_$e-{NAME}(struct ndr_print *ndr, const 
char *name, $type_decl r);
-   pidl {;
-   indent;
}
 
+   pidl {;
+   indent;
$typefamily{$e-{DATA}-{TYPE}}-{PRINT_FN_BODY}-($e-{DATA});
deindent;
pidl };



svn commit: samba r5441 - in branches/SAMBA_4_0/source/build/pidl: .

2005-02-18 Thread jelmer
Author: jelmer
Date: 2005-02-18 11:39:52 + (Fri, 18 Feb 2005)
New Revision: 5441

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5441

Log:
Put push, pull and print arguments in hash as well

Modified:
   branches/SAMBA_4_0/source/build/pidl/ndr.pm


Changeset:
Sorry, the patch is too large (251 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5441


svn commit: samba r5442 - in branches/SAMBA_4_0/source/build/pidl: .

2005-02-18 Thread jelmer
Author: jelmer
Date: 2005-02-18 11:45:26 + (Fri, 18 Feb 2005)
New Revision: 5442

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5442

Log:
Use argument list generator functions from NdrParser in NdrHeader

Modified:
   branches/SAMBA_4_0/source/build/pidl/header.pm
   branches/SAMBA_4_0/source/build/pidl/ndr.pm


Changeset:
Modified: branches/SAMBA_4_0/source/build/pidl/header.pm
===
--- branches/SAMBA_4_0/source/build/pidl/header.pm  2005-02-18 11:39:52 UTC 
(rev 5441)
+++ branches/SAMBA_4_0/source/build/pidl/header.pm  2005-02-18 11:45:26 UTC 
(rev 5442)
@@ -239,38 +239,16 @@
return;
 }
 
-if ($d-{DATA}{TYPE} eq STRUCT) {
-   pidl NTSTATUS ndr_push_$d-{NAME}(struct ndr_push *ndr, int 
ndr_flags, struct $d-{NAME} *r);\n;
-   pidl NTSTATUS ndr_pull_$d-{NAME}(struct ndr_pull *ndr, int 
ndr_flags, struct $d-{NAME} *r);\n;
-   if (!util::has_property($d, noprint)) {
-   pidl void ndr_print_$d-{NAME}(struct ndr_print *ndr, 
const char *name, struct $d-{NAME} *r);\n;
-   }
+   my $tf = NdrParser::get_typefamily($d-{DATA}{TYPE});
 
+   my $pull_args = $tf-{PULL_FN_ARGS}-($d);
+   my $push_args = $tf-{PUSH_FN_ARGS}-($d);
+   my $print_args = $tf-{PRINT_FN_ARGS}-($d);
+   pidl NTSTATUS ndr_push_$d-{NAME}($push_args);\n;
+pidl NTSTATUS ndr_pull_$d-{NAME}($pull_args);\n;
+if (!util::has_property($d, noprint)) {
+   pidl void ndr_print_$d-{NAME}($print_args);\n;
 }
-if ($d-{DATA}{TYPE} eq UNION) {
-   pidl NTSTATUS ndr_push_$d-{NAME}(struct ndr_push *ndr, int 
ndr_flags, int level, union $d-{NAME} *r);\n;
-   pidl NTSTATUS ndr_pull_$d-{NAME}(struct ndr_pull *ndr, int 
ndr_flags, int level, union $d-{NAME} *r);\n;
-   if (!util::has_property($d, noprint)) {
-   pidl void ndr_print_$d-{NAME}(struct ndr_print *ndr, 
const char *name, int level, union $d-{NAME} *r);\n;
-   }
-}
-
-if ($d-{DATA}{TYPE} eq ENUM) {
-   pidl NTSTATUS ndr_push_$d-{NAME}(struct ndr_push *ndr, int 
ndr_flags, enum $d-{NAME} r);\n;
-   pidl NTSTATUS ndr_pull_$d-{NAME}(struct ndr_pull *ndr, int 
ndr_flags, enum $d-{NAME} *r);\n;
-   if (!util::has_property($d, noprint)) {
-   pidl void ndr_print_$d-{NAME}(struct ndr_print *ndr, 
const char *name, enum $d-{NAME} r);\n;
-   }
-}
-
-if ($d-{DATA}{TYPE} eq BITMAP) {
-   my $type_decl = util::bitmap_type_decl($d-{DATA});
-   pidl NTSTATUS ndr_push_$d-{NAME}(struct ndr_push *ndr, int 
ndr_flags, $type_decl r);\n;
-   pidl NTSTATUS ndr_pull_$d-{NAME}(struct ndr_pull *ndr, int 
ndr_flags, $type_decl *r);\n;
-   if (!util::has_property($d, noprint)) {
-   pidl void ndr_print_$d-{NAME}(struct ndr_print *ndr, 
const char *name, $type_decl r);\n;
-   }
-}
 }
 
 #

Modified: branches/SAMBA_4_0/source/build/pidl/ndr.pm
===
--- branches/SAMBA_4_0/source/build/pidl/ndr.pm 2005-02-18 11:39:52 UTC (rev 
5441)
+++ branches/SAMBA_4_0/source/build/pidl/ndr.pm 2005-02-18 11:45:26 UTC (rev 
5442)
@@ -20,6 +20,12 @@
return $typedefs{$n};
 }
 
+sub get_typefamily($)
+{
+   my $n = shift;
+   return $typefamily{$n};
+}
+
 sub RegisterPrimitives()
 {
my %type_alignments = 



svn commit: samba r5443 - in branches/SAMBA_4_0/source/build/pidl: .

2005-02-18 Thread jelmer
Author: jelmer
Date: 2005-02-18 12:04:51 + (Fri, 18 Feb 2005)
New Revision: 5443

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5443

Log:
Fix HeaderProperties(). Not re-enabling yet because I don't know why it 
was disabled in the first place.

Modified:
   branches/SAMBA_4_0/source/build/pidl/header.pm


Changeset:
Modified: branches/SAMBA_4_0/source/build/pidl/header.pm
===
--- branches/SAMBA_4_0/source/build/pidl/header.pm  2005-02-18 11:45:26 UTC 
(rev 5442)
+++ branches/SAMBA_4_0/source/build/pidl/header.pm  2005-02-18 12:04:51 UTC 
(rev 5443)
@@ -25,21 +25,26 @@
 
 #
 # parse a properties list
-sub HeaderProperties($)
+sub HeaderProperties($$)
 {
 my($props) = shift;
+   my($ignores) = shift;
+   my $ret = ;
 
-return;
+   return; 
 
-foreach my $d (@{$props}) {
-   if (ref($d) ne HASH) {
-   pidl /* [$d] */ ;
-   } else {
-   foreach my $k (keys %{$d}) {
-   pidl /* [$k($d-{$k})] */ ;
-   }
+foreach my $d (keys %{$props}) {
+   next if ($ignores-{$d});
+   if($props-{$d} ne 1) {
+   $ret.= $d( . $props-{$d} . ),;
+   } else {
+   $ret.=$d,;
+   }
}
-}
+
+   if ($ret) {
+   pidl /* [ . substr($ret, 0, -1) . ] */;
+   }
 }
 
 #
@@ -48,7 +53,9 @@
 {
 my($element) = shift;
 
-(defined $element-{PROPERTIES})  
HeaderProperties($element-{PROPERTIES});
+if (defined $element-{PROPERTIES}) {
+   HeaderProperties($element-{PROPERTIES}, {in = 1, out = 
1});
+   }
 pidl tabs();
 HeaderType($element, $element-{TYPE}, );
 pidl  ;
@@ -151,7 +158,9 @@
my($name) = shift;
my %done = ();
 
-   (defined $union-{PROPERTIES})  
HeaderProperties($union-{PROPERTIES});
+   if (defined $union-{PROPERTIES}) {
+   HeaderProperties($union-{PROPERTIES}, {});
+   }
pidl \nunion $name {\n;
$tab_depth++;
foreach my $e (@{$union-{ELEMENTS}}) {
@@ -235,9 +244,7 @@
}
 }
 
-if (!util::has_property($d, public)) {
-   return;
-}
+return unless util::has_property($d, public);
 
my $tf = NdrParser::get_typefamily($d-{DATA}{TYPE});
 



svn commit: samba r5444 - branches/SAMBA_3_0/examples/misc trunk/examples/misc

2005-02-18 Thread gd
Author: gd
Date: 2005-02-18 16:43:20 + (Fri, 18 Feb 2005)
New Revision: 5444

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5444

Log:
Add adssearch.pl utility (on volkers request).

Added to samba3 due to some header and machine-account dependencies,
although it's possibly of more interest to samba4 developers.

adssearch.pl is a kind of ldapsearch + dump-filters for various
ADS-attributes. It can also register asynchronous change notifications.

./adssearch.pl -h w2k3host -D [EMAIL PROTECTED] -x -w mypass -n

and *any* change in your entire DIT will show up immediately (after a
second change of an object even as object diff). It's very interesting
to see the interaction of GPOs, the various steps of account
modification with dsa.msc, etc.

Gracefully ignore some parts of adssearch.pl that are rather immature...

Guenther 


Added:
   branches/SAMBA_3_0/examples/misc/adssearch.pl
   trunk/examples/misc/adssearch.pl


Changeset:
Sorry, the patch is too large (3007 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5444


svn commit: samba r5445 - in branches/SAMBA_4_0/source/librpc/idl: .

2005-02-18 Thread metze
Author: metze
Date: 2005-02-18 17:23:24 + (Fri, 18 Feb 2005)
New Revision: 5445

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5445

Log:
move FormInfo1 struct to the place where it's used

metze

Modified:
   branches/SAMBA_4_0/source/librpc/idl/spoolss.idl


Changeset:
Modified: branches/SAMBA_4_0/source/librpc/idl/spoolss.idl
===
--- branches/SAMBA_4_0/source/librpc/idl/spoolss.idl2005-02-18 16:43:20 UTC 
(rev 5444)
+++ branches/SAMBA_4_0/source/librpc/idl/spoolss.idl2005-02-18 17:23:24 UTC 
(rev 5445)
@@ -100,17 +100,6 @@
[relative] nstring *comment;
} spoolss_PrinterInfo1;
 
-   typedef struct {
-   uint32 flags;
-   [relative] nstring *formname;
-   uint32 width;
-   uint32 length;
-   uint32 left;
-   uint32 top;
-   uint32 right;
-   uint32 bottom;
-   } spoolss_FormInfo1;
-
typedef [public] struct {
[relative] nstring *servername;
[relative] nstring *printername;
@@ -475,6 +464,17 @@
 
/**/
/* Function: 0x20 */
+   typedef struct {
+   uint32 flags;
+   [relative] nstring *formname;
+   uint32 width;
+   uint32 length;
+   uint32 left;
+   uint32 top;
+   uint32 right;
+   uint32 bottom;
+   } spoolss_FormInfo1;
+
WERROR spoolss_GetForm(
[in,ref] policy_handle *handle,
[in] unistr formname,



svn commit: samba-web r552 - in trunk/news/developers: .

2005-02-18 Thread deryck
Author: deryck
Date: 2005-02-18 19:03:25 + (Fri, 18 Feb 2005)
New Revision: 552

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=552

Log:

Adding news item about Jerry's roadmap slides being
available online.

deryck


Added:
   trunk/news/developers/LWboston_roadmap_slides.html


Changeset:
Added: trunk/news/developers/LWboston_roadmap_slides.html
===
--- trunk/news/developers/LWboston_roadmap_slides.html  2005-02-17 18:17:28 UTC 
(rev 551)
+++ trunk/news/developers/LWboston_roadmap_slides.html  2005-02-18 19:03:25 UTC 
(rev 552)
@@ -0,0 +1,15 @@
+h3a name=LW_boston_roadmapsSamba Roadmap Slides/a/h3 
+
+div class=article
+pSamba Team member and 3.0.x release manager Gerald Jerry Carter gave
+   a talk on The State of Samba at LinuxWorld Boston this week.  The talk
+   serves as an overview of recent activity on Samba, as well as an 
overview
+   of where Samba is headed.  The slides from the talk are available online
+   and serve as an excellent guide to the planned roadmaps for both Samba 
3.0 
+   and Samba4./p
+
+   pThe State of Samba slides are available 
+   a 
href=http://samba.org/~jerry/slides/samba_roadmap_lwbos05_slides.pdf;here/a./p
+   /div
+
+   



svn commit: samba-web r553 - in trunk/news/developers: .

2005-02-18 Thread deryck
Author: deryck
Date: 2005-02-18 19:06:09 + (Fri, 18 Feb 2005)
New Revision: 553

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=553

Log:

Keep the a name and the filename the same.  (Just messed up 
my usual practice.)

deryck


Modified:
   trunk/news/developers/LWboston_roadmap_slides.html


Changeset:
Modified: trunk/news/developers/LWboston_roadmap_slides.html
===
--- trunk/news/developers/LWboston_roadmap_slides.html  2005-02-18 19:03:25 UTC 
(rev 552)
+++ trunk/news/developers/LWboston_roadmap_slides.html  2005-02-18 19:06:09 UTC 
(rev 553)
@@ -1,4 +1,4 @@
-h3a name=LW_boston_roadmapsSamba Roadmap Slides/a/h3 
+h3a name=LWboston_roadmap_slidesSamba Roadmap Slides/a/h3 
 
 div class=article
 pSamba Team member and 3.0.x release manager Gerald Jerry Carter gave



svn commit: samba r5448 - in branches/SAMBA_4_0/source/build/pidl: .

2005-02-18 Thread tridge
Author: tridge
Date: 2005-02-18 21:10:31 + (Fri, 18 Feb 2005)
New Revision: 5448

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5448

Log:
another portability fix for solaris

Modified:
   branches/SAMBA_4_0/source/build/pidl/ndr.pm


Changeset:
Modified: branches/SAMBA_4_0/source/build/pidl/ndr.pm
===
--- branches/SAMBA_4_0/source/build/pidl/ndr.pm 2005-02-18 20:02:32 UTC (rev 
5447)
+++ branches/SAMBA_4_0/source/build/pidl/ndr.pm 2005-02-18 21:10:31 UTC (rev 
5448)
@@ -1628,7 +1628,7 @@
 
return unless needed::is_needed(ndr_size_$t-{NAME});
 
-   $typefamily{$t-{DATA}-{TYPE}}-{SIZE_FN}($t);
+   $typefamily{$t-{DATA}-{TYPE}}-{SIZE_FN}-($t);
 }
 
 #



svn commit: samba r5449 - in branches/SAMBA_4_0/source/build/pidl: .

2005-02-18 Thread jelmer
Author: jelmer
Date: 2005-02-18 21:49:11 + (Fri, 18 Feb 2005)
New Revision: 5449

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5449

Log:
More array handling cleanups. This should make the code more 
readable. (Output C and header files have not changed, just internal pidl 
changes)

Modified:
   branches/SAMBA_4_0/source/build/pidl/ndr.pm


Changeset:
Modified: branches/SAMBA_4_0/source/build/pidl/ndr.pm
===
--- branches/SAMBA_4_0/source/build/pidl/ndr.pm 2005-02-18 21:10:31 UTC (rev 
5448)
+++ branches/SAMBA_4_0/source/build/pidl/ndr.pm 2005-02-18 21:49:11 UTC (rev 
5449)
@@ -110,7 +110,8 @@
 sub is_conformant_array($)
 {
my $e = shift;
-   return defined($e-{CONFORMANT_SIZE});
+   return 1 if (util::has_property($e, size_is));
+   return 0;
 }
 
 # return 1 if this is a inline array
@@ -132,6 +133,17 @@
return 0;
 }
 
+sub is_surrounding_array($)
+{
+   my $e = shift;
+
+   return ($e-{POINTERS} == 0 
+   and defined $e-{ARRAY_LEN} 
+   and $e-{ARRAY_LEN} eq *
+   and $e == $e-{PARENT}-{ELEMENTS}[-1] 
+   and $e-{PARENT}-{TYPE} ne FUNCTION);
+}
+
 sub array_type($)
 {
my $e = shift;
@@ -430,14 +442,15 @@
 
my $size = ParseExpr($e, util::array_size($e), $var_prefix);
 
-   if (is_conformant_array($e) ) {
+   if (is_surrounding_array($e)) {
# the conformant size has already been pushed
} elsif (!is_inline_array($e)) {
# we need to emit the array size
pidl NDR_CHECK(ndr_push_uint32(ndr, NDR_SCALARS, $size));;
}
 
-   if (my $length = util::has_property($e, length_is)) {
+   if (is_varying_array($e)) {
+   my $length = util::has_property($e, length_is);
$length = ParseExpr($e, $length, $var_prefix);
pidl NDR_CHECK(ndr_push_uint32(ndr, NDR_SCALARS, 0));;
pidl NDR_CHECK(ndr_push_uint32(ndr, NDR_SCALARS, $length));;
@@ -478,8 +491,8 @@
my $e = shift;
my $var_prefix = shift;
 
-   if (!is_conformant_array($e)  
-   util::has_property($e, size_is)) {
+   if (!is_surrounding_array($e)  
+   is_conformant_array($e)) {
my $size = ParseExpr($e, util::array_size($e), $var_prefix);
pidl if ($var_prefix$e-{NAME}) {;
indent;
@@ -489,14 +502,15 @@
pidl };
}
 
-   if (my $length = util::has_property($e, length_is)) {
+   if (is_varying_array($e)) {
+   my $length = util::has_property($e, length_is);
$length = ParseExpr($e, $length, $var_prefix);
pidl if ($var_prefix$e-{NAME}) {;
indent;
check_null_pointer($length);
pidl NDR_CHECK(ndr_check_array_length(ndr, 
(void*)$var_prefix$e-{NAME}, $length));;
deindent;
-   pidl };
+   pidl }
}
 }
 
@@ -513,7 +527,7 @@
 
# if this is a conformant array then we use that size to allocate, and 
make sure
# we allocate enough to pull the elements
-   if (is_conformant_array($e)) {
+   if (is_conformant_array($e) and is_surrounding_array($e)) {
$alloc_size = $e-{CONFORMANT_SIZE};
check_null_pointer($size);
pidl if ($size  $alloc_size) {;
@@ -964,7 +978,7 @@
# the wire before the structure (and even before the structure
# alignment)
my $e = $struct-{ELEMENTS}[-1];
-   if (defined $e-{ARRAY_LEN}  $e-{ARRAY_LEN} eq *) {
+   if (is_conformant_array($e) and is_surrounding_array($e)) {
my $size = ParseExpr($e, util::array_size($e), r-);
$e-{CONFORMANT_SIZE} = $size;
check_null_pointer($size);
@@ -1228,7 +1242,7 @@
# the wire before the structure (and even before the structure
# alignment)
my $e = $struct-{ELEMENTS}[-1];
-   if (defined $e-{ARRAY_LEN}  $e-{ARRAY_LEN} eq *) {
+   if (is_conformant_array($e) and is_surrounding_array($e)) {
$conform_e = $e;
}
 
@@ -1238,7 +1252,6 @@
}
 
if (defined $conform_e) {
-   $conform_e = $e;
pidl uint32_t _conformant_size;;
$conform_e-{CONFORMANT_SIZE} = _conformant_size;
}



svn commit: samba r5450 - in branches/SAMBA_4_0/source/librpc/idl: .

2005-02-18 Thread jelmer
Author: jelmer
Date: 2005-02-18 23:06:13 + (Fri, 18 Feb 2005)
New Revision: 5450

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5450

Log:
Add test function for embedded conformant arrays

Modified:
   branches/SAMBA_4_0/source/librpc/idl/echo.idl


Changeset:
Modified: branches/SAMBA_4_0/source/librpc/idl/echo.idl
===
--- branches/SAMBA_4_0/source/librpc/idl/echo.idl   2005-02-18 21:49:11 UTC 
(rev 5449)
+++ branches/SAMBA_4_0/source/librpc/idl/echo.idl   2005-02-18 23:06:13 UTC 
(rev 5450)
@@ -119,4 +119,13 @@
[in,out,ref] echo_Enum2 *foo2,
[in,out,ref,switch_is(*foo1)] echo_Enum3 *foo3
);
+
+   typedef struct {
+   uint32 x;
+   [size_is(x)] uint16 surrounding[*];
+   } echo_Surrounding;
+
+   void echo_TestSurrounding(
+   [in,out,ref] echo_Surrounding *data
+   );
 }



svn commit: samba r5451 - in branches/SAMBA_4_0/source: include libcli/wins torture/nbt

2005-02-18 Thread tridge
Author: tridge
Date: 2005-02-18 23:13:51 + (Fri, 18 Feb 2005)
New Revision: 5451

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5451

Log:
- added separate wrepl_associate(), wrepl_pull_table() and wrepl_pull_names() 
functions, with reasonable
  parameters, so callers don't need to deal directly with wins replication 
packet structures

- converted the NBT-WINSREPLICATION torture test to use the new APIs

Modified:
   branches/SAMBA_4_0/source/include/structs.h
   branches/SAMBA_4_0/source/libcli/wins/winsrepl.c
   branches/SAMBA_4_0/source/libcli/wins/winsrepl.h
   branches/SAMBA_4_0/source/torture/nbt/winsreplication.c


Changeset:
Sorry, the patch is too large (506 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5451


svn commit: samba r5452 - in branches/SAMBA_4_0/source: rpc_server/echo torture/rpc

2005-02-18 Thread jelmer
Author: jelmer
Date: 2005-02-18 23:30:26 + (Fri, 18 Feb 2005)
New Revision: 5452

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5452

Log:
Add implementation + torture test for echo_Surrounding

Modified:
   branches/SAMBA_4_0/source/rpc_server/echo/rpc_echo.c
   branches/SAMBA_4_0/source/torture/rpc/echo.c


Changeset:
Modified: branches/SAMBA_4_0/source/rpc_server/echo/rpc_echo.c
===
--- branches/SAMBA_4_0/source/rpc_server/echo/rpc_echo.c2005-02-18 
23:13:51 UTC (rev 5451)
+++ branches/SAMBA_4_0/source/rpc_server/echo/rpc_echo.c2005-02-18 
23:30:26 UTC (rev 5452)
@@ -137,6 +137,20 @@
}
 }
 
+static NTSTATUS echo_TestSurrounding(struct dcesrv_call_state *dce_call, 
TALLOC_CTX *mem_ctx, struct echo_TestSurrounding *r)
+{
+   if (!r-in.data) {
+   r-out.data = NULL;
+   return NT_STATUS_OK;
+   }
+
+   r-out.data = talloc(mem_ctx, struct echo_Surrounding);
+   r-out.data-x = 2 * r-in.data-x;
+   r-out.data-surrounding = talloc_zero_array(mem_ctx, uint16_t, 
r-out.data-x);
+
+   return NT_STATUS_OK;
+}
+
 static long echo_TestSleep(struct dcesrv_call_state *dce_call, TALLOC_CTX 
*mem_ctx, struct echo_TestSleep *r)
 {
struct echo_TestSleep_private *p;

Modified: branches/SAMBA_4_0/source/torture/rpc/echo.c
===
--- branches/SAMBA_4_0/source/torture/rpc/echo.c2005-02-18 23:13:51 UTC 
(rev 5451)
+++ branches/SAMBA_4_0/source/torture/rpc/echo.c2005-02-18 23:30:26 UTC 
(rev 5452)
@@ -319,6 +319,40 @@
return ret;
 }
 
+/*
+  test surrounding conformant array handling
+*/
+static BOOL test_surrounding(struct dcerpc_pipe *p, TALLOC_CTX *mem_ctx)
+{
+   NTSTATUS status;
+   struct echo_TestSurrounding r;
+   BOOL ret = True;
+
+   ZERO_STRUCT(r);
+   r.in.data = talloc(mem_ctx, struct echo_Surrounding);
+
+   r.in.data-x = 20;
+   r.in.data-surrounding = talloc_zero_array(mem_ctx, uint16_t, 
r.in.data-x);
+
+   r.out.data = talloc(mem_ctx, struct echo_Surrounding);
+
+   printf(\nTesting TestSurrounding\n);
+   status = dcerpc_echo_TestSurrounding(p, mem_ctx, r);
+   if (!NT_STATUS_IS_OK(status)) {
+   printf(TestSurrounding failed - %s\n, nt_errstr(status));
+   ret = False;
+   }
+   
+   if (r.out.data-x != 2 * r.in.data-x) {
+   printf(TestSurrounding did not make the array twice as 
large\n);
+   ret = False;
+   }
+
+   return ret;
+}
+
+
+
 BOOL torture_rpc_echo(void)
 {
 NTSTATUS status;
@@ -344,6 +378,7 @@
ret = test_testcall2(p, mem_ctx);
ret = test_enum(p, mem_ctx);
ret = test_sleep(p, mem_ctx);
+   ret = test_surrounding(p, mem_ctx);
 
printf(\n);




svn commit: samba r5453 - in branches/SAMBA_4_0/source: build/pidl torture/rpc

2005-02-18 Thread jelmer
Author: jelmer
Date: 2005-02-18 23:43:40 + (Fri, 18 Feb 2005)
New Revision: 5453

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5453

Log:
Treat embedded arrays (surrounding structures) somewhat 
more generically. The default functions for remembering array sizes
are now used rather then a special local variable.

Modified:
   branches/SAMBA_4_0/source/build/pidl/ndr.pm
   branches/SAMBA_4_0/source/torture/rpc/echo.c


Changeset:
Modified: branches/SAMBA_4_0/source/build/pidl/ndr.pm
===
--- branches/SAMBA_4_0/source/build/pidl/ndr.pm 2005-02-18 23:30:26 UTC (rev 
5452)
+++ branches/SAMBA_4_0/source/build/pidl/ndr.pm 2005-02-18 23:43:40 UTC (rev 
5453)
@@ -126,6 +126,7 @@
return 0;
 }
 
+# return 1 if this is a varying array
 sub is_varying_array($)
 {
my $e = shift;
@@ -133,6 +134,9 @@
return 0;
 }
 
+# return 1 if this is a surrounding array (sometimes 
+# referred to as an embedded array). Can only occur as 
+# the last element in a struct and can not contain any pointers.
 sub is_surrounding_array($)
 {
my $e = shift;
@@ -433,8 +437,8 @@
 }
 
 #
-# parse an array - push side
-sub ParseArrayPush($$$)
+# parse array preceding data - push side
+sub ParseArrayPushPreceding($$$)
 {
my $e = shift;
my $var_prefix = shift;
@@ -442,13 +446,26 @@
 
my $size = ParseExpr($e, util::array_size($e), $var_prefix);
 
-   if (is_surrounding_array($e)) {
-   # the conformant size has already been pushed
-   } elsif (!is_inline_array($e)) {
+   if (!is_inline_array($e)) {
# we need to emit the array size
pidl NDR_CHECK(ndr_push_uint32(ndr, NDR_SCALARS, $size));;
}
+}
 
+#
+# parse the data of an array - push side
+sub ParseArrayPush($$$)
+{
+   my $e = shift;
+   my $var_prefix = shift;
+   my $ndr_flags = shift;
+
+   my $size = ParseExpr($e, util::array_size($e), $var_prefix);
+
+   if (!is_surrounding_array($e)) {
+   ParseArrayPushPreceding($e, $var_prefix, $ndr_flags);
+   }
+   
if (is_varying_array($e)) {
my $length = util::has_property($e, length_is);
$length = ParseExpr($e, $length, $var_prefix);
@@ -514,6 +531,18 @@
}
 }
 
+sub ParseArrayPullPreceding($$$)
+{
+   my $e = shift;
+   my $var_prefix = shift;
+   my $ndr_flags = shift;
+
+   if (!is_inline_array($e)) {
+   # non fixed arrays encode the size just before the array
+   pidl NDR_CHECK(ndr_pull_array_size(ndr, 
$var_prefix$e-{NAME}));;
+   }
+}
+
 #
 # parse an array - pull side
 sub ParseArrayPull($$$)
@@ -528,7 +557,7 @@
# if this is a conformant array then we use that size to allocate, and 
make sure
# we allocate enough to pull the elements
if (is_conformant_array($e) and is_surrounding_array($e)) {
-   $alloc_size = $e-{CONFORMANT_SIZE};
+   $alloc_size = ndr_get_array_size(ndr, $var_prefix$e-{NAME});
check_null_pointer($size);
pidl if ($size  $alloc_size) {;
indent;
@@ -541,8 +570,8 @@
pidl if (ndr-flags  LIBNDR_FLAG_REF_ALLOC) { 
NDR_ALLOC(ndr, $size2); };
}
 
-   # non fixed arrays encode the size just before the array
-   pidl NDR_CHECK(ndr_pull_array_size(ndr, 
$var_prefix$e-{NAME}));;
+   ParseArrayPullPreceding($e, $var_prefix, $ndr_flags);
+
$alloc_size = ndr_get_array_size(ndr, $var_prefix$e-{NAME});
}
 
@@ -979,10 +1008,7 @@
# alignment)
my $e = $struct-{ELEMENTS}[-1];
if (is_conformant_array($e) and is_surrounding_array($e)) {
-   my $size = ParseExpr($e, util::array_size($e), r-);
-   $e-{CONFORMANT_SIZE} = $size;
-   check_null_pointer($size);
-   pidl NDR_CHECK(ndr_push_uint32(ndr, NDR_SCALARS, $size));;
+   ParseArrayPushPreceding($e, r-, NDR_SCALARS);
}
 
if (defined $e-{TYPE}  $e-{TYPE} eq string 
@@ -1251,11 +1277,6 @@
$conform_e = $e;
}
 
-   if (defined $conform_e) {
-   pidl uint32_t _conformant_size;;
-   $conform_e-{CONFORMANT_SIZE} = _conformant_size;
-   }
-
# declare any internal pointers we need
foreach my $e (@{$struct-{ELEMENTS}}) {
if (need_wire_pointer($e)) {
@@ -1270,7 +1291,7 @@
pidl NDR_CHECK(ndr_pull_struct_start(ndr));;
 
if (defined $conform_e) {
-   pidl NDR_CHECK(ndr_pull_uint32(ndr, NDR_SCALARS, 
$conform_e-{CONFORMANT_SIZE}));;
+