date:20050315

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
James, Garrick wrote:
| Wonder why it is failing with #ifdef HAVE_REGEX_H ?  That
| macro is not defined anywhere.  We don't even test for
| regex.h anyways.  Can you check
| and see where HAVE_REGEX_H is defined.
|
| It turns out it is defined in gssapi.h from an MIT krb5 1.4 install.
|
| Given that you are surprised that this macro is defined, is it safe to
| assume that the code it surrounds is not supposed to be used?  Can this
| code be safely removed from clitar.c?
Yup.  See http://samba.org/~jerry/patches/post3.0.11/clitar.patch
Fixed in = 3.0.12pre1


cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
I never saved anything for the swim back. Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCNugOIR7qMdg1EfYRApl4AKCvQPHC90jLwXo2jQ3E5r2BeoPu1wCcC97E
FHkUjmVUmD9mGG1qJylo1mo=
=uxHr
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba and cups printing: lp_servicenumber: couldn't find hl5150d

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Peter Weiss wrote:
| Hello,
|
| found no answer for the following elsewhere setting up
| samba on a Debian box:  The printer is seen on the net from
| the clients but no printing is possible.

| I traced the thing down to the following:
|
| [2005/03/13 13:01:08, 10] printing/print_cups.c:cups_server(51)
|   cups server left to default localhost
| [2005/03/13 13:01:08, 7] param/loadparm.c:lp_servicenumber(4051)
|   lp_servicenumber: couldn't find hl5150d
| [2005/03/13 13:01:08, 8] param/loadparm.c:add_a_service(2305)
|   add_a_service: Creating snum = 7 for hl5150d
|
| Looking at the sources the printer is first looked up
| in lp_servicenumber() and _after that_ the service is added
| by add_a_service().  Has anyone a hint where to look at?
This is normal (the log message).  smbd defers to explicitly
defined shares in smb.conf.  We create one if [printers] exists
and the requested name can be validated by the printing subsystem.
Note that there were significant changes to this area between
3.0.10 and 3.0.11 (for the better).  I would recommend testing
3.0.11 (or 3.0.12rc1).
btwyou don't really give any details about  how 'no printing
is possible'

ciao, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
I never saved anything for the swim back. Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCNukjIR7qMdg1EfYRAoapAJ4vCXkl0945rRwDEDRLypZMhVbx/gCgm8zf
raas+sosIPvWPWYcJ92OfBc=
=5NrI
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] EA support for AIX 5.3

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
William Jojo wrote:
|
| Whilst fixing  bug 2445, I stumbled across NFSv4 ACLs with EA
| version 2 capability. This is only supported on filesystems
| that are created JFS2 with Extended Attribute Version 2 support
| which is part of the NFSv4 ACL support native to JFS2 in AIX 5.3.
|
| This is new in AIX 5.3 and I'd like to get to work implementing
| it as an addition to Linux and IRIX EA support. Are the any
| docs that I can get started on making this happen? I'm
| looking through  the EA code now, but any help would be
| greatly appreciated.
|
| I'd also be putting together documentation on how to implement
| this for AIX 5.3 admins.
Bill,
For technical issues like this, I'd take it to samba-technical
and CC jeremy directly.  He's the one you'll need to ping for
information.

cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
I never saved anything for the swim back. Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCNunVIR7qMdg1EfYRAvEYAJ9t0t8DefsmJK8cIz5mG9u2snhW1gCgt0gl
BZ49RJU+Ycf2YR2eKKIZlEg=
=GC9F
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] share outside domain

2005-03-15 Thread johon Doe

 You would use guest ok = yes 

this does not work..

$ smbclient -L webserver 
Password: 
Anonymous login successful
Domain=[INTRANET] OS=[Windows 5.1] Server=[Windows
2000 LAN Manager]

Sharename   Type  Comment
-     ---
Error returning browse list: NT_STATUS_ACCESS_DENIED
Anonymous login successful
Domain=[INTRANET] OS=[Windows 5.1] Server=[Windows
2000 LAN Manager]

Server   Comment
----

WorkgroupMaster
----


 or else give them a
 username and password in 
 the domain.  They still need to authenticate even if
 their computers are not 
 members of the domain.

For different kind of reasons I can't do it..




__ 
Do you Yahoo!? 
Make Yahoo! your home page 
http://www.yahoo.com/r/hs
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] New HP Printer Drivers wont upload (samba 3.0.11)

2005-03-15 Thread Luca Olivetti

Phil Burrow wrote:
Gerald (Jerry) Carter wrote:
[...]
Hi Jerry,
Here's the link to the Windows 2000/XP PCL6 driver for the LaserJet 4250TN:
ftp://ftp.hp.com/pub/softlib/software4/COL9171/lj-24660-2/lj4250_4350pcl6win2kxps2003-en.exe 
If you can take a look at this one too:
ftp://ftp.hp.com/pub/softlib/software3/COL5001/dj-17234-3/5800_esm_win2k_xpinfu.exe
Under samba 2.2.8 didn't upload at all, under 3.0.10 I could install it 
fine but then it would bomb windows explorer right after installation 
and afterwards it would cause a windows exception as soon as I tried to 
access the printer properties (so making uninstallation impossible 
through windows, had to use rpcclient), a rough translation of the error 
message is The function at 0x604b132 caused a protection fault 
(excepion code 0xc005).
I tried with 3.0.11 and it doesn't install (though it still bombs 
windows if I select the older instance of the driver still on the server).
In the meantime I solved the problem by using the cups driver (adobe 
actually, since the cups one bombs out due to some long property name).

Bye
--
Luca Olivetti
Wetron Automatización S.A. http://www.wetron.es/
Tel. +34 93 5883004  Fax +34 93 5883007
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Problems with MS Office (Excel/Word) Samba 3.0.11, (moved to testing 3.0.12-RC1) attn Jerry

2005-03-15 Thread Nathan Vidican

We are running with a little over 100GB of office data, and about 200GB misc
other data shared to approximately 50 users using samba across two servers
acting as PDC and BDC to Windows 2000  XP Pro clients. Also using roaming
profiles and ldap backend inclusive of nss_ldap and pam_ldap for the unix
side - works well except for the more recent and horribly crippling MS
Office bug.

Tried disabling/veto'ing oplocks, but to no avail, so we've opted to try
3.0.12-rc1 on one of the two servers; all is well at this point thus far
(been running about 10mins), figured I'd drop the list a line; Just a note -
we've been having huge problems with MS Excel and Word running on samba
3.0.11, moved over to 3.0.12-rc1, (even though this is a production
environment).

... Will advise and let you know if the problems persist, or if we find any
new ones.



--
Nathan Vidican
[EMAIL PROTECTED]
Windsor Match Plate  Tool Ltd.
http://www.wmplt.com/


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Clock skew too great | joining ADS

2005-03-15 Thread brennion

I've upgraded my pdc to 2000 (compatibility mode with nt), and I want the
linux server to communicate directly with ADS...

I've changed my smb.conf, and try 
net ads join -UAdministrator

But I get the following error : 


borealis:/var/lib/samba# net ads join -UAdministrator
Administrator's password:
[2005/03/15 15:47:20, 0] libads/ldap.c:ads_add_machine_acct(1368)
  ads_add_machine_acct: Host account for borealis already exists - modifying
old account
Using short domain name -- NT1
[2005/03/15 15:48:39, 0] libads/kerberos.c:get_service_ticket(335)
  get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@NT1.LOCAL
failed: Clock skew too great
Speicherzugriffsfehler

If I try directly with krb : 
borealis:/var/lib/samba# kinit [EMAIL PROTECTED]
Password for [EMAIL PROTECTED]:
kinit(v5): Clock skew too great while getting initial credentials
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] SMB signing broken? 3.0.7 - 3.0.8

2005-03-15 Thread Tim

Hi all.

I originally suspected this problem was with netbios (which I have
disabled by default) and Jerry has helped me out a bit with but I've
been doing some more digging and I think the problem lies back further
than I expected.

I was trying to upgrade from 3.0.7 to 3.0.11 so I've recompiled all
versions back from 3.0.11 and the problem first occured in 3.0.8.  The
issue is with winbind, and the error I'm getting is
failed tcon_X with NT_STATUS_ACCESS_DENIED:

=== 3.0.7:  /usr/bin/winbind -i -d3 ===
...
Ticket in ccache[MEMORY:winbind_ccache] expiration Wed, 16 Mar 2005 00:41:08 GMT
ads: trusted_domains
Connected to LDAP server 10.140.72.17
got ldap server name [EMAIL PROTECTED], using bind path:
dc=DBG,dc=ADS,dc=DB,dc=COM
IPC$ connections done anonymously
Connecting to host=LONESWDBP4
Connecting to 10.140.72.17 at port 445
Doing spnego session setup (blob length=114)
got OID=1 2 840 48018 1 2 2
got OID=1 2 840 113554 1 2 2
got OID=1 2 840 113554 1 2 2 3
got OID=1 3 6 1 4 1 311 2 2 10
got [EMAIL PROTECTED]
Doing kerberos session setup
Ticket in ccache[MEMORY:cliconnect] expiration Wed, 16 Mar 2005 00:41:18 GMT
add_trusted_domain: TRAN is an NT4  domain
Added domain TRAN tran.stt S-1-5-21-343818398-606747145-725345543
add_trusted_domain: ADS is an NT4  domain
Added domain ADS ADS.DB.COM S-1-5-21-1960408961-1935655697-1801674531
etc

=== 3.0.8:  /usr/bin/winbind -i -d3 ===
...
Ticket in ccache[MEMORY:winbind_ccache] expiration Wed, 16 Mar 2005 00:43:41 GMT
ads: trusted_domains
Connected to LDAP server 10.140.72.17
got ldap server name [EMAIL PROTECTED], using bind path:
dc=DBG,dc=ADS,dc=DB,dc=COM
IPC$ connections done anonymously
Connecting to host=LONESWDBP4
Connecting to 10.140.72.17 at port 445
Doing spnego session setup (blob length=114)
got OID=1 2 840 48018 1 2 2
got OID=1 2 840 113554 1 2 2
got OID=1 2 840 113554 1 2 2 3
got OID=1 3 6 1 4 1 311 2 2 10
got [EMAIL PROTECTED]
Doing kerberos session setup
Ticket in ccache[MEMORY:cliconnect] expiration Wed, 16 Mar 2005 00:43:51 GMT
failed tcon_X with NT_STATUS_ACCESS_DENIED
...


Now, if I turn on more debugging, you see this:

=== 3.0.7:  /usr/bin/winbind -i -d10 ===
...
Got KRB5 session key of length 16
SMB signing enabled!
cli_simple_set_signing: user_session_key
[000] C1 6D 83 5F 6A 94 6B 73  57 46 0B CB 16 03 CB B1  .m._j.ks WF..
cli_simple_set_signing: NULL response_data
simple_packet_signature: sequence number 0
client_sign_outgoing_message: sent SMB signature of
[000] CD 85 93 7F A1 A8 34 22   ..4
store_sequence_for_reply: stored seq = 1 mid = 2
...
client_check_incoming_message: seq 1: got good SMB signature of
[000] 9D E9 1B CC 6F 48 42 92   oHB.
...

=== 3.0.8:  /usr/bin/winbind -i -d10 ===
...
Got KRB5 session key of length 8
SMB signing enabled!
cli_simple_set_signing: user_session_key
[000] C8 5E D6 1A A1 46 10 BA   .^...F..
cli_simple_set_signing: NULL response_data
simple_packet_signature: sequence number 0
client_sign_outgoing_message: sent SMB signature of
[000] 84 84 78 B3 60 4A 05 5B   ..x.`J.[
store_sequence_for_reply: stored seq = 1 mid = 2
...
client_check_incoming_message: BAD SIG: wanted SMB signature of
[000] D7 08 07 13 97 AC E9 8B   
client_check_incoming_message: BAD SIG: got SMB signature of
[000] EF 85 1C D4 6A 1D AC 9D   j...



So... and please correct me if I'm wrong, but something changed
between 3.0.7 and 3.0.8 to do with SMB signing.  The signature
size seems to have changed, but I don't know enough about the
SMB protocol to work out what this would mean.

I also notice this in the Changelog:

  o Fixes for kerberos interoperability with Windows 200x
domains when using DES keys.

...and a few other people have encountered this issue:

http://marc.theaimsgroup.com/?l=sambam=110217288924619w=2
http://marc.theaimsgroup.com/?l=sambam=110128503324928w=2
http://marc.theaimsgroup.com/?l=sambam=109171118423701w=2

but I don't see any resolutions in the mailing list.  Any
help would be appreciated, I'd really like to upgrade because of
the security vulnerabilities.

Thanks,

Tim.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Can XP Home really Samba ?

2005-03-15 Thread Prakash Velayutham

On Mar 15, 2005, at 9:41 AM, Venkata Avasarala wrote:
Hi,
I know that XP Home edition is supposed to work with Samba.
However,  my experiences over the past 2 weeks have left me with a
real doubt. All I want is a simple share from my Linux box to the XP
Home machine with no password. I have set guest ok = yes, enabled
cleartext password in both Samba and XP. I have a common account in
both XP and Linux and nothing seems to work.
Initially XP client would start using port 80 for communicating with
the server after some kind  folks suggsted in this list, I disabled
the XP webclient service and now atleast XP client tries to use the
netbios port when I do a net use from the XP command shell.
I have the following problems
1)XP Home will not show the Linux server in Network Neighbourhood (if
it is Local Master browser) and shows nothing if it losses election.
2)Since I know the IP address of the Samba server doing a net use with
the IP address like net use b: \\192.168.0.4\Apache results in a
System error 1 on the XP box.
3)I see lot of UDP inquiry messages and responses and I see an
incoming reuest handled by NMB and it response in the log. However, I
do not see any activity in the SMB log.
If XP Home cannot really interoperate with Samba then I will just drop
this and use SFTP :( .
Thanks,
-Venkata.
What are your wins server entries in the XP machine when you do 
ipconfig /all?

Prakash
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Clock skew too great | joining ADS


If I try directly with krb : 
borealis:/var/lib/samba# kinit [EMAIL PROTECTED]
Password for [EMAIL PROTECTED]:
kinit(v5): Clock skew too great while getting initial credentials
 

Have you tried to sync your clocks with a central source?  Do you run 
ntp?  Accurate timekeeping becomes very important with all the various 
protocols running around out there.  Dynamic DNS likes it, Kerberos, 
I've run into atleast a couple extra ones too that I can't remember.

--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems with MS Office (Excel/Word) Samba 3.0.11, (moved to testing 3.0.12-RC1) attn Jerry

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Nathan Vidican wrote:
| We are running with a little over 100GB of office data,
| and about 200GB misc other data shared to approximately 50
| users using samba across two servers acting as PDC and BDC
| to Windows 2000  XP Pro clients. Also using roaming profiles
| and ldap backend inclusive of nss_ldap and pam_ldap for the unix
| side - works well except for the more recent and horribly
| crippling MS Office bug.
|
| Tried disabling/veto'ing oplocks, but to no avail, so we've
| opted to try 3.0.12-rc1 on one of the two servers; all is
| well at this point thus far (been running about 10mins),
| figured I'd drop the list a line; Just a note - we've been
| having huge problems with MS Excel and Word running on samba
| 3.0.11, moved over to 3.0.12-rc1, (even though this is
| a production environment).
|
| ... Will advise and let you know if the problems persist, or
| if we find any new ones.
Thanks for the feedback, Nathan.

cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
I never saved anything for the swim back. Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCNvoqIR7qMdg1EfYRAt1NAJ42v4VpTsC9TCZFfn2MliPNMqK77QCfYGFT
jIQRE/jqO/BwAYcLIjC2Kfg=
=4+Zy
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] running two servers with one install

2005-03-15 Thread Rainer Bendig aka Ny

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi there,

i want to run two samba servers on the same machine. How can i do
this? Is there any example.conf file for such a thing? Is it possible
to set them up in one config file? 
Samba is there in version 3.0.10
- -- 
- -
Rainer Bendig aka Ny |  http://www.moins.de  | GnuPG-Key 0x41D44F10
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.9.16-cvs (GNU/Linux)

iD8DBQFCNvttWmkXC0TkjEgRAsSLAKCMg80gEAoHS+VwgcBns4ZrwgADggCeK7CD
bI0KDXATEZN4kAMfuCUXfRs=
=u666
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Samba + PDC + LDAP (Sun One DS 5.2, Messaging and Identity)

2005-03-15 Thread Michal Kurowski

Hafiz Abdul Rehman [EMAIL PROTECTED] wrote:
 
 I am planing to install Samba as PDC for Windows XP Machines and LDAP
 (Sun ONE DS 5.2 + Messaging + Identity ) as backend sam
 if some one have already setup this kind of environment and can write
 down the steps in which order i have to install and configure products
 what would be great

I'd suggest thinking about the design a bit more - the basic question
is: what is the purpose of Sun Messaging and Identity Servers ?

The latter might be highly useful (at least judging from specs) when
integrating with legacy MS Active Directory but I can't think of any
use of the former ;-) 

The Directory Server is a very solid and feature rich Ldap
implementation though. What you will need to tweak:

- uploading the samba schema 
- configuring the TLS for secure communication with samba

If you're going to deploy samba on Solaris I'd suggest compiling with
openldap libraries. But do not switch the whole solaris ldap client
side to it. The native tools are very mature and can be configured
easily with DS in a secure way (because of proxyagent).

Let us know if you have any specific problem.

Cheers,
 
-- 
Michal Kurowski
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] corruption in the locking tdb, samba panics [SOLVED]

2005-03-15 Thread Luca Olivetti

Luca Olivetti wrote:
Hello,
last friday I switched my users from an old server running 2.2.12 to a 
new one running 3.0.10 (that I've been testing myself and with 
smbtorture). After a while I had to switch back to the old server 
because some users were having serious problems. This is one of the logs 
(the others are very similar):

[2005/03/04 12:25:05, 0] tdb/tdbutil.c:tdb_log(725)
  tdb(/var/cache/samba/locking.tdb): tdb_lock failed on list 80 ltype=1 
(Resource deadlock avoided)
[2005/03/04 12:25:05, 0] smbd/oplock.c:remove_oplock(272)
  remove_oplock: failed to lock share entry for file eplan4/N/0408/Se.gif
[2005/03/04 12:25:05, 0] smbd/reply.c:reply_lockingX(4559)
  reply_lockingX: error in removing oplock on file eplan4/N/0408/Se.gif
[2005/03/04 12:25:05, 0] tdb/tdbutil.c:tdb_log(725)
  tdb(/var/cache/samba/locking.tdb): tdb_lock failed on list 80 ltype=1 
(Resource deadlock avoided)
[2005/03/04 12:25:05, 0] tdb/tdbutil.c:tdb_log(725)
  tdb(/var/cache/samba/locking.tdb): tdb_lock failed on list 80 ltype=0 
(Resource deadlock avoided)
[2005/03/04 12:25:05, 0] tdb/tdbutil.c:tdb_log(725)
  tdb(/var/cache/samba/locking.tdb): tdb_unlock: count is 0
[2005/03/04 12:25:05, 0] smbd/oplock.c:request_oplock_break(977)
  request_oplock_break: PANIC : breaking our own oplock requested for 
dev = fe00, inode = 745870013, file_id = 1471 a
nd no fsp found !
[2005/03/04 12:25:05, 0] lib/util.c:smb_panic2(1482)
  PANIC: request_oplock_break: no fsp found for our own oplock

[2005/03/04 12:25:05, 0] lib/util.c:smb_panic2(1490)
  BACKTRACE: 14 stack frames:
   #0 smbd(smb_panic2+0x1b6) [0x81cdf1a]
   #1 smbd(smb_panic+0x19) [0x81cdd62]
   #2 smbd(request_oplock_break+0x1d5) [0x81fca07]
   #3 smbd [0x80bf613]
   #4 smbd(open_file_shared1+0x801) [0x80c08ce]
   #5 smbd(open_file_shared+0x51) [0x80c00cb]
   #6 smbd(reply_open_and_X+0x2bc) [0x80a14c4]
   #7 smbd [0x80d04c4]
   #8 smbd [0x80d0574]
   #9 smbd(process_smb+0x1eb) [0x80d08b9]
   #10 smbd(smbd_process+0x170) [0x80d149c]
   #11 smbd(main+0x7d4) [0x8240f8c]
   #12 /lib/tls/libc.so.6(__libc_start_main+0xed) [0x402ec95d]
   #13 smbd(fsetxattr+0x31) [0x8078aa1]
I've looked at the changelog for 3.0.11 but I see nothing there 
regarding this problem. I also searched google and I found something 
similar here:

http://tinyurl.com/3nhdj
As a followup, I have switched to the new server the problematic share 
only, and it has been working no problem for the last two days.
I don't know what cured my issues: I upgraded samba from 3.0.10 to 
3.0.11, changed kernel from 2.4.25-8mdk to 2.6.3-25mdk (now hp proliant 
diagnostics are working even under 2.6, but I don't remember any hp 
advisory telling that), upgraded to smbldap-tools 0.8.7 and re-imported 
all users' credentials in ldap (though I doubt that these two steps had 
anything to do with the solution of my problems).
I'm keeping my fingers crossed but it seems everything is working as 
expected.

Bye
--
Luca Olivetti
Wetron Automatización S.A. http://www.wetron.es/
Tel. +34 93 5883004  Fax +34 93 5883007
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Can XP Home really Samba ?

2005-03-15 Thread Venkata Avasarala

Hi,
Do I need a WINS server in a Workgroup ? I was going through the
Samba Reference and it says that the same Samba installation cannot
funtion as a WINS server. However, if XP home can work as a client and
WINS server I will try it today .
Moreoevr, I am giving the IP address of the server on which the share
is present. I was under the impression that WINS is just for name to
IP resolution.
Thanks,
-Venkata.


On Tue, 15 Mar 2005 10:00:22 -0500, Prakash Velayutham
[EMAIL PROTECTED] wrote:
 On Mar 15, 2005, at 9:41 AM, Venkata Avasarala wrote:
 
  Hi,
  I know that XP Home edition is supposed to work with Samba.
  However,  my experiences over the past 2 weeks have left me with a
  real doubt. All I want is a simple share from my Linux box to the XP
  Home machine with no password. I have set guest ok = yes, enabled
  cleartext password in both Samba and XP. I have a common account in
  both XP and Linux and nothing seems to work.
 
  Initially XP client would start using port 80 for communicating with
  the server after some kind  folks suggsted in this list, I disabled
  the XP webclient service and now atleast XP client tries to use the
  netbios port when I do a net use from the XP command shell.
  I have the following problems
  1)XP Home will not show the Linux server in Network Neighbourhood (if
  it is Local Master browser) and shows nothing if it losses election.
  2)Since I know the IP address of the Samba server doing a net use with
  the IP address like net use b: \\192.168.0.4\Apache results in a
  System error 1 on the XP box.
  3)I see lot of UDP inquiry messages and responses and I see an
  incoming reuest handled by NMB and it response in the log. However, I
  do not see any activity in the SMB log.
  If XP Home cannot really interoperate with Samba then I will just drop
  this and use SFTP :( .
  Thanks,
  -Venkata.
 
 What are your wins server entries in the XP machine when you do
 ipconfig /all?
 
 Prakash
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Printer (PDF) Problem

2005-03-15 Thread Nick Gushlow

Hi guys,

I've got a PDF printer setup on one of my Samba boxes that has been
running fine for months; however I'm now having problems with it despite
that fact that I've made no changes to Samba and performed no upgrades.

I'm thinking that the problem might be to do with a client PC sending a
large/corrupt stream to the printer.

Problem Symptoms:
- Samba process showing 50% CPU usage constantly
- Windows clients attempting to print report printer not responding
(after a long time) or crash

What I've tried:
- Renaming printer - works as normal
- Removing corrupt spool / temp files - none found
in /var/spool/samba /tmp /tmp/samba
- Look for possibly offending client PC in logs - none found (could be
I'm not looking for the right thing).

Anyone have any ideas what might be wrong and how to solve it?

TIA,

Nick.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Cannoi delete files: the mounted file system does not support extended attributes

2005-03-15 Thread Daniele Lucà

Hi Laurent

I have the same your problem with SAMBA 2.0.7 and HP-UX  with the 
The mounted file system does not support extended attributes. message.

Searching in internet I find that it is a fix of W2000 professional that 
resolve this problem.
I begin to have this problem probably after a W2000 upgrade of one of many 
security patches.

Now I haven't solved this problem and I have downloaded all available fixes 
from Windows update.

Have You find some solution for this problem?

Thanks 


Daniele
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: SWAT features

2005-03-15 Thread Deryck Hodge

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
| Deryck Hodge [EMAIL PROTECTED] writes:
|
|
|My question then -- what do people use SWAT for?  Is it primarily a
|web-based front end for editing smb.conf?  An entry point for
|documentation?  A gui for setting up Samba without knowing much about
|smb.conf?
|
Thanks to all for the comments.  Most replied off list and the comments
were in line with what I expected -- preserve comments, beef up the
wizard functionality.  I really just wanted to make sure that my
understanding of how SWAT is used -- which affects my choice of style,
navigation look, etc. -- was in line with others here.  That looks to be
the case.
I should have something checked into trunk within the week and will look
for further feedback then.  Cheers,
deryck
- --
Deryck Hodgehttp://www.devurandom.org/
Auburn University Libraries http://www.lib.auburn.edu/
Samba Team  http://www.samba.org/
Have you ever stood and stared at it? Marveled at its beauty? Its genius?
Billions of people just living out their lives, oblivious.
- --from _The Matrix_(1999)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCNwYo4glRK0DaE8gRAirkAKDCd/C/ti6cxIyN52Z//+8aGfnLWACggozr
DuJtFrDXSsAV/bzeTZyCWOA=
=Z7sh
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] NEW Mcafee problem, samba share

2005-03-15 Thread Mark Nehemiah

After our mcafee ASAP product updated last night, users can not access
samba shares from  some applications.  I believe this to be mcafee
problem, and am on hold  with tech-supp right now.

Here's the problem as I know so far.
Windows Explorer works fine all drives.
SolidWorks cannot access the root of any samba drive.
FrontPage cannot access the root of any samba drive.

Uninstall mcafee, problems go away.

cheers,
   Mark

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba and LDAP

On Tuesday 15 March 2005 03:14, Gerald Cenir wrote:
 Hello!
 What would be the main advantage of using SAMBA + LDAP? Will a network with
 less than 150 Windows users benefit from it?
   Thanks!

The correct answer to that question is - it all depends.

Suggest you read the Samba documentation. The technical nuts and bolts are 
explained in the Samba-HOWTO-Collection and example deployments for a range 
of typical networks is given in the Samba-Guide.

Both may be obtained from: http://www.samba.org/samba/docs

They are on line in html as well as in PDF format.

- John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Signal 11 on activity from XP SP2 clients (Samba 2.2.8a on SuSE 9.0)

2005-03-15 Thread Eric Finlayson

I've got two brand-new, fully-patched XP SP2 clients who are suffering a
mysterious malaise.  These two machines will cause a smbd panic when
printing or accessing files on a somewhat random basis.  

Now, the puzzling thing is that three other XP SP2 clients, including one of
the exact same configuration, have no issues whatsoever.  I've basically
ruled out hardware failure on the server, since it's these two clients only.

I'm at a loss... any ideas?

Here's one such instance in the syslog:
Mar 10 10:22:51 riffraff smbd[25378]: [2005/03/10 10:22:51, 0]
lib/fault.c:fault_report(38)
Mar 10 10:22:51 riffraff smbd[25378]:
===
Mar 10 10:22:51 riffraff smbd[25378]: [2005/03/10 10:22:51, 0]
lib/fault.c:fault_report(39)
Mar 10 10:22:51 riffraff smbd[25378]:   INTERNAL ERROR: Signal 11 in pid
25378 (2.2.8a-SuSE)
Mar 10 10:22:51 riffraff smbd[25378]:   Please read the file BUGS.txt in the
distribution
Mar 10 10:22:51 riffraff smbd[25378]: [2005/03/10 10:22:51, 0]
lib/fault.c:fault_report(41)
Mar 10 10:22:51 riffraff smbd[25378]:
===
Mar 10 10:22:51 riffraff smbd[25378]: [2005/03/10 10:22:51, 0]
lib/util.c:smb_panic(1135)
Mar 10 10:22:51 riffraff smbd[25378]:   PANIC: internal error
Mar 10 10:22:51 riffraff smbd[25378]:

Attached is a snippet of a log-level 3 smbd.log for this timeframe.  There's
too much text to post inline, but I think the error occurs right here:
[2005/03/15 10:52:00, 3] rpc_server/srv_pipe.c:api_rpcTNP(1408)
  api_rpcTNP: pipe 30607 rpc command: SPOOLSS_ENDDOCPRINTER
[2005/03/15 10:52:00, 2]
rpc_server/srv_spoolss_nt.c:find_printer_index_by_hnd(263)
  find_printer_index_by_hnd: Printer handle not found:
_spoolss_enddocprinter_internal: Invalid handle (OTHER:10056:11055)

(Pardon the two messages; I think these are two separate issues, and so want
to track them separately.)

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Oplocks for veto'd files (Samba 2.2.8a on SuSE 9.0)

2005-03-15 Thread Eric Finlayson

In my smb.conf file, I've got the following section:

[homes]
comment = Home Directories
valid users = %S
guest ok = no
read only = No
create mask = 0640
directory mask = 0750
browseable = No
veto oplock files = /*.mdb/*.MDB/*.pst/*.PST/


And yet, in the syslog, I'm still getting these...

Mar 10 10:22:34 riffraff smbd[25404]: [2005/03/10 10:22:34, 0]
smbd/oplock.c:oplock_break(797)
Mar 10 10:22:34 riffraff smbd[25404]:   oplock_break: receive_smb timed out
after 30 seconds.
Mar 10 10:22:34 riffraff smbd[25404]:   oplock_break failed for file
mail/outlook.pst (dev = 3a02, inode = 112407, file_id = 3).
Mar 10 10:22:34 riffraff smbd[25404]: [2005/03/10 10:22:34, 0]
smbd/oplock.c:oplock_break(869)
Mar 10 10:22:34 riffraff smbd[25404]:   oplock_break: client failure in
oplock break in file mail/outlook.pst

Any idea why the oplocks are still being performed?

(Pardon the two messages; I think these are two separate issues, and so want
to track them separately.)

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Machine Account default group.

2005-03-15 Thread biff

Do machine accounts have to have a group of their own ?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Can XP Home really Samba ?

2005-03-15 Thread Rainer Bendig aka Ny

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Moin Moin Venkata Avasarala, *,

Venkata Avasarala wrote on Mar 15, 2005 at 09:41AM -0500:
 2)Since I know the IP address of the Samba server doing a net use with
 the IP address like net use b: \\192.168.0.4\Apache results in a
 System error 1 on the XP box.
Hmmm on my winxp workstation in an vmware box it works perfectly.
Everything, mount by net use, browsing etc.

Are you sure that your xp - own firewall allows windows shares ?
- -- 
- -
Rainer Bendig aka Ny |  http://www.moins.de  | GnuPG-Key 0x41D44F10
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.9.16-cvs (GNU/Linux)

iD8DBQFCNyHuWmkXC0TkjEgRAoXxAJ46ZuR/LFREPyh+P1+8Onu4e25EmwCfQ8lg
NNjfUam/64nOg8by7N3jABs=
=wE16
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Root can't login to domain workstations

On Tue, 2005-03-15 at 09:12, Robin Rosenberg wrote:

 tisdag 15 mars 2005 01:10 skrev Bruno Quintas:
  Hi all, having this problem... after joining a machine to domain, users
  login ok, but not root.
 
  Any first toughts?
 
 Yes. root isn't in samba's user database, not a sambaSamAccount (ldap backend)
 or no smbpassword set.
 
 -- robin


I'm pretty sure i added root to samba database, but i tried it again in
other machine , first thing i did was smbpasswd -a root , but still get
the same strange error:
The system cannot log you on due to the following error :
 A device attached to the system is not functioning.



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba and Preallocated Files

On Tue, Mar 15, 2005 at 06:31:19AM -0500, [EMAIL PROTECTED] wrote:
 A question about capturing videos to a Samba  share... 
 
 When Apple's Final Cut Pro captures video files, it  pre-allocates file space 
 on the destination volume. 
 
 If you capture to a  local volume that's physically attached to a Macintosh, 
 or if you capture to a  network volume via AFP (Apple File Sharing Protocol), 
 you can see that Final Cut  instantly creates a file of the anticipated size 
 on the destination volume at  the moment just before capture begins (the 
 anticipated size is based on the  maximum capture time limit set by a user). 
 
 However, when capturing  videos to a Windows or Samba share, Final Cut 
 actually will write out dummy  data to a file, and then presumably it 
 replaces the 
 dummy data with real data  as the capture moves along. 
 
 Effectively, this makes Samba and Windows  shares useless for capturing Final 
 Cut videos. Because, for instance, if you  expect to capture a 20-minute DV 
 clip, it will take approximately 10 minutes to  create the pre-allocated file 
 before capturing even begins -- even when you are  connecting via a dedicated 
 Gigabit Ethernet link. The process seems to chug  along unbelievably slowly. 
 And if you were capturing uncompressed video (which  has about 5x the data 
 rate 
 of DV video) well, the wait would be interminable.  
 
 Can anybody on this list see a way to allow Final Cut to instantly  create 
 that pre allocated file space that it wants to create on a Samba share?  Are 
 their any Samba settings that could make this possible? It would be a coup  
 for 
 Samba! 
 
 BTW, Apple's IMovie doesn't go through this pre allocation  business. But, 
 alas, IMovie doesn't capture timecode data, so Final Cut users  who want to 
 work 
 with Samba shares can't simply switch to IMovie for capturing  their videos. 

That's a Mac client issue. We do support sparse pre-allocation on the
server side. I'd raise it as a bug with Apple.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] [SMB 3.0.10] File Locking Mechanism Windows - Unix

On Tue, Mar 15, 2005 at 07:54:38PM +0530, Asif, M wrote:
 Hello Jeremy,
 
 Thanks for your response.
 
 I tried the following
 
 On Windows side, an MFC application with the code given below access the
 file using the samba share.
 
 
   CString strFile =
 _T(180.144.1.11\\netmbase\\tmp\\test.txt);
   CStdioFile fValueFile;
   if (!fValueFile.Open( strFile ,CFile::modeWrite |
 CFile::shareExclusive) )
   {
   wcout_T(Open failed)endl;
   }
   else
   {
   //wcout_T(Open Success)endl;
   }
 
   fValueFile.WriteString( strt );
   getchar()
 
   fValueFile.Close();
 
 On UNIX side, code is something similar to this
 
   int fid =
 open(/export/home/scsd13/kiran/NetMBase/tmp/test.txt, O_RDWR|O_EXCL ) ;
   if( 0  fid )
   {
   perror(open),exit(1);
   }
 
   struct flock lockDetails ;
   lockDetails.l_start = 0 ;
   lockDetails.l_whence = SEEK_SET;
   lockDetails.l_len = 0 ;
   lockDetails.l_type = F_WRLCK ;
   int nErr = fcntl( fid, F_SETLK, lockDetails);
   if( 0  nErr )
   {
   perror(lock),exit(1);
   }
   getchar();
   close(fid);
   
 Now,
 
 1. Two instances of the executable runs on Windows side, open fails with
 sharing violation if the first one is not released ( blocked at getchar()
 call) , no problem.
 2. Same is the case with two instances of UNIX processes.
 3.The unix process locks the file and does not release it (blocked at
 getchar() ), and then the windows client is executed, WriteString throws an
 exceptoin giving error 33(locked by other process). No problem 4. Now if the
 Windows client opens the file first (blocked at getchar() ) and then the
 unix client is invoked, the fcntl call succeeds... 
 
 I tried lockf() instead of fcntl(), turned on mandatory locking etc, but
 with no success.
 
 Am I missing out some thing? Is there an easier way for getting this work?
 Basically, I want to ensure that there is no read happening when any one
 (from unix or windows) is writing into the file an vice versa.

What OS are you running on ? This code will work on Linux with kernel
oplocks, and if you turn off oplocks should work on other UNIXes.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems with MS Office (Excel/Word) Samba 3.0.11, (moved to testing 3.0.12-RC1) attn Jerry

On Tue, Mar 15, 2005 at 09:36:31AM -0500, Nathan Vidican wrote:
 We are running with a little over 100GB of office data, and about 200GB misc
 other data shared to approximately 50 users using samba across two servers
 acting as PDC and BDC to Windows 2000  XP Pro clients. Also using roaming
 profiles and ldap backend inclusive of nss_ldap and pam_ldap for the unix
 side - works well except for the more recent and horribly crippling MS
 Office bug.
 
 Tried disabling/veto'ing oplocks, but to no avail, so we've opted to try
 3.0.12-rc1 on one of the two servers; all is well at this point thus far
 (been running about 10mins), figured I'd drop the list a line; Just a note -
 we've been having huge problems with MS Excel and Word running on samba
 3.0.11, moved over to 3.0.12-rc1, (even though this is a production
 environment).

Please be exact on the version of MS-Office you're running with. I can't
reproduce the problems with a MS-Office 2003 - if you're running an earlier
version I'll need to go back a rev or so.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Can XP Home really Samba ?

2005-03-15 Thread Venkata Avasarala

Hi,
To get around the probelm of Firewall, I disabled firewall on the
WLAN interface and stopped the firewall service. I also stopped the
McAfee firewall service.
On a related issue, I am using ethereal to capture packets. It shows
packets from the Linux box. I want to know whether the packets
captured are before hitting the firewall or are they captured after
passing thourgh the firewall (I am assuming that they are before the
firewall, straight off the interface). I have flushed the iptables on
the Linux box just to be sure.
-Venkata.


On Tue, 15 Mar 2005 18:57:03 +0100, Rainer Bendig aka Ny [EMAIL PROTECTED] 
wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 Moin Moin Venkata Avasarala, *,
 
 Venkata Avasarala wrote on Mar 15, 2005 at 09:41AM -0500:
  2)Since I know the IP address of the Samba server doing a net use with
  the IP address like net use b: \\192.168.0.4\Apache results in a
  System error 1 on the XP box.
 Hmmm on my winxp workstation in an vmware box it works perfectly.
 Everything, mount by net use, browsing etc.
 
 Are you sure that your xp - own firewall allows windows shares ?
 - --
 - -
 Rainer Bendig aka Ny |  http://www.moins.de  | GnuPG-Key 0x41D44F10
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.9.16-cvs (GNU/Linux)
 
 iD8DBQFCNyHuWmkXC0TkjEgRAoXxAJ46ZuR/LFREPyh+P1+8Onu4e25EmwCfQ8lg
 NNjfUam/64nOg8by7N3jABs=
 =wE16
 -END PGP SIGNATURE-
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Root can't login to domain workstations

On Tue, 2005-03-15 at 17:58, Bruno Quintas wrote:

 On Tue, 2005-03-15 at 09:12, Robin Rosenberg wrote:
 
  tisdag 15 mars 2005 01:10 skrev Bruno Quintas:
   Hi all, having this problem... after joining a machine to domain, users
   login ok, but not root.
  
   Any first toughts?
  
  Yes. root isn't in samba's user database, not a sambaSamAccount (ldap 
  backend)
  or no smbpassword set.
  
  -- robin
 
 
 I'm pretty sure i added root to samba database, but i tried it again in
 other machine , first thing i did was smbpasswd -a root , but still get
 the same strange error:
 The system cannot log you on due to the following error :
  A device attached to the system is not functioning.

This is the error log from the machine where i was trying to log in:


  getpeername failed. Error was Transport endpoint is not connected
[2005/03/15 17:34:19, 0] lib/util_sock.c:write_socket_data(430)
  write_socket_data: write failure. Error = Connection reset by peer
[2005/03/15 17:34:19, 0] lib/util_sock.c:write_socket(455)
  write_socket: Error writing 4 bytes to socket 5: ERRNO = Connection reset by 
peer
[2005/03/15 17:34:19, 0] lib/util_sock.c:send_smb(647)
  Error writing 4 bytes to client. -1. (Connection reset by peer)
[2005/03/15 17:35:34, 0] lib/util_sock.c:get_peer_addr(1000)
  getpeername failed. Error was Transport endpoint is not connected
[2005/03/15 17:35:34, 0] lib/util_sock.c:write_socket_data(430)
  write_socket_data: write failure. Error = Connection reset by peer
[2005/03/15 17:35:34, 0] lib/util_sock.c:write_socket(455)
  write_socket: Error writing 4 bytes to socket 23: ERRNO = Connection reset by 
peer
[2005/03/15 17:35:34, 0] lib/util_sock.c:send_smb(647)
  Error writing 4 bytes to client. -1. (Connection reset by peer)
[2005/03/15 17:35:52, 1] rpc_server/srv_netlog_nt.c:_net_sam_logon(766)
  _net_sam_logon: user REMAXPRAIA\root has user sid 
S-1-5-21-1916702674-2089629516-631066457-1000
   but group sid S-1-5-21-378043444-2358454591-1624186084-512.
  The conflicting domain portions are not supported for NETLOGON calls
[2005/03/15 17:37:44, 0] lib/util_sock.c:get_peer_addr(1000)
  getpeername failed. Error was Transport endpoint is not connected
[2005/03/15 17:37:44, 0] lib/util_sock.c:write_socket_data(430)
  write_socket_data: write failure. Error = Connection reset by peer
[2005/03/15 17:37:44, 0] lib/util_sock.c:write_socket(455)
  write_socket: Error writing 4 bytes to socket 23: ERRNO = Connection reset by 
peer
[2005/03/15 17:37:44, 0] lib/util_sock.c:send_smb(647)
  Error writing 4 bytes to client. -1. (Connection reset by peer)
[2005/03/15 17:37:45, 1] rpc_server/srv_netlog_nt.c:_net_sam_logon(766)
  _net_sam_logon: user REMAXPRAIA\root has user sid 
S-1-5-21-1916702674-2089629516-631066457-1000
   but group sid S-1-5-21-378043444-2358454591-1624186084-512.
  The conflicting domain portions are not supported for NETLOGON calls
[2005/03/15 17:42:40, 1] rpc_server/srv_netlog_nt.c:_net_sam_logon(766)
  _net_sam_logon: user REMAXPRAIA\root has user sid 
S-1-5-21-1916702674-2089629516-631066457-1000
   but group sid S-1-5-21-378043444-2358454591-1624186084-512.
  The conflicting domain portions are not supported for NETLOGON calls

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] SMB signing broken? 3.0.7 - 3.0.8

On Tue, Mar 15, 2005 at 03:00:17PM +, Tim wrote:
 Hi all.
 
 I originally suspected this problem was with netbios (which I have
 disabled by default) and Jerry has helped me out a bit with but I've
 been doing some more digging and I think the problem lies back further
 than I expected.
 
 I was trying to upgrade from 3.0.7 to 3.0.11 so I've recompiled all
 versions back from 3.0.11 and the problem first occured in 3.0.8.  The
 issue is with winbind, and the error I'm getting is
 failed tcon_X with NT_STATUS_ACCESS_DENIED:
 
 === 3.0.8:  /usr/bin/winbind -i -d10 ===
 ...
 Got KRB5 session key of length 8
 SMB signing enabled!
 cli_simple_set_signing: user_session_key
 [000] C8 5E D6 1A A1 46 10 BA   .^...F..
 cli_simple_set_signing: NULL response_data
 simple_packet_signature: sequence number 0
 client_sign_outgoing_message: sent SMB signature of
 [000] 84 84 78 B3 60 4A 05 5B   ..x.`J.[
 store_sequence_for_reply: stored seq = 1 mid = 2
 ...
 client_check_incoming_message: BAD SIG: wanted SMB signature of
 [000] D7 08 07 13 97 AC E9 8B   
 client_check_incoming_message: BAD SIG: got SMB signature of
 [000] EF 85 1C D4 6A 1D AC 9D   j...
 
 
 
 So... and please correct me if I'm wrong, but something changed
 between 3.0.7 and 3.0.8 to do with SMB signing.  The signature
 size seems to have changed, but I don't know enough about the
 SMB protocol to work out what this would mean.
 
 I also notice this in the Changelog:
 
   o Fixes for kerberos interoperability with Windows 200x
 domains when using DES keys.

Can you try this patch. It reverts that change.

Jeremy.
Index: libsmb/smb_signing.c
===
--- libsmb/smb_signing.c(revision 5789)
+++ libsmb/smb_signing.c(working copy)
@@ -277,14 +277,17 @@
MD5Init(md5_ctx);
 
/* intialise with the key */
+   MD5Update(md5_ctx, data-mac_key.data, data-mac_key.length); 
+#if 0
+   /* JRA - apparently this is incorrect. */
/* NB. When making and verifying SMB signatures, Windows apparently
zero-pads the key to 128 bits if it isn't long enough.
From Nalin Dahyabhai [EMAIL PROTECTED] */
-   MD5Update(md5_ctx, data-mac_key.data, data-mac_key.length); 
if (data-mac_key.length  sizeof(key_buf)) {
memset(key_buf, 0, sizeof(key_buf));
MD5Update(md5_ctx, key_buf, sizeof(key_buf) - 
data-mac_key.length);
}
+#endif
 
/* copy in the first bit of the SMB header */
MD5Update(md5_ctx, buf + 4, smb_ss_field - 4);
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] trouble with groupmap

2005-03-15 Thread John Davis

Samba Version 3.0.9-1.3E.2 installed on Vanilla installation of CentOS
Users who log in are unable to install printers via a script like they 
do in all of our other domains. The drivers have been installed properly 
an rpcclient enumdrivers confirms this. When the user logs in, they are 
assigned guest privileges, and I believe that this is what's preventing 
the print install.

A quick tail of the log shows this:
--- begin ---
[2005/03/15 10:12:21, 1] rpc_server/srv_util.c:get_domain_user_groups(298)
  get_domain_user_groups: primary gid of user [johnd] is not a Domain 
group !
  get_domain_user_groups: You should fix it, NT doesn't like that
[2005/03/15 10:12:21, 0] rpc_server/srv_util.c:get_alias_user_groups(206)
  get_alias_user_groups: gid of user johnd doesn't exist. Check your 
/etc/passwd and /etc/group files
[2005/03/15 10:12:21, 1] rpc_server/srv_util.c:get_domain_user_groups(298)
  get_domain_user_groups: primary gid of user [johnd] is not a Domain 
group !
  get_domain_user_groups: You should fix it, NT doesn't like that
[2005/03/15 10:12:21, 0] rpc_server/srv_util.c:get_alias_user_groups(206)
  get_alias_user_groups: gid of user johnd doesn't exist. Check your 
/etc/passwd and /etc/group files
[2005/03/15 10:12:21, 0] rpc_server/srv_util.c:get_alias_user_groups(206)
  get_alias_user_groups: gid of user johnd doesn't exist. Check your 
/etc/passwd and /etc/group files
[2005/03/15 10:12:24, 1] smbd/service.c:close_cnum(836)
--- end ---

I have already added the appropriate groupmaps:
--- begin ---
System Operators (S-1-5-32-549) - -1
Domain Users (S-1-5-21-3676430718-1223249177-2812214006-513) - -1
Replicators (S-1-5-32-552) - -1
Guests (S-1-5-32-546) - -1
Domain Admins (S-1-5-21-3676430718-1223249177-2812214006-2025) - domadm
Power Users (S-1-5-32-547) - -1
Print Operators (S-1-5-32-550) - -1
Domain Admins (S-1-5-21-3676430718-1223249177-2812214006-512) - -1
Administrators (S-1-5-32-544) - -1
Domain Guests (S-1-5-21-3676430718-1223249177-2812214006-514) - -1
Account Operators (S-1-5-32-548) - -1
Domain Users (S-1-5-21-3676430718-1223249177-2812214006-2027) - domuser
Backup Operators (S-1-5-32-551) - -1
Users (S-1-5-32-545) - -1
Domain Guests (S-1-5-21-3676430718-1223249177-2812214006-2029) - domguest
--- end ---
 What I don't understand is why the Domain Admins RID changes when I 
point it to the the unix groups. The UNIX group is set up correctly, and 
the user is a member of domadm and domuser. In the documentation it 
appears to keep the same RID (512, 513, and 514 respectively in this 
case) when mapped to a UNIX group. Mine does not...This is probably why 
the user is being treated as a guest.

Ok, sorry for the long post. How can I fix this problem?
--
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] NEW Mcafee problem, samba share

On Tue, Mar 15, 2005 at 10:04:40AM -0600, Mark Nehemiah wrote:
 After our mcafee ASAP product updated last night, users can not access
 samba shares from  some applications.  I believe this to be mcafee
 problem, and am on hold  with tech-supp right now.
 
 Here's the problem as I know so far.
 Windows Explorer works fine all drives.
 SolidWorks cannot access the root of any samba drive.
 FrontPage cannot access the root of any samba drive.
 
 Uninstall mcafee, problems go away.

What version of Samba, what server, what applications. Trace please ?

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Root can't login to domain workstations

I'm pretty sure i added root to samba database, but i tried it again in
other machine , first thing i did was smbpasswd -a root , but still get
the same strange error:
The system cannot log you on due to the following error :
A device attached to the system is not functioning.

This is the error log from the machine where i was trying to log in:

I've chopped out all but this one line from your logs
[2005/03/15 17:35:52, 1] rpc_server/srv_netlog_nt.c:_net_sam_logon(766)
_net_sam_logon: user REMAXPRAIA\root has user sid S-1-5-21-1916702674-2089629516-631066457-1000
but group sid S-1-5-21-378043444-2358454591-1624186084-512.
The conflicting domain portions are not supported for NETLOGON calls

If you notice, there's a SID conflict going on here. It's specifically
complaining about the user and group sids, which I don't know if that's
enough to force a failed login, but it's a place to start looking.

Run a net getlocalsid on the server to find out what the server thinks
is it's SID should be, you need to make this number match out everyplace
that it is incorrect. Make sure your smbldap-tools set is configured
with the right value for a start. I think you can go in and replace the
portion of the SID on any users/groups that don't have the right data,
just by editing your LDAP data, but I'd entertain some confirmation of
that idea.

See if that doesn't help things.
--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect Fax:701-281-1322
URL: www.ae-solutions.com mailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Root can't login to domain workstations

On Tue, 2005-03-15 at 18:38, Paul Gienger wrote:

 I'm pretty sure i added root to samba database, but i tried it again in
 other machine , first thing i did was smbpasswd -a root , but still get
 the same strange error:
 The system cannot log you on due to the following error :
  A device attached to the system is not functioning.
 
 
 
 This is the error log from the machine where i was trying to log in:
   
 
 I've chopped out all but this one line from your logs
 
 [2005/03/15 17:35:52, 1] rpc_server/srv_netlog_nt.c:_net_sam_logon(766)
   _net_sam_logon: user REMAXPRAIA\root has user sid 
  S-1-5-21-1916702674-2089629516-631066457-1000
but group sid S-1-5-21-378043444-2358454591-1624186084-512.
   The conflicting domain portions are not supported for NETLOGON calls
   
 
 If you notice, there's a SID conflict going on here.  It's specifically 
 complaining about the user and group sids, which I don't know if that's 
 enough to force a failed login, but it's a place to start looking.
 
 Run a net getlocalsid on the server to find out what the server thinks 
 is it's SID should be, you need to make this number match out everyplace 
 that it is incorrect.  Make sure your smbldap-tools set is configured 
 with the right value for a start.  I think you can go in and replace the 
 portion of the SID on any users/groups that don't have the right data, 
 just by editing your LDAP data, but I'd entertain some confirmation of 
 that idea.
 
 See if that doesn't help things.


Thanks for the reply Paul, i'm not using LDAP.

net getlocalsid gives me:
SID for DOMAIN PRAIASERVER S-1-5-21-1916702674-2089629516-631066457

I don't no if this is correct but in my smb.conf i have:
workgroup=REMAXPRAIA
netbios name = PRAIASERVER

shouldn't the net getlocalsid retrieve the SID for DOMAIN REMAXPRAIA ??

tks,
Bruno

What should i do to correct this (really don't know what's next...)
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] NEW Mcafee problem, samba share

2005-03-15 Thread Mark Nehemiah

On Tue, March 15, 2005 12:30 pm, Jeremy Allison said:
 On Tue, Mar 15, 2005 at 10:04:40AM -0600, Mark Nehemiah wrote:
 After our mcafee ASAP product updated last night, users can not access
 samba shares from  some applications.  I believe this to be mcafee
 problem, and am on hold  with tech-supp right now.

 Here's the problem as I know so far.
 Windows Explorer works fine all drives.
 SolidWorks cannot access the root of any samba drive.
 FrontPage cannot access the root of any samba drive.

 Uninstall mcafee, problems go away.

 What version of Samba, what server, what applications. Trace please ?

 Jeremy.

Hi Jeremy,
  Samba on the server is out of date, v 3.0.5.  After
finally (1+hr on hold) getting to talk to mcafee
support,  seems it is about a buffer overflow
possiblility.   They told us to log on to their support
site, and check some option to not check for buffer
overflows and things should be fine.  Well their site
has been down all-day so far for maintenance.  (Makes me
really want to digress about ASAPand online
applications)!!  So we have a
locally installed anti-virus product that we cannot
change the options in.  (at least  until they are back
online.)  Really stinks, as this has affected about 35
users automagically overnight. Also got me thinking
now.  Is this a buffer overflow in samba or uSoft smb
client?  If it's in samba, why would mcafee software
care  I'm not running mcafee on the samba server?

Anyway, let me know if you do still want anything, seems like it's
probably not worth the time.

It is definately strange behaviour as it is only some applications that
get denied access.  You can browse anywhere with explorer with no
problems.

Mark



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba and WinXP + PDC

2005-03-15 Thread John Zakhar

John Zakhar wrote:
Craig White wrote:
On Mon, 2005-03-14 at 08:48 -0700, John H Terpstra wrote:
 

On Monday 14 March 2005 07:23, John Zakhar wrote:
  

Good Morning Folks.
I have a reoccurring error here when trying to join a Windows XP SP2
workstation to a Samba domain (accounts stored in LDAP) The error is
The user name cannot be found
Our LDAP directory looks like this
dc=na
~   o=ourdomain
~ ou=Groups
~ ou=Staff
~ ou=Computers

With this directory configuration the /etc/ldap.conf file needs to 
have:

nss_base_passwd: o=ourdomain,dc=na?sub
  

of course with this setup, samba would query the entire DSA for
everything which might not be the most effective use of LDAP.
Suggest that you consider...
dc=na
  o=ourdomain
 ou=Accounts
ou=Staff
ou=Computer
 ou=Groups
 ou=Hosts
 ou=etc...
and thus, padl stuff would be like...
nss_base_passwd:ou=Accounts,o=ourdomain,dc=na?sub
nss_base_shadow ou=Accounts,o=ourdomain,dc=na?sub
nss_base_group  ou=Groups,o=ourdomain,dc=na?one
nss_base_hosts ou=Hosts,o=ourdomain,dc=na?one
etc...
This way, you can set the search base for your MTA/IMAP/etc. to only
search the actual posix users...
ou=Staff,ou=Accounts,o=ourdomain,dc=na
and lastly - perhaps this was unintentional...
dc = domain component...typical usage would be dc=domain_name,dc=tld
o = organization  c = country...typical usage would be
o=organization,c=US
Craig
 

Craig,
I fully agree that with your suggestions on the LDAP directory 
structure, however I came to this company after it was already created 
and in use for quite some time. We have servers using this structure 
that I do not control via dedicated WAN links into us. It would be 
quite the project on my end as well as theirs to change these things..

I am very familiar with LDAP naming standards (oh which the former 
admin decided to not follow) but again it is just not with in my power 
at the present time to change the structure.

I did make the changes to /etc/ldap.conf as well as upgraded our 
nss_ldap library and samba to 3.0.11-1, I longer get the user cannot 
be found error, I am now stuck at permission denied when trying to 
join up a fully patched XP machine to the samba DC with the root 
account (which exista in LDAP).

This is actually sad as I use this same setup at home and it works 
great (minus the ridiculous LDAP directory structure). I have attached 
another trace from the machine trying to join up, I have about had it 
here, I have never had so much trouble before with samba and LDAP, it 
must be my luck I suppose =)
If anyone has any suggestions I am all ears (well eyes) and would much 
appreciated..


 00 smb_io_rpc_hdr hdr
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
  major : 05
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
 0001 minor : 00
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
 0002 pkt_type  : 02
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
 0003 flags : 03
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
 0004 pack_type0: 10
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
 0005 pack_type1: 00
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
 0006 pack_type2: 00
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
 0007 pack_type3: 00
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint16(613)
 0008 frag_len  : 0030
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint16(613)
 000a auth_len  : 
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint32(642)
 000c call_id   : 0007
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_debug(82)
 10 smb_io_rpc_hdr_resp resp
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint32(642)
 0010 alloc_hint: 0018
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint16(613)
 0014 context_id: 
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
 0016 cancel_ct : 00
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
 0017 reserved  : 00
[2005/03/15 13:16:53, 5] smbd/ipc.c:copy_trans_params_and_data(60)
 copy_trans_params_and_data: params[0..0] data[0..48]
[2005/03/15 13:16:53, 5] lib/util.c:show_msg(464)
[2005/03/15 13:16:53, 5] lib/util.c:show_msg(474)
 size=104
 smb_com=0x25
 smb_rcls=0
 smb_reh=0
 smb_err=0
 smb_flg=136
 smb_flg2=51201
 smb_tid=1
 smb_pid=904
 smb_uid=100
 smb_mid=2112
 smt_wct=10
 smb_vwv[ 0]=0 (0x0)
 smb_vwv[ 1]=   48 (0x30)
 smb_vwv[ 2]=0 (0x0)
 smb_vwv[ 3]=0 (0x0)
 smb_vwv[ 4]=   56 (0x38)
 smb_vwv[ 5]=0 (0x0)
 smb_vwv[ 6]=   48 (0x30)
 smb_vwv[ 7]=   56 (0x38)
 smb_vwv[ 8]=0 (0x0)
 smb_vwv[ 9]=0 (0x0)
 smb_bcc=49
[2005/03/15 13:16:53, 10] lib/util.c:dump_data(1990)
 [000] 00 05 00 02 03 10 00 00  00 30 00 00 00 07 00 00

RE: [Samba] W2K Server and Workstation can't join SMB/LDAP domain

2005-03-15 Thread Mccrory, Kevin B

I found the error. MS Windows Domain names can't have special characters in
them. I forgot about that little wrinkle. Changed Domain
mphq-cops.opmg.local to mphqcops.opmg.local and everything is working fine.

Kevin B. McCrory
Network Engineer - COPS
US Government Solutions
13600 EDS Drive
Mail stop:  A4S-B21
Herndon, VA 20171
* phone: +01-703-733-3255
* mailto:[EMAIL PROTECTED]
* AKO mailto:[EMAIL PROTECTED]



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Mccrory, Kevin B
Sent: Monday, March 14, 2005 6:02 PM
To: samba@lists.samba.org
Subject: [Samba] W2K Server and Workstation can't join SMB/LDAP domain


I have a SMB Domain set up with a PDC and BDC. The BDC is joined to the PDC
domain fine and shows up in the LDAP directory. 
I can add and delete users to the LDAP directory. I can use the user
accounts to access the Linux boxes. My W2K boxes see the domain and domain
servers when browsing. I can access the shared drive on the PDC.

I cannot join the Windows servers to the domain. I get an error that the
domain mphq-cops can't be located. I've run an nbtstat that shows the domain
name listed and its resolving to the correct IP address. In fact I turned
off the BDC for a while so that there would only be one DC in the mix in
case my config was wrong.  The W2K machines showed the domain with the PDC
IP address. When I turned the BDC back on nbstat showed the domain name
resolving to the BDC ip address which is what I would expect would happen.

I've tried adding the workstation accounts manually using smbldap-useradd -w
. The machine name correctly appears when I do a ldapsearch -x -b however
using getent group does not show the machine names in the Domain Computers
group. Is this normal?

I've checked and rechecked the Administrator account and made sure the
password is correct for the account. 

Not sure where to go from here... Some pointers on what to look at would be
greatly appreciated...

Thanks

Kevin B. McCrory
Network Engineer - COPS
US Government Solutions
13600 EDS Drive
Mail stop:  A4S-B21
Herndon, VA 20171
* phone: +01-703-733-3255
* mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 
* AKO mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] vampire question

2005-03-15 Thread Schlomo Schapiro

Hi John,

On Mon, 14 Mar 2005, John H Terpstra wrote:

 On Monday 14 March 2005 14:29, Schlomo Schapiro wrote:
  Hi,
 
  aren't posix account names supposed to be without blanks ? I would be most
  surprised if a machine account with a blank would work with Samba !
 
 Is this no blank specified in any standards? It seems someone has decided 
 that Linux should no longer permit blanks in user names and/or group names.

Just tried on my SuSE 9.0:
# useradd hello world
useradd: Invalid user name `hello world'.

So I assume that usernames with blanks are not a good idea - in the way 
that most Linux tools don't cope with them, even if maybe the NSS 
library calls do cope with them.

Doesn't Samba also use the platform useradd command to add accounts in 
most setups ?


  
rpc vampire -S ntserver -U Administrator%stacy182  --- everything
  
   seems
  
to run fine however I do get
could not create posix account info for 'machine name$'
 

-- 
Regards,
Schlomo
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Root can't login to domain workstations

I've chopped out all but this one line from your logs

[2005/03/15 17:35:52, 1] rpc_server/srv_netlog_nt.c:_net_sam_logon(766)
_net_sam_logon: user REMAXPRAIA\root has user sid S-1-5-21-1916702674-2089629516-631066457-1000
but group sid S-1-5-21-378043444-2358454591-1624186084-512.
The conflicting domain portions are not supported for NETLOGON calls

See if that doesn't help things.

Thanks for the reply Paul, i'm not using LDAP.

Ok, my bad, thought I had read you did.
net getlocalsid gives me:
SID for DOMAIN PRAIASERVER S-1-5-21-1916702674-2089629516-631066457
I don't no if this is correct but in my smb.conf i have:
workgroup=REMAXPRAIA
netbios name = PRAIASERVER
shouldn't the net getlocalsid retrieve the SID for DOMAIN REMAXPRAIA ??

Well, in my setup it says the server name, which seems to work fine.
The value is the one that is listed in my domain object. Check your
groupmaps then (net groupmap) and see if the SIDs are right there.
You'll have to delete and recreate any broken ones. Again, not sure if
this will fail a login, but it's something to check.

--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect Fax:701-281-1322
URL: www.ae-solutions.com mailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba and WinXP + PDC

2005-03-15 Thread John Zakhar

John Zakhar wrote:
John Zakhar wrote:
Craig White wrote:
On Mon, 2005-03-14 at 08:48 -0700, John H Terpstra wrote:
 

On Monday 14 March 2005 07:23, John Zakhar wrote:
 

Good Morning Folks.
I have a reoccurring error here when trying to join a Windows XP SP2
workstation to a Samba domain (accounts stored in LDAP) The error is
The user name cannot be found
Our LDAP directory looks like this
dc=na
~   o=ourdomain
~ ou=Groups
~ ou=Staff
~ ou=Computers


With this directory configuration the /etc/ldap.conf file needs to 
have:

nss_base_passwd: o=ourdomain,dc=na?sub
  


of course with this setup, samba would query the entire DSA for
everything which might not be the most effective use of LDAP.
Suggest that you consider...
dc=na
  o=ourdomain
 ou=Accounts
ou=Staff
ou=Computer
 ou=Groups
 ou=Hosts
 ou=etc...
and thus, padl stuff would be like...
nss_base_passwd:ou=Accounts,o=ourdomain,dc=na?sub
nss_base_shadow ou=Accounts,o=ourdomain,dc=na?sub
nss_base_group  ou=Groups,o=ourdomain,dc=na?one
nss_base_hosts ou=Hosts,o=ourdomain,dc=na?one
etc...
This way, you can set the search base for your MTA/IMAP/etc. to only
search the actual posix users...
ou=Staff,ou=Accounts,o=ourdomain,dc=na
and lastly - perhaps this was unintentional...
dc = domain component...typical usage would be dc=domain_name,dc=tld
o = organization  c = country...typical usage would be
o=organization,c=US
Craig
 

Craig,
I fully agree that with your suggestions on the LDAP directory 
structure, however I came to this company after it was already 
created and in use for quite some time. We have servers using this 
structure that I do not control via dedicated WAN links into us. It 
would be quite the project on my end as well as theirs to change 
these things..

I am very familiar with LDAP naming standards (oh which the former 
admin decided to not follow) but again it is just not with in my 
power at the present time to change the structure.

I did make the changes to /etc/ldap.conf as well as upgraded our 
nss_ldap library and samba to 3.0.11-1, I longer get the user cannot 
be found error, I am now stuck at permission denied when trying to 
join up a fully patched XP machine to the samba DC with the root 
account (which exista in LDAP).

This is actually sad as I use this same setup at home and it works 
great (minus the ridiculous LDAP directory structure). I have 
attached another trace from the machine trying to join up, I have 
about had it here, I have never had so much trouble before with samba 
and LDAP, it must be my luck I suppose =)
If anyone has any suggestions I am all ears (well eyes) and would 
much appreciated..


 00 smb_io_rpc_hdr hdr
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
  major : 05
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
 0001 minor : 00
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
 0002 pkt_type  : 02
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
 0003 flags : 03
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
 0004 pack_type0: 10
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
 0005 pack_type1: 00
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
 0006 pack_type2: 00
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
 0007 pack_type3: 00
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint16(613)
 0008 frag_len  : 0030
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint16(613)
 000a auth_len  : 
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint32(642)
 000c call_id   : 0007
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_debug(82)
 10 smb_io_rpc_hdr_resp resp
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint32(642)
 0010 alloc_hint: 0018
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint16(613)
 0014 context_id: 
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
 0016 cancel_ct : 00
[2005/03/15 13:16:53, 5] rpc_parse/parse_prs.c:prs_uint8(584)
 0017 reserved  : 00
[2005/03/15 13:16:53, 5] smbd/ipc.c:copy_trans_params_and_data(60)
 copy_trans_params_and_data: params[0..0] data[0..48]
[2005/03/15 13:16:53, 5] lib/util.c:show_msg(464)
[2005/03/15 13:16:53, 5] lib/util.c:show_msg(474)
 size=104
 smb_com=0x25
 smb_rcls=0
 smb_reh=0
 smb_err=0
 smb_flg=136
 smb_flg2=51201
 smb_tid=1
 smb_pid=904
 smb_uid=100
 smb_mid=2112
 smt_wct=10
 smb_vwv[ 0]=0 (0x0)
 smb_vwv[ 1]=   48 (0x30)
 smb_vwv[ 2]=0 (0x0)
 smb_vwv[ 3]=0 (0x0)
 smb_vwv[ 4]=   56 (0x38)
 smb_vwv[ 5]=0 (0x0)
 smb_vwv[ 6]=   48 (0x30)
 smb_vwv[ 7]=   56 (0x38)
 smb_vwv[ 8]=0 (0x0)
 smb_vwv[ 9]=0 (0x0)
 smb_bcc=49
[2005/03/15 13:16:53, 10] lib/util.c:dump_data(1990)
 [000] 00 05 00 02 03 10 00 00  00 30

[Samba] Roaming Profiles under LDAP backend

2005-03-15 Thread Chris Lawder

Hi,
To this point I have been careful about mixing Win2K and WinXP profiles 
when using samba as a PDC/Profile server. Settings I have used have been 
like the following...

logon path = \\%L\profiles\%u\%m   (in smb.conf) with a typical profile 
directory as follows...

drwx--  14 test  wheel  512 Mar 14 11:32 Win2K
drwx--  17 test  wheel  512 Oct 27 18:22 WinXP
lrwxr-xr-x   1 test  wheel7 Oct 27 18:29 bilbo - ./WinXP
lrwxr-xr-x   1 test  wheel7 Oct 27 18:32 treebeard - ./Win2K
We are using a mix of Win2K and WinXP workstations.
I am now testing out a Samba/LDAP Domain and have most all working well 
but have run into a situation where I do not see how to keep profiles 
separated as described above. Should I be worried about separating them 
still? Both the Win2K and WinXP workstations have all the latest  
security patches and updates with the exception of SP2 on the WinXP.

Seems now that since sambaProfilePath is set in the LDAP tree it is 
forcing (in my case) the testuser1 profile to..

\\LEGOLAS\profiles\testuser1
I have tried removing the sambaProfilePath attribute from the LDAP 
user's dn so that the login path samba config can take over. In such a 
case (assuming logon path = \\%L\profiles\%u\%m) %u does not expand to 
testuser1 but %m will expand to the machine name (grima). Thus the 
profile directory gets written to the servers file system as...

/home/samba/profiles/%u/grima/
...and all the profile files I'd expect to see there will appear after a 
first log out.

I am seeking Recomendations, pointers to documentation and examples of 
the best way to deal with this situation. My preference is for a profile 
style that was first described in this message.

Thank you in advance for your time and help.
Chris Lawder
--
Number 41 Media Corporation
Suite 103 - 645 Fort Street
Victoria BC V8W 1G2
T 250.414.0410
F 250.414.0411
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profiles under LDAP backend


I have tried removing the sambaProfilePath attribute from the LDAP 
user's dn so that the login path samba config can take over. In such 
a case (assuming logon path = \\%L\profiles\%u\%m) %u does not 
expand to testuser1 but %m will expand to the machine name (grima). 
Thus the profile directory gets written to the servers file system as...

/home/samba/profiles/%u/grima/
For some reason I seem to remember a case sensitivity issue here but I 
can't find the message regarding it.  On our server, with 3.0.11 the 
following does work:

logon path = \\%L\profiles\%U
This has been working prior to us putting any profile path info into LDAP. 

--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba on Fedora 3 with Active Directory

2005-03-15 Thread Dave Schultz

Hi,
I am trying to set up my test lab with a Windows 2000 Server PDC and a 
Fedora 3 machine running Samba. I am new to Linux but have gotten quite far 
searching how to's and other peoples posts, however, I have hit a wall. I 
have joined the Fedora machine to the domain, and I can see and access my 
Samba shares from Windows when I comment out the valid users line in the 
smb.conf share definition section, but when I have that line set to =%D I 
get prompted for a user name and password when trying to access these shares 
from Windows. I have my authentication set to ads and have good 
communication back and forth between the two machines. Any help would be 
greatly applreciated.

_
Powerful Parental Controls Let your child discover the best the Internet has 
to offer.  
http://join.msn.com/?pgmarket=en-capage=byoa/premxAPID=1994DI=1034SU=http://hotmail.com/encaHL=Market_MSNIS_Taglines 
 Start enjoying all the benefits of MSN® Premium right now and get the 
first two months FREE*.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] vampire question

On Tuesday 15 March 2005 12:33, Schlomo Schapiro wrote:
 Hi John,

 On Mon, 14 Mar 2005, John H Terpstra wrote:
  On Monday 14 March 2005 14:29, Schlomo Schapiro wrote:
   Hi,
  
   aren't posix account names supposed to be without blanks ? I would be
   most surprised if a machine account with a blank would work with Samba
   !
 
  Is this no blank specified in any standards? It seems someone has
  decided that Linux should no longer permit blanks in user names and/or
  group names.

 Just tried on my SuSE 9.0:
 # useradd hello world
 useradd: Invalid user name `hello world'.

 So I assume that usernames with blanks are not a good idea - in the way
 that most Linux tools don't cope with them, even if maybe the NSS
 library calls do cope with them.

 Doesn't Samba also use the platform useradd command to add accounts in
 most setups ?

Yes, for the tdbsam backend and for smbpasswd backend. This means you will 
need to implement a shell script that converts names to lower case and strips 
spaces. The allow the shell script to call 'useradd' etc. The smb.conf 
parameter 'add user script' should be set up to call your custom script.

- John T.


 rpc vampire -S ntserver -U Administrator%stacy182  --- everything
   
seems
   
 to run fine however I do get
 could not create posix account info for 'machine name$'

 --
 Regards,
 Schlomo

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Machine Account default group.

On Tuesday 15 March 2005 10:47, biff wrote:
 Do machine accounts have to have a group of their own ?

No. Machine accounts can be in any group. Under Windows they will be in a 
separate group.

- John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Roaming Profiles under LDAP backend

2005-03-15 Thread Chris Lawder

Thank you, that did what I wanted...
I guess that since I am using ldap for the posixAccount/shadowAccount 
part of samba authentication as well that %u (current Unix username) 
isn't found on the machine but %U (Requested client username) works as 
it is being passed with the request.

Cheers :)
Chris
Paul Gienger wrote:

I have tried removing the sambaProfilePath attribute from the LDAP 
user's dn so that the login path samba config can take over. In 
such a case (assuming logon path = \\%L\profiles\%u\%m) %u does 
not expand to testuser1 but %m will expand to the machine name 
(grima). Thus the profile directory gets written to the servers file 
system as...

/home/samba/profiles/%u/grima/

For some reason I seem to remember a case sensitivity issue here but 
I can't find the message regarding it.  On our server, with 3.0.11 
the following does work:

logon path = \\%L\profiles\%U
This has been working prior to us putting any profile path info into 
LDAP.


--
Number 41 Media Corporation
Suite 103 - 645 Fort Street
Victoria BC V8W 1G2
T 250.414.0410
F 250.414.0411
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba and Preallocated Files

2005-03-15 Thread AndyLiebman

 
In a message dated 3/15/2005 1:00:38 P.M. Eastern Standard Time,  
[EMAIL PROTECTED] writes:

On Tue,  Mar 15, 2005 at 06:31:19AM -0500, [EMAIL PROTECTED] wrote:
 A  question about capturing videos to a Samba  share... 
 
  When Apple's Final Cut Pro captures video files, it  pre-allocates file  
space 
 on the destination volume. 
 
 If you capture to  a  local volume that's physically attached to a 
Macintosh, 
 or if  you capture to a  network volume via AFP (Apple File Sharing 
Protocol),  
 you can see that Final Cut  instantly creates a file of the  anticipated 
size 
 on the destination volume at  the moment just  before capture begins (the 
 anticipated size is based on the   maximum capture time limit set by a 
user). 
 
 However, when  capturing  videos to a Windows or Samba share, Final Cut 
  actually will write out dummy  data to a file, and then presumably it  
replaces the 
 dummy data with real data  as the capture moves  along. 
 
 Effectively, this makes Samba and Windows   shares useless for capturing 
Final 
 Cut videos. Because, for instance,  if you  expect to capture a 20-minute 
DV 
 clip, it will take  approximately 10 minutes to  create the pre-allocated 
file 
  before capturing even begins -- even when you are  connecting via a  
dedicated 
 Gigabit Ethernet link. The process seems to chug   along unbelievably 
slowly. 
 And if you were capturing uncompressed  video (which  has about 5x the data 
rate 
 of DV video) well, the  wait would be interminable.  
 
 Can anybody on this list  see a way to allow Final Cut to instantly  create 
 that pre  allocated file space that it wants to create on a Samba share?  
Are  
 their any Samba settings that could make this possible? It would be a  coup 
 for 
 Samba! 
 
 BTW, Apple's IMovie doesn't  go through this pre allocation  business. But, 
 alas, IMovie  doesn't capture timecode data, so Final Cut users  who want 
to work  
 with Samba shares can't simply switch to IMovie for capturing   their 
videos. 

That's a Mac client issue. We do support sparse  pre-allocation on the
server side. I'd raise it as a bug with  Apple.

Jeremy.


Jeremy, 
 
Isn't the Mac Samba Client compiled from a stock Samba samba.org source  
code? And if so, shouldn't it behave as any other Samba client. Or is Apple  
doing 
their own thing with the Samba client? 
 
I've been Googling for information to see if it's possible to compile my  own 
Samba for OS X and haven't come up with much. 
 
If it IS an Apple bug, I would bet dollars to doughnuts that Apple will  
quietly neglect the issue. In my experience with the company, they don't want 
to 
 do ANYTHING that will help non-Apple products compete with Apple storage  
devices. They will simply leave it broken. 
 
That's not to say that it's the Samba Team's job to fix it. I've just been  
dealing with Apple Final Cut Pro developers for a long time and I know of  what 
I speak! All I've gotten out of them is it's the Quicktime API that's  
responsible, and they'll have to change Quicktime to change the behavior when  
writing to a Samba share.
 
Does that ring true to you? 
 
Have you heard of XSan and XServe RAID? 
 
Regards, 
Andy Liebman
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba and Preallocated Files

On Tue, Mar 15, 2005 at 06:13:17PM -0500, [EMAIL PROTECTED] wrote:
  
 Isn't the Mac Samba Client compiled from a stock Samba samba.org source  
 code? And if so, shouldn't it behave as any other Samba client. Or is Apple  
 doing 
 their own thing with the Samba client? 

Apple maintains their own code - based originally on the FreeBSD smbfs code
I believe.

 I've been Googling for information to see if it's possible to compile my  own 
 Samba for OS X and haven't come up with much. 
  
 If it IS an Apple bug, I would bet dollars to doughnuts that Apple will  
 quietly neglect the issue. In my experience with the company, they don't want 
 to 
  do ANYTHING that will help non-Apple products compete with Apple storage  
 devices. They will simply leave it broken. 

No, that's not my experience with Conrad - he's the Apple developer in 
charge of their CIFS client. But there's only one of him and he has
a schedule.

 That's not to say that it's the Samba Team's job to fix it. I've just been  
 dealing with Apple Final Cut Pro developers for a long time and I know of  
 what 
 I speak! All I've gotten out of them is it's the Quicktime API that's  
 responsible, and they'll have to change Quicktime to change the behavior when 
  
 writing to a Samba share.
  
 Does that ring true to you? 

Either Quicktime could be fixed, or the Apple CIFS client could be fixed.
The server isn't doing anything wrong - it's being asked to write data and
so it does.

 Have you heard of XSan and XServe RAID? 

I've heard of them, yes.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba Error

2005-03-15 Thread Mauricio Silva

I dont know if i'm posting to the right list. But i need some help

I'm using Fedora 3:

Linux mty00.smarkt.net 2.6.10-1.770_FC3 #1 Thu Feb 24 14:00:06 EST
2005 i686 i686 i386 GNU/Linux

With samba: 

samba-3.0.10-1.fc3


When i try to open the GUI of the samba server it doesnt open,  then i
typed in shell  system-config-samba and i got this:

[EMAIL PROTECTED] ~]# system-config-samba
Traceback (most recent call last):
   File /usr/share/system-config-samba/system-config-samba.py, line 41, in ?
 mainWindow.MainWindow(debug_flag)
   File /usr/share/system-config-samba/mainWindow.py, line 79, in __init__
 self.samba_data = sambaParser.SambaParser(self)
   File /usr/share/system-config-samba/sambaParser.py, line 177, in __init__
 self.parseFile()
   File /usr/share/system-config-samba/sambaParser.py, line 215, in parseFile
 token = self.createToken(line, section)
   File /usr/share/system-config-samba/sambaParser.py, line 264, in
createToken
 token =
sambaToken.SambaToken(sambaToken.SambaToken.SAMBA_TOKEN_KEYVAL, (name,
value))
   File /usr/share/system-config-samba/sambaToken.py, line 63, in __init__
 raise AttributeError, value
AttributeError: ('dead time', '0')
[EMAIL PROTECTED] ~]#

I tried to uninstall it and reinstalling but i got the same error
everytime, i updated too, and still getting the same error. Does
anyone know how to fix this?. btw sorry if wrote to a wrong list.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Share Group Access

Hi, i have 3 groups in Samba PDC. 
One Folder called Geral (with rwx access to all of them), and i want to
create anothe folder inside it with rwx access by groups A and B, and no
access by group C, is this possible? What should i do?I got a bit
confused after looking at the Howto.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Question about Netlogon

2005-03-15 Thread csanab



Hi, i'm having some troubles trying to dispear a netlogon.pol file, i mean, i
had a policy .pol and send to my clients using netlogon, so every time a client
logs on the system, policy applies but i get the file (text) on the task bar in
windows, is there a way to prevent this, i mean that the policy applies and the
client don't notice anything.

Thanks
Cesar

---
Este mensaje fue enviado por el servidor de correo de RedIFE:
correo.ife.org.mx
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] SMBFS Performance Oddity

2005-03-15 Thread Dyyryath

I posted back in January about a huge performance gap I was seeing on a
gigabit network when comparing smbfs and smbclient operations. I was
advised to try CIFS, which I did. I didn't make much difference and I
gave up and switched to NFS.

Recently, however, I noticed something odd. If I move files separately
across my smbfs mount, things go MUCH faster. Here's an example.

I mount my remote Samba share to /mnt/samba. I copy a 100mb file from my
local drive to /mnt/samba (sending it via SMBFS to the other machine).
Here's what I get:

europium Temp # time cp file-100mb /mnt/samba

real1m2.621s
user0m0.001s
sys 0m0.399s


Next, I open a second terminal. This time, I'm going to copy two files
to the same share at the same time. I copy a new 100mb file from my
first terminal window and another 100mb file from my second window.
Here's what I get:

WINDOW 1

europium Temp # time cp file1-100mb /mnt/samba

real0m10.659s
user0m0.004s
sys 0m0.342s

WINDOW 2

europium Temp # time cp file2-100mb /mnt/music

real0m10.558s
user0m0.000s
sys 0m0.381s

I just transferred twice as much data in 1/10 the time by moving two
files at once (though in separate operations). Just out of curiosity, I
decided to perform the same task with Gnome's nautilus file manager. It
has nice graphical progress bars that make it easy to see how things are
progressing.

When I use drag  drop to move the first file, I get a progress box
that's creeping along and showing a little over 1 minute to completion.
The instant I drag  drop the second file, the first progress bar begins
flying and shows only a few seconds to completion. The second bar also
moves quickly and shows only a few seconds to completion...right up
until the first one finishes. As soon as it does, the second operation
slows to a crawl, taking another 22 seconds to finish.

What's going on here? I don't have the slightest idea where to even
begin trying to troubleshoot this strange behaviour...


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] SAMBA HOWTO: time displayed in UNIX file listing

2005-03-15 Thread Matt Seitz

The SAMBA HOWTO says that ls displays access time.  Doesn't it display modify 
time?
The HOWTO says
A UNIX file listing looks as follows:
[listing removed]
The columns above represent (from left to right): [...], access date, access 
time, file name.
--http://us2.samba.org/samba/docs/man/Samba-HOWTO-Collection/AccessControls.html#id2562588

The UNIX standard says:
The date and time field shall contain the appropriate date and timestamp of 
when the file was last modified.

--http://www.opengroup.org/onlinepubs/95399/utilities/ls.html
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] SAMBA HOWTO: time displayed in UNIX file listing

Matt,

Thanks for spotting that. Fixed in the source now.

- John T.

On Tuesday 15 March 2005 18:15, Matt Seitz wrote:
 The SAMBA HOWTO says that ls displays access time.  Doesn't it display
 modify time?

 The HOWTO says

 A UNIX file listing looks as follows:

 [listing removed]

 The columns above represent (from left to right): [...], access date,
 access time, file name.
 --http://us2.samba.org/samba/docs/man/Samba-HOWTO-Collection/AccessControls
.html#id2562588

 The UNIX standard says:

 The date and time field shall contain the appropriate date and timestamp
 of when the file was last modified.

 --http://www.opengroup.org/onlinepubs/95399/utilities/ls.html

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] [SMB 3.0.10] File Locking Mechanism Windows - Unix

2005-03-15 Thread Asif, M

 Hello Jeremy,

We have samba 3.0.10 running on Solaris 9 with the smb.conf as follows.
http://lists.samba.org/archive/samba/2005-March/101953.html

# Global parameters
[global]
workgroup = NMUINT
netbios name = NMUINTFS
interfaces = IP
bind interfaces only = Yes
security = DOMAIN
password server = XXX.XXX.XXX.XXX
log level = 1
ldap ssl = no
#oplocks = no
kernel oplocks = no

[Share1]
path = /export/home/Testdev/share
read only = No
oplocks = no
strict locking = yes
level2 oplocks = no

Oplocks were disabled. Any idea what else could be the problem?

Thanks and best regards,
Asif

-Original Message-
From: Jeremy Allison [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, March 15, 2005 11:33 PM
To: Asif, M
Cc: [EMAIL PROTECTED]
Subject: Re: [Samba] [SMB 3.0.10] File Locking Mechanism Windows - Unix

On Tue, Mar 15, 2005 at 07:54:38PM +0530, Asif, M wrote:
 Hello Jeremy,
 
 Thanks for your response.
 
 I tried the following
 
 On Windows side, an MFC application with the code given below access 
 the file using the samba share.
 
 
   CString strFile =
 _T(180.144.1.11\\netmbase\\tmp\\test.txt);
   CStdioFile fValueFile;
   if (!fValueFile.Open( strFile ,CFile::modeWrite |
 CFile::shareExclusive) )
   {
   wcout_T(Open failed)endl;
   }
   else
   {
   //wcout_T(Open Success)endl;
   }
 
   fValueFile.WriteString( strt );
   getchar()
 
   fValueFile.Close();
 
 On UNIX side, code is something similar to this
 
   int fid =
 open(/export/home/scsd13/kiran/NetMBase/tmp/test.txt, O_RDWR|O_EXCL ) ;
   if( 0  fid )
   {
   perror(open),exit(1);
   }
 
   struct flock lockDetails ;
   lockDetails.l_start = 0 ;
   lockDetails.l_whence = SEEK_SET;
   lockDetails.l_len = 0 ;
   lockDetails.l_type = F_WRLCK ;
   int nErr = fcntl( fid, F_SETLK, lockDetails);
   if( 0  nErr )
   {
   perror(lock),exit(1);
   }
   getchar();
   close(fid);
   
 Now,
 
 1. Two instances of the executable runs on Windows side, open fails 
 with sharing violation if the first one is not released ( blocked at 
 getchar()
 call) , no problem.
 2. Same is the case with two instances of UNIX processes.
 3.The unix process locks the file and does not release it (blocked at
 getchar() ), and then the windows client is executed, WriteString 
 throws an exceptoin giving error 33(locked by other process). No 
 problem 4. Now if the Windows client opens the file first (blocked at 
 getchar() ) and then the unix client is invoked, the fcntl call
succeeds...
 
 I tried lockf() instead of fcntl(), turned on mandatory locking etc, 
 but with no success.
 
 Am I missing out some thing? Is there an easier way for getting this work?
 Basically, I want to ensure that there is no read happening when any 
 one (from unix or windows) is writing into the file an vice versa.

What OS are you running on ? This code will work on Linux with kernel
oplocks, and if you turn off oplocks should work on other UNIXes.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] (no subject)

2005-03-15 Thread mail

Un message dont vous etes le destinataire a ete refuse par exim
Il contenait un fichier attache non autorise : exe,bat,zip,... 
l'auteur de ce mail est : SYMPA [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] MailMonitor for Exchange has processed a suspicious mail

2005-03-15 Thread MailMonitor

A mail addressed to you has been identified as suspicious by MailMonitor for 
Exchange.  This mail is for information only and no action is required by you.

Event:  infection 
Action: Message deleted 
Message ID: [EMAIL PROTECTED] 
Message subject:[Samba] Your message to seminar has been 
rejected 
Sender: SYMPA [EMAIL PROTECTED]

=
Attachment information:
Event:  infection  
Action: No action 
Filename:   Body text 
Virus:  W32/Netsky-D 
=
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

svn commit: samba r5793 - in trunk/source/rpc_server: .

2005-03-15 Thread vlendec

Author: vlendec
Date: 2005-03-15 12:22:21 + (Tue, 15 Mar 2005)
New Revision: 5793

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5793

Log:
Fix some compiler warnings
Modified:
   trunk/source/rpc_server/srv_eventlog_nt.c


Changeset:
Modified: trunk/source/rpc_server/srv_eventlog_nt.c
===
--- trunk/source/rpc_server/srv_eventlog_nt.c   2005-03-15 01:19:58 UTC (rev 
5792)
+++ trunk/source/rpc_server/srv_eventlog_nt.c   2005-03-15 12:22:21 UTC (rev 
5793)
@@ -169,7 +169,7 @@
 if(!create_policy_hnd(p, (r_u-handle), free_eventlog_info, (void *)info))
return WERR_NOMEM;
 
-policy_handle_to_string(r_u-handle, info-handle_string);
+policy_handle_to_string(r_u-handle, info-handle_string);
 
 if(!(_eventlog_open_eventlog_hook(info)))
return WERR_BADFILE;
@@ -394,11 +394,12 @@
EVENTLOG_R_CLOSE_EVENTLOG *r_u)
 {
 Eventlog_info *info = NULL;
+POLICY_HND *handle;
 
 if(!q_u || !r_u)
return WERR_NOMEM;
 
-POLICY_HND *handle = (q_u-handle);
+handle = (q_u-handle);
 
 info = find_eventlog_info_by_hnd(p, handle);
 if(!(_eventlog_close_eventlog_hook(info)))
@@ -513,7 +514,7 @@
 else if(0 == strncmp(start, SRC, stop - start))
 {
memset(temp, 0, sizeof(temp));
-   sscanf(stop+1, %s, temp);
+   sscanf(stop+1, %s, temp);
temp_len = strlen(temp);
rpcstr_push((void *)(entry-data_record.source_name), temp, 
sizeof(entry-data_record.source_name), STR_TERMINATE);
@@ -522,7 +523,7 @@
 else if(0 == strncmp(start, SRN, stop - start))
 {
memset(temp, 0, sizeof(temp));
-   sscanf(stop+1, %s, temp);
+   sscanf(stop+1, %s, temp);
temp_len = strlen(temp);
rpcstr_push((void *)(entry-data_record.computer_name), temp,
sizeof(entry-data_record.computer_name), STR_TERMINATE);
@@ -532,7 +533,7 @@
 else if(0 == strncmp(start, SID, stop - start))
 {
memset(temp, 0, sizeof(temp));
-   sscanf(stop+1, %s, temp);
+   sscanf(stop+1, %s, temp);
temp_len = strlen(temp);
rpcstr_push((void *)(entry-data_record.sid), temp,
sizeof(entry-data_record.sid), STR_TERMINATE);
@@ -564,7 +565,7 @@
strncpy(temp, stop, temp_len);
rpcstr_push((void *)(entry-data_record.user_data), temp,
sizeof(entry-data_record.user_data), STR_TERMINATE);
-   entry-data_record.user_data_len = 
(strlen_w(entry-data_record.user_data) * 2) + 2;
+   entry-data_record.user_data_len = (strlen_w((const smb_ucs2_t 
*)entry-data_record.user_data) * 2) + 2;
 }
 else
 {
@@ -606,7 +607,7 @@
  *   If two have same #, but not consecutive, 
that's an error. If there is no String Data (and NST==0), must include the 
specifier.
  *   DAT:[(uint8)] - The user-defined data portion of the event 
log. Can not be multiple lines.
  */
-static BOOL _eventlog_read_eventlog_hook(Eventlog_info *info, Eventlog_entry 
*entry, char *direction, int starting_record, int buffer_size, BOOL *eof)
+static BOOL _eventlog_read_eventlog_hook(Eventlog_info *info, Eventlog_entry 
*entry, const char *direction, int starting_record, int buffer_size, BOOL *eof)
 {
 char *cmd = lp_eventlog_read_cmd();
 char **qlines;
@@ -747,15 +748,16 @@
 POLICY_HND *handle;
 Eventlog_entry entry;
 BOOL eof = False;
-char *direction;
+const char *direction = ;
 int starting_record;
+prs_struct *ps;
 
 if(!q_u || !r_u)
return WERR_NOMEM;
 
 handle = (q_u-handle);
 info = find_eventlog_info_by_hnd(p, handle);
-prs_struct *ps = p-out_data.rdata;
+ps = p-out_data.rdata;
 /* Rather than checking the EVENTLOG_SEQUENTIAL_READ/EVENTLOG_SEEK_READ 
flags,
we'll just go to the offset specified in the request, or the oldest 
entry
if no offset is specified */

svn commit: samba r5794 - in trunk/source: lib rpc_server

2005-03-15 Thread vlendec

Author: vlendec
Date: 2005-03-15 12:40:24 + (Tue, 15 Mar 2005)
New Revision: 5794

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5794

Log:
Fix some compiler warnings
Modified:
   trunk/source/lib/smbldap.c
   trunk/source/rpc_server/srv_samr_nt.c


Changeset:
Modified: trunk/source/lib/smbldap.c
===
--- trunk/source/lib/smbldap.c  2005-03-15 12:22:21 UTC (rev 5793)
+++ trunk/source/lib/smbldap.c  2005-03-15 12:40:24 UTC (rev 5794)
@@ -883,8 +883,8 @@
 static int smbldap_open(struct smbldap_state *ldap_state)
 {
int rc, opt_rc;
+   BOOL reopen = False;
SMB_ASSERT(ldap_state);
-   BOOL reopen = False;

 #ifndef NO_LDAP_SECURITY
if (geteuid() != 0) {

Modified: trunk/source/rpc_server/srv_samr_nt.c
===
--- trunk/source/rpc_server/srv_samr_nt.c   2005-03-15 12:22:21 UTC (rev 
5793)
+++ trunk/source/rpc_server/srv_samr_nt.c   2005-03-15 12:40:24 UTC (rev 
5794)
@@ -3954,7 +3954,6 @@
 {
DOM_SID group_sid;
fstring grp_name;
-   struct group *grp;
uint32 acc_granted;
SE_PRIV se_rights;
BOOL can_add_accounts;
@@ -3987,7 +3986,7 @@
/* delete mapping first */

if ( (ret = pdb_delete_group_mapping_entry(group_sid)) == True ) {
-   smb_delete_group( grp-gr_name );
+   smb_delete_group( grp_name );
}
 
if ( can_add_accounts )

svn commit: samba r5795 - in trunk/source/printing: .

2005-03-15 Thread gd

Author: gd
Date: 2005-03-15 14:16:41 + (Tue, 15 Mar 2005)
New Revision: 5795

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5795

Log:
Fix file_printerdb_init.

Guenther

Modified:
   trunk/source/printing/printerdb_file.c


Changeset:
Modified: trunk/source/printing/printerdb_file.c
===
--- trunk/source/printing/printerdb_file.c  2005-03-15 12:40:24 UTC (rev 
5794)
+++ trunk/source/printing/printerdb_file.c  2005-03-15 14:16:41 UTC (rev 
5795)
@@ -188,14 +188,17 @@
TALLOC_CTX *mem_ctx = talloc_init(file_printerdb_init);
int i;
BOOL result = False;
+   char *default_dir;
 
if (mem_ctx == NULL)
goto done;
 
-   file_root = talloc_asprintf(mem_ctx, %s/%s, dyn_LIBDIR, printerdb);
+   default_dir = talloc_asprintf(mem_ctx, %s/%s, dyn_LOCKDIR, 
printerdb);
 
if ((param != NULL)  (param[0] != '\0')) {
file_root = SMB_STRDUP(param);
+   } else {
+   file_root = SMB_STRDUP(default_dir);
}
 
if (file_root == NULL) {

svn commit: samba r5796 - in branches/SAMBA_4_0/source/librpc/ndr: .

Author: metze
Date: 2005-03-15 14:25:59 + (Tue, 15 Mar 2005)
New Revision: 5796

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5796

Log:
add ndr_* function for int8 and int16

metze

Modified:
   branches/SAMBA_4_0/source/librpc/ndr/ndr_basic.c


Changeset:
Modified: branches/SAMBA_4_0/source/librpc/ndr/ndr_basic.c
===
--- branches/SAMBA_4_0/source/librpc/ndr/ndr_basic.c2005-03-15 14:16:41 UTC 
(rev 5795)
+++ branches/SAMBA_4_0/source/librpc/ndr/ndr_basic.c2005-03-15 14:25:59 UTC 
(rev 5796)
@@ -57,8 +57,19 @@
 }
 
 /*
-  parse a uint8
+  parse a int8_t
 */
+NTSTATUS ndr_pull_int8(struct ndr_pull *ndr, int ndr_flags, int8_t *v)
+{
+   NDR_PULL_NEED_BYTES(ndr, 1);
+   *v = (int8_t)CVAL(ndr-data, ndr-offset);
+   ndr-offset += 1;
+   return NT_STATUS_OK;
+}
+
+/*
+  parse a uint8_t
+*/
 NTSTATUS ndr_pull_uint8(struct ndr_pull *ndr, int ndr_flags, uint8_t *v)
 {
NDR_PULL_NEED_BYTES(ndr, 1);
@@ -67,9 +78,20 @@
return NT_STATUS_OK;
 }
 
+/*
+  parse a int16_t
+*/
+NTSTATUS ndr_pull_int16(struct ndr_pull *ndr, int ndr_flags, int16_t *v)
+{
+   NDR_PULL_ALIGN(ndr, 2);
+   NDR_PULL_NEED_BYTES(ndr, 2);
+   *v = (uint16_t)NDR_SVAL(ndr, ndr-offset);
+   ndr-offset += 2;
+   return NT_STATUS_OK;
+}
 
 /*
-  parse a uint16
+  parse a uint16_t
 */
 NTSTATUS ndr_pull_uint16(struct ndr_pull *ndr, int ndr_flags, uint16_t *v)
 {
@@ -80,27 +102,26 @@
return NT_STATUS_OK;
 }
 
-
 /*
-  parse a uint32_t
+  parse a int32_t
 */
-NTSTATUS ndr_pull_uint32(struct ndr_pull *ndr, int ndr_flags, uint32_t *v)
+NTSTATUS ndr_pull_int32(struct ndr_pull *ndr, int ndr_flags, int32_t *v)
 {
NDR_PULL_ALIGN(ndr, 4);
NDR_PULL_NEED_BYTES(ndr, 4);
-   *v = NDR_IVAL(ndr, ndr-offset);
+   *v = NDR_IVALS(ndr, ndr-offset);
ndr-offset += 4;
return NT_STATUS_OK;
 }
 
 /*
-  parse a int32_t
+  parse a uint32_t
 */
-NTSTATUS ndr_pull_int32(struct ndr_pull *ndr, int ndr_flags, int32_t *v)
+NTSTATUS ndr_pull_uint32(struct ndr_pull *ndr, int ndr_flags, uint32_t *v)
 {
NDR_PULL_ALIGN(ndr, 4);
NDR_PULL_NEED_BYTES(ndr, 4);
-   *v = NDR_IVALS(ndr, ndr-offset);
+   *v = NDR_IVAL(ndr, ndr-offset);
ndr-offset += 4;
return NT_STATUS_OK;
 }
@@ -243,7 +264,6 @@
return ndr_pull_bytes(ndr, data, n);
 }
 
-
 /*
   pull an array of uint16
 */
@@ -304,10 +324,19 @@
return NT_STATUS_OK;
 }
 
+/*
+  push a int8_t
+*/
+NTSTATUS ndr_push_int8(struct ndr_push *ndr, int ndr_flags, int8_t v)
+{
+   NDR_PUSH_NEED_BYTES(ndr, 1);
+   SCVAL(ndr-data, ndr-offset, (uint8_t)v);
+   ndr-offset += 1;
+   return NT_STATUS_OK;
+}
 
-
 /*
-  push a uint8
+  push a uint8_t
 */
 NTSTATUS ndr_push_uint8(struct ndr_push *ndr, int ndr_flags, uint8_t v)
 {
@@ -318,8 +347,20 @@
 }
 
 /*
-  push a uint16
+  push a int16_t
 */
+NTSTATUS ndr_push_int16(struct ndr_push *ndr, int ndr_flags, int16_t v)
+{
+   NDR_PUSH_ALIGN(ndr, 2);
+   NDR_PUSH_NEED_BYTES(ndr, 2);
+   NDR_SSVAL(ndr, ndr-offset, (uint16_t)v);
+   ndr-offset += 2;
+   return NT_STATUS_OK;
+}
+
+/*
+  push a uint16_t
+*/
 NTSTATUS ndr_push_uint16(struct ndr_push *ndr, int ndr_flags, uint16_t v)
 {
NDR_PUSH_ALIGN(ndr, 2);
@@ -330,25 +371,25 @@
 }
 
 /*
-  push a uint32_t
+  push a int32_t
 */
-NTSTATUS ndr_push_uint32(struct ndr_push *ndr, int ndr_flags, uint32_t v)
+NTSTATUS ndr_push_int32(struct ndr_push *ndr, int ndr_flags, int32_t v)
 {
NDR_PUSH_ALIGN(ndr, 4);
NDR_PUSH_NEED_BYTES(ndr, 4);
-   NDR_SIVAL(ndr, ndr-offset, v);
+   NDR_SIVALS(ndr, ndr-offset, v);
ndr-offset += 4;
return NT_STATUS_OK;
 }
 
 /*
-  push a int32_t
+  push a uint32_t
 */
-NTSTATUS ndr_push_int32(struct ndr_push *ndr, int ndr_flags, int32_t v)
+NTSTATUS ndr_push_uint32(struct ndr_push *ndr, int ndr_flags, uint32_t v)
 {
NDR_PUSH_ALIGN(ndr, 4);
NDR_PUSH_NEED_BYTES(ndr, 4);
-   NDR_SIVALS(ndr, ndr-offset, v);
+   NDR_SIVAL(ndr, ndr-offset, v);
ndr-offset += 4;
return NT_STATUS_OK;
 }
@@ -380,7 +421,7 @@
 }
 
 /*
-  push a int64
+  push a dlong
 */
 NTSTATUS ndr_push_dlong(struct ndr_push *ndr, int ndr_flags, int64_t v)
 {
@@ -1127,19 +1168,24 @@
}
 }
 
+void ndr_print_int8(struct ndr_print *ndr, const char *name, int8_t v)
+{
+   ndr-print(ndr, %-25s: %d, name, v);
+}
+
 void ndr_print_uint8(struct ndr_print *ndr, const char *name, uint8_t v)
 {
ndr-print(ndr, %-25s: 0x%02x (%u), name, v, v);
 }
 
-void ndr_print_uint16(struct ndr_print *ndr, const char *name, uint16_t v)
+void ndr_print_int16(struct ndr_print *ndr, const char *name, int16_t v)
 {
-   ndr-print(ndr, %-25s: 0x%04x (%u), name, v, v);
+   ndr-print(ndr, %-25s: %d, name, v);
 }
 
-void ndr_print_uint32(struct ndr_print *ndr, const char *name, uint32_t v)
+void ndr_print_uint16(struct ndr_print

svn commit: samba r5797 - in branches/SAMBA_4_0/source: build/pidl librpc/ndr

Author: metze
Date: 2005-03-15 14:33:38 + (Tue, 15 Mar 2005)
New Revision: 5797

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5797

Log:
- add idl property [subcontext_size()]

  this can be used like this 
  [subcontext_size(28),subcontext(0)] dom_sid sid;

  this descripes a fixed 28 byte buffer which contains a dom_sid,
  and the rest of the buffer is padded with zero bytes if the dom_sid doesn't
  need all 28 byte in it's ndr encoding.

- only push and pull the subcontext when we are in the NDR_SCALARS section
  (tridge, jelmer: I hope this is correct for all cases...!?:-)

metze

Modified:
   branches/SAMBA_4_0/source/build/pidl/ndr.pm
   branches/SAMBA_4_0/source/build/pidl/validator.pm
   branches/SAMBA_4_0/source/librpc/ndr/ndr.c


Changeset:
Modified: branches/SAMBA_4_0/source/build/pidl/ndr.pm
===
--- branches/SAMBA_4_0/source/build/pidl/ndr.pm 2005-03-15 14:25:59 UTC (rev 
5796)
+++ branches/SAMBA_4_0/source/build/pidl/ndr.pm 2005-03-15 14:33:38 UTC (rev 
5797)
@@ -600,12 +600,12 @@
}
 }
 
-sub ParseSubcontextPushStart($)
+sub ParseSubcontextPushStart($$)
 {
my $e = shift;
-   my $sub_size = util::has_property($e, subcontext);
+   my $ndr_flags = shift;
 
-   pidl {;
+   pidl if (($ndr_flags)  NDR_SCALARS) {;
indent;
pidl struct ndr_push *_ndr_$e-{NAME};;
pidl ;
@@ -620,34 +620,48 @@
 sub ParseSubcontextPushEnd($)
 {
my $e = shift;
-   my $sub_size = util::has_property($e, subcontext);
-   pidl NDR_CHECK(ndr_push_subcontext_header(ndr, $sub_size, 
_ndr_$e-{NAME}));;
+   my $header_size = util::has_property($e, subcontext);
+   my $size_is = util::has_property($e, subcontext_size);
+
+   if (not defined($size_is)) {
+   $size_is = -1;
+   }
+
+   pidl NDR_CHECK(ndr_push_subcontext_header(ndr, $header_size, $size_is, 
_ndr_$e-{NAME}));;
pidl NDR_CHECK(ndr_push_bytes(ndr, _ndr_$e-{NAME}-data, 
_ndr_$e-{NAME}-offset));;
deindent;
pidl };
 }
 
-sub ParseSubcontextPullStart($)
+sub ParseSubcontextPullStart($$)
 {
my $e = shift;
-   my $sub_size = util::has_property($e, subcontext);
+   my $ndr_flags = shift;  
+   my $header_size = util::has_property($e, subcontext);
+   my $size_is = util::has_property($e, subcontext_size);
 
-   pidl {;
+   if (not defined($size_is)) {
+   $size_is = -1;
+   }
+
+   pidl if (($ndr_flags)  NDR_SCALARS) {;
indent;
pidl struct ndr_pull *_ndr_$e-{NAME};;
pidl NDR_ALLOC(ndr, _ndr_$e-{NAME});;
-   pidl NDR_CHECK(ndr_pull_subcontext_header(ndr, $sub_size, 
_ndr_$e-{NAME}));; 
-
+   pidl NDR_CHECK(ndr_pull_subcontext_header(ndr, $header_size, $size_is, 
_ndr_$e-{NAME}));; 
return _ndr_$e-{NAME};
 }
 
 sub ParseSubcontextPullEnd($)
 {
my $e = shift;
-   my $sub_size = util::has_property($e, subcontext);
+   my $header_size = util::has_property($e, subcontext);
+   my $size_is = util::has_property($e, subcontext_size);
 
my $advance;
-   if ($sub_size) {
+   if (defined ($size_is)) {
+   $advance = $size_is;  
+   } elsif ($header_size) {
$advance = _ndr_$e-{NAME}-data_size;
} else {
$advance = _ndr_$e-{NAME}-offset;
@@ -676,7 +690,7 @@
}
 
if (defined $sub_size and $e-{POINTERS} == 0) {
-   $ndr = ParseSubcontextPushStart($e);
+   $ndr = ParseSubcontextPushStart($e, NDR_SCALARS);
}
 
if (need_wire_pointer($e)) {
@@ -819,7 +833,7 @@
start_flags($e);
 
if (defined $sub_size  $e-{POINTERS} == 0) {
-   $ndr = ParseSubcontextPullStart($e);
+   $ndr = ParseSubcontextPullStart($e, $ndr_flags);
$ndr_flags = NDR_SCALARS|NDR_BUFFERS;
}
 
@@ -909,10 +923,10 @@
}
 
if (defined $sub_size) {
-   $ndr = ParseSubcontextPushStart($e);
+   $ndr = ParseSubcontextPushStart($e, $ndr_flags);
$ndr_flags = NDR_SCALARS|NDR_BUFFERS;
}
-   
+
if (util::array_size($e)) {
ParseArrayPush($e, $ndr, r-, $ndr_flags);
} else {
@@ -972,7 +986,7 @@
}
 
if (defined $sub_size) {
-   $ndr = ParseSubcontextPullStart($e);
+   $ndr = ParseSubcontextPullStart($e, $ndr_flags);
$ndr_flags = NDR_SCALARS|NDR_BUFFERS;
}
 

Modified: branches/SAMBA_4_0/source/build/pidl/validator.pm
===
--- branches/SAMBA_4_0/source/build/pidl/validator.pm   2005-03-15 14:25:59 UTC 
(rev 5796)
+++ branches/SAMBA_4_0/source/build/pidl/validator.pm   2005-03-15 14:33:38 UTC 
(rev 5797)
@@ -72,6 +72,10 @@
fatal(el_name($e) .  : length_is() on non-array element);
}
 
+

svn commit: samba r5798 - in branches/SAMBA_4_0/source/librpc/idl: .

Author: metze
Date: 2005-03-15 14:37:02 + (Tue, 15 Mar 2005)
New Revision: 5798

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5798

Log:
limit the size of an sid, 28 bytes complete is the biggest SID
that can be handled.

tridge: do you think it would make sense to change the sub_auth[num_auths] to 
sub_auth[5],
so we can copy the struct by sid1 = sid2;
comments please

metze

Modified:
   branches/SAMBA_4_0/source/librpc/idl/security.idl


Changeset:
Modified: branches/SAMBA_4_0/source/librpc/idl/security.idl
===
--- branches/SAMBA_4_0/source/librpc/idl/security.idl   2005-03-15 14:33:38 UTC 
(rev 5797)
+++ branches/SAMBA_4_0/source/librpc/idl/security.idl   2005-03-15 14:37:02 UTC 
(rev 5798)
@@ -186,7 +186,7 @@
   so you can't copy them using assignment */
typedef [public,noprint] struct {
uint8  sid_rev_num; /** SID revision number */
-   uint8  num_auths;   /** Number of sub-authorities 
*/
+   [range(0,5)] int8  num_auths;  /** Number of sub-authorities */
uint8  id_auth[6];  /** Identifier Authority */
uint32 sub_auths[num_auths];
} dom_sid;

svn commit: samba r5799 - in branches/SAMBA_4_0/source: librpc/idl librpc/ndr torture/rpc

Author: metze
Date: 2005-03-15 14:42:09 + (Tue, 15 Mar 2005)
New Revision: 5799

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5799

Log:
more DsGetNCChanges updates, I'm starting to understand it...

also add a really simple torture test for DsGetNCChanges

metze

Modified:
   branches/SAMBA_4_0/source/librpc/idl/drsuapi.idl
   branches/SAMBA_4_0/source/librpc/ndr/ndr_sec.c
   branches/SAMBA_4_0/source/torture/rpc/drsuapi.c


Changeset:
Sorry, the patch is too large (394 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5799

svn commit: samba r5800 - in branches/SAMBA_4_0/source: include librpc librpc/idl librpc/ndr

Author: metze
Date: 2005-03-15 16:05:43 + (Tue, 15 Mar 2005)
New Revision: 5800

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5800

Log:
fix recursiv printing in ndr_print_DsGetNCChangesInfo1()

metze

Added:
   branches/SAMBA_4_0/source/librpc/ndr/ndr_drsuapi.c
Modified:
   branches/SAMBA_4_0/source/include/structs.h
   branches/SAMBA_4_0/source/librpc/config.mk
   branches/SAMBA_4_0/source/librpc/idl/drsuapi.idl


Changeset:
Modified: branches/SAMBA_4_0/source/include/structs.h
===
--- branches/SAMBA_4_0/source/include/structs.h 2005-03-15 14:42:09 UTC (rev 
5799)
+++ branches/SAMBA_4_0/source/include/structs.h 2005-03-15 16:05:43 UTC (rev 
5800)
@@ -29,6 +29,8 @@
 struct spoolss_EnumPrinterDrivers;
 struct spoolss_EnumPorts;
 
+struct drsuapi_DsGetNCChangesInfo1;
+
 struct MULTI_QI;
 struct COSERVERINFO;
 

Modified: branches/SAMBA_4_0/source/librpc/config.mk
===
--- branches/SAMBA_4_0/source/librpc/config.mk  2005-03-15 14:42:09 UTC (rev 
5799)
+++ branches/SAMBA_4_0/source/librpc/config.mk  2005-03-15 16:05:43 UTC (rev 
5800)
@@ -93,8 +93,11 @@
 INIT_FUNCTION = dcerpc_drsuapi_init
 INIT_OBJ_FILES = librpc/gen_ndr/ndr_drsuapi.o
 NOPROTO = YES
-REQUIRED_SUBSYSTEMS = LIBNDR
+REQUIRED_SUBSYSTEMS = LIBNDR NDR_DRSUAPI_PRINT
 
+[SUBSYSTEM::NDR_DRSUAPI_PRINT]
+INIT_OBJ_FILES = librpc/ndr/ndr_drsuapi.o
+
 [SUBSYSTEM::NDR_DRSBLOBS]
 INIT_FUNCTION = dcerpc_drsblobs_init
 INIT_OBJ_FILES = librpc/gen_ndr/ndr_drsblobs.o

Modified: branches/SAMBA_4_0/source/librpc/idl/drsuapi.idl
===
--- branches/SAMBA_4_0/source/librpc/idl/drsuapi.idl2005-03-15 14:42:09 UTC 
(rev 5799)
+++ branches/SAMBA_4_0/source/librpc/idl/drsuapi.idl2005-03-15 16:05:43 UTC 
(rev 5800)
@@ -256,7 +256,7 @@
hyper usn;
} drsuapi_DsReplicaMetaData;
 
-   typedef struct {
+   typedef [public] struct {
[range(0,1048576)] uint32 count;
[size_is(count)] drsuapi_DsReplicaMetaData meta_data[];
} drsuapi_DsReplicaMetaDataCtr;
@@ -288,15 +288,14 @@
[size_is(num_attributes)]  drsuapi_DsReplicaAttribute 
*attributes[];
} drsuapi_DsReplicaAttributeCtr;
 
-   typedef struct {
+   typedef [public] struct {
drsuapi_DsReplicaObjectIdentifier *identifier;
uint32 unknown1;
drsuapi_DsReplicaAttributeCtr attribute_ctr;
} drsuapi_DsReplicaObject;
 
-   typedef struct {
-   /* TODO: fix ndr_print for next_info! */
-   [print_option(linked_list_next)]  drsuapi_DsGetNCChangesInfo1 
*next;
+   typedef [noprint] struct {
+   drsuapi_DsGetNCChangesInfo1 *next;
drsuapi_DsReplicaObject object;
uint32 unknown1;
GUID *guid;

Added: branches/SAMBA_4_0/source/librpc/ndr/ndr_drsuapi.c
===
--- branches/SAMBA_4_0/source/librpc/ndr/ndr_drsuapi.c  2005-03-15 14:42:09 UTC 
(rev 5799)
+++ branches/SAMBA_4_0/source/librpc/ndr/ndr_drsuapi.c  2005-03-15 16:05:43 UTC 
(rev 5800)
@@ -0,0 +1,51 @@
+/* 
+   Unix SMB/CIFS implementation.
+
+   routines for printing some linked list structs in DRSUAPI
+
+   Copyright (C) Stefan (metze) Metzmacher 2005
+
+   This program is free software; you can redistribute it and/or modify
+   it under the terms of the GNU General Public License as published by
+   the Free Software Foundation; either version 2 of the License, or
+   (at your option) any later version.
+   
+   This program is distributed in the hope that it will be useful,
+   but WITHOUT ANY WARRANTY; without even the implied warranty of
+   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+   GNU General Public License for more details.
+   
+   You should have received a copy of the GNU General Public License
+   along with this program; if not, write to the Free Software
+   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+*/
+
+
+#include includes.h
+#include librpc/gen_ndr/ndr_drsuapi.h
+
+
+void ndr_print_drsuapi_DsGetNCChangesInfo1(struct ndr_print *ndr, const char 
*name, struct drsuapi_DsGetNCChangesInfo1 *r)
+{
+   ndr_print_struct(ndr, name, drsuapi_DsGetNCChangesInfo1);
+   ndr-depth++;
+   ndr_print_ptr(ndr, next, r-next);
+   ndr_print_drsuapi_DsReplicaObject(ndr, object, r-object);
+   ndr_print_uint32(ndr, unknown1, r-unknown1);
+   ndr_print_ptr(ndr, guid, r-guid);
+   ndr-depth++;
+   if (r-guid) {
+   ndr_print_GUID(ndr, guid, r-guid);
+   }
+   ndr-depth--;
+   ndr_print_ptr(ndr, meta_data_ctr, r-meta_data_ctr);
+   ndr-depth++;
+   if (r-meta_data_ctr) {
+   ndr_print_drsuapi_DsReplicaMetaDataCtr(ndr, meta_data_ctr, 
r-meta_data_ctr);
+

svn commit: samba r5801 - in trunk/source: . include rpc_client rpc_parse rpc_server

Author: jerry
Date: 2005-03-15 16:32:15 + (Tue, 15 Mar 2005)
New Revision: 5801

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5801

Log:
large commit.

* abstract the pointers from [in,out] rpc params to 
  prs_XXX_p so we no longer have to worry about declaring 
  silly things like XXX_ptr in the rpc_*.h top level structs.
  (see prs_uint32_p() and prs_rpcbuffer_p() for examples).

* reuse the NEW_BUFFER from the spoolss for for the svcctl pipe.
  (renamed to RPC_BUFFER and moved to separate rpc_buffer.c)
  also had to change parsing to use prs_rpcbuffer_p() in spoolss
  code.

* add minimal working version of EnumServicesStatus()
  (note that I think the IDL in Samba4 is wrong here).

C:\WINNT\ enumerate \\rain

Opening the Service Control Manager on \\rain...ok
Enumerating servicesok
Spooler (Spooler)
type  = 0x110
state = 0x4
controls accepted = 0x0
win32 exit code   = 0x0
svc exit code = 0x0
check point   = 0x0
wait hont = 0x0
Net Logon (Netlogon)
type  = 0x20
state = 0x4
controls accepted = 0x0
win32 exit code   = 0x0
svc exit code = 0x0
check point   = 0x0
wait hont = 0x0
Closing Service Control Manager handle...ok




Added:
   trunk/source/include/rpc_buffer.h
   trunk/source/rpc_parse/parse_buffer.c
Modified:
   trunk/source/Makefile.in
   trunk/source/include/ntdomain.h
   trunk/source/include/rpc_misc.h
   trunk/source/include/rpc_spoolss.h
   trunk/source/include/rpc_svcctl.h
   trunk/source/rpc_client/cli_spoolss.c
   trunk/source/rpc_parse/parse_misc.c
   trunk/source/rpc_parse/parse_prs.c
   trunk/source/rpc_parse/parse_sec.c
   trunk/source/rpc_parse/parse_spoolss.c
   trunk/source/rpc_parse/parse_svcctl.c
   trunk/source/rpc_server/srv_spoolss_nt.c
   trunk/source/rpc_server/srv_svcctl.c
   trunk/source/rpc_server/srv_svcctl_nt.c


Changeset:
Sorry, the patch is too large (3628 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5801

svn commit: samba-docs r419 - in trunk: Samba-Guide Samba-HOWTO-Collection

2005-03-15 Thread jht

Author: jht
Date: 2005-03-15 16:57:07 + (Tue, 15 Mar 2005)
New Revision: 419

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=419

Log:
Clarification that Samba documentation is not an LDAP HOWTO.
Modified:
   trunk/Samba-Guide/Chap06-MakingHappyUsers.xml
   trunk/Samba-HOWTO-Collection/Passdb.xml


Changeset:
Modified: trunk/Samba-Guide/Chap06-MakingHappyUsers.xml
===
--- trunk/Samba-Guide/Chap06-MakingHappyUsers.xml   2005-03-14 18:50:40 UTC 
(rev 418)
+++ trunk/Samba-Guide/Chap06-MakingHappyUsers.xml   2005-03-15 16:57:07 UTC 
(rev 419)
@@ -235,15 +235,16 @@
/para
 
para
-   Samba asks the host OS to provide a UID via the passwd, shadow and 
group facilities
-   in the NSS control (configuration) file. What tool is used by the UNIX 
administrator is
-   up to him. It is not imposed by Samba. Samba provides winbindd together 
with its support
-   libraries as one method. It is possible to do this via LDAP - and for 
that Samba provides
-   the appropriate hooks so that all account entities can be located in an 
LDAP directory.
+   Samba asks the host OS to provide a UID via the quotepasswd/quote, 
quoteshadow/quote
+   and quotegroup/quote facilities in the NSS control (configuration) 
file. The best tool
+   for achieving this is left up to the UNIX administrator to determine. 
It is not imposed by
+   Samba. Samba provides winbindd together with its support libraries as 
one method. It is
+   possible to do this via LDAP - and for that Samba provides the 
appropriate hooks so that
+   all account entities can be located in an LDAP directory.
/para
 
para
-   If the weapon of choice (as it is for LDAP) is to use the PADL nss_ldap 
utility it must
+   For many the weapon of choice is to use the PADL nss_ldap utility. This 
utility must
be configured so that computer accounts can be resolved to a POSIX/UNIX 
account UID. That
is fundamentally an LDAP design question.  The information provided on 
the Samba list and
in the documentation is directed at providing working examples only. 
The design

Modified: trunk/Samba-HOWTO-Collection/Passdb.xml
===
--- trunk/Samba-HOWTO-Collection/Passdb.xml 2005-03-14 18:50:40 UTC (rev 
418)
+++ trunk/Samba-HOWTO-Collection/Passdb.xml 2005-03-15 16:57:07 UTC (rev 
419)
@@ -46,10 +46,8 @@
varlistentrytermPlain Text/term
listitem
para
-   This isn't really a backend at all, but is
-   listed here for simplicity.  Samba can be
-   configured to pass plaintext authentication
-   requests to the traditional UNIX/Linux
+   This isn't really a backend at all, but is listed here 
for simplicity.  Samba can be
+   configured to pass plaintext authentication requests to 
the traditional UNIX/Linux
filename/etc/passwd/filename and 
filename/etc/shadow/filename
style subsystems.  On systems that have Pluggable 
Authentication Modules (PAM)
support, all PAM modules are supported. The behavior is 
just as it was with
@@ -459,8 +457,62 @@
/listitem
/itemizedlist
 
+   /sect2
 
+   sect2
+   titleRegarding LDAP Directories and Windows Computer Accounts/title
+
+   para
+   Samba doesn't provide a turnkey solution to LDAP. It is best to 
deal with the design and configuration
+   of an LDAP directory prior to integration with Samba. A working 
knowledge of LDAP makes Samba integration
+   easy and the lack of a working knowledge of LDAP can make it 
one a frustrating experience.
+   /para
+
+   para
+   Computer (machine) accounts can be placed where ever you like 
in an LDAP directory subject to some
+   constraints that are described in this chapter.
+   /para
+
+   para
+   The POSIX and SambaSAMAccount components of computer (machine) 
accounts are both used by Samba.
+   i.e.: Machine  accounts are treated inside Samba in the same 
way that Windows NT4/200X treats
+   them. A user account and a machine account are 
indistinquishable from each other, except that
+   the machine account ends in a '$' character, as do trust 
accounts.
+   /para
+
+   para
+   The need for Windows user, group, machine, trust, etc. accounts 
to be tied to a valid UNIX uid
+   is a design decision that was made a long way back in the 
history of Samba development. It is
+   unlikely that this decision will be reversed of

svn commit: samba-docs r420 - in trunk/Samba-Guide: .

2005-03-15 Thread jht

Author: jht
Date: 2005-03-15 17:03:55 + (Tue, 15 Mar 2005)
New Revision: 420

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=420

Log:
Added index entries.
Modified:
   trunk/Samba-Guide/Chap06-MakingHappyUsers.xml


Changeset:
Modified: trunk/Samba-Guide/Chap06-MakingHappyUsers.xml
===
--- trunk/Samba-Guide/Chap06-MakingHappyUsers.xml   2005-03-15 16:57:07 UTC 
(rev 419)
+++ trunk/Samba-Guide/Chap06-MakingHappyUsers.xml   2005-03-15 17:03:55 UTC 
(rev 420)
@@ -15,6 +15,11 @@
may occur:
/para
 
+   indextermprimaryPDC/primary/indexterm
+   indextermprimarynetwork 
bandwidth/primarysecondaryutilization/secondary/indexterm
+   indextermprimaryBDC/primary/indexterm
+   indextermprimaryuser account/primary/indexterm
+   indextermprimaryPDC/BDC ratio/primary/indexterm
 cautionpara
 Notice: A significant number of network administrators have responded to the 
guidance given
 below. It should be noted that there are sites that have a single PDC for many 
hundreds of
@@ -209,11 +214,16 @@
 titleRegarding LDAP Directories and Windows Computer Accounts/title
 
para
+   
indextermprimaryLDAP/primarysecondarydirectory/secondary/indexterm
Computer (machine) accounts can be placed where ever you like in an 
LDAP directory subject to some 
constraints that are described in this section.
/para
 
para
+   indextermprimaryPOSIX/primary/indexterm
+   indextermprimarySambaSAMAccount/primary/indexterm
+   indextermprimarymachine account/primary/indexterm
+   indextermprimarytrust account/primary/indexterm
The POSIX and SambaSAMAccount components of computer (machine) accounts 
are both used by Samba. 
i.e.: Machine  accounts are treated inside Samba in the same way that 
Windows NT4/200X treats 
them. A user account and a machine account are indistinquishable from 
each other, except that
@@ -221,13 +231,17 @@
/para
 
para
-   The need for Windows user, group, machine, trust, etc. accounts to be 
tied to a valid UNIX uid
+   indextermprimaryaccount/primary/indexterm
+   indextermprimaryUID/primary/indexterm
+   The need for Windows user, group, machine, trust, etc. accounts to be 
tied to a valid UNIX UID
is a design decision that was made a long way back in the history of 
Samba development. It is 
unlikely that this decision will be reversed of changed during the 
remaining life of the 
Samba-3.x series. 
/para
 
para
+   indextermprimarySID/primary/indexterm
+   indextermprimaryNSS/primary/indexterm
The resolution of a UID from the Windows SID is achieved within Samba 
through a mechanism that
must refer back to the host operating system on which Samba is running. 
The Name Service
Switcher (NSS) is the preferred mechanism that shields applications 
(like Samba) from the
@@ -244,6 +258,7 @@
/para
 
para
+   indextermprimarynss_ldap/primary/indexterm
For many the weapon of choice is to use the PADL nss_ldap utility. This 
utility must
be configured so that computer accounts can be resolved to a POSIX/UNIX 
account UID. That
is fundamentally an LDAP design question.  The information provided on 
the Samba list and

svn commit: samba r5802 - in trunk/source/passdb: .

2005-03-15 Thread gd

Author: gd
Date: 2005-03-15 17:26:21 + (Tue, 15 Mar 2005)
New Revision: 5802

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5802

Log:
Remove needless search_attrs.

Guenther

Modified:
   trunk/source/passdb/pdb_ldap.c


Changeset:
Modified: trunk/source/passdb/pdb_ldap.c
===
--- trunk/source/passdb/pdb_ldap.c  2005-03-15 16:32:15 UTC (rev 5801)
+++ trunk/source/passdb/pdb_ldap.c  2005-03-15 17:26:21 UTC (rev 5802)
@@ -195,7 +195,6 @@
fstring tok;
const char *p;
const char **attrs;
-   const char **search_attrs;
 
/* Unfortunatly there is no proper way to detect syncrepl-support in
 * smbldap_connect_system(). The syncrepl OIDs are submitted for 
publication
@@ -247,13 +246,8 @@
 
}
 
-   if (!(str_list_copy(search_attrs, attrs))) {
-   ntstatus = NT_STATUS_NO_MEMORY;
-   goto done;
-   }
-
rc = smbldap_search(ldap_state-smbldap_state, suffix,
-   LDAP_SCOPE_BASE, (objectclass=*), search_attrs, 
0, msg);
+   LDAP_SCOPE_BASE, (objectclass=*), attrs, 0, msg);
 
if (rc != LDAP_SUCCESS) {
 
@@ -320,7 +314,6 @@
ldap_msgfree(msg);
if (mem_ctx)
talloc_destroy(mem_ctx);
-   str_list_free(search_attrs);
 
return ntstatus;
 }

svn commit: samba-docs r421 - in trunk/Samba-Guide: .

2005-03-15 Thread jht

Author: jht
Date: 2005-03-15 17:33:17 + (Tue, 15 Mar 2005)
New Revision: 421

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=421

Log:
Fixed typo.
Modified:
   trunk/Samba-Guide/Chap04-SecureOfficeServer.xml


Changeset:
Modified: trunk/Samba-Guide/Chap04-SecureOfficeServer.xml
===
--- trunk/Samba-Guide/Chap04-SecureOfficeServer.xml 2005-03-15 17:03:55 UTC 
(rev 420)
+++ trunk/Samba-Guide/Chap04-SecureOfficeServer.xml 2005-03-15 17:33:17 UTC 
(rev 421)
@@ -1848,7 +1848,7 @@
again. This time you add all three forms of name 
resolution to this file.
Your edited entry for constanthosts/constant should 
now look like this:
 screen
-hosts:   file dns wins
+hosts:   files dns wins
 /screen
The system is looking good. Let's move on.
/para/step

svn commit: samba r5803 - in trunk/source/libsmb: .

Author: jra
Date: 2005-03-15 18:21:29 + (Tue, 15 Mar 2005)
New Revision: 5803

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5803

Log:
Revert the signing change by Nalin Dahyabhai [EMAIL PROTECTED].
Seems to be incorrect (several user reports).
Jeremy.

Modified:
   trunk/source/libsmb/smb_signing.c


Changeset:
Modified: trunk/source/libsmb/smb_signing.c
===
--- trunk/source/libsmb/smb_signing.c   2005-03-15 17:26:21 UTC (rev 5802)
+++ trunk/source/libsmb/smb_signing.c   2005-03-15 18:21:29 UTC (rev 5803)
@@ -277,14 +277,17 @@
MD5Init(md5_ctx);
 
/* intialise with the key */
+   MD5Update(md5_ctx, data-mac_key.data, data-mac_key.length); 
+#if 0
+   /* JRA - apparently this is incorrect. */
/* NB. When making and verifying SMB signatures, Windows apparently
zero-pads the key to 128 bits if it isn't long enough.
From Nalin Dahyabhai [EMAIL PROTECTED] */
-   MD5Update(md5_ctx, data-mac_key.data, data-mac_key.length); 
if (data-mac_key.length  sizeof(key_buf)) {
memset(key_buf, 0, sizeof(key_buf));
MD5Update(md5_ctx, key_buf, sizeof(key_buf) - 
data-mac_key.length);
}
+#endif
 
/* copy in the first bit of the SMB header */
MD5Update(md5_ctx, buf + 4, smb_ss_field - 4);

svn commit: samba r5804 - in branches/SAMBA_3_0/source/libsmb: .

Author: jra
Date: 2005-03-15 18:21:35 + (Tue, 15 Mar 2005)
New Revision: 5804

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5804

Log:
Revert the signing change by Nalin Dahyabhai [EMAIL PROTECTED].
Seems to be incorrect (several user reports).
Jeremy.

Modified:
   branches/SAMBA_3_0/source/libsmb/smb_signing.c


Changeset:
Modified: branches/SAMBA_3_0/source/libsmb/smb_signing.c
===
--- branches/SAMBA_3_0/source/libsmb/smb_signing.c  2005-03-15 18:21:29 UTC 
(rev 5803)
+++ branches/SAMBA_3_0/source/libsmb/smb_signing.c  2005-03-15 18:21:35 UTC 
(rev 5804)
@@ -277,14 +277,17 @@
MD5Init(md5_ctx);
 
/* intialise with the key */
+   MD5Update(md5_ctx, data-mac_key.data, data-mac_key.length); 
+#if 0
+   /* JRA - apparently this is incorrect. */
/* NB. When making and verifying SMB signatures, Windows apparently
zero-pads the key to 128 bits if it isn't long enough.
From Nalin Dahyabhai [EMAIL PROTECTED] */
-   MD5Update(md5_ctx, data-mac_key.data, data-mac_key.length); 
if (data-mac_key.length  sizeof(key_buf)) {
memset(key_buf, 0, sizeof(key_buf));
MD5Update(md5_ctx, key_buf, sizeof(key_buf) - 
data-mac_key.length);
}
+#endif
 
/* copy in the first bit of the SMB header */
MD5Update(md5_ctx, buf + 4, smb_ss_field - 4);

svn commit: samba r5805 - in branches/SAMBA_3_0/source: . include rpc_client rpc_parse rpc_server

Author: jerry
Date: 2005-03-15 19:43:44 + (Tue, 15 Mar 2005)
New Revision: 5805

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5805

Log:
merging spoolss parsing changes from trunk and cleaning up resulting segvs
Added:
   branches/SAMBA_3_0/source/include/rpc_buffer.h
   branches/SAMBA_3_0/source/rpc_parse/parse_buffer.c
Modified:
   branches/SAMBA_3_0/source/Makefile.in
   branches/SAMBA_3_0/source/include/ntdomain.h
   branches/SAMBA_3_0/source/include/rpc_spoolss.h
   branches/SAMBA_3_0/source/rpc_client/cli_spoolss.c
   branches/SAMBA_3_0/source/rpc_parse/parse_misc.c
   branches/SAMBA_3_0/source/rpc_parse/parse_prs.c
   branches/SAMBA_3_0/source/rpc_parse/parse_sec.c
   branches/SAMBA_3_0/source/rpc_parse/parse_spoolss.c
   branches/SAMBA_3_0/source/rpc_server/srv_spoolss_nt.c


Changeset:
Sorry, the patch is too large (4315 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5805

svn commit: samba r5806 - in branches/SAMBA_3_0/source: libsmb rpc_server

Author: jerry
Date: 2005-03-15 20:12:51 + (Tue, 15 Mar 2005)
New Revision: 5806

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5806

Log:
* fix a couple more segvs in spoolss

* comment out unused variable after jra's change to revert the 56bit des
  smb signing changes

Modified:
   branches/SAMBA_3_0/source/libsmb/smb_signing.c
   branches/SAMBA_3_0/source/rpc_server/srv_spoolss.c
   branches/SAMBA_3_0/source/rpc_server/srv_spoolss_nt.c


Changeset:
Modified: branches/SAMBA_3_0/source/libsmb/smb_signing.c
===
--- branches/SAMBA_3_0/source/libsmb/smb_signing.c  2005-03-15 19:43:44 UTC 
(rev 5805)
+++ branches/SAMBA_3_0/source/libsmb/smb_signing.c  2005-03-15 20:12:51 UTC 
(rev 5806)
@@ -255,7 +255,10 @@
const size_t offset_end_of_sig = (smb_ss_field + 8);
unsigned char sequence_buf[8];
struct MD5Context md5_ctx;
+#if 0
+/* JRA - apparently this is incorrect. */
unsigned char key_buf[16];
+#endif
 
/*
 * Firstly put the sequence number into the first 4 bytes.

Modified: branches/SAMBA_3_0/source/rpc_server/srv_spoolss.c
===
--- branches/SAMBA_3_0/source/rpc_server/srv_spoolss.c  2005-03-15 19:43:44 UTC 
(rev 5805)
+++ branches/SAMBA_3_0/source/rpc_server/srv_spoolss.c  2005-03-15 20:12:51 UTC 
(rev 5806)
@@ -1244,6 +1244,9 @@
prs_struct *data = p-in_data.data;
prs_struct *rdata = p-out_data.rdata;

+   ZERO_STRUCT(q_u);
+   ZERO_STRUCT(r_u);
+   
if(!spoolss_io_q_getjob(, q_u, data, 0)) {
DEBUG(0,(spoolss_io_q_getjob: unable to unmarshall 
SPOOL_Q_GETJOB.\n));
return False;

Modified: branches/SAMBA_3_0/source/rpc_server/srv_spoolss_nt.c
===
--- branches/SAMBA_3_0/source/rpc_server/srv_spoolss_nt.c   2005-03-15 
19:43:44 UTC (rev 5805)
+++ branches/SAMBA_3_0/source/rpc_server/srv_spoolss_nt.c   2005-03-15 
20:12:51 UTC (rev 5806)
@@ -8752,30 +8752,25 @@
int i = 0;
BOOLfound = False;
JOB_INFO_2  *info_2;
-   WERROR  ret;
+   WERROR  result;
DEVICEMODE  *devmode = NULL;
NT_DEVICEMODE   *nt_devmode = NULL;
 
-   info_2=SMB_MALLOC_P(JOB_INFO_2);
+   if ( !(info_2=SMB_MALLOC_P(JOB_INFO_2)) )
+   return WERR_NOMEM;
 
ZERO_STRUCTP(info_2);
 
-   if (info_2 == NULL) {
-   ret = WERR_NOMEM;
-   goto done;
-   }
-
for ( i=0; icount  found==False; i++ ) 
{
if ((*queue)[i].job == (int)jobid)
found = True;
}

-   if ( !found ) 
-   {
+   if ( !found ) {
/* NT treats not found as bad param... yet another bad
   choice */
-   ret = WERR_INVALID_PARAM;
+   result = WERR_INVALID_PARAM;
goto done;
}

@@ -8799,18 +8794,18 @@
*needed += spoolss_size_job_info_2(info_2);
 
if (*needed  offered) {
-   ret = WERR_INSUFFICIENT_BUFFER;
+   result = WERR_INSUFFICIENT_BUFFER;
goto done;
}
 
if (!rpcbuf_alloc_size(buffer, *needed)) {
-   ret = WERR_INSUFFICIENT_BUFFER;
+   result = WERR_NOMEM;
goto done;
}
 
smb_io_job_info_2(, buffer, info_2, 0);
 
-   ret = WERR_OK;
+   result = WERR_OK;

  done:
/* Cleanup allocated memory */
@@ -8818,7 +8813,7 @@
free_job_info_2(info_2);/* Also frees devmode */
SAFE_FREE(info_2);
 
-   return ret;
+   return result;
 }
 
 /

svn commit: samba r5807 - in branches/SAMBA_3_0/source/printing: .

Author: jerry
Date: 2005-03-15 20:27:17 + (Tue, 15 Mar 2005)
New Revision: 5807

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5807

Log:
fix segfault after compiler warning clean up (and cleanup another warning)
Modified:
   branches/SAMBA_3_0/source/printing/printing.c


Changeset:
Modified: branches/SAMBA_3_0/source/printing/printing.c
===
--- branches/SAMBA_3_0/source/printing/printing.c   2005-03-15 20:12:51 UTC 
(rev 5806)
+++ branches/SAMBA_3_0/source/printing/printing.c   2005-03-15 20:27:17 UTC 
(rev 5807)
@@ -1032,7 +1032,7 @@
snprintf(key, sizeof(key), MSG_PENDING/%s, sharename);
 
if ( check_pending 
-tdb_fetch_uint32( pdb-tdb, key, msg_pending_time ) 
+tdb_fetch_uint32( pdb-tdb, key, 
(uint32*)msg_pending_time ) 
 msg_pending_time  0
 msg_pending_time = time_now 
 (time_now - msg_pending_time)  60 ) 
@@ -1735,9 +1735,9 @@
 
ZERO_STRUCT(data);
 
-   if (tdb_chainlock_with_timeout(pdb-tdb,
-  string_tdb_data(INFO/jobs_changed),
-  5) == -1)
+   key = string_tdb_data(INFO/jobs_changed);
+
+   if (tdb_chainlock_with_timeout(pdb-tdb, key, 5) == -1)
goto out;
 
gotlock = True;

svn commit: samba r5808 - in branches/SAMBA_3_0/source: include rpc_parse

Author: jerry
Date: 2005-03-15 20:46:26 + (Tue, 15 Mar 2005)
New Revision: 5808

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5808

Log:
removing unneeded structure field from RPC_BUFFER
Modified:
   branches/SAMBA_3_0/source/include/rpc_buffer.h
   branches/SAMBA_3_0/source/rpc_parse/parse_buffer.c


Changeset:
Modified: branches/SAMBA_3_0/source/include/rpc_buffer.h
===
--- branches/SAMBA_3_0/source/include/rpc_buffer.h  2005-03-15 20:27:17 UTC 
(rev 5807)
+++ branches/SAMBA_3_0/source/include/rpc_buffer.h  2005-03-15 20:46:26 UTC 
(rev 5808)
@@ -25,9 +25,6 @@
 #define _RPC_BUFFER_H
 
 typedef struct {
-#if 0
-   uint32 ptr;
-#endif
uint32 size;
prs_struct prs;
uint32 struct_start;

Modified: branches/SAMBA_3_0/source/rpc_parse/parse_buffer.c
===
--- branches/SAMBA_3_0/source/rpc_parse/parse_buffer.c  2005-03-15 20:27:17 UTC 
(rev 5807)
+++ branches/SAMBA_3_0/source/rpc_parse/parse_buffer.c  2005-03-15 20:46:26 UTC 
(rev 5808)
@@ -33,9 +33,6 @@
 **/
 void rpcbuf_init(RPC_BUFFER *buffer, uint32 size, TALLOC_CTX *ctx)
 {
-#if 0
-   buffer-ptr = (size != 0);
-#endif
buffer-size = size;
buffer-string_at_end = size;
prs_init(buffer-prs, size, ctx, MARSHALL);
@@ -56,19 +53,6 @@
buffer-size=0;
buffer-string_at_end=0;

-#if 0 
-   if (buffer-ptr==0) {
-   /*
-* JRA. I'm not sure if the data in here is in 
big-endian format if
-* the client is big-endian. Leave as default (little 
endian) for now.
-*/
-
-   if (!prs_init(buffer-prs, 0, prs_get_mem_context(ps), 
UNMARSHALL))
-   return False;
-   return True;
-   }
-#endif
-   
if (!prs_uint32(size, ps, depth, buffer-size))
return False;

@@ -96,15 +80,6 @@
else {
BOOL ret = False;
 
-#if 0
-   /* writing */
-   if (buffer-ptr==0) {
-   /* We have finished with the data in buffer-prs - free 
it. */
-   prs_mem_free(buffer-prs);
-   return True;
-   }
-#endif
-   
if (!prs_uint32(size, ps, depth, buffer-size))
goto out;

svn commit: samba r5809 - in branches/SAMBA_3_0/source/rpc_parse: .

Author: jerry
Date: 2005-03-15 20:51:14 + (Tue, 15 Mar 2005)
New Revision: 5809

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5809

Log:
try to catch NULL pointers during developerment for rpcbuf_move()
Modified:
   branches/SAMBA_3_0/source/rpc_parse/parse_buffer.c


Changeset:
Modified: branches/SAMBA_3_0/source/rpc_parse/parse_buffer.c
===
--- branches/SAMBA_3_0/source/rpc_parse/parse_buffer.c  2005-03-15 20:46:26 UTC 
(rev 5808)
+++ branches/SAMBA_3_0/source/rpc_parse/parse_buffer.c  2005-03-15 20:51:14 UTC 
(rev 5809)
@@ -168,8 +168,7 @@
 
 void rpcbuf_move(RPC_BUFFER *src, RPC_BUFFER **dest)
 {
-   if ( !src )
-   return;
+   SMB_ASSERT( src != NULL );
 
prs_switch_type(src-prs, MARSHALL);
if(!prs_set_offset(src-prs, 0))

svn commit: samba r5810 - in trunk/source: include printing rpc_parse rpc_server

Author: jerry
Date: 2005-03-15 20:52:25 + (Tue, 15 Mar 2005)
New Revision: 5810

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5810

Log:
merge spoolss and printing fixes back from 3.0
Modified:
   trunk/source/include/rpc_buffer.h
   trunk/source/printing/printing.c
   trunk/source/rpc_parse/parse_buffer.c
   trunk/source/rpc_server/srv_spoolss.c
   trunk/source/rpc_server/srv_spoolss_nt.c


Changeset:
Sorry, the patch is too large (1734 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5810

svn commit: samba-docs r422 - in trunk: .

2005-03-15 Thread jelmer

Author: jelmer
Date: 2005-03-15 21:22:07 + (Tue, 15 Mar 2005)
New Revision: 422

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=422

Log:
Mark some targets phony
Modified:
   trunk/Makefile


Changeset:
Modified: trunk/Makefile
===
--- trunk/Makefile  2005-03-15 17:33:17 UTC (rev 421)
+++ trunk/Makefile  2005-03-15 21:22:07 UTC (rev 422)
@@ -269,3 +269,4 @@
 
 # Always keep intermediate files if we can
 .SECONDARY:
+.PHONY: clean clobber latexfigures archive release everything all

svn commit: samba r5811 - in trunk/source/smbd: .

Author: jra
Date: 2005-03-15 23:16:50 + (Tue, 15 Mar 2005)
New Revision: 5811

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5811

Log:
We missed some RESOLVE_DFSPATH calls on pathnames for older calls.
Jeremy.

Modified:
   trunk/source/smbd/reply.c


Changeset:
Modified: trunk/source/smbd/reply.c
===
--- trunk/source/smbd/reply.c   2005-03-15 20:52:25 UTC (rev 5810)
+++ trunk/source/smbd/reply.c   2005-03-15 23:16:50 UTC (rev 5811)
@@ -701,6 +701,8 @@
return ERROR_NT(status);
}
 
+   RESOLVE_DFSPATH(fname, conn, inbuf, outbuf);
+  
unix_convert(fname,conn,0,bad_path,sbuf);
if (bad_path) {
END_PROFILE(SMBsetatr);
@@ -833,6 +835,9 @@
END_PROFILE(SMBsearch);
return ERROR_NT(nt_status);
}
+
+   RESOLVE_DFSPATH(path, conn, inbuf, outbuf);
+  
p++;
status_len = SVAL(p, 0);
p += 2;
@@ -4490,6 +4495,8 @@
return ERROR_NT(status);
}
   
+   RESOLVE_DFSPATH(newdir, conn, inbuf, outbuf);
+
if (strlen(newdir) == 0) {
ok = True;
} else {

svn commit: samba r5812 - in branches/SAMBA_3_0/source/smbd: .

Author: jra
Date: 2005-03-15 23:17:03 + (Tue, 15 Mar 2005)
New Revision: 5812

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5812

Log:
We missed some RESOLVE_DFSPATH calls on pathnames for older calls.
Jeremy.

Modified:
   branches/SAMBA_3_0/source/smbd/reply.c


Changeset:
Modified: branches/SAMBA_3_0/source/smbd/reply.c
===
--- branches/SAMBA_3_0/source/smbd/reply.c  2005-03-15 23:16:50 UTC (rev 
5811)
+++ branches/SAMBA_3_0/source/smbd/reply.c  2005-03-15 23:17:03 UTC (rev 
5812)
@@ -701,6 +701,8 @@
return ERROR_NT(status);
}
 
+   RESOLVE_DFSPATH(fname, conn, inbuf, outbuf);
+  
unix_convert(fname,conn,0,bad_path,sbuf);
if (bad_path) {
END_PROFILE(SMBsetatr);
@@ -833,6 +835,9 @@
END_PROFILE(SMBsearch);
return ERROR_NT(nt_status);
}
+
+   RESOLVE_DFSPATH(path, conn, inbuf, outbuf);
+  
p++;
status_len = SVAL(p, 0);
p += 2;
@@ -4490,6 +4495,8 @@
return ERROR_NT(status);
}
   
+   RESOLVE_DFSPATH(newdir, conn, inbuf, outbuf);
+
if (strlen(newdir) == 0) {
ok = True;
} else {

svn commit: samba r5813 - in branches/SAMBA_3_0/source/smbd: .

Author: jra
Date: 2005-03-15 23:40:47 + (Tue, 15 Mar 2005)
New Revision: 5813

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5813

Log:
Fix bug found by Jim McDonough [EMAIL PROTECTED]
Win9x can send a resume name of ... This will cause the parser to
complain (it thinks we're asking for the directory above the shared
path). Catch this as the resume name is only compared, never used in
a file access and replace it with ...
Jeremy.

Modified:
   branches/SAMBA_3_0/source/smbd/trans2.c


Changeset:
Modified: branches/SAMBA_3_0/source/smbd/trans2.c
===
--- branches/SAMBA_3_0/source/smbd/trans2.c 2005-03-15 23:17:03 UTC (rev 
5812)
+++ branches/SAMBA_3_0/source/smbd/trans2.c 2005-03-15 23:40:47 UTC (rev 
5813)
@@ -1569,7 +1569,15 @@
 
srvstr_get_path(inbuf, resume_name, params+12, sizeof(resume_name), -1, 
STR_TERMINATE, ntstatus, True);
if (!NT_STATUS_IS_OK(ntstatus)) {
-   return ERROR_NT(ntstatus);
+   /* Win9x can send a resume name of ... This will cause the 
parser to
+  complain (it thinks we're asking for the directory above the 
shared
+  path). Catch this as the resume name is only compared, never 
used in
+  a file access. JRA. */
+   if (NT_STATUS_V(ntstatus) == 
NT_STATUS_V(NT_STATUS_OBJECT_PATH_SYNTAX_BAD)) {
+   pstrcpy(resume_name, ..);
+   } else {
+   return ERROR_NT(ntstatus);
+   }
}
 
DEBUG(3,(call_trans2findnext: dirhandle = %d, max_data_bytes = %d, 
maxentries = %d, \

svn commit: samba r5814 - in trunk/source/smbd: .

Author: jra
Date: 2005-03-15 23:41:03 + (Tue, 15 Mar 2005)
New Revision: 5814

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5814

Log:
Fix bug found by Jim McDonough [EMAIL PROTECTED]
Win9x can send a resume name of ... This will cause the parser to
complain (it thinks we're asking for the directory above the shared
path). Catch this as the resume name is only compared, never used in
a file access and replace it with ...
Jeremy.

Modified:
   trunk/source/smbd/trans2.c


Changeset:
Modified: trunk/source/smbd/trans2.c
===
--- trunk/source/smbd/trans2.c  2005-03-15 23:40:47 UTC (rev 5813)
+++ trunk/source/smbd/trans2.c  2005-03-15 23:41:03 UTC (rev 5814)
@@ -1569,7 +1569,15 @@
 
srvstr_get_path(inbuf, resume_name, params+12, sizeof(resume_name), -1, 
STR_TERMINATE, ntstatus, True);
if (!NT_STATUS_IS_OK(ntstatus)) {
-   return ERROR_NT(ntstatus);
+   /* Win9x can send a resume name of ... This will cause the 
parser to
+  complain (it thinks we're asking for the directory above the 
shared
+  path). Catch this as the resume name is only compared, never 
used in
+  a file access. JRA. */
+   if (NT_STATUS_V(ntstatus) == 
NT_STATUS_V(NT_STATUS_OBJECT_PATH_SYNTAX_BAD)) {
+   pstrcpy(resume_name, ..);
+   } else {
+   return ERROR_NT(ntstatus);
+   }
}
 
DEBUG(3,(call_trans2findnext: dirhandle = %d, max_data_bytes = %d, 
maxentries = %d, \

svn commit: samba r5815 - in trunk/source/smbd: .

Author: jra
Date: 2005-03-15 23:46:12 + (Tue, 15 Mar 2005)
New Revision: 5815

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=5815

Log:
Catch the . resume name case also.
Jeremy.

Modified:
   trunk/source/smbd/trans2.c


Changeset:
Modified: trunk/source/smbd/trans2.c
===
--- trunk/source/smbd/trans2.c  2005-03-15 23:41:03 UTC (rev 5814)
+++ trunk/source/smbd/trans2.c  2005-03-15 23:46:12 UTC (rev 5815)
@@ -1569,12 +1569,14 @@
 
srvstr_get_path(inbuf, resume_name, params+12, sizeof(resume_name), -1, 
STR_TERMINATE, ntstatus, True);
if (!NT_STATUS_IS_OK(ntstatus)) {
-   /* Win9x can send a resume name of ... This will cause the 
parser to
+   /* Win9x or OS/2 can send a resume name of .. or .. This 
will cause the parser to
   complain (it thinks we're asking for the directory above the 
shared
-  path). Catch this as the resume name is only compared, never 
used in
+  path or an invalid name). Catch this as the resume name is 
only compared, never used in
   a file access. JRA. */
-   if (NT_STATUS_V(ntstatus) == 
NT_STATUS_V(NT_STATUS_OBJECT_PATH_SYNTAX_BAD)) {
+   if (NT_STATUS_EQUAL(ntstatus,NT_STATUS_OBJECT_PATH_SYNTAX_BAD)) 
{
pstrcpy(resume_name, ..);
+   } else if 
(NT_STATUS_EQUAL(ntstatus,NT_STATUS_OBJECT_NAME_INVALID)) {
+   pstrcpy(resume_name, .);
} else {
return ERROR_NT(ntstatus);
}

svn commit: samba r5816 - in branches/SAMBA_3_0/source/smbd: .