Re: [Samba] Excel files Locking up problem
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hi, try setting dos filetimes = yes in the share Regards Adrian Chow schrieb: Hi, My samba is 3.0.13 version. I got a funny problem. UserA logs on to a shared (all users can read/write/execute rights) drive and opens an excel file. UserA closes the file or modifies it. When UserA reopens the file in 5 secs or less, the file seems to be lock by the computer that UserA is on! When UserA had closed the file, UserB on another computer tries to open the file and it says it is locked by UserA. There is no way to release it unless to wait or restart samba. Any ideas what I should do? They are using Windows XP SP2. Some other users are using Windows 2000. Does Norton AntiVirus play a part? Any ideas how to solve this? Regards, adrian - -- Mit freundlichen Gruessen Best Regards Robert Schetterer robert_at_schetterer.org Munich / Bavaria / Germany https://www.schetterer.org \** \* gnupgp \* public key: \* https://www.schetterer.org/public.key \** -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCUON4+Jw+56iSjEkRAqJrAJ92IjAYuysokOeqUZ+vnR1nx26bpACfWLdj m8p1wcGVcDVktwNnaEJibD0= =OfSr -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] macintosh file clutter on samba filesystems.
On Sunday 03 April 2005 15:50, Matt Pruett wrote: I have a client who has a bunch of macs accessing some samba shares, and they write these ._filename and .DS_STORE files all over the place, he would perfer it to not write these files at all. Anyone ran into this issue? what would be the best way to prevent these files from getting written onto the shares? veto? -- Matt Pruett [EMAIL PROTECTED] You can use the hide files directive, but windows clients can override it with a show hidden files option in the tools menu of a directory window. If most users have the default view options, this is an excellent way to hide the files. veto files works too. If the macintosh clients are accessing the share via netatalk or some other appletalk-on-unix service, then the veto files directive will not affect them at all. And likely, if they are using MacOSX windows networking, it won't prevent them from accessing the share, but they may be annoyed about how it looks. Here's what I have: veto files = /Network Trash Folder/TheVolumeSettingsFolder/Desktop Folder/TheFindByContentFolder/Temporary Items/.DS_Store/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba - wireless - PDC
On Sunday 03 April 2005 14:29, [EMAIL PROTECTED] wrote: Hello I wonder how I could get my linux box to serve logins to a Windows Me box. At the moment samba is running but I cannot access home dirs (No user log on). Since ME (wireless card DWL+G520) accesses an AP (DI 624 - 192.168.0.1 + ADSL) and the card manager comes up at end of the booting process, I have no idea how to get a user log on box (To be honest I don't know if this is possible - first time playing with ME). I suppose the real question is does the Windows client cache credentials? I have dealt with wireless logons in a domain environment with Win2k and WinXP Pro clients. Here's what I found: Basically, after you logon once over an ethernet connection, your username and password are cached locally. Thereafter, it's possible to logon wirelessly. I gather the wireless authentication process is something like this: First you authenticate connectionlessly with the cached credential, then wireless networking starts up and contacts the server. Nine times out of 10, the logon script manages to mount the shares. For that 1 out of 10 times that the shares don't get mounted, we have a shortcut on the desktop to a local copy of the logon script. Note that the above will not work for windows users mapped to unix users in the smbusers file. For example, administrator on windows is commonly mapped to root on unix. Well, if I logon wirelessly, I logon as unix user root with the windows user administrator password. Doesn't make sense, I know, but it works. Here's a step-by-step windows ME client configuration for connection to a samba server. Obviously your settings will be different, but it may be useful nonetheless. http://www.ualberta.ca/CNS/SAMBA/winMEstep1.htm -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] IE improperly prompts for credentials; ntlm_auth with Samba 3.0.13, Squid 2.5.STABLE7, RedHat Linux 9.0, SmartFilter 4.01
This turned into the mother of all system integration exercises and I **almost** have it working. I am trying to set up proxy authorization using: RedHat Linux 9.0, MIT Kerberos 1.4 built from source, Samba 3.0.13 built from source, Squid 2.5.STABLE7 built from source SmartFilter 4.01. Active Directory with Windows 2003 Why not use RPMs? Well - ADS support for Windows 2003 needs Kerberos 1.3 or newer. But RedHat 9.0 has Kerberos 1.2.7 and zillions of RedHat packages depend on it. So I need krb5 1.4 in another tree and everything pretty much flows from that. See below for details on how I built all this, with attributions to everyone who has helped so far. Once this is up and running, I'll update my step by step instructions and post them. So below is a snapshot as of right now and will likely change in a few hours. Here is, I think, my last remaining problem getting this into production. Whenever I launch IE on a client PC, IE prompts the user for credentials. IE is supposed to just pass the credentials to Squid without annoying the user for this, but it doesn't and this is making me nuts. If the user enters domain\username password s(he) gets to the desired website via Squid/SmartFilter and I assume I can set appropriate SmartFilter policies to regulate usage. But it is not acceptable for a user to always enter credentials and this combination of software is supposed to eliminate that hassle. I must be missing something... From Windows, I can browse to the Linux box via My Network Places and view its Samba shares. From Linux, getent passwd returns all the A/D usernames and getent group returns all the A/D groups. From Linux, /usr/local/samba/bin/wbinfo -g, /usr/local/samba/bin/wbinfo -u, and /usr/local/samba/bin/wbinfo -t work as advertised and return my A/D groups, users, and verify the trust relationship. /usr/local/samba/bin/ntlm_auth --username=[USERNAME] works as advertised - success if a good username/password, failure otherwise. Similarly, /usr/local/samba/bin/ntlm_auth --helper-protocol=squid-2.5-basic works as advertised and returns OK if a good username/password, ERR otherwise. Running /usr/local/samba/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp returns output I don't understand, but the Squid FAQ says you can't really test this one by hand anyway. This all suggests Samba is good. Here are the relevant lines from /usr/local/etc/squid.conf . . . # TAG: auth_param # This is used to define parameters for the various authentication # schemes supported by Squid. # # format: auth_param scheme parameter [setting] # # The order in which authentication schemes are presented to the client is . . . auth_param basic children 5 #auth_param basic realm Squid proxy-caching web server #auth_param basic credentialsttl 2 hours auth_param basic casesensitive off # Site specific configs auth_param ntlm program /usr/local/samba/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp auth_param ntlm children 30 auth_param ntlm max_challenge_reuses 0 auth_param ntlm max_challenge_lifetime 2 minutes auth_param basic program /usr/local/samba/bin/ntlm_auth --helper-protocol=squid-2.5-basic auth_param basic children 5 auth_param basic realm Squid proxy-caching web server auth_param basic credentialsttl 2 hours . . . # # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS # Example rule allowing access from your local networks. Adapt # to list your (internal) IP networks from where browsing should # be allowed #acl our_networks src 192.168.1.0/24 192.168.2.0/24 #http_access allow our_networks ##acl my_network src 175.10.0.0/16 ##http_access allow my_network acl AuthorizedUsers proxy_auth REQUIRED http_access allow all AuthorizedUsers ##acl password proxy_auth REQUIRED ##http_access allow password # And finally deny all other access to this proxy http_access deny all . . . This spawns another question - why do I need an auth_param for both ntlm and basic authentication? What's the difference? Lots of documentation all over the place says I need both and in this order but I haven't found anything that says why. Could this be a key to my problem? Thanks - Greg Scott [EMAIL PROTECTED] Here are the build notes - remember, this is a snapshot in time, useful right now for debugging. Below is a work in progress. For Squid authentication with an Active Directory domain, we need Samba, set up with Kerberos. Redhat Linux 9.0 ships with Kerberos version 5, revision 1.2.7-10. Unfortunately, we need at least rev 1.3 to work with Windows 2003. See this URL for a discussion: http://lists.samba.org/archive/samba/2004-July/090137.html The fc3 RPM directory has rev 1.3 RPMs. Unfortunately, several dozen components in RedHat 9.0 depend on the 1.2.7 RPMs installed, especially the Kerberos libraries. So we need to build a copy of Kerberos from source
Re: [Samba] macintosh file clutter on samba filesystems.
Matt Pruett wrote: I have a client who has a bunch of macs accessing some samba shares, and they write these ._filename and .DS_STORE files all over the place, he would perfer it to not write these files at all. Anyone ran into this issue? what would be the best way to prevent these files from getting written onto the shares? veto? The ._filename file is a part of the Macintosh file - if you prevent it being written then you will get errors when a Mac tries to write files on the share, if you delete it then you will damage the file (from the Macs point of view). Whilst many applications these days can cope with this damage (they don't use the resource fork, and can use the file extension to identify the file type), in other cases deleting the ._filename will make the file totally useless. Simon -- Simon Hobson MA MIEE, Technology Specialist Colony Gift Corporation Limited Lindal in Furness, Ulverston, Cumbria, LA12 0LD Tel 01229 461100, Fax 01229 461101 Registered in England No. 1499611 Regd. Office : 100 New Bridge Street, London, EC4V 6JA. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] nvidia service and profiles not updating
Hi, I am new to the list so please excuse if this has come up recently. I can reliably reproduce the problem with having the nvidia service enabled on startup, which comes with their drivers as default active, stops my machines from having access to their roaming profiles. The problem is described here: http://lists.samba.org/archive/samba/2004-April/084023.html This is a very recent driver (75.90) and Windows XP with SP2. Samba is Redhat EL4 version 3.0.10 with domain logons enabled. Evrerything works fine if the service is disabled at startup so I omit my smb.conf. Question is, is there a solution to have this service enabled? Thanks Rainer -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Mounting Samba shares under KDE 3.x
Hi, I'm trying to mount the samba shares into my SuSE 9.2 workstation, with no luck. Our server is in production, so there's nothing wrong in our samba server. But I can't mount my shares under KDE. Doing it with mount -t smbfs gives me a lot of Time Out errors, and the mount is unable to show any files. Seems that the smbfs module is broken in the 2.6.8 kernel. I don't know if this is a kernel problem or SuSE problem. Mounting with CIFS works flawlessly in console. But Konqueror hangs solid when accessing the mounted directory. I've tested it with KDE 3.3 and KDE 3.4 and same problem. But using the smb:// functionality under konqueror works fine. The problem with this approach is that KDE don't let me mount (as far I know) these shares under my filesystem, and a lot of apps don't like accessing docs in this way. I must copy the files, work locally and return them in the samba server. Really I'm clueless with this issue. Anybody has succeeded mounting samba shares under SuSE 9.2 and KDE 3.x? Thanks Joaquin Villanueva IT Director ASOCIACION CLUBS BALONCESTO -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Mounting Samba shares under KDE 3.x
Hi, I'm trying to mount the samba shares into my SuSE 9.2 workstation, with no luck. Our server is in production, so there's nothing wrong in our samba server. But I can't mount my shares under KDE. Doing it with mount -t smbfs gives me a lot of Time Out errors, and the mount is unable to show any files. Seems that the smbfs module is broken in the 2.6.8 kernel. I don't know if this is a kernel problem or SuSE problem. Mounting with CIFS works flawlessly in console. But Konqueror hangs solid when accessing the mounted directory. I've tested it with KDE 3.3 and KDE 3.4 and same problem. But using the smb:// functionality under konqueror works fine. The problem with this approach is that KDE don't let me mount (as far I know) these shares under my filesystem, and a lot of apps don't like accessing docs in this way. I must copy the files, work locally and return them in the samba server. Really I'm clueless with this issue. Anybody has succeeded mounting samba shares under SuSE 9.2 and KDE 3.x? Thanks Joaquin Villanueva IT Director ASOCIACION CLUBS BALONCESTO -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] No smb.conf file !
Good morning all, I configured samba 3 on a Red Hat machine, I then built and installed it. The problem is that after installation has finished, I couldn't find the samba configuration file smb.conf. Any idea please? Bahya __ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] ADS and local user account authentication
Hi, I have a problem which I've been searching the Internet for a day and still can't resolve. Basically we have our Samba server joined to our ADS but we have a need to have local user accounts on the Samba server authenticated also because we cannot have them in the ADS. All required workstations have these accounts as local accounts not domain accounts. The question is how can I do this? I tried to modify the pam.d/login and pam.d/samba and also playing with the users.map file. Yes the smbpasswd file contains the correct information. Pam.d/login and pam.d/samba looks like this (just about): auth required pam_nologin.so auth sufficient pam_smbpass.so nodelay auth sufficient pam_stack.so service=system-auth accountrequired pam_stack.so service=system-auth sessionrequired pam_stack.so service=system-auth password required pam_stack.so service=system-auth The only thing that seems to work is when prompt for the password to give sambaservername\thelocaluser I tried to play with the users.map file to give something like: Samba\user = user But Samba then takes it as [EMAIL PROTECTED] Anyone have any ideas how I can get the local accounts in Samba authentication to work? Thanks in advance!!! Cheers, -Alan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] No smb.conf file !
find / -name smb.conf or updatedb locate smb.conf best regards, José Luis Ledesma ___ Competitiveness Telephone: +34 93 582 02 90 Email: [EMAIL PROTECTED] Website: http://www.competitiveness.com -Original Message- From: Bahya NASSR EDDINE [mailto:[EMAIL PROTECTED] Sent: lunes, 04 de abril de 2005 12:08 To: samba@lists.samba.org Subject: [Samba] No smb.conf file ! Good morning all, I configured samba 3 on a Red Hat machine, I then built and installed it. The problem is that after installation has finished, I couldn't find the samba configuration file smb.conf. Any idea please? Bahya __ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] No smb.conf file !
I've already run find command, but no smb.conf file was found. It should normally exist on /etc/samba or /usr/local/samba/lib directories. This is not the case! Kind regards --- José Luis Ledesma [EMAIL PROTECTED] wrote: find / -name smb.conf or updatedb locate smb.conf best regards, José Luis Ledesma ___ Competitiveness Telephone: +34 93 582 02 90 Email: [EMAIL PROTECTED] Website: http://www.competitiveness.com -Original Message- From: Bahya NASSR EDDINE [mailto:[EMAIL PROTECTED] Sent: lunes, 04 de abril de 2005 12:08 To: samba@lists.samba.org Subject: [Samba] No smb.conf file ! Good morning all, I configured samba 3 on a Red Hat machine, I then built and installed it. The problem is that after installation has finished, I couldn't find the samba configuration file smb.conf. Any idea please? Bahya __ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba __ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] NT_STATUS_ACCESS_DENIED with winbindd authentication
Hi, We're running a print server having the following specifications: Samba 3.0.11 Suse 9.1 Kernel 2.6.5-7.108 kernel A few days back none of the users were able to log onto the print server. The debug 10 logs show the following lines: [2005/03/29 11:21:05, 5] auth/auth.c:check_ntlm_password(271) check_ntlm_password: winbind authentication for user [**user-name**] FAILED with error NT_STATUS_ACCESS_DENIED Does anyone have any ideas about why winbindd would throw up an ACCESS_DENIED? Thanks Sridhar -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] No smb.conf file !
Well... on the bright side : there can't be any errors in it then :-) :-) Silly, joke; but I couldn't resist. I would just start my own; there are lots of 'basic' examples on the web. http://www.google.be/search?hl=nlq=sample+samba+config+filebtnG=Google+zoekenmeta= should get you well on your way. Kind regards, Bert De Ridder PeopleWare NV - Head Office Cdt.Weynsstraat 85 B-2660 Hoboken Tel: +32 3 448.33.38 Fax: +32 3 448.32.66 PeopleWare NV - Branch Office Geel Kleinhoefstraat 5 B-2440 Geel Tel: +32 14 57.00.90 Fax: +32 14 58.13.25 http://www.peopleware.be http://www.mobileware.be u r lame if u insist on trying 2 b l337 by abbrev evythng u type when asking ppl 4 hlp. kiddie speak is teh sux. ppl. plz stop teh kiddie speak. thx. hint: aol kiddie speak is not cool, it just makes people not want to read your post. Bahya NASSR EDDINE [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 04/04/2005 12:40 To José Luis Ledesma [EMAIL PROTECTED], samba@lists.samba.org cc Subject RE: [Samba] No smb.conf file ! I've already run find command, but no smb.conf file was found. It should normally exist on /etc/samba or /usr/local/samba/lib directories. This is not the case! Kind regards --- José Luis Ledesma [EMAIL PROTECTED] wrote: find / -name smb.conf or updatedb locate smb.conf best regards, José Luis Ledesma ___ Competitiveness Telephone: +34 93 582 02 90 Email: [EMAIL PROTECTED] Website: http://www.competitiveness.com -Original Message- From: Bahya NASSR EDDINE [mailto:[EMAIL PROTECTED] Sent: lunes, 04 de abril de 2005 12:08 To: samba@lists.samba.org Subject: [Samba] No smb.conf file ! Good morning all, I configured samba 3 on a Red Hat machine, I then built and installed it. The problem is that after installation has finished, I couldn't find the samba configuration file smb.conf. Any idea please? Bahya __ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba __ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] No smb.conf file !
This is not the first time I use samba 3 :-). I've never had such problem! May be my problem is due to an error during the samba 3 download process. Now, I am downloading the latest stable version of samba (samba 3.0.13). I'll then install it. I will let you know the result! Thanks all! Bahya --- [EMAIL PROTECTED] wrote: Well... on the bright side : there can't be any errors in it then :-) :-) Silly, joke; but I couldn't resist. I would just start my own; there are lots of 'basic' examples on the web. http://www.google.be/search?hl=nlq=sample+samba+config+filebtnG=Google+zoekenmeta= should get you well on your way. Kind regards, Bert De Ridder PeopleWare NV - Head Office Cdt.Weynsstraat 85 B-2660 Hoboken Tel: +32 3 448.33.38 Fax: +32 3 448.32.66 PeopleWare NV - Branch Office Geel Kleinhoefstraat 5 B-2440 Geel Tel: +32 14 57.00.90 Fax: +32 14 58.13.25 http://www.peopleware.be http://www.mobileware.be u r lame if u insist on trying 2 b l337 by abbrev evythng u type when asking ppl 4 hlp. kiddie speak is teh sux. ppl. plz stop teh kiddie speak. thx. hint: aol kiddie speak is not cool, it just makes people not want to read your post. Bahya NASSR EDDINE [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 04/04/2005 12:40 To José Luis Ledesma [EMAIL PROTECTED], samba@lists.samba.org cc Subject RE: [Samba] No smb.conf file ! I've already run find command, but no smb.conf file was found. It should normally exist on /etc/samba or /usr/local/samba/lib directories. This is not the case! Kind regards --- José Luis Ledesma [EMAIL PROTECTED] wrote: find / -name smb.conf or updatedb locate smb.conf best regards, José Luis Ledesma ___ Competitiveness Telephone: +34 93 582 02 90 Email: [EMAIL PROTECTED] Website: http://www.competitiveness.com -Original Message- From: Bahya NASSR EDDINE [mailto:[EMAIL PROTECTED] Sent: lunes, 04 de abril de 2005 12:08 To: samba@lists.samba.org Subject: [Samba] No smb.conf file ! Good morning all, I configured samba 3 on a Red Hat machine, I then built and installed it. The problem is that after installation has finished, I couldn't find the samba configuration file smb.conf. Any idea please? Bahya __ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba __ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba __ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Aliased interface/multi-smb on one machine + security = DOMAIN model
Thanks, but these aliased hosts already are in DNS, so I don't think that is the issue. Everything I do doesn't seem to change which IP smbpasswd uses to bind to the PDC when joining the domain. Here is the machine's IP layout.. eth0 Link encap:Ethernet HWaddr 00:0B:CD:0F:1E:B1 inet addr:10.254.100.100 Bcast:10.254.255.255 Mask:255.255.0.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:55377 errors:0 dropped:0 overruns:0 frame:0 TX packets:55214 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:5964315 (5.6 Mb) TX bytes:5527609 (5.2 Mb) Interrupt:11 eth0:0Link encap:Ethernet HWaddr 00:0B:CD:0F:1E:B1 inet addr:10.254.100.150 Bcast:10.255.255.255 Mask:255.0.0.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) Interrupt:11 eth0:1Link encap:Ethernet HWaddr 00:0B:CD:0F:1E:B1 inet addr:10.254.100.151 Bcast:10.255.255.255 Mask:255.0.0.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) Interrupt:11 The 2 SMB services in question are using the aliased interfaces, however when I issue the smbpasswd -j/with options it uses 10.254.100.100 to bind with the PDC. Thanks, Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Tony Earnshaw Sent: Friday, April 01, 2005 4:11 PM To: samba@lists.samba.org Subject: RE: [Samba] Aliased interface/multi-smb on one machine + security = DOMAIN model Chris Rutledge: After thinking about it, I ran a quick test and discovered that during the smbpasswd domain registration it uses the machines primary IP, not the alias per the config file...how do I tell smbpasswd to use a different IP when registering? Separate host/ip combo in /etc/hosts or DNS for each? That's what I do for something completely different. Actually I use DNS, including PTR records. [...] --Tonni -- mail: [EMAIL PROTECTED] http://www.billy.demon.nl -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba The information contained in this email and any attachments may be privileged and/or confidential and protected from disclosure. It is intended solely for the use of the recipient(s) to whom it is addressed, or an employee or agent responsible for delivering this message to the intended recipient(s). You are hereby notified that any dissemination, distribution, copying or other use of this communication is strictly prohibited. If you have received this communication in error, please notify the sender by reply email and delete this email and all attachments from your system. Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] No smb.conf file !
On Monday 04 April 2005 04:07, Bahya NASSR EDDINE wrote: Good morning all, I configured samba 3 on a Red Hat machine, I then built and installed it. The problem is that after installation has finished, I couldn't find the samba configuration file smb.conf. Any idea please? The documentation is a good place to start! http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf Probably chapter 1 may help. Anyhow, here is how to find where it should be put on your system: smbd -b | grep conf That should tell you where to locate it. - John T. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] RE: MYSQL - Was Functional till Update to 3.13
i miss the ' foo:mysql host = xxx.xxx.xxx.xxx ' also what is your log-file telling you? does it find the backend? did something else change aswell ? Greet's Collen Ben Gaide wrote: I updated samba from 3.10 to 3.13 to get the updated print fixes, but I noticed today that the smbpasswd script no longer functions. It fails to update the the following fields. domain http://db.csmfiji.org/mysql/sql.php?lang=en-iso-8859-1server=1db=sambatable=userpos=30session_max_rows=30disp_direction=horizontalrepeat_cells=100dontlimitchars=0sql_query=SELECT+%2A+FROM+%60user%60++ORDER+BY+%60domain%60+ASC nt_username http://db.csmfiji.org/mysql/sql.php?lang=en-iso-8859-1server=1db=sambatable=userpos=30session_max_rows=30disp_direction=horizontalrepeat_cells=100dontlimitchars=0sql_query=SELECT+%2A+FROM+%60user%60++ORDER+BY+%60nt_username%60+ASC nt_fullname http://db.csmfiji.org/mysql/sql.php?lang=en-iso-8859-1server=1db=sambatable=userpos=30session_max_rows=30disp_direction=horizontalrepeat_cells=100dontlimitchars=0sql_query=SELECT+%2A+FROM+%60user%60++ORDER+BY+%60nt_fullname%60+ASC home_dir http://db.csmfiji.org/mysql/sql.php?lang=en-iso-8859-1server=1db=sambatable=userpos=30session_max_rows=30disp_direction=horizontalrepeat_cells=100dontlimitchars=0sql_query=SELECT+%2A+FROM+%60user%60++ORDER+BY+%60home_dir%60+ASC dir_drive http://db.csmfiji.org/mysql/sql.php?lang=en-iso-8859-1server=1db=sambatable=userpos=30session_max_rows=30disp_direction=horizontalrepeat_cells=100dontlimitchars=0sql_query=SELECT+%2A+FROM+%60user%60++ORDER+BY+%60dir_drive%60+ASC logon_script http://db.csmfiji.org/mysql/sql.php?lang=en-iso-8859-1server=1db=sambatable=userpos=30session_max_rows=30disp_direction=horizontalrepeat_cells=100dontlimitchars=0sql_query=SELECT+%2A+FROM+%60user%60++ORDER+BY+%60logon_script%60+ASC profile_path http://db.csmfiji.org/mysql/sql.php?lang=en-iso-8859-1server=1db=sambatable=userpos=30session_max_rows=30disp_direction=horizontalrepeat_cells=100dontlimitchars=0sql_query=SELECT+%2A+FROM+%60user%60++ORDER+BY+%60profile_path%60+ASC acct_desc http://db.csmfiji.org/mysql/sql.php?lang=en-iso-8859-1server=1db=sambatable=userpos=30session_max_rows=30disp_direction=horizontalrepeat_cells=100dontlimitchars=0sql_query=SELECT+%2A+FROM+%60user%60++ORDER+BY+%60acct_desc%60+ASC workstations http://db.csmfiji.org/mysql/sql.php?lang=en-iso-8859-1server=1db=sambatable=userpos=30session_max_rows=30disp_direction=horizontalrepeat_cells=100dontlimitchars=0sql_query=SELECT+%2A+FROM+%60user%60++ORDER+BY+%60workstations%60+ASC unknown_str http://db.csmfiji.org/mysql/sql.php?lang=en-iso-8859-1server=1db=sambatable=userpos=30session_max_rows=30disp_direction=horizontalrepeat_cells=100dontlimitchars=0sql_query=SELECT+%2A+FROM+%60user%60++ORDER+BY+%60unknown_str%60+ASC munged_dial http://db.csmfiji.org/mysql/sql.php?lang=en-iso-8859-1server=1db=sambatable=userpos=30session_max_rows=30disp_direction=horizontalrepeat_cells=100dontlimitchars=0sql_query=SELECT+%2A+FROM+%60user%60++ORDER+BY+%60munged_dial%60+ASC uid http://db.csmfiji.org/mysql/sql.php?lang=en-iso-8859-1server=1db=sambatable=userpos=30session_max_rows=30disp_direction=horizontalrepeat_cells=100dontlimitchars=0sql_query=SELECT+%2A+FROM+%60user%60++ORDER+BY+%60uid%60+ASC gid http://db.csmfiji.org/mysql/sql.php?lang=en-iso-8859-1server=1db=sambatable=userpos=30session_max_rows=30disp_direction=horizontalrepeat_cells=100dontlimitchars=0sql_query=SELECT+%2A+FROM+%60user%60++ORDER+BY+%60gid%60+ASC user_sid http://db.csmfiji.org/mysql/sql.php?lang=en-iso-8859-1server=1db=sambatable=userpos=30session_max_rows=30disp_direction=horizontalrepeat_cells=100dontlimitchars=0sql_query=SELECT+%2A+FROM+%60user%60++ORDER+BY+%60user_sid%60+ASC group_sid http://db.csmfiji.org/mysql/sql.php?lang=en-iso-8859-1server=1db=sambatable=userpos=30session_max_rows=30disp_direction=horizontalrepeat_cells=100dontlimitchars=0sql_query=SELECT+%2A+FROM+%60user%60++ORDER+BY+%60group_sid%60+ASC Please let me know if you have any ideas. Sorry I didnt include the appropriate config file so I will atach the appropriate section now. Please not it is 3.0.13 not 3.13 as that would be impossible. # Samba Password Database configuration: passdb backend = mysql:foo foo:mysql user = samba foo:mysql password = PASSWORD foo:mysql database = samba foo:domain column = 'DOMAIN' -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] No smb.conf file !
Anyhow, here is how to find where it should be put on your system: smbd -b | grep conf Thank you for your reply. As I told in a previous message to the list, I have already used Samba many times! I have never had such problem. Any way, I run the command you suggested and it returned the config file location (which is /usr/local/samba/lib/smb.conf), however the config file does not exist in that location! I downloaded and built samba 3.0.13 but the problem is still here! __ Découvrez le nouveau Yahoo! Mail : 250 Mo d'espace de stockage pour vos mails ! Créez votre Yahoo! Mail sur http://fr.mail.yahoo.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] NT_STATUS_WRONG_PASSWORD with multiple concurrent connects from same IP Address.
We are having a problem with SAMBA v 3.0.13 on Linux where a windows client (single IP address) makes multiple connections at the same time (different processes) to copy files onto our SAMBA server. As many as 20 simultaneous connections/file transfers may be occurring from the same client IP address. Some of the files succeed, and some fail. The windows client reports that the directory does not exist... All copies are done by the same user id, but are running as separate processes on the windows server (Therefore, I believe, separate authentications for each). I have turned on Log level 2, and see the following message in my log file for the failed attempts: [2005/03/30 14:33:03, 2] auth/auth.c:check_ntlm_password(307) check_ntlm_password: Authentication for user [det-liv-cd1] - [det-liv-cd1] FAILED with error NT_STATUS_WRONG_PASSWORD Just prior to, and right after these error messages, there are messages saying that the user ID and password were accepted! det-liv-cd1 is a local user id, and this same user ID is used for all the transfers. We've tried changing the max mux setting 5000, and this seems to reduce, but not eliminate the number of failures. Any Ideas what may be happening?...or what we could look at next to try to resolve this problem? TIA )David Girard -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NT_STATUS_ACCESS_DENIED with winbindd authentication
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sridhar Venkatakrishnan wrote: | Hi, | | We're running a print server having the following specifications: | | Samba 3.0.11 | Suse 9.1 | Kernel 2.6.5-7.108 kernel | | A few days back none of the users were able to log onto the print | server. The debug 10 logs show the following lines: | | [2005/03/29 11:21:05, 5] auth/auth.c:check_ntlm_password(271) | check_ntlm_password: winbind authentication for user [**user-name**] | FAILED with error NT_STATUS_ACCESS_DENIED | | Does anyone have any ideas about why winbindd would throw up | an ACCESS_DENIED? Is you DC a Windows 2003 SP1 box ? Are you using 'security = domain' ? If so this is a known issue we are still investigating. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc I never saved anything for the swim back. Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCUV0dIR7qMdg1EfYRAkn7AKCG2B6lNUR1qFPflyOpsTQnFJtnsACffisJ dE7kBevU2iV1MibVEyBGu9A= =TZfy -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] macintosh file clutter on samba filesystems.
If I veto them will it prevent them from getting created on the filesystem in the first place? And them being annoyed with the way it looks isnt a big deal since several were actually being annoyed that one person had set it up to look a certain way and annother didnt like it.. etc. On Mon, 2005-04-04 at 00:12 -0700, Matthew Easton wrote: On Sunday 03 April 2005 15:50, Matt Pruett wrote: I have a client who has a bunch of macs accessing some samba shares, and they write these ._filename and .DS_STORE files all over the place, he would perfer it to not write these files at all. Anyone ran into this issue? what would be the best way to prevent these files from getting written onto the shares? veto? -- Matt Pruett [EMAIL PROTECTED] You can use the hide files directive, but windows clients can override it with a show hidden files option in the tools menu of a directory window. If most users have the default view options, this is an excellent way to hide the files. veto files works too. If the macintosh clients are accessing the share via netatalk or some other appletalk-on-unix service, then the veto files directive will not affect them at all. And likely, if they are using MacOSX windows networking, it won't prevent them from accessing the share, but they may be annoyed about how it looks. Here's what I have: veto files = /Network Trash Folder/TheVolumeSettingsFolder/Desktop Folder/TheFindByContentFolder/Temporary Items/.DS_Store/ !DSPAM:4250e93d73175305820540! -- Matt Pruett [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Windows Update using samba
Hi, Im' trying to put a SUS server on my network, iv'e already installed it, i've a PDC using samba, and my clients get registry configuration to get the updates using a Netconfig.pol file this parts works ok. So I'm having troubles with my clients, they don't get the updates from the server when they are into the samba domain it looks like they don't see the sus server, i tried adding SUS server to the domain but it doesn't work; on the other hand when they are independent (outside the domain) the get the updates and install them (using the same registr configuration). So anybody knows what is the problem here? signature.asc Description: Esta parte del mensaje =?ISO-8859-1?Q?est=E1?= firmada digitalmente -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Excel files Locking up problem
On Mon, Apr 04, 2005 at 11:30:29AM +0800, Adrian Chow wrote: Hi, My samba is 3.0.13 version. I got a funny problem. UserA logs on to a shared (all users can read/write/execute rights) drive and opens an excel file. UserA closes the file or modifies it. When UserA reopens the file in 5 secs or less, the file seems to be lock by the computer that UserA is on! When UserA had closed the file, UserB on another computer tries to open the file and it says it is locked by UserA. There is no way to release it unless to wait or restart samba. Any ideas what I should do? They are using Windows XP SP2. Some other users are using Windows 2000. Does Norton AntiVirus play a part? Any ideas how to solve this? Try setting dos filetimes = yes on that share. I've made this the default for the next release. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Unix-password-sync in LDAP?
Hello, how can I change the user-passwords correctly in my OpenLDAP during Windows-password-change? My problem: The script does only change userPassword, but not the field shadowLastChange, so my unix-passwords expired. unix password sync = yes passwd program = /etc/samba/scripts/ldap_userPassword_change %u passwd chat = *New*password* %n\n *new*password* %n\n *Success* #/etc/samba/scripts/ldap_userPassword_change ldappasswd -x -h server-D 'uid=userPassChange,ou=administration,o=dom,c=com' -w pass -S uid=$1,ou=users,o=dom,c=com Regards; matze -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Permissions assignment problem
On Fri, Apr 01, 2005 at 03:11:01PM -0500, David B Harris wrote: Hey there, I am, for the first time, playing around with Samba seriously (mainly thinking about replacing NFS with it). I'm using a Linux 2.6.x client with the cifs.ko kernel module/filesystem type. I've found that I can't change the permissions on files to arbitrary values; they must not be greater than the bits specified in 'create mask' (and friends). The problem appears to be source/smbd/trans2.c:795 (function unix_perms_from_wire); I think it's applying lp_create_mask unconditionally (instead of just applying it when a file's being created - I suppose it doesn't know one way or another, of course). Yes, this is by design. If you want full client control over the mode bits on a share you must set create mask = 0777 It's a bit of a misnomer, as the parameter was added when we couldn't modify individual UNIX permissions from a client. It should really be named mode mask I suppose. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Permissions assignment problem
On Mon Apr 04, 10:39am -0700, Jeremy Allison wrote: On Fri, Apr 01, 2005 at 03:11:01PM -0500, David B Harris wrote: I've found that I can't change the permissions on files to arbitrary values; they must not be greater than the bits specified in 'create mask' (and friends). The problem appears to be source/smbd/trans2.c:795 (function unix_perms_from_wire); I think it's applying lp_create_mask unconditionally (instead of just applying it when a file's being created - I suppose it doesn't know one way or another, of course). Yes, this is by design. If you want full client control over the mode bits on a share you must set create mask = 0777 Hmm, okay - that, at least, explains why that's the way it works :) Thanks for the reply. Out of curiosity, though, do you know of any way to give full client control over the mode bits _without_ also effectively forcing the client's umask to 000? (Or is this a problem with the Linux cifs client module?) -- Arguing with an engineer is like wrestling with a pig in mud. After a while, you realise the pig is enjoying it. OpenPGP v4 key ID: 4096R/59DDCB9F Fingerprint: CC53 F124 35C0 7BC2 58FE 7A3C 157D DFD9 59DD CB9F Retreive from subkeys.pgp.net or risk key corruption -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Not Printing From Windows Machine
Well, I have some windows machines that sees the folders and printers shared on samba, they access the folders and files normally, but when they open the Windows printer manager, it shows an message access denied, unable to connect. My problem is that some of them (that shows that message) arent able to use the printer and some others use the printer normally. Someone has any idea? thanks, hugo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 2.07 AIX
We have several Samba servers, and a few running PVCS . The group that manages, supports PVCS (Version 7.5.1 ) is having a problem deleting files from Samba shares on an AIX Server version 5.2 They do not have a similar problem on 2 of our Solaris Servers, 2.8 The difference we see between the AIX server and the 2 Solaris Servers, is the version of Samba. On The Solaris Servers Samba is version 2.2.8a, or the AIX server it is 2.07. There is thought these things started occurring when the users were migrated to Windows Active Directory . I'm not too certain they didn't begin occurring once the Desktop O/S was upgraded from Windows NT to XP . ( Some of the errors returned mention not being able to handle file extended rights..) There doesn't seem to be any logic as to when files can be deleted and when they can't. I'm curious to ask you, Do you think the version of Samba could be the cause ? Is Samba 2.0.7 too old to support Active Directory and extended file rights ? If anyone has ever heard or seen of anything like this, or similar could you let me know. Thanks, -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: User names longer than 8 characters
Somehow, I solved it, but I'm not completely sure how. sigh It MIGHT had to do that I had confused smbpasswd -x with smbpasswd -d (delete vs. disabled), that I was trying to delete the user with smbpasswd -d instead that using -x. Everything got fixed up while trying to compare two logs, one for the user that was working and one for the user that wasn't working, so I tried to reset everything: removed both users from /etc/passwd and from the samba user database with smbpasswd -x and added them again. I also brought the service up and down several times just to ensure changes were being applied. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba and CUPS driver download
I've set up the automatic driver download as per the instructions in the Official Samba-3 HOWTO. The printers are browseable on the Samba/CUPS server (named Venus in this case), however, when I try to connect to the printer via a Windows 2000 or XP machine, I get an error: The server on which the printer resides does not have the correct printer driver installed. If you want to install the driver on your local computer, click OK. The driver on the Venus is the cups-samba driver (version 5.0rc3), and is using the Lexmark Optra E312 Foomatic/Postscript (recommended) driver from Linuxprinting.org. The printer name is Printer_CLC_Sat_212 (in CUPS and Samba). What makes things more interesting is that another printer, Printer_CLC_Sat_220 (the last number is the classroom number) also resides on Venus, and when I try to connect to this printer (using the same Windows 2000 machine), it connects just fine. If I try to connect to yet another printer, Printer_AUX_HP (this is the printer in my office), again, it connects just fine, and prints. Is 212's configuration corrupted in Samba? I also run netatalk on this server to provide print services to our OS 9 and 10 clients, but I've yet to see any sort of headbutting between the two services. Any tips would be appreciated, Theodore Charles III Network Administrator Los Angeles Senior High -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 2.07 AIX
Sullivan, Joe FPCMS írta: We have several Samba servers, and a few running PVCS . The group that manages, supports PVCS (Version 7.5.1 ) is having a problem deleting files from Samba shares on an AIX Server version 5.2 They do not have a similar problem on 2 of our Solaris Servers, 2.8 The difference we see between the AIX server and the 2 Solaris Servers, is the version of Samba. On The Solaris Servers Samba is version 2.2.8a, or the AIX server it is 2.07. There is thought these things started occurring when the users were migrated to Windows Active Directory . I'm not too certain they didn't begin occurring once the Desktop O/S was upgraded from Windows NT to XP . ( Some of the errors returned mention not being able to handle file extended rights..) There doesn't seem to be any logic as to when files can be deleted and when they can't. I'm curious to ask you, Do you think the version of Samba could be the cause ? Is Samba 2.0.7 too old to support Active Directory and extended file rights ? Yes it is I had a working Samba 2.0.7 few years ago, and yes I had problems with extended rights. Fortunately I haven't ever had AD /NT4 DOMControlers on production systems. As probably anybody else from this list I would suggest an upgrade to Samba 3.0.13 as big lots of bugs performance problems have been fixed since 2.2.8. In fact the 2.x.y branch is no longer maintained. If anyone has ever heard or seen of anything like this, or similar could you let me know. Thanks, Cheers Geza -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Problems with Excel MS Word files (EVEN - still ANY ideas?)
On Wed, Mar 30, 2005 at 02:30:36PM -0500, Nathan Vidican wrote: Still experiencing two issues here; we get smbd processes that seem hung-out and climb to 99% CPU utilization... While there, the end-user's PC seems to spawn a new smbd process and cannot access the MS Office file (sometimes excel, sometimes word - even powerpoint this morning), stating it's locked for read only access. We manually do a kill, then a forced kill of the smbd process in question, and the office app actually then immediately crashes loosing any other documents open. So the second issue, is the locking up of end users' files. Can you try this patch against 3.0.13 please ? It may be the problem you're seeing. Jeremy. --- /home/jeremy/tmp/samba-3.0.13/source/smbd/dir.c 2005-03-23 12:30:27.0 -0800 +++ smbd/dir.c 2005-04-01 11:55:34.0 -0800 @@ -573,8 +573,6 @@ } } - dptr-has_wild = True; - /* In case sensitive mode we don't search - we know if it doesn't exist with a stat we will fail. */ @@ -584,6 +582,7 @@ dptr-dir_hnd-offset = *poffset = -1; return NULL; } else { + dptr-has_wild = True; return dptr_normal_ReadDirName(dptr, poffset, pst); } } @@ -602,7 +601,7 @@ return False; } - while (SearchDir(dptr-dir_hnd, name, poffset) == True) { + if (SearchDir(dptr-dir_hnd, name, poffset)) { if (is_visible_file(dptr-conn, dptr-path, name, pst, True)) { return True; } -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] REPOST: Simultaneous Share Access via NFS/SMB
Did not get a response so I am reposting. I have a share that has been exported via NFS as well as shared using Samba 3.0. On the Windows side, all authentication is currently done using Winbind and Active Directory. On the standalone Samba server (also authenticated using Windbind) where the exported NFS resides, I have the same local Unix user (identified by the same name and UID/GID) that I have on each Unix (Mac/Linux) host that needs to access the NFS export. I also have name mappings setup in my smb.conf file. Currently, unless the file/directory is explicitly owned by xuser, the unix hosts are not able to access that resource. Other than name mappings, I am not quite sure how to allow access to my NFS clients wanting to access these network shares without changing ownership of the user/group to my xuser The goal is that the unix username will map transparently to a Windows User/Group, but I am not quite sure how to manage this. My questions are as follows: Must IDMAPing be the same on all unix hosts before this will work?; and/or Can this be easily solved using the net groupmap command utility? Thanks in advance for your time and consideration. jyana -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Strange LDAP add machine problem
I'm setting up a Samba/LDAP PDC (samba-3.0.13 / openldap-2.1.30) and I'm trying to join a machine (called melisa) to the domain. When I try to join the domain, I type in the Administrator (which maps to root) credentials. and after a few seconds I get a windows error that says: The following error occurred while attempting to joing the domain PCA-USERS: The user name could not be found. The machine was successfully added to the ldap dir, in ou=Computers, but I can't seem to figure out why I'm getting this error. I saw the following searches in my slapd.log: SRCH base=dc=pca-wichita,dc=com scope=2 filter=((uid=melisa$)(objectClass=sambaSamAccount)) SRCH base=ou=Users,dc=pca-wichita,dc=com scope=1 filter=((objectClass=posixAccount)(uid=melisa$)) The first search returned 1 entry, but the second search returned 0. I'm not really sure why it's looking in ou=Users and using a scope of 1 (isn't that the base scope?). My smb.conf settings have the following: ldap user suffix = ou=Users ldap machine suffix = ou=Computers Does anyone know of anything else I can look at to try and troubleshoot this problem? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Strange LDAP add machine problem
Ben Davis wrote: I'm setting up a Samba/LDAP PDC (samba-3.0.13 / openldap-2.1.30) and I'm trying to join a machine (called melisa) to the domain. When I try to join the domain, I type in the Administrator (which maps to root) credentials. and after a few seconds I get a windows error that says: The following error occurred while attempting to joing the domain PCA-USERS: The user name could not be found. I have the same problem. The only way I am able to add a machine is to: 1. Create the posix machine account using chpass (I run on FreeBSD) 2. smbpasswd -m -a Machine_Name 3. Use my ldap gui tool to edit the ldap entry created by smbpasswd with the additional info. 'Tis a royal pain in the arse. Don't know whyhaven't had time to play with the smbldap_useradd.pl pearl script. The machine was successfully added to the ldap dir, in ou=Computers, but I can't seem to figure out why I'm getting this error. I saw the following searches in my slapd.log: SRCH base=dc=pca-wichita,dc=com scope=2 filter=((uid=melisa$)(objectClass=sambaSamAccount)) SRCH base=ou=Users,dc=pca-wichita,dc=com scope=1 filter=((objectClass=posixAccount)(uid=melisa$)) The first search returned 1 entry, but the second search returned 0. I'm not really sure why it's looking in ou=Users and using a scope of 1 (isn't that the base scope?). My smb.conf settings have the following: ldap user suffix = ou=Users ldap machine suffix = ou=Computers Does anyone know of anything else I can look at to try and troubleshoot this problem? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Permissions assignment problem
man, 04.04.2005 kl. 20.26 skrev David B Harris: Arguing with an engineer is like wrestling with a pig in mud. After a while, you realise the pig is enjoying it. I immediately recognized the argument for 's/engineer/Windows/g' here. At least that was my interpretation. Is this sig copyrighted, or can I use it with my adaptation? --Tonni -- Nothing sucksseeds like a pigeon without a beak ... mail: [EMAIL PROTECTED] http://www.billy.demon.nl They love us, don't they, They feed us, won't they ... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] No smb.conf file !
man, 04.04.2005 kl. 12.07 skrev Bahya NASSR EDDINE: I configured samba 3 on a Red Hat machine, I then built and installed it. The problem is that after installation has finished, I couldn't find the samba configuration file smb.conf. Any idea please? If you don't understand basic Unix/Linux system administration and the basic Unix/Linux system commands (including find, locate and their ilk, which you obviously don't) and are running Red Hat, stick to rpms and srpms which will put everything in the correct Red Hat places. This includes the Samba 3 srpms (God bless Jerry and Co. not only for this, but a whole lot of Red Hat compatibility issues to boot). Then go ahead and learn rpmbuild. --Tonni -- Nothing sucksseeds like a pigeon without a beak ... mail: [EMAIL PROTECTED] http://www.billy.demon.nl They love us, don't they, They feed us, won't they ... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Unix-password-sync in LDAP?
man, 04.04.2005 kl. 19.34 skrev Matthias Spork: how can I change the user-passwords correctly in my OpenLDAP during Windows-password-change? My problem: The script does only change userPassword, but not the field shadowLastChange, so my unix-passwords expired. shadowLastChange (a specific LDAP attribute for objectClass shadowAccount that doesn't have to be there at all) has nothing to do with Samba or Windows. unix password sync = yes userPassword is an LDAP attribute for objectClass posixAccount that *does* have to be there for Samba. unix password sync = yes applies to posixAccount, not to shadowAccount. --Tonni -- Nothing sucksseeds like a pigeon without a beak ... mail: [EMAIL PROTECTED] http://www.billy.demon.nl They love us, don't they, They feed us, won't they ... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Permissions assignment problem
man, 04.04.2005 kl. 19.39 skrev Jeremy Allison: I am, for the first time, playing around with Samba seriously (mainly thinking about replacing NFS with it). I'm using a Linux 2.6.x client with the cifs.ko kernel module/filesystem type. I've found that I can't change the permissions on files to arbitrary values; they must not be greater than the bits specified in 'create mask' (and friends). The problem appears to be source/smbd/trans2.c:795 (function unix_perms_from_wire); I think it's applying lp_create_mask unconditionally (instead of just applying it when a file's being created - I suppose it doesn't know one way or another, of course). Yes, this is by design. If you want full client control over the mode bits on a share you must set create mask = 0777 It's a bit of a misnomer, as the parameter was added when we couldn't modify individual UNIX permissions from a client. It should really be named mode mask I suppose. What about ACLS and the inherit acls default? --Tonni (Grown to love ACLs) -- Nothing sucksseeds like a pigeon without a beak ... mail: [EMAIL PROTECTED] http://www.billy.demon.nl They love us, don't they, They feed us, won't they ... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] new release Idealx tools SMBLDAP-TOOLS-0.8.8
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi all, to who it may concern as i just study freshmeat i found SMBLDAP-TOOLS-0.8.8 was released new today http://samba.idealx.org/dist/ - -- Mit freundlichen Gruessen Best Regards Robert Schetterer robert_at_schetterer.org Munich / Bavaria / Germany https://www.schetterer.org \** \* gnupgp \* public key: \* https://www.schetterer.org/public.key \** -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCUa+t+Jw+56iSjEkRAtbZAJ0TTi9rWVzUpe56U+xCnlgbtm1d9QCghat+ u6ANM7fAIYYZEmEL9cBUKvI= =lBcM -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.11 hammering NIS
I installed Samba recently on a ClearCase server (Solaris 8) to remove the need for DiskAccess on the Windows clients. I'm having two problems with it, actually. The important one that I'm asking the list about is that Samba is hammering my NIS master with requests for DoMaiN+UseR (and every conceivable combination of cases--note + instead of \, per winbind separator statement in config file, though the same problem manifested with the default \). This results in hundreds of requests per authentication need. I've mitigated the problem somewhat by making the server a NIS slave, so it's no longer using the network to make these requests. However, my ypserv process is chewing up almost an entire CPU by itself, and is slowing everything else down. I have my nsswitch.conf to use 'winbind' before NIS, but that doesn't seem to have helped. (The other problem has to do with ClearCase munging up path names (mixing \ and / within a single pathname). Haven't been able to reproduce that problem outside of Rational ClearCase, so I haven't bothered the Samba list with it.--anyone know how to tell Samba to treat both \ and / as /?) Here are my global settings, and one of the shares. Does it have to do with the 'username level' perhaps? I started this config file with an existing/working config file from another project, and modified it from /security = server/ to /security = domain/ (and made other appropriate changes). This output is from testparm: # Global parameters [global] workgroup = MYDOMAIN interfaces = ce*, 127.0.0.1 bind interfaces only = Yes security = DOMAIN password server = W2003-in-NT-emulation.my.win.domain.com username level = 5 log file = /var/samba/log/clients/%m max log size = 50 socket options = IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=65536 SO_SNDBUF=65535 add machine script = /usr/sbin/useradd -d /var/lib/nobody -g 100 -s /bin/false -M %u preferred master = No local master = No domain master = No wins server = 1.2.3.236 kernel oplocks = No lock directory = /var/samba/lock pid directory = /var/samba/run template homedir = /npd/%U winbind separator = + winbind use default domain = Yes hosts deny = 1.2.3.4, 1.2.3.5 case sensitive = No mangled names = No oplocks = No [rational] comment = ClearCase Share path = /rational read only = No force create mode = 0664 force directory mode = 0775 guest ok = Yes --Dragon **In theory, there is no difference between theory and practice. But, in practice, there is. ** -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] [ #HNP-63953-355]: read it immediately
Thank you for contacting the Viewpoint Help Desk. There is no need to reply to this message. Your e-mail has generated ticket ID HNP-63953-355 and will be assigned to the next available Viewpoint Customer Support representative. Any future correspondence regarding this issue should reference the ticket ID HNP-63953-355 in the subject. Our 'Help Desk' office hours (Eastern Time) are: Monday through Friday: 9am to 6pm Our standard response time is within 2 hours. However, it may take up to a day to reply under heavy loads. In the meantime, please feel free to visit our Viewpoint support forums at: http://viewpoint.infopop.cc/eve/ubb.x Thanks! Viewpoint Help Desk Viewpoint, Inc. (NASDAQ: VWPT) [EMAIL PROTECTED] http://www.viewpoint.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba through a NAT router
Hi, My network topology is as follows: Netgear Linksys DG632WRT54G DSL Modem --- Switch --- WAP/Router | (NAT)| | | Samba server (dude) +-- Win2000 PC 192.168.4.101 (Mum) 192.168.1.5 | +-- WinXP PC 192.168.4.100 (Tosh) Dude is configured as follows: # Global parameters [global] workgroup = HOME server string = Samba Server guest account = ftp log file = /var/log/samba/%m.log max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 os level = 255 domain master = Yes dns proxy = No wins support = Yes ldap ssl = no remote announce = 192.168.4.255 192.168.3.255 remote browse sync = 192.168.4.255 192.168.3.255 cups options = raw name resolve order = wins,lmhosts,host,bcast [homes] comment = Home Directories read only = No browseable = yes [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [music] comment = Music files used by slimserver path = /home/slimserver/music write list = robin read only = No [test] comment = Test share path = /home/test write list = robin read only = No If I connect the WinXP machine to the 192.168.1.x network I can connect to and use the shares on the samba server. However, when connected to the 192.168.4.x network I am unable to browse or connect to the shares. If I give the full domain name of the samba server (dude.robinbowes.com) I can see the shares, e.g.: C:\Documents and Settings\robinnet view \\dude.robinbowes.com Shared resources at \\dude.robinbowes.com Samba Server Share name Type Used as Comment --- homes Disk Home Directories music Disk Music files used by slimserver robin Disk Home Directories testDisk Test share The command completed successfully. Is there some way to enable browsing across the NAT-enable router? Thanks, R. -- http://robinbowes.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba through a NAT router
Robin Bowes wrote: Hi, My network topology is as follows: Netgear Linksys DG632WRT54G DSL Modem --- Switch --- WAP/Router | (NAT)| | | Samba server (dude) +-- Win2000 PC 192.168.4.101 (Mum) 192.168.1.5 | +-- WinXP PC 192.168.4.100 (Tosh) Dude is configured as follows: # Global parameters [global] workgroup = HOME server string = Samba Server guest account = ftp log file = /var/log/samba/%m.log max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 os level = 255 domain master = Yes dns proxy = No wins support = Yes ldap ssl = no remote announce = 192.168.4.255 192.168.3.255 remote browse sync = 192.168.4.255 192.168.3.255 cups options = raw name resolve order = wins,lmhosts,host,bcast [homes] comment = Home Directories read only = No browseable = yes [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [music] comment = Music files used by slimserver path = /home/slimserver/music write list = robin read only = No [test] comment = Test share path = /home/test write list = robin read only = No If I connect the WinXP machine to the 192.168.1.x network I can connect to and use the shares on the samba server. However, when connected to the 192.168.4.x network I am unable to browse or connect to the shares. Yeah, you need a wins server on 64 node for that. You can still map by IP addy though. If I give the full domain name of the samba server (dude.robinbowes.com) I can see the shares, e.g.: C:\Documents and Settings\robinnet view \\dude.robinbowes.com Shared resources at \\dude.robinbowes.com Samba Server Share name Type Used as Comment --- homes Disk Home Directories music Disk Music files used by slimserver robin Disk Home Directories testDisk Test share The command completed successfully. Is there some way to enable browsing across the NAT-enable router? Thanks, R. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Mounting Samba shares under KDE 3.x
Hi, I'm trying to mount the samba shares into my SuSE 9.2 workstation, with no luck. Our server is in production, so there's nothing wrong in our samba server. But I can't mount my shares under KDE. Doing it with mount -t smbfs gives me a lot of Time Out errors, and the mount is unable to show any files. Seems that the smbfs module is broken in the 2.6.8 kernel. I don't know if this is a kernel problem or SuSE problem. Mounting with CIFS works flawlessly in console. But Konqueror hangs solid when accessing the mounted directory. I've tested it with KDE 3.3 and KDE 3.4 and same problem. But using the smb:// functionality under konqueror works fine. The problem with this approach is that KDE don't let me mount (as far I know) these shares under my filesystem, and a lot of apps don't like accessing docs in this way. I must copy the files, work locally and return them in the samba server. Really I'm clueless with this issue. Anybody has succeeded mounting samba shares under SuSE 9.2 and KDE 3.x? This works for me with SuSE 9.1: # smbmount //server/share /mnt/point -o username=some_user The user must have appropriate permissions in Samba and the Linux file systems. Also, for SuSE see /etc/samba/smbfstab. This file has instructions for mounting the shares during boot. Bruce -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Help! Unable to join domain :(
Hi all, I have been working on this for days to no avail. I am unable to join any machine to my domain. I think the server's machine password got corrupted but don't know how to change it. From the PDC, I try: oink:/usr/local/src/samba-3.0.12/source # net join PDC Password: Could not connect to server CORPSRV The username or password was not correct. From a member server, I try: furnsrv:~ # net join MEMBER Password: [2005/04/04 18:13:56, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(27 error setting trust account password: NT_STATUS_ACCESS_DENIED Unable to join domain CORP. Or: (as another privileged account) furnsrv:~ # net join MEMBER -U misty Password: [2005/04/04 18:17:25, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(279) error setting trust account password: NT_STATUS_ACCESS_DENIED Unable to join domain CORP. From a Windows workstation I get a similar thing. From member servers I am able to use smbclient to authenticate to the PDC, except as 'root' user which doesn't work. On the PDC I cannot auth with smbclient as any user at all. My users are all able to log in just fine. Samba 3.0.12 and 3.0.13 have produced the same results. I have even tried deleting all non-printing TDB files and starting over again. No help! I don't have anything weird in LDAP ACLs and I've verified with ldapsearch that the entries are able to be seen. I can see no obvious errors in a log level 10. I'm sorry because I've already basically sent this email before, but got no answers at all. My domain was working fine before Thursday when I updated to 3.0.13. Misty :( -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Help! Unable to join domain :(
More info: Here is my smb.conf on my PDC: [global] workgroup = CORP netbios name = CORPSRV server string = Corp File Server security = user password server = * domain logons = yes username map = /usr/local/samba/lib/smbusers log file = /data/samba/log/%m.log log level = 5 #max log size = 50 debug timestamp = yes logon script = logon.bat logon path = \\%L\profiles\%U\%a logon drive = H: logon home = \\%L\%U time server = yes printing = cups printcap = cups printcap cache time = 60 load printers = yes show add printer wizard = no force printername = yes wins support = yes os level = 100 preferred master = yes domain master = yes local master = yes remote announce = 192.168.2.255/CORP remote browse sync = 192.168.2.255 name resolve order = wins bcast lmhosts host wins proxy = yes dns proxy = yes passdb backend = ldapsam:ldap://127.0.0.1/ #ldapsam:trusted = yes ldap suffix = dc=borkholder,dc=com ldap admin dn = cn=Manager,dc=borkholder,dc=com ldap group suffix = ou=Groups ldap user suffix = ou=People ldap machine suffix = ou=Computers ldap idmap suffix = ou=People ldap ssl = no ldap passwd sync = yes add user script = /usr/local/sbin/smbldap-useradd -m %u ldap delete dn = no #delete user script = /usr/local/sbin/smbldap-userdel %u add machine script = /usr/local/sbin/smbldap-useradd -t 5 -w %u add group script = /usr/local/sbin/smbldap-groupadd -p %g #delete group script = /opt/IDEALX/sbin/smbldap-groupdel %g add user to group script = /usr/local/sbin/smbldap-groupmod -m %u %g delete user from group script = /usr/local/sbin/smbldap-groupm od -x %u %g set primary group script = /usr/local/sbin/smbldap-usermod -g %g %u admin users = root @Domain Admins printer admin = root @Domain Admins socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 deadtime = 60 encrypt passwords = yes #use spnego = no Here is the smb.conf of a member server: [global] workgroup = CORP netbios name = FURNSRV server string = Furniture File Server security = domain password server = 192.168.1.101 wins server = 192.168.1.101 wins support = no wins proxy = yes dns proxy = yes os level = 99 local master = yes domain master = no preferred master = yes log file = /usr/local/samba/var/userlog/%m.log log level = 2 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 SO_BROADCAST printing = cups printcap = cups remote browse sync = 192.168.1.255 interfaces = 127.0.0.1 192.168.2.3 bind interfaces only = yes name resolve order = wins bcast lmhosts host hide dot files = Yes inherit permissions = Yes inherit acls = Yes Here is the error I get when I try to use smbclient on the PDC itself: SPNEGO login failed: Logon failure session setup failed: NT_STATUS_LOGON_FAILURE Here is the same thing on the member server: furnsrv:~ # smbclient -L CORPSRV -W CORP -U CORP/root added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0 added interface ip=192.168.2.3 bcast=192.168.2.255 nmask=255.255.255.0 Got a positive name query response from 192.168.1.101 ( 192.168.1.101 ) Password: Domain=[CORP] OS=[Unix] Server=[Samba 3.0.12] Sharename Type Comment - --- acct_hp8500 Printer Accounting Color Laser Printer plotter Printer Engineering Plotter netlogonDisk Network logon service softwareDisk Software for Samba computers public Disk Public Files PDF Disk Location of documents printed to PDFCreator printer EVERYTHING Disk All shares APPSDisk ACCTDisk HR_PR Disk ENGRDisk DATADisk X Disk NETWORK Disk UTILS Disk CDROM Disk CD-ROM on CORPSRV IPC$IPC IPC Service (Corp File Server) ADMIN$ IPC IPC Service (Corp File Server) truss_hp5n Printer HP Laserjet 5n truss_hp4050Printer HP Laserjet 4050 truss_hp4 Printer HP Laserjet 4 PDFcreator Printer Create PDF files furnlaser Printer FAX Printer Create FAX Files engr_hp1300 Printer rootDisk Home Directories Domain=[CORP] OS=[Unix] Server=[Samba 3.0.12] Server Comment ---- CORPSRV Corp File Server FURNSRV Furniture File Server LNXMISTY Samba 3.0.13 NTENGRECEPT NTFURNOFFICE NTJEREMY NTJOHNK NTLISA NTMIKE NTRECEPTIONIST NTTIM NTTRUSS SQW TRUSSRV
Re: [Samba] Windows Update using samba
On Mon, 2005-04-04 at 11:42 -0500, Cesar Sanabria Pineda wrote: Hi, Im' trying to put a SUS server on my network, iv'e already installed it, i've a PDC using samba, and my clients get registry configuration to get the updates using a Netconfig.pol file this parts works ok. So I'm having troubles with my clients, they don't get the updates from the server when they are into the samba domain it looks like they don't see the sus server, i tried adding SUS server to the domain but it doesn't work; on the other hand when they are independent (outside the domain) the get the updates and install them (using the same registr configuration). So anybody knows what is the problem here? SUS is served out via HTTP I think, so it really should not matter regarding domain membership - I think your policy options might not be correct. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] IE improperly prompts for credentials; ntlm_auth with Samba 3.0.13, Squid 2.5.STABLE7, RedHat Linux 9.0, SmartFilter 4.01
On Mon, 2005-04-04 at 02:24 -0500, Greg Scott wrote: This turned into the mother of all system integration exercises and I **almost** have it working. I am trying to set up proxy authorization using: Your description of the IE login appears to be of a single dialog 'username' and 'password'. You are only using NTLM if you have a 3- field dialog. Look (using ethereal) and see if NTLM is offered - if not, then you have a squid configuration problem. Your squid config looks correct - ntlm and basic (plaintext) auth must be configured separately, as they take different helpers (or in the ntlm_auth case, different modes of the same helper). Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NT_STATUS_ACCESS_DENIED with winbindd authentication
Our DC is an NT4 SP6 box. I haven't been able to reproduce this problem reliably, but if I keep trying to access a printer share, the operations time out occasionally. Thanks Sridhar On Apr 4, 2005 8:28 AM, Gerald (Jerry) Carter [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sridhar Venkatakrishnan wrote: | Hi, | | We're running a print server having the following specifications: | | Samba 3.0.11 | Suse 9.1 | Kernel 2.6.5-7.108 kernel | | A few days back none of the users were able to log onto the print | server. The debug 10 logs show the following lines: | | [2005/03/29 11:21:05, 5] auth/auth.c:check_ntlm_password(271) | check_ntlm_password: winbind authentication for user [**user-name**] | FAILED with error NT_STATUS_ACCESS_DENIED | | Does anyone have any ideas about why winbindd would throw up | an ACCESS_DENIED? Is you DC a Windows 2003 SP1 box ? Are you using 'security = domain' ? If so this is a known issue we are still investigating. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc I never saved anything for the swim back. Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCUV0dIR7qMdg1EfYRAkn7AKCG2B6lNUR1qFPflyOpsTQnFJtnsACffisJ dE7kBevU2iV1MibVEyBGu9A= =TZfy -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba NTLM Authentication
Hi, When Iam trying to get authenticated by the windows 2000 active directory pdc iam getting access denied error in my ie browser after entering username and password on a windows machine. Domain joining is sucessful. but iam unable to retrieve user / group info. the following versions of samba and squid iam using on redhat 9 samba 3.0.13 squid 2.5.stable3-0 along with active directory on windows 2000. Anybody plz help me with the steps tobe followed. Krishna Mohan Sr. Soft. Engg. - Do you Yahoo!? Yahoo! Mail - Find what you need with new enhanced search. Learn more. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Browsing through a tunnelled VPN connection
Hi there, I am trying to determine the best way for this to be done. I'm currently using a VPN software package called OpenVPN, which I connect to through a tunneled connection. When I connect to the VPN I am given an IP address of 192.168.3.6, and a subnet mask of 255.255.255.252. The Samba server has an IP address of 192.168.2.101 and has a subnet mask of 255.255.255.128. A WINS server address of 192.168.2.101 is pushed to my VPN client when I connect. Once I connect to the VPN I can access each computer on the network, including the Samba server by typing their netbios name pre-pended by a \\. However, I am unable to browse to these computers via Network Neighborhood on my Windows 98 machine, nor My Network Places on any of my Windows XP machines. I believe I had enabled WINS on the Samba server, which I was under the impression it would enable this even though the computers do not broadcast like on a local network or bridged VPN connection. Was I incorrect in this assumption? If so, are there any potential options that I may have available to accomplish this--the cosmetic issue of being able to see the computers on the network via My Network Places even when connected via a tunneled VPN connection? Thank you, Rory Erickson -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE : Vim detects a file on a VMS Samba share has changed when it has not
It is true that the VMS modification is changed when the file is opened in read/write mode, even if the file is not actually written. In fact, the modification date is changed when the file is closed. In order to fix that, in version 2.2.8, Samba keeps track if the file is really changed (i.e. written) or not. When the close request is received, and if the file was not really written, then the modification date is forced to the old modification date (the one the file had when opened). Note that the number of revisions field is not reset, so we have a file with a higher number of revisions, but the same modification date. I guess it would be better if the number of revisions was reset too. I'll make that change when I have time. Now, what happens with VIM? For the moment, I really don't know, because I can't reproduce the problem, probably because I don't have the same environment. What I can see when I try to use vim/cream on my systems is: 1. Just after the beginning of the edit, the number of revisions in increased by 2 with vim alone, and by 3 with cream over vim. 2. The number of revisions does not change after that 3. The modification date is correctly reset (i.e. it does not change) whatever the file owner is. If I compare with what happens in Ben Armstrong's environment, I can see the following differences: 1. The number of revisions is increased by 4 as soon as the editing begins 2. The number of revisions seems to be increased continuously 3. When the editor is not the owner of the file, the modification date is not correctly reset. I think that differences 1 and 2 are caused by the fact we don't have the exact same version of vim, and/or we do not have the exact same cream configuration. I suggest to Ben to try with vim alone (i.e. without the cream layer) to see what happens (check that the behaviour is the same as mine). I don't understand difference 3. It could be some privilege or file protection issue. However, I try with users without any privileges, and my file protection, as far as I know, are the same as Ben's, and I can't get the same results. Could you give me all the details about the file protections and the characteristics of your users? If we can't find the reason, I plan to give to Ben a modified module that will do more logging about the modification time reset processing. JY PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING: http://www.catb.org/~esr/faqs/smart-questions.html
Re: RE : Vim detects a file on a VMS Samba share has changed when it has not
On Mon, 2005-04-04 at 12:02 +0200, COLLOT Jean-Yves wrote: I think that differences 1 and 2 are caused by the fact we don't have the exact same version of vim, and/or we do not have the exact same cream configuration. I suggest to Ben to try with vim alone (i.e. without the cream layer) to see what happens (check that the behaviour is the same as mine). I tried with Vim alone. The bug is not reproducible. I don't understand difference 3. It could be some privilege or file protection issue. However, I try with users without any privileges, and my file protection, as far as I know, are the same as Ben's, and I can't get the same results. Could you give me all the details about the file protections and the characteristics of your users? Users are all unprivileged and belong to the [dv,*] group. Nightly, a generic dymax user (also unprivileged) handles batch processing of our task files. Thus, on a typical morning when I'm deciding what to do for the day, my task file initially is owned by [dv,dymax]. Several seconds after I start editing this file with Cream, the warning message is triggered. If I write the file, it becomes owned by [dv,bg] (my vms uid) and no further warnings appear. If I subsequently edit this file now owned by [dv,bg] the warning no longer appears. Also, if, before I start editing, I change the ownership alone (e.g. by set file/own=bg from a privileged account) and edit it (i.e. without first changing the file type from Variable to Stream) the warning no longer appears. So far as I can see, ownership is definitely a factor. If we can't find the reason, I plan to give to Ben a modified module that will do more logging about the modification time reset processing. That would be helpful, thanks. I'll have to wait for Rod to finish his vacation before installing it, though. He's coming back a week from tomorrow. So, if I have time, I'll see what else I can do to try to isolate the problem and/or make it reproducible for you this week. Thanks, Ben PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING: http://www.catb.org/~esr/faqs/smart-questions.html
svn commit: samba r6189 - in branches/SAMBA_4_0/source/librpc/ndr: .
Author: metze Date: 2005-04-04 14:22:28 + (Mon, 04 Apr 2005) New Revision: 6189 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6189 Log: move function to the right place metze Modified: branches/SAMBA_4_0/source/librpc/ndr/ndr.c Changeset: Modified: branches/SAMBA_4_0/source/librpc/ndr/ndr.c === --- branches/SAMBA_4_0/source/librpc/ndr/ndr.c 2005-04-04 05:52:53 UTC (rev 6188) +++ branches/SAMBA_4_0/source/librpc/ndr/ndr.c 2005-04-04 14:22:28 UTC (rev 6189) @@ -660,6 +660,11 @@ return ndr_token_store(ndr, ndr-switch_list, p, val); } +NTSTATUS ndr_print_set_switch_value(struct ndr_print *ndr, const void *p, uint32_t val) +{ + return ndr_token_store(ndr, ndr-switch_list, p, val); +} + /* retrieve a switch value */ @@ -673,14 +678,6 @@ return ndr_token_peek(ndr-switch_list, p); } -NTSTATUS ndr_print_set_switch_value(struct ndr_print *ndr, const void *p, uint32_t val) -{ - return ndr_token_store(ndr, ndr-switch_list, p, val); -} - -/* - retrieve a switch value - */ uint32_t ndr_print_get_switch_value(struct ndr_print *ndr, const void *p) { return ndr_token_peek(ndr-switch_list, p);
svn commit: samba r6190 - in branches/SAMBA_4_0/source/build/pidl: .
Author: metze Date: 2005-04-04 14:23:34 + (Mon, 04 Apr 2005) New Revision: 6190 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6190 Log: fix gensize on unions metze Modified: branches/SAMBA_4_0/source/build/pidl/ndr_parser.pm Changeset: Modified: branches/SAMBA_4_0/source/build/pidl/ndr_parser.pm === --- branches/SAMBA_4_0/source/build/pidl/ndr_parser.pm 2005-04-04 14:22:28 UTC (rev 6189) +++ branches/SAMBA_4_0/source/build/pidl/ndr_parser.pm 2005-04-04 14:23:34 UTC (rev 6190) @@ -1318,7 +1318,8 @@ if (my $flags = util::has_property($t, flag)) { pidl flags |= $flags;; } - pidl return ndr_size_union(r, flags, level, (ndr_push_union_fn_t)ndr_push_$t-{NAME});; + + pidl return ndr_size_union(r, flags, level, (ndr_push_flags_fn_t)ndr_push_$t-{NAME});; } #
svn commit: samba r6191 - in branches/SAMBA_4_0/source/librpc/ndr: .
Author: metze Date: 2005-04-04 14:25:29 + (Mon, 04 Apr 2005) New Revision: 6191 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6191 Log: fix spoolss_Enum* push code metze Modified: branches/SAMBA_4_0/source/librpc/ndr/ndr_spoolss_buf.c Changeset: Modified: branches/SAMBA_4_0/source/librpc/ndr/ndr_spoolss_buf.c === --- branches/SAMBA_4_0/source/librpc/ndr/ndr_spoolss_buf.c 2005-04-04 14:23:34 UTC (rev 6190) +++ branches/SAMBA_4_0/source/librpc/ndr/ndr_spoolss_buf.c 2005-04-04 14:25:29 UTC (rev 6191) @@ -29,6 +29,8 @@ DATA_BLOB buffer;\ if (r-out.info) {\ int i;\ + size_t size;\ + uint8_t *data;\ struct ndr_push *ndr2;\ \ ndr2 = ndr_push_init_ctx(ndr);\ @@ -36,20 +38,24 @@ return NT_STATUS_NO_MEMORY;\ }\ \ + size = ndr2-offset;\ + data = ndr2-data;\ +\ for (i=0;ir-out.count;i++) {\ ndr2-data += ndr2-offset;\ ndr2-offset = 0;\ NDR_CHECK(ndr_push_set_switch_value(ndr2, (*r-out.info)[i], r-in.level)); \ NDR_CHECK(ndr_push_##type(ndr2, NDR_SCALARS|NDR_BUFFERS, (*r-out.info)[i]));\ + size += ndr2-offset;\ }\ - if (*r-in.buf_size = ndr2-offset) {\ - buffer = data_blob_const(ndr2-data, ndr2-offset);\ + if (*r-in.buf_size = size) {\ + buffer = data_blob_const(data, size);\ } else {\ r-out.info = NULL;\ r-out.count = 0;\ r-out.result = WERR_INSUFFICIENT_BUFFER;\ }\ - *r-out.buf_size = ndr2-offset;\ + *r-out.buf_size = size;\ }\ NDR_CHECK(ndr_push_unique_ptr(ndr, r-out.info));\ if (r-out.info) {\
svn commit: samba r6192 - in branches/SAMBA_4_0/source/rpc_server: .
Author: metze Date: 2005-04-04 14:58:52 + (Mon, 04 Apr 2005) New Revision: 6192 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6192 Log: remove handle-destroy function pointer, this should be done by talloc destructors now metze Modified: branches/SAMBA_4_0/source/rpc_server/dcerpc_server.h branches/SAMBA_4_0/source/rpc_server/handles.c Changeset: Modified: branches/SAMBA_4_0/source/rpc_server/dcerpc_server.h === --- branches/SAMBA_4_0/source/rpc_server/dcerpc_server.h2005-04-04 14:25:29 UTC (rev 6191) +++ branches/SAMBA_4_0/source/rpc_server/dcerpc_server.h2005-04-04 14:58:52 UTC (rev 6192) @@ -119,7 +119,6 @@ struct dcesrv_connection_context *context; struct policy_handle wire_handle; void *data; - void (*destroy)(struct dcesrv_connection_context *, struct dcesrv_handle *); }; /* hold the authentication state information */ Modified: branches/SAMBA_4_0/source/rpc_server/handles.c === --- branches/SAMBA_4_0/source/rpc_server/handles.c 2005-04-04 14:25:29 UTC (rev 6191) +++ branches/SAMBA_4_0/source/rpc_server/handles.c 2005-04-04 14:58:52 UTC (rev 6192) @@ -30,9 +30,6 @@ static int dcesrv_handle_destructor(void *ptr) { struct dcesrv_handle *h = ptr; - if (h-destroy) { - h-destroy(h-context, h); - } DLIST_REMOVE(h-context-handles, h); talloc_free(h); return 0; @@ -52,7 +49,6 @@ return NULL; } h-data = NULL; - h-destroy = NULL; h-context = context; h-wire_handle.handle_type = handle_type;
Re: svn commit: samba r6182 - in branches/SAMBA_4_0/source/librpc/ndr: .
On Mon, 4 Apr 2005, Stefan (metze) Metzmacher wrote: [EMAIL PROTECTED] schrieb: | Author: sharpe | Date: 2005-04-03 03:58:45 + (Sun, 03 Apr 2005) | New Revision: 6182 | | WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6182 | | Log: | | Jelmer, I think we need to initialize the switch_list, else we are | crash city. [Deletia ...] | ndr-depth = 1; | ndr-flags = 0; | + ndr-switch_list = talloc(ndr, struct ndr_token_list); | + if (!ndr-switch_list) | + goto fail; I can't see how this can fix the problem, when we initialize a pointer with another uninitialized struct... Sigh, yeah, I didn't look at what DLIST_ADD was doing ... Regards - Richard Sharpe, rsharpe[at]richardsharpe.com, rsharpe[at]samba.org, sharpe[at]ethereal.com, http://www.richardsharpe.com
svn commit: samba r6193 - in branches/SAMBA_4_0/source/rpc_server/spoolss: .
Author: metze Date: 2005-04-04 15:15:18 + (Mon, 04 Apr 2005) New Revision: 6193 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6193 Log: we don't need to store the handle type here, it's in handle-wire_handle.handle_type metze Modified: branches/SAMBA_4_0/source/rpc_server/spoolss/dcesrv_spoolss.c branches/SAMBA_4_0/source/rpc_server/spoolss/dcesrv_spoolss.h Changeset: Modified: branches/SAMBA_4_0/source/rpc_server/spoolss/dcesrv_spoolss.c === --- branches/SAMBA_4_0/source/rpc_server/spoolss/dcesrv_spoolss.c 2005-04-04 14:58:52 UTC (rev 6192) +++ branches/SAMBA_4_0/source/rpc_server/spoolss/dcesrv_spoolss.c 2005-04-04 15:15:18 UTC (rev 6193) @@ -947,8 +947,7 @@ handle-data = state; - state-handle_type = SPOOLSS_HANDLE_SERVER; - state-access_mask = r-in.access_mask; + state-access_mask = r-in.access_mask; *r-out.handle = handle-wire_handle; Modified: branches/SAMBA_4_0/source/rpc_server/spoolss/dcesrv_spoolss.h === --- branches/SAMBA_4_0/source/rpc_server/spoolss/dcesrv_spoolss.h 2005-04-04 14:58:52 UTC (rev 6192) +++ branches/SAMBA_4_0/source/rpc_server/spoolss/dcesrv_spoolss.h 2005-04-04 15:15:18 UTC (rev 6193) @@ -32,6 +32,5 @@ state asscoiated with a spoolss_OpenPrinter{,Ex}() operation */ struct spoolss_handle_server { - enum spoolss_handle_type handle_type; uint32_t access_mask; };
svn commit: samba r6194 - in branches/SAMBA_4_0/source: librpc/idl torture/rpc
Author: metze Date: 2005-04-04 15:19:27 + (Mon, 04 Apr 2005) New Revision: 6194 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6194 Log: - fix some spoolss_*Form names and types - fix GetPrinterData(), look inside the datablob - add idl for RemoteFindFirstChangeNotify(), without meaning yet, just to not return a DCERPC_FAULT when receiving this request metze Modified: branches/SAMBA_4_0/source/librpc/idl/spoolss.idl branches/SAMBA_4_0/source/torture/rpc/spoolss.c Changeset: Sorry, the patch is too large (365 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6194
svn commit: samba r6195 - in branches/SAMBA_4_0/source/torture/rpc: .
Author: sharpe Date: 2005-04-04 16:40:23 + (Mon, 04 Apr 2005) New Revision: 6195 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6195 Log: I think Metze meant SPOOLSS_ARCHITECTURE_NT_X86, but I could be wrong. Modified: branches/SAMBA_4_0/source/torture/rpc/spoolss.c Changeset: Modified: branches/SAMBA_4_0/source/torture/rpc/spoolss.c === --- branches/SAMBA_4_0/source/torture/rpc/spoolss.c 2005-04-04 15:19:27 UTC (rev 6194) +++ branches/SAMBA_4_0/source/torture/rpc/spoolss.c 2005-04-04 16:40:23 UTC (rev 6195) @@ -1826,7 +1826,7 @@ ret = test_OpenPrinter_server(ctx); - ret = test_GetPrinterData(ctx-p, ctx, ctx-server_handle, SPOOLSS_ARCHITECTURE); + ret = test_GetPrinterData(ctx-p, ctx, ctx-server_handle, SPOOLSS_ARCHITECTURE_NT_X86); ret = test_GetPrinterData(ctx-p, ctx, ctx-server_handle, DefaultSpoolDirectory);
svn commit: samba r6196 - in branches/SAMBA_4_0/source/smbd: .
Author: sharpe Date: 2005-04-04 16:42:31 + (Mon, 04 Apr 2005) New Revision: 6196 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6196 Log: Make the comparisons consistent with in the same expression. Modified: branches/SAMBA_4_0/source/smbd/server.c Changeset: Modified: branches/SAMBA_4_0/source/smbd/server.c === --- branches/SAMBA_4_0/source/smbd/server.c 2005-04-04 16:40:23 UTC (rev 6195) +++ branches/SAMBA_4_0/source/smbd/server.c 2005-04-04 16:42:31 UTC (rev 6196) @@ -59,7 +59,7 @@ * Don't try to delete . and .. */ if (strcmp(de-d_name, .) != 0 - strcmp(de-d_name, ..)) { + strcmp(de-d_name, ..) != 0) { char *fname = talloc_asprintf(mem_ctx, %s/%s, path, de-d_name); int ret = unlink(fname); if (ret == -1
svn commit: samba r6197 - in branches/SAMBA_4_0/source/torture/rpc: .
Author: metze Date: 2005-04-04 17:04:03 + (Mon, 04 Apr 2005) New Revision: 6197 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6197 Log: fix for my last commit, I removed SPOOLSS_ARCHITECTURE, which was Architecture (sorry richard:-) disable lookup for DefaultSpoolDirectory until, I have fixed the parsing when WERR_MORE_DATA is returned metze Modified: branches/SAMBA_4_0/source/torture/rpc/spoolss.c Changeset: Modified: branches/SAMBA_4_0/source/torture/rpc/spoolss.c === --- branches/SAMBA_4_0/source/torture/rpc/spoolss.c 2005-04-04 16:42:31 UTC (rev 6196) +++ branches/SAMBA_4_0/source/torture/rpc/spoolss.c 2005-04-04 17:04:03 UTC (rev 6197) @@ -1826,9 +1826,9 @@ ret = test_OpenPrinter_server(ctx); - ret = test_GetPrinterData(ctx-p, ctx, ctx-server_handle, SPOOLSS_ARCHITECTURE_NT_X86); + ret = test_GetPrinterData(ctx-p, ctx, ctx-server_handle, Architecture); - ret = test_GetPrinterData(ctx-p, ctx, ctx-server_handle, DefaultSpoolDirectory); + /*ret = test_GetPrinterData(ctx-p, ctx, ctx-server_handle, DefaultSpoolDirectory);*/ ret = test_EnumPorts(ctx);
svn commit: samba r6198 - in trunk/source/smbd: .
Author: jra Date: 2005-04-04 20:40:30 + (Mon, 04 Apr 2005) New Revision: 6198 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6198 Log: Only do the strange DOS error for openX, not trans2open. Jeremy. Modified: trunk/source/smbd/trans2.c Changeset: Modified: trunk/source/smbd/trans2.c === --- trunk/source/smbd/trans2.c 2005-04-04 17:04:03 UTC (rev 6197) +++ trunk/source/smbd/trans2.c 2005-04-04 20:40:30 UTC (rev 6198) @@ -786,9 +786,6 @@ if (open_ofun == 0) { if (GET_OPEN_MODE(open_mode) == DOS_OPEN_EXEC) { open_ofun = FILE_EXISTS_FAIL | FILE_CREATE_IF_NOT_EXIST; - } else { - END_PROFILE(SMBopenX); - return ERROR_FORCE_DOS(ERRDOS, ERRbadaccess); } }
svn commit: samba r6199 - in branches/SAMBA_3_0/source/smbd: .
Author: jra Date: 2005-04-04 20:40:39 + (Mon, 04 Apr 2005) New Revision: 6199 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6199 Log: Only do the strange DOS error for openX, not trans2open. Jeremy. Modified: branches/SAMBA_3_0/source/smbd/trans2.c Changeset: Modified: branches/SAMBA_3_0/source/smbd/trans2.c === --- branches/SAMBA_3_0/source/smbd/trans2.c 2005-04-04 20:40:30 UTC (rev 6198) +++ branches/SAMBA_3_0/source/smbd/trans2.c 2005-04-04 20:40:39 UTC (rev 6199) @@ -786,9 +786,6 @@ if (open_ofun == 0) { if (GET_OPEN_MODE(open_mode) == DOS_OPEN_EXEC) { open_ofun = FILE_EXISTS_FAIL | FILE_CREATE_IF_NOT_EXIST; - } else { - END_PROFILE(SMBopenX); - return ERROR_FORCE_DOS(ERRDOS, ERRbadaccess); } }
svn commit: samba r6200 - in branches/SAMBA_3_0/source/smbd: .
Author: jra Date: 2005-04-04 20:46:16 + (Mon, 04 Apr 2005) New Revision: 6200 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6200 Log: Returned access should contain share mode as well as open mode. Jeremy. Modified: branches/SAMBA_3_0/source/smbd/open.c Changeset: Modified: branches/SAMBA_3_0/source/smbd/open.c === --- branches/SAMBA_3_0/source/smbd/open.c 2005-04-04 20:40:39 UTC (rev 6199) +++ branches/SAMBA_3_0/source/smbd/open.c 2005-04-04 20:46:16 UTC (rev 6200) @@ -1435,7 +1435,7 @@ DEBUG(10,(open_file_shared : share_mode = %x\n, fsp-share_mode )); if (Access) { - (*Access) = open_mode; + (*Access) = (SET_DENY_MODE(deny_mode) | SET_OPEN_MODE(open_mode)); } action = 0;
svn commit: samba r6201 - in trunk/source/smbd: .
Author: jra Date: 2005-04-04 20:46:16 + (Mon, 04 Apr 2005) New Revision: 6201 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6201 Log: Returned access should contain share mode as well as open mode. Jeremy. Modified: trunk/source/smbd/open.c Changeset: Modified: trunk/source/smbd/open.c === --- trunk/source/smbd/open.c2005-04-04 20:46:16 UTC (rev 6200) +++ trunk/source/smbd/open.c2005-04-04 20:46:16 UTC (rev 6201) @@ -1435,7 +1435,7 @@ DEBUG(10,(open_file_shared : share_mode = %x\n, fsp-share_mode )); if (Access) { - (*Access) = open_mode; + (*Access) = (SET_DENY_MODE(deny_mode) | SET_OPEN_MODE(open_mode)); } action = 0;
Build status as of Tue Apr 5 00:00:02 2005
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2005-04-04 00:00:31.0 + +++ /home/build/master/cache/broken_results.txt 2005-04-05 00:00:16.0 + @@ -1,4 +1,4 @@ -Build status as of Mon Apr 4 00:00:02 2005 +Build status as of Tue Apr 5 00:00:02 2005 Build counts: Tree Total Broken Panic @@ -6,25 +6,26 @@ distcc 37 3 0 ppp 21 2 0 rsync37 5 0 -samba1 1 1 +samba1 1 0 samba-docs 0 0 0 -samba4 41 14 0 -samba_3_039 10 0 +samba4 41 13 0 +samba_3_039 9 0 Currently broken builds: Host Tree Compiler Status fusberta samba4 gccok/ 2/?/? -yurok samba_3_0gcc 127/?/?/? samba-s390 samba4 gccok/ 2/?/? rhonwynsamba4 gcc-4.0ok/ 2/?/? rhonwynsamba_3_0gcc-4.0ok/ 2/?/? rhonwynsamba4 tccok/ 2/?/? +aretnapsamba4 gcc 127/?/?/? +aretnapsamba_3_0gcc 127/?/?/? aretnapccache iccok/ok/ok/ 1 aretnapdistcc icc 77/?/?/? -aretnapsamba_3_0iccok/ok/ok/ 1 gwen distcc cc ok/ 1/?/? -gwen samba4 cc ok/ 1/?/? -gwen samba_3_0cc ok/ 1/?/? +gwen rsynccc 1/?/?/? +gwen samba4 cc 1/?/?/? +gwen samba_3_0cc 1/?/?/? us4samba_3_0cc ok/ 1/?/? us4samba_3_0gccok/ 1/?/? flock samba4 gccok/ 1/?/? @@ -46,9 +47,6 @@ m30rsyncgccok/ok/ok/ 2 m30samba4 gccok/ 2/?/? m30samba_3_0gccok/ok/ok/ 1 -metze02rsyncgcc 1/?/?/? -metze02sambagccok/ok/ok/ 1/PANIC -metze02samba4 gcc 1/?/?/? -metze02samba4 gcc-3.4ok/ 2/?/? +metze02sambagcc 77/?/?/? opippp gccok/ 2/?/?
svn commit: samba r6203 - in branches/SAMBA_3_0/source/smbd: .
Author: jra Date: 2005-04-05 01:20:32 + (Tue, 05 Apr 2005) New Revision: 6203 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6203 Log: Fix attribute return on creating a directory with nttrans_create. Fix strange allocation semantics of openX. Jeremy. Modified: branches/SAMBA_3_0/source/smbd/nttrans.c branches/SAMBA_3_0/source/smbd/reply.c branches/SAMBA_3_0/source/smbd/trans2.c Changeset: Modified: branches/SAMBA_3_0/source/smbd/nttrans.c === --- branches/SAMBA_3_0/source/smbd/nttrans.c2005-04-05 01:20:32 UTC (rev 6202) +++ branches/SAMBA_3_0/source/smbd/nttrans.c2005-04-05 01:20:32 UTC (rev 6203) @@ -918,8 +918,9 @@ file_len = sbuf.st_size; fmode = dos_mode(conn,fname,sbuf); - if(fmode == 0) + if(fmode == 0) { fmode = FILE_ATTRIBUTE_NORMAL; + } if (!fsp-is_directory (fmode aDIR)) { close_file(fsp,False); END_PROFILE(SMBntcreateX); @@ -956,11 +957,13 @@ * correct bit for extended oplock reply. */ - if (oplock_request lp_fake_oplocks(SNUM(conn))) + if (oplock_request lp_fake_oplocks(SNUM(conn))) { extended_oplock_granted = True; + } - if(oplock_request EXCLUSIVE_OPLOCK_TYPE(fsp-oplock_type)) + if(oplock_request EXCLUSIVE_OPLOCK_TYPE(fsp-oplock_type)) { extended_oplock_granted = True; + } #if 0 /* W2K sends back 42 words here ! If we do the same it breaks offline sync. Go figure... ? JRA. */ @@ -1481,7 +1484,6 @@ oplock_request,rmode,smb_action); if (!fsp) { - if(errno == EISDIR) { /* @@ -1511,32 +1513,6 @@ return set_bad_path_error(errno, bad_path, outbuf, ERRDOS,ERRnoaccess); } } - - file_len = sbuf.st_size; - fmode = dos_mode(conn,fname,sbuf); - if(fmode == 0) - fmode = FILE_ATTRIBUTE_NORMAL; - - if (fmode aDIR) { - talloc_destroy(ctx); - close_file(fsp,False); - restore_case_semantics(conn, file_attributes); - return ERROR_NT(NT_STATUS_ACCESS_DENIED); - } - - /* -* If the caller set the extended oplock request bit -* and we granted one (by whatever means) - set the -* correct bit for extended oplock reply. -*/ - - if (oplock_request lp_fake_oplocks(SNUM(conn))) { - extended_oplock_granted = True; - } - - if(oplock_request EXCLUSIVE_OPLOCK_TYPE(fsp-oplock_type)) { - extended_oplock_granted = True; - } } /* @@ -1578,7 +1554,18 @@ } restore_case_semantics(conn, file_attributes); + talloc_destroy(ctx); + file_len = sbuf.st_size; + fmode = dos_mode(conn,fname,sbuf); + if(fmode == 0) { + fmode = FILE_ATTRIBUTE_NORMAL; + } + if (!fsp-is_directory (fmode aDIR)) { + close_file(fsp,False); + return ERROR_DOS(ERRDOS,ERRnoaccess); + } + /* Save the requested allocation size. */ if ((smb_action == FILE_WAS_CREATED) || (smb_action == FILE_WAS_OVERWRITTEN)) { SMB_BIG_UINT allocation_size = (SMB_BIG_UINT)IVAL(params,12); @@ -1589,7 +1576,6 @@ fsp-initial_allocation_size = smb_roundup(fsp-conn, allocation_size); if (fsp-is_directory) { close_file(fsp,False); - END_PROFILE(SMBntcreateX); /* Can't set allocation size on a directory. */ return ERROR_NT(NT_STATUS_ACCESS_DENIED); } @@ -1602,6 +1588,20 @@ } } + /* +* If the caller set the extended oplock request bit +* and we granted one (by whatever means) - set the +* correct bit for extended oplock reply. +*/ + + if (oplock_request lp_fake_oplocks(SNUM(conn))) { + extended_oplock_granted = True; + } + + if(oplock_request EXCLUSIVE_OPLOCK_TYPE(fsp-oplock_type)) { + extended_oplock_granted = True; + } + /* Realloc the size of parameters and data we will return */ params = nttrans_realloc(ppparams, 69); if(params == NULL) Modified: branches/SAMBA_3_0/source/smbd/reply.c === ---
svn commit: samba r6202 - in trunk/source/smbd: .
Author: jra Date: 2005-04-05 01:20:32 + (Tue, 05 Apr 2005) New Revision: 6202 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6202 Log: Fix attribute return on creating a directory with nttrans_create. Fix strange allocation semantics of openX. Jeremy. Modified: trunk/source/smbd/nttrans.c trunk/source/smbd/reply.c trunk/source/smbd/trans2.c Changeset: Modified: trunk/source/smbd/nttrans.c === --- trunk/source/smbd/nttrans.c 2005-04-04 20:46:16 UTC (rev 6201) +++ trunk/source/smbd/nttrans.c 2005-04-05 01:20:32 UTC (rev 6202) @@ -918,8 +918,9 @@ file_len = sbuf.st_size; fmode = dos_mode(conn,fname,sbuf); - if(fmode == 0) + if(fmode == 0) { fmode = FILE_ATTRIBUTE_NORMAL; + } if (!fsp-is_directory (fmode aDIR)) { close_file(fsp,False); END_PROFILE(SMBntcreateX); @@ -956,11 +957,13 @@ * correct bit for extended oplock reply. */ - if (oplock_request lp_fake_oplocks(SNUM(conn))) + if (oplock_request lp_fake_oplocks(SNUM(conn))) { extended_oplock_granted = True; + } - if(oplock_request EXCLUSIVE_OPLOCK_TYPE(fsp-oplock_type)) + if(oplock_request EXCLUSIVE_OPLOCK_TYPE(fsp-oplock_type)) { extended_oplock_granted = True; + } #if 0 /* W2K sends back 42 words here ! If we do the same it breaks offline sync. Go figure... ? JRA. */ @@ -1481,7 +1484,6 @@ oplock_request,rmode,smb_action); if (!fsp) { - if(errno == EISDIR) { /* @@ -1511,32 +1513,6 @@ return set_bad_path_error(errno, bad_path, outbuf, ERRDOS,ERRnoaccess); } } - - file_len = sbuf.st_size; - fmode = dos_mode(conn,fname,sbuf); - if(fmode == 0) - fmode = FILE_ATTRIBUTE_NORMAL; - - if (fmode aDIR) { - talloc_destroy(ctx); - close_file(fsp,False); - restore_case_semantics(conn, file_attributes); - return ERROR_NT(NT_STATUS_ACCESS_DENIED); - } - - /* -* If the caller set the extended oplock request bit -* and we granted one (by whatever means) - set the -* correct bit for extended oplock reply. -*/ - - if (oplock_request lp_fake_oplocks(SNUM(conn))) { - extended_oplock_granted = True; - } - - if(oplock_request EXCLUSIVE_OPLOCK_TYPE(fsp-oplock_type)) { - extended_oplock_granted = True; - } } /* @@ -1578,7 +1554,18 @@ } restore_case_semantics(conn, file_attributes); + talloc_destroy(ctx); + file_len = sbuf.st_size; + fmode = dos_mode(conn,fname,sbuf); + if(fmode == 0) { + fmode = FILE_ATTRIBUTE_NORMAL; + } + if (!fsp-is_directory (fmode aDIR)) { + close_file(fsp,False); + return ERROR_DOS(ERRDOS,ERRnoaccess); + } + /* Save the requested allocation size. */ if ((smb_action == FILE_WAS_CREATED) || (smb_action == FILE_WAS_OVERWRITTEN)) { SMB_BIG_UINT allocation_size = (SMB_BIG_UINT)IVAL(params,12); @@ -1589,7 +1576,6 @@ fsp-initial_allocation_size = smb_roundup(fsp-conn, allocation_size); if (fsp-is_directory) { close_file(fsp,False); - END_PROFILE(SMBntcreateX); /* Can't set allocation size on a directory. */ return ERROR_NT(NT_STATUS_ACCESS_DENIED); } @@ -1602,6 +1588,20 @@ } } + /* +* If the caller set the extended oplock request bit +* and we granted one (by whatever means) - set the +* correct bit for extended oplock reply. +*/ + + if (oplock_request lp_fake_oplocks(SNUM(conn))) { + extended_oplock_granted = True; + } + + if(oplock_request EXCLUSIVE_OPLOCK_TYPE(fsp-oplock_type)) { + extended_oplock_granted = True; + } + /* Realloc the size of parameters and data we will return */ params = nttrans_realloc(ppparams, 69); if(params == NULL) Modified: trunk/source/smbd/reply.c === --- trunk/source/smbd/reply.c 2005-04-04 20:46:16 UTC (rev 6201) +++ trunk/source/smbd/reply.c 2005-04-05 01:20:32 UTC (rev
svn commit: samba r6204 - in branches/SAMBA_3_0/source/smbd: .
Author: jra Date: 2005-04-05 01:24:04 + (Tue, 05 Apr 2005) New Revision: 6204 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6204 Log: Fix double-free of talloc context. Jeremy. Modified: branches/SAMBA_3_0/source/smbd/nttrans.c Changeset: Modified: branches/SAMBA_3_0/source/smbd/nttrans.c === --- branches/SAMBA_3_0/source/smbd/nttrans.c2005-04-05 01:20:32 UTC (rev 6203) +++ branches/SAMBA_3_0/source/smbd/nttrans.c2005-04-05 01:24:04 UTC (rev 6204) @@ -1554,7 +1554,6 @@ } restore_case_semantics(conn, file_attributes); - talloc_destroy(ctx); file_len = sbuf.st_size; fmode = dos_mode(conn,fname,sbuf);
svn commit: samba r6205 - in trunk/source/smbd: .
Author: jra Date: 2005-04-05 01:24:10 + (Tue, 05 Apr 2005) New Revision: 6205 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6205 Log: Fix double-free of talloc context. Jeremy. Modified: trunk/source/smbd/nttrans.c Changeset: Modified: trunk/source/smbd/nttrans.c === --- trunk/source/smbd/nttrans.c 2005-04-05 01:24:04 UTC (rev 6204) +++ trunk/source/smbd/nttrans.c 2005-04-05 01:24:10 UTC (rev 6205) @@ -1554,7 +1554,6 @@ } restore_case_semantics(conn, file_attributes); - talloc_destroy(ctx); file_len = sbuf.st_size; fmode = dos_mode(conn,fname,sbuf);