Re: [Samba] PDC: Logging out from Windows XP SP2 takes a long time

2005-04-11 Thread Jonathan Johnson
If your users are using Outlook Express or Outlook, it might be trying 
to synchronize the associated files. If your users are wont to store 
large quantities of email, thes files can be rather huge. As the files 
change every time you open OE or Outlook, they must then be 
synchronized. I have seen OE Inbox files grow to several hundred 
megabytes, as well as the Outlook PST file.

Note that the Outlook PST file can be stored on a network share, 
eliminating the need to synchronize it. However, Outlook Express files 
MUST be on a local drive. (I have tried moving them to a network share 
and ended up losing data. It's like Microsoft has written a routine to 
guarantee that it won't work.) You must either prevent the OE identity 
from being synchronized, or move the directory to a folder on the local 
machine which is not synchronized.

For this reason, Outlook Express is NOT RECOMMENDED in a roaming 
profiles environment, as the OE identity cannot be on a network share 
and synchronizing the files is an excercise in masochism.

For your information:
* OE identies are usually found in [%USERPROFILE%\Local 
Settings\Application Data\Identities\{IDENTITY}\Microsoft\Outlook 
Express\*.dbx]
* Registry entry for OE store location: REG_EXPAND_SZ, 
[HKCU\Identities\{IDENTITY}\Software\Microsoft\Outlook Express\5.0\Store 
Root]
* Outlook PST files are usually found in [%USERPROFILE\Local 
Settings\Application Data\Microsoft\Outlook\*.pst]
* You may also want to consider the Windows Address Book, which is a 
.WAB file. The registry entry that describes the path to the WAB file is 
REG_SZ, [HKCU\Software\Microsoft\WAB\WAB4\Wab File Name\(Default)]

~Jonathan Johnson
Sutinen Consulting, Inc.
www.sutinen.com
Dag Sverre Seljebotn wrote:
I have samba set up as primary domain controller, and have problems with
my Windows XP SP2 machines. Logging in is quick, but most of the time
(nine out of ten times) the logout process takes a long time - I do end
up rebooting, but once I let it stay and it took a whole hour before it
was logged out. It seems to act the same way for all users.
Possible sources already eliminated:
- I have disabled the synchronization of My Documents (which was also
taking a long time), and have instead configured My Documents to sit on
a mounted SMB homes share. Though the problems were present before this
change as well (ie it was not the synchronization that was taking the
time, if Windows' messages are correct).
- The profile share is not the same as the homes share (because the
documentation stated that that would create problems).
Anyone?
I'm running Samba 3.0.10-Debian.
// Dag Sverre Seljebotn
 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Browsing Problems

2005-04-11 Thread Jonathan Johnson
You might also try:
[global]
   os level = 65
This seems to ensure that the Samba box will win browser elections. Be 
sure to read the man page (help button in SWAT, if you're so inclined).

~Jonathan Johnson
Sutinen Consulting, Inc.
www.sutinen.com
Andrea Venturoli wrote:
micheletto wrote:
have yuo tried to say no in domian master?

No, I didn't.
In fact I'd like it to be a domain master.
I only think it has memorized about this 192.168.100.5 somewhere and I 
need to force samba to forget about it.

 bye  Thanks
av.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re[2]: [Samba] PDC: Logging out from Windows XP SP2 takes a long time

2005-04-11 Thread Jean-Jacques Moulis
On Sun, 10 Apr 2005 23:11:22 -0700 Jonathan Johnson [EMAIL PROTECTED] wrote:

JJ 
JJ For this reason, Outlook Express is NOT RECOMMENDED in a roaming 
JJ profiles environment, as the OE identity cannot be on a network share 
JJ and synchronizing the files is an excercise in masochism.


I have to disagree!
We are just doing that, using OE in roaming profile environment and it works 
like a charm.

Well! we are using Imap  :-) 
No need to save the store (in that config it's only a cache) 
it's redirected  on a local directory outside of the profile

We redirect the WAB file on a network share.




-- 
Jean-Jacques   Moulis  Tel:  (013) 281684
ISYFax:  (013) 139282
Linköping UniversityE-mail: [EMAIL PROTECTED]
581 83 Linköping
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: winbind on a domain with 150000 users

2005-04-11 Thread Peter Kruse
Martin Konold wrote:

I have an installation with 17 groups and 7 users. wbinfo -u or 
wbinfo -g are never working and lead to a block winbindd.

Thanks for sharing this, it is the third report, that listing groups or
users in large installations leads to instability of the system (if
winbind is used in nsswitch.conf).  Can we agree that it's worth a bug
report?  Should we write a new one or use #2567?  And I also think
that severity is at least major.  This needs a little more attention.
The problem is, when winbind blocks and is used in nsswitch.conf, other
processes suffer as well.  I don't know of a way to not use winbind
in nsswitch.conf as samba would no longer possible to authenticate
users.
Thank you,
Peter
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: winbind on a domain with 150000 users

2005-04-11 Thread Martin Konold

Hi,

  I have an installation with 17 groups and 7 users. wbinfo -u or
  wbinfo -g are never working and lead to a block winbindd.
  
 
 Thanks for sharing this, it is the third report, that listing groups or
 users in large installations leads to instability of the system (if
 winbind is used in nsswitch.conf).  Can we agree that it's worth a bug
 report?  Should we write a new one or use #2567?  And I also think
 that severity is at least major.  This needs a little more attention.
 The problem is, when winbind blocks and is used in nsswitch.conf, other
 processes suffer as well.  I don't know of a way to not use winbind
 in nsswitch.conf as samba would no longer possible to authenticate
 users.

To my knowledge the Samba Team is aware of the issue already. Basically it 
is a scalability issue with the design of winbindd (basically winbindd is 
single threaded and blocks on large requests).

BTW: 'getent passwd' works flawlessly on the tested system as the number 
of presented entries is rather low and can be handled from the cache.

Regards,
--martin

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.7-2 and IIS6

2005-04-11 Thread Blane Bramble
Hi, we are using Samba as a network attached storage server for our web-
servers, and have an oddity with Windows 2003/IIS6 where some of the
sites seem to lose their connection for short periods of time (up to
about 1/2 an hour at most). During this time the web server reports
either a 500 or 401 error. There doesn't appear to be anything in the
Samba logs that indicated any problems - has anyone else experienced
anything like this?

Thanks,

Blane.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Gigabit Throughput too low

2005-04-11 Thread Florian Stahl
Hi list,

I have been desperately trying to increase the transfer rate for a Gigabit
ethernet connection between a Fedora Core 2, Kernel 2.6.x Intel-based
Server  with a Samba Version 3.0.3-5 and a Mac OS X client.

Transfer rates for Gigabit should do around 30 MB/sec
my transfer rates do only around 10 MB/sec - with no significant
difference between reads and writes.

as the networking is supposed to deal with large files - 60 to 600 MB each
- there might be some optimization for the Linux server - in terms of
Buffer reads / writes - TCP stack configs etc.

I am aware that my process table - in regards of the 'top' command - show
delays for the smbd process, which means that CPU consumption by smbd is
divided in half while process part for the pdflush increases.

It also turns out that meanwhile the smbd process 'stalls' - userspace and
buffer memory are getting freed.

I have already stepped over the differenz misconfigurations in the MACH
Kernel on the Mac OS X client and managed to improve transfer rates by 1
MB.

I have even tried to network over NFS - which is about 6 MB/sec and
therefore NOT an option.

IS there any option to Improve the transfer rates further or must I depend
on more expensive Hardware - such as a SCSI controller plus drives.

At the moment the system runs three 400 gig seagate HDs over the Onboard
IDE on an MSI board, IDE chipset VT 8237 (Via), Gigabit NIC is a Via VT
6122 based (velocity module).

Thanks for your suppord in advance

Kind Regardez


Florian Stahl,CIO

xantury.com - hardtallee 29 - 35398 gießen - germany




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] corruption in the locking tdb, samba panics [SOLVED]

2005-04-11 Thread Dukhan, Meir
Hi, 
 
How do you ensure to disable all tdb locking in 
 
***
Information contained in this email message is intended only for use of the 
individual or entity named above. If the reader of this message is not the 
intended recipient, or the employee or agent responsible to deliver it to the 
intended recipient, you are hereby notified that any dissemination, 
distribution or copying of this communication is strictly prohibited. If you 
have received this communication in error, please immediately notify the [EMAIL 
PROTECTED] and destroy the original message.
***
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] NTLM AUTHENTICATION

2005-04-11 Thread Krishna Mohan
Hi,
  
 Iam getting this error when ever iam starting squid with NTLM
AUTHENTICATION enabled.

FATAL : authparam ntlm program /usr/bin/ntlm_auth: (13) Permission denied
squid Cache (version 2.5.STABLE9) : TERMINATED ABNORMALLY.
 
Sombody plz help me out.  Thanks in advance.
 
Regards,
Krishna Mohan.


-
Do you Yahoo!?
 Yahoo! Small Business - Try our new resources site! 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] smbpasswd, tdb_fetch_uint32 failed

2005-04-11 Thread Nicolas Kowalski
Hello,

Since I upgraded my samba PDC from 3.0.11 to 3.0.13, I have some strange 
warnings when changing the passwords with 'smbpasswd' (it works, but 
gives these messages):

# smbpasswd username
New SMB password:
Retype new SMB password:
account_policy_get: tdb_fetch_uint32 failed for field 4 (maximum password age 
(seconds since 1970)), returning 0
account_policy_get: tdb_fetch_uint32 failed for field 5 (minimum password age 
(seconds since 1970)), returning 0


Any idea about it ? Can I safely ignore them ?

Thanks.

PS: the password database is the text smbpasswd file, the 
account_policy.tdb file looks just good (not changed since Jun 24 2004).

-- 
Nicolas
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] mysql backend and 3.0.13

2005-04-11 Thread Karl Karlsson
Here are some additional informations to the earlier thread
MYSQL - Was Functional till Update to 3.13.

It stopped working somewhere between 3.0.12rc1 and 3.0.13.
When adding with pdbedit like:

pdbedit -a fuman -f full name
and then after the passwd prompt, it always fails and says
Username not found! 

After revert back to 2.0.12rc1 again, it correctly prints out the information 
and everything is added in the database as it should.

When you add with smbpasswd it shows the same behaviour as Ben Gaide is 
describing. Hope this helps anyone to narrow it down further more. 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] 3.0.13 - word cannot complete the save due to a file permission error. for smb/NFS mounted dirs

2005-04-11 Thread Urs Rau
I am using 3.0.13 and have temporarily run out of disk space on the main 
samba server, so I have NFS mounted some space from another machine. 
into a directory that is accessible under samba.

When I try to save directly from ms word 2003 sp1 (and same from word 
2000) it tells me:

on the win98se and win xp pro sp2 clients:
Microsoft Office Word
Word cannot complete the save due to a file permission error.
(I:\transfer\ursr\chidren\2005.doc)
and on the server it logs
[2005/04/11 11:03:06, 0] locking/posix.c:posix_fcntl_lock(659)
  on 32 bit NFS mounted file systems.
[2005/04/11 11:03:07, 0] locking/posix.c:posix_fcntl_lock(657)
  posix_fcntl_lock: WARNING: lock request at offset 2147483538, length 
1 returned
[2005/04/11 11:03:07, 0] locking/posix.c:posix_fcntl_lock(658)
  an No locks available error. This can happen when using 64 bit lock 
offsets
[2005/04/11 11:03:07, 0] locking/posix.c:posix_fcntl_lock(659)
  on 32 bit NFS mounted file systems.

Now, this does sound a bit as if this was/is expected to go wrong. But 
if I save my document locally and then copy it with the same name and to 
the same dir on the server there is no issue.

Is there anything I can do from the samba server to avoid this error? As 
from a unix perspective there is no permissions problem.

Many thanks for any help or pointers with this. If a log with a higher 
debug would help let me know.

Regards,
PS: The nfs part is
kernel: Linux 2.6.8-1.521.1omsmp #1 SMP Mon Sep 13 18:41:51 EDT 2004 
i686 athlon i386 GNU/Linux
and
nfs-utils-1.0.6-22

--
Urs Rau
Head of Operations
Operation Mobilisation
UK National Office
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] smbd process hangs up - XP login problems

2005-04-11 Thread Felipe Martinez Hermo


Hi, everybody!
I am having certain problems accessing my Samba domain.

I have set up several XP SP2 clients to access a Samba 3.0.10 PDC
running on a Debian testing server.

Problem #1: Suddenly, the domain stopped working: it could not even be
accessed browsing the network.
After some investigation, I found that nobody could connect to the
shares or log on to the domain, except one of the clients.
I closed session on that client and stopped the service
/etc/init.d/samba stop, but the smbd process kept on running, so I had
to kill it. Everybody could log in after the service was restarted.

Problem #2: Once the services were started again, everything works
fine, except for two clients: at the first prompt for login it replies
Windows can't log on to the domain because the domain controller is
blocked or not available or because the machine account could not be
found. Try again later (Translated from spanish).
If I log on as machine administrator and browse the domain server
through my network places, close session and try to log on to the
domain again it works!


Are these two problems related to each other?
Is problem #1 a bug?
How can I get to log in at the first try?

Thank you for reading this.


-- 

==
Felipe Martínez Hermo
[EMAIL PROTECTED]
[EMAIL PROTECTED]
==
Servicios Informáticos
UGT Galicia
[EMAIL PROTECTED]
==

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] mysql backend and 3.0.13

2005-04-11 Thread Collen
Guess, I'll wait with updating samba then..!
Thx. Collen
Karl Karlsson wrote:
Here are some additional informations to the earlier thread
MYSQL - Was Functional till Update to 3.13.
It stopped working somewhere between 3.0.12rc1 and 3.0.13.
When adding with pdbedit like:
pdbedit -a fuman -f full name
and then after the passwd prompt, it always fails and says
Username not found! 

After revert back to 2.0.12rc1 again, it correctly prints out the information 
and everything is added in the database as it should.

When you add with smbpasswd it shows the same behaviour as Ben Gaide is 
describing. Hope this helps anyone to narrow it down further more. 
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Multiple Samba installations on one Solaris 8 machine

2005-04-11 Thread Thomas Mainzer
Hello Andrew,

On Apr 10, 2005 9:50 AM, Andrew Bartlett [EMAIL PROTECTED] wrote:
 On Wed, 2005-04-06 at 11:22 +0200, Thomas Mainzer wrote:
  Hi!
 
  We use the Winbind part of Samba 3 for authenticating users coming
  from the Squid Caching Server via NTLM with an NT4 domain. We have
  seven Squid instances and one Winbind instance running on a Sun Fire
  V480 with 4 cpu´s.
 
  We have some performance problems with approx. 10.000 User
  simultaniously users surfing the web and we think Winbind is the
  problem. While using the transparent authentication sometimes an
  inputbox comes up and asks the user to authenticate instead of doing
  this transparent.
 
 Have you traced to see if the error is Samba failing, or simply the link
 between Squid and the windows client failing?
 

We tried Samba 2 before. When such an event occured the helpers were
crashing very rapidly and Squid used to terminate abnormally and
started again.

  Is there any possibility to install Samba/Winbind more than one time
  to spread the load on Winbind? What about the computer account needed
  with the NT4 domain? Can all installed Samba instances use one
  computer account for authenticating themselves to the NT4 domain?
 
 It is not really possible to setup multiple copies of winbind on a
 single machine, aside from a chroot(), because of the socket in /tmp.
 
 However, winbind can be made better - I looked into the idea of having
 multiple outstanding requests to the NT DC, using Samba4 as a research
 tool.  This does not seem possible at this point, but we do need to keep
 looking at it.  Perhaps this is why microsoft demands that their NTLM
 proxy server be a BDC... (or so I understand).

What about the computer account that is needed for each Samba
installation? Is it possible to use one single computer account for
multiple Samba instances? Is it possible, that all Samba installations
share one secrets.tdb? We made multiple installations of winbind
possible after compiling a unique socket path in every instance.

 
 Andrew Bartlett
 
 --
 Andrew Bartletthttp://samba.org/~abartlet/
 Authentication Developer, Samba Team   http://samba.org
 Student Network Administrator, Hawker College  http://hawkerc.net
 
 
 

Thanks in advance

Thomas


--
An Apple a day keeps Windows away!
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbpasswd -as

2005-04-11 Thread Paul Gienger

I have a problem by using smbpasswd -as USER PASSWORD 

it returns with this:
[EMAIL PROTECTED] ~]# smbpasswd -as USER PASSWORD
When run by root:
   smbpasswd [options] [username]
otherwise:
   smbpasswd [options]
I has been a problem for about 6 month now on both debian testing and
redhat ES 3 / 4 

It is still working on Redhat 9 with samba-2.2.12-0.90.2.legacy
Any one know why?
 

Sure, passing the password on the command line is no longer supported.  
I can't remember the exact version (maybe in the release notes?) but it 
simply isn't an option.  There are ways around it however if you're 
trying to create a script.  My script usage, ripped off the list a while 
ago is this:

`(echo $password; echo $password) | $smbpasswd -s -a $username`
Note:  The above is a line from a perl script, however I think the 
original was for bash.  You can probably figure out how to adapt it to 
your language from there ;)

--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] PDC: Logging out from Windows XP SP2 takes a long time

2005-04-11 Thread Paul Gienger

If your users are using Outlook Express or Outlook, it might be trying 
to synchronize the associated files. If your users are wont to store 
large quantities of email, thes files can be rather huge. As the files 
change every time you open OE or Outlook, they must then be 
synchronized. I have seen OE Inbox files grow to several hundred 
megabytes, as well as the Outlook PST file.
As the default option, Outlook ( != Express) files are not syncronized 
since they reside in Local Settings, as you stated later in the snipped 
text..

--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] using unix password sync to sync krb5 password

2005-04-11 Thread FM
Hello,
I'm creating a perl script that will update a username password with
this syntax 
script.pl -u USERNAME
I had a weird idea :
unix password sync = yes
passwd program = /bin/scipt.pl -u %u
passwd chat = *new*password* %n\\n*new*password* %n\\n *ok_changed*
does someone try this type of little hack to sync krb5 DB ?
Thanks !
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] net ads join fails

2005-04-11 Thread Penny Willisson
I have recreated my dns pointers without success and I think my krb5.conf file 
is configured correctly.  First I left this to Yast to set up but that didn't 
work and then I tried to modify it from a article I found.
 
I have pasted it in below
[libdefaults]

#default_realm = ellisonslegal.com

clockskew = 300

[realms]

ELLISONSLEGAL.COM = {

kdc = apps.ellisonslegal.com

#default_domain = ELLNET

#kpasswd_server = apps.ellisonslegal.com

}

#ELLISONSLEGAL.COM = {

# kdc = APPS.ELLISONSLEGAL.COM

# admin_server = APPS.ELLISONSLEGAL.COM

# kpasswd_server = APPS.ELLISONSLEGAL.COM

#}

#OTHER.REALM = {

# kdc = OTHER.COMPUTER

#}

[domain_realm]

# .my.domain = MY.REALM

.ellisonslegal.com = ELLISONSLEGAL.COM

[logging]

default = SYSLOG:NOTICE:DAEMON

kdc = FILE:/var/log/kdc.log

kadmind = FILE:/var/log/kadmind.log

[appdefaults]

pam = {

ticket_lifetime = 1d

renew_lifetime = 1d

forwardable = true

proxiable = false

retain_after_close = false

minimum_uid = 0

debug = false

}

 
Dimitri would you be able to repost that link for the HOW-TO please?  I tried 
it but it seems like it is broken, do you have the updated link?
 
Thanks for your continued help.
 
Penny

-Original Message-
From: Gordon Hopper [mailto:[EMAIL PROTECTED]
Sent: 09 April 2005 00:23
To: Penny Willisson
Subject: RE: [Samba] net ads join fails


You might need to add some entries to your krb5.conf file.  for example:

[realms]
ellisonslegal.com = {
  kdc = domain.controller.ellisonslegal.com:88
}


Where kdc points to a domain controller.  Doesn't need to be the primary domain 
controller, choose one close by for best performance.   (You shouldn't need to 
do this if your DNS for the domain resolves to a domain controller.)

Gordon



On Fri, 2005-04-08 at 15:41 +0100, Penny Willisson wrote: 

Thanks



When I run 'kinit administrator' I get the following error



kinit: krb5_get_init_creds: unable to reach any KDC in realm ellisonslegal.com



any ideas???



-Original Message-

From:  [EMAIL PROTECTED]

[mailto: [EMAIL PROTECTED] Behalf Of

Dimitri Yioulos

Sent: 08 April 2005 13:30

To:  samba@lists.samba.org

Subject: Re: [Samba] net ads join fails





On Friday 08 April 2005 07:46 am, Penny Willisson wrote:

 Hi



 I have created the machine account on the AD server and did this logged in

 as Administrator so that should mean that the Administrator account has the

 correct permissions.



 I have executed the following command as suggested



 net ads join  [EMAIL PROTECTED] -d 2



 The following was output to the screen:



 [2005/04/08 13:33:38, 2] lib/interface.c:add_interface(81)



 added interface ip=10.0.0.39 bcast=10.0.255.255 nmask=255.255.0.0



 [2005/04/08 13:33:41, 0] libads/kerberos.c:ads_kinit_password(146)



 kerberos_kinit_password  [EMAIL PROTECTED] failed:

 Unknown code krb5 156



 [2005/04/08 13:33:41, 0] utils/net_ads.c:ads_startup(191)



 ads_connect: Unknown code krb5 156



 [2005/04/08 13:33:41, 2] utils/net.c:main(897)



 return code = -1



 Thanks



 Penny



 -Original Message-

 From: Gordon Hopper [mailto: [EMAIL PROTECTED]

 Sent: 06 April 2005 05:28

 To: Penny Willisson

 Subject: Re: [Samba] net ads join fails







 [2005/04/05 15:11:44, 3] libsmb/clikrb5.c:ads_krb5_mk_req(381)



   ads_krb5_mk_req: krb5_cc_get_principal failed (No such file or directory)



 [2005/04/05 15:11:44, 0] libads/kerberos.c:ads_kinit_password(146)



   kerberos_kinit_password   [EMAIL PROTECTED] failed: Unknown

 code krb5 156



 [2005/04/05 15:11:44, 0] utils/net_ads.c:ads_startup(191)



   ads_connect: Unknown code krb5 156









 I suggest you post the output of the command you are running to join the

 domain (including the command), for example, net ads join -U

  [EMAIL PROTECTED] -d 2.



 Also, note that the credentials you use to join the domain are not

 necessarily the domain Administrator, but they need to be a user who has

 write privileges to the ads folder where the machine account will be

 created.  (It worked better for me when the machine account was already

 created in server manager, but according to the docs, that shouldn't be

 necessary.)



 It almost looks like the password failed.  Or perhaps the folde

 r you 

 specified for the machine account does not exist.



 Regards,



 Gordon Hopper



Try the command kinit Administrator (or  [EMAIL PROTECTED]).  You 

should be prompted for a password.  If, after entering the password, you're 

returned to a prompt with no further output then, in theory at least, your 

Kerberos setup is OK. If you get errors, well ...  Run that first, then try 

net ads join -U  [EMAIL PROTECTED]



A good how-to can be found at:  http://www.ulug.org.nz/ActiveDirectorySamba.



HTH.



Dimitri

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Daylight saving time problem.

2005-04-11 Thread Fred Hebert
I have a small home LAN consisting of a Linux/SAMBA server and 3 XP PRO
workstations.  I use an external USB hard drive, attached to my workstation,
to backup the shared data.  The backup utility uses the DOS file timestamp
to determine which files have changed and need to be backed up.

Normally the backup takes a minute or less and only backs up a few files,
but when we go on or off of daylight saving time, the backup backs up
everything which takes about 5 hours.

I also have some problems with my source code control system.

At work we use all Windows stuff and don't have a problem.

What's weird is that both Linux and XP have the correct times before and
after DST, but the file times on the shares seem to change and are off by an
hour.

I am not sure whether it is a Windows or a Linux/SAMBA problem, I am just
hoping someone has a fix.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba/LDAP Administrator taking over root

2005-04-11 Thread Samba User
After installing LDAP and setting up as PDC my unix user root shows up as 
Administrator.
When I do an ls on anything that was owned by root now shows ups being owned by 
Administrator

How do I get root back?
The system seems to function OK?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Daylight saving time problem.

2005-04-11 Thread Stewart, Eric
Tripwire seems to freak out a bit during DST changes on my
Windows boxes; the timestamps on a lot of the files change by an hour
one way or the other (depending on which switch of DST it is).
So it's a Windows problem as far as I know, but I don't know of
a fix.

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On 
 Behalf Of Fred Hebert
 Sent: Monday, April 11, 2005 9:55 AM
 To: samba@lists.samba.org
 Subject: [Samba] Daylight saving time problem.
 
 I have a small home LAN consisting of a Linux/SAMBA server 
 and 3 XP PRO
 workstations.  I use an external USB hard drive, attached to 
 my workstation,
 to backup the shared data.  The backup utility uses the DOS 
 file timestamp
 to determine which files have changed and need to be backed up.
 
 Normally the backup takes a minute or less and only backs up 
 a few files,
 but when we go on or off of daylight saving time, the backup backs up
 everything which takes about 5 hours.
 
 I also have some problems with my source code control system.
 
 At work we use all Windows stuff and don't have a problem.
 
 What's weird is that both Linux and XP have the correct times 
 before and
 after DST, but the file times on the shares seem to change 
 and are off by an
 hour.
 
 I am not sure whether it is a Windows or a Linux/SAMBA 
 problem, I am just
 hoping someone has a fix.
 
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba
 
 
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] net ads join fails

2005-04-11 Thread Dimitri Yioulos
On Monday 11 April 2005 09:42 am, you wrote:
 I have recreated my dns pointers without success and I think my krb5.conf
 file is configured correctly.  First I left this to Yast to set up but that
 didn't work and then I tried to modify it from a article I found.

 I have pasted it in below
 [libdefaults]

 #default_realm = ellisonslegal.com

 clockskew = 300

 [realms]

 ELLISONSLEGAL.COM = {

 kdc = apps.ellisonslegal.com

 #default_domain = ELLNET

 #kpasswd_server = apps.ellisonslegal.com

 }

 #ELLISONSLEGAL.COM = {

 # kdc = APPS.ELLISONSLEGAL.COM

 # admin_server = APPS.ELLISONSLEGAL.COM

 # kpasswd_server = APPS.ELLISONSLEGAL.COM

 #}

 #OTHER.REALM = {

 # kdc = OTHER.COMPUTER

 #}

 [domain_realm]

 # .my.domain = MY.REALM

 .ellisonslegal.com = ELLISONSLEGAL.COM

 [logging]

 default = SYSLOG:NOTICE:DAEMON

 kdc = FILE:/var/log/kdc.log

 kadmind = FILE:/var/log/kadmind.log

 [appdefaults]

 pam = {

 ticket_lifetime = 1d

 renew_lifetime = 1d

 forwardable = true

 proxiable = false

 retain_after_close = false

 minimum_uid = 0

 debug = false

 }


 Dimitri would you be able to repost that link for the HOW-TO please?  I
 tried it but it seems like it is broken, do you have the updated link?

 Thanks for your continued help.

 Penny

 -Original Message-
 From: Gordon Hopper [mailto:[EMAIL PROTECTED]
 Sent: 09 April 2005 00:23
 To: Penny Willisson
 Subject: RE: [Samba] net ads join fails


 You might need to add some entries to your krb5.conf file.  for example:

 [realms]
 ellisonslegal.com = {
   kdc = domain.controller.ellisonslegal.com:88
 }


 Where kdc points to a domain controller.  Doesn't need to be the primary
 domain controller, choose one close by for best performance.   (You
 shouldn't need to do this if your DNS for the domain resolves to a domain
 controller.)

 Gordon



 On Fri, 2005-04-08 at 15:41 +0100, Penny Willisson wrote:

 Thanks



 When I run 'kinit administrator' I get the following error



 kinit: krb5_get_init_creds: unable to reach any KDC in realm
 ellisonslegal.com



 any ideas???



 -Original Message-

 From:  [EMAIL PROTECTED]

 [mailto: [EMAIL PROTECTED] Behalf Of

 Dimitri Yioulos

 Sent: 08 April 2005 13:30

 To:  samba@lists.samba.org

 Subject: Re: [Samba] net ads join fails

 On Friday 08 April 2005 07:46 am, Penny Willisson wrote:
  Hi
 
 
 
  I have created the machine account on the AD server and did this logged
  in
 
  as Administrator so that should mean that the Administrator account has
  the
 
  correct permissions.
 
 
 
  I have executed the following command as suggested
 
 
 
  net ads join  [EMAIL PROTECTED] -d 2
 
 
 
  The following was output to the screen:
 
 
 
  [2005/04/08 13:33:38, 2] lib/interface.c:add_interface(81)
 
 
 
  added interface ip=10.0.0.39 bcast=10.0.255.255 nmask=255.255.0.0
 
 
 
  [2005/04/08 13:33:41, 0] libads/kerberos.c:ads_kinit_password(146)
 
 
 
  kerberos_kinit_password  [EMAIL PROTECTED] failed:
 
  Unknown code krb5 156
 
 
 
  [2005/04/08 13:33:41, 0] utils/net_ads.c:ads_startup(191)
 
 
 
  ads_connect: Unknown code krb5 156
 
 
 
  [2005/04/08 13:33:41, 2] utils/net.c:main(897)
 
 
 
  return code = -1
 
 
 
  Thanks
 
 
 
  Penny
 
 
 
  -Original Message-
 
  From: Gordon Hopper [mailto: [EMAIL PROTECTED]
 
  Sent: 06 April 2005 05:28
 
  To: Penny Willisson
 
  Subject: Re: [Samba] net ads join fails
 
 
 
 
 
 
 
  [2005/04/05 15:11:44, 3] libsmb/clikrb5.c:ads_krb5_mk_req(381)
 
 
 
ads_krb5_mk_req: krb5_cc_get_principal failed (No such file or
  directory)
 
 
 
  [2005/04/05 15:11:44, 0] libads/kerberos.c:ads_kinit_password(146)
 
 
 
kerberos_kinit_password   [EMAIL PROTECTED] failed:
  Unknown
 
  code krb5 156
 
 
 
  [2005/04/05 15:11:44, 0] utils/net_ads.c:ads_startup(191)
 
 
 
ads_connect: Unknown code krb5 156
 
 
 
 
 
 
 
 
 
  I suggest you post the output of the command you are running to join the
 
  domain (including the command), for example, net ads join -U
 
   [EMAIL PROTECTED] -d 2.
 
 
 
  Also, note that the credentials you use to join the domain are not
 
  necessarily the domain Administrator, but they need to be a user who has
 
  write privileges to the ads folder where the machine account will be
 
  created.  (It worked better for me when the machine account was already
 
  created in server manager, but according to the docs, that shouldn't be
 
  necessary.)
 
 
 
  It almost looks like the password failed.  Or perhaps the folde
 
  r you
 
  specified for the machine account does not exist.
 
 
 
  Regards,
 
 
 
  Gordon Hopper

 Try the command kinit Administrator (or  [EMAIL PROTECTED]). 
 You

 should be prompted for a password.  If, after entering the password, you're

 returned to a prompt with no further output then, in theory at least, your

 Kerberos setup is OK. If you get errors, well ...  Run that first, then try

 net ads join -U  [EMAIL PROTECTED]



 A good how-to can be found at: 
 

[Samba] Help with Domain Authentication

2005-04-11 Thread Tim Holmes
Good Morning Everyone:

 

I am running into a problem here that is beginning to frustrate me very
seriously.

 

I am running a windows 2003 Active Directory Domain that has several
Fedora Core 2 Servers in it.  One of the servers is a file server, and
another is a webserver, both of which run samba (what ever version a
recent yum update would have updated FC2 to).  I have a computer class
that will be starting creating websites this week in Front Page, and I
need to create webspace for them to post their sites to.

 

I can do this, but the procedure is very very clumsy, time consuming and
not particularly secure, and I need to get it updated and working right.

 

As it currently stands, the procedure is as follows:

 

1 Create the user directory on the webserver

2. Create the linux user - system/users and groups

3. Create a public_html directory under their home directory

4. chmod home directory 755

5. chmod public_html directory 755

6. chown home directory -R to user

7. chgrp home directory to apache

8. create samba user -- system-config-samba

9. input windows password into samba as samba password

 

 

everything should then work

 

This procedure works.  It takes 3 - 5 minutes per itineration, which
gets tedious at best.  The problem comes in the fact that next year we
want to implement a similar system for storing all of our user files on
our samba file server, and creating 250 accounts like this is just out
of the question.  

 

I realize that I am a new linux administrator, and that my understanding
of Linux and Samba are fairly limited, but it seems that there must be
an easier way of accomplishing this.  The point that especially wrankles
me is having to ask the user for their password, and then manually enter
it into samba to get it to recognize the password, it should be able to
authenticate against the active directory and work that way.  

 

I suspect that there is something that I am not doing correctly.  The
major concern and the place that I need the most help is getting the
authentication set up correctly to use the Active Directory.  It greatly
concerns me to have to ask each user for his/her password to input into
smbpasswd, I understand that samba should be able to query the AD
security database, but I cant figure out how to make it happen.

 

I can be reached on list, off list at tholmes at mcaschool.net and on
instant messenger - yahoo instant messenger - w8tah  aol instant
messenger w8tahham.

 

I am getting desperate here, as I am facing several hours of creating
accounts that I really don't have time to do.  Everything is fair game
including trashing my current samba configuration and starting over, I
just need help

 

TIM



 

Tim Holmes

 

IT Manager / Webmaster

Medina Christian Academy

A Higher Standard...

 

Jeremiah 33:3

Jeremiah 29:11

Esther 4:14

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba/LDAP Administrator taking over root

2005-04-11 Thread Paul Gienger

After installing LDAP and setting up as PDC my unix user root shows up as 
Administrator.
When I do an ls on anything that was owned by root now shows ups being owned by 
Administrator
How do I get root back?
The system seems to function OK?
 

Sounds like you for some reason set your Administrator user in LDAP to 
have a uid of 0.  This was recommended at some old version of Samba with 
LDAP, maybe in the early 3.0.x layers.  Now you should have your 
Administrator to just any other user and assign priviledges with the 
delegation tools. 

So, in a direct answer, to regain your ownership 'look' just change the 
uid of your LDAP user named Administrator to anything other than 0.

--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] NT_STATUS_WRONG_PASSWORD with multiple concurrent connects from same IP Address.

2005-04-11 Thread Blane Bramble

 
  Andrew Bartlett [EMAIL PROTECTED] 04/10/05 3:51 AM 
 On Mon, 2005-04-04 at 11:23 -0400, David Girard wrote:
  We are having a problem with SAMBA v 3.0.13 on Linux where a windows
 client
  (single IP address) makes multiple connections at the same time
  (different processes) to copy files onto our SAMBA server.  As many
 as 20
  simultaneous connections/file transfers may be occurring from the
  same client IP address.
 
  Any Ideas what may be happening?...or what we could look at next to
  try to resolve this problem?
 
 Any idea if all these connections occur on the same TCP/IP socket?  I
 suspect that the issue is the way the NTLMSSP logins occur - we may
 well
 have the negotiations overlap. 
 
 Try 'use spnego = no' on the server, and see if that helps.  I'm
 trying
 to solve this properly with Samba4, correctly handling the state
 rather
 than using various global variables...
 
 Andrew Bartlett
 

Hi, this sounds very much like the problem we are experiencing with W2k
web edition connected to a Samba server - each site runs on it's own UNC
share with it's own user and password, and periodically fails with the
NT_STATUS_WRONG_PASSWORD error. Definitely going to be the same IP,
presumably the same socket. Unfortunately use spnego = no does not
seem to have made much difference, so any other suggestions would be
much appreciated.

Thanks,

Blane.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


FW: [Samba] net ads join fails

2005-04-11 Thread Penny Willisson
Ok I deleted the incorrect conf file and set it up using Yast again here is the 
amended file.  I tried using the IP address of the server this time but I'm 
still getting the same errors as before.
 
[libdefaults]

default_realm = ELLISONSLEGAL.COM

clockskew = 300

[domain_realm]

.ELLNET = ELLISONSLEGAL.COM

[realms]

ELLISONSLEGAL.COM = {

kdc = 10.0.0.31

default_domain = ELLNET

kpasswd_server = 10.0.0.31

}

[appdefaults]

pam = {

ticket_lifetime = 1d

renew_lifetime = 1d

forwardable = true

proxiable = false

retain_after_close = false

minimum_uid = 0

}

 

Thanks

-Original Message-
From: Penny Willisson 
Sent: 11 April 2005 14:43
To: 'Gordon Hopper'; '[EMAIL PROTECTED]'
Cc: Dimitri Yioulos; samba@lists.samba.org
Subject: RE: [Samba] net ads join fails


I have recreated my dns pointers without success and I think my krb5.conf file 
is configured correctly.  First I left this to Yast to set up but that didn't 
work and then I tried to modify it from a article I found.
 
I have pasted it in below
[libdefaults]

#default_realm = ellisonslegal.com

clockskew = 300

[realms]

ELLISONSLEGAL.COM = {

kdc = apps.ellisonslegal.com

#default_domain = ELLNET

#kpasswd_server = apps.ellisonslegal.com

}

#ELLISONSLEGAL.COM = {

# kdc = APPS.ELLISONSLEGAL.COM

# admin_server = APPS.ELLISONSLEGAL.COM

# kpasswd_server = APPS.ELLISONSLEGAL.COM

#}

#OTHER.REALM = {

# kdc = OTHER.COMPUTER

#}

[domain_realm]

# .my.domain = MY.REALM

.ellisonslegal.com = ELLISONSLEGAL.COM

[logging]

default = SYSLOG:NOTICE:DAEMON

kdc = FILE:/var/log/kdc.log

kadmind = FILE:/var/log/kadmind.log

[appdefaults]

pam = {

ticket_lifetime = 1d

renew_lifetime = 1d

forwardable = true

proxiable = false

retain_after_close = false

minimum_uid = 0

debug = false

}

 
Dimitri would you be able to repost that link for the HOW-TO please?  I tried 
it but it seems like it is broken, do you have the updated link?
 
Thanks for your continued help.
 
Penny

-Original Message-
From: Gordon Hopper [mailto:[EMAIL PROTECTED]
Sent: 09 April 2005 00:23
To: Penny Willisson
Subject: RE: [Samba] net ads join fails


You might need to add some entries to your krb5.conf file.  for example:

[realms]
ellisonslegal.com = {
  kdc = domain.controller.ellisonslegal.com:88
}


Where kdc points to a domain controller.  Doesn't need to be the primary domain 
controller, choose one close by for best performance.   (You shouldn't need to 
do this if your DNS for the domain resolves to a domain controller.)

Gordon



On Fri, 2005-04-08 at 15:41 +0100, Penny Willisson wrote: 

Thanks



When I run 'kinit administrator' I get the following error



kinit: krb5_get_init_creds: unable to reach any KDC in realm ellisonslegal.com



any ideas???



-Original Message-

From:  [EMAIL PROTECTED]

[mailto: [EMAIL PROTECTED] Behalf Of

Dimitri Yioulos

Sent: 08 April 2005 13:30

To:  samba@lists.samba.org

Subject: Re: [Samba] net ads join fails





On Friday 08 April 2005 07:46 am, Penny Willisson wrote:

 Hi



 I have created the machine account on the AD server and did this logged in

 as Administrator so that should mean that the Administrator account has the

 correct permissions.



 I have executed the following command as suggested



 net ads join  [EMAIL PROTECTED] -d 2



 The following was output to the screen:



 [2005/04/08 13:33:38, 2] lib/interface.c:add_interface(81)



 added interface ip=10.0.0.39 bcast=10.0.255.255 nmask=255.255.0.0



 [2005/04/08 13:33:41, 0] libads/kerberos.c:ads_kinit_password(146)



 kerberos_kinit_password  [EMAIL PROTECTED] failed:

 Unknown code krb5 156



 [2005/04/08 13:33:41, 0] utils/net_ads.c:ads_startup(191)



 ads_connect: Unknown code krb5 156



 [2005/04/08 13:33:41, 2] utils/net.c:main(897)



 return code = -1



 Thanks



 Penny



 -Original Message-

 From: Gordon Hopper [mailto: [EMAIL PROTECTED]

 Sent: 06 April 2005 05:28

 To: Penny Willisson

 Subject: Re: [Samba] net ads join fails







 [2005/04/05 15:11:44, 3] libsmb/clikrb5.c:ads_krb5_mk_req(381)



   ads_krb5_mk_req: krb5_cc_get_principal failed (No such file or directory)



 [2005/04/05 15:11:44, 0] libads/kerberos.c:ads_kinit_password(146)



   kerberos_kinit_password   [EMAIL PROTECTED] failed: Unknown

 code krb5 156



 [2005/04/05 15:11:44, 0] utils/net_ads.c:ads_startup(191)



   ads_connect: Unknown code krb5 156









 I suggest you post the output of the command you are running to join the

 domain (including the command), for example, net ads join -U

  [EMAIL PROTECTED] -d 2.



 Also, note that the credentials you use to join the domain are not

 necessarily the domain Administrator, but they need to be a user who has

 write privileges to the ads folder where the machine account will be

 created.  (It worked better for me when the machine account was already

 created in server manager, but according to the docs, that shouldn't be

 necessary.)



 It almost looks like the password 

[Samba] I need your help.

2005-04-11 Thread Fabian Bustamante
Hi friends,

I have samba 2.2.5 on Sco Unix Open server 3.2 v 5.0.6 and I want to print from 
my sco server to shared printer in winXP client.  The questions are:  Can I do 
this with samba 2.2.5? If I could, Where I can find some help about it.?

Thanks in advance.

Regards,

Fabian.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: FW: [Samba] net ads join fails

2005-04-11 Thread Dimitri Yioulos
OK, this is closer.

Change [realms] kpasswd_server to admin_server.

I also believe that [domain realm] should read: 
ellisonlegal.com = ELLISONLEGAL.COM
.ellisonlegal.com = ELLISONLEGAL.COM

I would add to [libdefaults]:
dns_lookup_realm = true
dns_lookup_kdc = true

Try this and report back (like a good IT soldier :-) )

Dimitri

On Monday 11 April 2005 10:58 am, you wrote:
 Ok I deleted the incorrect conf file and set it up using Yast again here is
 the amended file.  I tried using the IP address of the server this time but
 I'm still getting the same errors as before.

 [libdefaults]

 default_realm = ELLISONSLEGAL.COM

 clockskew = 300

 [domain_realm]

 .ELLNET = ELLISONSLEGAL.COM

 [realms]

 ELLISONSLEGAL.COM = {

 kdc = 10.0.0.31

 default_domain = ELLNET

 kpasswd_server = 10.0.0.31

 }

 [appdefaults]

 pam = {

 ticket_lifetime = 1d

 renew_lifetime = 1d

 forwardable = true

 proxiable = false

 retain_after_close = false

 minimum_uid = 0

 }



 Thanks

 -Original Message-
 From: Penny Willisson
 Sent: 11 April 2005 14:43
 To: 'Gordon Hopper'; '[EMAIL PROTECTED]'
 Cc: Dimitri Yioulos; samba@lists.samba.org
 Subject: RE: [Samba] net ads join fails


 I have recreated my dns pointers without success and I think my krb5.conf
 file is configured correctly.  First I left this to Yast to set up but that
 didn't work and then I tried to modify it from a article I found.

 I have pasted it in below
 [libdefaults]

 #default_realm = ellisonslegal.com

 clockskew = 300

 [realms]

 ELLISONSLEGAL.COM = {

 kdc = apps.ellisonslegal.com

 #default_domain = ELLNET

 #kpasswd_server = apps.ellisonslegal.com

 }

 #ELLISONSLEGAL.COM = {

 # kdc = APPS.ELLISONSLEGAL.COM

 # admin_server = APPS.ELLISONSLEGAL.COM

 # kpasswd_server = APPS.ELLISONSLEGAL.COM

 #}

 #OTHER.REALM = {

 # kdc = OTHER.COMPUTER

 #}

 [domain_realm]

 # .my.domain = MY.REALM

 .ellisonslegal.com = ELLISONSLEGAL.COM

 [logging]

 default = SYSLOG:NOTICE:DAEMON

 kdc = FILE:/var/log/kdc.log

 kadmind = FILE:/var/log/kadmind.log

 [appdefaults]

 pam = {

 ticket_lifetime = 1d

 renew_lifetime = 1d

 forwardable = true

 proxiable = false

 retain_after_close = false

 minimum_uid = 0

 debug = false

 }


 Dimitri would you be able to repost that link for the HOW-TO please?  I
 tried it but it seems like it is broken, do you have the updated link?

 Thanks for your continued help.

 Penny

 -Original Message-
 From: Gordon Hopper [mailto:[EMAIL PROTECTED]
 Sent: 09 April 2005 00:23
 To: Penny Willisson
 Subject: RE: [Samba] net ads join fails


 You might need to add some entries to your krb5.conf file.  for example:

 [realms]
 ellisonslegal.com = {
   kdc = domain.controller.ellisonslegal.com:88
 }


 Where kdc points to a domain controller.  Doesn't need to be the primary
 domain controller, choose one close by for best performance.   (You
 shouldn't need to do this if your DNS for the domain resolves to a domain
 controller.)

 Gordon



 On Fri, 2005-04-08 at 15:41 +0100, Penny Willisson wrote:

 Thanks



 When I run 'kinit administrator' I get the following error



 kinit: krb5_get_init_creds: unable to reach any KDC in realm
 ellisonslegal.com



 any ideas???



 -Original Message-

 From:  [EMAIL PROTECTED]

 [mailto: [EMAIL PROTECTED] Behalf Of

 Dimitri Yioulos

 Sent: 08 April 2005 13:30

 To:  samba@lists.samba.org

 Subject: Re: [Samba] net ads join fails

 On Friday 08 April 2005 07:46 am, Penny Willisson wrote:
  Hi
 
 
 
  I have created the machine account on the AD server and did this logged
  in
 
  as Administrator so that should mean that the Administrator account has
  the
 
  correct permissions.
 
 
 
  I have executed the following command as suggested
 
 
 
  net ads join  [EMAIL PROTECTED] -d 2
 
 
 
  The following was output to the screen:
 
 
 
  [2005/04/08 13:33:38, 2] lib/interface.c:add_interface(81)
 
 
 
  added interface ip=10.0.0.39 bcast=10.0.255.255 nmask=255.255.0.0
 
 
 
  [2005/04/08 13:33:41, 0] libads/kerberos.c:ads_kinit_password(146)
 
 
 
  kerberos_kinit_password  [EMAIL PROTECTED] failed:
 
  Unknown code krb5 156
 
 
 
  [2005/04/08 13:33:41, 0] utils/net_ads.c:ads_startup(191)
 
 
 
  ads_connect: Unknown code krb5 156
 
 
 
  [2005/04/08 13:33:41, 2] utils/net.c:main(897)
 
 
 
  return code = -1
 
 
 
  Thanks
 
 
 
  Penny
 
 
 
  -Original Message-
 
  From: Gordon Hopper [mailto: [EMAIL PROTECTED]
 
  Sent: 06 April 2005 05:28
 
  To: Penny Willisson
 
  Subject: Re: [Samba] net ads join fails
 
 
 
 
 
 
 
  [2005/04/05 15:11:44, 3] libsmb/clikrb5.c:ads_krb5_mk_req(381)
 
 
 
ads_krb5_mk_req: krb5_cc_get_principal failed (No such file or
  directory)
 
 
 
  [2005/04/05 15:11:44, 0] libads/kerberos.c:ads_kinit_password(146)
 
 
 
kerberos_kinit_password   [EMAIL PROTECTED] failed:
  Unknown
 
  code krb5 156
 
 
 
  [2005/04/05 15:11:44, 0] utils/net_ads.c:ads_startup(191)
 
 
 
ads_connect: Unknown code krb5 156
 
 
 
 
 
 
 
 
 

RE: FW: [Samba] net ads join fails

2005-04-11 Thread Penny Willisson
Sorry the same problem is still happening.

Thanks

-Original Message-
From: Dimitri Yioulos [mailto:[EMAIL PROTECTED]
Sent: 11 April 2005 16:38
To: Penny Willisson
Subject: Re: FW: [Samba] net ads join fails


OK, this is closer.

Change [realms] kpasswd_server to admin_server.

I also believe that [domain realm] should read: 
ellisonlegal.com = ELLISONLEGAL.COM
.ellisonlegal.com = ELLISONLEGAL.COM

I would add to [libdefaults]:
dns_lookup_realm = true
dns_lookup_kdc = true

Try this and report back (like a good IT soldier :-) )

Dimitri

On Monday 11 April 2005 10:58 am, you wrote:
 Ok I deleted the incorrect conf file and set it up using Yast again here is
 the amended file.  I tried using the IP address of the server this time but
 I'm still getting the same errors as before.

 [libdefaults]

 default_realm = ELLISONSLEGAL.COM

 clockskew = 300

 [domain_realm]

 .ELLNET = ELLISONSLEGAL.COM

 [realms]

 ELLISONSLEGAL.COM = {

 kdc = 10.0.0.31

 default_domain = ELLNET

 kpasswd_server = 10.0.0.31

 }

 [appdefaults]

 pam = {

 ticket_lifetime = 1d

 renew_lifetime = 1d

 forwardable = true

 proxiable = false

 retain_after_close = false

 minimum_uid = 0

 }



 Thanks

 -Original Message-
 From: Penny Willisson
 Sent: 11 April 2005 14:43
 To: 'Gordon Hopper'; '[EMAIL PROTECTED]'
 Cc: Dimitri Yioulos; samba@lists.samba.org
 Subject: RE: [Samba] net ads join fails


 I have recreated my dns pointers without success and I think my krb5.conf
 file is configured correctly.  First I left this to Yast to set up but that
 didn't work and then I tried to modify it from a article I found.

 I have pasted it in below
 [libdefaults]

 #default_realm = ellisonslegal.com

 clockskew = 300

 [realms]

 ELLISONSLEGAL.COM = {

 kdc = apps.ellisonslegal.com

 #default_domain = ELLNET

 #kpasswd_server = apps.ellisonslegal.com

 }

 #ELLISONSLEGAL.COM = {

 # kdc = APPS.ELLISONSLEGAL.COM

 # admin_server = APPS.ELLISONSLEGAL.COM

 # kpasswd_server = APPS.ELLISONSLEGAL.COM

 #}

 #OTHER.REALM = {

 # kdc = OTHER.COMPUTER

 #}

 [domain_realm]

 # .my.domain = MY.REALM

 .ellisonslegal.com = ELLISONSLEGAL.COM

 [logging]

 default = SYSLOG:NOTICE:DAEMON

 kdc = FILE:/var/log/kdc.log

 kadmind = FILE:/var/log/kadmind.log

 [appdefaults]

 pam = {

 ticket_lifetime = 1d

 renew_lifetime = 1d

 forwardable = true

 proxiable = false

 retain_after_close = false

 minimum_uid = 0

 debug = false

 }


 Dimitri would you be able to repost that link for the HOW-TO please?  I
 tried it but it seems like it is broken, do you have the updated link?

 Thanks for your continued help.

 Penny

 -Original Message-
 From: Gordon Hopper [mailto:[EMAIL PROTECTED]
 Sent: 09 April 2005 00:23
 To: Penny Willisson
 Subject: RE: [Samba] net ads join fails


 You might need to add some entries to your krb5.conf file.  for example:

 [realms]
 ellisonslegal.com = {
   kdc = domain.controller.ellisonslegal.com:88
 }


 Where kdc points to a domain controller.  Doesn't need to be the primary
 domain controller, choose one close by for best performance.   (You
 shouldn't need to do this if your DNS for the domain resolves to a domain
 controller.)

 Gordon



 On Fri, 2005-04-08 at 15:41 +0100, Penny Willisson wrote:

 Thanks



 When I run 'kinit administrator' I get the following error



 kinit: krb5_get_init_creds: unable to reach any KDC in realm
 ellisonslegal.com



 any ideas???



 -Original Message-

 From:  [EMAIL PROTECTED]

 [mailto: [EMAIL PROTECTED] Behalf Of

 Dimitri Yioulos

 Sent: 08 April 2005 13:30

 To:  samba@lists.samba.org

 Subject: Re: [Samba] net ads join fails

 On Friday 08 April 2005 07:46 am, Penny Willisson wrote:
  Hi
 
 
 
  I have created the machine account on the AD server and did this logged
  in
 
  as Administrator so that should mean that the Administrator account has
  the
 
  correct permissions.
 
 
 
  I have executed the following command as suggested
 
 
 
  net ads join  [EMAIL PROTECTED] -d 2
 
 
 
  The following was output to the screen:
 
 
 
  [2005/04/08 13:33:38, 2] lib/interface.c:add_interface(81)
 
 
 
  added interface ip=10.0.0.39 bcast=10.0.255.255 nmask=255.255.0.0
 
 
 
  [2005/04/08 13:33:41, 0] libads/kerberos.c:ads_kinit_password(146)
 
 
 
  kerberos_kinit_password  [EMAIL PROTECTED] failed:
 
  Unknown code krb5 156
 
 
 
  [2005/04/08 13:33:41, 0] utils/net_ads.c:ads_startup(191)
 
 
 
  ads_connect: Unknown code krb5 156
 
 
 
  [2005/04/08 13:33:41, 2] utils/net.c:main(897)
 
 
 
  return code = -1
 
 
 
  Thanks
 
 
 
  Penny
 
 
 
  -Original Message-
 
  From: Gordon Hopper [mailto: [EMAIL PROTECTED]
 
  Sent: 06 April 2005 05:28
 
  To: Penny Willisson
 
  Subject: Re: [Samba] net ads join fails
 
 
 
 
 
 
 
  [2005/04/05 15:11:44, 3] libsmb/clikrb5.c:ads_krb5_mk_req(381)
 
 
 
ads_krb5_mk_req: krb5_cc_get_principal failed (No such file or
  directory)
 
 
 
  [2005/04/05 15:11:44, 0] libads/kerberos.c:ads_kinit_password(146)

Re: [Samba] NT_STATUS_WRONG_PASSWORD with multiple concurrent connects from same IP Address.

2005-04-11 Thread Blane Bramble
On Mon, 2005-04-11 at 15:35 +0100, Blane Bramble wrote:
  
   Andrew Bartlett [EMAIL PROTECTED] 04/10/05 3:51 AM 
  
  Any idea if all these connections occur on the same TCP/IP socket?  I
  suspect that the issue is the way the NTLMSSP logins occur - we may
  well
  have the negotiations overlap. 
  
  Try 'use spnego = no' on the server, and see if that helps.  I'm
  trying
  to solve this properly with Samba4, correctly handling the state
  rather
  than using various global variables...
  
  Andrew Bartlett
  
 
 Hi, this sounds very much like the problem we are experiencing with W2k
 web edition connected to a Samba server - each site runs on it's own UNC
 share with it's own user and password, and periodically fails with the
 NT_STATUS_WRONG_PASSWORD error. Definitely going to be the same IP,
 presumably the same socket. Unfortunately use spnego = no does not
 seem to have made much difference, so any other suggestions would be
 much appreciated.

Replying to myself... would it be possible to use the existing OPLOCK
based queueing code to make force an authorisation request into the
pending queue if another auth request is still being processed?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Session Control Through LDAP/SAMBA

2005-04-11 Thread Donald Gunn
I need to limit certain users to  logging in just once 
Can it be done through LDAP/SAMBA?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Problems with CIFS and fstab because of user= parameter.

2005-04-11 Thread Chris
I'm seeing a conflict that I haven't discovered how to workaround (if indeed 
it can be done).
The problem exists when one wants to use an /etc/fstab entry to allow a user 
to mount the share. Take the following fstab entry as an example:

//server/share  /mnt/point  cifs  rw,user,noauto  0 0

Unlike smbfs where the user name parameter must be username, the user name 
parameter with cifs is user which conflicts with the fstab user entry 
that allows a user mount capabilities.
When using user in fstab the entry effectively overwrites any 
user=username parameter making mounting impossible, and without user in 
fstab only root can mount the share - catch 22.
One can simply forego the fstab entry but then both the share and mountpoint 
need to be entered plus some fstab automounting capabilities may be lost.

One solution might be to drop user as a valid user name parameter and, as 
smbfs does, use username instead (cifs can use username for backward 
compatibility but it doesn't solve the issue as it gets translated to user).

Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: FW: [Samba] net ads join fails

2005-04-11 Thread Craig White
On Mon, 2005-04-11 at 16:51 +0100, Penny Willisson wrote:
 Sorry the same problem is still happening.
---
it would probably help if you gave us more info...started over...

what is output?

cat /etc/resolv.conf

cat /etc/krb5.conf

terminal output of 

kinit Administrator
and/or
kinit [EMAIL PROTECTED]

Craig

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.7-2 and IIS6

2005-04-11 Thread Jeremy Allison
On Mon, Apr 11, 2005 at 10:02:16AM +0100, Blane Bramble wrote:
 Hi, we are using Samba as a network attached storage server for our web-
 servers, and have an oddity with Windows 2003/IIS6 where some of the
 sites seem to lose their connection for short periods of time (up to
 about 1/2 an hour at most). During this time the web server reports
 either a 500 or 401 error. There doesn't appear to be anything in the
 Samba logs that indicated any problems - has anyone else experienced
 anything like this?

Can you get a debug level 10 log when the problem is occurring ?

Thanks,

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Wins questions

2005-04-11 Thread Derek Harkness
Does anyone have any recommendations or possibly patches to allow WINS 
replications from a Samba PDC to a Samba BDC?

Thanks!
Derek
My lack of knowledge is only exceeded by my lack of concern.
--Anonymous GE Engineer


PGP.sig
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 3.x SVN and OS/2 support.

2005-04-11 Thread Jeremy Allison
On Sun, Apr 10, 2005 at 03:56:33PM +0200, Andrea Venturoli wrote:
 Jeremy Allison wrote:
 
 If you SVN checkout it should be fixed now. Sorry for the problem.
 
 No problem and many thanks.
 
 Now I was able to compile, but I get exactly the same behaviour as 
 before: with ea support turned on, I get no EAs if I copy something via 
 command line, while WPS copy still fails with an error.
 I can provide another tcpdump if needed.

I could do with a capture trace plus a debug level 10 log covering the
same activity. Remember to capture all the packet length and send the
raw capture, not a text reprepsentation of it.

Thanks,

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.081013, Fedora 3, and MS-Access

2005-04-11 Thread Daniel Latshaw
Hello,

I have a Fecora Core 3 with the default Samba that is included with
Fedora installed.  This is a replacement for a Red Hat 8/Samba 2.? server.

The users run an industry specific customer/job tracking software bassed
on MS-Access 2000 as well as basic file sharing.

My basic file shares work OK.  But, the Access database is now having
problems.  Specificly, when new orders are created they sometimes have
the same order number.  Also, when two machines try to create a new
order within minutes of eachother i get a Microsoft Jet Database Error
saying that a part of the file is open by someone else.

I know this sounds like software, but i've exhausted all avenues with
them, and it has only started with the new server.

In searching i've found i should disable oplocks.  I've done that and
Level2 Oplocks as well.  I've Disabled all file locking on that share
and still get errors.

The directory and files are 777 and the owner is nobody.

Here is my share description:

[pp2000]
oplocks = no
writeable = yes
locking = no
path = /srv/PrintersPlan2000
force directory mode = 777
force group = nobody
sync always = yes
strict sync = yes
force create mode = 777
force user = nobody
guest only = yes
public = yes
create mode = 777
directory mode = 777

On the old server i had this:

[pp2000]
path = /srv/PrintersPlan2000
writeable = yes
guest ok = Yes

and everything was OK.

Any Help is appreciated.

Thanks,

Daniel H. Latshaw

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] checking two different domains

2005-04-11 Thread Terry Poperszky
AD 2003
Samba 3.0.11
Suse 9.2
I have Samba/Winbind configured to authenticate against the AD and it 
works fine, I can also authenticate against a trusted NT4.0 domain 
through the AD by using DOMAIN\USER. Now here comes the rub, the 
specs my programmers are being given do not allow for the to be asked 
for his domain, do you know of anyway I can authenticate against both 
the AD and the NT domain automatically?

Terry Poperszky
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Browsing Problems

2005-04-11 Thread Paul
Hi guys. I am posting a reply here because I haven't seen any replies to my
earlier thread Browse sync problem, thinking one of you might have the
expertise to help me :)

I have 3 subnets (freeswan connection) and believe I have DMB and 2 X LMB's
and WINS configured properly (according to samba docs.) I can't seem to get
the browse lists to sync/collate however :( The announcements seem to be OK
and the sync's initiate however there are always 0 records returned on and
the browse.dat files on each box contain only the machines on that subnet
(my understanding is they should merge/sync.)

Here is a partial log. Thanks for any help!

[2005/03/31 18:53:58, 2] nmbd/nmbd_browsesync.c:sync_with_lmb(69)
  sync_with_lmb:
  Initiating sync with local master browser PICKLE0x20 at IP 192.168.5.1
for workgroup TEST[2005/03/31 18:53:58, 2]
nmbd/nmbd_synclists.c:sync_browse_lists(171)
  Initiating browse sync for TEST to PICKLE(192.168.5.1)
[2005/03/31 18:53:58, 3] lib/util_sock.c:open_socket_out(845)
  Connecting to 192.168.5.1 at port 139 [2005/03/31 18:53:58, 2]
nmbd/nmbd_synclists.c:complete_sync(286)
  sync with PICKLE(192.168.5.1) for workgroup TEST completed (0 records)




Jonathan Johnson [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
 You might also try:

 [global]

os level = 65

 This seems to ensure that the Samba box will win browser elections. Be 
 sure to read the man page (help button in SWAT, if you're so inclined).

 ~Jonathan Johnson
 Sutinen Consulting, Inc.
 www.sutinen.com

 Andrea Venturoli wrote:

 micheletto wrote:

 have yuo tried to say no in domian master?


 No, I didn't.
 In fact I'd like it to be a domain master.
 I only think it has memorized about this 192.168.100.5 somewhere and I 
 need to force samba to forget about it.

  bye  Thanks
 av.

 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba



Andrea Venturoli [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
 Hello.
 I've got a Samba server and I'd like it to be master browser and 
 everything else except domain controller (the customers wants a workgroup, 
 not a domain).

 Lately a Windows 2003 server was added to the net and then I guess it was 
 removed.
 I keep getting messages like the following in the logs:

 Apr 10 03:07:51 apocalypse nmbd[57552]: [2005/04/10 03:07:51, 0] 
 nmbd/nmbd_browsesync.c:get_domain_master_name_node_status_fail(488) Apr 
 10 03:07:51 apocalypse nmbd[57552]: 
 get_domain_master_name_node_status_fail: Apr 10 03:07:51 apocalypse 
 nmbd[57552]:   Doing a node status request to the domain master browser 
 at IP 192.168.100.5 failed.

 In my smb.conf I have:

os level = 99
wins support = yes
local master = yes
preferred master = yes
domain master = yes



 I read the relevant chapters in the Official How-To, but found no answer: 
 how can I get rid of this problem?

  bye  Thanks
 av.

 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba




Andrea Venturoli [EMAIL PROTECTED] wrote in message 
news:[EMAIL PROTECTED]
 Hello.
 I've got a Samba server and I'd like it to be master browser and 
 everything else except domain controller (the customers wants a workgroup, 
 not a domain).

 Lately a Windows 2003 server was added to the net and then I guess it was 
 removed.
 I keep getting messages like the following in the logs:

 Apr 10 03:07:51 apocalypse nmbd[57552]: [2005/04/10 03:07:51, 0] 
 nmbd/nmbd_browsesync.c:get_domain_master_name_node_status_fail(488) Apr 
 10 03:07:51 apocalypse nmbd[57552]: 
 get_domain_master_name_node_status_fail: Apr 10 03:07:51 apocalypse 
 nmbd[57552]:   Doing a node status request to the domain master browser 
 at IP 192.168.100.5 failed.

 In my smb.conf I have:

os level = 99
wins support = yes
local master = yes
preferred master = yes
domain master = yes



 I read the relevant chapters in the Official How-To, but found no answer: 
 how can I get rid of this problem?

  bye  Thanks
 av.

 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba
 



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbpasswd, tdb_fetch_uint32 failed

2005-04-11 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Nicolas Kowalski wrote:
| Hello,
|
| Since I upgraded my samba PDC from 3.0.11 to 3.0.13, I have
| some strange warnings when changing the passwords with
| 'smbpasswd' (it works, but gives these messages):
|
| # smbpasswd username
| New SMB password:
| Retype new SMB password:
| account_policy_get: tdb_fetch_uint32 failed for field 4 (maximum
password age (seconds since 1970)), returning 0
| account_policy_get: tdb_fetch_uint32 failed for field 5 (minimum
password age (seconds since 1970)), returning 0
Should be fixed in 3.0.14 once it is out in the next day or so.



cheers, jerry
=
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
I never saved anything for the swim back. Ethan Hawk in Gattaca
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCWqUwIR7qMdg1EfYRArxEAKDXLNFome1rZei1xmhRqLOyl8YFjQCgouO1
QrF9rLhhA+1KzXGNhMHuOaw=
=mGaC
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Session Control Through LDAP/SAMBA

2005-04-11 Thread John H Terpstra
On Monday 11 April 2005 10:02, Donald Gunn wrote:
 I need to limit certain users to  logging in just once
 Can it be done through LDAP/SAMBA?

You would need to create a script that is executed by the root preexec 
facility to cause mutiple connections to be disallowed. It can be done, 
though I am not aware of any scripts that are available from currently 
contributed sources that permit this.

- John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] NT_STATUS_WRONG_PASSWORD with multiple concurrent connects from same IP Address.

2005-04-11 Thread Andrew Bartlett
On Mon, 2005-04-11 at 16:51 +0100, Blane Bramble wrote:

 Replying to myself... would it be possible to use the existing OPLOCK
 based queueing code to make force an authorisation request into the
 pending queue if another auth request is still being processed?

I would prefer just to correctly handle the multiple outstanding
authentication requests.  But this is only an issue if 'use spnego =
yes', as otherwise authentication occurs on a single packet context, and
should already handle a 'backlog'.  (As is seen when people do things
like aim the squid smb-based ntlm helpers at us, with 1000's of session
setups...).

In any case, I'm looking to write a torture test for Samba4, to recreate
the issue there, and from those results we might be able to fix 3.0 (it
is harder to do in 3.0 than in 4, due to more complex code).

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] PDC Shows up as a domain

2005-04-11 Thread Charles McLaughlin
Hello,
My Samba server acting as a PDC shows up as an empty domain on my 
Windows clients under My Network Places.

My PDC is called PDC and my domain is called SOC.  I see PDC and SOC 
in My Network Places.

Another strange problem is when I use the Windows Server Manager tool 
from servtools.exe, it says Cannot find the Primary DC for PDC.  Why 
is it looking for the PDC and not the Domain?

My settings are below in case that helps.
Thanks,
Charles
---
# Global parameters
[global]
workgroup = SOC
passdb backend = tdbsam
passwd chat = *New*Password* %n\n*Re-enter*new*password* %n\n 
*Password*changed*
username map = /etc/samba/smbusers
log level = 2
log file = /var/log/samba/%m
max log size = 50
name resolve order = wins bcast hosts
time server = Yes
add user script = /usr/sbin/useradd -m '%u'
delete user script = /usr/sbin/userdel -r '%u'
add group script = /usr/sbin/groupadd '%g'
delete group script = /usr/sbin/groupdel '%g'
add user to group script = /usr/sbin/usermod -G '%g' '%u'
add machine script = /usr/sbin/useradd -s /bin/false -d 
/var/lib/nobody '%u'
logon path =
logon home =
domain logons = Yes
preferred master = Yes
wins support = Yes

[homes]
comment = Home Directories
valid users = %S
read only = No
browseable = No
[netlogon]
comment = Network Logon Service
path = /home/samba/netlogon
guest ok = Yes
locking = No
[profiles]
comment = Profile Share
path = /home/samba/profiles
read only = No
profile acls = Yes
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba log messages

2005-04-11 Thread Paulo Roberto Dorow
The following messages keep appearing in my logs many times per hour:

 [2005/04/09 04:30:08, 0]
nmbd/nmbd_browsesync.c:domain_master_node_status_fail(250)
 domain_master_node_status_fail:
 Doing a node status request to the domain master browser
 for workgroup DESENVOLVIMENTO at IP 200.175.48.zzz failed.
 Cannot sync browser lists.
[2005/04/09 04:34:49, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_query_success(225)
become_domain_master_query_success:
There is already a domain master browser at IP 200.175.48.zzz for workgroup
DESENVOLVIMENTO registered on subnet UNICAST_SUBNET.

The zzz is on me.

I have two interfaces, one for the local network(eth1) and the other
connected to the internet(eth0). But I want to serve samba only to the local
network

In smb.conf I have the lines:

interfaces = 192.168.0.1/24 127.0.0.1
bind interfaces only = yes

So, why is samba trying to sync browser lists and do other things at
200.175.48.zzz? Anything else I should do?

Thanks.




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] NT_Create_AndX

2005-04-11 Thread david rankin
From: Gerald (Jerry) Carter [EMAIL PROTECTED]
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Zach Seils wrote:
| Hi -
|
| Is there a way to tell Samba to use the NT_Create_AndX
| style of commands (vs SMB_COM_OPEN)?
In smbclient ?  Not currently.  The last time I looked
A month or so ago, the SMBOpen was still hard coded.
There was an NTcreateX test in there somewhere but
it is not used for actually reading/writing files.
   Jerry, is there any chance that this is related to the MS Office 2003 
file-open or file-save dialog NT_Create_AndX errors I'm getting that 
is causing 30 sec delays in changing directories? I still haven't gotten to 
the bottom of this, but it is definately Office 2003 related. The users 
running Office 2000 do not see any of the delays that the 2003 users do.

--
David C. Rankin, J.D., P.E.
RANKIN LAW FIRM, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
(936) 715-9333
(936) 715-9339 fax
www.rankinlawfirm.com
--
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba log messages

2005-04-11 Thread Hugo Brites
On Monday 11 April 2005 21:49, Hugo Brites wrote:
 On Monday 11 April 2005 21:16, Paulo Roberto Dorow wrote:
  The following messages keep appearing in my logs many times per hour:
 
   [2005/04/09 04:30:08, 0]
  nmbd/nmbd_browsesync.c:domain_master_node_status_fail(250)
   domain_master_node_status_fail:
   Doing a node status request to the domain master browser
   for workgroup DESENVOLVIMENTO at IP 200.175.48.zzz failed.
   Cannot sync browser lists.
  [2005/04/09 04:34:49, 0]
  nmbd/nmbd_become_dmb.c:become_domain_master_query_success(225)
  become_domain_master_query_success:
  There is already a domain master browser at IP 200.175.48.zzz for
  workgroup DESENVOLVIMENTO registered on subnet UNICAST_SUBNET.
 
  The zzz is on me.
 
  I have two interfaces, one for the local network(eth1) and the other
  connected to the internet(eth0). But I want to serve samba only to the
  local network
 
  In smb.conf I have the lines:
 
  interfaces = 192.168.0.1/24 127.0.0.1
  bind interfaces only = yes
 
  So, why is samba trying to sync browser lists and do other things at
  200.175.48.zzz? Anything else I should do?
 
  Thanks.

 Hi,

  Try
interfaces = eth0

  should do the trick.

 Regards
 --
 Hugo Brites
 CI - Isla Leiria
 244 820 650
 http://www.islaleiria.pt
 [EMAIL PROTECTED]
Sorry my last email
 I wanted to say eth1, not eth0

regards
-- 
Hugo Brites
CI - Isla Leiria
244 820 650
http://www.islaleiria.pt
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba log messages

2005-04-11 Thread Hugo Brites
On Monday 11 April 2005 21:16, Paulo Roberto Dorow wrote:
 The following messages keep appearing in my logs many times per hour:

  [2005/04/09 04:30:08, 0]
 nmbd/nmbd_browsesync.c:domain_master_node_status_fail(250)
  domain_master_node_status_fail:
  Doing a node status request to the domain master browser
  for workgroup DESENVOLVIMENTO at IP 200.175.48.zzz failed.
  Cannot sync browser lists.
 [2005/04/09 04:34:49, 0]
 nmbd/nmbd_become_dmb.c:become_domain_master_query_success(225)
 become_domain_master_query_success:
 There is already a domain master browser at IP 200.175.48.zzz for workgroup
 DESENVOLVIMENTO registered on subnet UNICAST_SUBNET.

 The zzz is on me.

 I have two interfaces, one for the local network(eth1) and the other
 connected to the internet(eth0). But I want to serve samba only to the
 local network

 In smb.conf I have the lines:

 interfaces = 192.168.0.1/24 127.0.0.1
 bind interfaces only = yes

 So, why is samba trying to sync browser lists and do other things at
 200.175.48.zzz? Anything else I should do?

 Thanks.
Hi,

 Try 
   interfaces = eth0

 should do the trick.

Regards
-- 
Hugo Brites
CI - Isla Leiria
244 820 650
http://www.islaleiria.pt
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] NT_Create_AndX

2005-04-11 Thread Jeremy Allison
On Mon, Apr 11, 2005 at 03:47:59PM -0500, david rankin wrote:
 From: Gerald (Jerry) Carter [EMAIL PROTECTED]
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 Zach Seils wrote:
 | Hi -
 |
 | Is there a way to tell Samba to use the NT_Create_AndX
 | style of commands (vs SMB_COM_OPEN)?
 
 In smbclient ?  Not currently.  The last time I looked
 A month or so ago, the SMBOpen was still hard coded.
 There was an NTcreateX test in there somewhere but
 it is not used for actually reading/writing files.
 
 
Jerry, is there any chance that this is related to the MS Office 2003 
 file-open or file-save dialog NT_Create_AndX errors I'm getting that 
 is causing 30 sec delays in changing directories? I still haven't gotten to 
 the bottom of this, but it is definately Office 2003 related. The users 
 running Office 2000 do not see any of the delays that the 2003 users do.

No, this is a client library issue, not a server one. I thought someone
had posted info on Microsoft information on this problem ?

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Samba log messages

2005-04-11 Thread Paulo Roberto Dorow

Thanks Hugo.

Unfortunately I had tried that before, but to be sure I just did it again,
using the interface name instead, but it keeps giving the same messages.
Usually I get one about every 10 to 15 minutes.

Hugo Brites [EMAIL PROTECTED] escreveu na mensagem
news:[EMAIL PROTECTED]
 On Monday 11 April 2005 21:49, Hugo Brites wrote:
  On Monday 11 April 2005 21:16, Paulo Roberto Dorow wrote:
   The following messages keep appearing in my logs many times per hour:
  
[2005/04/09 04:30:08, 0]
   nmbd/nmbd_browsesync.c:domain_master_node_status_fail(250)
domain_master_node_status_fail:
Doing a node status request to the domain master browser
for workgroup DESENVOLVIMENTO at IP 200.175.48.zzz failed.
Cannot sync browser lists.
   [2005/04/09 04:34:49, 0]
   nmbd/nmbd_become_dmb.c:become_domain_master_query_success(225)
   become_domain_master_query_success:
   There is already a domain master browser at IP 200.175.48.zzz for
   workgroup DESENVOLVIMENTO registered on subnet UNICAST_SUBNET.
  
   The zzz is on me.
  
   I have two interfaces, one for the local network(eth1) and the other
   connected to the internet(eth0). But I want to serve samba only to the
   local network
  
   In smb.conf I have the lines:
  
   interfaces = 192.168.0.1/24 127.0.0.1
   bind interfaces only = yes
  
   So, why is samba trying to sync browser lists and do other things at
   200.175.48.zzz? Anything else I should do?
  
   Thanks.
 
  Hi,
 
   Try
 interfaces = eth0
 
   should do the trick.
 
  Regards
  --
  Hugo Brites
  CI - Isla Leiria
  244 820 650
  http://www.islaleiria.pt
  [EMAIL PROTECTED]
 Sorry my last email
  I wanted to say eth1, not eth0

 regards
 -- 
 Hugo Brites
 CI - Isla Leiria
 244 820 650
 http://www.islaleiria.pt
 [EMAIL PROTECTED]
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Linux Users execute 'login scripts'

2005-04-11 Thread Bruno Tobias Stella
Hello !

  I have a Samba Server with LDAP(OpenLDAP) authentication and Windows 
Workstation that
login in domain working all right.

  Now, I need to configure Linux workstations to log in Samba Server Domain. 
The Linux
workstatios users are all in LDAP. How do I configure to execute the 'login 
script' when a
Linux user log in his linux workstation ?


  Thanks for any help !

Bruno Stella
[EMAIL PROTECTED]
Setor de Redes - (19) 3031-4165
Secretaria de Informatica
Tribunal Regional do Trabalho da 15a. Regiao
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Samba log messages

2005-04-11 Thread Hugo Brites
On Monday 11 April 2005 22:05, Paulo Roberto Dorow wrote:
 Thanks Hugo.

 Unfortunately I had tried that before, but to be sure I just did it again,
 using the interface name instead, but it keeps giving the same messages.
 Usually I get one about every 10 to 15 minutes.

 Hugo Brites [EMAIL PROTECTED] escreveu na mensagem
 news:[EMAIL PROTECTED]

  On Monday 11 April 2005 21:49, Hugo Brites wrote:
   On Monday 11 April 2005 21:16, Paulo Roberto Dorow wrote:
The following messages keep appearing in my logs many times per hour:
   
 [2005/04/09 04:30:08, 0]
nmbd/nmbd_browsesync.c:domain_master_node_status_fail(250)
 domain_master_node_status_fail:
 Doing a node status request to the domain master browser
 for workgroup DESENVOLVIMENTO at IP 200.175.48.zzz failed.
 Cannot sync browser lists.
[2005/04/09 04:34:49, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_query_success(225)
become_domain_master_query_success:
There is already a domain master browser at IP 200.175.48.zzz for
workgroup DESENVOLVIMENTO registered on subnet UNICAST_SUBNET.
   
The zzz is on me.
   
I have two interfaces, one for the local network(eth1) and the other
connected to the internet(eth0). But I want to serve samba only to
the local network
   
In smb.conf I have the lines:
   
interfaces = 192.168.0.1/24 127.0.0.1
bind interfaces only = yes
   
So, why is samba trying to sync browser lists and do other things at
200.175.48.zzz? Anything else I should do?
   
Thanks.
  
   Hi,
  
Try
  interfaces = eth0
  
should do the trick.
  
   Regards
   --
   Hugo Brites
   CI - Isla Leiria
   244 820 650
   http://www.islaleiria.pt
   [EMAIL PROTECTED]
 
  Sorry my last email
   I wanted to say eth1, not eth0
 
  regards
  --
  Hugo Brites
  CI - Isla Leiria
  244 820 650
  http://www.islaleiria.pt
  [EMAIL PROTECTED]
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/listinfo/samba
Hi,

 I will try here to see what wappens

regards
-- 
Hugo Brites
CI - Isla Leiria
244 820 650
http://www.islaleiria.pt
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Linux Users execute 'login scripts'

2005-04-11 Thread Misty Stanley-Jones
On Monday 11 April 2005 04:09 pm, Bruno Tobias Stella wrote:
 Hello !

   I have a Samba Server with LDAP(OpenLDAP) authentication and Windows
 Workstation that login in domain working all right.

   Now, I need to configure Linux workstations to log in Samba Server
 Domain. The Linux workstatios users are all in LDAP. How do I configure to
 execute the 'login script' when a Linux user log in his linux workstation ?

I would go at this a different way.  You are storing loginShell in LDAP, 
correct?  Then simply create a per-user .bashrc or .login file and put that 
in their /home directory, preferrably when initially creating the account by 
means of /etc/skel.  None of the commands are going to be the same as the 
Windows (or I can't imagine them being), so I think this is your best bet.  
Of course you would need to make the .bashrc or .login read-only to the user, 
to prevent him/her changing it.

Misty



   Thanks for any help !

 Bruno Stella
 [EMAIL PROTECTED]
 Setor de Redes - (19) 3031-4165
 Secretaria de Informatica
 Tribunal Regional do Trabalho da 15a. Regiao
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Samba log messages

2005-04-11 Thread Hugo Brites
On Monday 11 April 2005 22:11, Hugo Brites wrote:
 On Monday 11 April 2005 22:05, Paulo Roberto Dorow wrote:
  Thanks Hugo.
 
  Unfortunately I had tried that before, but to be sure I just did it
  again, using the interface name instead, but it keeps giving the same
  messages. Usually I get one about every 10 to 15 minutes.
 
  Hugo Brites [EMAIL PROTECTED] escreveu na mensagem
  news:[EMAIL PROTECTED]
 
   On Monday 11 April 2005 21:49, Hugo Brites wrote:
On Monday 11 April 2005 21:16, Paulo Roberto Dorow wrote:
 The following messages keep appearing in my logs many times per
 hour:

  [2005/04/09 04:30:08, 0]
 nmbd/nmbd_browsesync.c:domain_master_node_status_fail(250)
  domain_master_node_status_fail:
  Doing a node status request to the domain master browser
  for workgroup DESENVOLVIMENTO at IP 200.175.48.zzz failed.
  Cannot sync browser lists.
 [2005/04/09 04:34:49, 0]
 nmbd/nmbd_become_dmb.c:become_domain_master_query_success(225)
 become_domain_master_query_success:
 There is already a domain master browser at IP 200.175.48.zzz for
 workgroup DESENVOLVIMENTO registered on subnet UNICAST_SUBNET.

 The zzz is on me.

 I have two interfaces, one for the local network(eth1) and the
 other connected to the internet(eth0). But I want to serve samba
 only to the local network

 In smb.conf I have the lines:

 interfaces = 192.168.0.1/24 127.0.0.1
 bind interfaces only = yes

 So, why is samba trying to sync browser lists and do other things
 at 200.175.48.zzz? Anything else I should do?

 Thanks.
   
Hi,
   
 Try
   interfaces = eth0
   
 should do the trick.
   
Regards
--
Hugo Brites
CI - Isla Leiria
244 820 650
http://www.islaleiria.pt
[EMAIL PROTECTED]
  
   Sorry my last email
I wanted to say eth1, not eth0
  
   regards
   --
   Hugo Brites
   CI - Isla Leiria
   244 820 650
   http://www.islaleiria.pt
   [EMAIL PROTECTED]
   --
   To unsubscribe from this list go to the following URL and read the
   instructions:  https://lists.samba.org/mailman/listinfo/samba

 Hi,

  I will try here to see what wappens

 regards
 --
 Hugo Brites
 CI - Isla Leiria
 244 820 650
 http://www.islaleiria.pt
 [EMAIL PROTECTED]
Hi

 Just looking at my config file, did you set
  bind interfaces only = yes
 ???

regards
-- 
Hugo Brites
CI - Isla Leiria
244 820 650
http://www.islaleiria.pt
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Linux Users execute 'login scripts'

2005-04-11 Thread Paul Gienger

Misty Stanley-Jones wrote:
On Monday 11 April 2005 04:09 pm, Bruno Tobias Stella wrote:
 

Hello !
 I have a Samba Server with LDAP(OpenLDAP) authentication and Windows
Workstation that login in domain working all right.
 Now, I need to configure Linux workstations to log in Samba Server
Domain. The Linux workstatios users are all in LDAP. How do I configure to
execute the 'login script' when a Linux user log in his linux workstation ?
   

I would go at this a different way.  You are storing loginShell in LDAP, 
correct?  Then simply create a per-user .bashrc or .login file and put that 
in their /home directory, preferrably when initially creating the account by 
means of /etc/skel.  None of the commands are going to be the same as the 
Windows (or I can't imagine them being), so I think this is your best bet.  
Of course you would need to make the .bashrc or .login read-only to the user, 
to prevent him/her changing it.
 

Or one could use the global rc file.  I believe it depends on your 
shell, but you would want to start looking at /etc/profile.

--
Paul GiengerOffice: 701-281-1884
Applied Engineering Inc.
Systems Architect   Fax:701-281-1322
URL: www.ae-solutions.com   mailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: PDC Shows up as a domain - Resolved

2005-04-11 Thread Charles McLaughlin
I noticed that this didn't affect all users, so I deleted the users and 
added them again using smbpasswd and that fixed this problem.

Charles
Charles McLaughlin wrote:
Hello,
My Samba server acting as a PDC shows up as an empty domain on my 
Windows clients under My Network Places.

My PDC is called PDC and my domain is called SOC.  I see PDC and SOC 
in My Network Places.

Another strange problem is when I use the Windows Server Manager tool 
from servtools.exe, it says Cannot find the Primary DC for PDC.  Why 
is it looking for the PDC and not the Domain?

My settings are below in case that helps.
Thanks,
Charles
---
# Global parameters
[global]
workgroup = SOC
passdb backend = tdbsam
passwd chat = *New*Password* %n\n*Re-enter*new*password* %n\n 
*Password*changed*
username map = /etc/samba/smbusers
log level = 2
log file = /var/log/samba/%m
max log size = 50
name resolve order = wins bcast hosts
time server = Yes
add user script = /usr/sbin/useradd -m '%u'
delete user script = /usr/sbin/userdel -r '%u'
add group script = /usr/sbin/groupadd '%g'
delete group script = /usr/sbin/groupdel '%g'
add user to group script = /usr/sbin/usermod -G '%g' '%u'
add machine script = /usr/sbin/useradd -s /bin/false -d 
/var/lib/nobody '%u'
logon path =
logon home =
domain logons = Yes
preferred master = Yes
wins support = Yes

[homes]
comment = Home Directories
valid users = %S
read only = No
browseable = No
[netlogon]
comment = Network Logon Service
path = /home/samba/netlogon
guest ok = Yes
locking = No
[profiles]
comment = Profile Share
path = /home/samba/profiles
read only = No
profile acls = Yes
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Compiling error in MacOSX

2005-04-11 Thread Gorb, Andrew

Dear Samba Team,

I was wondering if it be possible to get some clue as to what is causing the 
following error 
during the compiling of samba source on the MacOSX Server 10.3.8


Samba source 3.0.13

OS - MacOSX 10.3.8

Configure with the following:


 ./configure --with-ads  --with-quotas --with-utmp --with-winbind  
--with-ldapsam --with-ldap --with-vfs-afsacl --disable-cups

configuration runs fine.

I get this error when run make:

Using FLAGS =  -g -O2 -I./popt -Iinclude 
-I/Users/admin/Desktop/samba-3.0.13/source/include 
-I/Users/admin/Desktop/samba-3.0.13/source/ubiqx 
-I/Users/admin/Desktop/samba-3.0.13/source/smbwrapper  -I. -I/sw/include 
-I/Users/admin/Desktop/samba-3.0.13/source
  LIBS = -lresolv -ldl -liconv
  LDSHFLAGS = -bundle -flat_namespace -undefined suppress  -L/sw/lib
  LDFLAGS = -L/sw/lib
Compiling dynconfig.c
Compiling smbd/vfs.c
Compiling passdb/pdb_interface.c
Compiling lib/iconv.c
lib/iconv.c: In function `sys_iconv':
lib/iconv.c:139: warning: passing arg 2 of `libiconv' from incompatible pointer 
type
Compiling auth/auth.c
Compiling smbd/build_options.c
Compiling smbd/server.c
Linking bin/smbd
ld: Undefined symbols:
_ads_verify_ticket
_kerberos_kinit_password
_cups_cache_reload
make: *** [bin/smbd] Error 1

Thank you very much for your help.

Andrew
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] 3.0.13 - word cannot complete the save due to a file permission error. for smb/NFS mounted dirs

2005-04-11 Thread Jeremy Allison
On Mon, Apr 11, 2005 at 11:39:35AM +0100, Urs Rau wrote:
 I am using 3.0.13 and have temporarily run out of disk space on the main 
 samba server, so I have NFS mounted some space from another machine. 
 into a directory that is accessible under samba.
 
 When I try to save directly from ms word 2003 sp1 (and same from word 
 2000) it tells me:
 
 on the win98se and win xp pro sp2 clients:
 
 Microsoft Office Word
 Word cannot complete the save due to a file permission error.
 (I:\transfer\ursr\chidren\2005.doc)
 
 and on the server it logs
 
 [2005/04/11 11:03:06, 0] locking/posix.c:posix_fcntl_lock(659)
   on 32 bit NFS mounted file systems.
 [2005/04/11 11:03:07, 0] locking/posix.c:posix_fcntl_lock(657)
   posix_fcntl_lock: WARNING: lock request at offset 2147483538, length 
 1 returned
 [2005/04/11 11:03:07, 0] locking/posix.c:posix_fcntl_lock(658)
   an No locks available error. This can happen when using 64 bit lock 
 offsets
 [2005/04/11 11:03:07, 0] locking/posix.c:posix_fcntl_lock(659)
   on 32 bit NFS mounted file systems.
 
 Now, this does sound a bit as if this was/is expected to go wrong. But 
 if I save my document locally and then copy it with the same name and to 
 the same dir on the server there is no issue.
 
 Is there anything I can do from the samba server to avoid this error? As 
 from a unix perspective there is no permissions problem.

If your nfs locking is broken you can add strict locking = no to the
share definition exporting that part of the filesystem. That will prevent
locking from occurring on read/write access. If it's still failing (and
the nfs locking is *really* broken :-) you can add locking = no to
the share definition. But that risks file corruption.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] very slow writes from samba client to samba server

2005-04-11 Thread Matt Morgan
I'm running Fedora Core 3 on two machines; a server and a client. On
the server, I have the package samba-3.0.10-1.fc3 installed; I assume
this means I have samba version 3.0.10. On the client, I have
samba-client-3.0.10-1.fc3, i.e., the same version.

On the same network, I have a Windows XP home machine that connects to
the same shares as the FC3 client machine.

Reading and writing files on the WinXP machine to and from the server
works perfectly. Reading files stored on the server from the FC3
client machine also works fine. But when I try to write files from FC3
client to FC3 server, it takes a very long time. Extremely long, like
 1mbit/s, and this is a 100mbit/s network. Actually, it takes so long
that for a file of any real size (1Mb+) the copy/save errors out
before the writing is done.

I have googled this issue, and written to fedora-list, but nothing is
helping so far. All the advice suggests that this is a master-browser
collision problem. So I edited my smb.conf files accordingly (setting
the os_level, etc. lower in the client), but that didn't help. Here
are my smb.conf files anyway, just in case I've done something wrong.

On the server (I've removed all commented lines for brevity):
-
[global]
   workgroup = CONCRETE
   netbios name = ONE
   server string = Samba Server
   hosts allow = 192.168.1. 127.
   printcap name = /etc/printcap
   load printers = yes
cups options = raw
 log file = /var/log/samba/%m.log
   max log size = 50
   security = user
  encrypt passwords = yes
  smb passwd file = /etc/samba/smbpasswd
   create mask = 0644
   directory mask = 0755
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   local master = yes
   os level = 33
   domain master = yes 
   preferred master = yes
   wins support = yes
   dns proxy = no 
   idmap uid = 16777216-33554431
   idmap gid = 16777216-33554431
   template shell = /bin/false
   winbind use default domain = no
[homes]
   comment = Home Directories
   browseable = no
   writable = yes
[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no
   guest ok = no
   writable = no
   printable = yes
[Music]
   comment = Music
   path = /home/music
   public = yes
   read only = no
   valid users = amy matt
   writable = yes
   create mask = 666
   directory mask = 777
   guest ok = no
--
And on the client:
---
[global]
   workgroup = CONCRETE
   netbios name = MATT
   server string = Samba Server
   printcap name = /etc/printcap
   load printers = yes
cups options = raw
 log file = /var/log/samba/%m.log
   max log size = 50
   security = user
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   local master = no
   os level = 3
   domain master = no 
   preferred master = no
 name resolve order = wins lmhosts bcast
   wins server = 192.168.1.1
   dns proxy = no 
   idmap uid = 16777216-33554431
   idmap gid = 16777216-33554431
   template shell = /bin/false
   winbind use default domain = no
-
Any advice? 

Thanks a lot,
Matt
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] File locks db (manually removing locks)

2005-04-11 Thread Jeremy Allison
On Wed, Apr 06, 2005 at 07:53:32AM -0400, Nathan Vidican wrote:
 After killing an smbd process, or occasionally after a process has died
 itself, there remains a lock as indicated in an smbstatus output.
 
 The process ID tied to the file lock in the db is no longer active, yet the
 db entry still exists. Is there a way to manually manipulate the file locks
 db? If not, will any of these entries prohibit another smbd process from
 handling the file which is indicated as locked? Or will a new process simply
 validate the running/not running status of the process id indicated in the
 db before proceeding itself?

Yes, that's what the smbd's do when finding an existing lock entry. They
send a kill 0 signal to the process to validate its existence.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Noob having troubles with slapd-populate authentication

2005-04-11 Thread Chris Weiss
Sorry about the last few knee-jerk reaction posts. I blame 
over-caffineation and stress :)

John H Terpstra wrote:
On Thursday 07 April 2005 13:25, Chris Weiss wrote:
 

I'm following the The Linux Samba-OpenLDAP Howto at
http://samba.idealx.org/smbldap-howto.en.html and seem to have run into
a problem...
I'm to the point where I want to do the initial database population
using smbldap-populate.pl, but when I run it, I'm getting:
Using builtin directory structure
adding new entry: dc=pirategames,dc=net
failed to add entry: modifications require authentication at
/usr/local/sbin/smbldap-populate.pl line 323, GEN1 line 2.
adding new entry: ou=_USERS_,dc=pirategames,dc=net
failed to add entry: modifications require authentication at
/usr/local/sbin/smbldap-populate.pl line 323, GEN1 line 3.
adding new entry: ou=_GROUPS_,dc=pirategames,dc=net
failed to add entry: modifications require authentication at
/usr/local/sbin/smbldap-populate.pl line 323, GEN1 line 4.
etc...
   

It would appear from the above that you have not configured your 
smbldap-tools. You will need to do this by executing the configure.pl script 
in the smbldap-tools directory.

 

There is no configure.pl present in the folder. Originally, I'd noticed 
that there was nothing in usr/local/sbin, so I followed the INSTALL 
text, which stated to manually copy the files over 
There is a Makefile, which claims to be version 0.8.2-1. There's now 
also a single smbldap_conf.pm that seems to incorporate the settings 
found in both the /etc/opt/IDEALX/smbldaptools/smbldap.conf and 
smbldapbind.conf files, which are now ignored.
The INSTALL directions state the following (in addition to copying):
. to allow a domain admin to add user using add user script in smb.conf :
  chmod 753 smbldap_conf.pm
  chmod 750 smbldap-useradd.pl
  chgrp 512 smbldap_conf.pm smbldap-useradd.pl (512 = 0x200 = Domain 
Admins)
  Have your admin belong to this group
  In smb.conf : domain admin group =  @Domain Admins 

However, as I understand it, the domain admin group directive has been 
removed in Samba 3. If I read the docs correctly, I need to manage it 
via net groupmap add ntgroup=Domain Admins unixgroup=root (for now, 
I just want root to be able to tweak the server). However, this is 
failing with:
failed to bind to server with dn= 
cn=samba,ou=Users,dc=pirategames,dc=net Error: Invalid credentials

Also, what version of smbldap-tools are you using? The .pl extension suggests 
you are using an old version. What version of Samba are you using? Please 
ensure that the two are matching versions.

 

Samba version 3.0.10.2 (via rpm -q)
smbldaptools 0.8.8-1 (via rpm -q)
So I should back out smbldaptools to v0.8.6?
Samba pre-3.0.6 can use smbldap-tools 0.8.2 or 0.8.4
Samba 3.0.6 or later requires smbldap-tools 0.8.5 or later.
Samba 3.0.11 is best used with smbldap-tools 0.8.7 or later.
- John T.
 

Something I thought was interesting is it's not even pointing out the
SID, although I've got it and populated the smbldap.conf file and
slapd.conf.pm (I'm using Fedora 3 and the smbldap-tools included seem to
have a different default configuration, so I downloaded the RPM and did
an update. This problem was occurring before and after the RPM update).
Also, using smbldap-useradd.pl fails in the same manner.
$ smbldap-useradd.pl -m testuser1
failed to perform search; No such object at
/usr/local/sbin///smbldap_tools.pm line 154, DATA line 283.
failed to add entry: modifications require authentication at
/usr/local/sbin/smbldap-useradd.pl line 249, DATA line 283.
No such object at /usr/local/sbin///smbldap_tools.pm line 178, DATA
line 283.
That message seems to indicate that I've not set the tools to choose
authentication - I've gone over the permissions settings a few times and
things should match up, can anyone help point me in the right direction
to look as to why this might be failing?
   


--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.308 / Virus Database: 266.9.5 - Release Date: 4/7/2005
--
This message has been scanned for viruses and
dangerous content, and is believed to be clean.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] 'net ads join' Segmentation fault for one ADS tree but not another?!

2005-04-11 Thread Chris COOPER
The cmd 'net ads join -U username' dies with 'Segmentation fault' for
our PROD ADS environment, however works fine in our DEV ADS environment!

The only [Linux] configuration change between the two environments is
update SAMBA and Kerberos config to read 'ADS' vs 'ADSDEV' and change
the domain controller FQDN.

The /var/kerberos/krb5kdc directory, samba/secrets.tdb and kerberos
database are nuked/recreated between DEV-PROD environments to clear
cached info (have I missed clearing anything?)

Kerberos config seems OK for both environments, kinit username/password
works.

Here's the end of 'net ads join -U username -d 10' resulting in the
sengmentation fault, plus closest matching portion of our DEV
environment for comparison.

-- PROD ---
[2005/04/11 17:02:36, 3] libads/sasl.c:ads_sasl_spnego_bind(211)^M
  ads_sasl_spnego_bind: got server principal name
[EMAIL PROTECTED]
[2005/04/11 17:02:36, 3] libsmb/clikrb5.c:ads_krb5_mk_req(382)^M
  ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache
found)^M
[2005/04/11 17:02:36, 3]
libsmb/clikrb5.c:ads_cleanup_expired_creds(319)^M
  Ticket in ccache[MEMORY:net_ads] expiration Tue, 12 Apr 2005 03:02:36
GMT^M
[2005/04/11 17:02:36, 10] libsmb/clikrb5.c:ads_krb5_mk_req(409)^M
  ads_krb5_mk_req: Ticket ([EMAIL PROTECTED]) in ccache
(MEMORY:net_ads) is valid until: (Tue, 12 Apr 2005 03:02:36 GMT -
1113246156)^M
[2005/04/11 17:02:36, 10]
libsmb/clikrb5.c:get_krb5_smb_session_key(510)^M
  Got KRB5 session key of length 16^M
[2005/04/11 17:02:36, 10] lib/util.c:name_to_fqdn(2626)^M
  name_to_fqdn: lookup for banana - banana.ads.ecu.edu.au.^M
[2005/04/11 17:02:36, 0] libads/ldap.c:ads_add_machine_acct(1368)^M
  ads_add_machine_acct: Host account for banana already exists -
modifying old account^M
[2005/04/11 17:02:36, 5] libads/ldap_utils.c:ads_do_search_retry(56)^M
  Search for (objectclass=*) gave 1 replies^M
[2005/04/11 17:02:41, 10] intl/lang_tdb.c:lang_tdb_init(135)^M
  lang_tdb_init: /usr/lib/samba/en_AU.UTF-8.msg: No such file or
directory^M
Using short domain name -- ADS^M
[2005/04/11 17:02:41, 0] libads/kerberos.c:get_service_ticket(335)^M
  get_service_ticket: kerberos_kinit_password
[EMAIL PROTECTED]@ADS.ECU.EDU.AU failed: Preauthentication failed^M
Segmentation fault^M

--- DEV ---
[2005/04/11 16:41:30, 3] libads/ldap.c:ads_workgroup_name(2531)^M
  Found alternate name 'ADSDEV' for realm 'ADSDEV.ECU.EDU.AU'^M
[2005/04/11 16:41:30, 10] intl/lang_tdb.c:lang_tdb_init(135)^M
  lang_tdb_init: /usr/lib/samba/en_AU.UTF-8.msg: No such file or
directory^M
Using short domain name -- ADSDEV^M
[2005/04/11 16:41:30, 5] libads/kerberos.c:get_service_ticket(366)^M
  get_service_ticket: krb5_get_credentials for [EMAIL PROTECTED]
enctype 16 failed: KDC has no support for encryption type^M
[2005/04/11 16:41:30, 3]
libads/kerberos.c:kerberos_derive_salting_principal_for_enctype(551)^M
  verify_service_password: get_service_ticket failed: KDC has no support
for encryption type^M
 ... repeats, snip ... 
[2005/04/11 16:41:31, 3]
libads/kerberos.c:kerberos_derive_salting_principal_for_enctype(551)^M
  verify_service_password: get_service_ticket failed: Server not found
in Kerberos database^M
[2005/04/11 16:41:31, 5] libads/kerberos.c:get_service_ticket(366)^M
  get_service_ticket: krb5_get_credentials for
host/[EMAIL PROTECTED] enctype 2 failed: Server
not found in Kerberos database^M
[2005/04/11 16:41:31, 3]
libads/kerberos.c:kerberos_derive_salting_principal_for_enctype(551)^M
  verify_service_password: get_service_ticket failed: Server not found
in Kerberos database^M Joined 'BANANA' to realm 'ADSDEV.ECU.EDU.AU'^M
[2005/04/11 16:41:31, 2] utils/net.c:main(859)^M
  return code = 0^M

After which point host 'BANANA' appears in ADSDEV tree and behaves as
expected for ADSDEV authenticated users.

I'm at a loss to explain why 'net ads join' for PROD segment faults yet
DEV works with practically identical config.

We have some 50,000+ users, 6,000+ computer objects, multiple campuses,
numerous domain controllers etc in PROD so difficult to see what the
relevant difference is between PROD and DEV :-(

Any suggestions on what could cause/resolve the
'[EMAIL PROTECTED]@ADS.ECU.EDU.AU' reference and segmentation fault
would be appreciated.

Re,
Chr!s

PS: Running RHAS 3 with samba-3.0.9-1.3E.2 delivered via 'up2date' and
kernel 2.4.21-27.0.2 (latest certified by EMC SAN matrix):
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] File Deletion

2005-04-11 Thread Gerald Cenir
Hello all!
 
Is there any way to prevent certain users from deleting a file or 
files?
 
Thanks!
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Time to give back, Samba LDAP with FreeRadius

2005-04-11 Thread Adi Nugraha
Hi

I'd like toask about the conf fiel you posted here is there aby mistake in
it because I tried to use it but it failed with the following message

Tue Apr 12 10:11:59 2005 : Info: Starting - reading configuration files ...
Tue Apr 12 10:11:59 2005 : Error: config: No such entry raddbdir for string
${raddbdir}/ldap.attrmap
Tue Apr 12 10:11:59 2005 : Error: Errors reading radiusd.conf

I'm trying to setup a wireless authentication using the LDAP backend
containing samba user as well can you help me with this

Thanks


- Original Message -
From: Douglas Sterner [EMAIL PROTECTED]
To: freeradius-users@lists.freeradius.org
Cc: samba@lists.samba.org; [EMAIL PROTECTED]
Sent: Thursday, April 07, 2005 7:13 AM
Subject: [Samba] Time to give back, Samba LDAP with FreeRadius


 If this is off topic I apologize in advance. Using Samba 3.0.13 with an
 LDAP back-end and FreeRadius I was trying to add the Radius schema and
 kept getting object class violations. It's my limited understanding of
 LDAP that you can not have more than one structural objectclass. I'm no
 ldap expert so no email telling me how wrong I am. So I came up with a
 another solution. Using the Windows NT user manager in samba you can grant
 dialin permission to a user and authenticate against Radius on the
 back-end. We currently already depend on User Manager for other things so
 this helped to centralize our management of our VPN users. All you have to
 do is select the user / Dialin / Grant Dialin permission to user and
 apply.  Using a working Samba LDAP configuration there is nothing in samba
 or LDAP  to configure it's automatic. I've included the changes necessary
 in a working radius server to complete it. We have been using this in a
 Suse ES 9 production environment with great success against a Cisco VPN
 concentrator for remote user authentication.

 Radius Config files

 Clients.conf
 client 127.0.0.1 {

 secret  = mysecretpassword
 shortname   = localhost
 nastype   = other   # localhost isn't usually a NAS...
 }
 client 192.168.XXX.XXX/24 {
 secret  = mysecretpassword
 shortname   = internal-network
 nastype = other
 }

 Users
 DEFAULT Auth-Type = LDAP

 radius.conf
 ldap {
 server = ldap.mydomain.lcl
   identity = cn=Manager,dc=mydomain,dc=lcl
password = myldappassword
 basedn = dc=mydomain,dc=lcl
 #filter = (uid=%{Stripped-User-Name:-%{User-Name}})
 filter =

((uid=%u)(SambaMungedDial=bQA6ACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAA
IAAgACAAIABkAAkAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAg
ACAA))
 # set this to 'yes' to use TLS encrypted connections
 # to the LDAP database by using the StartTLS extended
 # operation.
 # The StartTLS operation is supposed to be used with
 normal
 # ldap connections instead of using ldaps (port 689)
 connections
 start_tls = no

 #default_profile = cn=radprofile,ou=dialup,o=My Org,c=UA
 #profile_attribute = radiusProfileDn
 #access_attr = dialupAccess

 # Mapping of RADIUS dictionary attributes to LDAP
 # directory attributes.
 dictionary_mapping = ${raddbdir}/ldap.attrmap

 ldap_connections_number = 5
 # password_header = {clear}
 # password_attribute = userPassword
 # groupname_attribute = cn
 # groupmembership_filter =

(|((objectClass=GroupOfNames)(member=%{Ldap-UserDn}))((objectClass=GroupO
fUniqueNames)(uniquemember=%{Ldap-UserDn})))
 # groupmembership_attribute = radiusGroupName
 timeout = 4
 timelimit = 3
 net_timeout = 1
 # compare_check_items = yes
 # access_attr_used_for_allow = yes

 }


 Douglas Sterner
 Network Analyst
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] NT_Create_AndX

2005-04-11 Thread david rankin
From: Jeremy Allison [EMAIL PROTECTED]
On Mon, Apr 11, 2005 at 03:47:59PM -0500, david rankin wrote:
From: Gerald (Jerry) Carter [EMAIL PROTECTED]
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Zach Seils wrote:
| Hi -
|
| Is there a way to tell Samba to use the NT_Create_AndX
| style of commands (vs SMB_COM_OPEN)?

In smbclient ?  Not currently.  The last time I looked
A month or so ago, the SMBOpen was still hard coded.
There was an NTcreateX test in there somewhere but
it is not used for actually reading/writing files.

   Jerry, is there any chance that this is related to the MS Office 2003
file-open or file-save dialog NT_Create_AndX errors I'm getting 
that
is causing 30 sec delays in changing directories? I still haven't gotten 
to
the bottom of this, but it is definately Office 2003 related. The users
running Office 2000 do not see any of the delays that the 2003 users do.
No, this is a client library issue, not a server one. I thought someone
had posted info on Microsoft information on this problem ?
Jeremy.
Darn! The MS writeup only addresses level II oplock problems and not the 
delay issue. Any other ideas? Has anybody else posted regarding Office 2003 
slowness problems? Were the ethereal dumps I sent of any help?

--
David C. Rankin, J.D., P.E.
RANKIN LAW FIRM, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
(936) 715-9333
(936) 715-9339 fax
www.rankinlawfirm.com
--
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] File Deletion

2005-04-11 Thread Matthew Easton
On Monday 11 April 2005 19:52, Gerald Cenir wrote:
 Hello all!

 Is there any way to prevent certain users from deleting a file
 or files?

 Thanks!

On the unix side of things, you can set the sticky bit on the directory.
http://www.linuxdevcenter.com/pub/a/linux/lpt/22_06.html


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Disk share size reporting error?

2005-04-11 Thread Bradford J. Hamilton
Hello,
I've searched the archives, and could not find a reference to my 
problem.  Apologies if this has been answered before.

SAMBA 2.2.8 on VMS
The total size for my VMS drives, as seen from a Windows (@K and XP) 
or FreeBSD client, is listed as 20.0Mb, with free space listed as 0 bytes.

I have changed the max disk size and block size parameters to 36000 
and 512, respectively, and stopped/restarted NMBD and SAMBA, but the 
only change that I see is that the free space is listed as 512 bytes, 
instead of 0.

Am I missing a parameter somewhere?
TIA
PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING:
http://www.catb.org/~esr/faqs/smart-questions.html


RE : Disk share size reporting error?

2005-04-11 Thread COLLOT Jean-Yves
Hi.

I don't have this problem here (or I don't do what must be done to see it). 

What would be the right values for total size/free space on your system ?
How do you get the wrong values (Explorer/Properties or by other means) ?

JY

-Message d'origine-
De : [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] De
la part de Bradford J. Hamilton
Envoyé : lundi 11 avril 2005 14:53
À : samba-vms@lists.samba.org
Objet : Disk share size reporting error?

Hello,

I've searched the archives, and could not find a reference to my 
problem.  Apologies if this has been answered before.

SAMBA 2.2.8 on VMS

The total size for my VMS drives, as seen from a Windows (@K and XP) 
or FreeBSD client, is listed as 20.0Mb, with free space listed as 0 bytes.

I have changed the max disk size and block size parameters to 36000 
and 512, respectively, and stopped/restarted NMBD and SAMBA, but the 
only change that I see is that the free space is listed as 512 bytes, 
instead of 0.

Am I missing a parameter somewhere?

TIA
PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING:

http://www.catb.org/~esr/faqs/smart-questions.html
PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING:

http://www.catb.org/~esr/faqs/smart-questions.html


Re: RE : RE : Disk share size reporting error?

2005-04-11 Thread Bradford J. Hamilton
COLLOT Jean-Yves wrote:
I think I could eventually reproduce the problem, but only with ODS-5 disks.
I have no problem with ODS-2.
Could you confirm that this is your case?
If it is, I'll work on this and fix it as soon as I can.
JY
Hi JY,
Sorry, I'm only running ODS-2, not ODS-5.  I have no current plans to go 
to ODS-5.

snip
PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING:
http://www.catb.org/~esr/faqs/smart-questions.html


Re: RE : RE : Disk share size reporting error?

2005-04-11 Thread Bradford J. Hamilton
COLLOT Jean-Yves wrote:
I think I could eventually reproduce the problem, but only with ODS-5 disks.
I have no problem with ODS-2.
Could you confirm that this is your case?
If it is, I'll work on this and fix it as soon as I can.
JY
One other thing - I have an older build of 2.2.8.  Would it help if I 
were to download the latest build?

snip
PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING:
http://www.catb.org/~esr/faqs/smart-questions.html


svn commit: samba r6293 - in branches/SAMBA_4_0/source/librpc/idl: .

2005-04-11 Thread metze
Author: metze
Date: 2005-04-11 12:38:00 + (Mon, 11 Apr 2005)
New Revision: 6293

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6293

Log:
fix formating

metze

Modified:
   branches/SAMBA_4_0/source/librpc/idl/exchange.idl


Changeset:
Modified: branches/SAMBA_4_0/source/librpc/idl/exchange.idl
===
--- branches/SAMBA_4_0/source/librpc/idl/exchange.idl   2005-04-11 03:39:32 UTC 
(rev 6292)
+++ branches/SAMBA_4_0/source/librpc/idl/exchange.idl   2005-04-11 12:38:00 UTC 
(rev 6293)
@@ -6,9 +6,9 @@
  */
 
 [
-   uuid(99e64010-b032-11d0-97a4-00c04fd6551d),
-pointer_default(unique),
-   version(3.0)
+  uuid(99e64010-b032-11d0-97a4-00c04fd6551d),
+  pointer_default(unique),
+  version(3.0)
 ] interface exchange_store_admin3
 {
void ec_store_admin3_dummy();
@@ -16,18 +16,18 @@
 
 
 [
-   uuid(89742ace-a9ed-11cf-9c0c-08002be7ae86),
-pointer_default(unique),
-   version(2.0)
+  uuid(89742ace-a9ed-11cf-9c0c-08002be7ae86),
+  pointer_default(unique),
+  version(2.0)
 ] interface exchange_store_admin2
 {
void ec_store_admin2_dummy();
 }
 
 [
-   uuid(a4f1db00-ca47-1067-b31e-00dd010662da),
-pointer_default(unique),
-   version(1.0)
+  uuid(a4f1db00-ca47-1067-b31e-00dd010662da),
+  pointer_default(unique),
+  version(1.0)
 ] interface exchange_store_admin1
 {
void ec_store_admin1_dummy();
@@ -35,10 +35,10 @@
 
 
 [
-   uuid(1544f5e0-613c-11d1-93df-00c04fd7bd09),
-pointer_default(unique),
-   version(1.0),
-   helpstring(Exchange 2003 Directory Request For Response)
+  uuid(1544f5e0-613c-11d1-93df-00c04fd7bd09),
+  pointer_default(unique),
+  version(1.0),
+  helpstring(Exchange 2003 Directory Request For Response)
 ] interface exchange_ds_rfr
 {
/*/
@@ -51,10 +51,10 @@
 }
 
 [
-   uuid(f930c514-1215-11d3-99a5-00a0c9b61b04),
-   helpstring(System Attendant Cluster Interface),
-pointer_default(unique),
-   version(1.0)
+  uuid(f930c514-1215-11d3-99a5-00a0c9b61b04),
+  helpstring(System Attendant Cluster Interface),
+  pointer_default(unique),
+  version(1.0)
 ] interface exchange_sysatt_cluster
 {
void sysatt_cluster_dummy();
@@ -66,19 +66,19 @@
 */
 
 [
-   uuid(469d6ec0-0d87-11ce-b13f-00aa003bac6c),
-pointer_default(unique),
-   helpstring(Exchange 5.5 System Attendant Request for Response)
+  uuid(469d6ec0-0d87-11ce-b13f-00aa003bac6c),
+  pointer_default(unique),
+  helpstring(Exchange 5.5 System Attendant Request for Response)
 ] interface exchange_system_attendant
 {
void sysatt_dummy();
 }
 
 [
-   uuid(9e8ee830-4559-11ce-979b-00aa005ffebe),
-pointer_default(unique),
-   version(2.0),
-   helpstring(Exchange 5.5 MTA)
+  uuid(9e8ee830-4559-11ce-979b-00aa005ffebe),
+  pointer_default(unique),
+  version(2.0),
+  helpstring(Exchange 5.5 MTA)
 ] interface exchange_mta
 {
/*/
@@ -91,10 +91,10 @@
 }
 
 [
-   uuid(f5cc59b4-4264-101a-8c59-08002b2f8426),
-pointer_default(unique),
-   version(21.0),
-   helpstring(Exchange 5.5 DRS)
+  uuid(f5cc59b4-4264-101a-8c59-08002b2f8426),
+  pointer_default(unique),
+  version(21.0),
+  helpstring(Exchange 5.5 DRS)
 ] interface exchange_drs
 {
/*/
@@ -129,19 +129,19 @@
 }
 
 [
-   uuid(f5cc5a7c-4264-101a-8c59-08002b2f8426),
-   version(21.0),
-pointer_default(unique),
-   helpstring(Exchange 5.5 XDS)
+  uuid(f5cc5a7c-4264-101a-8c59-08002b2f8426),
+  version(21.0),
+  pointer_default(unique),
+  helpstring(Exchange 5.5 XDS)
 ] interface exchange_xds
 {
void xds_dummy();
 }
 
 [
-   uuid(38a94e72-a9bc-11d2-8faf-00c04fa378ff),
-pointer_default(unique),
-   version(1.0)
+  uuid(38a94e72-a9bc-11d2-8faf-00c04fa378ff),
+  pointer_default(unique),
+  version(1.0)
 ] interface exchange_mta_qadmin
 {
void exchange_mta_qadmin();
@@ -149,19 +149,19 @@
 
 
 [
-   uuid(0e4a0156-dd5d-11d2-8c2f-00c04fb6bcde),
-pointer_default(unique),
-   version(1.0)
+  uuid(0e4a0156-dd5d-11d2-8c2f-00c04fb6bcde),
+  pointer_default(unique),
+  version(1.0)
 ] interface exchange_store_information
 {
void exchange_store_information_dummy();
 }
 
 [
-   uuid(f5cc5a18-4264-101a-8c59-08002b2f8426),
-pointer_default(unique),
-   version(56.0),
-   helpstring(Exchange 5.5 Name Service Provider)
+  uuid(f5cc5a18-4264-101a-8c59-08002b2f8426),
+  pointer_default(unique),
+  version(56.0),
+  helpstring(Exchange 5.5 Name Service Provider)
 ] interface exchange_nsp
 {
void NspiBind();
@@ -188,10 +188,10 @@
 }
 
 [
-   uuid(a4f1db00-ca47-1067-b31f-00dd010662da),
-pointer_default(unique),
-   version(0.81),
-   helpstring(Exchange 5.5 EMSMDB)
+  uuid(a4f1db00-ca47-1067-b31f-00dd010662da),
+  pointer_default(unique),
+  version(0.81),
+  helpstring(Exchange 5.5 EMSMDB)
 ] interface exchange_emsmdb
 {

svn commit: samba r6294 - in branches/SAMBA_4_0/source: build/pidl librpc librpc/ndr

2005-04-11 Thread metze
Author: metze
Date: 2005-04-11 13:25:38 + (Mon, 11 Apr 2005)
New Revision: 6294

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6294

Log:
- add obfuscate support, which is used in MAPI rpc's, (the ^= 0xA5 stuff),
  based on a patch from [EMAIL PROTECTED]

- remove unused $ndr_flags argument for the ParseCompression*Start() function's

metze

Added:
   branches/SAMBA_4_0/source/librpc/ndr/ndr_obfuscate.c
Modified:
   branches/SAMBA_4_0/source/build/pidl/ndr_parser.pm
   branches/SAMBA_4_0/source/build/pidl/validator.pm
   branches/SAMBA_4_0/source/librpc/config.mk


Changeset:
Sorry, the patch is too large (282 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6294


svn commit: samba r6295 - in branches/SAMBA_4_0/source/librpc/idl: .

2005-04-11 Thread metze
Author: metze
Date: 2005-04-11 13:28:22 + (Mon, 11 Apr 2005)
New Revision: 6295

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6295

Log:
- add idl for EcDoRpc from the exchange_emsmdb interface
  this one uses a obfuscation(0xA5) subcontext

this is taken from the openchange.org project

metze

Modified:
   branches/SAMBA_4_0/source/librpc/idl/exchange.idl


Changeset:
Modified: branches/SAMBA_4_0/source/librpc/idl/exchange.idl
===
--- branches/SAMBA_4_0/source/librpc/idl/exchange.idl   2005-04-11 13:25:38 UTC 
(rev 6294)
+++ branches/SAMBA_4_0/source/librpc/idl/exchange.idl   2005-04-11 13:28:22 UTC 
(rev 6295)
@@ -1,3 +1,5 @@
+#include idl_types.h
+
 /*
http://support.microsoft.com/default.aspx?scid=KB;en-us;q159298
Any UUID starting with:
@@ -204,8 +206,19 @@
 
/*/
/* Function 0x02 */
-   void EcDoRpc();
+   typedef struct {
+   uint32 max_data;
+   uint32 unknown;
+   [subcontext(4),obfuscation(0xA5),flag(NDR_REMAINING)] DATA_BLOB 
data;
+   } EcDoRpcBlob;
 
+   void EcDoRpc(
+   [in,out,ref]policy_handle   *handle,
+   [in,out]EcDoRpcBlob data,
+   [in,out,ref]uint16  *length,
+   [in]uint16  size
+   );
+
/*/
/* Function 0x03 */
void EcGetMoreRpc();



svn commit: samba r6296 - in branches/SAMBA_3_0/source/nsswitch: .

2005-04-11 Thread jerry
Author: jerry
Date: 2005-04-11 19:41:47 + (Mon, 11 Apr 2005)
New Revision: 6296

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6296

Log:
add message about known interoperability issue with Windows 2003 SP1 DCs
Modified:
   branches/SAMBA_3_0/source/nsswitch/winbindd_cm.c


Changeset:
Modified: branches/SAMBA_3_0/source/nsswitch/winbindd_cm.c
===
--- branches/SAMBA_3_0/source/nsswitch/winbindd_cm.c2005-04-11 13:28:22 UTC 
(rev 6295)
+++ branches/SAMBA_3_0/source/nsswitch/winbindd_cm.c2005-04-11 19:41:47 UTC 
(rev 6296)
@@ -1021,6 +1021,16 @@
cli_shutdown(conn-cli);
DLIST_REMOVE(cm_conns, conn);
SAFE_FREE(conn);
+
+   /* log a message for possible Windows 2003 SP1 DC's */
+   if ( NT_STATUS_EQUAL(result,NT_STATUS_ACCESS_DENIED)  
(lp_security() == SEC_DOMAIN) ) {
+   DEBUG(0,(samr_connect() received 
NT_STATUS_ACCESS_DENIED.  If you are connecting \n));
+   DEBUGADD(0,(to a Windows 2003 SP1 DC, this is 
a known issue.  There are two current \n));
+   DEBUGADD(0,(workarounds:\n));
+   DEBUGADD(0,((a) Move your configuration to 
security = ads, or\n));
+   DEBUGADD(0,((b) set 'client schannel = no' in 
smb.conf and use 'wbinfo --set-auth-user'\n));
+   DEBUGADD(0,(to define the credentials when 
connecting to the DC\n));
+   }

return result;
}



svn commit: samba r6297 - in branches/SAMBA_3_0/source/smbd: .

2005-04-11 Thread jra
Author: jra
Date: 2005-04-11 20:52:02 + (Mon, 11 Apr 2005)
New Revision: 6297

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6297

Log:
Fix bug in our trans2 secondary processing. We need to pass in the
trans2 call info from the primary trans2 packet as it isn't present
in secondary transs packets. We only need to do this for functions that
satisfy more than one case in the switch statement. Found by Marcel 
M?\195?\188ller [EMAIL PROTECTED].
Jeremy.

Modified:
   branches/SAMBA_3_0/source/smbd/trans2.c


Changeset:
Modified: branches/SAMBA_3_0/source/smbd/trans2.c
===
--- branches/SAMBA_3_0/source/smbd/trans2.c 2005-04-11 19:41:47 UTC (rev 
6296)
+++ branches/SAMBA_3_0/source/smbd/trans2.c 2005-04-11 20:52:02 UTC (rev 
6297)
@@ -2660,12 +2660,12 @@
 /
 
 static int call_trans2qfilepathinfo(connection_struct *conn, char *inbuf, char 
*outbuf, int length, int bufsize,
+   unsigned int tran_call,
char **pparams, int total_params, char 
**ppdata, int total_data,
unsigned int max_data_bytes)
 {
char *params = *pparams;
char *pdata = *ppdata;
-   uint16 tran_call = SVAL(inbuf, smb_setup0);
uint16 info_level;
int mode=0;
SMB_OFF_T file_size=0;
@@ -3557,12 +3557,12 @@
 /
 
 static int call_trans2setfilepathinfo(connection_struct *conn, char *inbuf, 
char *outbuf, int length, int bufsize,
+   unsigned int tran_call,
char **pparams, int total_params, char 
**ppdata, int total_data,
unsigned int max_data_bytes)
 {
char *params = *pparams;
char *pdata = *ppdata;
-   uint16 tran_call = SVAL(inbuf, smb_setup0);
uint16 info_level;
int dosmode=0;
SMB_OFF_T size=0;
@@ -5007,14 +5007,14 @@
case TRANSACT2_QPATHINFO:
case TRANSACT2_QFILEINFO:
START_PROFILE_NESTED(Trans2_qpathinfo);
-   outsize = call_trans2qfilepathinfo(conn, inbuf, outbuf, length, 
bufsize, 
+   outsize = call_trans2qfilepathinfo(conn, inbuf, outbuf, length, 
bufsize, tran_call,
  params, total_params, data, 
total_data, max_data_bytes);
END_PROFILE_NESTED(Trans2_qpathinfo);
break;
case TRANSACT2_SETPATHINFO:
case TRANSACT2_SETFILEINFO:
START_PROFILE_NESTED(Trans2_setpathinfo);
-   outsize = call_trans2setfilepathinfo(conn, inbuf, outbuf, 
length, bufsize, 
+   outsize = call_trans2setfilepathinfo(conn, inbuf, outbuf, 
length, bufsize, tran_call,
  params, total_params, data, 
total_data, max_data_bytes);
END_PROFILE_NESTED(Trans2_setpathinfo);
break;



svn commit: samba r6298 - in trunk/source/smbd: .

2005-04-11 Thread jra
Author: jra
Date: 2005-04-11 20:52:59 + (Mon, 11 Apr 2005)
New Revision: 6298

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6298

Log:
Fix bug in our trans2 secondary processing. We need to pass in the
trans2 call info from the primary trans2 packet as it isn't present
in secondary transs packets. We only need to do this for functions that
satisfy more than one case in the switch statement. Found by Marcel 
M?\195?\188ller [EMAIL PROTECTED].
Jeremy.

Modified:
   trunk/source/smbd/trans2.c


Changeset:
Modified: trunk/source/smbd/trans2.c
===
--- trunk/source/smbd/trans2.c  2005-04-11 20:52:02 UTC (rev 6297)
+++ trunk/source/smbd/trans2.c  2005-04-11 20:52:59 UTC (rev 6298)
@@ -2660,12 +2660,12 @@
 /
 
 static int call_trans2qfilepathinfo(connection_struct *conn, char *inbuf, char 
*outbuf, int length, int bufsize,
+   unsigned int tran_call,
char **pparams, int total_params, char 
**ppdata, int total_data,
unsigned int max_data_bytes)
 {
char *params = *pparams;
char *pdata = *ppdata;
-   uint16 tran_call = SVAL(inbuf, smb_setup0);
uint16 info_level;
int mode=0;
SMB_OFF_T file_size=0;
@@ -3557,12 +3557,12 @@
 /
 
 static int call_trans2setfilepathinfo(connection_struct *conn, char *inbuf, 
char *outbuf, int length, int bufsize,
+   unsigned int tran_call,
char **pparams, int total_params, char 
**ppdata, int total_data,
unsigned int max_data_bytes)
 {
char *params = *pparams;
char *pdata = *ppdata;
-   uint16 tran_call = SVAL(inbuf, smb_setup0);
uint16 info_level;
int dosmode=0;
SMB_OFF_T size=0;
@@ -5007,14 +5007,14 @@
case TRANSACT2_QPATHINFO:
case TRANSACT2_QFILEINFO:
START_PROFILE_NESTED(Trans2_qpathinfo);
-   outsize = call_trans2qfilepathinfo(conn, inbuf, outbuf, length, 
bufsize, 
+   outsize = call_trans2qfilepathinfo(conn, inbuf, outbuf, length, 
bufsize, tran_call,
  params, total_params, data, 
total_data, max_data_bytes);
END_PROFILE_NESTED(Trans2_qpathinfo);
break;
case TRANSACT2_SETPATHINFO:
case TRANSACT2_SETFILEINFO:
START_PROFILE_NESTED(Trans2_setpathinfo);
-   outsize = call_trans2setfilepathinfo(conn, inbuf, outbuf, 
length, bufsize, 
+   outsize = call_trans2setfilepathinfo(conn, inbuf, outbuf, 
length, bufsize, tran_call,
  params, total_params, data, 
total_data, max_data_bytes);
END_PROFILE_NESTED(Trans2_setpathinfo);
break;



svn commit: samba r6299 - in branches/SAMBA_3_0_RELEASE: . source/lib source/nsswitch source/param source/smbd

2005-04-11 Thread jerry
Author: jerry
Date: 2005-04-11 21:40:01 + (Mon, 11 Apr 2005)
New Revision: 6299

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6299

Log:
last commits for 3.0.14


Modified:
   branches/SAMBA_3_0_RELEASE/WHATSNEW.txt
   branches/SAMBA_3_0_RELEASE/source/lib/account_pol.c
   branches/SAMBA_3_0_RELEASE/source/nsswitch/winbindd_cm.c
   branches/SAMBA_3_0_RELEASE/source/param/loadparm.c
   branches/SAMBA_3_0_RELEASE/source/smbd/dosmode.c
   branches/SAMBA_3_0_RELEASE/source/smbd/posix_acls.c


Changeset:
Sorry, the patch is too large (380 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6299


svn commit: samba r6300 - in tags: .

2005-04-11 Thread jerry
Author: jerry
Date: 2005-04-11 21:54:42 + (Mon, 11 Apr 2005)
New Revision: 6300

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6300

Log:
tagging 3.0.14
Added:
   tags/release-3-0-14/


Changeset:
Copied: tags/release-3-0-14 (from rev 6299, branches/SAMBA_3_0_RELEASE)



svn commit: samba-docs r460 - in tags: .

2005-04-11 Thread jerry
Author: jerry
Date: 2005-04-11 21:54:51 + (Mon, 11 Apr 2005)
New Revision: 460

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=460

Log:
tagging 3.0.14
Added:
   tags/release-3-0-14/


Changeset:
Copied: tags/release-3-0-14 (from rev 459, trunk)



svn commit: samba r6301 - in trunk/source/smbd: .

2005-04-11 Thread jra
Author: jra
Date: 2005-04-12 00:00:19 + (Tue, 12 Apr 2005)
New Revision: 6301

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6301

Log:
OS/2 fix from Marcel M?\195?\188ller [EMAIL PROTECTED]. Don't check for 
mangled names
if mangled names is off.
Jeremy.

Modified:
   trunk/source/smbd/trans2.c


Changeset:
Modified: trunk/source/smbd/trans2.c
===
--- trunk/source/smbd/trans2.c  2005-04-11 21:54:42 UTC (rev 6300)
+++ trunk/source/smbd/trans2.c  2005-04-12 00:00:19 UTC (rev 6301)
@@ -1019,6 +1019,7 @@
BOOL was_8_3;
int nt_extmode; /* Used for NT connections instead of mode */
BOOL needslash = ( conn-dirpath[strlen(conn-dirpath) -1] != '/');
+   BOOL check_mangled_names = lp_manglednames(SNUM(conn));
 
*fname = 0;
*out_of_space = False;
@@ -1063,7 +1064,7 @@
if(!(got_match = *got_exact_match = exact_match(fname, mask, 
conn-case_sensitive)))
got_match = mask_match(fname, mask, 
conn-case_sensitive);
 
-   if(!got_match  !mangle_is_8_3(fname, False)) {
+   if(!got_match  check_mangled_names  !mangle_is_8_3(fname, 
False)) {
 
/*
 * It turns out that NT matches wildcards against



svn commit: samba r6302 - in branches/SAMBA_3_0/source/smbd: .

2005-04-11 Thread jra
Author: jra
Date: 2005-04-12 00:00:19 + (Tue, 12 Apr 2005)
New Revision: 6302

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6302

Log:
OS/2 fix from Marcel M?\195?\188ller [EMAIL PROTECTED]. Don't check for 
mangled names
if mangled names is off.
Jeremy.

Modified:
   branches/SAMBA_3_0/source/smbd/trans2.c


Changeset:
Modified: branches/SAMBA_3_0/source/smbd/trans2.c
===
--- branches/SAMBA_3_0/source/smbd/trans2.c 2005-04-12 00:00:19 UTC (rev 
6301)
+++ branches/SAMBA_3_0/source/smbd/trans2.c 2005-04-12 00:00:19 UTC (rev 
6302)
@@ -1019,6 +1019,7 @@
BOOL was_8_3;
int nt_extmode; /* Used for NT connections instead of mode */
BOOL needslash = ( conn-dirpath[strlen(conn-dirpath) -1] != '/');
+   BOOL check_mangled_names = lp_manglednames(SNUM(conn));
 
*fname = 0;
*out_of_space = False;
@@ -1063,7 +1064,7 @@
if(!(got_match = *got_exact_match = exact_match(fname, mask, 
conn-case_sensitive)))
got_match = mask_match(fname, mask, 
conn-case_sensitive);
 
-   if(!got_match  !mangle_is_8_3(fname, False)) {
+   if(!got_match  check_mangled_names  !mangle_is_8_3(fname, 
False)) {
 
/*
 * It turns out that NT matches wildcards against



Build status as of Tue Apr 12 00:00:01 2005

2005-04-11 Thread build
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2005-04-11 
00:00:23.0 +
+++ /home/build/master/cache/broken_results.txt 2005-04-12 00:00:27.0 
+
@@ -1,4 +1,4 @@
-Build status as of Mon Apr 11 00:00:01 2005
+Build status as of Tue Apr 12 00:00:01 2005
 
 Build counts:
 Tree Total  Broken Panic 
@@ -6,43 +6,28 @@
 distcc   35 1  0 
 ppp  20 1  0 
 rsync35 3  0 
-samba1  1  0 
+samba1  1  1 
 samba-docs   0  0  0 
-samba4   39 31 0 
-samba_3_037 10 0 
+samba4   39 14 0 
+samba_3_037 8  0 
 
 Currently broken builds:
 Host   Tree Compiler   Status
-aix1   samba4   gccok/ 2/?/? 
-aix1   samba_3_0gccok/ok/ok/ 1
 fusberta   samba4   gccok/ 2/?/? 
 yurok  samba4   gccok/ 2/?/? 
 samba-s390 samba4   gccok/ 2/?/? 
-rhonwynsamba4   gccok/ 2/?/? 
 rhonwynsamba4   gcc-4.0ok/ 2/?/? 
 rhonwynsamba_3_0gcc-4.0ok/ 2/?/? 
 rhonwynsamba4   tccok/ 2/?/? 
-superego   samba4   gccok/ 2/?/? 
-berks  samba4   gccok/ 2/?/? 
-aretnapsamba4   gccok/ 1/?/? 
-aretnapsamba_3_0gccok/ok/ok/ 1
 aretnapccache   iccok/ok/ok/ 1
-aretnapsamba4   iccok/ 1/?/? 
-gc4samba4   gccok/ 1/?/? 
-manhattan  samba4   cc ok/ 1/?/? 
-smartserv1 samba4   gccok/ 1/?/? 
-smartserv1 samba4   gcc-4.0ok/ 1/?/? 
-wetlizard  samba4   gccok/ 2/?/? 
 tardis samba4   gccok/ 2/?/? 
 tardis samba_3_0gccok/ok/ok/ 2
 gwen   distcc   cc ok/ 1/?/? 
 gwen   samba4   cc ok/ 1/?/? 
 gwen   samba_3_0cc ok/ 1/?/? 
 us4samba_3_0cc ok/ 1/?/? 
-us4samba4   gccok/ 1/?/? 
 us4samba_3_0gccok/ 1/?/? 
 flock  samba4   gccok/ 1/?/? 
-homer  samba4   gccok/ 2/?/? 
 shubnigurath   samba4   cc ok/ 1/?/? 
 gc20   samba4   gccok/ 2/?/? 
 sun1   rsynccc ok/ok/ok/ 2
@@ -51,15 +36,11 @@
 sun1   rsyncgccok/ok/ok/ 2
 sun1   samba4   gccok/ 2/?/? 
 sun1   samba_3_0gccok/ 2/?/? 
-fire1  samba4   gccok/ 2/?/? 
 m30ccache   gccok/ok/ok/ 2
 m30rsyncgccok/ok/ok/ 2
 m30samba4   gccok/ 2/?/? 
-m30samba_3_0gccok/ 2/?/? 
-metze02sambagcc 77/?/?/? 
-metze02samba4   gcc-3.4ok/ 2/?/? 
-PCS1   samba4   gccok/ 2/?/? 
+m30samba_3_0gccok/ok/ok/ 1
+metze02sambagccok/ok/ok/ 1/PANIC
 l390vme1   samba4   gccok/ 2/?/? 
 opippp  gccok/ 2/?/? 
-opisamba4   gccok/ 2/?/? 
 


svn commit: samba r6303 - in branches/SAMBA_3_0_RELEASE/source: . auth client groupdb include intl lib libads libsmb modules nmbd nsswitch param passdb printing python registry rpc_client rpc_parse rpc_server rpcclient sam script smbd smbwrapper tdb torture utils web

2005-04-11 Thread jerry
Author: jerry
Date: 2005-04-12 00:37:55 + (Tue, 12 Apr 2005)
New Revision: 6303

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6303

Log:
Setting up for 3.0.15pre1
current as of r6296


Added:
   branches/SAMBA_3_0_RELEASE/source/client/umount.cifs.c
   branches/SAMBA_3_0_RELEASE/source/include/rpc_buffer.h
   branches/SAMBA_3_0_RELEASE/source/include/rpc_eventlog.h
   branches/SAMBA_3_0_RELEASE/source/include/rpc_svcctl.h
   branches/SAMBA_3_0_RELEASE/source/modules/vfs_catia.c
   branches/SAMBA_3_0_RELEASE/source/registry/reg_eventlog.c
   branches/SAMBA_3_0_RELEASE/source/rpc_client/cli_svcctl.c
   branches/SAMBA_3_0_RELEASE/source/rpc_parse/parse_buffer.c
   branches/SAMBA_3_0_RELEASE/source/rpc_parse/parse_eventlog.c
   branches/SAMBA_3_0_RELEASE/source/rpc_parse/parse_svcctl.c
   branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_eventlog.c
   branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_eventlog_nt.c
   branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_svcctl.c
   branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_svcctl_nt.c
   branches/SAMBA_3_0_RELEASE/source/utils/net_rpc_service.c
Modified:
   branches/SAMBA_3_0_RELEASE/source/Makefile.in
   branches/SAMBA_3_0_RELEASE/source/VERSION
   branches/SAMBA_3_0_RELEASE/source/auth/auth_compat.c
   branches/SAMBA_3_0_RELEASE/source/auth/auth_sam.c
   branches/SAMBA_3_0_RELEASE/source/auth/auth_util.c
   branches/SAMBA_3_0_RELEASE/source/client/client.c
   branches/SAMBA_3_0_RELEASE/source/client/clitar.c
   branches/SAMBA_3_0_RELEASE/source/client/mount.cifs.c
   branches/SAMBA_3_0_RELEASE/source/client/smbspool.c
   branches/SAMBA_3_0_RELEASE/source/configure.in
   branches/SAMBA_3_0_RELEASE/source/groupdb/mapping.c
   branches/SAMBA_3_0_RELEASE/source/include/doserr.h
   branches/SAMBA_3_0_RELEASE/source/include/includes.h
   branches/SAMBA_3_0_RELEASE/source/include/libsmb_internal.h
   branches/SAMBA_3_0_RELEASE/source/include/libsmbclient.h
   branches/SAMBA_3_0_RELEASE/source/include/msdfs.h
   branches/SAMBA_3_0_RELEASE/source/include/nt_status.h
   branches/SAMBA_3_0_RELEASE/source/include/ntdomain.h
   branches/SAMBA_3_0_RELEASE/source/include/nterr.h
   branches/SAMBA_3_0_RELEASE/source/include/passdb.h
   branches/SAMBA_3_0_RELEASE/source/include/rpc_client.h
   branches/SAMBA_3_0_RELEASE/source/include/rpc_lsa.h
   branches/SAMBA_3_0_RELEASE/source/include/rpc_misc.h
   branches/SAMBA_3_0_RELEASE/source/include/rpc_netlogon.h
   branches/SAMBA_3_0_RELEASE/source/include/rpc_reg.h
   branches/SAMBA_3_0_RELEASE/source/include/rpc_secdes.h
   branches/SAMBA_3_0_RELEASE/source/include/rpc_shutdown.h
   branches/SAMBA_3_0_RELEASE/source/include/rpc_spoolss.h
   branches/SAMBA_3_0_RELEASE/source/include/rpc_srvsvc.h
   branches/SAMBA_3_0_RELEASE/source/include/smb.h
   branches/SAMBA_3_0_RELEASE/source/include/smb_macros.h
   branches/SAMBA_3_0_RELEASE/source/include/trans2.h
   branches/SAMBA_3_0_RELEASE/source/intl/lang_tdb.c
   branches/SAMBA_3_0_RELEASE/source/lib/access.c
   branches/SAMBA_3_0_RELEASE/source/lib/account_pol.c
   branches/SAMBA_3_0_RELEASE/source/lib/charcnv.c
   branches/SAMBA_3_0_RELEASE/source/lib/data_blob.c
   branches/SAMBA_3_0_RELEASE/source/lib/iconv.c
   branches/SAMBA_3_0_RELEASE/source/lib/ms_fnmatch.c
   branches/SAMBA_3_0_RELEASE/source/lib/privileges.c
   branches/SAMBA_3_0_RELEASE/source/lib/secace.c
   branches/SAMBA_3_0_RELEASE/source/lib/secdesc.c
   branches/SAMBA_3_0_RELEASE/source/lib/select.c
   branches/SAMBA_3_0_RELEASE/source/lib/smbldap.c
   branches/SAMBA_3_0_RELEASE/source/lib/substitute.c
   branches/SAMBA_3_0_RELEASE/source/lib/system.c
   branches/SAMBA_3_0_RELEASE/source/lib/system_smbd.c
   branches/SAMBA_3_0_RELEASE/source/lib/talloc.c
   branches/SAMBA_3_0_RELEASE/source/lib/time.c
   branches/SAMBA_3_0_RELEASE/source/lib/util.c
   branches/SAMBA_3_0_RELEASE/source/lib/util_seaccess.c
   branches/SAMBA_3_0_RELEASE/source/lib/util_sid.c
   branches/SAMBA_3_0_RELEASE/source/lib/util_smbd.c
   branches/SAMBA_3_0_RELEASE/source/lib/util_str.c
   branches/SAMBA_3_0_RELEASE/source/lib/util_unistr.c
   branches/SAMBA_3_0_RELEASE/source/lib/util_uuid.c
   branches/SAMBA_3_0_RELEASE/source/lib/wins_srv.c
   branches/SAMBA_3_0_RELEASE/source/libads/kerberos.c
   branches/SAMBA_3_0_RELEASE/source/libads/ldap.c
   branches/SAMBA_3_0_RELEASE/source/libads/ldap_printer.c
   branches/SAMBA_3_0_RELEASE/source/libads/sasl.c
   branches/SAMBA_3_0_RELEASE/source/libsmb/cliconnect.c
   branches/SAMBA_3_0_RELEASE/source/libsmb/clientgen.c
   branches/SAMBA_3_0_RELEASE/source/libsmb/clifile.c
   branches/SAMBA_3_0_RELEASE/source/libsmb/clifsinfo.c
   branches/SAMBA_3_0_RELEASE/source/libsmb/clikrb5.c
   branches/SAMBA_3_0_RELEASE/source/libsmb/clilist.c
   branches/SAMBA_3_0_RELEASE/source/libsmb/clirap.c
   branches/SAMBA_3_0_RELEASE/source/libsmb/clirap2.c
   branches/SAMBA_3_0_RELEASE/source/libsmb/clispnego.c
   branches/SAMBA_3_0_RELEASE/source/libsmb/doserr.c
   

svn commit: samba r6304 - in branches/SAMBA_3_0_RELEASE: . examples/libsmbclient examples/libsmbclient/smbwrapper

2005-04-11 Thread jerry
Author: jerry
Date: 2005-04-12 00:40:45 + (Tue, 12 Apr 2005)
New Revision: 6304

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6304

Log:
missed some files in the previous commit
Added:
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/smbwrapper/
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/smbwrapper/Makefile
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/smbwrapper/README
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/smbwrapper/opendir_smbsh.c
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/smbwrapper/select.c
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/smbwrapper/smbsh.c
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/smbwrapper/smbw.c
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/smbwrapper/smbw.h
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/smbwrapper/smbw_dir.c
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/smbwrapper/smbw_stat.c
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/smbwrapper/wrapper.c
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/smbwrapper/wrapper.h
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/testchmod.c
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/teststat.c
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/testutime.c
Modified:
   branches/SAMBA_3_0_RELEASE/WHATSNEW.txt
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/Makefile
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/README
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/testacl.c
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/testbrowse.c
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/testsmbc.c
   branches/SAMBA_3_0_RELEASE/examples/libsmbclient/tree.c


Changeset:
Sorry, the patch is too large (4910 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6304


svn commit: samba r6305 - in tags: .

2005-04-11 Thread jerry
Author: jerry
Date: 2005-04-12 00:42:40 + (Tue, 12 Apr 2005)
New Revision: 6305

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6305

Log:
tagging 3.0.15pre1
Added:
   tags/release-3-0-15pre1/


Changeset:
Copied: tags/release-3-0-15pre1 (from rev 6304, branches/SAMBA_3_0_RELEASE)



svn commit: samba-docs r461 - in tags: .

2005-04-11 Thread jerry
Author: jerry
Date: 2005-04-12 00:42:51 + (Tue, 12 Apr 2005)
New Revision: 461

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=461

Log:
tagging 3.0.15pre1
Added:
   tags/release-3-0-15pre1/


Changeset:
Copied: tags/release-3-0-15pre1 (from rev 460, trunk)



svn commit: lorikeet r250 - in trunk/white-papers/dcom: .

2005-04-11 Thread jelmer
Author: jelmer
Date: 2005-04-12 01:10:46 + (Tue, 12 Apr 2005)
New Revision: 250

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=250

Log:
Some clarifications on WMI

Modified:
   trunk/white-papers/dcom/dcom.bib
   trunk/white-papers/dcom/dcom.tex


Changeset:
Modified: trunk/white-papers/dcom/dcom.bib
===
--- trunk/white-papers/dcom/dcom.bib2005-04-11 01:34:10 UTC (rev 249)
+++ trunk/white-papers/dcom/dcom.bib2005-04-12 01:10:46 UTC (rev 250)
@@ -103,3 +103,7 @@
 @article{OpenPegasus,
URL = {http://www.openpegasus.org/}
 }
+
[EMAIL PROTECTED],
+   URL = { 
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/wmisdk/wmi/com_api_for_wmi.asp
 }
+}

Modified: trunk/white-papers/dcom/dcom.tex
===
--- trunk/white-papers/dcom/dcom.tex2005-04-11 01:34:10 UTC (rev 249)
+++ trunk/white-papers/dcom/dcom.tex2005-04-12 01:10:46 UTC (rev 250)
@@ -473,13 +473,13 @@
 Distributed Management Task Force (DMTF). 
 
 One of the parts of WBEM is the Common Information Model (CIM) \cite{CIM}, 
-which is a standard that allows multiple parties to exchange system 
-management information.
+which is a data model for various types of management information.
 
-WMI is built on top of DCOM; it looks like implementing WMI will be 
-possible by implementing a thin layer of DCOM classes with 
-OpenPegasus OpenPegasus\cite{OpenPegasus}, an open source implementation 
-of WBEM, on top.
+WMI is built on top of (D)COM\cite{COMWMI}; it looks like implementing WMI 
+will be possible by implementing a thin layer of (D)COM classes. For the 
+client-side, this should be sufficient. For the server side, 
+using the OpenPegasus \cite{OpenPegasus} backend might be an option, 
+though this would probably require a lot of integration work.
 
 \subsection{Mono}
 



svn commit: samba r6307 - in branches/SAMBA_3_0/source/smbd: .

2005-04-11 Thread jra
Author: jra
Date: 2005-04-12 01:20:23 + (Tue, 12 Apr 2005)
New Revision: 6307

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6307

Log:
Ensure info requested bitmask is printed in log when querying security 
descriptors.
Jeremy.

Modified:
   branches/SAMBA_3_0/source/smbd/nttrans.c


Changeset:
Modified: branches/SAMBA_3_0/source/smbd/nttrans.c
===
--- branches/SAMBA_3_0/source/smbd/nttrans.c2005-04-12 01:14:54 UTC (rev 
6306)
+++ branches/SAMBA_3_0/source/smbd/nttrans.c2005-04-12 01:20:23 UTC (rev 
6307)
@@ -2058,7 +2058,8 @@
 
security_info_wanted = IVAL(params,4);
 
-   DEBUG(3,(call_nt_transact_query_security_desc: file = %s\n, 
fsp-fsp_name ));
+   DEBUG(3,(call_nt_transact_query_security_desc: file = %s, info_wanted 
= 0x%x\n, fsp-fsp_name,
+   (unsigned int)security_info_wanted ));
 
params = nttrans_realloc(ppparams, 4);
if(params == NULL)



svn commit: samba r6308 - in trunk/source/smbd: .

2005-04-11 Thread jra
Author: jra
Date: 2005-04-12 01:20:24 + (Tue, 12 Apr 2005)
New Revision: 6308

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6308

Log:
Ensure info requested bitmask is printed in log when querying security 
descriptors.
Jeremy.

Modified:
   trunk/source/smbd/nttrans.c


Changeset:
Modified: trunk/source/smbd/nttrans.c
===
--- trunk/source/smbd/nttrans.c 2005-04-12 01:20:23 UTC (rev 6307)
+++ trunk/source/smbd/nttrans.c 2005-04-12 01:20:24 UTC (rev 6308)
@@ -2058,7 +2058,8 @@
 
security_info_wanted = IVAL(params,4);
 
-   DEBUG(3,(call_nt_transact_query_security_desc: file = %s\n, 
fsp-fsp_name ));
+   DEBUG(3,(call_nt_transact_query_security_desc: file = %s, info_wanted 
= 0x%x\n, fsp-fsp_name,
+   (unsigned int)security_info_wanted ));
 
params = nttrans_realloc(ppparams, 4);
if(params == NULL)



svn commit: samba r6309 - in branches/SAMBA_4_0/source/smb_server: .

2005-04-11 Thread abartlet
Author: abartlet
Date: 2005-04-12 05:21:38 + (Tue, 12 Apr 2005)
New Revision: 6309

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6309

Log:
Remove this file it is empty and unreferenced.  (In preperation for
renaming password.c over the top, as it deals with sessions, not
passwords).

Andrew Bartlett

Removed:
   branches/SAMBA_4_0/source/smb_server/session.c


Changeset:
Deleted: branches/SAMBA_4_0/source/smb_server/session.c
===
--- branches/SAMBA_4_0/source/smb_server/session.c  2005-04-12 01:20:24 UTC 
(rev 6308)
+++ branches/SAMBA_4_0/source/smb_server/session.c  2005-04-12 05:21:38 UTC 
(rev 6309)
@@ -1,29 +0,0 @@
-/* 
-   Unix SMB/CIFS implementation.
-   session handling for utmp and PAM
-   Copyright (C) [EMAIL PROTECTED] 2001
-   Copyright (C) [EMAIL PROTECTED] 2001
-   
-   This program is free software; you can redistribute it and/or modify
-   it under the terms of the GNU General Public License as published by
-   the Free Software Foundation; either version 2 of the License, or
-   (at your option) any later version.
-   
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-   GNU General Public License for more details.
-   
-   You should have received a copy of the GNU General Public License
-   along with this program; if not, write to the Free Software
-   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-*/
-
-/* a session is claimed when we do a SessionSetupX operation
-   and is yielded when the corresponding vuid is destroyed.
-
-   sessions are used to populate utmp and PAM session structures
-*/
-
-#include includes.h
-



svn commit: samba r6310 - in branches/SAMBA_4_0/source/smb_server: .

2005-04-11 Thread abartlet
Author: abartlet
Date: 2005-04-12 05:36:28 + (Tue, 12 Apr 2005)
New Revision: 6310

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6310

Log:
Rename password.c to session.c, and remove the linked list of all
outstanding sessions, as we don't use it.

Andrew Bartlett

Added:
   branches/SAMBA_4_0/source/smb_server/session.c
Removed:
   branches/SAMBA_4_0/source/smb_server/password.c
Modified:
   branches/SAMBA_4_0/source/smb_server/config.mk
   branches/SAMBA_4_0/source/smb_server/smb_server.h


Changeset:
Sorry, the patch is too large (326 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=6310