date:20050829

I was wondering, if it's possible to set up Samba as a sort of a domain 
controller for Linux workstations?


I'm thinking of benefits like roaming profiles, managing printers etc.


Or perhaps for Linux there are better choices than Samba, when it comes 
to the office / school use (many users, many classrooms, many 
workstations etc.)?



--
Tomek
http://wpkg.org
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] find membership in group for users

2005-08-29 Thread Patrick DUBAU


Hi,

my question is perhaps out of the list subject sorry.

I have samba with LDAP backend, my goal is to write an interface in PHP 
to manage adding/deletings users in groups.


But first of all : how does i do to show all the  users in  group 
'group1' using  ldapsearch ?


And the other way round : how can i find for one user in which groups he 
is ? (still using ldapsearch)


Thanks for any help or tips


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] SAMBA Gone Wrong

2005-08-29 Thread Daniel Arrowsmith

I have just configured my smb.conf file (OS = Fedora Core 4)and have
ensured that the NIC's have been trusted in the firewall, have run
'testparm', ensured all directroies exist and have restarted the smb
service.
However, when I attempt to join a computer to the domain I get the
error message 'domain controller for the domain domainname could not
be contacted.
I'm not sure where to travel from here.  I have also double checked,
and re-written my smb.conf file to be sure, and i still have the same
probs.
If anyone can help, I would be much appreciative.

Regards,
Daniel.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 3.0.20 on Solaris: problem with fileaccess in a automounted filesystem

2005-08-29 Thread Knut Hellebø


[EMAIL PROTECTED] wrote:

Hello Knut,

The problem may well be related to locking problems between the samba
server and the NFS server (Solaris 2.5.1). Isn't 2.5.1 unsupported now?
Have you patched it up as much as you can?



Yes, so I have been thinking myself, but when logging on to the Solaris 
samba server which mounts from the 2.5.1 nfs server, checking/accessing 
the files/directories seems fine. No locking problems. Also, when using 
a Sgi samba server mounting from the same Solaris 2.5.1 system, 
everything is fine. One should think that it is more likely that things 
would work better between two Sun boxes than between a Sun and a Sgi. I 
will try to patch the Solaris 2.5.1 server with the latest recommended 
set and see if this helps.

--

  **
  * Knut Hellebø | DAMN GOOD COFFEE !! *
  * Hydro IS Partner ESI (Unix) Team | (and hot too)   *
  *  | *
  * E-mail: [EMAIL PROTECTED]   | Dale Cooper, FBI*
  **



***
NOTICE: This e-mail transmission, and any documents, files or previous
e-mail messages attached to it, may contain confidential or privileged
information. If you are not the intended recipient, or a person
responsible for delivering it to the intended recipient, you are
hereby notified that any disclosure, copying, distribution or use of
any of the information contained in or attached to this message is
STRICTLY PROHIBITED. If you have received this transmission in error,
please immediately notify the sender and delete the e-mail and attached
documents. Thank you.
***

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] WINS Replication

2005-08-29 Thread Benjamin.Oeltze

Hi,
 
do we have a possibility to syncronise two SAMBA WINS servers?
We have a SAMBA PDC and a SAMBA BDC and both should have their own WINS Server.
Can we sync them via a wins hook script.
Can we use wrepld?
 
Benny
 
 
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] SAMBA Gone Wrong

2005-08-29 Thread Martin Petersen


Daniel Arrowsmith schrieb:

I have just configured my smb.conf file (OS = Fedora Core 4)and have
ensured that the NIC's have been trusted in the firewall, have run
'testparm', ensured all directroies exist and have restarted the smb
service.
However, when I attempt to join a computer to the domain I get the
error message 'domain controller for the domain domainname could not
be contacted.
I'm not sure where to travel from here.  I have also double checked,
and re-written my smb.conf file to be sure, and i still have the same
probs.
If anyone can help, I would be much appreciative.

Regards,
Daniel.


Hi Daniel,

to join a domain you need to create a machine account first. if you use 
samba with no special backend (e.g. ldap) you need to create a linux 
system account AND a samba account for the machine you want to bring in.


please search for machine account and samba on google and in a couple of 
minutes you sould be up and running


ciao,

Martin
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Windows offline files synchronization failure for mounted Samba drive.

2005-08-29 Thread Shaun Feeley

Hi Pat,

I was wondering whether you have found anything more out about your
problem - as its fairly close to mine and could point me in the right
direction.  

I am only syncing personal areas so all files are owned by the
particular user - it seems to work fine for a while and then they start
getting random permission errors.  I cant work out why?

The problem is with win xp sp2 laptops syncing with samba personal home
shares.  

Any help would be appreciated

Thanks Shaun
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Locking problems on a Windows server with samba OSX clients

2005-08-29 Thread Guillaume Laurès

Hello,

I have a small amount of Mac OS X 10.3 workstations networked on a Windows 2000 
server. The samba version on the Macs is 3.0.10.

For each file stored on the Windows server, the Macs create a file beginning 
with ._ which contains some resources about the file. My problem is that, 
just by browsing onto directories, the Macs seem to be locking all those ._ 
files (and not the regular file unless we open them), and this prevents moving 
the regular files, as well as renaming, saving etc.
The only way to unlock the files is to get the Mac unmount the share.

Mac OS X 10.2 workstations (samba 2.2) do create the same files, but do not 
lock them. I'm looking after 10.4 to see if there is a similar behaviour or not.

My question: is there a locking option I can switch on the samba clients ?

Thanks a lot for any help !


Guillaume

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] 3.0.20 crashes on startup

2005-08-29 Thread Leen Toelen

Hi,

after a problem last week with a kerberos security update from
microsoft and my samba version I updated samba to 3.0.20. On most
machines this works like a charm, but on one of them smbd crashes on
startup. This is whet comes up in the logfile.


[2005/08/29 13:35:45, 0] printing/print_cups.c:cups_cache_reload(85)
  Unable to connect to CUPS server localhost - Connection refused
[2005/08/29 13:35:45, 0] printing/print_cups.c:cups_cache_reload(85)
  Unable to connect to CUPS server localhost - Connection refused
[2005/08/29 13:35:45, 2] lib/interface.c:add_interface(81)
  added interface ip=10.10.1.4 bcast=10.10.255.255 nmask=255.255.0.0
[2005/08/29 13:35:45, 2] lib/tallocmsg.c:register_msg_pool_usage(56)
  Registered MSG_REQ_POOL_USAGE
[2005/08/29 13:35:45, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71)
  Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
[2005/08/29 13:35:45, 0] printing/nt_printing.c:upgrade_to_version_4(438)
  upgrade_to_version_4: upgrading printer security descriptors
[2005/08/29 13:35:45, 0] lib/fault.c:fault_report(36)
  ===
[2005/08/29 13:35:45, 0] lib/fault.c:fault_report(37)
  INTERNAL ERROR: Signal 11 in pid 6871 (3.0.20-0.1-SUSE)
  Please read the appendix Bugs of the Samba HOWTO collection
[2005/08/29 13:35:45, 0] lib/fault.c:fault_report(39)
  ===
[2005/08/29 13:35:45, 0] lib/util.c:smb_panic2(1548)
  PANIC: internal error
[2005/08/29 13:35:45, 0] lib/util.c:smb_panic2(1556)
  BACKTRACE: 14 stack frames:
   #0 /usr/sbin/smbd(smb_panic2+0x1c5) [0x5b3671]
   #1 /usr/sbin/smbd(smb_panic+0xe) [0x5b34a7]
   #2 /usr/sbin/smbd [0x5a06f1]
   #3 /usr/sbin/smbd [0x5a074d]
   #4 /lib64/tls/libc.so.6 [0x2a96b7b380]
   #5 /usr/sbin/smbd(sec_desc_merge+0x45) [0x5cce1e]
   #6 /usr/sbin/smbd [0x5d442e]
   #7 /usr/sbin/smbd(tdb_traverse+0x115) [0x5c75a6]
   #8 /usr/sbin/smbd [0x5d4654]
   #9 /usr/sbin/smbd(nt_printing_init+0x3cd) [0x5d4cad]
   #10 /usr/sbin/smbd(print_backend_init+0x182) [0x5ce7eb]
   #11 /usr/sbin/smbd(main+0x536) [0x631ad7]
   #12 /lib64/tls/libc.so.6(__libc_start_main+0xfd) [0x2a96b69acd]
   #13 /usr/sbin/smbd(tcsetattr+0xaa) [0x44141a]

The problem is probably printing related, but I do not have any
printer shares enabled in my config.

Any ideas?

Regards,
Leen
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Locking problems on a Windows server with samba OSX clients

2005-08-29 Thread Martin Petersen


Guillaume Laurès schrieb:

Hello,

I have a small amount of Mac OS X 10.3 workstations networked on a Windows 2000 
server. The samba version on the Macs is 3.0.10.

For each file stored on the Windows server, the Macs create a file beginning with ._ 
which contains some resources about the file. My problem is that, just by browsing onto 
directories, the Macs seem to be locking all those ._ files (and not the regular file 
unless we open them), and this prevents moving the regular files, as well as renaming, saving etc.
The only way to unlock the files is to get the Mac unmount the share.

Mac OS X 10.2 workstations (samba 2.2) do create the same files, but do not 
lock them. I'm looking after 10.4 to see if there is a similar behaviour or not.

My question: is there a locking option I can switch on the samba clients ?

Thanks a lot for any help !


Guillaume



Hi Guillaume,

we're using Mac OS X 10.3 and 10.4 as SMB-Clients and we have been very 
disappointed with this hidden files (e.g. .DS_Store). I have fount this 
hint http://tinyurl.com/d6z9c at the site Mac OS X hints, which prevents 
Mac OS X Clients from writing their special hidden files to network 
shares. Maybe it is worth a look for You.


Ciao,

Martin Petersen
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] 3.0.20 crashes on startup

2005-08-29 Thread Gerald (Jerry) Carter


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Leen Toelen wrote:
| Hi,
|
| after a problem last week with a kerberos
| security update from microsoft and my samba version I
| updated samba to 3.0.20. On most machines this works like
| a charm, but on one of them smbd crashes on
| startup. This is whet comes up in the logfile.

You're on a 64-bit AMD box running SLES 9 sp1 right ?
This is a bug in gcc.  If it is a bug in the suse packages, please
report tyo [EMAIL PROTECTED]  If you compiled it yourself, either
upgrade to SLES 9 sp2 or compile with '-O0' or no topimizations.
The problem appears to be with -O1 (the default).
|





cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDEvfxIR7qMdg1EfYRAlsgAKCkGjNChRXYUOzRRBWOeNx1wo1CaACg1YWQ
DFzfCzdhk61TMjdSDNHohOw=
=RkqL
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba as a domain controller for Linux workstations?

2005-08-29 Thread migrator

you dont need samba. in this case use a ldap for authentification and mount 
the homes of each users per nfs. we use the smbldap tools from idealix to 
manage users in ldap. i have it in our firm so and it works quit nice.

hope that helps ;-)

Am Montag, 29. August 2005 11:30 schrieb Tomasz Chmielewski:
 I was wondering, if it's possible to set up Samba as a sort of a domain
 controller for Linux workstations?

 I'm thinking of benefits like roaming profiles, managing printers etc.


 Or perhaps for Linux there are better choices than Samba, when it comes
 to the office / school use (many users, many classrooms, many
 workstations etc.)?


 --
 Tomek
 http://wpkg.org


pgpnTIezhtZUN.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Windows offline files synchronization failure for mounted Samba drive.

2005-08-29 Thread PC

No new information my the last posting.  I do not have nay issues for single
user shares is I use the force username option in smb.conf to insure
proper ownership. 

FYI: You can chmod g+s the shared folders to insure new files are created
with the same permissions as the parent folders

Log into the Linux server directly and see who owns the problem files; you
will probably see that another user created the files or that the
permissions are read only.  

-Original Message-
From: Shaun Feeley [mailto:[EMAIL PROTECTED] 
Sent: Monday, August 29, 2005 3:03 AM
To: PC
Cc: samba@lists.samba.org
Subject: Re: [Samba] Windows offline files synchronization failure
formounted Samba drive.

Hi Pat,

I was wondering whether you have found anything more out about your
problem - as its fairly close to mine and could point me in the right
direction.  

I am only syncing personal areas so all files are owned by the
particular user - it seems to work fine for a while and then they start
getting random permission errors.  I cant work out why?

The problem is with win xp sp2 laptops syncing with samba personal home
shares.  

Any help would be appreciated

Thanks Shaun
 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba as a domain controller for Linux workstations?


[EMAIL PROTECTED] wrote:
you dont need samba. in this case use a ldap for authentification and mount 
the homes of each users per nfs. we use the smbldap tools from idealix to 
manage users in ldap. i have it in our firm so and it works quit nice.


but then, no roaming profiles, right?

well, one less thing to worry about :)

in that case it would perhaps make more sense to use some old computers 
as terminals (+nice LCD display), than buy new ones as workstations?



--
Tomek
http://wpkg.org

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Locking problems on a Windows server with samba OSX clients

2005-08-29 Thread Guillaume Laurès

Thanks for your input. Unfortunately it does not solve the problem, which 
really is that ._* files get locked until client disconnects, without reason 
and blocking the other clients.

Still searching...

Guillaume 

-Message d'origine-
De : Martin Petersen [mailto:[EMAIL PROTECTED] 
Envoyé : lundi 29 août 2005 13:52
À : Guillaume Laurès
Cc : samba@lists.samba.org
Objet : Re: [Samba] Locking problems on a Windows server with samba OSX clients

Guillaume Laurès schrieb:
 Hello,
 
 I have a small amount of Mac OS X 10.3 workstations networked on a Windows 
 2000 server. The samba version on the Macs is 3.0.10.
 
 For each file stored on the Windows server, the Macs create a file beginning 
 with ._ which contains some resources about the file. My problem is that, 
 just by browsing onto directories, the Macs seem to be locking all those ._ 
 files (and not the regular file unless we open them), and this prevents 
 moving the regular files, as well as renaming, saving etc.
 The only way to unlock the files is to get the Mac unmount the share.
 
 Mac OS X 10.2 workstations (samba 2.2) do create the same files, but do not 
 lock them. I'm looking after 10.4 to see if there is a similar behaviour or 
 not.
 
 My question: is there a locking option I can switch on the samba clients ?
 
 Thanks a lot for any help !
 
 
 Guillaume
 

Hi Guillaume,

we're using Mac OS X 10.3 and 10.4 as SMB-Clients and we have been very 
disappointed with this hidden files (e.g. .DS_Store). I have fount this 
hint http://tinyurl.com/d6z9c at the site Mac OS X hints, which prevents 
Mac OS X Clients from writing their special hidden files to network 
shares. Maybe it is worth a look for You.

Ciao,

Martin Petersen
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] WINS Replication

2005-08-29 Thread Benjamin.Oeltze

In addition to my first posting today:

has anybody a running wrepld config?
Or can anybody tell how to configure wrepld?

Benny
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Locking problems on a Windows server with samba OSX clients

2005-08-29 Thread Martin Petersen

Guillaume Laurès schrieb:

Thanks for your input. Unfortunately it does not solve the problem, which really is that
._* files get locked until client disconnects, without reason and blocking
the other clients.

Still searching...

Guillaume

-Message d'origine-
De : Martin Petersen [mailto:[EMAIL PROTECTED]
Envoyé : lundi 29 août 2005 13:52

À : Guillaume Laurès
Cc : samba@lists.samba.org
Objet : Re: [Samba] Locking problems on a Windows server with samba OSX clients

Guillaume Laurès schrieb:

Hello,

I have a small amount of Mac OS X 10.3 workstations networked on a Windows 2000
server. The samba version on the Macs is 3.0.10.

For each file stored on the Windows server, the Macs create a file beginning with ._
which contains some resources about the file. My problem is that, just by browsing onto
directories, the Macs seem to be locking all those ._ files (and not the regular file
unless we open them), and this prevents moving the regular files, as well as renaming, saving etc.
The only way to unlock the files is to get the Mac unmount the share.

Mac OS X 10.2 workstations (samba 2.2) do create the same files, but do not
lock them. I'm looking after 10.4 to see if there is a similar behaviour or not.

My question: is there a locking option I can switch on the samba clients ?

Thanks a lot for any help !

Guillaume

Hi Guillaume,

we're using Mac OS X 10.3 and 10.4 as SMB-Clients and we have been very
disappointed with this hidden files (e.g. .DS_Store). I have fount this
hint http://tinyurl.com/d6z9c at the site Mac OS X hints, which prevents
Mac OS X Clients from writing their special hidden files to network
shares. Maybe it is worth a look for You.

Ciao,

Martin Petersen

O.k., then I have another URL for You. Search on macwindows.com for a
solution, they have a special Mac-Win2k section at
http://macwindows.com/Win2000.html

good luck.

Martin
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba

[Samba] problem to delete directory in samba (on solaris 2.x)

2005-08-29 Thread SALOME Alexandre

 

Hello!

I am use samba 2.2.2 on solaris8 and 2.2.11 on solaris9. My user can create
directory and files. When they try delete a directory (create by theirself),
give a message accesso denied. If they connect directly on solaris and
execute the command rm -r, it´s work. What variable I must put in smb.conf
to permit that they can delete their directory?

 

My smb.conf is:

 

# Samba config file created using SWAT

# Global parameters

[global]

workgroup = COMAU

server string = Comau do Brasil - servidor %L versao %v

security = user

encrypt passwords = Yes

unix password sync = Yes

update encrypted = Yes

username map = /etc/smbusers   

restrict anonymous = Yes

log file = /usr/local/samba/var/log/log.%m

max log size = 500

comment = SAMBA %v

invalid users = root @root @sys reboot desliga

create mask = 0777

force create mode = 0777

directory mask = 0777

hosts allow = 172.18.150. 172.18.151. 172.18.152. 172.18.153.

browseable = No

hide dot files = yes

 

 

[processo]

comment = usuario restritos processo

path = /usr/processo

writeable = Yes

create mask = 0777

force create mode = 0777

directory mask = 0777

browseable = No

valid users =  @processo

Thanks

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba as a domain controller for Linux workstations?

2005-08-29 Thread awilliam

you dont need samba. in this case use a ldap for authentification 
and mount the homes of each users per nfs. we use the smbldap tools 
from idealix to manage users in ldap. i have it in our firm so and 
it works quit nice.


We do something similiar,  our LINUX workstations and services authenticate
against and use information from an LDAP directory that is also our Samba SAM
for windows workstations.


but then, no roaming profiles, right?
well, one less thing to worry about :)


Well, LINUX doesn't have anything like a roaming profile for better or 
worse.  Current LINUX desktop environments don't much lend themselves 
to management.


in that case it would perhaps make more sense to use some old 
computers as terminals (+nice LCD display), than buy new ones as 
workstations?


If you have a high speed LAN LTSP works very nicely.


This message was sent using IMP, the Internet Messaging Program.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] 3.0.14a +ACL: unable to delete or rename folders

2005-08-29 Thread Mike Duhm


Hi,

We are running samba 3.0.14a on Debian sarge, kernel 2.6.8-1-686-smp, 
xfs filesystem and have just noticed the following error:


Only the owner is able to rename or to delete folders on our share 
although several groups have full access to them and to the parent 
folder. Deleting or renaming files (same ACL by using default ACLs and 
inherit acls = yes) is working correctly.


For example user bob, member of groups dfm, smbusers and admin, 
is not able to delete folder somedir, owned by alice having 
following ACLs.


# file: somedir
# owner: alice
# group: smbusers
user::rwx
user:backup:r-x
group::---
group:admin:rwx
group:dfm:rwx
mask::rwx
other::---
default:user::rwx
default:user:backup:r-x
default:group::---
default:group:admin:rwx
default:group:dfm:rwx
default:mask::rwx
default:other::---

But he is able to create, modify and delete any files, also having 
group:dfm:rwx, inside it without being their owner. The problem only 
occurs with  folders  not owned by bob.


Any suggestions?

Thanks a lot for any help !

regards,
Mike
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba List

2005-08-29 Thread Chris Cejka

Hello everyone,

 

I would like to remove myself from the Samba list - how can I do this?

 

 

Thankyou,

 

Chris

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problem Mappig Groups to shares

2005-08-29 Thread William Marques


Kevin Brouelette escreveu:

Try 


valid users = @grupoteste

I think the + is what is breaking this.
See 'man smb.conf' for the correct syntax of all samba directives.
Be sure to run 'testparm' for syntax check etc.

Kevin B



On Fri, 2005-08-26 at 19:46 -0300, William Marques wrote:
 


Hi list,

I have a problem here that's make me insane...
I have to make a share only available to persons in a group, it means 
that the directory have to be 0770 permission o Linux, right?

Here is my situation:
I use samba with LDAP, and everithing is working fine.
With smbldap-tools, I created the group and with net groupmap list
I see that it maps rigth to Unix Group:

grupoteste (S-1-5-21-980314579-3254781846-1046201792-3071) - grupoteste

I putt all the people who should have acces to the share inside the 
group, as I can see with smbldap-groupshow grupoteste:


dn: cn=grupoteste,ou=Groups,dc=feam,dc=br
objectClass: posixGroup,sambaGroupMapping
cn: grupoteste
gidNumber: 1035
memberUid: william,lvlira
sambaSID: S-1-5-21-980314579-3254781846-1046201792-3071
sambaGroupType: 2
displayName: grupoteste
description: Local Unix group
with getent group grupoteste I have:
grupoteste:x:1035:william,lvlira

The share:
ls -ald /home/pasta-teste
drwxrwx---2 root grupoteste 4096 Ago 26 18:10 /home/pasta-teste/

In smb.conf:

[global]
   workgroup = HOSPITAL
   netbios name = FEAM001
   server string = Servidor FEAM
   encrypt passwords = Yes
   update encrypted = Yes

security = user
#   unix password sync = Yes
os level = 255
log level = 1
time server = yes
#time offset = 60
passwd program = /usr/local/sbin/smbldap-passwd -u %U
passwd chat = Mudando a senha para*\nNew password* %n\n *Digite 
novamente a senha* %n\n

min passwd length = 6
   ldap passwd sync = yes
   passdb backend = ldapsam:ldap://127.0.0.1/
   ldap admin dn = cn=Manager,dc=feam,dc=br
   ldap suffix = dc=feam,dc=br
   ldap group suffix = ou=Groups
   ldap user suffix = ou=Users
   ldap machine suffix = ou=Computers
   ldap ssl = no
logon home =
logon path =
   log file = /var/log/samba/samba-all.log
   max log size = 0
   name resolve order = wins lmhosts host bcast
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   oplocks = yes
   veto oplock files = 
/*.idx/*.ind/*.IDX/*.IND/*.db/*.DB/*.mdb/*.MDB/*.px/*.PX/*.seq/*.SEQ/*.int/*.INT/

   read raw = yes
   write raw = yes
   max xmit = 65535
   dead time = 15
   getwd cache = yes
   logon script = %U.bat
   domain logons = Yes
   preferred master = Yes
   domain master = Yes
   dns proxy = No
   wins support = Yes
   printing = lprng
   preserve case = No
   short preserve case = No
   unix charset = UTF8
   display charset = UTF8
   dos charset = cp850

[pastateste]
comment = teste
path = /home/pasta-teste
create mask = 0770
force create mode = 0770
preserve case = yes

I have also tried put in the share:
valid users = +grupotest

But the same error occours:
I Can't open the share using samba...
In logs:

chdir (/home/pasta-teste) failed

Any clues about that?

Regards,

--
William Henrique Siqueira Marques
[EMAIL PROTECTED]





___ 
Yahoo! Acesso Grátis - Internet rápida e grátis. 
Instale o discador agora! http://br.acesso.yahoo.com/
   



 


I tried this too, withou success...
Follows some logs:
[2005/08/29 10:45:35, 0] smbd/service.c:set_current_service(51)
 chdir (/home/pasta-teste) failed
UNIX token of user 0
 Primary group is 0 and contains 0 supplementary groups
[2005/08/29 10:53:53, 5] smbd/uid.c:change_to_root_user(296)
 change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/08/29 10:53:53, 4] smbd/reply.c:reply_tcon_and_X(408)
 Client requested device type [?] for share [PASTATESTE]
[2005/08/29 10:53:53, 5] smbd/service.c:make_connection(813)
 making a connection to 'normal' service pastateste
[2005/08/29 10:53:53, 10] lib/username.c:user_in_list(529)
 user_in_list: checking user lvlira in list
[2005/08/29 10:53:53, 10] lib/username.c:user_in_list(533)
 user_in_list: checking user |lvlira| against |@grupoteste|
[2005/08/29 10:53:53, 5] lib/username.c:user_in_netgroup_list(315)
 Unable to get default yp domain   Try to acces NIS, what I dont 
have

[2005/08/29 10:53:53, 2] smbd/service.c:make_connection_snum(314)
 user 'lvlira' (from session setup) not permitted to access this share 
(pastateste)

[2005/08/29 10:53:53, 3] smbd/error.c:error_packet(129)
 error packet at smbd/reply.c(416) cmd=117 (SMBtconX) 
NT_STATUS_ACCESS_DENIED


Well it seems like it try to just look into NIS Directory, but I usuing 
LDAP.

with the option +grupoteste fails too


I'm in troubles

Any other suggestions?

Best Regards,

--
William Henrique Siqueira Marques
[EMAIL PROTECTED]






___
Yahoo!

Re: [Samba] Samba List


Chris Cejka wrote:

Hello everyone,

 


I would like to remove myself from the Samba list - how can I do this?


check the footer of this mail? :)


--
Tomek
http://wpkg.org

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Username.map works in 2.2.8a, doesn't work in 3.0.14a - SOLVED

2005-08-29 Thread Eric Boehm

On Wed, Aug 24, 2005 at 03:26:23PM -0400, Boehm, Eric [GWRTP:CM21:EXCH] wrote:
 Eric == Boehm, Eric [GWRTP:CM21:EXCH] Boehm writes:

Eric I'm a bit puzzled. I am able to map an account without any
Eric problem on Samba 2.2.8a (security=domain). However, access
Eric fails with Samba 3.0.14a when everything else is the same
Eric (same configuration files).

Eric Any advice as to the cause of the problems (and its
Eric solution) would be appreciated.

I'll follow up and answer my own question. The problem is that I
didn't understand the Release notes for 3.0.8

  ==
  Change in Username Map
  ==

  Previous Samba releases would only support reading the fully qualified
  username (e.g. DOMAIN\user) from the username map when performing a
  kerberos login from a client.  However, when looking up a map
  entry for a user authenticated by NTLM[SSP], only the login name would be
  used for matches.  This resulted in inconsistent behavior sometimes
  even on the same server.

  Samba 3.0.8 obeys the following rules when applying the username
  map functionality:

* When performing local authentication, the username map is
  applied to the login name before attempting to authenticate
  the connection.
* When relying upon a external domain controller for validating
  authentication requests, smbd will apply the username map
  to the fully qualified username (i.e. DOMAIN\user) only
  after the user has been successfully authenticated.

Previously, I had used

unix_user = windows_user

After reading the notes above, I tried

DOMAIN\unix_user = windows_user

I should have used (and this did work)

unix_user = DOMAIN\windows_user

-- 
Eric M. Boehm  /\  ASCII Ribbon Campaign
[EMAIL PROTECTED]   \ /  No HTML or RTF in mail
X   No proprietary word-processing
Respect Open Standards / \  files in mail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Cannot upload 2Gb file to samba server

2005-08-29 Thread Andrey V. Romanchev


Hello.
I use samba on my embedded Linux-2.4.24 (uclibc-0.9.27, samba - 3.0.11) 
box and meet subj problem. I try to uploade files via windows explorer 
and Linux mount -t smbfs ability.
Creating large files is supported, i.e. dd if=/dev/zero of=largefile 
bs=1024 count=300 works correctly.

What can I do to enable large files upload?
Thanks in advance.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] General Samba Question

2005-08-29 Thread Neil Matthews

I am only starting to look at Samba for installing on
the computer network at my place of work. 

At the moment the users  my documents folder
automatically sychronises with a folder on the
network. I was wondering if this can be done with
Samba and how would i do it? 

Thanks for any information



___ 
To help you stay safe and secure online, we've developed the all new Yahoo! 
Security Centre. http://uk.security.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] General Samba Question

2005-08-29 Thread Louis van Belle

search the list, there is a complete package available
with poledit usrmgr srvmgr some policy templates
setup and howto's 

Louis
 

-Oorspronkelijk bericht-
Van: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] 
Namens Neil Matthews
Verzonden: maandag 29 augustus 2005 16:59
Aan: samba@lists.samba.org
Onderwerp: [Samba] General Samba Question

I am only starting to look at Samba for installing on
the computer network at my place of work. 

At the moment the users  my documents folder
automatically sychronises with a folder on the
network. I was wondering if this can be done with
Samba and how would i do it? 

Thanks for any information


   
___ 
To help you stay safe and secure online, we've developed the 
all new Yahoo! Security Centre. http://uk.security.yahoo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Multiple instances of samba

2005-08-29 Thread Eric Boehm

On Fri, Aug 26, 2005 at 07:50:31AM -0500, Ed Curtis wrote:
 Ed == Ed Curtis [EMAIL PROTECTED] writes:

Ed  I found instructions on how to start 2 instances of samba
Ed binding each instance to an individual ip address or interface
Ed on the server but it will only start the first insatnce I try.

Ed /usr/sbin/smbd -s /etc/samba/smb.conf.DOMAIN1
Ed /usr/sbin/nmbd -s /etc/samba/smb.conf.DOMAIN1
Ed /usr/sbin/smbd -s /etc/samba/smb.conf.DOMAIN2
Ed /usr/sbin/nmbd -s /etc/samba/smb.conf.DOMAIN2

Ed Only the DOMAIN1 will start. I get no errors when running the
Ed commands to start the second instance but it's not running.

Ed  Any ideas?

You have to make sure that you include the following:

smb.conf.DOMAIN1
bind interfaces only = yes
interfaces = 127.0.0.1, ip for interface 1/netmask

smb.conf.DOMAIN2
bind interfaces only = yes
interfaces = ip for interface 2/netmask

E.g.,

smb.conf.DOMAIN1
bind interfaces only = yes
interfaces = 127.0.0.1, 192.168.1.2/24

smb.conf.DOMAIN2
bind interfaces only = yes
interfaces = 192.168.2.1/24

It doesn't matter which of the two has the loopback address,
127.0.0.1, so long as only *ONE* of them has it.

In addition, you will probably want to assign a 

netbios name = hostname

with the appropriate hostname to each config file and insert the
hostname (as appropriate) into the 

lock directory = /usr/local/samba/var/hostname/locks

and, lastly, the log file path

log file = /usr/local/samba/var/hostname/log.%m

-- 
Eric M. Boehm  /\  ASCII Ribbon Campaign
[EMAIL PROTECTED]   \ /  No HTML or RTF in mail
X   No proprietary word-processing
Respect Open Standards / \  files in mail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] WINS Replication

2005-08-29 Thread Gerald (Jerry) Carter


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

[EMAIL PROTECTED] wrote:
| In addition to my first posting today:
|
| has anybody a running wrepld config?
| Or can anybody tell how to configure wrepld?

It's doesn't work.




jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDEygQIR7qMdg1EfYRAnofAKDzFUgBFsA6cMKwQwmBuacarChSKQCguOl0
TzqQDL2p+/swyKO+vTZiq94=
=hG5w
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba as a domain controller for Linux workstations?

2005-08-29 Thread migrator

no, you get roaming profiles with nfs. just add a line in /etc/fstab for 
each client. or you can do it with smb_mount module from pam with ldap 
access.

hm, about how many clients are we speaking?

if you decide a terminal solution you should be thinking of a good network and 
that the servers can push the complete traffic from the applications.

Am Montag, 29. August 2005 15:04 schrieben Sie:
 [EMAIL PROTECTED] wrote:
  you dont need samba. in this case use a ldap for authentification and
  mount the homes of each users per nfs. we use the smbldap tools from
  idealix to manage users in ldap. i have it in our firm so and it works
  quit nice.

 but then, no roaming profiles, right?

 well, one less thing to worry about :)

 in that case it would perhaps make more sense to use some old computers
 as terminals (+nice LCD display), than buy new ones as workstations?


pgps8WDaq8hO1.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] 3.0.14a +ACL: unable to delete or rename folders

2005-08-29 Thread Mike Duhm


Sorry,

Mike Duhm wrote:

We are running samba 3.0.14a on Debian sarge, kernel 2.6.8-1-686-smp, 
xfs filesystem and have just noticed the following error:


Only the owner is able to rename or to delete folders on our share 
although several groups have full access to them and to the parent 
folder. Deleting or renaming files (same ACL by using default ACLs and 
inherit acls = yes) is working correctly.


chmod -t has been the solution - the sticky bit made me mad . No error 
inside the samba system.

Sorry for taking your time!

Regards,
Mike
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Locking problems on a Windows server with samba OSX clients

2005-08-29 Thread Guillaume Laurès

Hi,

Thanks for this url, but I already digged all the macwindows.com before posting 
;-)

According to various reports on this issue, I can understand that it is 
reproducible with OS X 10.3 as a client (thus samba 3), and windows 2000, 2003 
or samba 2.2 as a server (moving from 2.2 to 3.0 on the server fix the issue, 
unfortunately I don't use samba but a widows server...)
As I said earlier, we tested 0S X 10.2 (samba 2.2) as a client and the issue 
doesn't appear.
Strangely enough, with OS X 10.4 neither, even though it is based on the very 
same samba version than 10.3 (3.0.10).

-Message d'origine-
O.k., then I have another URL for You. Search on macwindows.com for a 
solution, they have a special Mac-Win2k section at 
http://macwindows.com/Win2000.html

good luck.

Martin
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Logon scripts

2005-08-29 Thread Edson Capitani

Hi list! 

 

Need your advice! 

 

Im looking for a way to do this: 

 

I have one SAMBA+LDAP+DNS+DHCP (DC) server running fine in a debian box, my
problem now is that a need to have 2 different logon scripts, one is a
specific user  only, let's say user1 when this user login in winxp client
machine the server send to it a script loginA.cmd, and when all user of
group Domain Users logs in  the server users a loginB.cmd 

 

Later a can use this for admin specific scripts or for  Domain Admins
group,  but for now those 2 thing are more important.

 

Thankyou all in advance

 

Edson

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba as a domain controller for Linux workstations?

2005-08-29 Thread Pau Garcia i Quiles


Quoting [EMAIL PROTECTED]:


but then, no roaming profiles, right?
well, one less thing to worry about :)


Well, LINUX doesn't have anything like a roaming profile for better 
or worse.  Current LINUX desktop environments don't much lend 
themselves to management.


What about a logon script which runs unison
(http://www.cis.upenn.edu/~bcpierce/unison/) to synchronize?


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Logon scripts

2005-08-29 Thread Joachim Kieferle


Edson Capitani wrote:

Hi list! 




Need your advice! 




Im looking for a way to do this: 




I have one SAMBA+LDAP+DNS+DHCP (DC) server running fine in a debian box, my
problem now is that a need to have 2 different logon scripts, one is a
specific user  only, let's say user1 when this user login in winxp client
machine the server send to it a script loginA.cmd, and when all user of
group Domain Users logs in  the server users a loginB.cmd 




Later a can use this for admin specific scripts or for  Domain Admins
group,  but for now those 2 thing are more important.



Thankyou all in advance




Hi Edson,

if I get you right you are talking about a logon script on the 
CLIENT-side (Windows XP)?


We use KIXTART (http://www.kixtart.org) that gives you all necessary 
flexibility (we do e.g. also connect printers for users according to 
their group membership, machine they log on, etc.).



Best

Joachim
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba as a domain controller for Linux workstations?

2005-08-29 Thread Pau Garcia i Quiles


Quoting Jeff Saxton [EMAIL PROTECTED]:

What do laptops do when they are out of the office if using nfs/cifs mounted
home directories? Will they use the same profile or will a new one be created?

Although I have not tried it (I intend to do it next week, when I'm at the
office again), using unison you can have the same level of functionality you
have with Windows 2003 remote profiles.

How about nfs/cifs mounhted home directories, that's worked for quite 
some time :)


Pau Garcia i Quiles wrote:

Quoting [EMAIL PROTECTED]:


but then, no roaming profiles, right?
well, one less thing to worry about :)



Well, LINUX doesn't have anything like a roaming profile for better 
or worse.  Current LINUX desktop environments don't much lend 
themselves to management.



What about a logon script which runs unison
(http://www.cis.upenn.edu/~bcpierce/unison/) to synchronize?




--
Jeff Saxton
SenSage, Inc.
55 Hawthorne Lane Suite 700
San Francisco, CA 94105
Phone:  415.808.5900
Fax:415.371.1385
Direct: 415-808-5921
Cell:   415-640-6392
mailto:[EMAIL PROTECTED]





--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Logon scripts

2005-08-29 Thread Paul Gienger

 I have one SAMBA+LDAP+DNS+DHCP (DC) server running fine in a debian box,
 my
 problem now is that a need to have 2 different logon scripts, one is a
 specific user  only, let's say user1 when this user login in winxp client
 machine the server send to it a script loginA.cmd, and when all user of
 group Domain Users logs in  the server users a loginB.cmd
 
 
 
 Later a can use this for admin specific scripts or for  Domain Admins
 group,  but for now those 2 thing are more important.

Here we generate the login script on the fly on the server using the root
preexec parameter whenever someone connects to the netlogon share.  A perl
script runs on the server that pulls data from LDAP and checks against all
their group memberships and writes an appropriate windows batch file for
them to run.

Not that this is right for everyone, but it's what we do.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Trying to get idmap backend using ADS working...

2005-08-29 Thread Mark De Lange


 


Hi folks,

I have been trying to use the ADS as the IDMAP backend but without
success.  I have followed the examples in the HOWTO and Samba-3 by
example.  While both of these docs describe using LDAP as the
repository, I have not been able to make the info work for ADS.  I do
not want to use LDAP nor ADS to authenticate Linux users, just for the
UID/GID resolution.  There will be multiple Samba servers accessing the
same ADS and being used by the same set of Windows users.

 

Some background:

- using RHEL AS4 for AMD Opteron (64-bit)

- Samba version 3.0.10 (labeled as 3.0.10-1.4E by RedHat)

- For various reasons, using an OpenLDAP server is not possible.

 

 

If I disable the idmap backend options, I can successfully authenticate
Windows users and they can access the Samba shares.  However, obviously
at this point the UID/GID allocation comes from the local winbind range.

 

When I enable the idmap backend, and then attempt to use getent passwd
mdelange, I get the following winbind log trace snippet:

wcache_save_name_to_sid: MDELANGE - long valid SID
refresh_sequence_number: LAB01 time ok
refresh_sequence_number: LAB01 seq number is now 4970735
sid_to_name: [Cached] - doing backend query for info for domain LAB01
ads: query_user
Current tickets expire at 1125371334, time is now 1125335307
Search for
(objectSid=\01\05\00\00\00\00\00\05\15\00\00\00\E7\0D\E9\57\EF\1F\9A\24\
D2\5D\58\73\C0\04\00\00) gave 1 replies
ads query_user gave mdelange
refresh_sequence_number: LAB01 time ok
refresh_sequence_number: LAB01 seq number is now 4970735
wcache_save_user: long valid SID (acct_name mdelange)
idmap_sid_to_uid: sid = [long valid SID]
error getting user id for sid long valid SID



 

 

I imported the following LDIF file into ADS using the LDIFDE utility.
This is probably where the problem lies:

dn: ou=Idmap, DC=lab01,DC=local

objectClass: top

objectClass: organizationalUnit

ou: Idmap

 

 

Any help or pointers would be greatly appreciated.

 

Thanks in advance

Mark

 

 

smb.conf contents

--

[global]
  workgroup = LAB01
  realm = LAB01.LOCAL
  preferred master = no
  server string = Samba Server
  security = ADS
  log level = 10
  log file = /var/log/samba/%m.log
  load printers = no
  socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
  template shell = /bin/false
  dns proxy = no
  cups options = raw
  idmap uid = 6000-7000
  idmap gid = 6000-7000
  printcap name = /etc/printcap
  max log size = 50
  winbind trusted domains only = no
  winbind use default domain = yes
  winbind enum users = yes
  winbind enum groups = yes
  winbind cache time = 5
  add machine script = /usr/sbin/useradd -d /var/lib/nobody -g 100
-s /bin/false -M%u
# ldap admin dn = cn=Administrator,dc=lab01,dc=local
  ldap idmap suffix = ou=Idmap
  ldap suffix = dc=lab01,dc=local
  idmap backend = ldap:ldap://l01ad1.lab01.local



[homes]
  comment = Home Directories
  browseable = yes
  writeable = yes
  valid users = %S



[LAB01]
  writeable = yes
  path = /home/LAB01



 

 

krb5.conf contents

---

[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 default_realm = LAB01.LOCAL
 default_keytab_name = /var/kerberos/krb5kdc/krb5.keytab
 binddn = cn=Administrator,cn=Users,lab01.local
 bindpw = rabbit

[realms]
 LAB01.LOCAL = {
  kdc = l01ad1.lab01.local:88
  admin_server = l01ad1.lab01.local:749
  default_domain = LAB01.LOCAL
 }

[domain_realms]
  .kerberos.server = LAB01.LOCAL

[domain_realm]
 .LAB01.LOCAL = LAB01.LOCAL
 LAB01.LOCAL = LAB01.LOCAL

[kdc]
 profile = /var/kerberos/krb5kdc/kdc.conf

[appdefaults]
 pam = {
   debug = false
   ticket_lifetime = 36000
   renew_lifetime = 36000
   forwardable = true
   krb4_convert = false
 }



 

nisswitch.conf

-

passwd: files winbind ldap
shadow: files winbind ldap
group:  files winbind ldap



 

 

 

 

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba as a domain controller for Linux workstations?

2005-08-29 Thread awilliam


but then, no roaming profiles, right?
well, one less thing to worry about :)
Well, LINUX doesn't have anything like a roaming profile for better 
or worse.  Current LINUX desktop environments don't much lend 
themselves to management.

What about a logon script which runs unison
(http://www.cis.upenn.edu/~bcpierce/unison/) to synchronize?


File syncronization does not equal 1:1 the functionality of roaming 
profiles. Roaming profiles in conjunction with system policies let the 
admin extert a

great deal of control over the user's experience - this isn't really possible
with the current state of things on the LINUX desktop.  So wether the 
answer to

the posters questions is yes or no depends specifically on what he/she is
looking to do.


This message was sent using IMP, the Internet Messaging Program.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Cannot upload 2Gb file to samba server

2005-08-29 Thread John H Terpstra

On Monday 29 August 2005 08:50, Andrey V. Romanchev wrote:
 Hello.
 I use samba on my embedded Linux-2.4.24 (uclibc-0.9.27, samba - 3.0.11)
 box and meet subj problem. I try to uploade files via windows explorer
 and Linux mount -t smbfs ability.
 Creating large files is supported, i.e. dd if=/dev/zero of=largefile
 bs=1024 count=300 works correctly.
 What can I do to enable large files upload?
 Thanks in advance.

I am totally confused by this request. Please make another attempt to help us 
to understand the problem.

Are you using smbfs or samba? 

The smbfs facility is NOT part of samba, it is a Linux kernel driver. Asking 
the Samba Team to solve an smbfs problem is like asking a Ford dealer to do 
GM warranty work. 

In case my response is not clear, if you are having a problem copying a file 
that is larger than 2GB over smbfs you should take the problem to the team 
that maintains smbfs, not to the Sama Team.

Oh, by the way, smbfs is no longer being actively maintained, you really 
should look into using cifsfs, which is also not part of Samba.

Samba does include the front-end client tools for using smbfs and cifsfs, but 
only because they make use of Samba libraries. The problem you appear to be 
asking about is most likely tied to the Linux kernel module that is not part 
of Samba.

- John T.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba as a domain controller for Linux workstations?

2005-08-29 Thread Nathan Vidican

If one were to standardize on a specific window manager/desktop environment, 
one could accomplish much of the same effect as 'windows domain control', 
including some control over the desktop environment/settings. Given the 
following example for kde:

Typical Linux Desktop:
/home mounted via NFS
 - user homedirs exist in NFS share

/home/kde - either simlink'd or configured at compile time to the equivelent 
of /usr/local/share/kde, (kde 'default'/'master' settings)

Users, groups, passwords, MTA aliases, etc.. stored in LDAP, accessed using 
pam_ldap  nss_ldap combined.

Poof! - You've got yourself a 'linux domain controller', assuming the end-user 
never has root access, you could with a little work really tweak what they 
can and cannot access using a given window manager/desktop environment by 
write-protecting config files, etc.


--
Nathan Vidican
[EMAIL PROTECTED]
Windsor Match Plate  Tool Ltd.
http://www.wmptl.com/


On Monday 29 August 2005 13:46, [EMAIL PROTECTED] wrote:
 ncronization does not equal 1:1 the functionality of roaming
 profiles. Roaming profiles in conjunction with system policies let the
 admin extert a
 great deal of control over the user's experience - this isn't really
 possible
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] printing problems upgrading samba from 2.2.4 to 3.0.14

2005-08-29 Thread mhbeyle


Sorry .. The problem has been solved ..
The Configuration that I posted was OK, but I did not remember to connect 
the new printer share: A new raw printer created under cups. I used the old 
printer share, with a driver loaded into cups, so, when MSDOS printed 
something, exit was unformatted .
When you need raw printing, it's necessary to create a rew printer in cups, 
without any driver. I had created it, but I was not using it .


Sorry .

P.D.: I don't find anything about cups options=raw in Samba3-HOWTO but in 
man pages there is a good example. I don't use this parameter and things 
seem to work OK.


- Original Message - 
From: John H Terpstra [EMAIL PROTECTED]

To: samba@lists.samba.org; [EMAIL PROTECTED]
Sent: Saturday, August 27, 2005 4:15 PM
Subject: Re: [Samba] printing problems upgrading samba from 2.2.4 to 3.0.14



On Saturday 27 August 2005 05:55, [EMAIL PROTECTED] wrote:

I'm trying to upgrade samba from 2.2.4 to 3.0.14 version and I would like
to use the same smb.conf that I had. But something looks wrong in 
printing

system , there are a lot of new options and I don't know why my old
parameters don't work ..


The changes are documented in a chapter called Upgrading Samba in the 
book

The Official Samba3 HOWTO. Upgrade issues are discussed in the book
Samba-3 By Example, chapter 8.

See http://www.samba.org/samba/docs/Samba3-HOWTO.pdf and
http://www.samba.org/samba/docs/Samba3-ByExample.pdf


I use samba through Windows XP/98/2000 and a MS-DOS program that sends
print works to a linux machine with samba. With version 2.2.4 all seemed 
OK

and worked fine. With version 3.0.14 printers don't work. I need raw
printing.


When Samba-3 has been compiled with the CUPS libraries, printing goes 
direct

via the CUPS library API. To enable raw printing add the parameter cups
options = raw.


For example, this line (print command = lpr-cups -P %p -o raw %s -r)
doesn't work in new version. Do I replace this with printing=cups and 
cups

options=raw ? I did it and printing system doesn't work OK ..

I write here my old options :

[Global]
 printcap name = lpstat

[printers]
comment = All Printers
path = /var/spool/samba
create mask = 0700
guest ok = Yes
printable = Yes
use client driver = Yes
print command = lpr-cups -P %p -o raw %s -r
lpq command = lpstat -o %p
lprm command = cancel %p-%j
browseable = No


Look at the worked example smb.conf files in the book Samba-3 By 
Example -

it might help you.


This config doesn't work anyway. Cups doesn't receive works.




Now I write the new options I'm trying to use with 3.0.14 version:

[Global]
 printcap name = cups
   printing = cups
   printcap = cups

[printers]
comment = All Printers
path = /var/spool/samba
create mask = 0700
guest ok = Yes
printable = Yes
use client driver = Yes
;printing = cups
lpq command = lpstat.cups -o %p
lprm command = cancel %p-%j
browseable = No

And edit mime.types and mime.convs in cups config for
application/octet-

Printing works with this config, but some of them are printed 
unformatted,
with fonts bigger than old config . I send the work via (i.e.) cat 
work.txt


  lp0 and cups prints it OK . Works sended via Word, Excel, etc. are OK
  too.

There is something wrong with some works sended via MS-DOS programs (like
edit program) but I don't know what is the problem .

Any suggestions ??


Read the CUPS chapters in the book The Official Samba3 HOWTO and 
Reference

Guide.


Cheers,
John T.
--
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, 2 Ed., ISBN: 0131882228
Samba-3 by Example, 2 Ed., ISBN: 0131882221X
Hardening Linux, ISBN: 0072254971
Other books in production. 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba as a domain controller for Linux workstations?

2005-08-29 Thread Markus Markert

you dont need samba. in this case use a ldap for authentification and mount 
the homes of each users per nfs. we use the smbldap tools from idealix to 
manage users in ldap. i have it in our firm so and it works quit nice.

hope that helps ;-)

Am Montag, 29. August 2005 11:30 schrieb Tomasz Chmielewski:
 I was wondering, if it's possible to set up Samba as a sort of a domain
 controller for Linux workstations?

 I'm thinking of benefits like roaming profiles, managing printers etc.


 Or perhaps for Linux there are better choices than Samba, when it comes
 to the office / school use (many users, many classrooms, many
 workstations etc.)?


 --
 Tomek
 http://wpkg.org


pgpbqTFu6pP41.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Renewing WINS entries

2005-08-29 Thread Leon Stringer

Hi,

I may have answered my own question. I found a post
(http://lists.samba.org/archive/samba-technical/2004-June/036153.html)
which says that Samba has trouble registering INet~Services.

What I see is the name apparently getting registered with WINS correctly
on startup and then WINS no longer resolving the name 5 days later.

So what I presume is happening is that the server name is registering
correctly when Windows starts up, the INet~Services name then gets
registered later (when IIS starts?). But 5 days later both names are
registered at the same time and this fails. (Which also explains why
nbtstat -RR files).

So:

1. Does the above scenario sound like the explanation?

2. I can't see this being fixed any the release notes, will it get
fixed?

I guess I'm better off using Windows WINS (Broken as Designed (TM))
until Samba implements the Windows bugs correctly...

Thanks,

Leon...


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba as a domain controller for Linux workstations?

2005-08-29 Thread Tarjei Huse

On Mon, 2005-08-29 at 13:46 -0400, [EMAIL PROTECTED] wrote:
  but then, no roaming profiles, right?
  well, one less thing to worry about :)
  Well, LINUX doesn't have anything like a roaming profile for better 
  or worse.  Current LINUX desktop environments don't much lend 
  themselves to management.
  What about a logon script which runs unison
  (http://www.cis.upenn.edu/~bcpierce/unison/) to synchronize?
 
 File syncronization does not equal 1:1 the functionality of roaming 
 profiles. Roaming profiles in conjunction with system policies let the 
 admin extert a
 great deal of control over the user's experience - this isn't really possible
 with the current state of things on the LINUX desktop.  So wether the 
 answer to
 the posters questions is yes or no depends specifically on what he/she is
 looking to do.

A look at KDE's kioskmode might be worthwhile in this regard.

Tarjei

 
 
 This message was sent using IMP, the Internet Messaging Program.
 
 
-- 
Tarjei Huse [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba as a domain controller for Linux workstations?

2005-08-29 Thread Jeff Saxton


How about nfs/cifs mounhted home directories, that's worked for quite some time 
:)

Pau Garcia i Quiles wrote:

Quoting [EMAIL PROTECTED]:


but then, no roaming profiles, right?
well, one less thing to worry about :)



Well, LINUX doesn't have anything like a roaming profile for better or 
worse.  Current LINUX desktop environments don't much lend themselves 
to management.



What about a logon script which runs unison
(http://www.cis.upenn.edu/~bcpierce/unison/) to synchronize?




--
Jeff Saxton
SenSage, Inc.
55 Hawthorne Lane Suite 700
San Francisco, CA 94105
Phone:  415.808.5900
Fax:415.371.1385
Direct: 415-808-5921
Cell:   415-640-6392
mailto:[EMAIL PROTECTED]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba as a domain controller for Linux workstations?

2005-08-29 Thread Robert Schetterer


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Tomasz Chmielewski schrieb:
| I was wondering, if it's possible to set up Samba as a sort of a domain
| controller for Linux workstations?
|
| I'm thinking of benefits like roaming profiles, managing printers etc.
|
|
| Or perhaps for Linux there are better choices than Samba, when it comes
| to the office / school use (many users, many classrooms, many
| workstations etc.)?
|
|
If you configure samba ldap and use it as a nis server too, so you have
all in one

- --
Mit freundlichen Gruessen
Best Regards
Robert Schetterer

robert_at_schetterer.org
Munich / Bavaria / Germany
https://www.schetterer.org

\**
\* gnupgp
\* public key:
\* https://www.schetterer.org/public.key
\**
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDE1evb0iqzJq+0MgRAixwAJ9FjLTZSmcf5OqpN7OOwD+6MYIt0ACfdN7y
WS9WmA9A6h9Y+RvASvJW8kQ=
=SG29
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] WINS Replication

2005-08-29 Thread Robert Schetterer


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

[EMAIL PROTECTED] schrieb:
| Hi,
|
| do we have a possibility to syncronise two SAMBA WINS servers?
| We have a SAMBA PDC and a SAMBA BDC and both should have their own
WINS Server.
| Can we sync them via a wins hook script.
| Can we use wrepld?
|
| Benny
|
|
Hi as far i know wrepld is not currently working, but you there are ways
with entries in the smb conf , read the faqs about wins browsing, and
use a internal dns server for fallback

- --
Mit freundlichen Gruessen
Best Regards
Robert Schetterer

robert_at_schetterer.org
Munich / Bavaria / Germany
https://www.schetterer.org

\**
\* gnupgp
\* public key:
\* https://www.schetterer.org/public.key
\**
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDE1gbb0iqzJq+0MgRAmoHAJ0WtrnOus2/tzz8vG1lIFV41ElkVwCdEED9
UT38aMTaG1NL8Q8eHBwpbaU=
=l6Up
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba as a domain controller for Linux workstations?


[EMAIL PROTECTED] schrieb:

but then, no roaming profiles, right?
well, one less thing to worry about :)


Well, LINUX doesn't have anything like a roaming profile for better 
or worse.  Current LINUX desktop environments don't much lend 
themselves to management.


What about a logon script which runs unison
(http://www.cis.upenn.edu/~bcpierce/unison/) to synchronize?



File syncronization does not equal 1:1 the functionality of roaming 
profiles. Roaming profiles in conjunction with system policies let the 
admin extert a
great deal of control over the user's experience - this isn't really 
possible
with the current state of things on the LINUX desktop.  So wether the 
answer to
the posters questions is yes or no depends specifically on what 
he/she is

looking to do.


Well, basically I only wanted to know how would it look if we wanted one 
day to switch the whole company or half of it to Linux workstations.


So I can see, there are lots of approaches, but there are some serious 
problems:


- no standard, as Samba in a Windows world (i.e., widely used)
- laptop users will have a problem if they are out of the company building
- have to engineer, build, test, everything from scratch; with Samba, 
90% of work is editing the smb.conf file


What we talk about is a little not very specific to this Samba group, 
but certainly it is nice to hear how the things can be solved in the 
UNIX/Linux environment.


--
Tomek
http://wpkg.org
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Username Case Sensitivity vs. Lower Casing

2005-08-29 Thread Marcel Ziswiler

Hi there

The Release Notes for Samba 3.0.8 from Nov 7, 2004 stated the following:

===
Change in Winbindd Behavior
===

All usernames returned by winbindd are now converted to lower
case for better consistency.  This means any winbind installation
relying on the winbind username will need to rename existing
directories and/or files based on the username (%u and %U) to lower
case (e.g. mv $name `echo $name | tr '[A-Z]' '[a-z]'`).  This may
include mail spool files, home directories, valid user lines in
smb.conf, etc

I do remember that when we upgraded from 3.0.7 to 3.0.8 back in November last 
year we had to rename all our existing directories and stuff as noted above. 
Now 
a couple months later our MIS department upgraded our Windows 2003 Server 
Domain 
Controllers to Service Pack 1 and we started experiencing incompatibilities 
with 
winbind. Looking at the latest Release Notes for Samba 3.0.20 from Aug 19, 2005 
told me the following:

Common bugs fixed in 3.0.14a include:

   o Compatibility issues between Winbind and Windows 2003 SP1
 domain controllers (*2k3sp1*).

So I upgraded to latest Samba 3.0.20 and indeed the compatibility issues with 
2k3sp1 went away, but another thing I noticed is that winbind seems to have 
reverted back to pre 3.0.8 case sensitive username behavior. I had to rename 
all 
the directories and stuff again. Unfortunately now if somebody logs in using a 
lower case username it half way lets him log on, but then gdm hangs. The only 
way to successfully log on now is by exactly using the casing on the username 
as 
originally specified in the Windows Domain.

Is this expected behavior? Why did you guys decide to change the username 
casing 
behavior again? Is there an easy way out (e.g. to avoid having to rename all 
the 
directories and stuff again and more importantly to avoid hanged logons if not 
using the exact casing on the username)?

Any help is very much appreciated.

Cheers

Marcel


--
Marcel Ziswiler mailto:[EMAIL PROTECTED]
Schuelmatt 7http://www.ziswiler.net
CH-6018 Buttisholz  mobile: +41 (76) 338-0382
Switzerland phone: +41 (41) 928-0509
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Logon scripts

2005-08-29 Thread Geert Stappers

On Mon, Aug 29, 2005 at 12:10:40PM -0500, Paul Gienger wrote:
 
 Here we generate the login script on the fly on the server using the root
 preexec parameter whenever someone connects to the netlogon share.  A perl
 script runs on the server that pulls data from LDAP and checks against all
 their group memberships and writes an appropriate windows batch file for
 them to run.
 
 Not that this is right for everyone, but it's what we do.
 

Cool Concept!


Thanks for sharing the idea with us.


Cheers
Geert Stappers



signature.asc
Description: Digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Character translation problem

2005-08-29 Thread Tom Diehl


Hi all,

I have a file that samba does not know how to access. The file is located on
a w2k server. The samba box is a member of the w2k domain (ADS). When I try
to access the file via nfs I get no such file or directory. In the logs
I get the following error:

ug 29 03:38:04 bfs kernel: smb_open: District of Columbia/lexis_com(SM)  Get a 
Document - by Citation - D_C_ Code ^U 36-1401.htm open failed, result=-2
Aug 29 03:38:04 bfs kernel: smb_open: District of Columbia/lexis_com(SM)  Get a 
Document - by Citation - D_C_ Code ^U 36-1401.htm open failed, result=-2
Aug 29 03:38:04 bfs kernel: smb_readpage_sync: District of 
Columbia/lexis_com(SM)  Get a Document - by Citation - D_C_ Code ^U 36-1401.htm 
open failed, error=-2
Aug 29 03:38:04 bfs kernel: smb_proc_readdir_long: name=\My 
Documents\Products\Critical Illness\PLA\True Group\State Filings\District of 
Columbia\lexis_com(SM)  Get a Document - by Citation - D_C_ Code ^U 
36-1401_files\*, result=-2, rcls=1, err=123
Aug 29 03:58:27 bfs mount.smbfs[31390]: [2005/08/29 03:58:27, 0] 
client/smbmount.c:send_fs_socket(406)
Aug 29 03:58:27 bfs mount.smbfs[31390]:   mount.smbfs: entering daemon mode for 
service \\mcrserver\d$, pid=31390
Aug 29 04:02:09 bfs nmbd[18475]: [2005/08/29 04:02:09, 0] 
nmbd/nmbd.c:process(542)

I suspect that the problem is with the ^U in the filename. When I look at this
file from the windows machine I see some kind of weird symbol that kind of looks
like 2 S characters one on top of the other.

If I do an ls using tab completion I get an error as shown below.
(bfs pts6) # ll lexis_com\(SM\)\ \ Get\ a\ Document\ -\ by\ Citation\ -\ D_C_\ 
Code\ ^U\ 36-1401.htm
 36-1401.htm: No such file or directory

If I do a simple I get the display below.
(bfs pts6) # ls -l
total 470
...
-rwxr-xr-x1 root root12206 Dec 29  1999 lexis_com(SM)  Get a 
Document - by Citation - D_C_ Code ? 36-1401.htm
...
(bfs pts6) #

In the smb.conf I have unix charset = LOCALE per the samba howto.

The LANG environ on the machine is as follows:
(bfs pts6) # echo $LANG
en_US.UTF-8
(bfs pts6) #

The samba server is a RHEL3 box with samba-3.0.9-1.3E.3 rpms installed.

Does anyone know how to configure samba so that it can recgonize the same
characters that windows can??

Regards,

Tom
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Cannot upload 2Gb file to samba server

2005-08-29 Thread Mark Cooke

On Mon, 2005-08-29 at 12:11 -0600, John H Terpstra wrote:
 On Monday 29 August 2005 08:50, Andrey V. Romanchev wrote:
  I use samba on my embedded Linux-2.4.24 (uclibc-0.9.27, samba - 3.0.11)
  box and meet subj problem. I try to uploade files via windows explorer
  and Linux mount -t smbfs ability.
  Creating large files is supported, i.e. dd if=/dev/zero of=largefile
  bs=1024 count=300 works correctly.
  What can I do to enable large files upload?
  Thanks in advance.
 
 I am totally confused by this request. Please make another attempt to help us 
 to understand the problem.
 
 Are you using smbfs or samba? 

It sounds like he's using samba 3.0.11 with the uclibc library on linux
2.4.24.

And that he tested with sending large files from windows, and also from
another linux box using smbfs.


smbfs doesn't support  2G files last time I checked.

cifsfs does support  2G files, but certainly isn't a default module in
2.4.24


Prime candidates for the problem with large files will be either how
samba 3.0.11 was compiled or uclibc.  uclibc does need large file
support explicitly enabling (according to a quick google).


Hence, I'd recommend trying to compile a recent version of samba
yourself (3.0.20 or 3.0.14a), and paying careful attention to the
configure output about large file support.

If it shows up that large file support can't be enabled, then I would
imagine it is a problem with the uclibc support (or uclibc interaction
with samba).

HTH,

Mark

-- 
Mark Cooke [EMAIL PROTECTED]
-- 
Room: West 123
Tel:  44674

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Username Case Sensitivity vs. Lower Casing

2005-08-29 Thread Gerald (Jerry) Carter


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Marcel Ziswiler wrote:

| So I upgraded to latest Samba 3.0.20 and indeed the
| compatibility issues with  2k3sp1 went away, but another
| thing I noticed is that winbind seems to have
| reverted back to pre 3.0.8 case sensitive username behavior.
| I had to rename all  the directories and stuff
| again. Unfortunately now if somebody logs in using a
| lower case username it half way lets him log on, but then
| gdm hangs. The only  way to successfully log on now is by
| exactly using the casing on the username as
| originally specified in the Windows Domain.
|
| Is this expected behavior? Why did you guys decide to
| change the username casing  behavior again? Is there an
| easy way out (e.g. to avoid having to rename all the
| directories and stuff again and more importantly to
| avoid hanged logons if not  using the exact casing on
| the username)?

I found it.  Sorry.  Try the winbindd patch at
http://www.samba.org/samba/patches/

I think we also have a regression in the group name
not being lower cased.  Can you confirm?




cheers, jerry

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDE3j4IR7qMdg1EfYRApT9AKDLB8k7fYyeNmJTyQ/Lq21mF+EzMQCgn14e
swevlJvMOGaQa1rYw0sKG00=
=vGil
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Problems printing to remote windows shared printer with 3.0.20

2005-08-29 Thread Michael Keightley


Have just upgraded from 3.0.13 to 3.0.20 on our Solaris domain controller.
Machine is also print server running CUPS-1.1.23.
We have a RICOH network printer that we print to via Samba (the printer seems 
to have 
a builtin Windows PC).
smbspool is linked to /usr/lib/cups/backend/smb and the appropriate DeviceURI 
is in
/etc/cups/printers.conf.
This works fine with 3.0.13, but with 3.0.20 I get this error in 
/var/log/cups/error_log
when printing from either the Solaris machine or XP (after adding the Samba 
printer).

I [29/Aug/2005:17:08:21 +0500] Started filter /usr/lib/cups/filter/pstops 
(PID 24244) for job7007.
I [29/Aug/2005:17:08:21 +0500] Started backend /usr/lib/cups/backend/socket 
(PID 24245) for job 7007.
E [29/Aug/2005:17:09:15 +0500] [Job 7004] Unable to connect to SAMBA host, 
will retry in 60 seconds...ERROR: No ticket cache found for userid=2149
E [29/Aug/2005:17:09:15 +0500] [Job 7004] Can not get the ticket cache for 
mk
E [29/Aug/2005:17:09:15 +0500] [Job 7004] Tree connect failed

I had to swap /usr/lib/cups/backend/smb back to the 3.0.13 binary to get it 
working again.

Anyone got any ideas?

The printer is not in the same workgroup as the domain controller, but adding 
this to 
printers.conf got it working before:

DeviceURI smb://administrator:@workgroup/e-710/print

I can also browse OK to the printer and printer spool from an XP machine.

Here is our smb.conf:


[global]
  workgroup = WORK
  server string = %h
  log file = /var/log/samba/%m.log
  load printers = yes
  printing = cups
  printcap name = cups
  domain master = yes
  domain logons = yes
  local master = yes
  preferred master = yes
  name resolve order = wins lmhosts host bcast
  wins support = yes
  os level = 65
  encrypt passwords = yes
  security = user
  logon script = netlogon.bat
  logon path = \\%N\profile\%a\%U
  logon drive = q:
  socket options = TCP_NODELAY IPTOS_LOWDELAY

[profile]
  comment = User Profiles
  path = /home/samba/profile
  browseable = no
  guest ok = yes
  writeable = yes

[printers]
  comment = All Printers
  path = /home/samba/var/spool/public
  browseable = no
  public = yes
  guest ok = yes
  writable = no
  printable = yes

[print$]
  comment = Printer Drivers
  path = /home/samba/drivers
  browseable = yes
  guest ok = no
  read only = yes
  write list = root

[homes]
  comment = Home Directories
  browseable = yes
  guest ok = no
  writable = yes

[netlogon]
  comment = Network Logon Service
  path = /home/samba/%a/netlogon
  guest ok = yes
  writeable = no
  share modes = no



Michael

-- 
Michael Keightley [EMAIL PROTECTED]   Tel: +44 131 240 3137
Systems Manager, Quadstone Limited,   Fax: +44 131 220 4492
16 Chester Street, Edinburgh EH3 7RA, Scotlandhttp://www.quadstone.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba as a domain controller for Linux workstations?

2005-08-29 Thread migrator

:-)

or automount with nis in combination with ldap and autofs maps things ;)

Am Montag, 29. August 2005 18:43 schrieb Jeff Saxton:
 How about nfs/cifs mounhted home directories, that's worked for quite some
 time :)

 Pau Garcia i Quiles wrote:
  Quoting [EMAIL PROTECTED]:
  but then, no roaming profiles, right?
  well, one less thing to worry about :)
 
  Well, LINUX doesn't have anything like a roaming profile for better or
  worse.  Current LINUX desktop environments don't much lend themselves
  to management.
 
  What about a logon script which runs unison
  (http://www.cis.upenn.edu/~bcpierce/unison/) to synchronize?

 --
 Jeff Saxton
 SenSage, Inc.
 55 Hawthorne Lane Suite 700
 San Francisco, CA 94105
 Phone:  415.808.5900
 Fax:415.371.1385
 Direct: 415-808-5921
 Cell:   415-640-6392
 mailto:[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: On the fly Machine accounts

2005-08-29 Thread DSanchez

First off, thanks you to all who replied.

I am using CentOS 4.1 on the server side
XP PRO sp2 on the workstation side.

I started out by adding the %u to the end of my Machine add script.

add machine script = /usr/sbin/useradd -g machines -s /bin/false -d /dev/null %u

That still didnt work, so i then tried a work around,
I changed my Macine add script to this.

 add machine script = /usr/sbin/useradd -d /var/nodirs - machines -s
/bin/false '%u'

I also added this line to the /etc/shells  /bin/false

I then created the following dir: /var/nodirs
then i did chown root:root /var/nodirs
and i also did chmod 550 /var/nodirs

This also did not change anything.

I also tested useradd 
useradd -d /dev/null -s /bin/false jim
and it did create a user jim.

I can Join the domain when i do this:

useradd machinename -d /dev/null -g machines -s /bin/false

Then you need to add '$' to the machine account:

Vi /etc/passwd

Change machine account from this:

machinename:x:501:510::/dev/null:/bin/false

To this:

machinename $:x:501:510::/dev/null:/bin/false

Then create the Samba machine account.

Smbpasswd –a –m machinename $


Thanks for the help.

[global]
log file = /var/log/samba/%m.log
smb passwd file = /etc/samba/smbpasswd
idmap gid = 16777216-33554431
passwd chat = *New*UNIX*password* %n\n
*ReType*new*UNIX*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
username map = /etc/samba/smbusers
domain master = yes
winbind use default domain = no
passwd program = /usr/bin/passwd %u
dns proxy = no
netbios name = Zeus
server string = Samba PDC
idmap uid = 16777216-33554431
password server = None
unix password sync = yes
local master = yes
workgroup = etnet
os level = 64
add user script = /usr/sbin/useradd -d /dev/null -g users -s
/bin/false -M %u
#  add machine script = /usr/sbin/useradd -g machines -s
/bin/false -d /dev/null '%u'
add machine script = /usr/sbin/useradd -d /var/nodirs -
machines -s /bin/false '%u'
max log size = 5
domain logons = yes
load printers = yes
printcap = /etc/printcap
logon script = logon.bat


On 8/26/05, DSanchez [EMAIL PROTECTED] wrote:
 I have been trying for 2 months to get my samba server to add machine
 accounts 'on the fly
 I have added both of these to my smb.conf
 
  add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u
  add machine script = /usr/sbin/useradd -d /dev/null -g 102 -s /bin/false
 
 Neither of these seems to do anything.
 
 I have around 250 computers to add, so adding the machine accounts
 manuelly isn't going to happen.
 
 I've read the documentation that says i should be able to do this so i
 know it can be done.
 Anyone actually using samba in a production enviroment?
 Do you have samba creating the Machine accounts on the fly?
 
 Thanks
 
 Here is my smb.conf file
 
 # Global parameters
 [global]
 workgroup = ETNET
 server string = Samba PDC
 password server = None
 passwd program = /usr/bin/passwd %u
 passwd chat = *New*UNIX*password* %n\n
 *ReType*new*UNIX*password* %n\n
 *passwd:*all*authentication*tokens*updated*successfully*
 username map = /etc/samba/smbusers
 unix password sync = Yes
 log file = /var/log/samba/%m.log
 max log size = 5
 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
 printcap name = /etc/printcap
 add user script = /usr/sbin/useradd -d /dev/null -g 100 -s
 /bin/false -M %u
 add machine script = /usr/sbin/useradd -d /dev/null -g 102 -s 
 /bin/false
 logon script = logon.bat
 domain logons = Yes
 os level = 64
 domain master = Yes
 dns proxy = No
 idmap uid = 16777216-33554431
 idmap gid = 16777216-33554431
 
 [homes]
 comment = Home Directories
 path = %H
 valid users = %S
 read only = No
 browseable = No
 
 [netlogon]
 comment = Network Logon Service
 path = /opt/samba/netlogon
 write list = @ntadmins
 
 [research]
 comment = Research Dept Share
 path = /dept/research
 valid users = @research, @ntamins
 write list = @research, @ntadmins
 read only = No
 create mask = 0770
 directory mask = 0770
 browseable = No
 blocking locks = No
 
 [production]
 comment = Production Dept Share
 path = /dept/production
 valid users = @users
 force group = users
 read only = No
 create mask = 0770
 directory mask = 0770
 dos filetimes = Yes
 
 [producer]
 comment = Producers Dept Share
 path = /dept/producer
 valid users = @producer, @ntamins
 write list =

[Samba] samba permissions

2005-08-29 Thread Scott Mayo


There was another tech coordinator that asked the following on our list:

 Hey all, I was wondering if anyone knew of a way to give students 
read/write permissions to a certain drive letter without giving them the 
ability to delete other (or thier own) files. Currently I have chmod 
1770 permissions (read write, but only owner can delete) and one owner 
(the teacher) for all the files, but that will not allow the student to 
view thier own reports (??!) Any suggestions or help would be greatly 
appriciated.


Can this actually be done?  Make it to where the user that created the 
file cannot even delete it?  It looks to me like you would have to deny 
write access to the user in the samba share, and if that is the case, 
then the file could not be written by the user, even if he/she is in the 
group that owns it.


I played around with this quite a while, but could not see anything that 
would make it work.


I was thinking of something like the following:

DIR1teacher.students3770

Then in Samba

[data]
path = /DIR1
read only = no
create mask = 460
force mask = 2460
directory mask = 770
force directory mode = 3770

But I don't think this works, because it is forcing read permissions on 
the user, so that would not let him/her write the file, correct?  I 
assume that even though the user is in the group, which has permission, 
he is denied because his username does not have permissions.


Thanks.

--
Scott Mayo
Technology Coordinator
Bloomfield Schools
PH: 573-568-5669
FA: 573-568-4565
Pager: 800-264-2535 X2549

Duct tape is like the force, it has a light side and a dark side and it
holds the universe together.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Question regarding SWAT

2005-08-29 Thread McCullough, Vickie

I have the xinetd dead but pid exists  problem, but no solution is
posted. Do yo have the answer?
 
Vickie McCullough
CSIS Systems Analyst
760 744 1150 X2502
1140 W. Mission Rd
San Marcos, CA 92069
Office: B9-A

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Permissions Problem (?)

2005-08-29 Thread Simon Ansley

Hello,

I'm an inexperienced Linux / Samba user attempting to get some simple
networking going with various versions of Windows.

Running Samba 3.0.14a-2 on a 'freebie magazine' fedora install.

I appear to have a what I think is a permissions problem, but could(?) be
username or password related.
I can see my shares on all of my Windows clients (2k,xp and 98). I can read
from them, but not write to them.

Win 2K and 98 reports 'Cannot access this file. Check security priveleges
over the network drive'. when trying to create a new or modify an existing
file.

If I smbmount the share (on the linux box on which it exists), I also cannot
write to it when logged in as user Simon, though I can write to it direct
(ie not through the mount point) logged in as Simon.

I have the following in smb.conf:

[global]
workgroup = AED
wins support = yes
log level = 3
max log size = 1000
read only = no
hosts allow = 192.168.2.
printcap name = /etc/printcap
printing = lprng
log file = /root/smb.log
server string = Testing
smb passwd file = etc/samba/smbpasswd
password level = 8
username level = 8

and

[D-Main-Data]
comment = Main Data Drive
path = /usr/AED/D-Main-Data/
valid users = Simon
create mask = 0775
write list = Simon

At /usr/AED/D-Main-Data, the permisions show as drwxrwxrwx, though at the
the point where the share is smbmounted are drwx-r-xr-x. I suspect this is
the clue to the whole thing, but I don't know the solution! I've tried
setting the owner of /usr/AED/D-Main-Data to both root and to Simon to no
avail.

Windows shows no permissions ticked in Security Properties for the shared
directory or directories under it. A file created on the Linux box as user
Simon shows as having Read and Write ticked, but I still can't modify and
save it.

I have the same user / password combinations set up on the Win and Linux
boxes, and also in smbpasswd.

I have a horrible feeling this is a basic linux permissions issue, but I'm
at the end of my own limited abilities with it.

Thanks in advance,

Simon Ansley

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Windows offline files synchronization failure for mounted Samba drive.

2005-08-29 Thread Shaun Feeley

Its not a ownership issue Im pretty sure Ive checked that. Im now
thinking the problem could be due to the older verison of samba im still
using 2.7 ?  perhaps their are some issues understandably bt that
verison and win xp sp2.  I think ill upgrade to the current verison and
then see.  Thanks for your time anyway.  Shaun

On Mon, 2005-08-29 at 08:55 -0400, PC wrote:
 No new information my the last posting.  I do not have nay issues for single
 user shares is I use the force username option in smb.conf to insure
 proper ownership. 
 
 FYI: You can chmod g+s the shared folders to insure new files are created
 with the same permissions as the parent folders
 
 Log into the Linux server directly and see who owns the problem files; you
 will probably see that another user created the files or that the
 permissions are read only.  
 
 -Original Message-
 From: Shaun Feeley [mailto:[EMAIL PROTECTED] 
 Sent: Monday, August 29, 2005 3:03 AM
 To: PC
 Cc: samba@lists.samba.org
 Subject: Re: [Samba] Windows offline files synchronization failure
 formounted Samba drive.
 
 Hi Pat,
 
 I was wondering whether you have found anything more out about your
 problem - as its fairly close to mine and could point me in the right
 direction.  
 
 I am only syncing personal areas so all files are owned by the
 particular user - it seems to work fine for a while and then they start
 getting random permission errors.  I cant work out why?
 
 The problem is with win xp sp2 laptops syncing with samba personal home
 shares.  
 
 Any help would be appreciated
 
 Thanks Shaun
  
 
 
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba+MySQL+Apache Authentication = possible?

2005-08-29 Thread Andrew Bartlett

On Mon, 2005-08-29 at 08:56 +0200, (C)ollen wrote:
 Hmm, must be do-able,
 
 there are several modules for apache available.
 mod_ntlm for example.. lets you authenticate against a PDC (pref. samba)
 nomather what backend you use.

I strongly recommend against the use of mod_ntlm (and likewise pam_smb),
due to the age of the codebase involved.  For NTLM authentication,
mod_ntlm_winbind is available, and hooks into ntlm_auth, but doesn't do
basic auth (and needs an apache2 version written).  

Also, while we are looking to improve the situation, there are currently
issues with maintaining the experimental MySQL module for Samba.  My
suggestion is to use LDAP where possible.

 there are also some PAM modules around, so you can setup apache to use 
 PAM for authentication, and then you let PAM use the PDC.

My preferred option is Samba on LDAP, with Heimdal 0.7 KDC backed onto
the LDAP database.  I then use mod_auth_kerb for my apache servers.

 just google around...
 
 Greetz
 
 Collen (MLHJ)
 
 Martin Lefebvre wrote:
  Good evening,
  
  I don't know if this is the right place to ask... but I gotta start 
  somewhere..
  
  I have Samba setup as a PDC for my domain using the MySQL passdb backend 
  for 
  authentication. I would also like to use other components such as 
  mod_auth_mysql for apache authentication.
  
  Is there a way that it can use one of the 2 password fields from the samba 
  MySQL table (nt_pw or lm_pw) in order to do the authentication through the 
  web server?
  
  With mod_auth_mysql, I can set several encryption methods, such as md5, or 
  des, etc. The passwords in the samba MySQL table seem to be encrypted with 
  md5 (I'm saying that just because they're all 32 characters long)

No, the NT password is MD4(unicode(password)) and a the LM password is
DES(ASCII(PASSWORD))

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc.http://suse.de
Authentication Developer, Samba Team   http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba permissions

2005-08-29 Thread Doug VanLeuven


Scott Mayo wrote:

There was another tech coordinator that asked the following on our list:

  Hey all, I was wondering if anyone knew of a way to give students 
read/write permissions to a certain drive letter without giving them the 
ability to delete other (or thier own) files. Currently I have chmod 
1770 permissions (read write, but only owner can delete) and one owner 
(the teacher) for all the files, but that will not allow the student to 
view thier own reports (??!) Any suggestions or help would be greatly 
appriciated.


Can this actually be done?  Make it to where the user that created the 
file cannot even delete it?  It looks to me like you would have to deny 
write access to the user in the samba share, and if that is the case, 
then the file could not be written by the user, even if he/she is in the 
group that owns it.


I played around with this quite a while, but could not see anything that 
would make it work.


I was thinking of something like the following:

DIR1   teacher.students3770

Then in Samba

[data]
path = /DIR1
read only = no
create mask = 460
force mask = 2460
directory mask = 770
force directory mode = 3770

But I don't think this works, because it is forcing read permissions on 
the user, so that would not let him/her write the file, correct?  I 
assume that even though the user is in the group, which has permission, 
he is denied because his username does not have permissions.




Ought to be able to tinker with the recycle vfs module so instead of
preventing deletions, one has an audit trail of deletions.

Regards, Doug
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

svn commit: samba r9733 - in branches/SAMBA_4_0/source/torture/rpc: .

2005-08-29 Thread abartlet

Author: abartlet
Date: 2005-08-29 12:16:49 + (Mon, 29 Aug 2005)
New Revision: 9733

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9733

Log:
Test conversion from known sids in CrackNames.

Andrew Bartlett

Modified:
   branches/SAMBA_4_0/source/torture/rpc/drsuapi.c


Changeset:
Modified: branches/SAMBA_4_0/source/torture/rpc/drsuapi.c
===
--- branches/SAMBA_4_0/source/torture/rpc/drsuapi.c 2005-08-29 07:22:41 UTC 
(rev 9732)
+++ branches/SAMBA_4_0/source/torture/rpc/drsuapi.c 2005-08-29 12:16:49 UTC 
(rev 9733)
@@ -668,6 +668,62 @@
return ret;
}
 
+   r.in.req.req1.format_offered= 
DRSUAPI_DS_NAME_FORMAT_SID_OR_SID_HISTORY;
+   r.in.req.req1.format_desired= DRSUAPI_DS_NAME_FORMAT_FQDN_1779;
+   names[0].str = SID_BUILTIN;
+
+   printf(testing DsCrackNames with SID '%s' desired format:%d\n,
+   names[0].str, r.in.req.req1.format_desired);
+
+   status = dcerpc_drsuapi_DsCrackNames(p, mem_ctx, r);
+   if (!NT_STATUS_IS_OK(status)) {
+   const char *errstr = nt_errstr(status);
+   if (NT_STATUS_EQUAL(status, NT_STATUS_NET_WRITE_FAULT)) {
+   errstr = dcerpc_errstr(mem_ctx, p-last_fault_code);
+   }
+   printf(dcerpc_drsuapi_DsCrackNames failed - %s\n, errstr);
+   ret = False;
+   } else if (!W_ERROR_IS_OK(r.out.result)) {
+   printf(DsCrackNames failed - %s\n, win_errstr(r.out.result));
+   ret = False;
+   } else if (r.out.ctr.ctr1-array[0].status != 
DRSUAPI_DS_NAME_STATUS_OK) {
+   printf(DsCrackNames failed on name - %d\n, 
r.out.ctr.ctr1-array[0].status);
+   ret = False;
+   }
+
+   if (!ret) {
+   return ret;
+   }
+
+
+   r.in.req.req1.format_offered= 
DRSUAPI_DS_NAME_FORMAT_SID_OR_SID_HISTORY;
+   r.in.req.req1.format_desired= DRSUAPI_DS_NAME_FORMAT_FQDN_1779;
+   names[0].str = SID_BUILTIN_ADMINISTRATORS;
+
+   printf(testing DsCrackNames with SID '%s' desired format:%d\n,
+   names[0].str, r.in.req.req1.format_desired);
+
+   status = dcerpc_drsuapi_DsCrackNames(p, mem_ctx, r);
+   if (!NT_STATUS_IS_OK(status)) {
+   const char *errstr = nt_errstr(status);
+   if (NT_STATUS_EQUAL(status, NT_STATUS_NET_WRITE_FAULT)) {
+   errstr = dcerpc_errstr(mem_ctx, p-last_fault_code);
+   }
+   printf(dcerpc_drsuapi_DsCrackNames failed - %s\n, errstr);
+   ret = False;
+   } else if (!W_ERROR_IS_OK(r.out.result)) {
+   printf(DsCrackNames failed - %s\n, win_errstr(r.out.result));
+   ret = False;
+   } else if (r.out.ctr.ctr1-array[0].status != 
DRSUAPI_DS_NAME_STATUS_OK) {
+   printf(DsCrackNames failed on name - %d\n, 
r.out.ctr.ctr1-array[0].status);
+   ret = False;
+   }
+
+   if (!ret) {
+   return ret;
+   }
+
+
/* NEGATIVE test.  This should parse, but not succeed */
r.in.req.req1.format_offered= DRSUAPI_DS_NAME_FORMAT_GUID;
r.in.req.req1.format_desired= DRSUAPI_DS_NAME_FORMAT_FQDN_1779;

svn commit: samba r9734 - in branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Ethereal: .

2005-08-29 Thread tpot

Author: tpot
Date: 2005-08-29 12:22:48 + (Mon, 29 Aug 2005)
New Revision: 9734

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9734

Log:
The ethereal parser generator was generating duplicate functions for
fields in structures with the same name as a structure (i.e
security_ace.object and security_ace_object).  I've twiddled the naming
scheme a bit and things are a bit more unique but there is still may be
some naming conflicts in other IDL files.

We are now getting confused over fields with the same name in unions
(e.g security_ace_object_ctr.object) plus some other union weirdness.

Modified:
   branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Ethereal/NDR.pm


Changeset:
Modified: branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Ethereal/NDR.pm
===
--- branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Ethereal/NDR.pm   
2005-08-29 12:16:49 UTC (rev 9733)
+++ branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Ethereal/NDR.pm   
2005-08-29 12:22:48 UTC (rev 9734)
@@ -115,7 +115,7 @@
 {
my ($e,$name,$ifname) = @_;
my $valsstring = $ifname\_$name\_vals;
-   my $dissectorname = $ifname\_dissect\_.StripPrefixes($name)._enum;
+   my $dissectorname = $ifname\_dissect\_enum\_.StripPrefixes($name);
 
return if (defined($conformance-{noemit}-{$dissectorname}));
 
@@ -154,7 +154,7 @@
 sub Bitmap($$$)
 {
my ($e,$name,$ifname) = @_;
-   my $dissectorname = $ifname\_dissect\_.StripPrefixes($name)._bitmap;
+   my $dissectorname = $ifname\_dissect\_bitmap\_.StripPrefixes($name);
 
register_ett(ett_$ifname\_$name);
 
@@ -313,7 +313,7 @@
 {
my ($e,$pn,$ifname) = @_;
 
-   my $dissectorname = 
$ifname\_dissect\_.StripPrefixes($pn).\_.StripPrefixes($e-{NAME});
+   my $dissectorname = 
$ifname\_dissect\_element\_.StripPrefixes($pn).\_.StripPrefixes($e-{NAME});
 
my $call_code = offset = $dissectorname(tvb, offset, pinfo, tree, 
drep);;
 
@@ -402,7 +402,7 @@
 sub Struct($$$)
 {
my ($e,$name,$ifname) = @_;
-   my $dissectorname = $ifname\_dissect\_.StripPrefixes($name);
+   my $dissectorname = $ifname\_dissect\_struct\_.StripPrefixes($name);
 
return if (defined($conformance-{noemit}-{$dissectorname}));

svn commit: samba r9735 - in branches/SAMBA_4_0: source/lib/samba3 source/scripting/bin source/scripting/ejs source/scripting/libjs source/setup swat/install

Author: jelmer
Date: 2005-08-29 12:31:32 + (Mon, 29 Aug 2005)
New Revision: 9735

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9735

Log:
More work on generating a valid Samba4 configuration using the 
Samba3 data (both console and SWAT)

Added:
   branches/SAMBA_4_0/source/setup/upgrade
Modified:
   branches/SAMBA_4_0/source/lib/samba3/PLAN
   branches/SAMBA_4_0/source/scripting/bin/samba3dump
   branches/SAMBA_4_0/source/scripting/ejs/smbcalls_samba3.c
   branches/SAMBA_4_0/source/scripting/libjs/upgrade.js
   branches/SAMBA_4_0/swat/install/samba3.esp


Changeset:
Sorry, the patch is too large (640 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9735

svn commit: samba r9736 - branches/SAMBA_3_0/source/client trunk/source/client

2005-08-29 Thread gd

Author: gd
Date: 2005-08-29 13:10:20 + (Mon, 29 Aug 2005)
New Revision: 9736

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9736

Log:
be a little more verbose on error.

Guenther

Modified:
   branches/SAMBA_3_0/source/client/smbspool.c
   trunk/source/client/smbspool.c


Changeset:
Modified: branches/SAMBA_3_0/source/client/smbspool.c
===
--- branches/SAMBA_3_0/source/client/smbspool.c 2005-08-29 12:31:32 UTC (rev 
9735)
+++ branches/SAMBA_3_0/source/client/smbspool.c 2005-08-29 13:10:20 UTC (rev 
9736)
@@ -226,12 +226,12 @@
 {
   if (getenv(CLASS) == NULL)
   {
-fprintf(stderr, ERROR: Unable to connect to SAMBA host, will retry in 
60 seconds...);
-sleep (60);
+fprintf(stderr, ERROR: Unable to connect to CIFS host, will retry in 
60 seconds...);
+sleep (60); /* should just waiting and retrying fix authentication  
??? */
   }
   else
   {
-fprintf(stderr, ERROR: Unable to connect to SAMBA host, trying next 
printer...);
+fprintf(stderr, ERROR: Unable to connect to CIFS host, trying next 
printer...);
 return (1);
   }
 }
@@ -425,10 +425,10 @@
 return NULL;
   }
 
-  if (!cli_send_tconX(cli, share, ?,password, strlen(password)+1)) 
+  if (!cli_send_tconX(cli, share, ?, password, strlen(password)+1)) 
   {
+fprintf(stderr, ERROR: Tree connect failed (%s)\n, cli_errstr(cli));
 cli_shutdown(cli);
-fprintf(stderr, ERROR: Tree connect failed\n );
 return NULL;
   }
 

Modified: trunk/source/client/smbspool.c
===
--- trunk/source/client/smbspool.c  2005-08-29 12:31:32 UTC (rev 9735)
+++ trunk/source/client/smbspool.c  2005-08-29 13:10:20 UTC (rev 9736)
@@ -226,12 +226,12 @@
 {
   if (getenv(CLASS) == NULL)
   {
-fprintf(stderr, ERROR: Unable to connect to SAMBA host, will retry in 
60 seconds...);
-sleep (60);
+fprintf(stderr, ERROR: Unable to connect to CIFS host, will retry in 
60 seconds...);
+sleep (60); /* should just waiting and retrying fix authentication  
??? */
   }
   else
   {
-fprintf(stderr, ERROR: Unable to connect to SAMBA host, trying next 
printer...);
+fprintf(stderr, ERROR: Unable to connect to CIFS host, trying next 
printer...);
 return (1);
   }
 }
@@ -425,10 +425,10 @@
 return NULL;
   }
 
-  if (!cli_send_tconX(cli, share, ?,password, strlen(password)+1)) 
+  if (!cli_send_tconX(cli, share, ?, password, strlen(password)+1)) 
   {
+fprintf(stderr, ERROR: Tree connect failed (%s)\n, cli_errstr(cli));
 cli_shutdown(cli);
-fprintf(stderr, ERROR: Tree connect failed\n );
 return NULL;
   }

svn commit: samba r9737 - in branches/tmp/vl-cluster/source/tdb: .

2005-08-29 Thread vlendec

Author: vlendec
Date: 2005-08-29 13:22:34 + (Mon, 29 Aug 2005)
New Revision: 9737

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9737

Log:
Adapt tdb_torture to the new CLEAR_IF_FIRST semantics. We need one parent
process holding the active if two cluster nodes access the same tdb.

For consistency, this might be stuff to merge to 3_0 and trunk.

Comments?

Volker

Modified:
   branches/tmp/vl-cluster/source/tdb/tdbtorture.c


Changeset:
Modified: branches/tmp/vl-cluster/source/tdb/tdbtorture.c
===
--- branches/tmp/vl-cluster/source/tdb/tdbtorture.c 2005-08-29 13:10:20 UTC 
(rev 9736)
+++ branches/tmp/vl-cluster/source/tdb/tdbtorture.c 2005-08-29 13:22:34 UTC 
(rev 9737)
@@ -183,45 +183,45 @@
int loops = NLOOPS;
pid_t pids[NPROC];
 
-   pids[0] = getpid();
-
-   for (i=0;iNPROC-1;i++) {
-   if ((pids[i+1]=fork()) == 0) break;
-   }
-
-   db = tdb_open(torture.tdb, 2, TDB_CLEAR_IF_FIRST, 
+   db = tdb_open(torture.tdb, 0, TDB_CLEAR_IF_FIRST, 
  O_RDWR | O_CREAT, 0600);
if (!db) {
fatal(db open failed);
}
-   tdb_logging_function(db, tdb_log);
 
-   srand(seed + getpid());
-   srandom(seed + getpid() + time(NULL));
-   for (i=0;iloops;i++) addrec_db();
+   for (i=0;iNPROC;i++) {
+   pids[i] = fork();
+   if (pids[i] == 0) {
+   tdb_reopen_all();
 
-   tdb_traverse(db, NULL, NULL);
-   tdb_traverse(db, traverse_fn, NULL);
-   tdb_traverse(db, traverse_fn, NULL);
+   tdb_logging_function(db, tdb_log);
 
-   tdb_close(db);
+   srand(seed + getpid());
+   srandom(seed + getpid() + time(NULL));
+   for (i=0;iloops;i++) addrec_db();
 
-   if (getpid() == pids[0]) {
-   for (i=0;iNPROC-1;i++) {
-   int status;
-   if (waitpid(pids[i+1], status, 0) != pids[i+1]) {
-   printf(failed to wait for %d\n,
-  (int)pids[i+1]);
-   exit(1);
-   }
-   if (WEXITSTATUS(status) != 0) {
-   printf(child %d exited with status %d\n,
-  (int)pids[i+1], WEXITSTATUS(status));
-   exit(1);
-   }
+   tdb_traverse(db, NULL, NULL);
+   tdb_traverse(db, traverse_fn, NULL);
+   tdb_traverse(db, traverse_fn, NULL);
+
+   tdb_close(db);
+   exit(0);
}
-   printf(OK\n);
}
 
+   for (i=0;iNPROC;i++) {
+   int status;
+   if (waitpid(pids[i], status, 0) != pids[i]) {
+   printf(failed to wait for %d\n,
+  (int)pids[i]);
+   exit(1);
+   }
+   if (WEXITSTATUS(status) != 0) {
+   printf(child %d exited with status %d\n,
+  (int)pids[i], WEXITSTATUS(status));
+   exit(1);
+   }
+   }
+   printf(OK\n);
return 0;
 }

svn commit: samba r9738 - branches/SAMBA_3_0/source/tdb trunk/source/tdb

2005-08-29 Thread vlendec

Author: vlendec
Date: 2005-08-29 13:45:13 + (Mon, 29 Aug 2005)
New Revision: 9738

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9738

Log:
Adapt tdb_torture to the new CLEAR_IF_FIRST semantics. We need one parent
process holding the active if two cluster nodes access the same tdb.

Volker

Modified:
   branches/SAMBA_3_0/source/tdb/tdbtorture.c
   trunk/source/tdb/tdbtorture.c


Changeset:
Modified: branches/SAMBA_3_0/source/tdb/tdbtorture.c
===
--- branches/SAMBA_3_0/source/tdb/tdbtorture.c  2005-08-29 13:22:34 UTC (rev 
9737)
+++ branches/SAMBA_3_0/source/tdb/tdbtorture.c  2005-08-29 13:45:13 UTC (rev 
9738)
@@ -183,45 +183,45 @@
int loops = NLOOPS;
pid_t pids[NPROC];
 
-   pids[0] = getpid();
-
-   for (i=0;iNPROC-1;i++) {
-   if ((pids[i+1]=fork()) == 0) break;
-   }
-
-   db = tdb_open(torture.tdb, 2, TDB_CLEAR_IF_FIRST, 
+   db = tdb_open(torture.tdb, 0, TDB_CLEAR_IF_FIRST, 
  O_RDWR | O_CREAT, 0600);
if (!db) {
fatal(db open failed);
}
-   tdb_logging_function(db, tdb_log);
 
-   srand(seed + getpid());
-   srandom(seed + getpid() + time(NULL));
-   for (i=0;iloops;i++) addrec_db();
+   for (i=0;iNPROC;i++) {
+   pids[i] = fork();
+   if (pids[i] == 0) {
+   tdb_reopen_all();
 
-   tdb_traverse(db, NULL, NULL);
-   tdb_traverse(db, traverse_fn, NULL);
-   tdb_traverse(db, traverse_fn, NULL);
+   tdb_logging_function(db, tdb_log);
 
-   tdb_close(db);
+   srand(seed + getpid());
+   srandom(seed + getpid() + time(NULL));
+   for (i=0;iloops;i++) addrec_db();
 
-   if (getpid() == pids[0]) {
-   for (i=0;iNPROC-1;i++) {
-   int status;
-   if (waitpid(pids[i+1], status, 0) != pids[i+1]) {
-   printf(failed to wait for %d\n,
-  (int)pids[i+1]);
-   exit(1);
-   }
-   if (WEXITSTATUS(status) != 0) {
-   printf(child %d exited with status %d\n,
-  (int)pids[i+1], WEXITSTATUS(status));
-   exit(1);
-   }
+   tdb_traverse(db, NULL, NULL);
+   tdb_traverse(db, traverse_fn, NULL);
+   tdb_traverse(db, traverse_fn, NULL);
+
+   tdb_close(db);
+   exit(0);
}
-   printf(OK\n);
}
 
+   for (i=0;iNPROC;i++) {
+   int status;
+   if (waitpid(pids[i], status, 0) != pids[i]) {
+   printf(failed to wait for %d\n,
+  (int)pids[i]);
+   exit(1);
+   }
+   if (WEXITSTATUS(status) != 0) {
+   printf(child %d exited with status %d\n,
+  (int)pids[i], WEXITSTATUS(status));
+   exit(1);
+   }
+   }
+   printf(OK\n);
return 0;
 }

Modified: trunk/source/tdb/tdbtorture.c
===
--- trunk/source/tdb/tdbtorture.c   2005-08-29 13:22:34 UTC (rev 9737)
+++ trunk/source/tdb/tdbtorture.c   2005-08-29 13:45:13 UTC (rev 9738)
@@ -183,45 +183,45 @@
int loops = NLOOPS;
pid_t pids[NPROC];
 
-   pids[0] = getpid();
-
-   for (i=0;iNPROC-1;i++) {
-   if ((pids[i+1]=fork()) == 0) break;
-   }
-
-   db = tdb_open(torture.tdb, 2, TDB_CLEAR_IF_FIRST, 
+   db = tdb_open(torture.tdb, 0, TDB_CLEAR_IF_FIRST, 
  O_RDWR | O_CREAT, 0600);
if (!db) {
fatal(db open failed);
}
-   tdb_logging_function(db, tdb_log);
 
-   srand(seed + getpid());
-   srandom(seed + getpid() + time(NULL));
-   for (i=0;iloops;i++) addrec_db();
+   for (i=0;iNPROC;i++) {
+   pids[i] = fork();
+   if (pids[i] == 0) {
+   tdb_reopen_all();
 
-   tdb_traverse(db, NULL, NULL);
-   tdb_traverse(db, traverse_fn, NULL);
-   tdb_traverse(db, traverse_fn, NULL);
+   tdb_logging_function(db, tdb_log);
 
-   tdb_close(db);
+   srand(seed + getpid());
+   srandom(seed + getpid() + time(NULL));
+   for (i=0;iloops;i++) addrec_db();
 
-   if (getpid() == pids[0]) {
-   for (i=0;iNPROC-1;i++) {
-   int status;
-   if (waitpid(pids[i+1], status, 0) != pids[i+1]) {
-   printf(failed to wait for

svn commit: samba r9739 - in branches/SAMBA_3_0/source: include libads printing registry rpc_client rpc_parse rpc_server rpcclient utils

Author: jerry
Date: 2005-08-29 14:55:40 + (Mon, 29 Aug 2005)
New Revision: 9739

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9739

Log:
conver the reg_objects (REGSUBKEY_CTR  REGVAL_CTR) to use
the new talloc() features:

 Note that the REGSUB_CTR and REGVAL_CTR objects *must* be talloc()'d
 since the methods use the object pointer as the talloc context for
 internal private data.

 There is no longer a regXXX_ctr_intit() and regXXX_ctr_destroy()
 pair of functions.  Simply TALLOC_ZERO_P() and TALLOC_FREE() the
 object.

Also had to convert the printer_info_2-NT_PRINTER_DATA field
to be talloc()'d as well.  This is just a stop on the road to 
cleaning up the printer memory management.


Modified:
   branches/SAMBA_3_0/source/include/nt_printing.h
   branches/SAMBA_3_0/source/include/reg_objects.h
   branches/SAMBA_3_0/source/include/smb_macros.h
   branches/SAMBA_3_0/source/libads/ldap_printer.c
   branches/SAMBA_3_0/source/printing/nt_printing.c
   branches/SAMBA_3_0/source/registry/reg_db.c
   branches/SAMBA_3_0/source/registry/reg_frontend.c
   branches/SAMBA_3_0/source/registry/reg_objects.c
   branches/SAMBA_3_0/source/registry/reg_printing.c
   branches/SAMBA_3_0/source/rpc_client/cli_spoolss.c
   branches/SAMBA_3_0/source/rpc_parse/parse_spoolss.c
   branches/SAMBA_3_0/source/rpc_server/srv_reg_nt.c
   branches/SAMBA_3_0/source/rpc_server/srv_spoolss_nt.c
   branches/SAMBA_3_0/source/rpcclient/cmd_spoolss.c
   branches/SAMBA_3_0/source/utils/net_rpc_printer.c
   branches/SAMBA_3_0/source/utils/net_rpc_registry.c
   branches/SAMBA_3_0/source/utils/profiles.c


Changeset:
Sorry, the patch is too large (2654 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9739

svn commit: samba r9740 - in branches/SOC/SAMBA_4_0/source/torture/rpc: .

2005-08-29 Thread metze

Author: metze
Date: 2005-08-29 14:58:03 + (Mon, 29 Aug 2005)
New Revision: 9740

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9740

Log:
fix up the DsGetNCchanges loop,
and remove misleading comments

metze
Modified:
   branches/SOC/SAMBA_4_0/source/torture/rpc/dssync.c


Changeset:
Modified: branches/SOC/SAMBA_4_0/source/torture/rpc/dssync.c
===
--- branches/SOC/SAMBA_4_0/source/torture/rpc/dssync.c  2005-08-29 14:55:40 UTC 
(rev 9739)
+++ branches/SOC/SAMBA_4_0/source/torture/rpc/dssync.c  2005-08-29 14:58:03 UTC 
(rev 9740)
@@ -737,7 +737,7 @@
NTSTATUS status;
BOOL ret = True;
int i, y = 0;
-   int tmp_usn = 0;
+   uint64_t highest_usn = 0;
const char *partition = NULL;
struct drsuapi_DsGetNCChanges r;
struct drsuapi_DsReplicaObjectIdentifier nc;
@@ -759,12 +759,14 @@
ZERO_STRUCT(null_guid);
ZERO_STRUCT(null_sid);
 
-   partition = lp_parm_string(-1, drsuapi, partition);
+   partition = lp_parm_string(-1, dssync, partition);
if (partition == NULL) {
partition = ctx-domain_dn;
-   printf(drsuapi:partition not specified, defaulting to %s.\n, 
ctx-domain_dn);
+   printf(dssync:partition not specified, defaulting to %s.\n, 
ctx-domain_dn);
}
-   
+
+   highest_usn = lp_parm_int(-1, dssync, highest_usn, 0);
+
for (i=0; i  ARRAY_SIZE(array); i++) {
printf(testing DsGetNCChanges level %d\n,
array[i].level);
@@ -781,15 +783,15 @@
r.in.req.req5.destination_dsa_guid  = 
ctx-new_dc.invocation_id;
r.in.req.req5.source_dsa_guid   = 
null_guid;
r.in.req.req5.naming_context= nc;
-   r.in.req.req5.highwatermark.tmp_highest_usn = 0;
+   r.in.req.req5.highwatermark.tmp_highest_usn = 
highest_usn;
r.in.req.req5.highwatermark.reserved_usn= 0;
-   r.in.req.req5.highwatermark.highest_usn = 0;
+   r.in.req.req5.highwatermark.highest_usn = 
highest_usn;
r.in.req.req5.uptodateness_vector   = NULL;
r.in.req.req5.replica_flags = 0;
-   if (lp_parm_bool(-1,drsuapi,compression,False)) {
+   if (lp_parm_bool(-1,dssync,compression,False)) {
r.in.req.req5.replica_flags |= 
DRSUAPI_DS_REPLICA_NEIGHBOUR_COMPRESS_CHANGES;
}
-   if 
(lp_parm_bool(-1,drsuapi,neighbour_writeable,True)) {
+   if 
(lp_parm_bool(-1,dssync,neighbour_writeable,True)) {
r.in.req.req5.replica_flags |= 
DRSUAPI_DS_REPLICA_NEIGHBOUR_WRITEABLE;
}
r.in.req.req5.replica_flags |= 
DRSUAPI_DS_REPLICA_NEIGHBOUR_SYNC_ON_STARTUP
@@ -812,15 +814,15 @@
r.in.req.req8.destination_dsa_guid  = 
ctx-new_dc.invocation_id;
r.in.req.req8.source_dsa_guid   = 
null_guid;
r.in.req.req8.naming_context= nc;
-   r.in.req.req8.highwatermark.tmp_highest_usn = 0;
+   r.in.req.req8.highwatermark.tmp_highest_usn = 
highest_usn;
r.in.req.req8.highwatermark.reserved_usn= 0;
-   r.in.req.req8.highwatermark.highest_usn = 0;
+   r.in.req.req8.highwatermark.highest_usn = 
highest_usn;
r.in.req.req8.uptodateness_vector   = NULL;
r.in.req.req8.replica_flags = 0;
-   if (lp_parm_bool(-1,drsuapi,compression,False)) {
+   if (lp_parm_bool(-1,dssync,compression,False)) {
r.in.req.req8.replica_flags |= 
DRSUAPI_DS_REPLICA_NEIGHBOUR_COMPRESS_CHANGES;
}
-   if 
(lp_parm_bool(-1,drsuapi,neighbour_writeable,True)) {
+   if 
(lp_parm_bool(-1,dssync,neighbour_writeable,True)) {
r.in.req.req8.replica_flags |= 
DRSUAPI_DS_REPLICA_NEIGHBOUR_WRITEABLE;
}
r.in.req.req8.replica_flags |= 
DRSUAPI_DS_REPLICA_NEIGHBOUR_SYNC_ON_STARTUP
@@ -842,27 +844,18 @@

ZERO_STRUCT(r.out);
printf(Dumping AD partition: %s\n, nc.dn);
-   do {
-   /*r.in.req.req8.highwatermark =

svn commit: samba r9744 - in branches/SAMBA_4_0/source: lib/ldb/ldb_map lib/ldb/samba lib/ldb/tests lib/samba3 scripting/libjs setup

Author: jelmer
Date: 2005-08-29 15:54:10 + (Mon, 29 Aug 2005)
New Revision: 9744

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9744

Log:
- [upgrade.js] Start working on smb.conf conversion.
- [ldb_map] Support storing non-mappable data in a fallback LDB 

Modified:
   branches/SAMBA_4_0/source/lib/ldb/ldb_map/ldb_map.c
   branches/SAMBA_4_0/source/lib/ldb/ldb_map/ldb_map.h
   branches/SAMBA_4_0/source/lib/ldb/samba/samba3sam.c
   branches/SAMBA_4_0/source/lib/ldb/tests/test-samba3sam.sh
   branches/SAMBA_4_0/source/lib/samba3/PLAN
   branches/SAMBA_4_0/source/scripting/libjs/upgrade.js
   branches/SAMBA_4_0/source/setup/upgrade


Changeset:
Sorry, the patch is too large (981 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9744

svn commit: samba r9745 - in branches/SOC/SAMBA_3_0/source: include libmsrpc

2005-08-29 Thread skel

Author: skel
Date: 2005-08-29 15:55:15 + (Mon, 29 Aug 2005)
New Revision: 9745

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9745

Log:
CacLookupRidsRecord now stores a type, user or group


Modified:
   branches/SOC/SAMBA_3_0/source/include/libmsrpc.h
   branches/SOC/SAMBA_3_0/source/libmsrpc/cac_samr.c


Changeset:
Modified: branches/SOC/SAMBA_3_0/source/include/libmsrpc.h
===
--- branches/SOC/SAMBA_3_0/source/include/libmsrpc.h2005-08-29 15:54:10 UTC 
(rev 9744)
+++ branches/SOC/SAMBA_3_0/source/include/libmsrpc.h2005-08-29 15:55:15 UTC 
(rev 9745)
@@ -164,13 +164,20 @@
  * @defgroup sam_defs SAM Definitions
  * @{
  */
-struct cac_LookupRidsRecord {
+typedef struct _CACLOOKUPRIDSRECORD {
char *name;
uint32 rid;
+
+   /**If found, this will be one of:
+* - USER_RID_TYPE
+* - GROUP_RID_TYPE
+* (found in include/rpc_misc.h)
+*/
+   uint32 type;

/*if the name or RID was looked up, then found = True*/
BOOL found;
-};
+} CacLookupRidsRecord;
 
 typedef struct _CACUSERINFO {
/**Last logon time*/
@@ -1779,7 +1786,7 @@
   uint32 num_names;
 
   /**array contiaing the Names and RIDs*/
-  struct cac_LookupRidsRecord *map;
+  CacLookupRidsRecord *map;
} out;
 };
 
@@ -1810,7 +1817,7 @@
   uint32 num_rids;
 
   /**array contiaing the Names and RIDs*/
-  struct cac_LookupRidsRecord *map;
+  CacLookupRidsRecord *map;
} out;
 };
 

Modified: branches/SOC/SAMBA_3_0/source/libmsrpc/cac_samr.c
===
--- branches/SOC/SAMBA_3_0/source/libmsrpc/cac_samr.c   2005-08-29 15:54:10 UTC 
(rev 9744)
+++ branches/SOC/SAMBA_3_0/source/libmsrpc/cac_samr.c   2005-08-29 15:55:15 UTC 
(rev 9745)
@@ -22,7 +22,6 @@
 #include libmsrpc_internal.h
 
 /*used by cac_SamGetNamesFromRids*/
-#define SAMR_RID_FOUND   1
 #define SAMR_RID_UNKNOWN 8
 
 #define SAMR_ENUM_MAX_SIZE 0x
@@ -470,7 +469,7 @@
 
uint32 i = 0;
 
-   struct cac_LookupRidsRecord *map_out;
+   CacLookupRidsRecord *map_out;
 
if(!hnd) 
   return CAC_FAILURE;
@@ -498,7 +497,7 @@
if(!NT_STATUS_IS_OK(hnd-status)  !NT_STATUS_EQUAL(hnd-status, 
STATUS_SOME_UNMAPPED))
   return CAC_FAILURE;
 
-   map_out = TALLOC_ARRAY(mem_ctx, struct cac_LookupRidsRecord, num_names_out);
+   map_out = TALLOC_ARRAY(mem_ctx, CacLookupRidsRecord, num_names_out);
if(!map_out) {
   hnd-status = NT_STATUS_NO_MEMORY;
   return CAC_FAILURE;
@@ -508,10 +507,12 @@
   if(name_types_out[i] == SAMR_RID_UNKNOWN) {
  map_out[i].found = False;
  map_out[i].name  = NULL;
+ map_out[i].type  = 0;
   }
   else {
  map_out[i].found = True;
  map_out[i].name = talloc_strdup(mem_ctx, names_out[i]);
+ map_out[i].type = name_types_out[i];
   }
   map_out[i].rid = op-in.rids[i];
}
@@ -537,7 +538,7 @@
 
uint32 i = 0;
 
-   struct cac_LookupRidsRecord *map_out;
+   CacLookupRidsRecord *map_out;
 
if(!hnd) 
   return CAC_FAILURE;
@@ -566,20 +567,23 @@
if(!NT_STATUS_IS_OK(hnd-status)  !NT_STATUS_EQUAL(hnd-status, 
STATUS_SOME_UNMAPPED))
   return CAC_FAILURE;
 
-   map_out = TALLOC_ARRAY(mem_ctx, struct cac_LookupRidsRecord, num_rids_out);
+   map_out = TALLOC_ARRAY(mem_ctx, CacLookupRidsRecord, num_rids_out);
if(!map_out) {
   hnd-status = NT_STATUS_NO_MEMORY;
   return CAC_FAILURE;
}
 
for(i = 0; i  num_rids_out; i++) {
+
   if(rid_types_out[i] == SAMR_RID_UNKNOWN) {
  map_out[i].found = False;
  map_out[i].rid   = 0;
+ map_out[i].type  = 0;
   }
   else {
  map_out[i].found = True;
  map_out[i].rid   = rids_out[i];
+ map_out[i].type  = rid_types_out[i];
   }
 
   map_out[i].name = talloc_strdup(mem_ctx, op-in.names[i]);

svn commit: samba r9746 - in branches/SAMBA_4_0/source/scripting/libjs: .

Author: jelmer
Date: 2005-08-29 15:55:35 + (Mon, 29 Aug 2005)
New Revision: 9746

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9746

Log:
Add staff as possible alternative to wheel 
(should fix standard provisioning on AIX)

Modified:
   branches/SAMBA_4_0/source/scripting/libjs/provision.js


Changeset:
Modified: branches/SAMBA_4_0/source/scripting/libjs/provision.js
===
--- branches/SAMBA_4_0/source/scripting/libjs/provision.js  2005-08-29 
15:55:15 UTC (rev 9745)
+++ branches/SAMBA_4_0/source/scripting/libjs/provision.js  2005-08-29 
15:55:35 UTC (rev 9746)
@@ -291,7 +291,7 @@
subobj.ROOT = findnss(nss.getpwnam, root);
subobj.NOBODY   = findnss(nss.getpwnam, nobody);
subobj.NOGROUP  = findnss(nss.getgrnam, nogroup, nobody);
-   subobj.WHEEL= findnss(nss.getgrnam, wheel, root);
+   subobj.WHEEL= findnss(nss.getgrnam, wheel, root, staff);
subobj.USERS= findnss(nss.getgrnam, users, guest, other);
subobj.DNSDOMAIN= strlower(subobj.REALM);
subobj.DNSNAME  = sprintf(%s.%s,

svn commit: samba r9747 - in branches/tmp/vl-cluster/source: client include libads nsswitch printing registry rpc_client rpc_parse rpc_server rpcclient utils

2005-08-29 Thread vlendec

Author: vlendec
Date: 2005-08-29 16:11:48 + (Mon, 29 Aug 2005)
New Revision: 9747

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9747

Log:
Merge head up to r9746.
Modified:
   branches/tmp/vl-cluster/source/client/smbspool.c
   branches/tmp/vl-cluster/source/include/nt_printing.h
   branches/tmp/vl-cluster/source/include/reg_objects.h
   branches/tmp/vl-cluster/source/include/smb_macros.h
   branches/tmp/vl-cluster/source/libads/ldap_printer.c
   branches/tmp/vl-cluster/source/nsswitch/winbindd_dual.c
   branches/tmp/vl-cluster/source/nsswitch/winbindd_util.c
   branches/tmp/vl-cluster/source/printing/nt_printing.c
   branches/tmp/vl-cluster/source/registry/reg_db.c
   branches/tmp/vl-cluster/source/registry/reg_frontend.c
   branches/tmp/vl-cluster/source/registry/reg_objects.c
   branches/tmp/vl-cluster/source/registry/reg_printing.c
   branches/tmp/vl-cluster/source/rpc_client/cli_spoolss.c
   branches/tmp/vl-cluster/source/rpc_parse/parse_spoolss.c
   branches/tmp/vl-cluster/source/rpc_server/srv_reg_nt.c
   branches/tmp/vl-cluster/source/rpc_server/srv_spoolss_nt.c
   branches/tmp/vl-cluster/source/rpcclient/cmd_spoolss.c
   branches/tmp/vl-cluster/source/utils/net_rpc_printer.c
   branches/tmp/vl-cluster/source/utils/net_rpc_registry.c
   branches/tmp/vl-cluster/source/utils/profiles.c


Changeset:
Sorry, the patch is too large (2797 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9747

svn commit: samba r9748 - in branches/tmp/RPCREWRITE/source: include libads printing registry rpc_client rpc_parse rpc_server rpcclient utils

Author: jra
Date: 2005-08-29 16:12:56 + (Mon, 29 Aug 2005)
New Revision: 9748

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9748

Log:
Keep up to date with HEAD whilst I'm working on this...
Jeremy.

Modified:
   branches/tmp/RPCREWRITE/source/include/nt_printing.h
   branches/tmp/RPCREWRITE/source/include/reg_objects.h
   branches/tmp/RPCREWRITE/source/include/smb_macros.h
   branches/tmp/RPCREWRITE/source/libads/ldap_printer.c
   branches/tmp/RPCREWRITE/source/printing/nt_printing.c
   branches/tmp/RPCREWRITE/source/registry/reg_db.c
   branches/tmp/RPCREWRITE/source/registry/reg_frontend.c
   branches/tmp/RPCREWRITE/source/registry/reg_objects.c
   branches/tmp/RPCREWRITE/source/registry/reg_printing.c
   branches/tmp/RPCREWRITE/source/rpc_client/cli_spoolss.c
   branches/tmp/RPCREWRITE/source/rpc_parse/parse_spoolss.c
   branches/tmp/RPCREWRITE/source/rpc_server/srv_reg_nt.c
   branches/tmp/RPCREWRITE/source/rpc_server/srv_spoolss_nt.c
   branches/tmp/RPCREWRITE/source/rpcclient/cmd_spoolss.c
   branches/tmp/RPCREWRITE/source/utils/net_rpc_printer.c
   branches/tmp/RPCREWRITE/source/utils/net_rpc_registry.c
   branches/tmp/RPCREWRITE/source/utils/profiles.c


Changeset:
Sorry, the patch is too large (2714 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9748

svn commit: samba r9749 - in branches/tmp/RPCREWRITE/source/tdb: .

Author: jra
Date: 2005-08-29 16:23:58 + (Mon, 29 Aug 2005)
New Revision: 9749

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9749

Log:
Keep up to date with HEAD...
Jeremy.

Modified:
   branches/tmp/RPCREWRITE/source/tdb/tdbtorture.c


Changeset:
Modified: branches/tmp/RPCREWRITE/source/tdb/tdbtorture.c
===
--- branches/tmp/RPCREWRITE/source/tdb/tdbtorture.c 2005-08-29 16:12:56 UTC 
(rev 9748)
+++ branches/tmp/RPCREWRITE/source/tdb/tdbtorture.c 2005-08-29 16:23:58 UTC 
(rev 9749)
@@ -183,45 +183,45 @@
int loops = NLOOPS;
pid_t pids[NPROC];
 
-   pids[0] = getpid();
-
-   for (i=0;iNPROC-1;i++) {
-   if ((pids[i+1]=fork()) == 0) break;
-   }
-
-   db = tdb_open(torture.tdb, 2, TDB_CLEAR_IF_FIRST, 
+   db = tdb_open(torture.tdb, 0, TDB_CLEAR_IF_FIRST, 
  O_RDWR | O_CREAT, 0600);
if (!db) {
fatal(db open failed);
}
-   tdb_logging_function(db, tdb_log);
 
-   srand(seed + getpid());
-   srandom(seed + getpid() + time(NULL));
-   for (i=0;iloops;i++) addrec_db();
+   for (i=0;iNPROC;i++) {
+   pids[i] = fork();
+   if (pids[i] == 0) {
+   tdb_reopen_all();
 
-   tdb_traverse(db, NULL, NULL);
-   tdb_traverse(db, traverse_fn, NULL);
-   tdb_traverse(db, traverse_fn, NULL);
+   tdb_logging_function(db, tdb_log);
 
-   tdb_close(db);
+   srand(seed + getpid());
+   srandom(seed + getpid() + time(NULL));
+   for (i=0;iloops;i++) addrec_db();
 
-   if (getpid() == pids[0]) {
-   for (i=0;iNPROC-1;i++) {
-   int status;
-   if (waitpid(pids[i+1], status, 0) != pids[i+1]) {
-   printf(failed to wait for %d\n,
-  (int)pids[i+1]);
-   exit(1);
-   }
-   if (WEXITSTATUS(status) != 0) {
-   printf(child %d exited with status %d\n,
-  (int)pids[i+1], WEXITSTATUS(status));
-   exit(1);
-   }
+   tdb_traverse(db, NULL, NULL);
+   tdb_traverse(db, traverse_fn, NULL);
+   tdb_traverse(db, traverse_fn, NULL);
+
+   tdb_close(db);
+   exit(0);
}
-   printf(OK\n);
}
 
+   for (i=0;iNPROC;i++) {
+   int status;
+   if (waitpid(pids[i], status, 0) != pids[i]) {
+   printf(failed to wait for %d\n,
+  (int)pids[i]);
+   exit(1);
+   }
+   if (WEXITSTATUS(status) != 0) {
+   printf(child %d exited with status %d\n,
+  (int)pids[i], WEXITSTATUS(status));
+   exit(1);
+   }
+   }
+   printf(OK\n);
return 0;
 }

svn commit: samba r9750 - in branches/tmp/RPCREWRITE/source/client: .

Author: jra
Date: 2005-08-29 16:26:18 + (Mon, 29 Aug 2005)
New Revision: 9750

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9750

Log:
Final commit to keep in sync with head.
Jeremy

Modified:
   branches/tmp/RPCREWRITE/source/client/smbspool.c


Changeset:
Modified: branches/tmp/RPCREWRITE/source/client/smbspool.c
===
--- branches/tmp/RPCREWRITE/source/client/smbspool.c2005-08-29 16:23:58 UTC 
(rev 9749)
+++ branches/tmp/RPCREWRITE/source/client/smbspool.c2005-08-29 16:26:18 UTC 
(rev 9750)
@@ -226,12 +226,12 @@
 {
   if (getenv(CLASS) == NULL)
   {
-fprintf(stderr, ERROR: Unable to connect to SAMBA host, will retry in 
60 seconds...);
-sleep (60);
+fprintf(stderr, ERROR: Unable to connect to CIFS host, will retry in 
60 seconds...);
+sleep (60); /* should just waiting and retrying fix authentication  
??? */
   }
   else
   {
-fprintf(stderr, ERROR: Unable to connect to SAMBA host, trying next 
printer...);
+fprintf(stderr, ERROR: Unable to connect to CIFS host, trying next 
printer...);
 return (1);
   }
 }
@@ -425,10 +425,10 @@
 return NULL;
   }
 
-  if (!cli_send_tconX(cli, share, ?,password, strlen(password)+1)) 
+  if (!cli_send_tconX(cli, share, ?, password, strlen(password)+1)) 
   {
+fprintf(stderr, ERROR: Tree connect failed (%s)\n, cli_errstr(cli));
 cli_shutdown(cli);
-fprintf(stderr, ERROR: Tree connect failed\n );
 return NULL;
   }

svn commit: samba r9751 - in branches/SAMBA_4_0/source/lib: ldb/ldb_map samba3

Author: jelmer
Date: 2005-08-29 17:31:19 + (Mon, 29 Aug 2005)
New Revision: 9751

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9751

Log:
Remove C version of samba3dump (the EJS version works nicely as well).
Fix a couple of bugs in ldb_map.

Removed:
   branches/SAMBA_4_0/source/lib/samba3/samba3dump.c
Modified:
   branches/SAMBA_4_0/source/lib/ldb/ldb_map/ldb_map.c
   branches/SAMBA_4_0/source/lib/samba3/config.mk


Changeset:
Sorry, the patch is too large (457 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9751

svn commit: samba r9752 - branches/SAMBA_3_0/source/rpc_server trunk/source/rpc_server

Author: jerry
Date: 2005-08-29 17:48:01 + (Mon, 29 Aug 2005)
New Revision: 9752

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9752

Log:
figured out why talloc_steal() is a bad idea for SEC_DESC*
Add a comment so someone else doesn't get bitten by this as well.


Modified:
   branches/SAMBA_3_0/source/rpc_server/srv_spoolss_nt.c
   trunk/source/rpc_server/srv_spoolss_nt.c


Changeset:
Modified: branches/SAMBA_3_0/source/rpc_server/srv_spoolss_nt.c
===
--- branches/SAMBA_3_0/source/rpc_server/srv_spoolss_nt.c   2005-08-29 
17:31:19 UTC (rev 9751)
+++ branches/SAMBA_3_0/source/rpc_server/srv_spoolss_nt.c   2005-08-29 
17:48:01 UTC (rev 9752)
@@ -4171,7 +4171,11 @@
if ( ntprinter-info_2-secdesc_buf 
 ntprinter-info_2-secdesc_buf-len != 0 ) 
{
-   printer-secdesc = dup_sec_desc( get_talloc_ctx(), 
ntprinter-info_2-secdesc_buf-sec );
+   /* don't use talloc_steal() here unless you do a deep steal of 
all 
+  the SEC_DESC members */
+
+   printer-secdesc = dup_sec_desc( get_talloc_ctx(), 
+   ntprinter-info_2-secdesc_buf-sec );
}
 
free_a_printer(ntprinter, 2);
@@ -4205,7 +4209,11 @@
printer-flags = 0x4; 
 
if (ntprinter-info_2-secdesc_buf  
ntprinter-info_2-secdesc_buf-len != 0) {
-   printer-secdesc = dup_sec_desc( get_talloc_ctx(), 
ntprinter-info_2-secdesc_buf-sec );
+   /* don't use talloc_steal() here unless you do a deep steal of 
all 
+  the SEC_DESC members */
+
+   printer-secdesc = dup_sec_desc( get_talloc_ctx(), 
+   ntprinter-info_2-secdesc_buf-sec );
}
 
free_a_printer(ntprinter, 2);

Modified: trunk/source/rpc_server/srv_spoolss_nt.c
===
--- trunk/source/rpc_server/srv_spoolss_nt.c2005-08-29 17:31:19 UTC (rev 
9751)
+++ trunk/source/rpc_server/srv_spoolss_nt.c2005-08-29 17:48:01 UTC (rev 
9752)
@@ -4171,7 +4171,11 @@
if ( ntprinter-info_2-secdesc_buf 
 ntprinter-info_2-secdesc_buf-len != 0 ) 
{
-   printer-secdesc = dup_sec_desc( get_talloc_ctx(), 
ntprinter-info_2-secdesc_buf-sec );
+   /* don't use talloc_steal() here unless you do a deep steal of 
all 
+  the SEC_DESC members */
+
+   printer-secdesc = dup_sec_desc( get_talloc_ctx(), 
+   ntprinter-info_2-secdesc_buf-sec );
}
 
free_a_printer(ntprinter, 2);
@@ -4205,7 +4209,11 @@
printer-flags = 0x4; 
 
if (ntprinter-info_2-secdesc_buf  
ntprinter-info_2-secdesc_buf-len != 0) {
-   printer-secdesc = dup_sec_desc( get_talloc_ctx(), 
ntprinter-info_2-secdesc_buf-sec );
+   /* don't use talloc_steal() here unless you do a deep steal of 
all 
+  the SEC_DESC members */
+
+   printer-secdesc = dup_sec_desc( get_talloc_ctx(), 
+   ntprinter-info_2-secdesc_buf-sec );
}
 
free_a_printer(ntprinter, 2);

svn commit: samba r9753 - in branches/tmp/RPCREWRITE/source/rpc_server: .

Author: jra
Date: 2005-08-29 17:54:14 + (Mon, 29 Aug 2005)
New Revision: 9753

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9753

Log:
Merge with head.
Jeremy.

Modified:
   branches/tmp/RPCREWRITE/source/rpc_server/srv_spoolss_nt.c


Changeset:
Modified: branches/tmp/RPCREWRITE/source/rpc_server/srv_spoolss_nt.c
===
--- branches/tmp/RPCREWRITE/source/rpc_server/srv_spoolss_nt.c  2005-08-29 
17:48:01 UTC (rev 9752)
+++ branches/tmp/RPCREWRITE/source/rpc_server/srv_spoolss_nt.c  2005-08-29 
17:54:14 UTC (rev 9753)
@@ -4171,7 +4171,11 @@
if ( ntprinter-info_2-secdesc_buf 
 ntprinter-info_2-secdesc_buf-len != 0 ) 
{
-   printer-secdesc = dup_sec_desc( get_talloc_ctx(), 
ntprinter-info_2-secdesc_buf-sec );
+   /* don't use talloc_steal() here unless you do a deep steal of 
all 
+  the SEC_DESC members */
+
+   printer-secdesc = dup_sec_desc( get_talloc_ctx(), 
+   ntprinter-info_2-secdesc_buf-sec );
}
 
free_a_printer(ntprinter, 2);
@@ -4205,7 +4209,11 @@
printer-flags = 0x4; 
 
if (ntprinter-info_2-secdesc_buf  
ntprinter-info_2-secdesc_buf-len != 0) {
-   printer-secdesc = dup_sec_desc( get_talloc_ctx(), 
ntprinter-info_2-secdesc_buf-sec );
+   /* don't use talloc_steal() here unless you do a deep steal of 
all 
+  the SEC_DESC members */
+
+   printer-secdesc = dup_sec_desc( get_talloc_ctx(), 
+   ntprinter-info_2-secdesc_buf-sec );
}
 
free_a_printer(ntprinter, 2);

svn commit: samba-web r784 - in trunk/patches: .

Author: lmuelle
Date: 2005-08-29 18:01:03 + (Mon, 29 Aug 2005)
New Revision: 784

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=784

Log:
Add quilt support to this nice patches dir.  I'll write also a reply to
Jerry's announcement on samba-technical.

Added:
   trunk/patches/fetch-patches
   trunk/patches/series
Modified:
   trunk/patches/index.html


Changeset:
Added: trunk/patches/fetch-patches
===
--- trunk/patches/fetch-patches 2005-08-26 19:21:59 UTC (rev 783)
+++ trunk/patches/fetch-patches 2005-08-29 18:01:03 UTC (rev 784)
@@ -0,0 +1,27 @@
+#! /bin/bash
+
+PATH=/usr/bin:/usr/X11R6/bin:/bin
+
+# URL to the series file
+SERIES_FILE=http://www.samba.org/samba/patches/series;
+
+if ! which wget/dev/null; then
+   echo Error: You have to install wget.
+   exit 1
+fi
+
+test -d patches || mkdir patches
+pushd patches /dev/null
+
+wget -N $SERIES_FILE
+
+while read patch rest; do
+   case $patch in
+   \#*|) continue ;;
+   *)
+   wget -N http://www.samba.org/samba/patches/$patch
+   ;;
+   esac
+done series
+
+popd /dev/null


Property changes on: trunk/patches/fetch-patches
___
Name: svn:executable
   + *

Modified: trunk/patches/index.html
===
--- trunk/patches/index.html2005-08-26 19:21:59 UTC (rev 783)
+++ trunk/patches/index.html2005-08-29 18:01:03 UTC (rev 784)
@@ -18,6 +18,15 @@
 build Samba as normal
 /pre
 
+Or use the quilt tool to apply all patches to a known series.
+pre$ tar zxvf samba-3.0.x.tar.gz
+$ cd samba-3.0.x
+$ wget http://www.samba.org/samba/patches/fetch-patches
+$ sh ./fetch-patches
+$ quilt push -a
+$ cd source
+/pre
+
 pPlease note that in some cases it will be necessary to regenerate
the configure script by executing autogen.sh located in the 
source/ directory.  In all cases, it is best to do a clean build 

Added: trunk/patches/series
===
--- trunk/patches/series2005-08-26 19:21:59 UTC (rev 783)
+++ trunk/patches/series2005-08-29 18:01:03 UTC (rev 784)
@@ -0,0 +1,7 @@
+# File to be used with the quilt tool to apply the patches in the right order.
+#
+# See http://savannah.nongnu.org/projects/quilt and 
+# http://www.suse.de/~agruen/quilt.pdf
+
+bug3010_v1.patch
+groupname_enumeration_v3.patch

svn commit: samba-web r785 - in trunk/news/advocacy: .

Author: deryck
Date: 2005-08-29 18:34:52 + (Mon, 29 Aug 2005)
New Revision: 785

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=785

Log:
Add news story on French Ag/Fishing Ministry's migration
to Linux/Samba.  (Thanks, ab, for the link!)

deryck

Added:
   trunk/news/advocacy/french_ag_migrates.html


Changeset:
Added: trunk/news/advocacy/french_ag_migrates.html
===
--- trunk/news/advocacy/french_ag_migrates.html 2005-08-29 18:01:03 UTC (rev 
784)
+++ trunk/news/advocacy/french_ag_migrates.html 2005-08-29 18:34:52 UTC (rev 
785)
@@ -0,0 +1,17 @@
+h3a name=french_ag_migratesFrench Agriculture Ministry Migrates to 
Linux/Samba/a/h3 
+
+div class=article
+  pa href=http://www.infogiciel.info/;Infogiciel.info/a is running 
an
+  article on the French Agriculture and Fishing Ministry moving 500 NT4 
servers
+  to Mandriva Linux.  Samba is handling the file and print server duties in
+  the Mandriva setup.  The article offers some insight into the French 
Agriculture
+  Ministry's migration concerns and how Mandriva tried to address those 
+  concerns./p
+
+  pThe article is in French and is available 
+  a href=http://www.infogiciel.info/article0195.html;here/a.  (Or 
+  a 
href=http://google.com/translate?u=http%3A%2F%2Fwww.infogiciel.info%2Farticle0195.htmllangpair=fr%7Cenhl=enie=UTF8;here/a,
 in English via 
+  a href=http://www.google.com/translate;Google translate/a.)/p
+/div
+
+

svn commit: samba-web r786 - in trunk/patches: .

Author: jerry
Date: 2005-08-29 18:45:05 + (Mon, 29 Aug 2005)
New Revision: 786

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=786

Log:
adding volker's winbindd patch to list and cleaning up html some
Added:
   trunk/patches/winbindd_v1.patch
Modified:
   trunk/patches/index.html


Changeset:
Modified: trunk/patches/index.html
===
--- trunk/patches/index.html2005-08-29 18:34:52 UTC (rev 785)
+++ trunk/patches/index.html2005-08-29 18:45:05 UTC (rev 786)
@@ -15,18 +15,20 @@
 $ cd samba-3.0.x
 $ patch -p1 lt; quot;downloaded_patch_filequot;
 $ cd source
-build Samba as normal
 /pre
 
-Or use the quilt tool to apply all patches to a known series.
+pOr use the quilt tool to apply all patches to a known series./p
+
 pre$ tar zxvf samba-3.0.x.tar.gz
 $ cd samba-3.0.x
 $ wget http://www.samba.org/samba/patches/fetch-patches
 $ sh ./fetch-patches
-$ quilt push -a
+$ a href=http://savannah.nongnu.org/projects/quilt;quilt/a push -a
 $ cd source
 /pre
 
+pbuild Samba as normal/p
+
 pPlease note that in some cases it will be necessary to regenerate
the configure script by executing autogen.sh located in the 
source/ directory.  In all cases, it is best to do a clean build 
@@ -55,6 +57,12 @@
 tdFixes a href=https://bugzilla.samba.org/bug/3010;Bug #3010/a: 
endless directory loop on AIX 5
 with Win9x clients. Requires re-running autogen.sh and a clean 
build./td
   /tr
+  tr
+tda href=/samba/patches/winbindd_v1.patchWinbindd/a/td
+tdFixes a few small issues with winbindd at startup and ensures that 
+the correct NT_STATUS code is returned to the calling processes
+when authentication fails./td
+  /tr
   /tbody 
 /table
 

Added: trunk/patches/winbindd_v1.patch
===
--- trunk/patches/winbindd_v1.patch 2005-08-29 18:34:52 UTC (rev 785)
+++ trunk/patches/winbindd_v1.patch 2005-08-29 18:45:05 UTC (rev 786)
@@ -0,0 +1,39 @@
+diff -urBbN --exclude-from=diff.excludes 
samba-3.0.20-orig/source/nsswitch/winbindd_dual.c 
samba-3.0.20-new/source/nsswitch/winbindd_dual.c
+--- samba-3.0.20-orig/source/nsswitch/winbindd_dual.c  2005-08-19 
12:16:27.0 -0500
 samba-3.0.20-new/source/nsswitch/winbindd_dual.c   2005-08-29 
13:34:16.0 -0500
+@@ -158,7 +158,6 @@
+   return;
+   }
+ 
+-  if (state-response-result == WINBINDD_OK)
+   SMB_ASSERT(cache_retrieve_response(child-pid,
+  state-response));
+ 
+@@ -486,12 +485,11 @@
+   DEBUG(4,(child daemon request %d\n,
+(int)state.request.cmd));
+ 
++  ZERO_STRUCT(state.response);
+   state.request.null_term = '\0';
+   child_process_request(child-domain, state);
+ 
+-  if (state.response.result == WINBINDD_OK)
+-  cache_store_response(sys_getpid(),
+-   state.response);
++  cache_store_response(sys_getpid(), state.response);
+ 
+   SAFE_FREE(state.response.extra_data);
+ 
+diff -urBbN --exclude-from=diff.excludes 
samba-3.0.20-orig/source/nsswitch/winbindd_util.c 
samba-3.0.20-new/source/nsswitch/winbindd_util.c
+--- samba-3.0.20-orig/source/nsswitch/winbindd_util.c  2005-07-28 
08:19:44.0 -0500
 samba-3.0.20-new/source/nsswitch/winbindd_util.c   2005-08-29 
13:34:16.0 -0500
+@@ -444,7 +444,9 @@
+   state-request.data.init_conn.dcname
+   [sizeof(state-request.data.init_conn.dcname)-1]='\0';
+ 
++  if (strlen(state-request.data.init_conn.dcname)  0) {
+   fstrcpy(domain-dcname, state-request.data.init_conn.dcname);
++  }
+ 
+   if (strlen(domain-dcname)  0) {
+   if (!resolve_name(domain-dcname, ipaddr, 0x20)) {

svn commit: samba-web r787 - in trunk/patches: .

Author: jerry
Date: 2005-08-29 18:54:08 + (Mon, 29 Aug 2005)
New Revision: 787

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=787

Log:
adding new patch to series file
Modified:
   trunk/patches/series


Changeset:
Modified: trunk/patches/series
===
--- trunk/patches/series2005-08-29 18:45:05 UTC (rev 786)
+++ trunk/patches/series2005-08-29 18:54:08 UTC (rev 787)
@@ -5,3 +5,4 @@
 
 bug3010_v1.patch
 groupname_enumeration_v3.patch
+winbindd_v1.patch

svn commit: samba-web r788 - in trunk/patches: .

Author: lmuelle
Date: 2005-08-29 19:04:12 + (Mon, 29 Aug 2005)
New Revision: 788

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=788

Log:
Add support for a non default series file.  This might allow us to
provide more than one patch series.  E.g. series-3.0.21pre2

It's now possible to override the PATCH_DIR if it is set in the
environment from where the script is called.

Modified:
   trunk/patches/fetch-patches


Changeset:
Modified: trunk/patches/fetch-patches
===
--- trunk/patches/fetch-patches 2005-08-29 18:54:08 UTC (rev 787)
+++ trunk/patches/fetch-patches 2005-08-29 19:04:12 UTC (rev 788)
@@ -1,9 +1,38 @@
 #! /bin/bash
 
+# Copyright (c) 2005 Lars Mueller lmuelle at samba.org
+#
+# If called without any argument the default series filename 'series' is used.
+# It's possible to pass a non default series filename, e.g. series-3.0.20, as
+# first argument.
+#
+# If PATCH_DIR is defined, we don't use our default at Samba.org.  That's
+# at least handy for testing changes to the script.
+#
+#
+# This program is free software; you can redistribute it and/or modify it under
+# the terms of the GNU General Public License as published by the Free Software
+# Foundation; either version 2 of the License, or (at your option) any later
+# version.
+#
+# This program is distributed in the hope that it will be useful, but WITHOUT
+# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
+# FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
+# details.
+#
+# You should have received a copy of the GNU General Public License along with
+# this program; if not, write to the Free Software Foundation, Inc., 59 Temple
+# Place, Suite 330, Boston, MA 02111-1307 USA
+
+
 PATH=/usr/bin:/usr/X11R6/bin:/bin
 
-# URL to the series file
-SERIES_FILE=http://www.samba.org/samba/patches/series;
+# Path to the series file and patches
+test ${PATCH_DIR} || \
+   PATCH_DIR=http://www.samba.org/samba/patches;
+test $1 
+   SERIES_FILE=$1 || \
+   SERIES_FILE=series
 
 if ! which wget/dev/null; then
echo Error: You have to install wget.
@@ -13,13 +42,18 @@
 test -d patches || mkdir patches
 pushd patches /dev/null
 
-wget -N $SERIES_FILE
+if ! wget -N ${PATCH_DIR}/${SERIES_FILE}; then
+   echo Error: Can not download ${PATCH_DIR}/${SERIES_FILE}
+   exit 1
+fi
+test ${SERIES_FILE} = series || \
+   ln -fs $1 series
 
 while read patch rest; do
-   case $patch in
+   case ${patch} in
\#*|) continue ;;
*)
-   wget -N http://www.samba.org/samba/patches/$patch
+   wget -N ${PATCH_DIR}/${patch}
;;
esac
 done series

svn commit: samba r9755 - in branches/SAMBA_4_0/source/scripting/ejs: .

Author: jelmer
Date: 2005-08-29 19:08:18 + (Mon, 29 Aug 2005)
New Revision: 9755

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9755

Log:
Fix crash bug in SWAT login

Modified:
   branches/SAMBA_4_0/source/scripting/ejs/smbcalls_auth.c


Changeset:
Modified: branches/SAMBA_4_0/source/scripting/ejs/smbcalls_auth.c
===
--- branches/SAMBA_4_0/source/scripting/ejs/smbcalls_auth.c 2005-08-29 
18:52:24 UTC (rev 9754)
+++ branches/SAMBA_4_0/source/scripting/ejs/smbcalls_auth.c 2005-08-29 
19:08:18 UTC (rev 9755)
@@ -119,6 +119,9 @@
ejsSetErrorMsg(eid, userAuth requires a 'creds' element);
return -1;
}
+
+   tmp_ctx = talloc_new(mprMemCtx());  
+   
username= cli_credentials_get_username(creds, tmp_ctx);
password= cli_credentials_get_password(creds);
domain  = cli_credentials_get_domain(creds);
@@ -126,10 +129,10 @@
 
if (username == NULL || password == NULL || domain == NULL) {
mpr_Return(eid, mprCreateUndefinedVar());
+   talloc_free(tmp_ctx);
return 0;
}
 
-   tmp_ctx = talloc_new(mprMemCtx());  
auth = mprObject(auth);
 
if (domain  strcmp(System User, domain) == 0) {

svn commit: samba-web r789 - in trunk: style support

Author: deryck
Date: 2005-08-29 19:37:15 + (Mon, 29 Aug 2005)
New Revision: 789

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=789

Log:
Support updates/additions at the request of someone with each company.

deryck
Added:
   trunk/support/holland.html
Modified:
   trunk/style/wide.css
   trunk/support/countries.html
   trunk/support/hongkong.html


Changeset:
Modified: trunk/style/wide.css
===
--- trunk/style/wide.css2005-08-29 19:04:12 UTC (rev 788)
+++ trunk/style/wide.css2005-08-29 19:37:15 UTC (rev 789)
@@ -17,6 +17,7 @@
position:absolute;
top:100px;
clear:left;
+   min-width:70%;
margin:0 1% 0 175px;
padding-top:30px;
padding-left:35px;

Modified: trunk/support/countries.html
===
--- trunk/support/countries.html2005-08-29 19:04:12 UTC (rev 788)
+++ trunk/support/countries.html2005-08-29 19:37:15 UTC (rev 789)
@@ -14,6 +14,7 @@
  lia href=france.htmlFrance/a/li
  lia href=germany.htmlGermany/a/li
  lia href=greece.htmlGreece/a/li
+ lia href=holland.htmlHolland/a/li
  lia href=hongkong.htmlHong Kong - China/a/li
  lia href=hungary.htmlHungary/a/li
  lia href=india.htmlIndia/a/li  

Added: trunk/support/holland.html
===
--- trunk/support/holland.html  2005-08-29 19:04:12 UTC (rev 788)
+++ trunk/support/holland.html  2005-08-29 19:37:15 UTC (rev 789)
@@ -0,0 +1,22 @@
+!--#include virtual=/samba/header.html -- 
+  titleSamba Commercial Support Providers -- Holland/title
+!--#include virtual=header_support.html --
+
+h2Commercial Support - Holland/h2
+hr /
+
+
+!-- Added: 29 Aug 2005 --
+presmall
+Free2use.
+Groenendaal 2
+4003 EL  Tiel
+a href=http://www.free2use.org/;www.free2use.org/a
+
+Tel: 0344-707414
+fax: 0344-707413
+/small/pre
+
+
+
+!--#include virtual=footer_support.html--

Modified: trunk/support/hongkong.html
===
--- trunk/support/hongkong.html 2005-08-29 19:04:12 UTC (rev 788)
+++ trunk/support/hongkong.html 2005-08-29 19:37:15 UTC (rev 789)
@@ -49,4 +49,29 @@
 /small/pre
 
 
+!-- Added: 29 August 2005 --
+hr /
+presmall
+WebForce Network Technology Ltd.
+ 
+16/F, Cheung kong Center, 
+2 Queen's Road, Central, Hong Kong.
+  
+Tel: +852 2788 0836
+Fax : +852 8101 2202
+Email: a href=mailto:[EMAIL PROTECTED][EMAIL PROTECTED]/a
+URL: a href=http://www.webforce.com.hk;http://www.webforce.com.hk/a
+   
+Contact Person: Jerry Sham, 
+LPIC-2, MCSE, MCDBA
+Project Manager
+
+Samba Experience:
+WebForce is a Linux service company founded in 1996 in Hong Kong. We
+provide configuration and support services for Samba in setting up
+departmental file and print server, NT-domain (PDC and BDC) environment,
+with ACL and real time virus blocking function. 
+/small/pre
+
+
 !--#include virtual=footer_support.html --

svn commit: samba-web r790 - in trunk/patches: .

Author: lmuelle
Date: 2005-08-29 19:43:10 + (Mon, 29 Aug 2005)
New Revision: 790

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=790

Log:
Move quilt link to the position where we mention it first.

Modified:
   trunk/patches/index.html


Changeset:
Modified: trunk/patches/index.html
===
--- trunk/patches/index.html2005-08-29 19:37:15 UTC (rev 789)
+++ trunk/patches/index.html2005-08-29 19:43:10 UTC (rev 790)
@@ -17,13 +17,14 @@
 $ cd source
 /pre
 
-pOr use the quilt tool to apply all patches to a known series./p
+pOr use the a href=http://savannah.nongnu.org/projects/quilt;quilt/a
+tool to apply all patches to a known series./p
 
 pre$ tar zxvf samba-3.0.x.tar.gz
 $ cd samba-3.0.x
 $ wget http://www.samba.org/samba/patches/fetch-patches
 $ sh ./fetch-patches
-$ a href=http://savannah.nongnu.org/projects/quilt;quilt/a push -a
+$ quilt push -a
 $ cd source
 /pre

svn commit: samba-web r791 - in trunk/patches: .

Author: lmuelle
Date: 2005-08-29 19:59:33 + (Mon, 29 Aug 2005)
New Revision: 791

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=791

Log:
Add HTML link to fetch-patches script.

Modified:
   trunk/patches/index.html


Changeset:
Modified: trunk/patches/index.html
===
--- trunk/patches/index.html2005-08-29 19:43:10 UTC (rev 790)
+++ trunk/patches/index.html2005-08-29 19:59:33 UTC (rev 791)
@@ -22,7 +22,7 @@
 
 pre$ tar zxvf samba-3.0.x.tar.gz
 $ cd samba-3.0.x
-$ wget http://www.samba.org/samba/patches/fetch-patches
+$ wget a 
href=http://www.samba.org/samba/patches/fetch-patcheshttp://www.samba.org/samba/patches/fetch-patches/a
 $ sh ./fetch-patches
 $ quilt push -a
 $ cd source

svn commit: samba-web r792 - in trunk/news/calendar: .

Author: deryck
Date: 2005-08-29 20:06:19 + (Mon, 29 Aug 2005)
New Revision: 792

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=792

Log:
jht updates for the Team calendar.

deryck

Added:
   trunk/news/calendar/jht_chicago_05.txt
   trunk/news/calendar/jht_network_powerhouse.txt
Modified:
   trunk/news/calendar/index.html
   trunk/news/calendar/showDate.js


Changeset:
Modified: trunk/news/calendar/index.html
===
--- trunk/news/calendar/index.html  2005-08-29 19:59:33 UTC (rev 791)
+++ trunk/news/calendar/index.html  2005-08-29 20:06:19 UTC (rev 792)
@@ -165,10 +165,10 @@
/tr
tr
td14/td
-   tda href=jht_training_general.txt 
onclick=showDate(29); return false15/a/td
-   tda href=jht_training_general.txt 
onclick=showDate(29); return false16/a/td
-   tda href=jht_training_general.txt 
onclick=showDate(29); return false17/a/td
-   tda href=jht_training_general.txt 
onclick=showDate(29); return false18/a/td
+   td15/td
+   td16/td
+   td17/td
+   td18/td
td19/td
td20/td
/tr
@@ -192,10 +192,6 @@
/tr
/table
 
-   /div  !-- Close dates_l section --
-
-  div class=dates_r
-
  table class=months
tr
th colspan=7September 2005/th
@@ -212,10 +208,10 @@
 tr
td4/td
td5/td
-   tda href=jht_training_general.txt 
onclick=showDate(30); return false6/a/td
-   tda href=jht_training_general.txt 
onclick=showDate(30); return false7/a/td
-   tda href=jht_training_general.txt 
onclick=showDate(30); return false8/a/td
-   tda href=jht_training_general.txt 
onclick=showDate(30); return false9/a/td
+   td6/td
+   td7/td
+   td8/td
+   td9/td
td10/td
/tr
tr
@@ -229,11 +225,11 @@
/tr
tr
td18/td
-   td19/td
-   td20/td
-   td21/td
-   td22/td
-   td23/td
+   tda href=jht_chicago_05.txt onclick=showDate(34); 
return false19/a/td
+   tda href=jht_network_powerhouse.txt 
onclick=showDate(35); return false20/a/td
+   tda href=jht_network_powerhouse.txt 
onclick=showDate(35); return false21/a/td
+   tda href=jht_network_powerhouse.txt 
onclick=showDate(35); return false22/a/td
+   tda href=jht_network_powerhouse.txt 
onclick=showDate(35); return false23/a/td
td24/td
/tr
tr
@@ -307,6 +303,10 @@
/tr
/table
 
+   /div  !-- Close dates_l section --
+
+  div class=dates_r
+
  table class=months
tr
th colspan=7November 2005/th
@@ -331,10 +331,10 @@
/tr
tr
td13/td
-   tda href=jht_training_general.txt 
onclick=showDate(31); return false14/a/td
-   tda href=jht_training_general.txt 
onclick=showDate(31); return false15/a/td
-   tda href=jht_training_general.txt 
onclick=showDate(31); return false16/a/td
-   tda href=jht_training_general.txt 
onclick=showDate(31); return false17/a/td
+   td14/td
+   td15/td
+   td16/td
+   td17/td
td18/td
td19/td
/tr
@@ -358,6 +358,107 @@
/tr
/table
 
+ table class=months
+   tr
+   th colspan=7December 2005/th
+   /tr
+   tr
+   td/td
+ td/td
+   td/td
+   td/td
+   td1/td
+   td2/td
+   td3/td
+   /tr
+tr
+   td4/td
+   td5/td
+   td6/td
+   td7/td
+   td8/td
+   td9/td
+   td10/td
+   /tr
+   tr
+   td11/td
+   td12/td
+   td13/td
+   td14/td
+   td15/td
+   td16/td
+   td17/td
+   /tr
+   tr
+   td18/td
+   td19/td
+   td20/td
+

Re: svn commit: samba r9752 - branches/SAMBA_3_0/source/rpc_server trunk/source/rpc_server

2005-08-29 Thread Stefan (metze) Metzmacher

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

[EMAIL PROTECTED] schrieb:

 figured out why talloc_steal() is a bad idea for SEC_DESC*
 Add a comment so someone else doesn't get bitten by this as well.

we hit the same problem in samba4 a few week ago,
the solution is to correctly create the SEC_DESC buffers,
and mad the sub elements childs of the main structure.

- --
metze

Stefan Metzmacher metze at samba.org www.samba.org
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDE2vEm70gjA5TCD8RArEIAJwMj0QuaNGiqb0SIO75B22J7dcJowCfcshD
eXaJgwU1SDOt/t2EifIecW0=
=T/Yg
-END PGP SIGNATURE-

svn commit: samba r9756 - in branches/SAMBA_4_0: source/lib/samba3 source/scripting/ejs source/scripting/libjs swat/install

Author: jelmer
Date: 2005-08-29 20:18:51 + (Mon, 29 Aug 2005)
New Revision: 9756

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9756

Log:
One-way upgrade from Samba3-Samba4 basically works now
Still need to polish some rough edges

Removed:
   branches/SAMBA_4_0/source/lib/samba3/upgrade.c
Modified:
   branches/SAMBA_4_0/source/lib/samba3/config.mk
   branches/SAMBA_4_0/source/scripting/ejs/smbcalls_string.c
   branches/SAMBA_4_0/source/scripting/libjs/provision.js
   branches/SAMBA_4_0/source/scripting/libjs/upgrade.js
   branches/SAMBA_4_0/swat/install/samba3.esp


Changeset:
Sorry, the patch is too large (549 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9756

svn commit: samba r9757 - in branches/SOC/SAMBA_3_0/source: include libmsrpc

2005-08-29 Thread skel

Author: skel
Date: 2005-08-29 20:51:21 + (Mon, 29 Aug 2005)
New Revision: 9757

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9757

Log:
cac_SamEnableUser() and cac_SamDisableUser() now use cli_samr_set_userinfo2()


Modified:
   branches/SOC/SAMBA_3_0/source/include/libmsrpc.h
   branches/SOC/SAMBA_3_0/source/libmsrpc/cac_samr.c


Changeset:
Modified: branches/SOC/SAMBA_3_0/source/include/libmsrpc.h
===
--- branches/SOC/SAMBA_3_0/source/include/libmsrpc.h2005-08-29 20:18:51 UTC 
(rev 9756)
+++ branches/SOC/SAMBA_3_0/source/include/libmsrpc.h2005-08-29 20:51:21 UTC 
(rev 9757)
@@ -164,14 +164,17 @@
  * @defgroup sam_defs SAM Definitions
  * @{
  */
+
+#define CAC_USER_RID  0x1
+#define CAC_GROUP_RID 0x2
+
 typedef struct _CACLOOKUPRIDSRECORD {
char *name;
uint32 rid;
 
/**If found, this will be one of:
-* - USER_RID_TYPE
-* - GROUP_RID_TYPE
-* (found in include/rpc_misc.h)
+* - CAC_USER_RID
+* - CAC_GROUP_RID
 */
uint32 type;

@@ -1668,7 +1671,7 @@
   char *name;
 
   /**See Allowable account control bits in include/smb.h*/
-  uint32 acb;
+  uint32 acb_mask;
} in;
 
struct {

Modified: branches/SOC/SAMBA_3_0/source/libmsrpc/cac_samr.c
===
--- branches/SOC/SAMBA_3_0/source/libmsrpc/cac_samr.c   2005-08-29 20:18:51 UTC 
(rev 9756)
+++ branches/SOC/SAMBA_3_0/source/libmsrpc/cac_samr.c   2005-08-29 20:51:21 UTC 
(rev 9757)
@@ -342,7 +342,7 @@
   return CAC_FAILURE;
}
 
-   if(!op || !op-in.dom_hnd || !op-in.name || op-in.acb == 0 || !mem_ctx) {
+   if(!op || !op-in.dom_hnd || !op-in.name || op-in.acb_mask == 0 || 
!mem_ctx) {
   hnd-status = NT_STATUS_INVALID_PARAMETER;
   return CAC_FAILURE;
}
@@ -361,7 +361,7 @@
   return CAC_FAILURE;
}
 
-   hnd-status = cli_samr_create_dom_user( (srv-cli), mem_ctx, 
op-in.dom_hnd, op-in.name, op-in.acb, unknown, user_out, rid_out);
+   hnd-status = cli_samr_create_dom_user( (srv-cli), mem_ctx, 
op-in.dom_hnd, op-in.name, op-in.acb_mask, unknown, user_out, rid_out);
 
if(!NT_STATUS_IS_OK(hnd-status))
   return CAC_FAILURE;
@@ -1582,15 +1582,15 @@
srv-cli.pipe_idx = PI_SAMR;
 
/*info_level = 21 is the only level that I have found to work reliably. It 
would be nice if user_level = 10 worked.*/
-   hnd-status = cli_samr_query_userinfo( (srv-cli), mem_ctx, user_hnd, 21, 
ctr);
+   hnd-status = cli_samr_query_userinfo( (srv-cli), mem_ctx, user_hnd, 
0x10, ctr);
 
if(!NT_STATUS_IS_OK(hnd-status))
   return CAC_FAILURE;
 
/**check the ACB mask*/
-   if((ctr-info.id21-acb_info  ACB_DISABLED) == ACB_DISABLED) {
+   if((ctr-info.id10-acb_info  ACB_DISABLED) == ACB_DISABLED) {
   /*toggle the disabled bit*/
-  ctr-info.id21-acb_info ^= ACB_DISABLED;
+  ctr-info.id10-acb_info ^= ACB_DISABLED;
}
else {
   /*the user is already enabled so just return success*/
@@ -1598,8 +1598,9 @@
}
 
/*now set the userinfo*/
-   hnd-status = cli_samr_set_userinfo( (srv-cli), mem_ctx, user_hnd, 0x10, 
(srv-cli.user_session_key), ctr);
+   hnd-status = cli_samr_set_userinfo2( (srv-cli), mem_ctx, user_hnd, 0x10, 
(srv-cli.user_session_key), ctr);
 
+   /*this will only work properly if we use set_userinfo2 - fail if it is not 
supported*/
if(!NT_STATUS_IS_OK(hnd-status))
   return CAC_FAILURE;
 
@@ -1645,8 +1646,10 @@
/*toggle the disabled bit*/
ctr-info.id10-acb_info ^= ACB_DISABLED;
 
-   hnd-status = cli_samr_set_userinfo( (srv-cli), mem_ctx, user_hnd, 0x10, 
(srv-cli.user_session_key), ctr);
+   /*this will only work properly if we use set_userinfo2*/
+   hnd-status = cli_samr_set_userinfo2( (srv-cli), mem_ctx, user_hnd, 0x10, 
(srv-cli.user_session_key), ctr);
 
+   /*this will only work properly if we use set_userinfo2 fail if it is not 
supported*/
if(!NT_STATUS_IS_OK(hnd-status))
   return CAC_FAILURE;

svn commit: samba r9758 - branches/SAMBA_3_0/source/nsswitch trunk/source/nsswitch

Author: jerry
Date: 2005-08-29 21:04:22 + (Mon, 29 Aug 2005)
New Revision: 9758

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=9758

Log:
make sure to lower case usernames in winbindd's getpwnam()


Modified:
   branches/SAMBA_3_0/source/nsswitch/winbindd_user.c
   trunk/source/nsswitch/winbindd_user.c


Changeset:
Modified: branches/SAMBA_3_0/source/nsswitch/winbindd_user.c
===
--- branches/SAMBA_3_0/source/nsswitch/winbindd_user.c  2005-08-29 20:51:21 UTC 
(rev 9757)
+++ branches/SAMBA_3_0/source/nsswitch/winbindd_user.c  2005-08-29 21:04:22 UTC 
(rev 9758)
@@ -230,6 +230,7 @@
const char *shell,
uint32 group_rid)
 {
+   fstring username;
struct getpwsid_state *s =
talloc_get_type_abort(private_data, struct getpwsid_state);
 
@@ -240,7 +241,9 @@
return;
}
 
-   s-username = talloc_strdup(s-state-mem_ctx, acct_name);
+   fstrcpy( username, acct_name );
+   strlower_m( username );
+   s-username = talloc_strdup(s-state-mem_ctx, username);
s-fullname = talloc_strdup(s-state-mem_ctx, full_name);
s-homedir = talloc_strdup(s-state-mem_ctx, homedir);
s-shell = talloc_strdup(s-state-mem_ctx, shell);

Modified: trunk/source/nsswitch/winbindd_user.c
===
--- trunk/source/nsswitch/winbindd_user.c   2005-08-29 20:51:21 UTC (rev 
9757)
+++ trunk/source/nsswitch/winbindd_user.c   2005-08-29 21:04:22 UTC (rev 
9758)
@@ -230,6 +230,7 @@
const char *shell,
uint32 group_rid)
 {
+   fstring username;
struct getpwsid_state *s =
talloc_get_type_abort(private_data, struct getpwsid_state);
 
@@ -240,7 +241,9 @@
return;
}
 
-   s-username = talloc_strdup(s-state-mem_ctx, acct_name);
+   fstrcpy( username, acct_name );
+   strlower_m( username );
+   s-username = talloc_strdup(s-state-mem_ctx, username);
s-fullname = talloc_strdup(s-state-mem_ctx, full_name);
s-homedir = talloc_strdup(s-state-mem_ctx, homedir);
s-shell = talloc_strdup(s-state-mem_ctx, shell);

svn commit: samba-web r793 - in trunk/patches: .

Author: jerry
Date: 2005-08-29 21:06:08 + (Mon, 29 Aug 2005)
New Revision: 793

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=793

Log:
updating winbindd patch
Modified:
   trunk/patches/winbindd_v1.patch


Changeset:
Modified: trunk/patches/winbindd_v1.patch
===
--- trunk/patches/winbindd_v1.patch 2005-08-29 20:06:19 UTC (rev 792)
+++ trunk/patches/winbindd_v1.patch 2005-08-29 21:06:08 UTC (rev 793)
@@ -24,6 +24,28 @@
  
SAFE_FREE(state.response.extra_data);
  
+diff -urBbN --exclude-from=diff.excludes 
samba-3.0.20-orig/source/nsswitch/winbindd_user.c 
samba-3.0.20-new/source/nsswitch/winbindd_user.c
+--- samba-3.0.20-orig/source/nsswitch/winbindd_user.c  2005-07-28 
08:19:44.0 -0500
 samba-3.0.20-new/source/nsswitch/winbindd_user.c   2005-08-29 
16:04:22.0 -0500
+@@ -230,6 +230,7 @@
+   const char *shell,
+   uint32 group_rid)
+ {
++  fstring username;
+   struct getpwsid_state *s =
+   talloc_get_type_abort(private_data, struct getpwsid_state);
+ 
+@@ -240,7 +241,9 @@
+   return;
+   }
+ 
+-  s-username = talloc_strdup(s-state-mem_ctx, acct_name);
++  fstrcpy( username, acct_name );
++  strlower_m( username );
++  s-username = talloc_strdup(s-state-mem_ctx, username);
+   s-fullname = talloc_strdup(s-state-mem_ctx, full_name);
+   s-homedir = talloc_strdup(s-state-mem_ctx, homedir);
+   s-shell = talloc_strdup(s-state-mem_ctx, shell);
 diff -urBbN --exclude-from=diff.excludes 
samba-3.0.20-orig/source/nsswitch/winbindd_util.c 
samba-3.0.20-new/source/nsswitch/winbindd_util.c
 --- samba-3.0.20-orig/source/nsswitch/winbindd_util.c  2005-07-28 
08:19:44.0 -0500
 +++ samba-3.0.20-new/source/nsswitch/winbindd_util.c   2005-08-29 
13:34:16.0 -0500

svn commit: samba r9759 - in branches/SAMBA_4_0/swat: desktop scripting/client