Re: [Samba] Samba interface to CVS/Subversion

2006-05-04 Thread Henrik Zagerholm

Hello,

Well, we are using samba shares as subversion repos but it is not  
exactly what you are looking for I think.
If you want to handle file events and connect them to svn commands  
your best bet would be a VFS module.


I don't think one like that exists but at least Recycle VFS does  
something on the delete event and perhaps the Audit VFS handles all  
the events you are looking for.

Either way you could simple write your own :)


Good luck
//Henrik

4 maj 2006 kl. 04:03 skrev David Baker:


Hey all,

Bit of a bogus question here as I only have a basic understanding of
CVS and Subversion.

A lot of the windows development tools we use in the office have CVS
or Subversion modules allowing us greater source code control. It
would be wonderful to have a samba share that acts as an interface to
a CVS or Subversion backend.

That way we can use any development tool and simply save our files to
the network share and let CVS/Subversion handle everything behind the
scenes.

Am I dreaming?

Could this be implemented with a standard samba setup and a bunch  
of scripts?

Can any smart cookies out there show me samba configurations that
allow programs to be run based on different file operations
(save/delete/move/etc..)?

Cheers heaps :) any pointers at all will be awesome.

--
DaveB
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] wbinfo -r NT_STATUS_ACCESS_DENIED

2006-05-04 Thread Volker Lendecke
On Thu, May 04, 2006 at 01:33:13PM +1000, Adam Cassar wrote:
 [2006/05/04 11:45:37, 3]
 nsswitch/winbindd_async.c:winbindd_dual_lookupname(695)
   [23088]: lookupname MYDOMAIN\joeblow
 [2006/05/04 11:45:37, 3]
 nsswitch/winbindd_async.c:winbindd_dual_getsidaliases(885)
   [23088]: getsidaliases
 [2006/05/04 11:45:37, 3]
 nsswitch/winbindd_async.c:winbindd_dual_getsidaliases(909)
   Could not lookup_useraliases: NT_STATUS_ACCESS_DENIED
 
 Any ideas? I am using samba v3.0.22

This can only work if user joeblow has logged in with his
username/password. Asking for memberships of a user that has
not logged in will never reliably work with Windows.

Volker


pgp48IJCm9nJD.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] hp asu - nt domain

2006-05-04 Thread El Fred

Hi Jeremy,


From: Jeremy Allison [EMAIL PROTECTED]
Date: Mon, 1 May 2006 19:42:03 -0700

On Mon, May 01, 2006 at 08:05:57PM +0200, El Fred wrote:
 hi,
 thx for the quick reply...

 It's samba 3.0 (comes with fedora core 4), i ran yum update a few weeks
 ago...

3.0.what ? I'd suggest an upgrade. Try 3.0.22.
I upgrade the os today... now the machine is running FC5 with samba 3.0.22-1 
but the problem remains the same...


krgds

Frederic

_
Want an original signature? Create your own MSN Messenger button. 
http://www.msn.be/services/messengerButton


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] folder sharing

2006-05-04 Thread aw
i m trying to hide folder from the browser list. means that when i only wan
to let some user to browse it. when i use browseable = no. everybody can,t c
it. i use the hide unreadable = yes also can function..can anyone help me.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Red Hat Enterprise and samba

2006-05-04 Thread Andrew Bartlett
On Thu, 2006-04-20 at 11:11 +0200, Arnaud FARINE wrote:
 Hello,
 
  
 
 I use RH Entreprise. With this version I’ve got the samaba 3.0.10-1.4E.
 
 I’ve got a problem with this version and Windows 2003 server SP1 and
 ArcServ.
 
 I can contact the samba share when I use the Windows Explorer. When I want
 to contact with ArcServ Backup software, Samba logs display this :
 
 Apr 20 10:50:34 aofrso449 smbd[29938]:   api_pipe_bind_req: unknown auth
 type 1 requested.

This is very interesting, as we have not seen this auth type before.
Are you able to take a pcap format packet capture, say with ethereal?

This would show us more about this new protocol, as I would like to try
and implement it. 

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba file server -- samba domain join problem

2006-05-04 Thread Anthony Linux

Hello,
I recently upgraded a network to FC3 from RH9 (I know, I know, behind the
times).

The network is small: one PDC, one file server.  The PDC (Samba, LDAP, DNS,
DHCP all on FC3) is running fine.  Seamless between linux logins and windows
XP.  Users can log in, see the shares, mount drives.

The second file server is just going to be an NFS and Samba server.  The
plan is to use security=domain and share everything the same way the PDC
does.

Two problems:  first, it did not want to join the domain.  I kept trying
net rpc join, it prompts for a password and tells me the password is
incorrect.  I checked the logs and it said something about not allowing
NTLMv1 for root.  So I set client ntlmv2 auth = yes and it allowed me to
join the domain.

So far so good, right?

When I try to open the share it prompts for a username and password.  When I
type valid ones in, it rejects them and upgrades their bad password count
(so the PDC is seeing an attempt to access the share).  The log files only
say NT_STATUS_WRONG_PASSWORD for the user account.

I have looked through the HOWTO and searched google, but can't seem to find
anything on this.  Sad thing is, I remember this being really, really easy
the last time I did it.

Any ideas?
Thanks,
Anthony

my simplified smb.conf (I have tried many other options like wins settings
to no avail).

workgroup=MYNET
security=domain
password server = MYPDC
ntlmv2 client auth = yes
encrypt passwords = yes

[Share info ...]
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Rejecting auth request

2006-05-04 Thread werner maes


hello

I often see these error messages in my logfiles

log.cc33a02:  _net_sam_logon: creds_server_step failed. Rejecting 
auth request from client CC33A02 machine account CC33A02$


I use samba 3.0.22

What's wrong?

Any ideas?

werner maes


Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Speeding up 'getent passwd' with winbindd on AD

2006-05-04 Thread Gautier, B \(Bob\)
I am working on a Linux-AD integration using winbindd in security=ads
mode with idmap=ad.

Everything is basically working, but the performance of user (and group)
enumeration has been very poor and I am almost at the stage where I ask
my users if they can live without it, though I would prefer not to.

In my test environment, I have about 8500 users in AD, of which
currently only about 10 have the necessary attributes to make them valid
Linux users.  When I try to enumerate the users, I notice that winbindd
gets the list of *all* users in AD, and then (in idmap_ad) it makes an
LDAP query per-user for the SFU attributes (e.g. uidNumber etc).  Most
of those queries fail, of course.

By changing the LDAP filter (in winbindd_ads.c, function
query_user_list) from (objectClass=user) to (for example)
((objectClass=user)(uidNumber=*)), i.e. by asking *only* for users
that have a uidNumber attribute, I have reduced a response time of 4
minutes for 'getent passwd' down to only 6 seconds.

I'd really like to see a change like this go into Samba, but I realise
the new filter isn't compatible with other idmap backends, and so at
best it needs to be optional.  Currently I have a patch which applies
the filter only if 'winbind nss info = sfu' in in effect.

I'm posting this here to get feedback: should I file an enhancement
request in Bugzilla, refine the fix somehow first, or forget it
altogether?

Bob Gautier
_

This email (including any attachments to it) is confidential, legally 
privileged, subject to copyright and is sent for the personal attention of the 
intended recipient only. If you have received this email in error, please 
advise us immediately and delete it. You are notified that disclosing, copying, 
distributing or taking any action in reliance on the contents of this 
information is strictly prohibited. Although we have taken reasonable 
precautions to ensure no viruses are present in this email, we cannot accept 
responsibility for any loss or damage arising from the viruses in this email or 
attachments. We exclude any liability for the content of this email, or for the 
consequences of any actions taken on the basis of the information provided in 
this email or its attachments, unless that information is subsequently 
confirmed in writing. If this email contains an offer, that should be 
considered as an invitation to treat.
_
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba interface to CVS/Subversion

2006-05-04 Thread webster
Hello.

Have you investigated SVNAutoversioning  ?
http://svnbook.red-bean.com/nightly/en/svn.webdav.autoversioning.html


Gary R. Webster



Hello,

Well, we are using samba shares as subversion repos but it is not 
exactly what you are looking for I think.
If you want to handle file events and connect them to svn commands 
your best bet would be a VFS module.

I don't think one like that exists but at least Recycle VFS does 
something on the delete event and perhaps the Audit VFS handles all 
the events you are looking for.
Either way you could simple write your own :)


Good luck
//Henrik

4 maj 2006 kl. 04:03 skrev David Baker:

 Hey all,

 Bit of a bogus question here as I only have a basic understanding of
 CVS and Subversion.

 A lot of the windows development tools we use in the office have CVS
 or Subversion modules allowing us greater source code control. It
 would be wonderful to have a samba share that acts as an interface to
 a CVS or Subversion backend.

 That way we can use any development tool and simply save our files to
 the network share and let CVS/Subversion handle everything behind the
 scenes.

 Am I dreaming?

 Could this be implemented with a standard samba setup and a bunch 
 of scripts?
 Can any smart cookies out there show me samba configurations that
 allow programs to be run based on different file operations
 (save/delete/move/etc..)?

 Cheers heaps :) any pointers at all will be awesome.

 --
 DaveB


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Speeding up 'getent passwd' with winbindd on AD

2006-05-04 Thread Rex Dieter

Gautier, B (Bob) wrote:


I'm posting this here to get feedback: should I file an enhancement
request in Bugzilla, refine the fix somehow first, or forget it
altogether?


IMO, bugzilla it now.  Possible refinement can occur later.

-- Rex

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Speeding up 'getent passwd' with winbindd on AD

2006-05-04 Thread Jeremy Allison
On Thu, May 04, 2006 at 02:33:05PM +0100, Gautier, B (Bob) wrote:
 
 I'm posting this here to get feedback: should I file an enhancement
 request in Bugzilla, refine the fix somehow first, or forget it
 altogether?

Enhancement in bugzilla please !

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] providing the current samba PID to a preexec script

2006-05-04 Thread Valéry Roché

Hi all,

I'd to provide the current samba PID with wich the user will be looged 
in. It seems this variable is %d in smb.conf


I write it in a log file, and all I can see is the domain name, not the pid

here is the line in my smb.conf :


 root preexec = /samba_system/scripts/connect.sh %u %m %I %T %D %d


what am I doiong wrong ?

Thanks,
valéry
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Excessive traffic causing slow logons

2006-05-04 Thread Trimble, Ronald D
I am seeing some extremely slow logons to my SUSE servers.  All are
configured exactly the same.  When I attempt to log on, I can enter my
domain (AD) account without any problems.  I then enter my password and
sit and wait for several minutes until it eventually takes me to my
desktop.  In attempting to debug the problem, we have been able to see
millions of calls to the domain controller.  They all look similar to
this...

 

16:19:31.943556 IP USTR-MINT-A-2.NA.UIS.UNISYS.COM.40695 
ustr-nadc1.na.uis.unisys.com.ldap: P 6096:6369(273) ack 7014 win 16080
nop,nop,timestamp 89505560 7529129

16:19:31.944886 IP ustr-nadc1.na.uis.unisys.com.ldap 
USTR-MINT-A-2.NA.UIS.UNISYS.COM.40695: P 7014:7391(377) ack 6369 win
64170 nop,nop,timestamp 7529129 89505560

16:19:31.945122 IP USTR-MINT-A-2.NA.UIS.UNISYS.COM.40695 
ustr-nadc1.na.uis.unisys.com.ldap: P 6369:6647(278) ack 7391 win 16080
nop,nop,timestamp 89505561 7529129

16:19:31.946500 IP ustr-nadc1.na.uis.unisys.com.ldap 
USTR-MINT-A-2.NA.UIS.UNISYS.COM.40695: P 7391:7778(387) ack 6647 win
65535 nop,nop,timestamp 7529129 89505561

16:19:31.946733 IP USTR-MINT-A-2.NA.UIS.UNISYS.COM.40695 
ustr-nadc1.na.uis.unisys.com.ldap: P 6647:6919(272) ack 7778 win 16080
nop,nop,timestamp 89505563 7529129

16:19:31.948064 IP ustr-nadc1.na.uis.unisys.com.ldap 
USTR-MINT-A-2.NA.UIS.UNISYS.COM.40695: P 7778:8152(374) ack 6919 win
65263 nop,nop,timestamp 7529129 89505563

16:19:31.948298 IP USTR-MINT-A-2.NA.UIS.UNISYS.COM.40695 
ustr-nadc1.na.uis.unisys.com.ldap: P 6919:7194(275) ack 8152 win 16080
nop,nop,timestamp 89505565 7529129

16:19:31.949678 IP ustr-nadc1.na.uis.unisys.com.ldap 
USTR-MINT-A-2.NA.UIS.UNISYS.COM.40695: P 8152:8532(380) ack 7194 win
64988 nop,nop,timestamp 7529129 89505565

16:19:31.949913 IP USTR-MINT-A-2.NA.UIS.UNISYS.COM.40695 
ustr-nadc1.na.uis.unisys.com.ldap: P 7194:7466(272) ack 8532 win 16080
nop,nop,timestamp 89505566 7529129

16:19:31.951244 IP ustr-nadc1.na.uis.unisys.com.ldap 
USTR-MINT-A-2.NA.UIS.UNISYS.COM.40695: P 8532:8905(373) ack 7466 win
64716 nop,nop,timestamp 7529129 89505566

16:19:31.951478 IP USTR-MINT-A-2.NA.UIS.UNISYS.COM.40695 
ustr-nadc1.na.uis.unisys.com.ldap: P 7466:7729(263) ack 8905 win 16080
nop,nop,timestamp 89505568 7529129

16:19:31.953003 IP ustr-nadc1.na.uis.unisys.com.ldap 
USTR-MINT-A-2.NA.UIS.UNISYS.COM.40695: P 8905:9186(281) ack 7729 win
64453 nop,nop,timestamp 7529129 89505568

16:19:31.953098 IP USTR-MINT-A-2.NA.UIS.UNISYS.COM.40695 
ustr-nadc1.na.uis.unisys.com.ldap: P 7729:7736(7) ack 9186 win 16080
nop,nop,timestamp 89505569 7529129

16:19:31.953117 IP USTR-MINT-A-2.NA.UIS.UNISYS.COM.40695 
ustr-nadc1.na.uis.unisys.com.ldap: F 7736:7736(0) ack 9186 win 16080
nop,nop,timestamp 89505569 7529129

16:19:31.953252 IP USTR-MINT-A-2.NA.UIS.UNISYS.COM.40696 
ustr-nadc1.na.uis.unisys.com.ldap: S 1051543388:1051543388(0) win 5840
mss 1460,sackOK,timestamp 89505570 0,nop,wscale 0

16:19:31.953592 IP ustr-nadc1.na.uis.unisys.com.ldap 
USTR-MINT-A-2.NA.UIS.UNISYS.COM.40695: . ack 7737 win 64446
nop,nop,timestamp 7529129 89505569

16:19:31.954376 IP ustr-nadc1.na.uis.unisys.com.ldap 
USTR-MINT-A-2.NA.UIS.UNISYS.COM.40695: F 9186:9186(0) ack 7737 win 64446
nop,nop,timestamp 7529129 89505569

16:19:31.954391 IP USTR-MINT-A-2.NA.UIS.UNISYS.COM.40695 
ustr-nadc1.na.uis.unisys.com.ldap: . ack 9187 win 16080
nop,nop,timestamp 89505571 7529129

16:19:31.954817 IP ustr-nadc1.na.uis.unisys.com.ldap 
USTR-MINT-A-2.NA.UIS.UNISYS.COM.40696: S 702706062:702706062(0) ack
1051543389 win 16384 mss 1460,nop,wscale 0,nop,nop,timestamp 0
0,nop,nop,sackOK

16:19:31.954830 IP USTR-MINT-A-2.NA.UIS.UNISYS.COM.40696 
ustr-nadc1.na.uis.unisys.com.ldap: . ack 1 win 5840 nop,nop,timestamp
89505571 0

16:19:31.954959 IP USTR-MINT-A-2.NA.UIS.UNISYS.COM.40696 
ustr-nadc1.na.uis.unisys.com.ldap: P 1:91(90) ack 1 win 5840
nop,nop,timestamp 89505571 0

 

As you can imagine, we see millions of these over the 4 to 5 minutes it
takes to log on.  On the Windows side, the domain controller does not
report any errors in the logs.  

 

I have turned the debug level of winbind up to 10 and have some very
extensive logs showing what is going on.  Unfortunately, I cannot
interpret all of this myself.  Can anyone help me with this issue?  This
issue is very quickly making us think twice about continuing to use
Samba.

 

Thanks,

Ron

 

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] File lock problem

2006-05-04 Thread Jeremy Allison
On Mon, Apr 24, 2006 at 05:28:01PM +0200, Max Riedel wrote:
 Jeremy Allison wrote:
 On Sun, Apr 23, 2006 at 02:12:56PM +0200, Max Riedel wrote:
   
 Hi,
 Sometimes it happens that when winXP machines try to open an excel 
 sheet, both get write permissions.. the file isn't locked/read only..
 This happens sometimes, not very often, but it's annoying ;)
 Does anyone know what's causing this problem and maybe howto correct 
 this issue?
 
 
 What Samba version, what does the smb.conf look like etc. etc.
 
 Jeremy.
 
   
 Sorry for not including that information the first time.
 
 It's smbd Version 3.0.20
 And here's the smb.conf

You might want to upgrade to 3.0.22. There were some fixes in this area.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Excessive traffic causing slow logons

2006-05-04 Thread Jeremy Allison
On Thu, May 04, 2006 at 10:21:18AM -0400, Trimble, Ronald D wrote:
 I am seeing some extremely slow logons to my SUSE servers.  All are
 configured exactly the same.  When I attempt to log on, I can enter my
 domain (AD) account without any problems.  I then enter my password and
 sit and wait for several minutes until it eventually takes me to my
 desktop.  In attempting to debug the problem, we have been able to see
 millions of calls to the domain controller.  They all look similar to
 this...

What version of Samba ? Do you have SuSE support ? This is the
sort of thing we track down for customers

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Excessive traffic causing slow logons

2006-05-04 Thread Trimble, Ronald D
USTR-MINT-A-2:~ # rpm -qa |grep samba
samba-client-3.0.20b-3.4
yast2-samba-server-2.9.33-0.3
samba-3.0.20b-3.4
samba-pdb-3.0.20b-3.4
yast2-samba-client-2.9.17-1.3
samba-winbind-3.0.20b-3.4
kdebase3-samba-3.2.1-68.46

We do have some SuSE support, but I am not sure how far that will get me
since they will just point me back to samba.  How would you suggest I
proceed?

-Original Message-
From: Jeremy Allison [mailto:[EMAIL PROTECTED] 
Sent: Thursday, May 04, 2006 10:28 AM
To: Trimble, Ronald D
Cc: samba@lists.samba.org
Subject: Re: [Samba] Excessive traffic causing slow logons

On Thu, May 04, 2006 at 10:21:18AM -0400, Trimble, Ronald D wrote:
 I am seeing some extremely slow logons to my SUSE servers.  All are
 configured exactly the same.  When I attempt to log on, I can enter my
 domain (AD) account without any problems.  I then enter my password
and
 sit and wait for several minutes until it eventually takes me to my
 desktop.  In attempting to debug the problem, we have been able to see
 millions of calls to the domain controller.  They all look similar to
 this...

What version of Samba ? Do you have SuSE support ? This is the
sort of thing we track down for customers

Jeremy.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba ldap domain join

2006-05-04 Thread lenny

All LDAP authentciation works just fine,
windows passwords can be set LDAP users. Windows workstations can connect
to the machine's shares using windows passwords stored in LDAP

LDAP tools are configured with the right LDAP credentials and DN settings,
for people and computers. The logs show authenticated connections with
Directory Manager's credentials, but the computer accounts don't get
created.

Any advise ?

This seems to be the last issue I need to get fixed.

Error: Insufficient 'write' privilege to the 'uidNumber' attribute of
entry 'sambadomainname=ldapauth,dc=mydomain,dc=com'.[2006/05/04 10:15:17,
0] rpc_server/srv_samr_nt.c:(2415)
  _samr_create_user: Running the command
`/usr/local/samba/bin/smbldap-useradd -n -g machines -c Machine -d
/dev/null -s /bin/false computer$' gave 1


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Cannot write over root owned file

2006-05-04 Thread david rankin

From: Larry Alkoff [EMAIL PROTECTED]
david rankin wrote:

From: Larry Alkoff [EMAIL PROTECTED]

david rankin wrote:

From: Larry Alkoff [EMAIL PROTECTED]




If you have security = share it looks to me like everyone would see the 
samba icon but could not access it since they didn't have the password 
(and maybe 'valid user = david' would prevent access also).


Or did you mean 'access the samba share' by see?



I have security=share, and Yes I meant 'see' the share. browseable=no takes 
care of that.





[samba]
   comment = Base Samba Share
   path = /home/samba
   valid users = david
   force user = david
   force group = ochiltree
   admin users = david
   browseable = no
   writeable = Yes
   inherit permissions = yes


What I've worked out is to mount tillie in my smbmt script with the 
line:

smbmount //tillie/all  /mnt/tillie
which picks up the $USER.
So if I run the script as $USER=root I'm root, otherwise a user even 
though my $UID=0 when I su to run the script and smbmount.


I wish there was some way to su into a share but haven't seen it yet.



Well for me, its fire up PuTTy; 
www.chiark.greenend.org.uk/~sgtatham/putty/

ssh server, log in as me,
su
and you are in.


I haven't done much PuTTy yet.  At this point I'm trying to access all 
shares from the Linux boxes.  I'm on a compaign to eliminate all Windows 
computers from my house except one or two, including changing out my 
wife's to a Mac.  Most of my computing time is spent at one Linux box and 
I only access the Windows boxen by cli to transfer a few files and to 
backup.




Ok, I think I understand now. You were smbmounting the windows boxes on your 
linux box and then from your linux box using the cli to do what you needed 
to do on the windows shares, right? I'm no expert on this, but I think you 
have found also found the answer, So if I run the script as $USER=root I'm 
root. From man smbmount:


username=arg
 specifies the username to connect as. If this is not given, 
then
 the  environment  variable   USER  is used. This option can 
also
 take the form user%password or user/workgroup or 
user/work-
 group%password to allow the password and workgroup to be 
speci-

 fied as part of the username.

So what you want is: smbmount //tillie/all  /mnt/tillie -o username=root; 
which I presume you would have to be root to do. Using su to execute some 
commands has always been problematic where the command being issues relies 
on evironment variables. cron is a good example. I think the user 
environment as seen by smbmount was what was biting you in this case. Others 
with far more knowledge than I may want to weigh in or add more detail if 
required.




--
David C. Rankin, J.D., P.E.
RANKIN LAW FIRM, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
(936) 715-9333
(936) 715-9339 fax
www.rankinlawfirm.com
--

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Excessive traffic causing slow logons

2006-05-04 Thread Jeremy Allison
On Thu, May 04, 2006 at 10:30:31AM -0400, Trimble, Ronald D wrote:
 USTR-MINT-A-2:~ # rpm -qa |grep samba
 samba-client-3.0.20b-3.4
 yast2-samba-server-2.9.33-0.3
 samba-3.0.20b-3.4
 samba-pdb-3.0.20b-3.4
 yast2-samba-client-2.9.17-1.3
 samba-winbind-3.0.20b-3.4
 kdebase3-samba-3.2.1-68.46
 
 We do have some SuSE support, but I am not sure how far that will get me
 since they will just point me back to samba.  How would you suggest I
 proceed?

No they will not. SuSE does support Samba. I know because a SuSE
logged bug will be assigned to either Gunther, Lars, or myself
:-) :-).

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Excessive traffic causing slow logons

2006-05-04 Thread Guenther Deschner
Hi,

On Thu, May 04, 2006 at 10:21:18AM -0400, Trimble, Ronald D wrote:
 I am seeing some extremely slow logons to my SUSE servers.  All are
 configured exactly the same.  When I attempt to log on, I can enter my
 domain (AD) account without any problems.  I then enter my password and
 sit and wait for several minutes until it eventually takes me to my
 desktop.  In attempting to debug the problem, we have been able to see
 millions of calls to the domain controller.  They all look similar to
 this...
... 
 I have turned the debug level of winbind up to 10 and have some very
 extensive logs showing what is going on.  Unfortunately, I cannot
 interpret all of this myself.  Can anyone help me with this issue?

Sure, could you please send those logs (offlist if too large for the
list) and tell us a little more about your local configuration?

Guenther

-- 
Günther DeschnerGPG-ID: 8EE11688
Novell / SUSE LINUX   [EMAIL PROTECTED]
Samba Team  [EMAIL PROTECTED]


pgpIrQaeVX2m5.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Called NTLMSSP after state machine was 'done'

2006-05-04 Thread Carlos Zottmann

Hi !!

I have set 'use_ntlm_negotiate on' in squid.conf and it seems to have solved
the problem. I am not using this proxy server in the production environment
yet, but in the tests we conducted the problem didn´t show up anymore ...

Thanks!!
Carlos.

2006/5/3, Carlos Zottmann [EMAIL PROTECTED]:


Hi !!

Thanks for the answer, Andrew ...

I have used both IE 6.0 and Firefox 1.5.0.2, and got the same problem with
both.
I will set 'use_ntlm_negotiate' in squid.conf and will let you know the
results ..

Thanks again !!
Carlos.

2006/5/3, Andrew Bartlett [EMAIL PROTECTED]:

 On Tue, 2006-05-02 at 17:46 -0300, Carlos Zottmann wrote:
 Hi !!

 I am installing Squid-2.5 Stable 13, on a FedoraCore 5 x86_64 machine,
doing
 ntlm authentication through Samba 3.0.22, wich was installed via rpm.

 Everything is working fine except that the browser every now and then
asks
 for the username and password.

Which browser?

 I have done some basic samba tests, like wbinfo -t, wbinfo -u and wbinfo
-g,
 and everthing worked ok.

 Looking at squid´s cache.log , I found the following error:

 [2006/05/02 11:33:00, 1] libsmb/ntlmssp.c:ntlmssp _update(231)
   Called NTLMSSP after state machine was 'done'

 Have anyone run into this yet?

I wonder if the issue is due to some change at our end.  We may have
broken support where 'use_ntlm_negotiate' isn't set (in the squid
configuration).  This option permits better security in any case, so
give it a try.

Andrew Bartlett
--
Andrew Bartlett
http://samba.org/~abartlet/ http://samba.org/%7Eabartlet/
Authentication Developer, Samba Team   http://samba.org
Student Network Administrator, Hawker College   http://hawkerc.net


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQBEWHQHz4A8Wyi0NrsRAsg4AKCUlXThk6RMQYgEEBZ2SSIFvKsuJgCfdJSZ
AG5sUyIVIOobjSnMytQ2xN8=
=/4LS
-END PGP SIGNATURE-





--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Speeding up 'getent passwd' with winbindd on AD

2006-05-04 Thread Gautier, B \(Bob\)
 -Original Message-
 From: Jeremy Allison [mailto:[EMAIL PROTECTED] 
 Sent: 04 May 2006 15:17
 To: Gautier, B (Bob)
 Cc: samba@lists.samba.org
 Subject: Re: [Samba] Speeding up 'getent passwd' with winbindd on AD
 
 On Thu, May 04, 2006 at 02:33:05PM +0100, Gautier, B (Bob) wrote:
  
  I'm posting this here to get feedback: should I file an enhancement 
  request in Bugzilla, refine the fix somehow first, or forget it 
  altogether?
 
 Enhancement in bugzilla please !

Done: https://bugzilla.samba.org/show_bug.cgi?id=3751

Thanks,

Bob G

 
 Jeremy.
 
_

This email (including any attachments to it) is confidential, legally 
privileged, subject to copyright and is sent for the personal attention of the 
intended recipient only. If you have received this email in error, please 
advise us immediately and delete it. You are notified that disclosing, copying, 
distributing or taking any action in reliance on the contents of this 
information is strictly prohibited. Although we have taken reasonable 
precautions to ensure no viruses are present in this email, we cannot accept 
responsibility for any loss or damage arising from the viruses in this email or 
attachments. We exclude any liability for the content of this email, or for the 
consequences of any actions taken on the basis of the information provided in 
this email or its attachments, unless that information is subsequently 
confirmed in writing. If this email contains an offer, that should be 
considered as an invitation to treat.
_
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba interface to CVS/Subversion

2006-05-04 Thread Deryck Hodge

On 5/4/06, Henrik Zagerholm [EMAIL PROTECTED] wrote:

Hello,

Well, we are using samba shares as subversion repos but it is not
exactly what you are looking for I think.
If you want to handle file events and connect them to svn commands
your best bet would be a VFS module.

I don't think one like that exists but at least Recycle VFS does
something on the delete event and perhaps the Audit VFS handles all
the events you are looking for.
Either way you could simple write your own :)



There is a proposed project for Summer of Code that would do this
sort of thing.  I need something similar for work and haven't had the
time.  I'm hoping a student will bite. :-)

http://samba.org/samba/projects/summercode06.html

If not, I'll probably get it one day.  But that day is way off
in the foggy future.

Cheers,
deryck

--
Deryck Hodge
http://www.devurandom.org/
http://www.samba.org/

Aimless days, uncool ways of decathecting --Mike Doughty (2005)
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] : Win XP Client does not remove directories

2006-05-04 Thread Jeremy Allison
On Wed, May 03, 2006 at 09:12:54AM +0200, Björn Mayer wrote:
 Hi,
 
 its me again. I have to post an addition to my problem described below.
 
 Yesterday my error occured again on the same client, who had this 
 problem last time. I took the chance to do some network sniffing and 
 compared the traffic from the sometimes bad working client to a good 
 working client.
 The interesting fact about this is now, that windows sends two different 
 types of delete requests (Delete Directory Request (0x01) and 
 SET_FILE_INFO)
 First of all here are the relevant captured packets from a well working 
 connection:

Don't send text versions of network traces - they aren't much
use in debugging. Can you send in the actual ethereal trace files
please ?

Jeremy
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] : Win XP Client does not remove directories

2006-05-04 Thread Jeremy Allison
On Fri, Apr 28, 2006 at 01:58:45PM +0200, Björn Mayer wrote:
 Hello mailinglist,
 
 I have a strange problem, which occurs sometimes on some WinXP clients. 
 It is not 100% reproducable for me, but it returns regular.
 
 The problem is, that somehow a user can't delete a directory. All files 
 in the directory will be removed successfully, but the directory itself 
 not.
 Deleting with the Explorer or over the cmd-console returns in the same 
 result.
 First the command seemed to be successful, but after one refresh all 
 deleted folders are back again, because they aren't physically removed 
 from the linux-box.
 
 I don't know, if it is an Samba or Windows Problem, because if i went to 
 another XP machine and do exactly the same (including connecting with 
 the same user and passwd) the folder will be removed successfully.
 
 Often one (sometimes more than one) restart on the infected PC will 
 fix it there, too.
 
 All Win-Machines are XP with Service Pack 2.
 
 As i already said, i don't know whom to blame for that. On the one hand 
 it seems to be a specific Windows-problem, because other machines does 
 not show the same behaviour at the same time under nearly the same 
 conditions.
 On the other hand nobody ever mentioned that with our old Win Server 
 2003 Fileserver, who is nowadays replaced by Samba.

What does this error mean ? Datei oder Verzeichnis
nicht gefunden. That's the strerror output string when
the remove_directory call fails.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 3.0.22 PDC - The parameter is incorrect

2006-05-04 Thread Jeremy Allison
On Fri, Apr 28, 2006 at 06:42:11PM -0700, Rob Hall wrote:
 Hi everyone;
   I have searched the internet up  down for an answer to this problem. 
 I'm stumped.

   Here's what I've got:
   Samba 3.0.22 configured as a PDC using tdbsam as the passdb backend 
 (switching to LDAP when I get everything working).
   testparm says everything is fine. I've added the root user and a normal 
 user to the database (using smbpasswd). I even went so far as to manually 
 create a machine trust account.

   The problem is, when I try to join a machine to the domain, it asks for the 
 domain credentials. I supply it with \\DOMAINNAME\root and the password I set.

   I get a message back saying:

   The following error occured attempting to join the domain DOMAINNAME:
   The parameter is incorrect.

Debug level 10 log is needed.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba3 PDC and W2K3 server

2006-05-04 Thread Jeremy Allison
On Tue, May 02, 2006 at 04:06:03PM +0200, [EMAIL PROTECTED] wrote:
 I can't join a SAMBA3 domain from a W2K3 server.
 
 - Error message on the W2K3 server : The parameter is incorrect
 
 - Error message in the samba logs :
 rpc_parse/parse_samr.c:samr_io_userinfo_ctr(6479)
   samr_io_userinfo_ctr: unknown switch level 0x1a
 rpc_server/srv_samr.c:api_samr_set_userinfo(786)
   api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO.
 
 - Samba version : version 3.0.22
   Samba Server role: ROLE_DOMAIN_PDC
 
 - winver of the W2K3 server : Version 5.2.3790 Service Pack 1 Build 3790
   Appliance Edition
   The W2K3 server is in a workgroup.
 
 Has anyone got success when joining a samba3 domain from a W2K3 server ?
 
 A WinXP client can join this SAMBA3 domain.
   When I compare the list of RPC commands sent by the XP client and the W2K3
 server (see below), this is the same list of commands from the first one to 
 the
 command  SAMR_SET_USERINFO used to modify the machine account password on 
 the
 server.
   This SAMR_SET_USERINFO command is sent after another SAMR_SET_USERINFO
 command which gives the error message unknown switch level 0x1a, as 
 indicated
 above.
 
 Had anybody a glance on the list of rpc commands sent by a w2k3 server when
 joining a SAMBA3 domain ?

You might want to try the 3.0.23 pre-release. I added a bunch of
new info levels for SETUSERINFO for this release.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] : Win XP Client does not remove directories

2006-05-04 Thread Mark Johnson


Jeremy Allison wrote:


What does this error mean ? Datei oder Verzeichnis
nicht gefunden. That's the strerror output string when
the remove_directory call fails.

Jeremy.
  
I had a problem very similiar to this with roaming profiles.  The cause 
came down to the client and the servers time was not sync'd up.  I never 
figured out how far off it needed to be before it broke it, but once I 
sync'd the time, I've never had a problem with the directories since.


Mark

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Excessive traffic causing slow logons

2006-05-04 Thread Gerald Drouillard

Trimble, Ronald D wrote:

I am seeing some extremely slow logons to my SUSE servers.  All are
configured exactly the same.  When I attempt to log on, I can enter my
domain (AD) account without any problems.  I then enter my password and
sit and wait for several minutes until it eventually takes me to my
desktop.  In attempting to debug the problem, we have been able to see
millions of calls to the domain controller.  They all look similar to
this...

You may want to look at the DNS/DHCP server.  If there is a 2003 DC and 
it is not the DNS/DHCP server then things can slow down.  I believe it 
is a reverse DNS issue.


--
Regards
--
Gerald Drouillard
Technology Architect
Drouillard  Associates, Inc.
http://www.Drouillard.ca
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] NT logon ok but XP logon very slow

2006-05-04 Thread Gerald Drouillard

Roel Slegers wrote:

Hi,

Our environment: HP-UX 11.00 server / Samba 3.0.21a as PDC / OpenLDAP backend

We're developping a migration from AS/U to a Samba PDC.
Currently we have following problem: logging onto an NT4 workstation
is almost instantaneous, but when logging onto an XP workstation, this
happens:
(1) We type the user and password in Windows logon.
(2) Windows logon immediately accepts user and password, so far so good.
(3) Windows says Please wait... Loading your personal settings...
and we have to wait about one to two minutes. This is our problem.
(4) After these on to two minutes, logon continuous  normally, and
everything seems fine.

Furthermore, during the time that XP locks up, the corresponding smbd
process eats up the server's CPU at almost 100%!

These are the log.smbd messages during the locking up of XP and smbd:

[Fri Apr 21 15:25:29 2006
, 0] rpc_server/srv_netlog_nt.c:_net_sam_logon(665)
  _net_sam_logon: creds_server_step failed. Rejecting auth request
from client RSL4 machine account RSL4$
[Fri Apr 21 15:26:47 2006
, 0] smbd/server.c:open_sockets_smbd(394)
  open_sockets_smbd: accept: No buffer space available
[Fri Apr 21 15:26:50 2006
, 1] smbd/service.c:make_connection_snum(666)
  rsl4 (10.5.71.168) connect to service netlogon initially as user veron004 (uid
=517, gid=20) (pid 11053)


And as I already said: logging onto NT works fine.
Any ideas?
You may want to look at the DNS/DHCP server.  If there is a 2003 DC and 
it is not the DNS/DHCP server then things can slow down.  I believe it 
is a reverse DNS issue.


--
Regards
--
Gerald Drouillard
Technology Architect
Drouillard  Associates, Inc.
http://www.Drouillard.ca
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Windows to Linux Samba problems

2006-05-04 Thread Raymond Chan
Hi all,

 

I'm new to the list and found this to be the general place to ask questions,
but if I'm asking at the wrong place I apologize in advance and hope someone
can point me in the right direction.

 

I'm sort of a newbie w/ Samba, and have been having some strange issues.  I
have a CentOS Linux Server running Samba 3.0, and I am trying to allow all
my users to map their home directories to their Windows boxes.  I've been
testing this with my own user and another person's.  Half the time it works
fine, but the other half of the time, it keeps prompting me for the password
and I absolutely know that I am typing it in correctly.  To double check I
tried to set my password again w/ smbpasswd on the Linux server, and get
this error message:

 

machine 127.0.0.1 rejected the (anonymous) password change: Error was :
Account disabled.

 

I never explicitly disabled my account or the other user's, but we both get
this error.  I then use 'smbpasswd -e' to re-enable, and it works fine for a
day, and again it disables account again.  This re-enable and automatic
disable happens very frequently.  Here's the part of my smb.conf that
describes my home directories.  Note that also in my smb.conf doesn't yet
have extra security like hosts allow to limit samba connections to within
the LAN, etc.  :

 

[homes]

   comment = Home Directories

   browseable = no

   guest ok = no

   Read only = no

   public = no

   create mask = 0750

 

 

Does anyone have any ideas of why this is happening?  I plan to allow up to
100 users to map a samba connection to this server, is there a max number of
connections samba can take?  I'm not too worried about performance now
because I just want users to be able to have a nicely mapped drive so they
can drag files from their Windows desktop to the server if they need
(without the hassle of FTP), but most of the time it will just be an unused
connection.

 

Thanks in advance for everything,

Ray C.

 

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Cannot write over root owned file

2006-05-04 Thread Larry Alkoff

david rankin wrote:

From: Larry Alkoff [EMAIL PROTECTED]
david rankin wrote:

From: Larry Alkoff [EMAIL PROTECTED]

david rankin wrote:

From: Larry Alkoff [EMAIL PROTECTED]




If you have security = share it looks to me like everyone would see 
the samba icon but could not access it since they didn't have the 
password (and maybe 'valid user = david' would prevent access also).


Or did you mean 'access the samba share' by see?



I have security=share, and Yes I meant 'see' the share. browseable=no 
takes care of that.





[samba]
   comment = Base Samba Share
   path = /home/samba
   valid users = david
   force user = david
   force group = ochiltree
   admin users = david
   browseable = no
   writeable = Yes
   inherit permissions = yes


What I've worked out is to mount tillie in my smbmt script with the 
line:

smbmount //tillie/all  /mnt/tillie
which picks up the $USER.
So if I run the script as $USER=root I'm root, otherwise a user even 
though my $UID=0 when I su to run the script and smbmount.


I wish there was some way to su into a share but haven't seen it yet.



Well for me, its fire up PuTTy; 
www.chiark.greenend.org.uk/~sgtatham/putty/

ssh server, log in as me,
su
and you are in.


I haven't done much PuTTy yet.  At this point I'm trying to access all 
shares from the Linux boxes.  I'm on a compaign to eliminate all 
Windows computers from my house except one or two, including changing 
out my wife's to a Mac.  Most of my computing time is spent at one 
Linux box and I only access the Windows boxen by cli to transfer a few 
files and to backup.






Yes you understand just fine.  But see below.
Ok, I think I understand now. You were smbmounting the windows boxes on 
your linux box and then from your linux box using the cli to do what you 
needed to do on the windows shares, right? I'm no expert on this, but I 
think you have found also found the answer, So if I run the script as 
$USER=root I'm root. From man smbmount:


username=arg
 specifies the username to connect as. If this is not given, 
then
 the  environment  variable   USER  is used. This option can 
also
 take the form user%password or user/workgroup or 
user/work-
 group%password to allow the password and workgroup to be 
speci-

 fied as part of the username.

So what you want is: smbmount //tillie/all  /mnt/tillie -o 
username=root; which I presume you would have to be root to do. Using su 
to execute some commands has always been problematic where the command 
being issues relies on evironment variables. cron is a good example. I 
think the user environment as seen by smbmount was what was biting you 
in this case. Others with far more knowledge than I may want to weigh in 
or add more detail if required.




Your command
smbmount //tillie/all  /mnt/tillie -o  username=root;
is ok as far as it goes but I have found by experiment that you don't 
need the -o username=root.


From man smb.conf (I think):
paraphrase:  smbmount picks up the username automatically.
So if I smbmount with either lba as user or su to lba as user but UID=0, 
 you would not have root access but if smbmount from root (su -) then 
you are root on the target machine.


So most of my mount lines in smbmt (my script) are:
smbmount //service/share /mnt/service
and I don't have to worry about if statements to sort out
-o username=whatever.

It's working quite nicely now :-)

Larry

--
Larry Alkoff N2LA - Austin TX
Using Thunderbird on Slackware Linux
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Excessive traffic causing slow logons

2006-05-04 Thread Trimble, Ronald D
I have already gone this route.  Our DC is also a DNS server and the
entries are all there.  What's really interesting that through all of
the requests, the DC acks every single one.

-Original Message-
From: Gerald Drouillard [mailto:[EMAIL PROTECTED] 
Sent: Thursday, May 04, 2006 12:53 PM
To: Trimble, Ronald D
Cc: samba@lists.samba.org
Subject: Re: [Samba] Excessive traffic causing slow logons

Trimble, Ronald D wrote:
 I am seeing some extremely slow logons to my SUSE servers.  All are
 configured exactly the same.  When I attempt to log on, I can enter my
 domain (AD) account without any problems.  I then enter my password
and
 sit and wait for several minutes until it eventually takes me to my
 desktop.  In attempting to debug the problem, we have been able to see
 millions of calls to the domain controller.  They all look similar to
 this...
 
You may want to look at the DNS/DHCP server.  If there is a 2003 DC and 
it is not the DNS/DHCP server then things can slow down.  I believe it 
is a reverse DNS issue.

-- 
Regards
--
Gerald Drouillard
Technology Architect
Drouillard  Associates, Inc.
http://www.Drouillard.ca
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] YDL/RedHat and Samba Control

2006-05-04 Thread William Howard
ain)... Using YellowDogLinux 4.1 on a Macintosh BW modified. This 
system contains two hard drives, both ATA. Installed YDL, everything 
working fine.


I'm looking to explore using this machine with Samba to share files and 
other services on a mixed LAN, and I've been trying to follow the By 
Example portion of Samba's site, but not all the instructions are 
matching. In the Samba instructions, the example provided instructed to 
format the additional hard drive, create a folder in root (/plans), then 
a confusing instruction:


Use Red Hat Linux system tools (refer to Red Hat instructions) to 
format the 160GB hard drive with a suitable file system. An Ext3 file 
system is suitable. Configure this drive to automatically mount using 
the /plans directory as the mount point.


I haven't been able to find a disk formatter, and then, I need to 
determine which drive the Linux system is installed on. I also haven't 
found where to configure the mount point... Can anyone shed some light 
on this?


Thank you in advance... I'm looking forward to really exploring and 
learning Samba.


WCH
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Performace problems

2006-05-04 Thread Joseph L. Marnett
I have Samba 2.2 running on a SCO UNIX 5.0.7
My Problem: The file transfer performance is slow and gets worse as more
users log in.
At times, if two users open the same file at the same time they may get
hang.
AS follows is the configuration of the smb.conf file
Any help will be greatly appreciated.
Thanks

[global]

   workgroup = HOMECARE
   netbios name = NEWSYS
   server string = Samba Server
;   hosts allow = 192.168.1. 192.168.2. 127.
   printcap name = lpstat
   load printers = yes
   printing = sysv
   guest account = pcguest
   log file = /var/log/samba.d/log.%m
   max log size = 50
   security = share
   encrypt passwords = yes
   smb passwd file = /etc/smbpasswd
   socket options = IPTOS_LOWDELAY TCP_NODELAY SO_RCVBUF=20480
SO_SNDBUF=20480
   read raw = no
   write raw = yes
   interfaces = net0
   os level = 20
   wins server = 64.89.70.2
   dns proxy = no
   debuglevel = 1


# Share Definitions
==
[homes]
   comment = Home Directories
   browseable = no
   writable = yes

[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no

   guest ok = yes
   writable = no
   printable = yes


[guishare]
comment = development share
path = /hcrigui
public = yes
writable = yes
printable = no


[binshare]
comment = bin share
path = /usr/bin
public = yes
writable = yes
printable = no

[ushare]
comment = /u share
path = /u
public = yes
writable = yes
printable = no

[usrshare]
comment = /usr share
path = /usr
public = yes
writable = yes
printable = no

[ClientTracking]
comment = Share for the tracking system
path = /ClientTracking
public = yes
writable = yes
printable = no
oplocks = yes
level2 oplocks = yes


[techsheets]
comment = Tech Sheets
path = /usr/local/techsheet
public = yes
guest only = yes
writable = yes
printable = no

[Rolodex]
comment = Rolodex program to keep address
path = /usr/local/solodex
public = yes
guest only = yes
writable = yes
printable = no



Joseph L. Marnett
Director of MIS
Home Care Software Solutions, Inc.
9500 S. Dadeland Blvd.
Miami, FL 33156
Ph: 786.433.4700
Fax: 786.433.4711


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Samba file server -- samba domain join problem

2006-05-04 Thread Anthony Linux

Nevermind, I got it fixed.

I changed security=domain to security=user and copied over all my ldap
information (ou=Groups, ou=Users, etc).  I then added the manager password
with smbpasswd -w PW and everything works great now.

It seems like 3.0.10 for FC3 does not pass the password encrypted the way
the PDC is expecting it.  It resolved the users fine, but something broke
when trying to verify passwords.  This fix is also nice because I can easily
turn the second server into a BDC if necessary, although I would want to
replicate my ldap database there first (no point having a BDC get user info
from a PDC LDAP server that crashed! :-)

Hopefully this will help some people I saw who had similar problems but no
responses.

Anthony



On 5/4/06, Anthony Linux [EMAIL PROTECTED] wrote:


 Hello,
I recently upgraded a network to FC3 from RH9 (I know, I know, behind the
times).

The network is small: one PDC, one file server.  The PDC (Samba, LDAP,
DNS, DHCP all on FC3) is running fine.  Seamless between linux logins and
windows XP.  Users can log in, see the shares, mount drives.

The second file server is just going to be an NFS and Samba server.  The
plan is to use security=domain and share everything the same way the PDC
does.

Two problems:  first, it did not want to join the domain.  I kept trying
net rpc join, it prompts for a password and tells me the password is
incorrect.  I checked the logs and it said something about not allowing
NTLMv1 for root.  So I set client ntlmv2 auth = yes and it allowed me to
join the domain.

So far so good, right?

When I try to open the share it prompts for a username and password.  When
I type valid ones in, it rejects them and upgrades their bad password count
(so the PDC is seeing an attempt to access the share).  The log files only
say NT_STATUS_WRONG_PASSWORD for the user account.

I have looked through the HOWTO and searched google, but can't seem to
find anything on this.  Sad thing is, I remember this being really, really
easy the last time I did it.

Any ideas?
Thanks,
Anthony

my simplified smb.conf (I have tried many other options like wins settings
to no avail).

workgroup=MYNET
security=domain
password server = MYPDC
ntlmv2 client auth = yes
encrypt passwords = yes

[Share info ...]


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] windows vista

2006-05-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

[EMAIL PROTECTED] wrote:

 Hi we are using samba version 3.0.14a. Are there any 
 patches available in samba to support windows vista /longhorn?

We aren't backporting new fixes to 3.0.14a (the diff between
3.014a and 3.0.23pre1 is about 276,000 lines).  You're best
option is to test 3.0.23pre1 and report any failures with Vista
via bugzilla.samba.org.  There aren't any specific issues with
Vista that I'm aware of right now.  But I personally haven't
been testing it.





cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEWkBEIR7qMdg1EfYRAmHdAJ4lhxyl2OkY+LTvvYyvIMLcleoWHwCg542o
Ad/GY337BYlTXMiVK0JsEEY=
=IJoJ
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] printer admin deprecated: please explain

2006-05-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Franz Pfoertsch wrote:
 I am Running a printserver using SLES9 SP3 with Samba 3.0.20b and 
 cups 1.1.20 
 Since the update to Samba 3.0.20 every start of a client program tells me
 WARNING: The printer admin option is deprecated
 
 Ok, I understood I should use 
 
  net rpc rights grant User or Group SePrintOperatorPrivilege -U ..
 
 But I haven't any adminuser to grant this rights.

Either root or a Domain Admin is able to grant rights.





cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEWkDhIR7qMdg1EfYRAsbcAJ9BxG4FkM5bAjacr8EzR8CpNSUuVwCeMAGD
iZOwuVXREQ8md3XXPAjpMCM=
=UupJ
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Excessive traffic causing slow logons

2006-05-04 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Trimble, Ronald D wrote:

 I am seeing some extremely slow logons to my SUSE servers.  All are
 configured exactly the same.  When I attempt to log on, I can enter my
 domain (AD) account without any problems.  I then enter my password and
 sit and wait for several minutes until it eventually takes me to my
 desktop.  In attempting to debug the problem, we have been able to see
 millions of calls to the domain controller.  They all look similar to
 this...
 As you can imagine, we see millions of these over the 4 to 5 minutes it
 takes to log on.  On the Windows side, the domain controller does not
 report any errors in the logs.  
 

You mention LDAP traffic but you say nothing about what the
traffic is actually doing nor do you give any details of how you
server is configured.  You could be using nss_ldap for all I know.

Just gazing into my crystal ball, I would ask whether or not
you have set 'winbind enum users = no' and 'winbind enum groups = no'?
If not, then do this first.

Then it would helpful to know more about your server.

 ...  Can anyone help me with this issue?  This
 issue is very quickly making us think twice about continuing 
 to use Samba.

That's your call.





cheers, jerry
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEWkJUIR7qMdg1EfYRAmwXAJ4sP/Xfo/iVNppMH7LiZDWyWR9ZWQCgzAs1
apb03AgWO5h+/NTuTZy0Bds=
=LeHR
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Global share

2006-05-04 Thread Nance, David W.
I also posted this on comp.protocols.smb:
I have a requirement to have a Samba share named Global 
I've tried Global, GLOBAL, (not global obviously) but it seems to
conflict with the global section in smb.conf (i.e. all shares stop
working) I would of thought that on *nix you could get away with a 
different case.? 
Is this a case-insensitive protected word? 
I'm running Solaris 10 Samba V3.0.4 
Thx! 
David
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] allocate_print_jobid: failed to allocate a print job for queue lbrmgt

2006-05-04 Thread Mineau, Kevin
We have recently migrated from a package called Totalnet to Samba to
replace our file and print services.  File services are working great.

From time to time we get a call that printing stops working.

I have found a post stating that it may be a file space issue.  After
checking, our file systems have plenty of extra space in them and have
never filled up yet.

Our current fix for this is to erase the print queue's tdb file.
   tdbtool /var/locks/samba/printing/lbrmgt.tdb erase

Q1. What sort of side affect are we introducing by erasing the print
queue's tdb file?
Q2. What steps can I perform in order to diagnose or fix the issue
permanently?

Details:
Samba 3.0.20b
OS - AIX 5.1 ML7

Relivant smb.conf settings:
[global]
printcap name = /etc/printcap
printing = AIX
printer admin = root
load printers = Yes
print command = lpr -r -h -P'%p' %s

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
printer admin = root, staff
browseable = Yes
public = Yes
writeable = Yes
read only = Yes

[print$]
comment = Printer Driver Download Area
path = /etc/samba/Drivers
browseable = Yes
guest ok = Yes
read only = Yes
write list = root
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Global share

2006-05-04 Thread Jeremy Allison
On Thu, May 04, 2006 at 01:44:24PM -0400, Nance, David W. wrote:
 I also posted this on comp.protocols.smb:
 I have a requirement to have a Samba share named Global 

This isn't going to work without changing Samba code.

 I've tried Global, GLOBAL, (not global obviously) but it seems to
 conflict with the global section in smb.conf (i.e. all shares stop
 working) I would of thought that on *nix you could get away with a 
 different case.? 
 Is this a case-insensitive protected word? 

Yes, global is a magic section. You'll need to change
this inside the Samba code and recompile if you really
need this feature.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Creating a trust on an unstable network

2006-05-04 Thread Ray Greene
I would like to create a trust between a Samba domain and a Win2K
domain. The Samba domain connects via VPN to the Win2K domain.

The Samba domain users need access to files on the Win2K domain and a
trust would make it easier to handle permissions on the files.

However the VPN connection isn't very stable and drops the connection
every day or two.

The Samba Howto says this is a bad thing to try, but doesn't say why. 

What exactly happens in this situation when the connection between the
domains is dropped?


-- 
Ray Greene

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Share Access

2006-05-04 Thread Donald W Watson




Could someone help me understand if what I'm seeing with share access is
correct?

On my samba domain I have two users (user1 and user2) and one share; the
share has attribute writelist = user1.

On a linux machine I:
   mount the share with mount -t cifs -o username=user1
   successfully open a  file in the share for writing with the perl open
   function
   close the file
   umount the share
   mount the share with mount -t cifs -o username=user2
   unsuccessfully attempt to open a file in the share for writing with the
   perl open function
   umount the share
This is, I think, as expected.

However, on Windows2003, I:
   connect the share as user1
   unsuccessfully attempt to open the file for writing with vim
This seems inconsistent with the results on linux, and not what I expected.

Am I misinterpreting the expected results?  Thanks for any responses.

Sincerely,Don Watson
Linux Technology and Solutions; Beaverton, OR
503-578-4861/TL: 775-4861; [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] printer admin deprecated: please explain

2006-05-04 Thread david rankin

From: Gerald (Jerry) Carter [EMAIL PROTECTED]
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Franz Pfoertsch wrote:

I am Running a printserver using SLES9 SP3 with Samba 3.0.20b and
cups 1.1.20
Since the update to Samba 3.0.20 every start of a client program tells me
WARNING: The printer admin option is deprecated

Ok, I understood I should use

 net rpc rights grant User or Group SePrintOperatorPrivilege -U ..

But I haven't any adminuser to grant this rights.


Either root or a Domain Admin is able to grant rights.



Hmm... Herr Jerry, what causes this?

[EMAIL PROTECTED]:~ smbclient -U% -L localhost
WARNING: The printer admin option is deprecated
Domain=[RB_LAW] OS=[Unix] Server=[Samba 3.0.20b-3.3-SUSE]


--
David C. Rankin, J.D., P.E.
RANKIN LAW FIRM, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
(936) 715-9333
(936) 715-9339 fax
www.rankinlawfirm.com
--

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba errors - No buffer space available

2006-05-04 Thread Allen, Bill

I am new to Samba, having just taken over management of a HPUX system in
a mainly Windows environment.  The system is running Samba 3.0.7.  I am
getting the following errors, repeatedly, in my log.smbd.  What does it
mean?  Is this actually a problem or normal chatter for Samba?  If it is
a problem, what should I do to correct it?

 
[2006/05/03 07:41:38, 0] lib/util_sock.c:set_socket_options(202)
  Failed to set socket option SO_KEEPALIVE (Error Invalid argument)
[2006/05/03 07:41:38, 0] lib/util_sock.c:set_socket_options(202)
  Failed to set socket option TCP_NODELAY (Error Invalid argument)
[2006/05/03 07:41:38, 0] lib/util_sock.c:get_peer_addr(1000)
  getpeername failed. Error was Invalid argument
[2006/05/03 07:41:39, 0] smbd/server.c:open_sockets_smbd(382)
  open_sockets_smbd: accept: No buffer space available

 Thanks for any help or advice,

Bill

 
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Share Access

2006-05-04 Thread Gary Dale
The Linux case is easy. You are using Linux /Unix user names. When you 
attempt to connect from Windows however, you are using a Windows user 
name. This needs to map to a Linux / Unix user name.


It's more common to use group privileges on shares with Windows, so 
putting your Windows users in groups and mapping them to Linux / Unix 
groups would also work.




Donald W Watson wrote:




Could someone help me understand if what I'm seeing with share access is
correct?

On my samba domain I have two users (user1 and user2) and one share; the
share has attribute writelist = user1.

On a linux machine I:
  mount the share with mount -t cifs -o username=user1
  successfully open a  file in the share for writing with the perl open
  function
  close the file
  umount the share
  mount the share with mount -t cifs -o username=user2
  unsuccessfully attempt to open a file in the share for writing with the
  perl open function
  umount the share
This is, I think, as expected.

However, on Windows2003, I:
  connect the share as user1
  unsuccessfully attempt to open the file for writing with vim
This seems inconsistent with the results on linux, and not what I expected.

Am I misinterpreting the expected results?  Thanks for any responses.

Sincerely,Don Watson
Linux Technology and Solutions; Beaverton, OR
503-578-4861/TL: 775-4861; [EMAIL PROTECTED]
 



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Share Access

2006-05-04 Thread Gary Dale
Or, having re-read your problem, it could also be that your Windows2003 
user1 is not in the right domain. Either way, I believe the key is to 
make sure that your Windows users are in to the domain and the mappings 
to Linux/Unix are correct.




Donald W Watson wrote:




Could someone help me understand if what I'm seeing with share access is
correct?

On my samba domain I have two users (user1 and user2) and one share; the
share has attribute writelist = user1.

On a linux machine I:
  mount the share with mount -t cifs -o username=user1
  successfully open a  file in the share for writing with the perl open
  function
  close the file
  umount the share
  mount the share with mount -t cifs -o username=user2
  unsuccessfully attempt to open a file in the share for writing with the
  perl open function
  umount the share
This is, I think, as expected.

However, on Windows2003, I:
  connect the share as user1
  unsuccessfully attempt to open the file for writing with vim
This seems inconsistent with the results on linux, and not what I expected.

Am I misinterpreting the expected results?  Thanks for any responses.

Sincerely,Don Watson
Linux Technology and Solutions; Beaverton, OR
503-578-4861/TL: 775-4861; [EMAIL PROTECTED]
 



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Share Access

2006-05-04 Thread David Baker

Hi


However, on Windows2003, I:
   connect the share as user1
   unsuccessfully attempt to open the file for writing with vim
This seems inconsistent with the results on linux, and not what I expected.
Am I misinterpreting the expected results?  Thanks for any responses.


I am no expert but I ran into a similar issue the other day. Make sure
there are no other accounts connected to the samba share from the
windows computer that could be confusing permissions.
open up command prompt and type net use
ie: start  run  command  net use [enter]
should show a list of current connections.

--
DaveB
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Share Access

2006-05-04 Thread David Baker

On 5/5/06, David Baker [EMAIL PROTECTED] wrote:

Hi
 However, on Windows2003, I:
connect the share as user1
unsuccessfully attempt to open the file for writing with vim
 This seems inconsistent with the results on linux, and not what I expected.
 Am I misinterpreting the expected results?  Thanks for any responses.

I am no expert but I ran into a similar issue the other day. Make sure
there are no other accounts connected to the samba share from the
windows computer that could be confusing permissions.
open up command prompt and type net use
ie: start  run  command  net use [enter]
should show a list of current connections.


oh and if there are old connections lying around you can type
net use * /d /y
to clear ALL connections (mapped drives etc..)

--
DaveB
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


To: The deducted Few, the disaffected Many, and our spiritual Leaders

2006-05-04 Thread info
Reply-To: Karl

To: THE DISAFFECTED MANY, SPIRITUAL LEADERS, AND THE DEDUCTED FEW
List instructions are at the end; letters are answered

HOW A BIBLE PUBLISHER CORRUPTED CHRIST'S WORDS: Why Celebrity Christian accept 
a form of Judaism and bow to un-Christian apostasy
By Charles E. Carlson

This study is not written to convince anyone of what Jesus said, it only deals 
with what the Christian New Testament states Jesus said.  This analysis is 
important to persons of all beliefs, faiths, and races who are trying to 
understand why wars seem to be happening to our world, and why many of those 
who call themselves by Jesus Christ's name seems to be consistently in support 
of wars against other races, currently a war for the most part directed at 
Islamic populations.  

This is a re-written and abbreviated version of our more far reaching 2006 
series, The Sheep and the Goats Parts 1  2, which are drawn from a study of 
book of Matthew, chapter 25.  Your author is responding to requests that we 
more clearly prove and document the essence of popular biblical distortion 
about Heaven and Hell in the book of Matthew. Chapters 24-25, which evangelical 
believe to contain Jesus' words, are intentionally distorted by these same 
persons, both in the text and footnotes to the text in most popular bible study 
versions.

Christian Zionists at the pulpit of mega-churches are left with an untenable 
problem. It is impossible for them to tell the truth about what certain New 
Testament Bible passages say, or even to read them, without contradicting their 
own support for wars and for the constantly warring state of Israel.  

Church economics may also be a factor in scriptural compromise.  Evangelical 
teaching and preaching often directly contradict that which Jesus taught about 
love and peace, and more surprisingly, celebrity Christian statements often 
directly conflict with Jesus' statements about Heaven and Hell. 

Celebrity Christian leaders may feel financial pressure to warp the New 
Testament into a wide and easy path interpretation, which they say points, not 
to Heaven and Hell, but to a second coming.  Simply stated, pastors have 
learned they can't fill 10,000 seat arenas by leaning too heavily on sin, 
repentance and judgment as Jesus portrayed it in this carefully worded chapter. 
 

Many pastors no doubt justify compromise to save their own empires. This 
contrast them with what Christ called the narrow path or Strait gate. Our 
government's public policy of wars has become many churches' policy, and 
evangelicals are well know to be active politically. Every politician knows it 
pays to be born again. Thus an unspoken, unholy alliance has been created 
between financially successful false biblical teachers on one hand, and 
politically successful politicians and businessmen who thrive on serial wars, 
on the other. This bloodthirsty and anti-Christian heresy has cost untold lives 
in half a dozen holy wars in the 20 years or so since it metastasized into a 
judao-Christian political alliance.

Oh that my enemy would write a book (unknown)
The famous Scofield Reference Bible, perhaps the most powerfully promoted Bible 
ever written, is the godfather of modern bible distortion, which is now 
emulating and even exceeding in radicalism by other popular study bibles 
including the NIV Study Bible and the MacArthur Study Bible.   

Matthew 25 contains one of the most directly written and clearly self-explained 
passages on Heaven and Hell, which was once taken at face value, but which is 
now rejected in almost every evangelical (Christian Zionist) church, not to 
mention a growing number of mainline churches who are influence through 
dispensational bible studies, and celebrity-Christian media. 

Matthew, the first book in the New Testament, contains the most outrageous 
example of added words that directly contradicts Jesus words. A quote from the 
Scofield Reference Bible footnotes directly contradicts what Jesus Christ is 
quoted to have said, His simple words, taken from the King James Edition, 
describing the basis upon which Jesus told his followers He himself will 
someday judge every man from every tribe (nation).  We start by reading 
Jesus' words in Matthew 25:31-35:

When the Son of man shall come in his glory, and all the holy angels with him, 
then shall he sit upon the throne of his glory: 32 And before him shall be 
gathered all nations: and he shall separate them one from another, as a 
shepherd divided his sheep from the goats: 33 And he shall set the sheep on his 
right hand, but the goats on the left. 34 Then shall the King say unto them on 
his right hand, Come, ye blessed of my Father, inherit the kingdom prepared for 
you from the foundation of the world: 35 For I was an hungered, and ye gave me 
meat: I was thirsty, and ye gave me drink: I was a stranger, and ye took me in: 
(skip to40)---Verily I say unto you, Inasmuch as ye have done it unto one of 
the least of these my 

svn commit: samba r15426 - in branches/SAMBA_4_0/source: auth/gensec libnet librpc/rpc script/tests torture/rpc

2006-05-04 Thread abartlet
Author: abartlet
Date: 2006-05-04 10:03:41 + (Thu, 04 May 2006)
New Revision: 15426

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15426

Log:
Implement SPNEGO as the default RPC authentication mechanism.  Where
this isn't supported, fallback to NTLM.

Also, where we get a failure as 'logon failure', try and do a '3
tries' for the password, like we already do for CIFS.  (Incomplete:
needs a mapping between RPC errors and the logon failure NTSTATUS).

Because we don't yet support Kerberos sign/seal to win2k3 SP1 for
DCE/RPC, disable this (causing SPNEGO to negotiate NTLM) when kerberos
isn't demanded.

Andrew Bartlett

Modified:
   branches/SAMBA_4_0/source/auth/gensec/gensec_gssapi.c
   branches/SAMBA_4_0/source/libnet/libnet_join.c
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc.h
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc_connect.c
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc_util.c
   branches/SAMBA_4_0/source/script/tests/test_session_key.sh
   branches/SAMBA_4_0/source/script/tests/test_w2k3.sh
   branches/SAMBA_4_0/source/script/tests/tests_all.sh
   branches/SAMBA_4_0/source/torture/rpc/bind.c


Changeset:
Sorry, the patch is too large (560 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15426


svn commit: samba r15427 - in branches/SAMBA_4_0/source/librpc/ndr: .

2006-05-04 Thread jelmer
Author: jelmer
Date: 2006-05-04 11:01:10 + (Thu, 04 May 2006)
New Revision: 15427

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15427

Log:
Rename private to private_data to prevent errors from C++ errors (which 
we care about in Samba3)

Modified:
   branches/SAMBA_4_0/source/librpc/ndr/libndr.h
   branches/SAMBA_4_0/source/librpc/ndr/ndr.c


Changeset:
Modified: branches/SAMBA_4_0/source/librpc/ndr/libndr.h
===
--- branches/SAMBA_4_0/source/librpc/ndr/libndr.h   2006-05-04 10:03:41 UTC 
(rev 15426)
+++ branches/SAMBA_4_0/source/librpc/ndr/libndr.h   2006-05-04 11:01:10 UTC 
(rev 15427)
@@ -105,7 +105,7 @@
uint32_t depth;
struct ndr_token_list *switch_list;
void (*print)(struct ndr_print *, const char *, ...);
-   void *private;
+   void *private_data;
 };
 
 #define LIBNDR_FLAG_BIGENDIAN  (10)

Modified: branches/SAMBA_4_0/source/librpc/ndr/ndr.c
===
--- branches/SAMBA_4_0/source/librpc/ndr/ndr.c  2006-05-04 10:03:41 UTC (rev 
15426)
+++ branches/SAMBA_4_0/source/librpc/ndr/ndr.c  2006-05-04 11:01:10 UTC (rev 
15427)
@@ -207,13 +207,13 @@
int i;
 
for (i=0;indr-depth;i++) {
-   ndr-private = talloc_asprintf_append(ndr-private, );
+   ndr-private_data = talloc_asprintf_append(ndr-private_data,  
   );
}
 
va_start(ap, format);
-   ndr-private = talloc_vasprintf_append(ndr-private, format, ap);
+   ndr-private_data = talloc_vasprintf_append(ndr-private_data, format, 
ap);
va_end(ap);
-   ndr-private = talloc_asprintf_append(ndr-private, \n);
+   ndr-private_data = talloc_asprintf_append(ndr-private_data, \n);
 }
 
 /*
@@ -278,15 +278,15 @@
 
ndr = talloc_zero(mem_ctx, struct ndr_print);
if (!ndr) return NULL;
-   ndr-private = talloc_strdup(ndr, );
-   if (!ndr-private) {
+   ndr-private_data = talloc_strdup(ndr, );
+   if (!ndr-private_data) {
goto failed;
}
ndr-print = ndr_print_string_helper;
ndr-depth = 1;
ndr-flags = 0;
fn(ndr, name, flags, ptr);
-   ret = talloc_steal(mem_ctx, ndr-private);
+   ret = talloc_steal(mem_ctx, ndr-private_data);
 failed:
talloc_free(ndr);
return ret;



svn commit: samba r15428 - branches/SAMBA_3_0/source/include branches/SAMBA_3_0/source/nsswitch branches/SAMBA_3_0/source/utils trunk/source/include trunk/source/nsswitch trunk/source/utils

2006-05-04 Thread gd
Author: gd
Date: 2006-05-04 12:37:13 + (Thu, 04 May 2006)
New Revision: 15428

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15428

Log:
Add smbcontrol winbind onlinestatus for debugging purpose.

Guenther

Modified:
   branches/SAMBA_3_0/source/include/messages.h
   branches/SAMBA_3_0/source/nsswitch/winbindd.c
   branches/SAMBA_3_0/source/nsswitch/winbindd_cache.c
   branches/SAMBA_3_0/source/nsswitch/winbindd_dual.c
   branches/SAMBA_3_0/source/utils/smbcontrol.c
   trunk/source/include/messages.h
   trunk/source/nsswitch/winbindd.c
   trunk/source/nsswitch/winbindd_cache.c
   trunk/source/nsswitch/winbindd_dual.c
   trunk/source/utils/smbcontrol.c


Changeset:
Modified: branches/SAMBA_3_0/source/include/messages.h
===
--- branches/SAMBA_3_0/source/include/messages.h2006-05-04 11:01:10 UTC 
(rev 15427)
+++ branches/SAMBA_3_0/source/include/messages.h2006-05-04 12:37:13 UTC 
(rev 15428)
@@ -76,6 +76,7 @@
 #define MSG_WINBIND_FORGET_STATE 4002
 #define MSG_WINBIND_ONLINE   4003
 #define MSG_WINBIND_OFFLINE  4004
+#define MSG_WINBIND_ONLINESTATUS 4005
 
 /* Flags to classify messages - used in message_send_all() */
 /* Sender will filter by flag. */

Modified: branches/SAMBA_3_0/source/nsswitch/winbindd.c
===
--- branches/SAMBA_3_0/source/nsswitch/winbindd.c   2006-05-04 11:01:10 UTC 
(rev 15427)
+++ branches/SAMBA_3_0/source/nsswitch/winbindd.c   2006-05-04 12:37:13 UTC 
(rev 15428)
@@ -1035,6 +1035,7 @@
/* Handle online/offline messages. */
message_register(MSG_WINBIND_OFFLINE,winbind_msg_offline);
message_register(MSG_WINBIND_ONLINE,winbind_msg_online);
+   message_register(MSG_WINBIND_ONLINESTATUS,winbind_msg_onlinestatus);
 
poptFreeContext(pc);
 

Modified: branches/SAMBA_3_0/source/nsswitch/winbindd_cache.c
===
--- branches/SAMBA_3_0/source/nsswitch/winbindd_cache.c 2006-05-04 11:01:10 UTC 
(rev 15427)
+++ branches/SAMBA_3_0/source/nsswitch/winbindd_cache.c 2006-05-04 12:37:13 UTC 
(rev 15428)
@@ -2357,6 +2357,11 @@
tdb_delete_bystring(wcache-tdb, WINBINDD_OFFLINE);
 }
 
+BOOL get_global_winbindd_state_online(void)
+{
+   return global_winbindd_offline_state;
+}
+
 /* the cache backend methods are exposed via this structure */
 struct winbindd_methods cache_methods = {
True,

Modified: branches/SAMBA_3_0/source/nsswitch/winbindd_dual.c
===
--- branches/SAMBA_3_0/source/nsswitch/winbindd_dual.c  2006-05-04 11:01:10 UTC 
(rev 15427)
+++ branches/SAMBA_3_0/source/nsswitch/winbindd_dual.c  2006-05-04 12:37:13 UTC 
(rev 15428)
@@ -496,6 +496,26 @@
}
 }
 
+/* Forward the online/offline messages to our children. */
+void winbind_msg_onlinestatus(int msg_type, struct process_id src, void *buf, 
size_t len)
+{
+   struct winbindd_child *child;
+
+   DEBUG(10,(winbind_msg_onlinestatus: got onlinestatus message.\n));
+
+   for (child = children; child != NULL; child = child-next) {
+   if (child-domain  child-domain-primary) {
+   DEBUG(10,(winbind_msg_onlinestatus: 
+ sending message to pid %u of primary 
domain.\n,
+ (unsigned int)child-pid));
+   message_send_pid(pid_to_procid(child-pid), 
+MSG_WINBIND_ONLINESTATUS, buf, len, 
False);
+   break;
+   }
+   }
+}
+
+
 static void account_lockout_policy_handler(struct timed_event *te,
   const struct timeval *now,
   void *private_data)
@@ -582,6 +602,60 @@
}
 }
 
+static const char *collect_onlinestatus(TALLOC_CTX *mem_ctx)
+{
+   struct winbindd_domain *domain;
+   char *buf = NULL;
+
+   if ((buf = talloc_asprintf(mem_ctx, global:%s , 
+  get_global_winbindd_state_online() ? 
+  Offline:Online)) == NULL) {
+   return NULL;
+   }
+
+   for (domain = domain_list(); domain; domain = domain-next) {
+   if ((buf = talloc_asprintf_append(buf, %s:%s , 
+ domain-name, 
+ domain-online ?
+ Online:Offline)) == NULL) 
{
+   return NULL;
+   }
+   }
+
+   buf = talloc_asprintf_append(buf, \n);
+
+   DEBUG(5,(collect_onlinestatus: %s\n, buf));
+
+   return buf;
+}
+
+static void child_msg_onlinestatus(int msg_type, struct process_id src, void 
*buf, size_t len)
+{
+   TALLOC_CTX *mem_ctx;
+   const char 

svn commit: samba r15429 - in trunk/source: . include lib libsmb rpc_parse

2006-05-04 Thread jelmer
Author: jelmer
Date: 2006-05-04 12:44:37 + (Thu, 04 May 2006)
New Revision: 15429

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15429

Log:
Make talloc_vasprintf_append() non-static

Modified:
   trunk/source/Doxyfile
   trunk/source/Makefile.in
   trunk/source/include/includes.h
   trunk/source/include/rpc_netlogon.h
   trunk/source/include/rpc_secdes.h
   trunk/source/include/talloc.h
   trunk/source/lib/charcnv.c
   trunk/source/lib/data_blob.c
   trunk/source/lib/debug.c
   trunk/source/lib/substitute.c
   trunk/source/lib/talloc.c
   trunk/source/lib/time.c
   trunk/source/lib/util.c
   trunk/source/lib/util_str.c
   trunk/source/libsmb/trusts_util.c
   trunk/source/rpc_parse/parse_dfs.c


Changeset:
Sorry, the patch is too large (541 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15429


svn commit: samba r15430 - in trunk/source: . include lib libsmb rpc_parse

2006-05-04 Thread jelmer
Author: jelmer
Date: 2006-05-04 12:50:22 + (Thu, 04 May 2006)
New Revision: 15430

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15430

Log:
My previous commit was only intended to commit include/talloc.h and 
lib/talloc.c, back out the other files for now (until I back them out again)

Modified:
   trunk/source/Doxyfile
   trunk/source/Makefile.in
   trunk/source/include/includes.h
   trunk/source/include/rpc_netlogon.h
   trunk/source/include/rpc_secdes.h
   trunk/source/lib/charcnv.c
   trunk/source/lib/data_blob.c
   trunk/source/lib/substitute.c
   trunk/source/lib/time.c
   trunk/source/lib/util.c
   trunk/source/lib/util_str.c
   trunk/source/libsmb/trusts_util.c
   trunk/source/rpc_parse/parse_dfs.c


Changeset:
Modified: trunk/source/Doxyfile
===
--- trunk/source/Doxyfile   2006-05-04 12:44:37 UTC (rev 15429)
+++ trunk/source/Doxyfile   2006-05-04 12:50:22 UTC (rev 15430)
@@ -168,3 +168,9 @@
 # configuration::additions related to the search engine   
 #---
 SEARCHENGINE   = NO
+CGI_NAME   = search.cgi
+CGI_URL= 
+DOC_URL= 
+DOC_ABSPATH= 
+BIN_ABSPATH= /usr/local/bin/
+EXT_DOC_PATHS  = 

Modified: trunk/source/Makefile.in
===
--- trunk/source/Makefile.in2006-05-04 12:44:37 UTC (rev 15429)
+++ trunk/source/Makefile.in2006-05-04 12:50:22 UTC (rev 15430)
@@ -201,9 +201,6 @@
 
 SOCKET_WRAPPER_OBJ = lib/socket_wrapper.o
 
-LIBNDR_OBJ = libndr/ndr_basic.o libndr/ndr.o libndr/ndr_misc.o \
-   libndr/ndr_sec_helper.o libndr/ndr_string.o libndr/sid.o
-
 RPC_PARSE_OBJ0 = rpc_parse/parse_prs.o rpc_parse/parse_misc.o
 
 LIB_OBJ = $(VERSION_OBJ) lib/charcnv.o lib/debug.o lib/fault.o \
@@ -334,7 +331,7 @@
rpc_parse/parse_echo.o rpc_parse/parse_shutdown.o \
rpc_parse/parse_svcctl.o rpc_parse/parse_unixinfo.o \
rpc_parse/parse_eventlog.o rpc_parse/parse_buffer.o \
-rpc_parse/parse_ntsvcs.o $(REGOBJS_OBJ) $(LIBNDR_OBJ)
+rpc_parse/parse_ntsvcs.o $(REGOBJS_OBJ)
 
 RPC_CLIENT_OBJ = rpc_client/cli_pipe.o
 
@@ -684,7 +681,7 @@
 SMBFILTER_OBJ = utils/smbfilter.o $(PARAM_OBJ) $(LIBSMB_OBJ) $(SECRETS_OBJ) \
  $(LIB_NONSMBD_OBJ) $(KRBCLIENT_OBJ) 
 
-PROTO_OBJ = $(SMBD_OBJ_MAIN) $(LIBNDR_OBJ) \
+PROTO_OBJ = $(SMBD_OBJ_MAIN) \
$(SMBD_OBJ_SRV) $(NMBD_OBJ1) $(SWAT_OBJ1) $(LIB_OBJ) $(LIBSMB_OBJ) \
$(SMBTORTURE_OBJ1) $(RPCCLIENT_OBJ1) \
$(LIBMSRPC_OBJ) @SMBWRAP_OBJS@ \

Modified: trunk/source/include/includes.h
===
--- trunk/source/include/includes.h 2006-05-04 12:44:37 UTC (rev 15429)
+++ trunk/source/include/includes.h 2006-05-04 12:50:22 UTC (rev 15430)
@@ -1008,8 +1008,6 @@
 
 #include event.h
 
-#include libndr/libndr.h
-
 /*
  * Type for wide character dirent structure.
  * Only d_name is defined by POSIX.

Modified: trunk/source/include/rpc_netlogon.h
===
--- trunk/source/include/rpc_netlogon.h 2006-05-04 12:44:37 UTC (rev 15429)
+++ trunk/source/include/rpc_netlogon.h 2006-05-04 12:50:22 UTC (rev 15430)
@@ -43,6 +43,11 @@
 #define NET_DSR_GETSITENAME0x1c
 #define NET_SAMLOGON_EX0x27
 
+/* Secure Channel types.  used in NetrServerAuthenticate negotiation */
+#define SEC_CHAN_WKSTA   2
+#define SEC_CHAN_DOMAIN  4
+#define SEC_CHAN_BDC 6
+
 /* Returned delta types */
 #define SAM_DELTA_DOMAIN_INFO0x01
 #define SAM_DELTA_GROUP_INFO 0x02
@@ -61,6 +66,11 @@
 #define SAM_DELTA_DELETE_USER0x15
 #define SAM_DELTA_MODIFIED_COUNT 0x16
 
+/* SAM database types */
+#define SAM_DATABASE_DOMAIN0x00 /* Domain users and groups */
+#define SAM_DATABASE_BUILTIN   0x01 /* BUILTIN users and groups */
+#define SAM_DATABASE_PRIVS 0x02 /* Privileges */
+
 /* flags use when sending a NETLOGON_CONTROL request */
 
 #define NETLOGON_CONTROL_SYNC  0x2

Modified: trunk/source/include/rpc_secdes.h
===
--- trunk/source/include/rpc_secdes.h   2006-05-04 12:44:37 UTC (rev 15429)
+++ trunk/source/include/rpc_secdes.h   2006-05-04 12:50:22 UTC (rev 15430)
@@ -43,6 +43,33 @@
 #define SEC_ACE_OBJECT_PRESENT   0x0001 /* thanks for Jim 
McDonough [EMAIL PROTECTED] */
 #define SEC_ACE_OBJECT_INHERITED_PRESENT 0x0002
 
+#define SEC_ACE_FLAG_OBJECT_INHERIT0x1
+#define SEC_ACE_FLAG_CONTAINER_INHERIT 0x2
+#define SEC_ACE_FLAG_NO_PROPAGATE_INHERIT  0x4
+#define SEC_ACE_FLAG_INHERIT_ONLY  0x8
+#define SEC_ACE_FLAG_INHERITED_ACE 0x10 /* New for Windows 2000 */
+#define 

svn commit: samba r15431 - in trunk/source: .

2006-05-04 Thread jelmer
Author: jelmer
Date: 2006-05-04 12:57:27 + (Thu, 04 May 2006)
New Revision: 15431

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15431

Log:
Removed obsolete parameters

Modified:
   trunk/source/Doxyfile


Changeset:
Modified: trunk/source/Doxyfile
===
--- trunk/source/Doxyfile   2006-05-04 12:50:22 UTC (rev 15430)
+++ trunk/source/Doxyfile   2006-05-04 12:57:27 UTC (rev 15431)
@@ -168,9 +168,3 @@
 # configuration::additions related to the search engine   
 #---
 SEARCHENGINE   = NO
-CGI_NAME   = search.cgi
-CGI_URL= 
-DOC_URL= 
-DOC_ABSPATH= 
-BIN_ABSPATH= /usr/local/bin/
-EXT_DOC_PATHS  = 



svn commit: samba r15432 - in trunk/source: lib libsmb torture web

2006-05-04 Thread jelmer
Author: jelmer
Date: 2006-05-04 13:04:22 + (Thu, 04 May 2006)
New Revision: 15432

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15432

Log:
Make some functions non-static and import some utility functions from Samba 4 

Modified:
   trunk/source/lib/charcnv.c
   trunk/source/lib/data_blob.c
   trunk/source/lib/substitute.c
   trunk/source/lib/time.c
   trunk/source/lib/util.c
   trunk/source/lib/util_str.c
   trunk/source/libsmb/trusts_util.c
   trunk/source/torture/rpctorture.c
   trunk/source/web/swat.c


Changeset:
Modified: trunk/source/lib/charcnv.c
===
--- trunk/source/lib/charcnv.c  2006-05-04 12:57:27 UTC (rev 15431)
+++ trunk/source/lib/charcnv.c  2006-05-04 13:04:22 UTC (rev 15432)
@@ -702,7 +702,7 @@
  *
  * @returns Size in bytes of the converted string; or -1 in case of error.
  **/
-static size_t convert_string_talloc(TALLOC_CTX *ctx, charset_t from, charset_t 
to,
+size_t convert_string_talloc(TALLOC_CTX *ctx, charset_t from, charset_t to,
void const *src, size_t srclen, void **dest, 
BOOL allow_bad_conv)
 {
size_t dest_len;

Modified: trunk/source/lib/data_blob.c
===
--- trunk/source/lib/data_blob.c2006-05-04 12:57:27 UTC (rev 15431)
+++ trunk/source/lib/data_blob.c2006-05-04 13:04:22 UTC (rev 15432)
@@ -102,7 +102,7 @@
  Clear a DATA_BLOB's contents
 ***/
 
-static void data_blob_clear(DATA_BLOB *d)
+void data_blob_clear(DATA_BLOB *d)
 {
if (d-data) {
memset(d-data, 0, d-length);

Modified: trunk/source/lib/substitute.c
===
--- trunk/source/lib/substitute.c   2006-05-04 12:57:27 UTC (rev 15431)
+++ trunk/source/lib/substitute.c   2006-05-04 13:04:22 UTC (rev 15432)
@@ -522,7 +522,7 @@
a_string = realloc_string_sub(a_string, %R, 
remote_proto);
break;
case 'T' :
-   a_string = realloc_string_sub(a_string, %T, 
timestring(False));
+   a_string = realloc_string_sub(a_string, %T, 
current_timestring(False));
break;
case 'a' :
a_string = realloc_string_sub(a_string, %a, 
remote_arch);

Modified: trunk/source/lib/time.c
===
--- trunk/source/lib/time.c 2006-05-04 12:57:27 UTC (rev 15431)
+++ trunk/source/lib/time.c 2006-05-04 13:04:22 UTC (rev 15432)
@@ -639,7 +639,7 @@
  Return the date and time as a string
 /
 
-char *timestring(BOOL hires)
+char *current_timestring(BOOL hires)
 {
static fstring TimeBuf;
struct timeval tp;
@@ -1057,3 +1057,49 @@
return ret;
 }
 #endif
+
+
+/**
+ Return the date and time as a string
+**/
+char *timestring(TALLOC_CTX *mem_ctx, time_t t)
+{
+   char *TimeBuf;
+   char tempTime[80];
+   struct tm *tm;
+
+   tm = localtime(t);
+   if (!tm) {
+   return talloc_asprintf(mem_ctx,
+  %ld seconds since the Epoch,
+  (long)t);
+   }
+
+#ifdef HAVE_STRFTIME
+   /* some versions of gcc complain about using %c. This is a bug
+  in the gcc warning, not a bug in this code. See a recent
+  strftime() manual page for details.
+*/
+   strftime(tempTime,sizeof(tempTime)-1,%c %Z,tm);
+   TimeBuf = talloc_strdup(mem_ctx, tempTime);
+#else
+   TimeBuf = talloc_strdup(mem_ctx, asctime(tm));
+#endif
+
+   return TimeBuf;
+}
+
+
+/**
+  return a talloced string representing a NTTIME for human consumption
+*/
+const char *nt_time_string(TALLOC_CTX *mem_ctx, NTTIME nt)
+{
+   time_t t;
+   if (nt.low == 0  nt.high == 0) {
+   return NTTIME(0);
+   }
+   t = nt_time_to_unix(nt);
+   return timestring(mem_ctx, t);
+}
+

Modified: trunk/source/lib/util.c
===
--- trunk/source/lib/util.c 2006-05-04 12:57:27 UTC (rev 15431)
+++ trunk/source/lib/util.c 2006-05-04 13:04:22 UTC (rev 15432)
@@ -447,26 +447,6 @@
 }
 
 /***
- Return a string representing an attribute for a file.
-/
-
-char *attrib_string(uint16 mode)
-{
-   static fstring attrstr;
-
-   attrstr[0] = 0;
-
-   if (mode  aVOLID) fstrcat(attrstr,V);
-   if (mode  aDIR) fstrcat(attrstr,D);
-   if (mode  aARCH) fstrcat(attrstr,A);
-   if (mode  aHIDDEN) fstrcat(attrstr,H);
-   if (mode  aSYSTEM) fstrcat(attrstr,S);
-   if 

svn commit: samba r15433 - in branches/SAMBA_4_0/source/lib: .

2006-05-04 Thread abartlet
Author: abartlet
Date: 2006-05-04 13:06:08 + (Thu, 04 May 2006)
New Revision: 15433

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15433

Log:
Add a todo.

Andrew Bartlett

Modified:
   branches/SAMBA_4_0/source/lib/db_wrap.c


Changeset:
Modified: branches/SAMBA_4_0/source/lib/db_wrap.c
===
--- branches/SAMBA_4_0/source/lib/db_wrap.c 2006-05-04 13:04:22 UTC (rev 
15432)
+++ branches/SAMBA_4_0/source/lib/db_wrap.c 2006-05-04 13:06:08 UTC (rev 
15433)
@@ -68,6 +68,8 @@
 /*
   wrapped connection to a ldb database
   to close just talloc_free() the returned ldb_context
+
+  TODO:  We need an error_string parameter
  */
 struct ldb_context *ldb_wrap_connect(TALLOC_CTX *mem_ctx,
 const char *url,



svn commit: samba r15434 - in trunk/source: . include lib libndr rpcclient smbd

2006-05-04 Thread jelmer
Author: jelmer
Date: 2006-05-04 14:26:23 + (Thu, 04 May 2006)
New Revision: 15434

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15434

Log:
Add Samba4's libndr. This currently contains a few hacks (such as 
NTTIME that needs to be changed from 2 uint32's to uint64) and 
the fact that it uses uint*_t. It does compile and link, but is not used (yet).

Added:
   trunk/source/libndr/
   trunk/source/libndr/libndr.h
   trunk/source/libndr/misc.h
   trunk/source/libndr/ndr.c
   trunk/source/libndr/ndr_basic.c
   trunk/source/libndr/ndr_misc.c
   trunk/source/libndr/ndr_sec.h
   trunk/source/libndr/ndr_sec_helper.c
   trunk/source/libndr/ndr_string.c
   trunk/source/libndr/security.h
   trunk/source/libndr/sid.c
Modified:
   trunk/source/Makefile.in
   trunk/source/include/includes.h
   trunk/source/include/rpc_netlogon.h
   trunk/source/include/rpc_secdes.h
   trunk/source/lib/util.c
   trunk/source/lib/util_str.c
   trunk/source/rpcclient/cmd_spoolss.c
   trunk/source/smbd/change_trust_pw.c


Changeset:
Sorry, the patch is too large (3795 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15434


svn commit: samba r15435 - in branches/SAMBA_4_0/source/libnet: .

2006-05-04 Thread mimir
Author: mimir
Date: 2006-05-04 14:52:03 + (Thu, 04 May 2006)
New Revision: 15435

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15435

Log:
Turn libnet_RpcConnectDCInfo into another level of libnet_RpcConnect
and make it async. Also, update any other usages of old function.
Build goes fine and so do tests, comments to follow.


rafal


Modified:
   branches/SAMBA_4_0/source/libnet/libnet_join.c
   branches/SAMBA_4_0/source/libnet/libnet_rpc.c
   branches/SAMBA_4_0/source/libnet/libnet_rpc.h
   branches/SAMBA_4_0/source/libnet/libnet_vampire.c


Changeset:
Sorry, the patch is too large (617 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15435


svn commit: samba r15436 - in branches/SAMBA_4_0/source/torture/libnet: .

2006-05-04 Thread mimir
Author: mimir
Date: 2006-05-04 14:54:31 + (Thu, 04 May 2006)
New Revision: 15436

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15436

Log:
Add test for LIBNET_RPC_CONNECT_DC_INFO level. Display received
information.


rafal


Modified:
   branches/SAMBA_4_0/source/torture/libnet/libnet_rpc.c


Changeset:
Modified: branches/SAMBA_4_0/source/torture/libnet/libnet_rpc.c
===
--- branches/SAMBA_4_0/source/torture/libnet/libnet_rpc.c   2006-05-04 
14:52:03 UTC (rev 15435)
+++ branches/SAMBA_4_0/source/torture/libnet/libnet_rpc.c   2006-05-04 
14:54:31 UTC (rev 15436)
@@ -22,6 +22,8 @@
 #include includes.h
 #include lib/cmdline/popt_common.h
 #include libnet/libnet.h
+#include libcli/security/security.h
+#include librpc/ndr/libndr.h
 #include librpc/gen_ndr/ndr_lsa.h
 #include librpc/gen_ndr/ndr_samr.h
 #include librpc/rpc/dcerpc.h
@@ -50,6 +52,34 @@
 }
 
 
+static BOOL test_lsa_dcinfo_connect(struct libnet_context *ctx)
+{
+   NTSTATUS status;
+   struct libnet_RpcConnect connect;
+   connect.level   = LIBNET_RPC_CONNECT_DC_INFO;
+   connect.in.binding  = lp_parm_string(-1, torture, binding);
+   connect.in.dcerpc_iface = dcerpc_table_lsarpc;
+   
+   status = libnet_RpcConnect(ctx, ctx, connect);
+   
+   if (!NT_STATUS_IS_OK(status)) {
+   printf(Couldn't connect to rpc service %s on %s: %s\n,
+  connect.in.dcerpc_iface-name, connect.in.binding,
+  nt_errstr(status));
+
+   return False;
+   }
+
+   printf(Domain Controller Info:\n);
+   printf(\tDomain Name:\t %s\n, connect.out.domain_name);
+   printf(\tDomain SID:\t %s\n, dom_sid_string(ctx, 
connect.out.domain_sid));
+   printf(\tRealm:\t\t %s\n, connect.out.realm);
+   printf(\tGUID:\t\t %s\n, GUID_string(ctx, connect.out.guid));
+
+   return True;
+}
+
+
 static BOOL test_samr_connect(struct libnet_context *ctx)
 {
NTSTATUS status;
@@ -84,6 +114,12 @@
return False;
}
 
+   printf(Testing connection with domain info to lsarpc interface\n);
+   if (!test_lsa_dcinfo_connect(ctx)) {
+   printf(failed to connect lsarpc interface\n);
+   return False;
+   }
+
printf(Testing connection to SAMR service\n);
if (!test_samr_connect(ctx)) {
printf(failed to connect samr interface\n);



svn commit: samba r15437 - in branches/SAMBA_4_0/source/pidl: . lib/Parse/Pidl/Samba3

2006-05-04 Thread jelmer
Author: jelmer
Date: 2006-05-04 16:04:08 + (Thu, 04 May 2006)
New Revision: 15437

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15437

Log:
Add generator that creates Samba3 client code which uses Samba4's NDR 
routines.

Added:
   branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba3/ClientNDR.pm
Modified:
   branches/SAMBA_4_0/source/pidl/pidl


Changeset:
Added: branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba3/ClientNDR.pm
===
--- branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba3/ClientNDR.pm   
2006-05-04 14:54:31 UTC (rev 15436)
+++ branches/SAMBA_4_0/source/pidl/lib/Parse/Pidl/Samba3/ClientNDR.pm   
2006-05-04 16:04:08 UTC (rev 15437)
@@ -0,0 +1,136 @@
+###
+# Samba3 client generator for IDL structures
+# on top of Samba4 style NDR functions
+# Copyright [EMAIL PROTECTED] 2005-2006
+# released under the GNU GPL
+
+package Parse::Pidl::Samba3::ClientNDR;
+
+use strict;
+use Parse::Pidl::Typelist qw(hasType getType mapType);
+use Parse::Pidl::Util qw(has_property ParseExpr);
+use Parse::Pidl::NDR qw(GetPrevLevel GetNextLevel ContainsDeferred);
+use Parse::Pidl::Samba3::Types qw(DeclLong);
+
+use vars qw($VERSION);
+$VERSION = '0.01';
+
+my $res = ;
+my $tabs = ;
+sub indent() { $tabs.=\t; }
+sub deindent() { $tabs = substr($tabs, 1); }
+sub pidl($) { $res .= $tabs.(shift).\n; }
+sub fatal($$) { my ($e,$s) = @_; 
die($e-{ORIGINAL}-{FILE}:$e-{ORIGINAL}-{LINE}: $s\n); }
+sub warning($$) { my ($e,$s) = @_; 
warn($e-{ORIGINAL}-{FILE}:$e-{ORIGINAL}-{LINE}: $s\n); }
+
+sub CopyLevel()
+{
+   sub CopyLevel();
+   my ($e,$l,$argument,$member) = @_;
+
+   if ($l-{TYPE} eq DATA) {
+   pidl *$argument = *$member;;
+   } elsif ($l-{TYPE} eq POINTER) {
+   pidl if (r.ptr$l-{POINTER_INDEX}_$e-{NAME}) {;
+   indent;
+   pidl *$argument = talloc_size(mem_ctx, sizeof(void *));;
+   CopyLevel($e,GetNextLevel($e,$l),*$argument, $member);
+   deindent;
+   pidl };
+   } elsif ($l-{TYPE} eq SWITCH) {
+   CopyLevel($e,GetNextLevel($e,$l),$argument,$member);
+   } elsif ($l-{TYPE} eq ARRAY) {
+   pidl *$argument = $member;;
+   }
+}
+
+sub ParseFunction($$)
+{
+   my ($if,$fn) = @_;
+
+   my $inargs = ;
+   my $defargs = ;
+   my $uif = uc($if-{NAME});
+   my $ufn = uc($fn-{NAME});
+
+   foreach (@{$fn-{ELEMENTS}}) {
+   $defargs .= ,  . DeclLong($_);
+   }
+   pidl NTSTATUS rpccli_$fn-{NAME}(struct rpc_pipe_client *cli, 
TALLOC_CTX *mem_ctx$defargs);
+   pidl {;
+   indent;
+   pidl struct $fn-{NAME} r;;
+   pidl NTSTATUS status;;
+   pidl ;
+   pidl /* In parameters */;
+
+   foreach (@{$fn-{ELEMENTS}}) {
+   if (grep(/in/, @{$_-{DIRECTION}})) {
+   pidl r.in.$_-{NAME} = $_-{NAME};;
+   } 
+   }
+
+   pidl status = cli_do_rpc_ndr(cli, mem_ctx, PI_$uif, $ufn, r, 
ndr_pull_$fn-{NAME}, ndr_push_$fn-{NAME});;
+   pidl if (NT_STATUS_IS_ERR(status)) {;
+   pidl \treturn status;;
+   pidl };
+   pidl ;
+   pidl /* Return variables */;
+   foreach my $e (@{$fn-{ELEMENTS}}) {
+   next unless (grep(/out/, @{$e-{DIRECTION}}));
+
+   if ($e-{LEVELS}[0]-{TYPE} ne POINTER) {
+   warning($e, First element not a pointer for [out] 
argument);
+   next;
+   }
+
+   CopyLevel($e, $e-{LEVELS}[1], $e-{NAME}, r.out.$e-{NAME});
+   }
+
+   pidl;
+   pidl /* Return result */;
+   if (not $fn-{RETURN_TYPE}) {
+   pidl return NT_STATUS_OK;;
+   } elsif ($fn-{RETURN_TYPE} eq NTSTATUS) {
+   pidl return r.status;;
+   } elsif ($fn-{RETURN_TYPE} eq WERROR) {
+   pidl return werror_to_ntstatus(r.status);;
+   } else {
+   pidl /* Sorry, don't know how to convert $fn-{RETURN_TYPE} to 
NTSTATUS */;
+   pidl return NT_STATUS_OK;;
+   }
+
+   deindent;
+   pidl };
+   pidl ;
+}
+
+sub ParseInterface($)
+{
+   my $if = shift;
+
+   ParseFunction($if, $_) foreach (@{$if-{FUNCTIONS}});
+}
+
+sub Parse($$)
+{
+   my($ndr,$filename) = @_;
+
+   $res = ;
+
+   pidl /*;
+   pidl  * Unix SMB/CIFS implementation.;
+   pidl  * client auto-generated by pidl. DO NOT MODIFY!;
+   pidl  */;
+   pidl ;
+   pidl #include \includes.h\;
+   pidl ;
+   
+   foreach (@$ndr) {
+   ParseInterface($_) if ($_-{TYPE} eq INTERFACE);
+   }
+
+   return $res;
+}
+
+1;

Modified: branches/SAMBA_4_0/source/pidl/pidl
===
--- branches/SAMBA_4_0/source/pidl/pidl 2006-05-04 14:54:31 UTC (rev 15436)
+++ 

svn commit: samba r15438 - branches/SAMBA_3_0/source/include branches/SAMBA_3_0/source/rpc_parse branches/SAMBA_3_0/source/rpc_server trunk/source/include trunk/source/rpc_parse trunk/source/rpc_serve

2006-05-04 Thread gd
Author: gd
Date: 2006-05-04 17:28:05 + (Thu, 04 May 2006)
New Revision: 15438

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15438

Log:
Fix samrQueryDomainInfo level 5 where we returned our netbios
name eversince instead of the domain name when we are a DC.

Yes, there are applications relying on this call to be correct.

Guenther

Modified:
   branches/SAMBA_3_0/source/include/rpc_samr.h
   branches/SAMBA_3_0/source/rpc_parse/parse_samr.c
   branches/SAMBA_3_0/source/rpc_server/srv_samr_nt.c
   trunk/source/include/rpc_samr.h
   trunk/source/rpc_parse/parse_samr.c
   trunk/source/rpc_server/srv_samr_nt.c


Changeset:
Modified: branches/SAMBA_3_0/source/include/rpc_samr.h
===
--- branches/SAMBA_3_0/source/include/rpc_samr.h2006-05-04 16:04:08 UTC 
(rev 15437)
+++ branches/SAMBA_3_0/source/include/rpc_samr.h2006-05-04 17:28:05 UTC 
(rev 15438)
@@ -572,8 +572,8 @@
 
 typedef struct sam_unknown_info_5_inf
 {
-   UNIHDR hdr_server; /* server name unicode header */
-   UNISTR2 uni_server; /* server name unicode string */
+   UNIHDR hdr_domain; /* domain name unicode header */
+   UNISTR2 uni_domain; /* domain name unicode string */
 
 } SAM_UNK_INFO_5;
 

Modified: branches/SAMBA_3_0/source/rpc_parse/parse_samr.c
===
--- branches/SAMBA_3_0/source/rpc_parse/parse_samr.c2006-05-04 16:04:08 UTC 
(rev 15437)
+++ branches/SAMBA_3_0/source/rpc_parse/parse_samr.c2006-05-04 17:28:05 UTC 
(rev 15438)
@@ -662,10 +662,10 @@
 inits a structure.
 /
 
-void init_unk_info5(SAM_UNK_INFO_5 * u_5,const char *server)
+void init_unk_info5(SAM_UNK_INFO_5 * u_5,const char *domain)
 {
-   init_unistr2(u_5-uni_server, server, UNI_FLAGS_NONE);
-   init_uni_hdr(u_5-hdr_server, u_5-uni_server);
+   init_unistr2(u_5-uni_domain, domain, UNI_FLAGS_NONE);
+   init_uni_hdr(u_5-hdr_domain, u_5-uni_domain);
 }
 
 /***
@@ -681,10 +681,10 @@
prs_debug(ps, depth, desc, sam_io_unk_info5);
depth++;
 
-   if(!smb_io_unihdr(hdr_server, u_5-hdr_server, ps, depth))
+   if(!smb_io_unihdr(hdr_domain, u_5-hdr_domain, ps, depth))
return False;
 
-   if(!smb_io_unistr2(uni_server, u_5-uni_server, 
u_5-hdr_server.buffer, ps, depth))
+   if(!smb_io_unistr2(uni_domain, u_5-uni_domain, 
u_5-hdr_domain.buffer, ps, depth))
return False;
 
return True;

Modified: branches/SAMBA_3_0/source/rpc_server/srv_samr_nt.c
===
--- branches/SAMBA_3_0/source/rpc_server/srv_samr_nt.c  2006-05-04 16:04:08 UTC 
(rev 15437)
+++ branches/SAMBA_3_0/source/rpc_server/srv_samr_nt.c  2006-05-04 17:28:05 UTC 
(rev 15438)
@@ -2301,7 +2301,7 @@
init_unk_info3(ctr-info.inf3, nt_logout);
break;
case 0x05:
-   init_unk_info5(ctr-info.inf5, global_myname());
+   init_unk_info5(ctr-info.inf5, get_global_sam_name());
break;
case 0x06:
init_unk_info6(ctr-info.inf6);
@@ -4802,7 +4802,7 @@
init_unk_info3(ctr-info.inf3, nt_logout);
break;
case 0x05:
-   init_unk_info5(ctr-info.inf5, global_myname());
+   init_unk_info5(ctr-info.inf5, get_global_sam_name());
break;
case 0x06:
init_unk_info6(ctr-info.inf6);

Modified: trunk/source/include/rpc_samr.h
===
--- trunk/source/include/rpc_samr.h 2006-05-04 16:04:08 UTC (rev 15437)
+++ trunk/source/include/rpc_samr.h 2006-05-04 17:28:05 UTC (rev 15438)
@@ -572,8 +572,8 @@
 
 typedef struct sam_unknown_info_5_inf
 {
-   UNIHDR hdr_server; /* server name unicode header */
-   UNISTR2 uni_server; /* server name unicode string */
+   UNIHDR hdr_domain; /* domain name unicode header */
+   UNISTR2 uni_domain; /* domain name unicode string */
 
 } SAM_UNK_INFO_5;
 

Modified: trunk/source/rpc_parse/parse_samr.c
===
--- trunk/source/rpc_parse/parse_samr.c 2006-05-04 16:04:08 UTC (rev 15437)
+++ trunk/source/rpc_parse/parse_samr.c 2006-05-04 17:28:05 UTC (rev 15438)
@@ -662,10 +662,10 @@
 inits a structure.
 /
 
-void init_unk_info5(SAM_UNK_INFO_5 * u_5,const char *server)
+void init_unk_info5(SAM_UNK_INFO_5 * u_5,const char *domain)
 {
-   init_unistr2(u_5-uni_server, server, UNI_FLAGS_NONE);
-   init_uni_hdr(u_5-hdr_server, 

svn commit: samba r15439 - in branches/SAMBA_4_0/source/libnet: .

2006-05-04 Thread mimir
Author: mimir
Date: 2006-05-04 17:37:57 + (Thu, 04 May 2006)
New Revision: 15439

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15439

Log:
Reorder the code a bit to be like in other calls. More comments
and comment-fixes.


rafal


Modified:
   branches/SAMBA_4_0/source/libnet/libnet_rpc.c


Changeset:
Modified: branches/SAMBA_4_0/source/libnet/libnet_rpc.c
===
--- branches/SAMBA_4_0/source/libnet/libnet_rpc.c   2006-05-04 17:28:05 UTC 
(rev 15438)
+++ branches/SAMBA_4_0/source/libnet/libnet_rpc.c   2006-05-04 17:37:57 UTC 
(rev 15439)
@@ -305,98 +305,6 @@
 
 
 
-/**
- * Initiates connection to rpc pipe on remote server or pdc
- * 
- * @param ctx initialised libnet context
- * @param mem_ctx memory context of this call
- * @param r data structure containing necessary parameters and return values
- * @return composite context of this call
- **/
-
-struct composite_context* libnet_RpcConnect_send(struct libnet_context *ctx,
-TALLOC_CTX *mem_ctx,
-struct libnet_RpcConnect *r)
-{
-   struct composite_context *c;
-
-   switch (r-level) {
-   case LIBNET_RPC_CONNECT_SERVER:
-   c = libnet_RpcConnectSrv_send(ctx, mem_ctx, r);
-   break;
-
-   case LIBNET_RPC_CONNECT_BINDING:
-   c = libnet_RpcConnectSrv_send(ctx, mem_ctx, r);
-   break;
-   
-   case LIBNET_RPC_CONNECT_PDC:
-   case LIBNET_RPC_CONNECT_DC:
-   c = libnet_RpcConnectDC_send(ctx, mem_ctx, r);
-   break;
-
-   case LIBNET_RPC_CONNECT_DC_INFO:
-   c = libnet_RpcConnectDCInfo_send(ctx, mem_ctx, r);
-   break;
-
-   default:
-   c = talloc_zero(mem_ctx, struct composite_context);
-   composite_error(c, NT_STATUS_INVALID_LEVEL);
-   }
-
-   return c;
-}
-
-
-/**
- * Receives result of connection to rpc pipe on remote server or pdc
- *
- * @param c composite context
- * @param ctx initialised libnet context
- * @param mem_ctx memory context of this call
- * @param r data structure containing necessary parameters and return values
- * @return nt status of rpc connection
- **/
-
-NTSTATUS libnet_RpcConnect_recv(struct composite_context *c, struct 
libnet_context *ctx,
-   TALLOC_CTX *mem_ctx, struct libnet_RpcConnect 
*r)
-{
-   switch (r-level) {
-   case LIBNET_RPC_CONNECT_SERVER:
-   case LIBNET_RPC_CONNECT_BINDING:
-   return libnet_RpcConnectSrv_recv(c, ctx, mem_ctx, r);
-
-   case LIBNET_RPC_CONNECT_PDC:
-   case LIBNET_RPC_CONNECT_DC:
-   return libnet_RpcConnectDC_recv(c, ctx, mem_ctx, r);
-
-   case LIBNET_RPC_CONNECT_DC_INFO:
-   return libnet_RpcConnectDCInfo_recv(c, ctx, mem_ctx, r);
-
-   default:
-   return NT_STATUS_INVALID_LEVEL;
-   }
-}
-
-
-/**
- * Connect to a rpc pipe on a remote server - sync version
- *
- * @param ctx initialised libnet context
- * @param mem_ctx memory context of this call
- * @param r data structure containing necessary parameters and return values
- * @return nt status of rpc connection
- **/
-
-NTSTATUS libnet_RpcConnect(struct libnet_context *ctx, TALLOC_CTX *mem_ctx,
-  struct libnet_RpcConnect *r)
-{
-   struct composite_context *c;
-   
-   c = libnet_RpcConnect_send(ctx, mem_ctx, r);
-   return libnet_RpcConnect_recv(c, ctx, mem_ctx, r);
-}
-
-
 struct rpc_connect_dci_state {
struct libnet_context *ctx;
struct libnet_RpcConnect r;
@@ -421,6 +329,62 @@
 static void continue_secondary_conn(struct composite_context *ctx);
 
 
+/**
+ * Initiates connection to rpc pipe on remote server or pdc. Received result
+ * contains info on the domain name, domain sid and realm.
+ * 
+ * @param ctx initialised libnet context
+ * @param mem_ctx memory context of this call
+ * @param r data structure containing necessary parameters and return values. 
Must be a talloc context
+ * @return composite context of this call
+ **/
+
+static struct composite_context* libnet_RpcConnectDCInfo_send(struct 
libnet_context *ctx,
+ TALLOC_CTX 
*mem_ctx,
+ struct 
libnet_RpcConnect *r)
+{
+   struct composite_context *c, *conn_req;
+   struct rpc_connect_dci_state *s;
+
+   c = talloc_zero(mem_ctx, struct composite_context);
+   if (c == NULL) return NULL;
+
+   s = talloc_zero(c, struct rpc_connect_dci_state);
+   if (composite_nomem(s, c)) return c;
+
+   c-state = COMPOSITE_STATE_IN_PROGRESS;
+   c-private_data = s;
+   c-event_ctx = ctx-event_ctx;
+
+   s-r   = *r;
+   s-ctx = ctx;
+
+   /* proceed to pure rpc connection if the binding 

svn commit: samba r15440 - in branches/SAMBA_4_0/source/librpc/rpc: .

2006-05-04 Thread mimir
Author: mimir
Date: 2006-05-04 17:39:35 + (Thu, 04 May 2006)
New Revision: 15440

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15440

Log:
Formatting.


rafal


Modified:
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc_connect.c


Changeset:
Modified: branches/SAMBA_4_0/source/librpc/rpc/dcerpc_connect.c
===
--- branches/SAMBA_4_0/source/librpc/rpc/dcerpc_connect.c   2006-05-04 
17:37:57 UTC (rev 15439)
+++ branches/SAMBA_4_0/source/librpc/rpc/dcerpc_connect.c   2006-05-04 
17:39:35 UTC (rev 15440)
@@ -31,12 +31,10 @@
 #include lib/events/events.h
 #include libcli/smb2/smb2.h
 #include libcli/smb2/smb2_calls.h
-#include auth/credentials/credentials.h
 #include librpc/rpc/dcerpc.h
+#include auth/credentials/credentials.h
 
 
-struct dcerpc_pipe_connect;
-
 struct pipe_np_smb_state {
struct smb_composite_connect conn;
struct smbcli_tree *tree;
@@ -59,6 +57,7 @@
composite_done(c);
 }
 
+
 /*
   Stage 2 of ncacn_np_smb: Open a named pipe after successful smb connection
 */



svn commit: samba r15441 - branches/SAMBA_3_0/source/include branches/SAMBA_3_0/source/rpc_parse trunk/source/include trunk/source/rpc_parse

2006-05-04 Thread gd
Author: gd
Date: 2006-05-04 17:47:04 + (Thu, 04 May 2006)
New Revision: 15441

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15441

Log:
cleanup older unused padding.

Guenther

Modified:
   branches/SAMBA_3_0/source/include/rpc_samr.h
   branches/SAMBA_3_0/source/rpc_parse/parse_samr.c
   trunk/source/include/rpc_samr.h
   trunk/source/rpc_parse/parse_samr.c


Changeset:
Modified: branches/SAMBA_3_0/source/include/rpc_samr.h
===
--- branches/SAMBA_3_0/source/include/rpc_samr.h2006-05-04 17:39:35 UTC 
(rev 15440)
+++ branches/SAMBA_3_0/source/include/rpc_samr.h2006-05-04 17:47:04 UTC 
(rev 15441)
@@ -597,8 +597,6 @@
uint32 num_domain_grps; /* number of domain groups in domain */
uint32 num_local_grps; /* number of local groups in domain */
 
-   uint8 padding[12]; /* 12 bytes zeros */
-
UNISTR2 uni_comment; /* comment unicode string */
UNISTR2 uni_domain; /* domain name unicode string */
UNISTR2 uni_server; /* server name unicode string */

Modified: branches/SAMBA_3_0/source/rpc_parse/parse_samr.c
===
--- branches/SAMBA_3_0/source/rpc_parse/parse_samr.c2006-05-04 17:39:35 UTC 
(rev 15440)
+++ branches/SAMBA_3_0/source/rpc_parse/parse_samr.c2006-05-04 17:47:04 UTC 
(rev 15441)
@@ -712,8 +712,6 @@
u_2-num_domain_grps = num_groups;
u_2-num_local_grps = num_alias;
 
-   memset(u_2-padding, 0, sizeof(u_2-padding));  /* 12 bytes zeros */
-
init_unistr2(u_2-uni_comment, comment, UNI_FLAGS_NONE);
init_uni_hdr(u_2-hdr_comment, u_2-uni_comment);
init_unistr2(u_2-uni_domain, domain, UNI_FLAGS_NONE);

Modified: trunk/source/include/rpc_samr.h
===
--- trunk/source/include/rpc_samr.h 2006-05-04 17:39:35 UTC (rev 15440)
+++ trunk/source/include/rpc_samr.h 2006-05-04 17:47:04 UTC (rev 15441)
@@ -597,8 +597,6 @@
uint32 num_domain_grps; /* number of domain groups in domain */
uint32 num_local_grps; /* number of local groups in domain */
 
-   uint8 padding[12]; /* 12 bytes zeros */
-
UNISTR2 uni_comment; /* comment unicode string */
UNISTR2 uni_domain; /* domain name unicode string */
UNISTR2 uni_server; /* server name unicode string */

Modified: trunk/source/rpc_parse/parse_samr.c
===
--- trunk/source/rpc_parse/parse_samr.c 2006-05-04 17:39:35 UTC (rev 15440)
+++ trunk/source/rpc_parse/parse_samr.c 2006-05-04 17:47:04 UTC (rev 15441)
@@ -712,8 +712,6 @@
u_2-num_domain_grps = num_groups;
u_2-num_local_grps = num_alias;
 
-   memset(u_2-padding, 0, sizeof(u_2-padding));  /* 12 bytes zeros */
-
init_unistr2(u_2-uni_comment, comment, UNI_FLAGS_NONE);
init_uni_hdr(u_2-hdr_comment, u_2-uni_comment);
init_unistr2(u_2-uni_domain, domain, UNI_FLAGS_NONE);



svn commit: samba r15442 - branches/SAMBA_3_0/source/include branches/SAMBA_3_0/source/rpc_parse branches/SAMBA_3_0/source/rpc_server branches/SAMBA_3_0/source/rpcclient trunk/source/include trunk/sou

2006-05-04 Thread gd
Author: gd
Date: 2006-05-04 19:01:11 + (Thu, 04 May 2006)
New Revision: 15442

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15442

Log:
Add some more client rpc for the querydominfo calls (from samba4 idl).
Also return the hostname for the level 6 call (to be consistent with the
server name in level 2).

Guenther

Modified:
   branches/SAMBA_3_0/source/include/rpc_samr.h
   branches/SAMBA_3_0/source/rpc_parse/parse_samr.c
   branches/SAMBA_3_0/source/rpc_server/srv_samr_nt.c
   branches/SAMBA_3_0/source/rpcclient/cmd_samr.c
   trunk/source/include/rpc_samr.h
   trunk/source/rpc_parse/parse_samr.c
   trunk/source/rpc_server/srv_samr_nt.c
   trunk/source/rpcclient/cmd_samr.c


Changeset:
Sorry, the patch is too large (829 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15442


svn commit: samba r15443 - branches/SAMBA_3_0/source/include branches/SAMBA_3_0/source/rpc_parse trunk/source/include trunk/source/rpc_parse

2006-05-04 Thread gd
Author: gd
Date: 2006-05-04 19:20:56 + (Thu, 04 May 2006)
New Revision: 15443

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15443

Log:
Purely cosmetic reformat, no functional changes.

Guenther

Modified:
   branches/SAMBA_3_0/source/include/rpc_samr.h
   branches/SAMBA_3_0/source/rpc_parse/parse_samr.c
   trunk/source/include/rpc_samr.h
   trunk/source/rpc_parse/parse_samr.c


Changeset:
Sorry, the patch is too large (1461 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15443


svn commit: samba r15444 - in branches/SAMBA_3_0/source/passdb: .

2006-05-04 Thread jra
Author: jra
Date: 2006-05-04 19:24:20 + (Thu, 04 May 2006)
New Revision: 15444

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15444

Log:
Fix from Jim to ensure we do a wildcard search for SID's
starting with the global SAM sid, not an exact search.
Jeremy.

Modified:
   branches/SAMBA_3_0/source/passdb/pdb_ldap.c


Changeset:
Modified: branches/SAMBA_3_0/source/passdb/pdb_ldap.c
===
--- branches/SAMBA_3_0/source/passdb/pdb_ldap.c 2006-05-04 19:20:56 UTC (rev 
15443)
+++ branches/SAMBA_3_0/source/passdb/pdb_ldap.c 2006-05-04 19:24:20 UTC (rev 
15444)
@@ -4303,7 +4303,7 @@
state-scope = LDAP_SCOPE_SUBTREE;
state-filter = talloc_asprintf(search-mem_ctx,
((objectclass=sambaGroupMapping)
-   (sambaGroupType=%d)(sambaSID=%s)), 
+   (sambaGroupType=%d)(sambaSID=%s*)), 
type, sid_string_static(sid));
state-attrs = talloc_attrs(search-mem_ctx, cn, sambaSid,
displayName, description,



svn commit: samba r15445 - in trunk/source/passdb: .

2006-05-04 Thread jra
Author: jra
Date: 2006-05-04 19:24:24 + (Thu, 04 May 2006)
New Revision: 15445

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15445

Log:
Fix from Jim to ensure we do a wildcard search for SID's
starting with the global SAM sid, not an exact search.
Jeremy.

Modified:
   trunk/source/passdb/pdb_ldap.c


Changeset:
Modified: trunk/source/passdb/pdb_ldap.c
===
--- trunk/source/passdb/pdb_ldap.c  2006-05-04 19:24:20 UTC (rev 15444)
+++ trunk/source/passdb/pdb_ldap.c  2006-05-04 19:24:24 UTC (rev 15445)
@@ -4303,7 +4303,7 @@
state-scope = LDAP_SCOPE_SUBTREE;
state-filter = talloc_asprintf(search-mem_ctx,
((objectclass=sambaGroupMapping)
-   (sambaGroupType=%d)(sambaSID=%s)), 
+   (sambaGroupType=%d)(sambaSID=%s*)), 
type, sid_string_static(sid));
state-attrs = talloc_attrs(search-mem_ctx, cn, sambaSid,
displayName, description,



Re: svn commit: samba r15445 - in trunk/source/passdb: .

2006-05-04 Thread Jim McDonough
Fix from Jim to ensure we do a wildcard search for SID's
starting with the global SAM sid, not an exact search.
I just want to point out that the fix is from John Janosik.  We just had 
to follow corporate rules about who is allowed to submit actual code...


Jim McDonough
IBM Linux Technology Center
Samba Team
6 Minuteman Drive
Scarborough, ME 04074
USA

jmcd at us dot ibm dot com 
jmcd at samba dot org

Phone: 1-877-228-1846
IBM tie-line: 349-5335



Build status as of Fri May 5 00:00:02 2006

2006-05-04 Thread build
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2006-05-04 
00:01:27.0 +
+++ /home/build/master/cache/broken_results.txt 2006-05-05 00:00:31.0 
+
@@ -1,17 +1,17 @@
-Build status as of Thu May  4 00:00:02 2006
+Build status as of Fri May  5 00:00:02 2006
 
 Build counts:
 Tree Total  Broken Panic 
-ccache   9  1  0 
-distcc   12 1  0 
+ccache   7  0  0 
+distcc   13 1  0 
 lorikeet-heimdal 33 25 0 
-ppp  19 0  0 
+ppp  18 0  0 
 rsync35 2  0 
-samba1  0  0 
+samba2  0  0 
 samba-docs   0  0  0 
-samba4   40 26 5 
-samba_3_037 7  0 
-smb-build27 0  0 
-talloc   8  5  0 
-tdb  33 4  0 
+samba4   40 23 6 
+samba_3_036 6  0 
+smb-build26 0  0 
+talloc   7  4  0 
+tdb  6  3  0 
 


svn commit: samba r15446 - branches/SAMBA_3_0/source/lib branches/SAMBA_3_0/source/smbd trunk/source/lib trunk/source/smbd

2006-05-04 Thread jpeach
Author: jpeach
Date: 2006-05-05 02:06:37 + (Fri, 05 May 2006)
New Revision: 15446

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15446

Log:
Tidy up the formatting of locking debug messages and make it more
consistent. Bring oplocks withing the purview of the locking debug
channel.

Modified:
   branches/SAMBA_3_0/source/lib/util.c
   branches/SAMBA_3_0/source/smbd/oplock.c
   branches/SAMBA_3_0/source/smbd/oplock_irix.c
   branches/SAMBA_3_0/source/smbd/oplock_linux.c
   trunk/source/lib/util.c
   trunk/source/smbd/oplock.c
   trunk/source/smbd/oplock_irix.c
   trunk/source/smbd/oplock_linux.c


Changeset:
Modified: branches/SAMBA_3_0/source/lib/util.c
===
--- branches/SAMBA_3_0/source/lib/util.c2006-05-04 19:24:24 UTC (rev 
15445)
+++ branches/SAMBA_3_0/source/lib/util.c2006-05-05 02:06:37 UTC (rev 
15446)
@@ -1948,7 +1948,8 @@
SMB_STRUCT_FLOCK lock;
int ret;
 
-   DEBUG(8,(fcntl_lock %d %d %.0f %.0f 
%d\n,fd,op,(double)offset,(double)count,type));
+   DEBUG(8,(fcntl_lock fd=%d op=%d offset=%.0f count=%.0f type=%d\n,
+   fd,op,(double)offset,(double)count,type));
 
lock.l_type = type;
lock.l_whence = SEEK_SET;
@@ -1982,7 +1983,8 @@
SMB_STRUCT_FLOCK lock;
int ret;
 
-   DEBUG(8,(fcntl_getlock %d %.0f %.0f 
%d\n,fd,(double)*poffset,(double)*pcount,*ptype));
+   DEBUG(8,(fcntl_getlock fd=%d offset=%.0f count=%.0f type=%d\n,
+   fd,(double)*poffset,(double)*pcount,*ptype));
 
lock.l_type = *ptype;
lock.l_whence = SEEK_SET;

Modified: branches/SAMBA_3_0/source/smbd/oplock.c
===
--- branches/SAMBA_3_0/source/smbd/oplock.c 2006-05-04 19:24:24 UTC (rev 
15445)
+++ branches/SAMBA_3_0/source/smbd/oplock.c 2006-05-05 02:06:37 UTC (rev 
15446)
@@ -20,6 +20,7 @@
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
 */
 
+#define DBGC_CLASS DBGC_LOCKING
 #include includes.h
 
 /* Current number of oplocks we have outstanding. */
@@ -118,10 +119,11 @@
exclusive_oplocks_open++;
}
 
-   DEBUG(5,(set_file_oplock: granted oplock on file %s, dev = %x, inode = 
%.0f, file_id = %lu, \
-tv_sec = %x, tv_usec = %x\n,
-fsp-fsp_name, (unsigned int)fsp-dev, (double)fsp-inode, 
fsp-file_id,
-(int)fsp-open_time.tv_sec, (int)fsp-open_time.tv_usec ));
+   DEBUG(5,(set_file_oplock: granted oplock on file %s, 0x%x/%.0f/%lu, 
+   tv_sec = %x, tv_usec = %x\n,
+fsp-fsp_name, (unsigned int)fsp-dev, (double)fsp-inode,
+fsp-file_id, (int)fsp-open_time.tv_sec,
+(int)fsp-open_time.tv_usec ));
 
return True;
 }
@@ -191,7 +193,7 @@
ret = remove_share_oplock(lck, fsp);
if (!ret) {
DEBUG(0,(remove_oplock: failed to remove share oplock for 
-file %s fnum %d, dev = %x, inode = %.0f\n,
+file %s fnum %d, 0x%x/%.0f\n,
 fsp-fsp_name, fsp-fnum, (unsigned int)dev,
 (double)inode));
}
@@ -292,8 +294,8 @@
files_struct *fsp = NULL;
 
if( DEBUGLVL( 3 ) ) {
-   dbgtext( initial_break_processing: called for dev = 0x%x, 
inode = %.0f file_id = %lu\n,
-   (unsigned int)dev, (double)inode, file_id);
+   dbgtext( initial_break_processing: called for 0x%x/%.0f/%u\n,
+   (unsigned int)dev, (double)inode, (int)file_id);
dbgtext( Current oplocks_open (exclusive = %d, levelII = 
%d)\n,
exclusive_oplocks_open, level_II_oplocks_open );
}
@@ -403,9 +405,9 @@
/* De-linearize incoming message. */
message_to_share_mode_entry(msg, buf);
 
-   DEBUG(10, (Got oplock async level 2 break message from pid %d: 
0x%x/%.0f/%d\n,
-  (int)procid_to_pid(src), (unsigned int)msg.dev, 
(double)msg.inode,
-  (int)msg.share_file_id));
+   DEBUG(10, (Got oplock async level 2 break message from pid %d: 
0x%x/%.0f/%lu\n,
+  (int)procid_to_pid(src), (unsigned int)msg.dev,
+  (double)msg.inode, msg.share_file_id));
 
fsp = initial_break_processing(msg.dev, msg.inode,
   msg.share_file_id);
@@ -490,9 +492,9 @@
/* De-linearize incoming message. */
message_to_share_mode_entry(msg, buf);
 
-   DEBUG(10, (Got oplock break message from pid %d: 0x%x/%.0f/%d\n,
-  (int)procid_to_pid(src), (unsigned int)msg.dev, 
(double)msg.inode,
-  (int)msg.share_file_id));
+   DEBUG(10, (Got oplock break message from pid %d: 0x%x/%.0f/%lu\n,
+  (int)procid_to_pid(src), (unsigned int)msg.dev,
+  (double)msg.inode, 

svn commit: samba r15447 - branches/SAMBA_3_0/source/script trunk/source/script

2006-05-04 Thread jpeach
Author: jpeach
Date: 2006-05-05 03:07:00 + (Fri, 05 May 2006)
New Revision: 15447

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15447

Log:
Teach smbd -b to emit the sizes of a few more types that
might be interesting. Push the spacing across a bit so that
it all lines up nicely.

Modified:
   branches/SAMBA_3_0/source/script/mkbuildoptions.awk
   trunk/source/script/mkbuildoptions.awk


Changeset:
Modified: branches/SAMBA_3_0/source/script/mkbuildoptions.awk
===
--- branches/SAMBA_3_0/source/script/mkbuildoptions.awk 2006-05-05 02:06:37 UTC 
(rev 15446)
+++ branches/SAMBA_3_0/source/script/mkbuildoptions.awk 2006-05-05 03:07:00 UTC 
(rev 15447)
@@ -242,14 +242,21 @@
# add code to display the various type sizes
print/* Output the sizes of the various types */;
printoutput(screen, \\\nType sizes:\\n\);;
-   printoutput(screen, \   sizeof(char):%lu\\n\,(unsigned 
long)sizeof(char));;
-   printoutput(screen, \   sizeof(int): %lu\\n\,(unsigned 
long)sizeof(int));;
-   printoutput(screen, \   sizeof(long):%lu\\n\,(unsigned 
long)sizeof(long));;
-   printoutput(screen, \   sizeof(uint8):   %lu\\n\,(unsigned 
long)sizeof(uint8));;
-   printoutput(screen, \   sizeof(uint16):  %lu\\n\,(unsigned 
long)sizeof(uint16));;
-   printoutput(screen, \   sizeof(uint32):  %lu\\n\,(unsigned 
long)sizeof(uint32));;
-   printoutput(screen, \   sizeof(short):   %lu\\n\,(unsigned 
long)sizeof(short));;
-   printoutput(screen, \   sizeof(void*):   %lu\\n\,(unsigned 
long)sizeof(void*));;
+   printoutput(screen, \   sizeof(char): 
%lu\\n\,(unsigned long)sizeof(char));;
+   printoutput(screen, \   sizeof(int):  
%lu\\n\,(unsigned long)sizeof(int));;
+   printoutput(screen, \   sizeof(long): 
%lu\\n\,(unsigned long)sizeof(long));;
+   print #if HAVE_LONGLONG
+   printoutput(screen, \   sizeof(long long):
%lu\\n\,(unsigned long)sizeof(long long));;
+   print #endif
+   printoutput(screen, \   sizeof(uint8):
%lu\\n\,(unsigned long)sizeof(uint8));;
+   printoutput(screen, \   sizeof(uint16):   
%lu\\n\,(unsigned long)sizeof(uint16));;
+   printoutput(screen, \   sizeof(uint32):   
%lu\\n\,(unsigned long)sizeof(uint32));;
+   printoutput(screen, \   sizeof(short):
%lu\\n\,(unsigned long)sizeof(short));;
+   printoutput(screen, \   sizeof(void*):
%lu\\n\,(unsigned long)sizeof(void*));;
+   printoutput(screen, \   sizeof(size_t):   
%lu\\n\,(unsigned long)sizeof(size_t));;
+   printoutput(screen, \   sizeof(off_t):
%lu\\n\,(unsigned long)sizeof(off_t));;
+   printoutput(screen, \   sizeof(ino_t):
%lu\\n\,(unsigned long)sizeof(ino_t));;
+   printoutput(screen, \   sizeof(dev_t):
%lu\\n\,(unsigned long)sizeof(dev_t));;
 
##
# add code to give information about modules

Modified: trunk/source/script/mkbuildoptions.awk
===
--- trunk/source/script/mkbuildoptions.awk  2006-05-05 02:06:37 UTC (rev 
15446)
+++ trunk/source/script/mkbuildoptions.awk  2006-05-05 03:07:00 UTC (rev 
15447)
@@ -242,14 +242,21 @@
# add code to display the various type sizes
print/* Output the sizes of the various types */;
printoutput(screen, \\\nType sizes:\\n\);;
-   printoutput(screen, \   sizeof(char):%lu\\n\,(unsigned 
long)sizeof(char));;
-   printoutput(screen, \   sizeof(int): %lu\\n\,(unsigned 
long)sizeof(int));;
-   printoutput(screen, \   sizeof(long):%lu\\n\,(unsigned 
long)sizeof(long));;
-   printoutput(screen, \   sizeof(uint8):   %lu\\n\,(unsigned 
long)sizeof(uint8));;
-   printoutput(screen, \   sizeof(uint16):  %lu\\n\,(unsigned 
long)sizeof(uint16));;
-   printoutput(screen, \   sizeof(uint32):  %lu\\n\,(unsigned 
long)sizeof(uint32));;
-   printoutput(screen, \   sizeof(short):   %lu\\n\,(unsigned 
long)sizeof(short));;
-   printoutput(screen, \   sizeof(void*):   %lu\\n\,(unsigned 
long)sizeof(void*));;
+   printoutput(screen, \   sizeof(char): 
%lu\\n\,(unsigned long)sizeof(char));;
+   printoutput(screen, \   sizeof(int):  
%lu\\n\,(unsigned long)sizeof(int));;
+   printoutput(screen, \   sizeof(long): 
%lu\\n\,(unsigned long)sizeof(long));;
+   print #if HAVE_LONGLONG
+   printoutput(screen, \   sizeof(long long):
%lu\\n\,(unsigned long)sizeof(long long));;
+   print #endif
+   print

svn commit: samba r15448 - branches/SAMBA_3_0/source branches/SAMBA_3_0/source/client branches/SAMBA_3_0/source/tdb trunk/source trunk/source/client

2006-05-04 Thread jpeach
Author: jpeach
Date: 2006-05-05 05:39:57 + (Fri, 05 May 2006)
New Revision: 15448

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=15448

Log:
New autoconf macro to test for sysconf variables.

Modified:
   branches/SAMBA_3_0/source/aclocal.m4
   branches/SAMBA_3_0/source/client/smbspool.c
   branches/SAMBA_3_0/source/configure.in
   branches/SAMBA_3_0/source/tdb/spinlock.c
   trunk/source/aclocal.m4
   trunk/source/client/smbspool.c
   trunk/source/configure.in


Changeset:
Modified: branches/SAMBA_3_0/source/aclocal.m4
===
--- branches/SAMBA_3_0/source/aclocal.m42006-05-05 03:07:00 UTC (rev 
15447)
+++ branches/SAMBA_3_0/source/aclocal.m42006-05-05 05:39:57 UTC (rev 
15448)
@@ -770,3 +770,21 @@
old_LDFLAGS=;
export LDFLAGS;
 ])
+
+dnl SMB_CHECK_SYSCONF(varname)
+dnl Tests whether the sysconf(3) variable varname is available.
+AC_DEFUN([SMB_CHECK_SYSCONF],
+[
+AC_CACHE_CHECK([for sysconf($1)],
+   samba_cv_SYSCONF$1,
+   [
+   AC_TRY_LINK([#include unistd.h],
+   [ return sysconf($1) == -1 ? 1 : 0; ],
+   [ samba_cv_SYSCONF$1=yes ],
+   [ samba_cv_SYSCONF$1=no ])
+   ])
+
+if test x$samba_cv_SYSCONF$1 = xyes ; then
+   AC_DEFINE(SYSCONF$1, 1, [Whether sysconf($1) is available])
+fi
+])

Modified: branches/SAMBA_3_0/source/client/smbspool.c
===
--- branches/SAMBA_3_0/source/client/smbspool.c 2006-05-05 03:07:00 UTC (rev 
15447)
+++ branches/SAMBA_3_0/source/client/smbspool.c 2006-05-05 05:39:57 UTC (rev 
15448)
@@ -23,7 +23,6 @@
 
 #include includes.h
 
-#define PW_MAX_BUF_SIZE  sysconf(_SC_GETPW_R_SIZE_MAX)
 #define TICKET_CC_DIR/tmp
 #define CC_PREFIXkrb5cc_ /* prefix of the ticket cache */
 #define CC_MAX_FILE_LEN  24   

Modified: branches/SAMBA_3_0/source/configure.in
===
--- branches/SAMBA_3_0/source/configure.in  2006-05-05 03:07:00 UTC (rev 
15447)
+++ branches/SAMBA_3_0/source/configure.in  2006-05-05 05:39:57 UTC (rev 
15448)
@@ -2702,22 +2702,11 @@
AC_DEFINE(REPLACE_READDIR,1,[replace readdir])
 fi
 
-AC_CACHE_CHECK([for sysconf(_SC_NGROUPS_MAX)],samba_cv_SYSCONF_SC_NGROUPS_MAX,[
-AC_TRY_RUN([#include unistd.h
-main() { exit(sysconf(_SC_NGROUPS_MAX) == -1 ? 1 : 0); }],
-samba_cv_SYSCONF_SC_NGROUPS_MAX=yes,samba_cv_SYSCONF_SC_NGROUPS_MAX=no,samba_cv_SYSCONF_SC_NGROUPS_MAX=cross)])
-if test x$samba_cv_SYSCONF_SC_NGROUPS_MAX = xyes; then
-AC_DEFINE(SYSCONF_SC_NGROUPS_MAX,1,[Whether sysconf(_SC_NGROUPS_MAX) is 
available])
-fi
+SMB_CHECK_SYSCONF(_SC_NGROUPS_MAX)
+SMB_CHECK_SYSCONF(_SC_NPROC_ONLN)
+SMB_CHECK_SYSCONF(_SC_NPROCESSORS_ONLN)
+SMB_CHECK_SYSCONF(_SC_PAGESIZE)
 
-AC_CACHE_CHECK([for sysconf(_SC_NPROC_ONLN)],samba_cv_SYSCONF_SC_NPROC_ONLN,[
-AC_TRY_RUN([#include unistd.h
-main() { exit(sysconf(_SC_NPROC_ONLN) == -1 ? 1 : 0); }],
-samba_cv_SYSCONF_SC_NPROC_ONLN=yes,samba_cv_SYSCONF_SC_NPROC_ONLN=no,samba_cv_SYSCONF_SC_NPROC_ONLN=cross)])
-if test x$samba_cv_SYSCONF_SC_NPROC_ONLN = xyes; then
-AC_DEFINE(SYSCONF_SC_NPROC_ONLN,1,[Whether sysconf(_SC_NPROC_ONLN) is 
available])
-fi
-
 AC_CACHE_CHECK([for root],samba_cv_HAVE_ROOT,[
 AC_TRY_RUN([main() { exit(getuid() != 0); }],

samba_cv_HAVE_ROOT=yes,samba_cv_HAVE_ROOT=no,samba_cv_HAVE_ROOT=cross)])

Modified: branches/SAMBA_3_0/source/tdb/spinlock.c
===
--- branches/SAMBA_3_0/source/tdb/spinlock.c2006-05-05 03:07:00 UTC (rev 
15447)
+++ branches/SAMBA_3_0/source/tdb/spinlock.c2006-05-05 05:39:57 UTC (rev 
15448)
@@ -268,11 +268,19 @@
 
 static int this_is_smp(void)
 {
-#if defined(HAVE_SYSCONF)  defined(SYSCONF_SC_NPROC_ONLN)
+#if defined(HAVE_SYSCONF)
+
+#if defined(SYSCONF_SC_NPROC_ONLN)
 return (sysconf(_SC_NPROC_ONLN)  1) ? 1 : 0;
+#elif defined(SYSCONF_SC_NPROCESSORS_ONLN)
+return (sysconf(_SC_NPROCESSORS_ONLN)  1) ? 1 : 0;
 #else
return 0;
 #endif
+
+#else
+   return 0;
+#endif
 }
 
 /*

Modified: trunk/source/aclocal.m4
===
--- trunk/source/aclocal.m4 2006-05-05 03:07:00 UTC (rev 15447)
+++ trunk/source/aclocal.m4 2006-05-05 05:39:57 UTC (rev 15448)
@@ -770,3 +770,21 @@
old_LDFLAGS=;
export LDFLAGS;
 ])
+
+dnl SMB_CHECK_SYSCONF(varname)
+dnl Tests whether the sysconf(3) variable varname is available.
+AC_DEFUN([SMB_CHECK_SYSCONF],
+[
+AC_CACHE_CHECK([for sysconf($1)],
+   samba_cv_SYSCONF$1,
+   [
+   AC_TRY_LINK([#include unistd.h],
+   [ return sysconf($1) == -1 ? 1 : 0; ],
+   [ samba_cv_SYSCONF$1=yes ],
+   [ samba_cv_SYSCONF$1=no ])
+   ])
+
+if test x$samba_cv_SYSCONF$1 = xyes ; then
+