RE: [SAMBA] Share's accès : how to?

2007-05-15 Thread BACQUEZ
Ok for the hidding, but how do I have to configure the ufold in samba?
I'have try to give only the accès for the users with the line 'valid users'
but the other have right too.
I can't give this right : root:group_name 770.. because the user1 have
reading acces. 
Or a can give userX:root 770 (with X the number of the user) and add line in
samba : 'read list' and 'write list'?

David BACQUEZ
__
-Message d'origine-
De : [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] De la
part de Dennis McLeod
Envoyé : mardi 15 mai 2007 17:32
À : samba@lists.samba.org
Objet : RE: [SAMBA] Share's accès : how to?

This is one way:
http://www.spinics.net/lists/samba/msg65921.html 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
BACQUEZ
Sent: Tuesday, May 15, 2007 7:40 AM
To: samba@lists.samba.org
Subject: [SAMBA] Share's accès : how to?

I have configure this folder share in samba :

 

[share_name]

Path = /home/folder

 

With this accès : share root:group_name 2770

 

In my group “group_name”, I’ve user1, user2, user3.

 

Therefore the 3 users have complete acces in this folder. But in this one I
have to add other folder shared :

- /home/folder/ufold1
- /home/folder/ufold2



But I want the user1 have only an acces in the ufold1 and not the fold2 (and
not seeing it) ; and the user2 and user3 acces in the ufold2 and only see
this one in the folder /home/folder/.

How can I do that? 

 

thank

 

 

 

 

David BACQUEZ

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] _really_ disable netbios

2007-05-15 Thread Asier Baranguán

Pim Zandbergen escribió:


I have disabled NetBIOS over TCP/IP on our network, both for
Windows and for Samba hosts.

Samba hosts have these directives in their smb.conf

disable netbios = yes
smb ports = 445

But I still see NetBIOS broadcasts and responses coming from Samba hosts,
probably because they are still running nmbd.

Can I just shut nmbd down or does it still have use?


That's an interesting setup...

What's the point of not using netbios? any advantage in terms of speed or browsing 
facilities?


Are you using WINS?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] SAMBA: Share specific log files

2007-05-15 Thread Srini

Hi all,

We are trying to print the log messages pertaining to each share in a
different log file for auditing purposes.

We are using Samba v3.0.20b.

We are trying to modify the file
smbd/service.c::make_connection_snum() function by changing the log
file full path. The code changes that is done are as follows:

  char logfilefullpath[70];
  char sharename[256];

  safe_strcpy_fn (__FILE__, __LINE__ ,logfilefullpath,
"/log/sharenet/", sizeof ("/log/sharenet/"));
  safe_strcat_fn
(__FILE__,__LINE__,logfilefullpath,lp_servicename(snum),
sizeof("/log/sharenet/")+sizeof(lp_servicename(snum)));
  safe_strcat_fn (__FILE__,__LINE__,logfilefullpath,".log",
sizeof("/log/sharenet/")+sizeof(lp_servicename(snum))+sizeof(".log"));

  safe_strcpy_fn
(__FILE__,__LINE__,sharename,lp_servicename(snum),
sizeof("/log/sharenet/")+sizeof(lp_servicename(snum)));
  lp_set_logfile(logfilefullpath);
  safe_strcpy_fn
(__FILE__,__LINE__,debugf,logfilefullpath,sizeof(logfilefullpath));

  if( DEBUGLVL( IS_IPC(conn) ? 3 : 1 ) ) {
  dbgtext( "%s (%s) ", get_remote_machine_name(),
conn->client_address );
  dbgtext( "%s", srv_is_signing_active() ? "signed " : "");
  dbgtext( "connect to service %s ", lp_servicename(snum) );
  dbgtext( "initially as user %s ", user );
  dbgtext( "(uid=%d, gid=%d) ", (int)geteuid(), (int)getegid() );
  dbgtext( "(pid %d)\n", (int)sys_getpid() );
  }

We have done a similar code snipped in the relevant portion of the
code in open_file part of Samba as well. However we find that the log
file randomly gets written to the default log file (log file= variable
in smb.conf) or sometimes to the share specific log file (that we have
attempted above). It looks like that this was a buffering problem and
so we tried to put in dbgflush() routine as well after calling
dbgtext() macro. Still with no success...

Has anyone tried to modify the source code to generate share specific
log trails - either by modifying the source code or without? If so,
can the experts guide us on this?

Thanks in advance for all your inputs and help,

Srini
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba 4 and OpenLDAP (and other LDAP servers)

2007-05-15 Thread Andrew Bartlett
On Mon, 2007-05-14 at 19:20 +0100, Alex Crow wrote:
> All, devels,

Can you please repost this to samba-technical?  I almost missed this
mail entirely. 

> 
> I also realise there is another approach, ie that of using delegation to
> other LDAP servers, but I'd love to know what the current state of
> thinking is for v4.

In the meantime, have a look at the wiki:

http://wiki.samba.org/index.php/Samba4/LDAP_Backend

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org
Samba Developer, Red Hat Inc.  http://redhat.com


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Chinese lanuage problem

2007-05-15 Thread DR. Lee - NS1

Hi,

Furthermore, if I use SSH to login to Linux and then use Secure File
Transfer facility to see the files
in Linux, both TW and CN filenames are displayed correctly. 

 
>  
> Hi,
> 
> I just install the Samba on RH Linux and it works as 
> expected. Wonderful idea and nice piece of work.
> 
> (1) Open a PC window and Samba window and drag the file to the Linux 
> 
> This works and it will display filename of simplied 
> Chinese (GB2312) and Taiwan Chinese (Big5) ok.
> 
> (2) Under DOS envioroment, both fileanmes displayed correctly.
> 
> (3) Next I use ftp under cmd command of the window and 
> transfer the file to Linux :
> 
>  (a) export LANG=zh_CN.GB2312  
> 
>   the TW filename displayed a lot gibberish
> the CN filename displayed ok
>
>  (b) export LANG=zh_TW.BIG5 or LANG=en_GB.ISO-8859.1
> 
>the TW filename displayed almost right 
> but not quit 
>the CN filename displayed ok
> 
>  (4) Next, I see these files under Samba
> 
>All filename can not be displayed correctly.
> 
> Do I have to set something in Samba to see the filename 
> correctly? Any help appreciated.
> 
> Rgds,
> Kfl. HK.
> 
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
> 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Chinese lanuage problem

2007-05-15 Thread DR. Lee - NS1
 
Hi,

I just install the Samba on RH Linux and it works as expected. Wonderful
idea and nice piece of work.

(1) Open a PC window and Samba window and drag the file to the Linux 

This works and it will display filename of simplied Chinese (GB2312)
and Taiwan Chinese (Big5) ok.

(2) Under DOS envioroment, both fileanmes displayed correctly.

(3) Next I use ftp under cmd command of the window and transfer the file
to Linux :

 (a) export LANG=zh_CN.GB2312  

the TW filename displayed a lot gibberish
the CN filename displayed ok
   
 (b) export LANG=zh_TW.BIG5 or LANG=en_GB.ISO-8859.1

   the TW filename displayed almost right but not
quit 
   the CN filename displayed ok

 (4) Next, I see these files under Samba

   All filename can not be displayed correctly.

Do I have to set something in Samba to see the filename correctly? Any
help appreciated.

Rgds,
Kfl. HK.




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Wierd interaction between Samba and HTTP?

2007-05-15 Thread Jeff Coffler

Hi,

O/S: Fedora Core 6

When running samba-3.0.24-1 (downloaded from Samba WWW site), all is 
well.  But when updating Samba via 'yum update' to samba-3.0.24-5.fc6, 
things get bad.  Things are equally bad when I try the next BETA release 
of Samba.


When things don't work, I try to mount a share from Windows, like:

   net use z: \\\jeff

and it fails.  When it fails, I get the following in my *HTTP* log:

192.168.1.97 - - [15/May/2007:17:20:34 -0700] "OPTIONS / HTTP/1.1" 200 - 
"-" "Microsoft-WebDAV-MiniRedir/5.1.2600"
192.168.1.97 - - [15/May/2007:17:20:34 -0700] "PROPFIND /jeff HTTP/1.1" 
405 300 "-" "Microsoft-WebDAV-MiniRedir/5.1.2600"
192.168.1.97 - - [15/May/2007:17:22:32 -0700] "OPTIONS / HTTP/1.1" 200 - 
"-" "Microsoft-WebDAV-MiniRedir/5.1.2600"
192.168.1.97 - - [15/May/2007:17:22:32 -0700] "PROPFIND /jeff HTTP/1.1" 
405 300 "-" "Microsoft-WebDAV-MiniRedir/5.1.2600"


This problem goes away when I run samba-3.0.24-1.  So, somehow, some 
change in Samba is causing a Windows mount request to somehow get 
redirected to http ...


I did some googling, and found a suggestion that I turn off service 
webclient on the Windows side.  Doing this makes all mounts fail all the 
time.


What was changed in more recent builds of Samba that affects this?  What 
do I need to do so that I can reliably mount Samba shares from Windows 
(which are unrelated to HTTP)?


Thanks for any help,

   -- Jeff
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Windows File Versions

2007-05-15 Thread John Drescher

On 5/15/07, n. b. <[EMAIL PROTECTED]> wrote:

Yes, sorry for the confusion, I meant the version info resouce in dlls and
executables.


For that I believe the simplest method is to mount the windows share
on the unix machine using cifs and then use a windows program and wine
to extract the version info.

Here is a link to windows code that does this:

http://www.codeproject.com/file/VersionInfo.asp

I doubt that it will take any effort getting this type of program to
run under wine.

If you do not want to use wine the work is harder as you need to read
the PE header and then scan for the binary resources in the file.

I hope this helps,
John
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] user are able to access "/" partition.

2007-05-15 Thread Dhillon, Gurjit
Thanks every one for the support.

My problem got solved. For those who are not aware of my issue, I will
just repeat in short. My issue was, all the users were able to browse
/root/ partition. I was looking to stop this, there was no sharing
declare for /root/ , still it was able to browse by users. 

Solution I implemented is below, [Home] section is unchanged, I have
just added [root] section. After adding this section, users cannot
access /root/ partitions. 

[homes]
comment = Home Directories
read only = No
max connections = 5
browseable = No

[root]
comment = root dirctory
path = %S

Thanks to every one again


Gurjit Dhillon

-Original Message-
From: Tim Bates [mailto:[EMAIL PROTECTED] 
Sent: Monday, May 14, 2007 10:44 PM
To: samba@lists.samba.org
Subject: Re: [Samba] user are able to access "/" partition.

Dhillon, Gurjit wrote:
> We have the system customized, there are few user whose home directory
> is under /corp/home/gurjit or /fem/home/gurjit1 or
/family/home/gurjit2.
> so I cannot mention path = /home/ 
>
> How can I go about this now ??
>   
Isn't there a variable for the user's home dir? Something like %H? Check

the man page for smb.conf (there's an online version if you don't have
it).
You can also include files based on groups ("include = 
/etc/samba/homes-%G.conf" is a real example of what I use at work to get

different forced permissions for each group).

TB


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Windows File Versions

2007-05-15 Thread John Drescher

On 5/15/07, n. b. <[EMAIL PROTECTED]> wrote:

If I needed to connect from Unix to a Windows machine and check the version
of a particular file on that machine, how would I go about this with Samba?


What are windows file versions?  You mean the version info resource in
dlls and other executables?

John
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Windows File Versions

2007-05-15 Thread n. b.
If I needed to connect from Unix to a Windows machine and check the version
of a particular file on that machine, how would I go about this with Samba?

Thanks, 

N.B.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Cannot join Win XP SP2 client to domain

2007-05-15 Thread Asier Baranguán
El Martes, 15 de Mayo de 2007 21:42, Jason Baker escribió:

> [global]
> unix charset = LOCALE
> workgroup = mydomain
> netbios name = myserver
> server string = Domain Controller running %v
> interfaces = eth1, lo
> bind interfaces only = yes
> os level = 255
> preferred master = yes
> local master = yes
> domain master = yes
> security = user
> time server = yes
> username map = /etc/samba/smbusers
> wins support = yes
> encrypt passwords = yes
> pam password change = yes
> name resolve order = wins bcast hosts
> winbind nested groups = no
> passdb backend = ldapsam:"ldap://127.0.0.1 ldap://myserver";

Are you really using that LDAP servers? The error is mostly related to LDAP 
more than Samba... perhaps ACL problems.

> add user script = /etc/smbldap-tools/smbldap-useradd -m "%u"

It's not related to this error, but if your users are going to be Windows 
users you shuld add an '-a' here

> add group script = /etc/smbldap-tools/smbldap-groupadd -p "%g"

And perhaps here, to make the group mappings automatically
-- 
Asier.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Cannot join Win XP SP2 client to domain

2007-05-15 Thread Jason Baker

Thomas,
I have some more info:
I CD'd into my SMB-LDAP scripts directory (the IdealX scripts) and ran 
/./smbldap-useradd -w test$ /and received the following error:


   Could not find base dn, to get next uidNumber at
   /etc/smbldap-tools//smbldap_tools.pm line 1046,  line 283.

I would have to believe the reason I cannot add a machine to the domain 
remotely from the client is because of this script failing (see smb.conf)


   [global]
   unix charset = LOCALE
   workgroup = mydomain
   netbios name = myserver
   server string = Domain Controller running %v
   interfaces = eth1, lo
   bind interfaces only = yes
   os level = 255
   preferred master = yes
   local master = yes
   domain master = yes
   security = user
   time server = yes
   username map = /etc/samba/smbusers
   wins support = yes
   encrypt passwords = yes
   pam password change = yes
   name resolve order = wins bcast hosts
   winbind nested groups = no
   passdb backend = ldapsam:"ldap://127.0.0.1 ldap://myserver";
   ldap passwd sync = Yes
   ldap suffix = dc=myserver,dc=com
   ldap admin dn = cn=Manager,dc=myserver,dc=com
   ldap ssl = no
   ldap group suffix = ou=Groups
   ldap user suffix = ou=People
   ldap machine suffix = ou=People
   ldap idmap suffix = ou=Idmap
   idmap backend = ldap:ldap://127.0.0.1/
   idmap uid = 1-2
   idmap gid = 1-2
   map acl inherit = yes
   add user script = /etc/smbldap-tools/smbldap-useradd -m "%u"
   #delete user script = /etc/smbldap-tools/smbldap-userdel "%u"
   add machine script = /etc/smbldap-tools/smbldap-useradd -w "%u"
   add group script = /etc/smbldap-tools/smbldap-groupadd -p "%g"
   #delete group script = /etc/smbldap-tools/smbldap-groupdel "%g"
   add user to group script =
   /etc/smbldap-tools/smbldap-groupmod -m "%u" "%g"
   delete user from group script =
   /etc/smbldap-tools/smbldap-groupmod -x "%u" "%g"
   set primary group script =
   /etc/smbldap-tools/smbldap-usermod -g "%g" "%u"
   domain logons = yes
   log file = /var/log/samba/log.%m
   log level = 1
   syslog = 0
   max log size = 50
   #smb ports = 139 445
   smb ports = 139
   hosts allow = 127.0.0.1 172.16.0.0/255.255.0.0
   # User profiles and home directories
   logon drive = U:
   logon path = \\%L\profiles\%U
   logon script = %U.bat
   large readwrite = no
   read raw = no
   write raw = no
   printcap name = /etc/printcap
   load printers = no
   printing =
   template shell = /bin/false
   winbind use default domain = no


*Jason Baker
*/IT Coordinator/


*Glastender Inc.*
5400 North Michigan Road
Saginaw, Michigan 48604 USA
800.748.0423
Phone: 989.752.4275 ext. 228
Fax: 989.752.
www.glastender.com 

-BEGIN GEEK CODE BLOCK- 
Version: 3.1

GIT$ d- s: a C++$ LU+++$ P+ L++>L !E--- W+++ N o? K?
w !O M !V PS PE++ Y? PGP- t 5? X+ R+ tv+ b- DI-- D++ G e+ h--- 
r+++ y+++

--END GEEK CODE BLOCK--



Thomas Ußmüller wrote:

Dear Jason,

Thanks a lot. This solved my problem.

When creating the user and machine accounts directly with LDAP 
everything works fine. But when either trying to directly connect the 
machine (i.e. without creating the account manually) or when using the 
User Manager for domains, it doesn't work.


I have noticed that the smbldap script create the accounts in my 
directory. But interestingly the SambaSamAccount objectclass is not 
added by the scripts. Is this behaviour normal? Shall the scripts or 
samba add the attributes?


I think one possible solution might be to modify the scripts, so that 
they add the needed objectclass/ attributes. What do the others in the 
group think about that solution?


Maybe you can tell me a bit more about your server. Which backend do 
you use? Do you use the smbldap scripts as well? Maybe we can find the 
similarities in our machines which cause the problem and fix it.


Regards
Thomas

Jason Baker schrieb:
When trying to join the client to the domain I get an error message 
that the user does not exist (although connecting to the shares 
works with this username). Furthermore the user has the 
SeMachineAccountPrivilege set. 
I had this same problem. I ended up creating the machine accounts via 
the LDAP Account Manager. I never did figure out why I cannot add a 
machine to the domain through the Windows Network ID Wizard. Have you 
tried to create the machine account manually on the server, and then 
join the machine to the domain?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://list

Re: [Samba] Cannot join Win XP SP2 client to domain

2007-05-15 Thread Jason Baker
Maybe you can tell me a bit more about your server. Which backend do 
you use? Do you use the smbldap scripts as well? Maybe we can find the 
similarities in our machines which cause the problem and fix it. 

Thomas,
I installed Samba 3.0.23d-30 from an RPM to a CentOS 4 server. This 
machine is running an LDAP backend (OpenLDAP 2.3).


When I first got the server configured and up and running for the first 
time, I was able to join a machine to the domain from the client being 
joined. I accomplished this though the Windows Network ID Wizard. But 
then after finishing up the configuration on the server and getting 
ready to join all my workstations it quit working.
Suddenly it complained that my root password had expired and I was no 
longer able to join any workstations remotely. I got the root password 
problem figured out, but still could not join machines remotely.
I have LDAP Account Manager installed and it is working just great. I 
also have the IdealX SMB-LDAP scripts installed. These no longer work 
either.
Maybe the problem is in the scripts. I will investigate further and post 
my findings.


*Jason Baker
*/IT Coordinator/


*Glastender Inc.*
5400 North Michigan Road
Saginaw, Michigan 48604 USA
800.748.0423
Phone: 989.752.4275 ext. 228
Fax: 989.752.
www.glastender.com 

-BEGIN GEEK CODE BLOCK- 
Version: 3.1

GIT$ d- s: a C++$ LU+++$ P+ L++>L !E--- W+++ N o? K?
w !O M !V PS PE++ Y? PGP- t 5? X+ R+ tv+ b- DI-- D++ G e+ h--- 
r+++ y+++

--END GEEK CODE BLOCK--



Thomas Ußmüller wrote:

Dear Jason,

Thanks a lot. This solved my problem.

When creating the user and machine accounts directly with LDAP 
everything works fine. But when either trying to directly connect the 
machine (i.e. without creating the account manually) or when using the 
User Manager for domains, it doesn't work.


I have noticed that the smbldap script create the accounts in my 
directory. But interestingly the SambaSamAccount objectclass is not 
added by the scripts. Is this behaviour normal? Shall the scripts or 
samba add the attributes?


I think one possible solution might be to modify the scripts, so that 
they add the needed objectclass/ attributes. What do the others in the 
group think about that solution?


Maybe you can tell me a bit more about your server. Which backend do 
you use? Do you use the smbldap scripts as well? Maybe we can find the 
similarities in our machines which cause the problem and fix it.


Regards
Thomas

Jason Baker schrieb:
When trying to join the client to the domain I get an error message 
that the user does not exist (although connecting to the shares 
works with this username). Furthermore the user has the 
SeMachineAccountPrivilege set. 
I had this same problem. I ended up creating the machine accounts via 
the LDAP Account Manager. I never did figure out why I cannot add a 
machine to the domain through the Windows Network ID Wizard. Have you 
tried to create the machine account manually on the server, and then 
join the machine to the domain?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.25 plugin changes

2007-05-15 Thread Paul Griffith


Greetings,

Before I start digging into making our local passdb plugin work with Samba  
3.0.25, is there any heads up I need to know about?
I tried to compile the example plugin in samba-3.0.25/examples/pdb, but it  
fails. See below for a sample of the error messages.


If I try to compile the same example that comes with Samba v3.0.24,  the  
example code compiles without any issues?


Any pointers?
I am running Centos v4.4 & gcc v3.4.6.

If add ' source/tdb/include' to my compile to pickup tdb.h, even more  
errors! :(



Thanks
Paul


#1 - first try

[EMAIL PROTECTED] pdb]$ make
libtool --mode=compile gcc  -I../../source -I../../source/include  
-I../../source/ubiqx -I../../source/smbwrapper -Wall -g  
-I/usr/include/heimdal -fPIC -c test.c
 gcc -I../../source -I../../source/include -I../../source/ubiqx  
-I../../source/smbwrapper -Wall -g -I/usr/include/heimdal -fPIC -c test.c   
-fPIC -DPIC -o .libs/test.o

In file included from test.c:21:
../../source/include/includes.h:636:17: tdb.h: No such file or directory
In file included from ../../source/include/includes.h:637,
 from test.c:21:
../../source/include/util_tdb.h:35: error: syntax error before "TDB_DATA"
../../source/include/util_tdb.h:35: warning: no semicolon at end of struct  
or union
../../source/include/util_tdb.h:36: warning: type defaults to `int' in  
declaration of `TDB_LIST_NODE'
../../source/include/util_tdb.h:36: warning: data definition has no type  
or storage class

../../source/include/util_tdb.h:44: error: syntax error before '*' token
../../source/include/util_tdb.h:44: warning: type defaults to `int' in  
declaration of `tdb_search_keys'
../../source/include/util_tdb.h:44: warning: data definition has no type  
or storage class

../../source/include/util_tdb.h:45: error: syntax error before '*' token
../../source/include/util_tdb.h:48: error: syntax error before '*' token
../../source/include/util_tdb.h:51: error: syntax error before '*' token
../../source/include/util_tdb.h:53: error: syntax error before '*' token
../../source/include/util_tdb.h:58: error: syntax error before "TDB_DATA"
../../source/include/util_tdb.h:60: error: syntax error before "TDB_DATA"
../../source/include/util_tdb.h:61: error: syntax error before  
"tdb_fetch_bystring"
../../source/include/util_tdb.h:61: warning: type defaults to `int' in  
declaration of `tdb_fetch_bystring'
../../source/include/util_tdb.h:61: warning: data definition has no type  
or storage class
../../source/include/util_tdb.h:67: error: syntax error before  
"make_tdb_data"
../../source/include/util_tdb.h:67: warning: type defaults to `int' in  
declaration of `make_tdb_data'
../../source/include/util_tdb.h:67: warning: data definition has no type  
or storage class
../../source/include/util_tdb.h:68: error: syntax error before  
"string_tdb_data"
../../source/include/util_tdb.h:68: warning: type defaults to `int' in  
declaration of `string_tdb_data'
../../source/include/util_tdb.h:68: warning: data definition has no type  
or storage class

../../source/include/util_tdb.h:69: error: syntax error before "TDB_DATA"
../../source/include/util_tdb.h:71: error: syntax error before '*' token
../../source/include/util_tdb.h:73: error: syntax error before '*' token
../../source/include/includes.h:638:21: tdbback.h: No such file or  
directory

In file included from ../../source/librpc/gen_ndr/srvsvc.h:3,
 from ../../source/librpc/gen_ndr/wkssvc.h:3,
 from ../../source/include/smb.h:315,
 from ../../source/include/includes.h:661,
 from test.c:21:
../../source/librpc/gen_ndr/security.h:1:26: ndr/security.h: No such file  
or directory

In file included from ../../source/include/includes.h:689,
 from test.c:21:
../../source/include/rpc_eventlog.h:63: error: syntax error before  
"TDB_CONTEXT"
../../source/include/rpc_eventlog.h:63: warning: no semicolon at end of  
struct or union
../../source/include/rpc_eventlog.h:65: error: syntax error before '}'  
token
../../source/include/rpc_eventlog.h:65: warning: type defaults to `int' in  
declaration of `ELOG_TDB'
../../source/include/rpc_eventlog.h:65: warning: data definition has no  
type or storage class

In file included from ../../source/nsswitch/winbind_client.h:1,
 from ../../source/include/includes.h:706,
 from test.c:21:
../../source/nsswitch/winbind_nss_config.h:39:27: system/passwd.h: No such  
file or directory
../../source/nsswitch/winbind_nss_config.h:40:28: system/filesys.h: No  
such file or directory
../../source/nsswitch/winbind_nss_config.h:41:28: system/network.h: No  
such file or directory

In file included from ../../source/include/includes.h:788,
 from test.c:21:
../../source/include/proto.h:249: error: syntax error before '*' token
../../source/include/proto.h:249: warning: type defaults to `int' in  
declaration of `get_account_pol_tdb'
../../source/include/proto.h:249: war

Re: [Samba] Cannot join Win XP SP2 client to domain

2007-05-15 Thread Thomas Ußmüller

Dear Jason,

Thanks a lot. This solved my problem.

When creating the user and machine accounts directly with LDAP 
everything works fine. But when either trying to directly connect the 
machine (i.e. without creating the account manually) or when using the 
User Manager for domains, it doesn't work.


I have noticed that the smbldap script create the accounts in my 
directory. But interestingly the SambaSamAccount objectclass is not 
added by the scripts. Is this behaviour normal? Shall the scripts or 
samba add the attributes?


I think one possible solution might be to modify the scripts, so that 
they add the needed objectclass/ attributes. What do the others in the 
group think about that solution?


Maybe you can tell me a bit more about your server. Which backend do you 
use? Do you use the smbldap scripts as well? Maybe we can find the 
similarities in our machines which cause the problem and fix it.


Regards
Thomas

Jason Baker schrieb:
When trying to join the client to the domain I get an error message 
that the user does not exist (although connecting to the shares works 
with this username). Furthermore the user has the 
SeMachineAccountPrivilege set. 
I had this same problem. I ended up creating the machine accounts via 
the LDAP Account Manager. I never did figure out why I cannot add a 
machine to the domain through the Windows Network ID Wizard. Have you 
tried to create the machine account manually on the server, and then 
join the machine to the domain?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] _really_ disable netbios

2007-05-15 Thread Jeremy Allison
On Tue, May 15, 2007 at 08:24:37PM +0200, Pim Zandbergen wrote:
> I have disabled NetBIOS over TCP/IP on our network, both for
> Windows and for Samba hosts.
> 
> Samba hosts have these directives in their smb.conf
> 
> disable netbios = yes
> smb ports = 445
> 
> But I still see NetBIOS broadcasts and responses coming from Samba hosts,
> probably because they are still running nmbd.
> 
> Can I just shut nmbd down or does it still have use?

No, if everything is in DNS just shut it down.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] _really_ disable netbios

2007-05-15 Thread Pim Zandbergen

I have disabled NetBIOS over TCP/IP on our network, both for
Windows and for Samba hosts.

Samba hosts have these directives in their smb.conf

disable netbios = yes
smb ports = 445

But I still see NetBIOS broadcasts and responses coming from Samba hosts,
probably because they are still running nmbd.

Can I just shut nmbd down or does it still have use?

Thanks,
Pim

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] 3.0.25: non-Kerberos authentication fails when security=ads?

2007-05-15 Thread James Ralston
I have several servers running Samba, all using security = ads mode.

After updating one of the servers to 3.0.25, non-Kerberos login
attempts now fail, although Kerberos logins work just fine.  E.g.:

$ smbclient -k -L //my-server
OS=[Unix] Server=[Samba 3.0.25-0.0]

Sharename   Type  Comment
-     ---
...

$ smbclient -U username -L //www-dev-eval
Password: 
session setup failed: NT_STATUS_LOGON_FAILURE

If I look in the logs on my-server, this is what I see for the
non-Kerberos attempt:

[2007/05/15 12:47:10, 0] auth/auth_domain.c:domain_client_validate(257)
  domain_client_validate: unable to validate password for user username in 
domain OURDOMAIN to Domain controller DC.AD.EXAMPLE.COM. Error was 
NT_STATUS_NO_SUCH_USER.

This is bogus; username exists, because servers running Samba 3.0.23d
work just fine:

$ smbclient -k -L //other-server
OS=[Unix] Server=[Samba 3.0.23d-0.1]

Sharename   Type  Comment
-     ---
...

$ smbclient -U username -L //other-server
Password: 
Domain=[OURDOMAIN] OS=[Unix] Server=[Samba 3.0.23d-0.1]

Sharename   Type  Comment
-     ---
...

Looking at Bugzilla, I see many bug reports filed against 3.0.25, most
of which involve authentication issues.  I don't see a report for this
particular issue, though.

Is anyone else seeing this problem?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] winbindd tdb cache

2007-05-15 Thread simo
On Tue, 2007-05-15 at 18:41 +0200, Bernd Schubert wrote:
> Hi,
> 
> we are running into a problem that winbindd sometimes caches negative
> entries into its tdb database. We are still investigating the reason for
> that.
> However, another question, when winbindd caches an entry into its tdb
> database, is there any timeout for those tdb entries? While walking through
> the code I don't see any relation between winbindd_cache.c and idmap_tdb.c.
> Is winbindd_cache.c only for memory related caching?
> 
> If I would like to add a cache timeout to the tdb database, what would be
> the best approach?
> 
> Thanks in advance,
> Bernd
> 
> 
> PS: We are still using samba-3.0.22, and for several reasons also don't want
> to update our customer systems.

In 3.0.25 we have reworked the idmap subsystem and we made available
both positive and negative cache timeouts for the cache (which is
separate from idmap_tdb itself now).

If you can;t change version you can probably borrow the code from there
somehow. I think I also posted some code for 3.0.24 a few months ago
that implemented a negative caching system with timeout, before we
decided for the major rework.
Search the archives.

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer
email: [EMAIL PROTECTED]
http://samba.org

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] winbindd tdb cache

2007-05-15 Thread Bernd Schubert
Hi,

we are running into a problem that winbindd sometimes caches negative
entries into its tdb database. We are still investigating the reason for
that.
However, another question, when winbindd caches an entry into its tdb
database, is there any timeout for those tdb entries? While walking through
the code I don't see any relation between winbindd_cache.c and idmap_tdb.c.
Is winbindd_cache.c only for memory related caching?

If I would like to add a cache timeout to the tdb database, what would be
the best approach?

Thanks in advance,
Bernd


PS: We are still using samba-3.0.22, and for several reasons also don't want
to update our customer systems.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Problem accessing SWAT with Firefox

2007-05-15 Thread Mike Stewart
Hi, not sure if I'm posting in the right place but couldn't find a SWAT forum. 

I've just changed my PC but the new one has exactly the same settings (IP, 
computername, login, password) as the old one, however I am getting an error 
when I try to access any of my Samba servers from Firefox (2.0.0.3) :- 

" 400 Server ErrorSamba is configured to deny access from this client 
Check your "hosts allow" and "hosts deny" options in smb.conf" 

Not sure what's gone wrong, it worked perfectly OK on the old PC, I'm using 
bookmarks imported to FF from the old PC. I _can_ access all the servers using 
IE6 ! 

Any ideas ? 

TIA 

Mike 






-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [SAMBA] Share's accès : how to?

2007-05-15 Thread Dennis McLeod
This is one way:
http://www.spinics.net/lists/samba/msg65921.html 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
BACQUEZ
Sent: Tuesday, May 15, 2007 7:40 AM
To: samba@lists.samba.org
Subject: [SAMBA] Share's accès : how to?

I have configure this folder share in samba :

 

[share_name]

Path = /home/folder

 

With this accès : share root:group_name 2770

 

In my group “group_name”, I’ve user1, user2, user3.

 

Therefore the 3 users have complete acces in this folder. But in this one I
have to add other folder shared :

- /home/folder/ufold1
- /home/folder/ufold2



But I want the user1 have only an acces in the ufold1 and not the fold2 (and
not seeing it) ; and the user2 and user3 acces in the ufold2 and only see
this one in the folder /home/folder/.

How can I do that? 

 

thank

 

 

 

 

David BACQUEZ

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbd hangs on solaris

2007-05-15 Thread Volker Lendecke
On Tue, May 15, 2007 at 03:38:43PM +0200, Johnny Dahlen wrote:
> My first suspicion too, but I figured it then would timeout eventually. Have
> had it "running" at least a couple of hours without any timeout.
> 
> FWIW, with samba provided with solaris, v3.0.21b, there's no hang using the
> same config file.

Sorry, no idea then.

Volker


pgp3KfWpIxjO8.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[SAMBA] Share's accès : how to?

2007-05-15 Thread BACQUEZ
I have configure this folder share in samba :

 

[share_name]

Path = /home/folder

 

With this accès : share root:group_name 2770

 

In my group “group_name”, I’ve user1, user2, user3.

 

Therefore the 3 users have complete acces in this folder. But in this one I
have to add other folder shared :

- /home/folder/ufold1
- /home/folder/ufold2



But I want the user1 have only an acces in the ufold1 and not the fold2 (and
not seeing it) ; and the user2 and user3 acces in the ufold2 and only see
this one in the folder /home/folder/.

How can I do that? 

 

thank

 

 

 

 

David BACQUEZ

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba3 FreeBSD pdc

2007-05-15 Thread Dave

Hello,
   Most of the docs i've seen for implementing samba3 as a pdc are for 
Linux. And for a most part they work with FreeBSD. I've not got the box 
production yet, i have several questions and was wondering if anyone used 
samba3 on fbsd as a pdc? If so i'd appreciate hearing from you. I want to 
set up single sign-on authentication, and password changing with the fbsd 
system. So that a user can ssh in to the box change the password it's 
reflected everywhere or the user does it from windows. I am not getting the 
passwd chat string right. And some of the scripts add machine to group, 
scripts i haven't been able to get them working with fbsd, this is version 
6.2 btw, i don't think i'm going to have the issue of not being able to add 
a $ in the username.

Thanks.
Dave.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Expired passwords since upgrading to 3.0.25 from 3.0.24

2007-05-15 Thread Jean-Jacques Moulis

We upgraded ours samba servers to 3.0.25
All of them run on Solaris 10 machines.
They are PDC or printservers of differents Domains.
We are using smbpasswd files (not LDAP or tdbsam).

Two servers (the oldest ones configurationwise)
are exhibiting the following problem.

Windows user are greated with:
 "Your password expires today. Do you want to change it now?"

/export/samba/bin/pdbedit -L -v inetadm
Unix username:inetadm
NT username:
Account Flags:[UX ]
User SID: S-1-5-21--20246
Primary Group SID:S-1-5-21--513
Full Name:Informationsnät kurskonto
Home Directory:   \\port\inetadm
HomeDir Drive:H:
Logon Script: LOGON.BAT
Profile Path: \\port\inetadm\NT\profile
Domain:   ISYEDU
Account desc:
Workstations:
Munged dial:
Logon time:   0
Logoff time:  Sun, 04 Dec 0468 16:30:07 MET
Kickoff time: Sun, 04 Dec 0468 16:30:07 MET
Password last set:Tue, 15 May 2007 10:14:46 MEST
Password can change:  Tue, 15 May 2007 10:14:46 MEST
Password must change: Sun, 04 Dec 0468 16:30:07 MET
Last bad password   : 0
Bad password count  : 0
Logon hours : FF


A working server gives


/export/samba/bin/pdbedit -L -v inetadm
Unix username:inetadm
NT username:
Account Flags:[UX ]
User SID: S-1-5-21-...-20246
Primary Group SID:S-1-5-21-...-513
Full Name:Informationsnät kurskonto
Home Directory:   \\port\inetadm
HomeDir Drive:H:
Logon Script: LOGON.BAT
Profile Path: \\port\inetadm\NT\profile
Domain:   ISYEDU
Account desc:
Workstations:
Munged dial:
Logon time:   0
Logoff time:  Tue, 19 Jan 2038 04:14:07 MET
Kickoff time: Tue, 19 Jan 2038 04:14:07 MET
Password last set:Wed, 05 Nov 2003 13:43:24 MET
Password can change:  Wed, 05 Nov 2003 13:43:24 MET
Password must change: Tue, 19 Jan 2038 04:14:07 MET
Last bad password   : 0
Bad password count  : 0
Logon hours : FF

The Servers are identicals (situed at differents sites)
with the same smb.conf and smbpasswd file
but with differents tdb files

I don't know what to check next and where the "Password must change" value
is stored

I will for the time being regress to a patched 3.0.24.



-- 
Jean-Jacques   Moulis  Tel:  (013) 281684
ISYFax:  (013) 139282
Linköping UniversityE-mail: [EMAIL PROTECTED]
581 83 Linköping
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] security=server

2007-05-15 Thread Volker Lendecke
On Tue, May 15, 2007 at 03:30:06PM +0200, Miso Liptak wrote:
> Yes, I have read about it..
> I'm thinking of moving to this option, but it means that I need to be
> a member of the domain right?

Yes.

Volker


pgpGYji0ImTib.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smbd hangs on solaris

2007-05-15 Thread Johnny Dahlen

My first suspicion too, but I figured it then would timeout eventually. Have
had it "running" at least a couple of hours without any timeout.

FWIW, with samba provided with solaris, v3.0.21b, there's no hang using the
same config file.

Regards,
/Johnny

On 5/15/07, Volker Lendecke <[EMAIL PROTECTED]> wrote:


On Tue, May 15, 2007 at 01:19:13PM +0200, Johnny Dahlen wrote:
> In trying to get samba on solaris 10 to integrate in our AD, I installed
the
> version from blastwave. The problem I have now is that smbd seems to
hang
> when I start it with smbd -D.
>
> The log output with -d 10 is probably too long to post, but here is the
last
> rows before the hang:

DNS timeout?

Volker



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] security=server

2007-05-15 Thread Miso Liptak

On 5/15/07, Volker Lendecke <[EMAIL PROTECTED]> wrote:

On Tue, May 15, 2007 at 03:07:19PM +0200, Miso Liptak wrote:
> security=server stopped working for me after upgrading to 3.0.25-1
> from Debian unstable.
> The 3.0.24-6 works fine.
> The error I'm getting with 3.0.25-1 is NT_STATUS_LOGON_FAILURE.
> Is this a know problem?

No, it isn't. Please file a bug report at
bugzilla.samba.org, please upload your smb.conf and a debug
level 10 log of smbd.


Ok



But please be aware that 'security=server' is highly
deprecated since Samba 2.0 times when we figured out how
'security=domain' works.


Yes, I have read about it..
I'm thinking of moving to this option, but it means that I need to be
a member of the domain right?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] security=server

2007-05-15 Thread Volker Lendecke
On Tue, May 15, 2007 at 03:07:19PM +0200, Miso Liptak wrote:
> security=server stopped working for me after upgrading to 3.0.25-1
> from Debian unstable.
> The 3.0.24-6 works fine.
> The error I'm getting with 3.0.25-1 is NT_STATUS_LOGON_FAILURE.
> Is this a know problem?

No, it isn't. Please file a bug report at
bugzilla.samba.org, please upload your smb.conf and a debug
level 10 log of smbd.

But please be aware that 'security=server' is highly
deprecated since Samba 2.0 times when we figured out how
'security=domain' works.

Volker


pgpomoO5VJL9h.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] security=server

2007-05-15 Thread Miso Liptak

Hi,
security=server stopped working for me after upgrading to 3.0.25-1
from Debian unstable.
The 3.0.24-6 works fine.
The error I'm getting with 3.0.25-1 is NT_STATUS_LOGON_FAILURE.
Is this a know problem?
Thanks
m.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba NT MD4 password check problem

2007-05-15 Thread Maginot Junior

Hi all!

Im having a problem on my network when users try to logon.
After trying to logon the follow error is generated on the log.user file.


smb_password_ok: NT MD4 password check failed


to correct this problem what I done was change the login password in
smbpasswd for that user to the same password used on the station. (smbpasswd
user )

But how to make any passwd change on the clients to automatic change the
password on smbpasswd  (Or some way that the netlogon share continues to
work even if the user change the machine logon) ?


cheers [ ]'s
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba and failover (drbd + heartbeat)

2007-05-15 Thread Ralf Gross
Hi,

I've setup two server A + B (debian etch) with drbd + heartbeat in
active/passive mode.  If the primary server A fails, the shared
storage is mounted on B, the virtual ip A-vip moves to the new primary
B and samba is started by heartbeat. This works well, but I'm not sure
which samba files should be identical on both server. Both have a
dedicated machine account at the moment. 

primary:   A, 192.168.0.50 (active)
secondary: B, 192.168.0.60 (passive)
cluster/failover:  A-vip, 192.168.0.70 (dns name and ip that the
client use to access the
shares)

Should I just kick all samba files on B and sync them with the files
of the primary server A (maybe rsync or inotify, I don't use
drbdlinks)?

I *think* this would be the necessary directories:

/etc/samba
/var/cache/samba
/var/lib/samba
/var/log/samba
/var/run/samba
/var/spool/samba

I've not set any host specific paramters in smb.conf, I use the
dns alias A-vip and the virtal-ip for the netbios alias and interface
settings.

BTW: the machine account was created for the hostname of the primary
server A, not the DNS alias A-vip, will this lead to a problem?

Ralf
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] smbd hangs on solaris

2007-05-15 Thread Volker Lendecke
On Tue, May 15, 2007 at 01:19:13PM +0200, Johnny Dahlen wrote:
> In trying to get samba on solaris 10 to integrate in our AD, I installed the
> version from blastwave. The problem I have now is that smbd seems to hang
> when I start it with smbd -D.
> 
> The log output with -d 10 is probably too long to post, but here is the last
> rows before the hang:

DNS timeout?

Volker


pgpGpQzl6kr4u.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] smbd hangs on solaris

2007-05-15 Thread Johnny Dahlen

In trying to get samba on solaris 10 to integrate in our AD, I installed the
version from blastwave. The problem I have now is that smbd seems to hang
when I start it with smbd -D.

The log output with -d 10 is probably too long to post, but here is the last
rows before the hang:

[2007/05/15 13:05:15, 5] lib/charcnv.c:(81)
 Substituting charset '646' for LOCALE
[2007/05/15 13:05:15, 5] lib/charcnv.c:(81)
 Substituting charset '646' for LOCALE
[2007/05/15 13:05:16, 7] param/loadparm.c:(5112)
 lp_servicenumber: couldn't find printers
[2007/05/15 13:05:16, 3] printing/pcap.c:(117)
 reloading printcap cache
[2007/05/15 13:05:16, 5] printing/print_cups.c:(71)
 reloading cups printcap cache
[2007/05/15 13:05:16, 10] printing/print_cups.c:(51)
 cups server left to default localhost


Truss gives this as the last lines:

sysinfo(SI_HOSTNAME, "sbl107.mydomain.se", 256)  = 14
open64("/var/run/name_service_door", O_RDONLY)  Err#2 ENOENT
sysinfo(SI_SRPC_DOMAIN, "afa.se", 1024) = 7
door_info(4, 0xFFBC9850)= 0
door_call(4, 0xFFBC9838)= 0
sysinfo(SI_HOSTNAME, "sbl107.mydomain.se", 256)  = 14
open64("/var/run/name_service_door", O_RDONLY)  Err#2 ENOENT
sysinfo(SI_SRPC_DOMAIN, "afa.se", 1024) = 7
door_info(4, 0xFFBC4190)= 0
door_call(4, 0xFFBC4178)= 0
sysinfo(SI_HOSTNAME, "sbl107.mydomain.se", 256)  = 14
open64("/var/run/name_service_door", O_RDONLY)  Err#2 ENOENT
mmap(0x, 65536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANON, -1, 0) =
0xFDFC
lwp_park(0x, 0) (sleeping...)


And finally, pstack , gives:

febbc4a0 lwp_park (0, 0, 0)
febb676c cond_wait_queue (fe811018, fee267b8, 0, 0, 0, 0) + 28
feb58ad4 nss_get_backend_u (ffbc3cdc, fe810a08, 0, 0, fe810a10, fe811018) +
124
feb59484 nss_search (4, febe77dc, febec8ac, ffbc3cf8, 1, febe4278) + e8
feda76dc _switch_gethostbyname_r (ffbc5f9c, 3943bc, 3943d0, 2120, fee31990,
feda2bfc) + 50
feda300c _door_gethostbyname_r (ffbc5f9c, 3943bc, 3943d0, 2120, fee31990,
ffbc5f9c) + 108
feda63cc _get_hostserv_inetnetdir_byname (0, ffbc5e9c, ffbc5e94, fedc7a70,
ffbc5e2c, 0) + 844
feda2488 gethostbyname_r (ffbc5f9c, 3943bc, 3943d0, 2120, fee31990,
fee2b070) + a0
ff36a704 ldap_pvt_gethostbyname_a (feb453a8, ffbc5f88, ffbc5f84, ffbc5f80,
ffbc5f7c, 22294) + 24
ff36a890 ldap_pvt_get_fqdn (ffbc5f9c, ff38f7c4, 22144, feb52d0c, ff38f7c0,
15fc) + 68
ff369164 ldap_int_initialize (ff38f738, 23850, ff38f738, 0, ff38c984, 0) +
48
ff34bd9c ldap_create (1400, ffbc61c4, 40c30, 0, ff38f738, ff38c984) + 58
ff34bff4 ldap_init (398140, 185, 4e2, 4d8, 136, 0) + 4
fe3e45f8 openConnection (ffbc7270, 398140, 3992d8, a, 399ccc, 1) + 344
fe3e3a8c makeConnection (ffbc7adc, 398140, 3992d8, ffbc7b4c, a, 399ccc) +
1f0
fe3e5974 __s_api_getConnection (0, 397ad0, 0, ffbc7b4c, 0, 399ccc) + 448
fe3da624 get_current_session (399c88, 1, fe3db0e4, 3, 1d4, ) + 30
fe3db2b8 search_state_machine (399c88, 7, 0, 397a90, 0, fe404000) + 184
fe3dbd58 __ns_ldap_list (fe42f16c, ffbc8ee8, 399c6c, fe42e9a4, 0, 0) + 220
fe41b6c4 _nss_ldap_lookup (399c50, ffbc93b8, fe42f16c, ffbc8ee8, 0,
fe41beac) + 44
fe41552c getbyname (399c50, ffbc93b8, febe8bc0, 18d1c, feb58a84, fe42e000) +
258
feb59570 nss_search (fe4152d4, febe77dc, febec8ac, ffbc93b8, 1, febe4278) +
1d4
feda76dc _switch_gethostbyname_r (ffbcb65c, 3943bc, 3943d0, 2120, fee31990,
feda2bfc) + 50
.
.
.


Samba version: 3.0.23b
Solaris 10

Any ideas why this process hangs?

Regards,
/Johnny
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] SMB share specific log file creation

2007-05-15 Thread Srini

Hi all,

We are trying to print the log messages pertaining to each share in a
different log file for auditing purposes.

We are using Samba v3.0.20b.

We are trying to modify the file
smbd/service.c::make_connection_snum() function by changing the log
file full path. The code changes that is done are as follows:

   char logfilefullpath[70];
   char sharename[256];

   safe_strcpy_fn (__FILE__, __LINE__ ,logfilefullpath,
"/log/sharenet/", sizeof ("/log/sharenet/"));
   safe_strcat_fn
(__FILE__,__LINE__,logfilefullpath,lp_servicename(snum),
sizeof("/log/sharenet/")+sizeof(lp_servicename(snum)));
   safe_strcat_fn (__FILE__,__LINE__,logfilefullpath,".log",
sizeof("/log/sharenet/")+sizeof(lp_servicename(snum))+sizeof(".log"));

   safe_strcpy_fn
(__FILE__,__LINE__,sharename,lp_servicename(snum),
sizeof("/log/sharenet/")+sizeof(lp_servicename(snum)));
   lp_set_logfile(logfilefullpath);
   safe_strcpy_fn
(__FILE__,__LINE__,debugf,logfilefullpath,sizeof(logfilefullpath));

   if( DEBUGLVL( IS_IPC(conn) ? 3 : 1 ) ) {
   dbgtext( "%s (%s) ", get_remote_machine_name(),
conn->client_address );
   dbgtext( "%s", srv_is_signing_active() ? "signed " : "");
   dbgtext( "connect to service %s ", lp_servicename(snum) );
   dbgtext( "initially as user %s ", user );
   dbgtext( "(uid=%d, gid=%d) ", (int)geteuid(), (int)getegid() );
   dbgtext( "(pid %d)\n", (int)sys_getpid() );
   }

We have done a similar code snipped in the relevant portion of the
code in open_file part of Samba as well. However we find that the log
file randomly gets written to the default log file (log file= variable
in smb.conf) or sometimes to the share specific log file (that we have
attempted above). It looks like that this was a buffering problem and
so we tried to put in dbgflush() routine as well after calling
dbgtext() macro. Still with no success...

Has anyone tried to modify the source code to generate share specific
log trails - either by modifying the source code or without? If so,
can the experts guide us on this?

Thanks in advance for all your inputs and help,

Srini
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Error in winbind.log

2007-05-15 Thread Alberto Di Fede

Hi everybody,

in my opensuse 10.2 with a samba 3.0.23d, installed and updated via yast, i
constantly get this error:

[2007/05/15 10:34:39, 0] lib/util_sock.c:write_data(564)
 write_data: write failure. Error = Connection reset by peer
[2007/05/15 10:34:39, 0] libsmb/clientgen.c:write_socket(138)
 write_socket: Error writing 104 bytes to socket 17: ERRNO = Connection
reset by peer
[2007/05/15 10:34:39, 0] libsmb/clientgen.c:cli_send_smb(168)
 Error writing 104 bytes to client. -1 (Connection reset by peer)
[2007/05/15 10:34:39, 1] rpc_client/cli_pipe.c:cli_rpc_pipe_open()
 cli_rpc_pipe_open: cli_nt_create failed on pipe \lsarpc to machine
pdc.  Error was Write error: Connection reset by peer
[2007/05/15 10:34:39, 1] rpc_client/cli_pipe.c:cli_rpc_pipe_open()
 cli_rpc_pipe_open: cli_nt_create failed on pipe \lsarpc to machine
pdc  Error was Write error: Connection reset by peer
[2007/05/15 10:34:39, 1] nsswitch/winbindd_group.c:getgrgid_got_sid(457)
 could not lookup sid
[2007/05/15 10:34:39, 1] nsswitch/winbindd_group.c:getgrgid_got_sid(457)
 could not lookup sid

The machine is joind to an AD win2003 domain and the permissions on the
shared file system are set with posix acls.

What's going on?

Btw i have these kind of errors even on other linux distros with 3.0.23c/d
builds.

I suspect this is at the root of serious stability problems we had lately,
but i still need further investigations to asses that.

Any help or suggestion would be really appreciated.

Thanks in advance.


Albe
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] A regression in 3.0.25rc3?

2007-05-15 Thread Alex Crow
Gerry,

I could not assign it myself, however it's bug number 4616.

Cheers

Alex

On Thu, 2007-05-10 at 08:07 -0500, Gerald (Jerry) Carter wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Alex Crow wrote:
> > Dear Samba team,
> > 
> > I have installed the above release of samba and I am 
> > seeing the same problem as decribed in this old posting when
> > I try to add permissions to printers:
> > 
> > http://lists.samba.org/archive/samba/2006-July/123177.html
> > 
> > Interesting that this was last seen in 3.0.23. 3.0.24 
> > behaves as expected.
> 
> I had to make changes to one of the rpc calls to get WinXP x64
> to work as it was seeing this failure.
> 
>   "The program cannot open the required dialog box
>   because it cannot determine wheter the computer
>   named fileserv is joined to a domain.  Close this
>   message and try again."
> 
> But I tested on 32bit clients from NT4 through Vista and found
> no regressions with the change.  Can you give me some more info
> about your setup?  Server, clients, etc...
> 
> 
> 
> 
> cheers, jerry
> =
> Samba--- http://www.samba.org
> Centeris ---  http://www.centeris.com
> "What man is a man who does not make the world better?"  --Balian
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.4.6 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iD8DBQFGQxklIR7qMdg1EfYRAr5sAJ4mP3JdsAzCu1MKWCxtp5S/1pA7SQCfQpBV
> ehsQUD/pccIc8skEuaEaJbM=
> =cFSZ
> -END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba