[Samba] wbinfo net ads different results

2007-06-20 Thread Ng, Chin-Kiong
Hi,

 

Could this a bug or misconfiguration?

'wbinfo -g' only return partial result compare to 'net ads group', thus
unable to authenticate

 

 

# wbinfo -g | wc -l

4998

# net ads group | wc -l

9114

# getent group | wc -l

5047[+ local groups]

 

 

Take a group dl.samplegroup, which is in the DC, but missing from wbinfo

 

# net ads group | grep dl.samplegroup

dl.samplegroup[found]

# wbinfo -g | grep dl.samplegroup

[not found]

# getent group | grep dl.samplegroup

[not found]

 

BUT, these works

 

# getent group dl.samplegroup

dl.samplegroup:*:15053: user1,user2,

# wbinfo -n dl.samplegroup

S-1-5-21-839012768-2468886555-2058922813-7287 Domain Group (2) # wbinfo
-Y S-1-5-21-839012768-2468886555-2058922813-7287

15053

 

 

So what's goes wrong?

 

 

My configurations are as follow, quite simple:

 

smb.conf



[global]

workgroup = MYDOMAIN

netbios name = MYSERVER

server string = MYSERVER

interfaces = eth0 lo

bind interfaces only = Yes

security = ads

password server = mydc1 mydc2

realm = MYDOMAIN.COM

 

log file = /var/log/samba/%m.log

log level = 3 winbind:5 nmb:5

max log size = 1

 

encrypt passwords = Yes

update encrypted = Yes

smb passwd file = /etc/samba/smbpasswd # NOTE: Use these with
'encrypt passwords' and 'smb passwd file' above.

passwd program = /usr/bin/passwd %u

passwd chat = *New*UNIX*password* %n\n
*ReType*new*UNIX*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*

 

# Avoid other domains in forest

allow trusted domains = no

 

winbind cache time = 300

winbind uid = 1-10

winbind gid = 1-10

winbind enum users = no

winbind enum groups = yes

winbind use default domain = yes

winbind trusted domains only = no

 

name resolve order = lmhosts wins host bcast

 

wins server = mydc1 mydc2

wins proxy = yes

wins support = no

dns proxy = No

oplocks = Yes

level2 oplocks = Yes

read only = yes

browseable = yes

printable = No

 

 

nsswitch.conf

=

passwd: files winbind

group:  files winbind

 

 

krb5.conf

=

[logging]

 default = FILE:/var/log/krb5libs.log

 kdc = FILE:/var/log/krb5kdc.log

 admin_server = FILE:/var/log/kadmind.log

 

[libdefaults]

 default_realm = MYDOMAIN.COM

 dns_lookup_realm = false

 dns_lookup_kdc = false

 ticket_lifetime = 24h

 forwardable = yes

 

[realms]

 MYDOMAIN.COM = {

  kdc = mydc1.MYDOMAIN.com:88

  admin_server = mydc1.MYDOMAIN.com:749

  default_domain = MYDOMAIN.com

 }

 

[domain_realm]

 .MYDOMAIN.com = MYDOMAIN.COM

 MYDOMAIN.com = MYDOMAIN.COM

 

[kdc]

 profile = /etc/kdc.conf

 

[appdefaults]

 pam = {

   debug = false

   ticket_lifetime = 36000

   renew_lifetime = 36000

   forwardable = true

   krb4_convert = false

 }

 

 

Checking with Domain admin, it turns out that the groups does not appear
in wbinfo are of Group Type: 'Distribution' in Win2k AD? The other is of
'Security'.

 

My system:

CentOS 5 2.6.18-8.el5

 

Samba:

samba-common-3.0.23c-2.el5.2.0.2

samba-3.0.23c-2.el5.2.0.2

 

 

Thanks.

Cheers,

CK Ng

 

 

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Profile deleted - additional info

2007-06-20 Thread Mario Gzuk
Hi again,
no one knows something about this behavior? The same happens if you add
the Domain-guest account to an other local group.

I will be happy if some one can point me to some documentation or give
some hints about that. I have searched the internet but with this
keywords you find million of pages  with zero solutions.

greetings mario


Am Montag, den 18.06.2007, 11:39 +0200 schrieb Mario Gzuk:
 Hi,
 strange things or normal behavior? We have a samba domain and
 Domain-guests accounts that are limited to log on to only some
 machines, on this machines the Domain-guests are in the lokal admin
 group. 
 All data inc settings will be deleted if you add this user to the local
 admin group (if the user was logged in one time before...).
 Here the steps how you can rebuild this behavior:
 1.) log on with an Domain-guests account and make some settings (and
 store some data under Documents and Settings)
 2.) log off and add this Domain-guests account to the local admin
 group
 3.) log on again with this Domain-guests account - all data and all
 settings are gone. I was not able to find any of the files stored in
 this account (under Documents and Settings) and all settings are set
 to the default.
 
 Is this normal?
 
 If the account is a Domain-user (or higher) you can add and delete
 them from the local admin group without the lost of data. So this only
 appears to the Domain-guests.
 Maybe that is one of the special hidden features from M$ which let the
 people go berserk
 
 greetings and thanks for any hints!
 
 mario gzuk
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Problems with SAMBA as PDC and Windows XP SP2 as client

2007-06-20 Thread Personal Técnico

Hi!!

We are trying to configure a Debian Linux Server as Samba Server (Domain 
Controller) and a Windows XP (with Service Pack 2) as client. We have 
configured Windows into the Samba Domain (in other words, we have been 
able to agregate the machine into the domain), but when we restart 
Windows and try to login with a samba user (from linux server) 
(selecting the Domain), we received a message telling us that the domain 
is blocked or not available.


We send you our smb.conf file. Linux Samba Server is running in a Debian 
Etch, with version 3.0.24-6etch4


Thanks for you help!!
[global]
dos charset = CP850
unix charset = UTF-8
display charset = LOCALE
workgroup = DOMAIN_NAME
realm = 
netbios name = MACHINE_NAME
netbios aliases = 
netbios scope = 
server string = %h server
interfaces = eth1
bind interfaces only = Yes
security = USER
auth methods = 
encrypt passwords = Yes
update encrypted = No
client schannel = Auto
server schannel = Auto
allow trusted domains = Yes
map to guest = Never
null passwords = No
obey pam restrictions = Yes
password server = *
smb passwd file = /etc/samba/smbpasswd
private dir = /etc/samba
passdb backend = smbpasswd:/etc/samba/smbpasswd
algorithmic rid base = 1000
root directory = 
guest account = nobody
enable privileges = Yes
pam password change = No
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n 
*Retype\snew\sUNIX\spassword:* %n\n *password\supdated\ssuccessfully* .
passwd chat debug = No
passwd chat timeout = 2
check password script = 
username map = /etc/samba/smbusers
password level = 0
username level = 0
unix password sync = No
restrict anonymous = 0
lanman auth = Yes
ntlm auth = Yes
client NTLMv2 auth = No
client lanman auth = Yes
client plaintext auth = Yes
preload modules = 
use kerberos keytab = No
log level = 0
syslog = 0
syslog only = No
log file = /var/log/samba/log.%m
max log size = 1000
debug timestamp = Yes
debug hires timestamp = No
debug pid = No
debug uid = No
enable core files = Yes
smb ports = 445 139
large readwrite = Yes
max protocol = NT1
min protocol = CORE
read bmpx = No
read raw = Yes
write raw = Yes
disable netbios = No
reset on zero vc = No
acl compatibility = auto
defer sharing violations = Yes
nt pipe support = Yes
nt status support = Yes
announce version = 4.9
announce as = NT
max mux = 50
max xmit = 16644
name resolve order = lmhosts wins host bcast
max ttl = 259200
max wins ttl = 518400
min wins ttl = 21600
time server = No
unix extensions = Yes
use spnego = Yes
client signing = auto
server signing = No
client use spnego = Yes
enable asu support = No
svcctl list = 
deadtime = 0
getwd cache = Yes
keepalive = 300
kernel change notify = Yes
fam change notify = Yes
lpq cache time = 30
max smbd processes = 0
paranoid server security = Yes
max disk size = 0
max open files = 1
open files database hash size = 10007
socket options = TCP_NODELAY
use mmap = Yes
hostname lookups = No
name cache timeout = 660
load printers = No
printcap cache time = 750
printcap name = 
cups server = 
iprint server = 
disable spoolss = No
addport command = 
enumports command = 
addprinter command = 
deleteprinter command = 
show add printer wizard = Yes
os2 driver map = 
mangling method = hash2
mangle prefix = 1
max stat cache size = 0
stat cache = Yes
machine password timeout = 604800
add user script = 
rename user script = 
delete user script = 
add group script = 
delete group script = 
add user to group script = 
delete user from group script = 
set primary group script = 
add machine script = 
shutdown script = 
abort shutdown script = 
username map script = 
logon script = 
logon path = \\%N\%U\profile
logon drive = 
logon home = \\%N\%U
domain logons = Yes
os level = 64
lm announce = Auto
lm interval = 60
preferred master = Yes
local master = Yes
domain master = Yes
browse list = Yes
enhanced 

Re: [Samba] Problems with SAMBA as PDC and Windows XP SP2 as client

2007-06-20 Thread John Drescher

Is this preventing the user from logging on or loading their profile?


profile acls = No

If it is loading their profile I believe this may be your problem as I
had the same problem a few months ago. Set that to yes. The reason for
this is that WinXPSP2 checks the credentials of the profile match the
user and rejects the profile when it does not match.

John
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Management tool

2007-06-20 Thread Allysson Steve Mota Lacerda

Hi guys,

I need to manage a university which has 900 computers distributed along some
departments and I wanna use a tool to do this.

I'm testing GOsa (www.gosa-project.org) and I wanna know which tools you are
using.

That's all folks.

--
Allysson Steve Mota Lacerda
Administrador de Redes
http://www.stevelacerda.net
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] SMBclient help

2007-06-20 Thread Kossuth Espinosa, Oskar
Hi

I have a question
How do i access a subdirectory of a windows share using smbclient?
The problem is that i have a windows folder \\192.168.1.33\dvds shared
in a windows machine but i want a direct access with smbclient from a
linux machine to the folder \\192.168.1.33\dvds\examples. Is it
possible?? any /etc/fstab setting to do this?
Im using suse linux enterprise server 8 and samba 2.2.8
-- 
Saludos,

Oskar Kossuth E.

Administrador Unix
[EMAIL PROTECTED]
ANTEL telecomunicaciones


Este e-mail y cualquier posible archivo adjunto está dirigido únicamente al 
destinatario del mensaje y contiene información que puede ser confidencial. Si 
Ud. no es el destinatario correcto por favor notifique al remitente 
respondiendo este mensaje y elimine inmediatamente el e-mail y los posibles 
archivos adjuntos al mismo de su sistema. Está prohibida cualquier utilización, 
difusión o copia de este e-mail por cualquier persona o entidad que no sean las 
específicas destinatarias del mensaje. ANTEL no acepta ninguna responsabilidad 
con respecto a cualquier comunicación que haya sido emitida incumpliendo 
nuestra Política de Seguridad de la Información.
. . . . . . . . .
This e-mail and any attachment is confidential and is intended solely for the 
addressee(s). If you are not intended recipient please inform the sender 
immediately, answering this e-mail and delete it as well as the attached files. 
Any use, circulation or copy of this e-mail by any person or entity that is not 
the specific addressee(s) is prohibited. ANTEL is not responsible for any 
communication emitted without respecting our Information Security Policy.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Direct access to subdirectories using smbclient

2007-06-20 Thread Kossuth Espinosa, Oskar
Hi

I have a question
How do i access a subdirectory of a windows share using smbclient?
The problem is that i have a windows folder \\192.168.1.33\dvds shared
in a windows machine but i want a direct access with smbclient from a
linux machine to the folder \\192.168.1.33\dvds\examples. Is it
possible?? any /etc/fstab setting to do this?
Im using suse linux enterprise server 8 and samba 2.2.8

-- 
Saludos,

Oskar Kossuth E.

Administrador Unix
[EMAIL PROTECTED]
ANTEL telecomunicaciones


Este e-mail y cualquier posible archivo adjunto está dirigido únicamente al 
destinatario del mensaje y contiene información que puede ser confidencial. Si 
Ud. no es el destinatario correcto por favor notifique al remitente 
respondiendo este mensaje y elimine inmediatamente el e-mail y los posibles 
archivos adjuntos al mismo de su sistema. Está prohibida cualquier utilización, 
difusión o copia de este e-mail por cualquier persona o entidad que no sean las 
específicas destinatarias del mensaje. ANTEL no acepta ninguna responsabilidad 
con respecto a cualquier comunicación que haya sido emitida incumpliendo 
nuestra Política de Seguridad de la Información.
. . . . . . . . .
This e-mail and any attachment is confidential and is intended solely for the 
addressee(s). If you are not intended recipient please inform the sender 
immediately, answering this e-mail and delete it as well as the attached files. 
Any use, circulation or copy of this e-mail by any person or entity that is not 
the specific addressee(s) is prohibited. ANTEL is not responsible for any 
communication emitted without respecting our Information Security Policy.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Fwd: [Samba] Management tool

2007-06-20 Thread John Drescher

-- Forwarded message --
From: John Drescher [EMAIL PROTECTED]
Date: Jun 20, 2007 9:17 AM
Subject: Re: [Samba] Management tool
To: Allysson Steve Mota Lacerda [EMAIL PROTECTED]


On 6/20/07, Allysson Steve Mota Lacerda [EMAIL PROTECTED] wrote:

Hi guys,

I need to manage a university which has 900 computers distributed along some
departments and I wanna use a tool to do this.

I'm testing GOsa (www.gosa-project.org) and I wanna know which tools you are
using.



For 50 to 100 computers I use a combination of LDAP Account Manager
http://lam.sourceforge.net/

and

webmin http://www.webmin.com/

John


--
John M. Drescher
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba suddenly stops working

2007-06-20 Thread Dr.Peer-Joachim Koch

Hi,

we have 2 file server (SuSE SLES 9 SP3)  running
samba-3.0.20b-3.4 . We have now the situation that one sometime
both server stops working. All smbd process are still visible,
smbstatus is working and so on, but all connected users are unable
to access the shares. Also new connection are not possible.
Currently only a restart of samba  solves the problem.
/var/log/warn  /var/log/messeages is showing nothing.

How can we get more information about this behavior ?
Which debug level might help. We have currently no idea where
to start the debugging and we are also not sure if a simple
update to the current version will help (but we will try it
the next time).

Any idea or help ?

--
Bye,
Peer
_
Max-Planck-Institut fuer Biogeochemie
Dr. Peer-Joachim Koch
Hans-Knöll Str.10Telefon: ++49 3641 57-6705
D-07745 Jena Telefax: ++49 3641 57-7705


smime.p7s
Description: S/MIME Cryptographic Signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems with SAMBA as PDC and Windows XP SP2 as client

2007-06-20 Thread Personal Técnico

John Drescher escribió:

Is this preventing the user from logging on or loading their profile?


profile acls = No

If it is loading their profile I believe this may be your problem as I
had the same problem a few months ago. Set that to yes. The reason for
this is that WinXPSP2 checks the credentials of the profile match the
user and rejects the profile when it does not match.

John
We have changed this parameter to Yes, but we continue with the same 
problems.
Logfile shows the following message: smbd/service.c: 
make_connection_snum(849) Can't become connected user!




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] KDC Lookup errors only on ads joins.

2007-06-20 Thread s_aiello
I have a RedHat Enterprise 4 server with samba 3.0.25a rpms installed 
(downloaded from mirror mentioned on samba.org site). I have configured 
krb5.conf  smb.conf.  I can perform a kinit [EMAIL PROTECTED]  net ads 
status [EMAIL PROTECTED] perfectly fine. But when attempting to net ads 
join [EMAIL PROTECTED], I get an, error on ads_startup: Cannot resolve 
network address for KDC in requested realm, error.  If there is a KDC lookup 
problem, should it not occur globally ? 
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Write access to one user and Read-Only for anyother

2007-06-20 Thread Maginot Junior

Hi!

Im trying here to figure out how to make this to work...

I need that one user, lets say, userfoo be able to write and have all
permissions on the share [memos]... and ALL others who are not userfoo have
only read-only access...

The ideia is that userfoo can upload files to the share and everyone could
read them ...


thanks!


--
Maginot Júnior
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Direct access to subdirectories using smbclient

2007-06-20 Thread Kossuth Espinosa, Oskar
The problem is that for security reasons users must access 
\\192.168.1.33\dvds\examples instead of \\192.168.1.33\dvds
or any other folder below dvds
but the shared folder is \\192.168.1.33\dvds ..
I know that using nautilus or konqueror do what i need, but
want to do it with smbclient or smbmount..

any ideas?


On Wed, 2007-06-20 at 15:45 +0200, Davide Cervella wrote:
 Kossuth Espinosa, Oskar wrote:
  How do i access a subdirectory of a windows share using smbclient?
  The problem is that i have a windows folder \\192.168.1.33\dvds shared
  in a windows machine but i want a direct access with smbclient from a
  linux machine to the folder \\192.168.1.33\dvds\examples. Is it
  possible?? any /etc/fstab setting to do this?
 
 Maybe your problem is not so clear to me, but.. can't you simply issue 
 an smbmount and then change directory?
 
 If you operate in a GUI environment maybe there are different ways to do 
 this thing. For example in Konqueror you can type an URL like this 
 smb://server/dvds/examples.
 
 HTH,
 DaC
-- 
Saludos,

Oskar Kossuth E.

Administrador Unix
[EMAIL PROTECTED]
ANTEL telecomunicaciones


Este e-mail y cualquier posible archivo adjunto está dirigido únicamente al 
destinatario del mensaje y contiene información que puede ser confidencial. Si 
Ud. no es el destinatario correcto por favor notifique al remitente 
respondiendo este mensaje y elimine inmediatamente el e-mail y los posibles 
archivos adjuntos al mismo de su sistema. Está prohibida cualquier utilización, 
difusión o copia de este e-mail por cualquier persona o entidad que no sean las 
específicas destinatarias del mensaje. ANTEL no acepta ninguna responsabilidad 
con respecto a cualquier comunicación que haya sido emitida incumpliendo 
nuestra Política de Seguridad de la Información.
. . . . . . . . .
This e-mail and any attachment is confidential and is intended solely for the 
addressee(s). If you are not intended recipient please inform the sender 
immediately, answering this e-mail and delete it as well as the attached files. 
Any use, circulation or copy of this e-mail by any person or entity that is not 
the specific addressee(s) is prohibited. ANTEL is not responsible for any 
communication emitted without respecting our Information Security Policy.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Write access to one user and Read-Only for anyother

2007-06-20 Thread Adam Tauno Williams
 Im trying here to figure out how to make this to work...
 I need that one user, lets say, userfoo be able to write and have all
 permissions on the share [memos]... and ALL others who are not userfoo have
 only read-only access...
 The ideia is that userfoo can upload files to the share and everyone could
 read them ...

So set the file permissions;  and write list =, etc... in the share
configuration.

-- 
Adam Tauno Williams, Network  Systems Administrator
Consultant - http://www.whitemiceconsulting.com
Developer - http://www.opengroupware.org

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Write access to one user and Read-Only for anyother

2007-06-20 Thread Maginot Junior

the problem is if I set the write list or valid users Im only giving the
permission to those in the list... and the big problem is how to set all
other users to be in the read list ... I dont have group with all inside and
are not going to be any... I tryed with something like

[memos]
  path = /home/memos
  write list = foouser
  read list = !foouser

but this doesnt work There are more them 100 users on this box so only
one have to be able to write on the share and all others have only to be
able to read




On 6/20/07, Adam Tauno Williams [EMAIL PROTECTED] wrote:


 Im trying here to figure out how to make this to work...
 I need that one user, lets say, userfoo be able to write and have all
 permissions on the share [memos]... and ALL others who are not userfoo
have
 only read-only access...
 The ideia is that userfoo can upload files to the share and everyone
could
 read them ...

So set the file permissions;  and write list =, etc... in the share
configuration.

--
Adam Tauno Williams, Network  Systems Administrator
Consultant - http://www.whitemiceconsulting.com
Developer - http://www.opengroupware.org

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba





--
Maginot Júnior
the game of life
LPIC - CCNA - ¿Designer?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Direct access to subdirectories using smbclient

2007-06-20 Thread Chris Smith
On Wednesday 20 June 2007, Kossuth Espinosa, Oskar wrote:
 The problem is that for security reasons users must access
 \\192.168.1.33\dvds\examples instead of \\192.168.1.33\dvds
 or any other folder below dvds
 but the shared folder is \\192.168.1.33\dvds ..
 I know that using nautilus or konqueror do what i need, but
 want to do it with smbclient or smbmount..

Appears that smbclient doesn't do this. A cifs mount does.

 any ideas?

Share the examples folder with a proper set of permissions.

Chris


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Write access to one user and Read-Only for anyother

2007-06-20 Thread Maginot Junior

Hmm now its workin... BUT one more thing, and if I dont want to be prompted
for an user name ?
What I want to do is map the share with the foouser login and username info
and all other who try to view the share could do it at the most transparent
way, with no question for user and password... is that possible?


And thanks for the help, worked great =)

On 6/20/07, Eric Boehm [EMAIL PROTECTED] wrote:


On Wed, Jun 20, 2007 at 11:53:59AM -0300, Maginot Junior wrote:
 Maginot == Maginot Junior [EMAIL PROTECTED] writes:

Maginot the problem is if I set the write list or valid users Im
Maginot only giving the permission to those in the list... and
Maginot the big problem is how to set all other users to be in
Maginot the read list ... I dont have group with all inside and
Maginot are not going to be any... I tryed with something like


[memos]
   path = /home/memos
   write list = foouser
   read list = !foouser

No, you should use

[memos]
   path = /home/memos
   read only = yes
   write list = foouser

This will make it read only except for anyone in the write list. From
man smb.conf

 write list (S)
  This is a list  of  users  that  are  given  read-write
  access  to a service. If the connecting user is in this
  list then they will be given write  access,  no  matter
  what  the  read  only  option  is  set to. The list can
  include group names using the @group syntax.

  Note that if a user is in both the read  list  and  the
  write list then they will be given write access.

  This parameter will not work with the security =  share
  in Samba 3.0. This is by design.


Note the first paragraph -- If the connecting user is in this list
then they will be given write access, no matter what the read only
options is set to.

--
Eric M. Boehm  /\  ASCII Ribbon Campaign
[EMAIL PROTECTED]   \ /  No HTML or RTF in mail
X   No proprietary word-processing
Respect Open Standards / \  files in mail





--
Maginot Júnior
the game of life
LPIC - CCNA - ¿Designer?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Write access to one user and Read-Only for anyother

2007-06-20 Thread Eric Boehm
On Wed, Jun 20, 2007 at 11:53:59AM -0300, Maginot Junior wrote:
 Maginot == Maginot Junior [EMAIL PROTECTED] writes:

Maginot the problem is if I set the write list or valid users Im
Maginot only giving the permission to those in the list... and
Maginot the big problem is how to set all other users to be in
Maginot the read list ... I dont have group with all inside and
Maginot are not going to be any... I tryed with something like


[memos]
   path = /home/memos
   write list = foouser
   read list = !foouser

No, you should use

[memos]
   path = /home/memos
   read only = yes
   write list = foouser

This will make it read only except for anyone in the write list. From
man smb.conf

 write list (S)
  This is a list  of  users  that  are  given  read-write
  access  to a service. If the connecting user is in this
  list then they will be given write  access,  no  matter
  what  the  read  only  option  is  set to. The list can
  include group names using the @group syntax.

  Note that if a user is in both the read  list  and  the
  write list then they will be given write access.

  This parameter will not work with the security =  share
  in Samba 3.0. This is by design.


Note the first paragraph -- If the connecting user is in this list
then they will be given write access, no matter what the read only
options is set to.

-- 
Eric M. Boehm  /\  ASCII Ribbon Campaign
[EMAIL PROTECTED]   \ /  No HTML or RTF in mail
X   No proprietary word-processing
Respect Open Standards / \  files in mail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Write access to one user and Read-Only for anyother

2007-06-20 Thread Maginot Junior

Ok, I will try to be more precise.

This share:

[memos]
 path = /home/memos
 read only = yes
 write list = foouser

must be read by everyone BUT must be write only by the foouser.
With the parameters like above I can login my foouser to get write/read
access and I can log any other user, until now its ok.

But the problem is that its asking for the username and password when I try
to access the share . For a regular user who will only read the files (read
access) this can be a problem because not everyone knows or remember the
password or username (they are tipical users who forget things easy) so What
i want to do is:

at the foouser computer (w2k box) I will Map the Share and set the login and
password so when he wants to upload any file to the share it will be
possible and all he will do will be to open the share ( z:\ )  but this
(the mapping)  will not be done in the other computers so they must not be
ask for a username and password, they must access the share direct (the smb
must recognize that the user is not foouser and login as a guest or whatever
be possible).

the smb.conf file (some shares were ommited)

[global]
   workgroup = DOMAIN
   netbios name = BNISERV04
   server string = Servidor de Arquivos
   interfaces = 192.168.0.4
   bind interfaces only = Yes
   encrypt passwords = Yes
   restrict anonymous = Yes
   log level = 5
   log file = /var/log/samba/log.%m
   max log size = 2048
   time server = Yes
   socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
   logon script = %u.bat
   logon drive = H:
   domain logons = Yes
   os level = 165
   preferred master = Yes
   domain master = Yes
   dns proxy = No
   wins support = Yes
   preload = homes
   invalid users = bin daemon adm sync shutdownhalt mail
news uucp operator
   admin users = root
   hosts allow = 192.168.0.0/255.255.255.0, 127.
   veto files = /mail/
   default case = lower
   case sensitive = No
   preserve case = No
   short preserve case = No
   guest account = gilberto
   map to guest = bad user
[homes]
   comment = Home Directories
   read only = No
   create mask = 0600
   directory mask = 0700
   browseable = No
[tmp]
   comment = Temporary file space
   path = /tmp
   read only = No
   guest ok = Yes

[netlogon]
   path = /home/export/netlogon
   browseable = No
   guest ok = yes

[oradocs]
   path = /home/export/oracledocs/producao
   read only = No
   create mask = 0777
   force create mode = 0777
   directory mask = 0777

[memos]
   path = /home/memos
   read only = yes
   write list = foouser





















On 6/20/07, Eric Boehm [EMAIL PROTECTED] wrote:


On Wed, Jun 20, 2007 at 12:37:09PM -0300, Maginot Junior wrote:
 Maginot == Maginot Junior [EMAIL PROTECTED] writes:

Maginot Hmm now its workin... BUT one more thing, and if I dont
Maginot want to be prompted for an user name ?  What I want to do
Maginot is map the share with the foouser login and username info
Maginot and all other who try to view the share could do it at
Maginot the most transparent way, with no question for user and
Maginot password... is that possible?

We would need to see you whole smb.conf. I'm not following what you
are trying to do. If you map the share to foouser login, then everyone
will have access.

Perhaps you could give more concrete examples of what it is you are
seeing and what you are trying to do,.

--
Eric M. Boehm  /\  ASCII Ribbon Campaign
[EMAIL PROTECTED]   \ /  No HTML or RTF in mail
X   No proprietary word-processing
Respect Open Standards / \  files in mail





--
Maginot Júnior
the game of life
LPIC - CCNA - ¿Designer?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Write access to one user and Read-Only for anyother

2007-06-20 Thread Eric Boehm
On Wed, Jun 20, 2007 at 12:37:09PM -0300, Maginot Junior wrote:
 Maginot == Maginot Junior [EMAIL PROTECTED] writes:

Maginot Hmm now its workin... BUT one more thing, and if I dont
Maginot want to be prompted for an user name ?  What I want to do
Maginot is map the share with the foouser login and username info
Maginot and all other who try to view the share could do it at
Maginot the most transparent way, with no question for user and
Maginot password... is that possible?

We would need to see you whole smb.conf. I'm not following what you
are trying to do. If you map the share to foouser login, then everyone
will have access.

Perhaps you could give more concrete examples of what it is you are
seeing and what you are trying to do,.

-- 
Eric M. Boehm  /\  ASCII Ribbon Campaign
[EMAIL PROTECTED]   \ /  No HTML or RTF in mail
X   No proprietary word-processing
Respect Open Standards / \  files in mail
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Write access to one user and Read-Only for anyother

2007-06-20 Thread Cary Robinson

I'm no pro (by a long shot),
But.
Have you looked into using the ACL commands for this ?

Permissions can be specified using acl command setfacl for
the right group/person.
use getfacl to check the applied permissions.

From my limited experimentation with these ACL 
commands, I would think you can accomplish the permissions you are after.


Rgd's,
Cary


At 10:37 AM 6/20/2007, Maginot Junior wrote:


Hmm now its workin... BUT one more thing, and if I dont want to be prompted
for an user name ?
What I want to do is map the share with the foouser login and username info
and all other who try to view the share could do it at the most transparent
way, with no question for user and password... is that possible?


And thanks for the help, worked great =)

On 6/20/07, Eric Boehm [EMAIL PROTECTED] wrote:


On Wed, Jun 20, 2007 at 11:53:59AM -0300, Maginot Junior wrote:
 Maginot == Maginot Junior [EMAIL PROTECTED] writes:

Maginot the problem is if I set the write list or valid users Im
Maginot only giving the permission to those in the list... and
Maginot the big problem is how to set all other users to be in
Maginot the read list ... I dont have group with all inside and
Maginot are not going to be any... I tryed with something like


[memos]
   path = /home/memos
   write list = foouser
   read list = !foouser

No, you should use

[memos]
   path = /home/memos
   read only = yes
   write list = foouser

This will make it read only except for anyone in the write list. From
man smb.conf

 write list (S)
  This is a list  of  users  that  are  given  read-write
  access  to a service. If the connecting user is in this
  list then they will be given write  access,  no  matter
  what  the  read  only  option  is  set to. The list can
  include group names using the @group syntax.

  Note that if a user is in both the read  list  and  the
  write list then they will be given write access.

  This parameter will not work with the security =  share
  in Samba 3.0. This is by design.


Note the first paragraph -- If the connecting user is in this list
then they will be given write access, no matter what the read only
options is set to.

--
Eric M. Boehm  /\  ASCII Ribbon Campaign
[EMAIL PROTECTED]   \ /  No HTML or RTF in mail
X   No proprietary word-processing
Respect Open Standards / \  files in mail




--
Maginot Júnior
the game of life
LPIC - CCNA - ¿Designer?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba



--
No virus found in this incoming message.
Checked by AVG. Version: 7.5.472 / Virus 
Database: 269.9.1/854 - Release Date: 6/19/2007 1:12 PM


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Write access to one user and Read-Only for anyother

2007-06-20 Thread Maginot Junior

thanks for the help ... thanks to all
now its working like it should... forget what I said in may last post the
ask for a password I think was a windows bug the now is not having anymore.


Thanks =)


On 6/20/07, Cary Robinson [EMAIL PROTECTED] wrote:


I'm no pro (by a long shot),
But.
Have you looked into using the ACL commands for this ?

Permissions can be specified using acl command setfacl for
the right group/person.
use getfacl to check the applied permissions.

From my limited experimentation with these ACL
commands, I would think you can accomplish the permissions you are after.

Rgd's,
Cary


At 10:37 AM 6/20/2007, Maginot Junior wrote:

Hmm now its workin... BUT one more thing, and if I dont want to be
prompted
for an user name ?
What I want to do is map the share with the foouser login and username
info
and all other who try to view the share could do it at the most
transparent
way, with no question for user and password... is that possible?


And thanks for the help, worked great =)

On 6/20/07, Eric Boehm [EMAIL PROTECTED] wrote:

On Wed, Jun 20, 2007 at 11:53:59AM -0300, Maginot Junior wrote:
  Maginot == Maginot Junior [EMAIL PROTECTED] writes:

 Maginot the problem is if I set the write list or valid users Im
 Maginot only giving the permission to those in the list... and
 Maginot the big problem is how to set all other users to be in
 Maginot the read list ... I dont have group with all inside and
 Maginot are not going to be any... I tryed with something like


[memos]
path = /home/memos
write list = foouser
read list = !foouser

No, you should use

[memos]
path = /home/memos
read only = yes
write list = foouser

This will make it read only except for anyone in the write list. From
man smb.conf

  write list (S)
   This is a list  of  users  that  are  given  read-write
   access  to a service. If the connecting user is in this
   list then they will be given write  access,  no  matter
   what  the  read  only  option  is  set to. The list can
   include group names using the @group syntax.

   Note that if a user is in both the read  list  and  the
   write list then they will be given write access.

   This parameter will not work with the security =  share
   in Samba 3.0. This is by design.


Note the first paragraph -- If the connecting user is in this list
then they will be given write access, no matter what the read only
options is set to.

--
Eric M. Boehm  /\  ASCII Ribbon Campaign
[EMAIL PROTECTED]   \ /  No HTML or RTF in mail
 X   No proprietary word-processing
Respect Open Standards / \  files in mail



--
Maginot Júnior
the game of life
LPIC - CCNA - ¿Designer?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba



--
No virus found in this incoming message.
Checked by AVG. Version: 7.5.472 / Virus
Database: 269.9.1/854 - Release Date: 6/19/2007 1:12 PM

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba





--
Maginot Júnior
the game of life
LPIC - CCNA - ¿Designer?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Problem to enter in domain

2007-06-20 Thread Walmiro Muzzi

I am with a problem to enter the server samba+ldap that I configured.

When I go in Rwindow$ XP and I try to enter the domain, I type login and 
the password of root.


If I type the password certain the error is “was not possible to locate 
the uruário name”.
If I type the password wrong the error is “imperfection of logon: name 
of unknown user or incorrect password”.


I looked for regarding the error and nothing that I tried works.

Please, somebody can help me?

Mine smb.conf is:

#=== Global Settings ===

[global]

# Change this to the workgroup/NT-domain name your Samba server will part of
   workgroup = HIDRAUTRONICA


   server string = %h server (Samba, Ubuntu)

;   wins support = no

;   wins server = w.x.y.z

   dns proxy = no

;   name resolve order = lmhosts host wins bcast

 Networking 

;   interfaces = 127.0.0.0/8 eth0

;   bind interfaces only = true


 Debugging/Accounting 


   log file = /var/log/samba/log.%m

   max log size = 1000

;   syslog only = no

   syslog = 0

   panic action = /usr/share/samba/panic-action %d


### Authentication ###

;   security = user

   encrypt passwords = true

passdb backend = ldapsam:ldap://127.0.0.1
ldap suffix = dc=hidrautronica,dc=com,dc=br
ldap machine suffix = ou=Computadores
ldap user suffix = ou=Usuarios
ldap group suffix = ou=Grupos
ldap admin dn = cn=admin,dc=hidrautronica,dc=com,dc=br
ldap delete dn = no
domain logons = yes
enable privileges = yes

   obey pam restrictions = yes

;   guest account = nobody

;   unix password sync = no

   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n 
*Retype\snew\sUNIX\spassword:* %n\n *password\supdated\ssuccessfully* .


;   pam password change = no

## Domains ###

;   domain logons = yes
;   logon path = \\%N\profiles\%U

;   logon path = \\%N\%U\profile

;   logon drive = H:
;   logon home = \\%N\%U

;   logon script = logon.cmd

; add user script = /usr/sbin/adduser --quiet --disabled-password 
--gecos  %u


## Printing ##

;   load printers = yes

;   printing = bsd
;   printcap name = /etc/printcap

;   printing = cups
;   printcap name = cups

;   printer admin = @lpadmin


 Misc 

;   include = /home/samba/etc/smb.conf.%m

# SO_RCVBUF=8192 SO_SNDBUF=8192
   socket options = TCP_NODELAY

;   message command = /bin/sh -c '/usr/bin/linpopup %f %m %s; rm %s' 

;   domain master = auto

;   idmap uid = 1-2
;   idmap gid = 1-2
;   template shell = /bin/bash

#=== Share Definitions ===

;[homes]
;   comment = Home Directories
;   browseable = no

;   valid users = %S

;   writable = no

;   create mask = 0600

;   directory mask = 0700

;[netlogon]
;   comment = Network Logon Service
;   path = /home/samba/netlogon
;   guest ok = yes
;   writable = no
;   share modes = no

;[profiles]
;   comment = Users profiles
;   path = /home/samba/profiles
;   guest ok = no
;   browseable = no
;   create mask = 0600
;   directory mask = 0700

[printers]
   comment = All Printers
   browseable = no
   path = /tmp
   printable = yes
   public = no
   writable = no
   create mode = 0700

[print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers
   browseable = yes
   read only = yes
   guest ok = no

;   write list = root, @ntadmin

;[cdrom]
;   comment = Samba server's CD-ROM
;   writable = no
;   locking = no
;   path = /cdrom
;   public = yes

;   preexec = /bin/mount /cdrom
;   postexec = /bin/umount /cdrom


Thaks in advance.


[]s
Walmiro Muzzi





___ 
Yahoo! Mail - Sempre a melhor opção para você! 
Experimente já e veja as novidades. 
http://br.yahoo.com/mailbeta/tudonovo/

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problems with SAMBA as PDC and Windows XP SP2 as client

2007-06-20 Thread Dale Schroeder

In the [global] section, try changing

   valid users = root

to

   valid users =

Dale

Personal Técnico wrote:

Hi!!

We are trying to configure a Debian Linux Server as Samba Server 
(Domain Controller) and a Windows XP (with Service Pack 2) as client. 
We have configured Windows into the Samba Domain (in other words, we 
have been able to agregate the machine into the domain), but when we 
restart Windows and try to login with a samba user (from linux server) 
(selecting the Domain), we received a message telling us that the 
domain is blocked or not available.


We send you our smb.conf file. Linux Samba Server is running in a 
Debian Etch, with version 3.0.24-6etch4


Thanks for you help!!


No virus found in this incoming message.
Checked by AVG. 
Version: 7.5.472 / Virus Database: 269.9.0/853 - Release Date: 6/18/2007 3:02 PM

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problems with SAMBA as PDC and Windows XP SP2 as client

2007-06-20 Thread John Drescher

On 6/20/07, Dale Schroeder [EMAIL PROTECTED] wrote:

In the [global] section, try changing

valid users = root

to

valid users =

Dale


Good spot, That will surely cause problems...

John
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Write access to one user and Read-Only for anyother

2007-06-20 Thread Adam Tauno Williams
On Wed, 2007-06-20 at 11:53 -0300, Maginot Junior wrote:
 the problem is if I set the write list or valid users Im only giving the
 permission to those in the list... and the big problem is how to set all
 other users to be in the read list ... I dont have group with all inside and
 are not going to be any... I tryed with something like
 [memos]
path = /home/memos
write list = foouser
read list = !foouser
 
 but this doesnt work There are more them 100 users on this box so only
 one have to be able to write on the share and all others have only to be
 able to read

read only = yes / writable = no
write list = foouser

write list trumps read only.


-- 
Adam Tauno Williams, Network  Systems Administrator
Consultant - http://www.whitemiceconsulting.com
Developer - http://www.opengroupware.org

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] KDC Lookup errors only on ads joins.

2007-06-20 Thread s_aiello
I can managed a net ads join if I follow the following steps:
kinit [EMAIL PROTECTED]
net ads status
net ads join

Only guess that the net ads status ends up causing my crednetials to be cached 
that net ads join makes use of. Just doing a kinit [EMAIL PROTECTED] ; net ads 
join, does not work.

Strange, but it works...
 ~Steve

On Wednesday 20 June 2007 10:09, [EMAIL PROTECTED] wrote:
 I have a RedHat Enterprise 4 server with samba 3.0.25a rpms installed
 (downloaded from mirror mentioned on samba.org site). I have configured
 krb5.conf  smb.conf.  I can perform a kinit [EMAIL PROTECTED]  net ads
 status [EMAIL PROTECTED] perfectly fine. But when attempting to net ads
 join [EMAIL PROTECTED], I get an, error on ads_startup: Cannot resolve
 network address for KDC in requested realm, error.  If there is a KDC
 lookup problem, should it not occur globally ?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Veto files

2007-06-20 Thread Diego Ramos

Hi list.

  I'm having a big problem: I have a Samba Server that has a share where
all my users can read any information. I have now a new situation, I have to
configure this share to allow some users to write a xml file. It's like the
opposite of the Veto Files options. Is there way that I can configure my
share to let this happen?

Thanks a lot,

Diego.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problems adding a printer share

2007-06-20 Thread Gary Dale
It's very important that your CUPS configuration allows printing from 
your local network. If not, Windows won't see it. Check your 
/etc/cups/cupsd.conf to make sure it allows printing from other than 
localhost.



Michael Powell wrote:

Gary,
Thanks!  I think there must be slightly more to it, though.  If I give
it that address (or anything like it), Win98 reports that the printer is 
offline  that I can install it but can't print to it until it returns
online.  Since it is online, that tells me something is not quite 
right.


If I type that address into a web browser on the Windows machine, it 
does show up.  But there is something about it that the Windows print

manager does not like.

I tried it as you have it typed below, as well as:
\\server:631\printers\printername

Windows does not like either one.


On Tue, 19 Jun 2007 10:47:33 -0400
Gary Dale [EMAIL PROTECTED] wrote:

  
You don't need Samba to print. As long as you set up your CUPS 
configuration to allow other local addresses to print to the server, you 
can print to it from windows using 
http://servername:631/printers/printername, where you replace 
servername and pritnername with the appropriate values. servername 
can also be an IP address.


If this works, you can also (but don't have to) set up the printer to be 
shared via Samba by adding a section to your Samba configuration. I 
recommend that you use SWAT for this - it makes it easy.



  
  
  

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba



  


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] smbd process eating memory

2007-06-20 Thread Alexandre Biancalana

Hi list,

I have a Samba-3.0.25a PDC running on FreeBSD 6.2-STABLE using OpenLDAP
2.3.34 (nss_ldap-1.255) as backend. Everything work's great, the only
problem that I fighting is with an M$ ISA Server 2000, that do ntlm
authentications on my domain. At some times (each 4 hours) the ISA Server
lost the connection with the domain and does not authenticate users until
the connection be reestablished.

Until yesterday I think the problem was the ISA, but today, looking the
problem closely, I see that the smbd process that serve ISA Server
connection is eating memory continuously without release this. My theory is
that this process reach at some system limit and die, consequently the ISA
Server connection die too.


# smbstatus |grep -i isa
IPC$ 88122   isaserverWed Jun 20 13:02:18 2007
IPC$ 88122   isaserverWed Jun 20 14:40:19 2007


# date;ps -aux | egrep 88122
Wed Jun 20 17:42:25 BRT 2007
USER PID %CPU %MEM   VSZ   RSS  TT  STAT STARTED  TIME COMMAND
nobody 88122  2.1 15.7 430388 80780  ??  S 1:02PM
9:12.04/usr/local/sbin/smbd -D -s /usr/local/etc/smb.conf

# date;ps -aux | egrep 88122
Wed Jun 20 17:42:30 BRT 2007
USER PID %CPU %MEM   VSZ   RSS  TT  STAT STARTED  TIME COMMAND
nobody 88122  2.0 15.7 430536 80764  ??  S 1:02PM
9:12.14/usr/local/sbin/smbd -D -s /usr/local/etc/smb.conf

# date;ps -aux | egrep 88122
Wed Jun 20 17:42:35 BRT 2007
USER PID %CPU %MEM   VSZ   RSS  TT  STAT STARTED  TIME COMMAND
root   88122  3.1 15.7 430860 80816  ??  R 1:02PM
9:12.72/usr/local/sbin/smbd -D -s /usr/local/etc/smb.conf

# date;ps -aux | egrep 88122
Wed Jun 20 17:42:37 BRT 2007
USER PID %CPU %MEM   VSZ   RSS  TT  STAT STARTED  TIME COMMAND
nobody 88122  3.9 15.7 430936 80820  ??  S 1:02PM
9:12.79/usr/local/sbin/smbd -D -s /usr/local/etc/smb.conf

# date;ps -aux | egrep 88122
Wed Jun 20 17:42:39 BRT 2007
USER PID %CPU %MEM   VSZ   RSS  TT  STAT STARTED  TIME COMMAND
nobody 88122  3.8 15.7 431008 80820  ??  S 1:02PM
9:12.84/usr/local/sbin/smbd -D -s /usr/local/etc/smb.conf



 smb.conf ===

[global]
 workgroup = DOMAIN1
 netbios name = SAMBAPDC
 server string = SAMBAPDC (running: %v,%h)
 socket options = SO_SNDBUF=32768, SO_RCVBUF=32768
 use sendfile = yes

 deadtime = 15

 ; PDC and Master Browser
 os level = 255
 preferred master = yes
 local master = yes
 domain master= yes
 domain logons= yes

 wins server  = 192.168.0.5
 time server  = yes

 security = domain

 encrypt passwords = yes
 log level = 1 idmap:10 winbind:10
 log file = /var/log/samba/%m.log

 max log size = 10240

 passwd program = /usr/local/sbin/smbldap-passwd %u
 passwd chat = *New*password* %n\n *new*password* %n\n *successfully*


 #
 # Scripts Path
 #
 add user script = /usr/local/sbin/smbldap-useradd -d /dev/null -s
/sbin/nologin %u
 add group script = /usr/local/sbin/smbldap-groupadd %g
 add machine script = /usr/local/sbin/smbldap-useradd -w -t 0 -w -d
/dev/null -s /sbin/nologin %u
 add user to group script = /usr/local/sbin/smbldap-groupmod -m %u %g
 set primary group script = /usr/local/sbin/smbldap-usermod -g %g %u

 passdb backend = ldapsam:ldap://127.0.0.1

 idmap alloc backend = ldap
 idmap alloc config:range= 2 - 3
 idmap alloc config:ldap_url = ldap://127.0.0.1
 idmap alloc config:ldap_anon= no
 idmap alloc config:ldap_user_dn = cn=root,dc=company
 idmap alloc config:ldap_base_dn = ou=Idmap,dc=company

 idmap domains= DOMAIN2
 idmap config CRC: default= yes
 idmap config CRC: backend= ldap
 idmap config CRC: ldap_url   = ldap://127.0.0.1
 idmap config CRC: ldap_anon  = no
 idmap config CRC: ldap_user_dn   = cn=root,dc=company
 idmap config CRC: range  = 2 - 3
 idmap config CRC: ldap_base_dn   = ou=Idmap,dc=company

 ldap admin dn = cn=root,dc=company
 ldap ssl = off
 ldap suffix = dc=company
 ldap idmap suffix = ou=Idmap
 ldap user suffix = ou=Users
 ldap group suffix = ou=Groups
 ldap machine suffix = ou=Computers
 ldap passwd sync = yes

 logon path =

 logon script = %G.bat

 ea support = Yes
 map acl inherit = Yes
 enable privileges = yes

 veto oplock files =
/*.jnx/*.JNX/*.cdx/*.CDX/*.ntx/*.NTX/*.dbt/*.dbt/*.mbd/*.MDB/*.dbf/*.DBF/

 load printers = no

 veto files = /*.mp3/*.MP3/*.wmv/*.WMV

[netlogon]
  path = /share/netlogon
  browseable = no
  writeable  = no

 smb.conf ===

Here is the log files when the problem ocurs:

[2007/06/20 11:26:27, 1] smbd/service.c:make_connection_snum(1033)
 isaserver (10.2.0.30) connect to service netlogon initially as user
administrato (uid=0, gid=513) (pid 55130)
[2007/06/20 11:26:27, 1] smbd/service.c:close_cnum(1230)
 isaserver (10.2.0.30) closed connection to service netlogon
[2007/06/20 11:26:27, 0] smbd/service.c:make_connection(1191)
 isaserver (10.2.0.30) couldn't find service administrato

[Samba] listing groups not working

2007-06-20 Thread guido
Im having some problems with the samba 3.0.24 in Debian Etch when I try to
list the groups, like this:

wbinfo -g

or

net rpc group -U username

All the times the output of the command is... NOTHING.

In samba 3.0.14 (Sarge), this works OK.
I don't try in a newer version of samba.

I test this with the debug on -d 4 with the rpc command and this is the
ouput (see attached files).

The winbind package is not the problem, coz if I try from a client that
dosen't have the winbind package, the same thing happends.

Tnxs in advance.

Sorry for my english. I never study.-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Recycle Module

2007-06-20 Thread Cary Robinson
Does anybody have an example config file with the Recycle VSF 
module loaded and working ?

If so, would you please give me a peek at it ?

I've been playing with this thing for days (off  on) and don't seem 
to have it working yet. Can anybody share some knowledge on this ?



Thanks in advance,
Cary Robinson


--
No virus found in this outgoing message.
Checked by AVG. 
Version: 7.5.472 / Virus Database: 269.9.1/857 - Release Date: 6/20/2007 2:18 PM



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Recycle Module

2007-06-20 Thread Cybionet

Greeting Cary,

 Recycle bin on network work great. First create a .recycle directory 
(directly in the share directory for your test).


cd  directory_name
mkdir .recycle
chown root:root .recycle
setfacl -m group:DomainUsers:rwx .recycle

 As you can see I use ACL(EA) on my filesystem. If you create this 
repository directely in the share add the following parameter at your share.


/veto files =  /.recycle//


 Here the parameters to add at the end of the share parameters.

[share]
   ...
   Enter your share parameters here.
   ...
 vfs objects = recycle
 recycle:repository =.recycle/%u
 recycle:keeptree = yes
 recycle:exclude = *.tmp *.temp
 recycle:exclude_dir = /tmp /temp /cache
 recycle:versions = yes
 recycle:noversion = *.doc *.xls *.ppt

 I like to add tmpwatch script to empty recycle after a period of time 
when the file was deleted. You can find this script at 
http://download.fedora.redhat.com/pub/fedora/linux/development/i386/os/Fedora/. 
I use this on Gentoo.


Create a bash file and add the following command (168 represent a week 
in hours).


/usr/sbin/tmpwatch -u 168 /directory_name/.recycle

Just add this script in the crontab and enjoy :-)

Robert

--
Cybionet - Solution reseautique
http://www.cybionet.com

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: listing groups not working

2007-06-20 Thread Guido Lorenzutti
To add a little more..


amayo-fs2:/etc/samba# net rpc info -U glorenzutti
Password:
Domain Name: JUSBAIRES
Domain SID: S-1-5-21-2281447165-45835457-3575675572
Sequence number: 1182389270
Num users: 1725
Num domain groups: 0
Num local groups: 0
amayo-fs2:/etc/samba# 


And with debug output...

amayo-fs2:/etc/samba# net -d 4 rpc info -U glorenzutti
[2007/06/20 22:27:27, 3] param/loadparm.c:lp_load(4953)
  lp_load: refreshing parameters
[2007/06/20 22:27:27, 3] param/loadparm.c:init_globals(1418)
  Initialising global parameters
[2007/06/20 22:27:27, 3] param/params.c:pm_process(572)
  params.c:pm_process() - Processing configuration file
/etc/samba/smb.conf
[2007/06/20 22:27:27, 3] param/loadparm.c:do_section(3695)
  Processing section [global]
  doing parameter workgroup = JUSBAIRES
  doing parameter netbios name = BDCAMAYO
[2007/06/20 22:27:27, 4] param/loadparm.c:handle_netbios_name(3053)
  handle_netbios_name: set global_myname to: BDCAMAYO
  doing parameter netbios aliases = SERVER
  doing parameter server string =
  doing parameter debug level = 0
  doing parameter syslog = 0
  doing parameter log level = 0
  doing parameter log file = /var/log/samba/%m.%U.log
  doing parameter max log size = 5000
  doing parameter panic action = /usr/share/samba/panic-action %d
  doing parameter name resolve order = wins hosts lmhosts bcast
  doing parameter socket options = TCP_NODELAY SO_RCVBUF=8192
SO_SNDBUF=8192 IPTOS_LOWDELAY SO_KEEPALIVE
  doing parameter use sendfile = yes
  doing parameter wins support = yes
  doing parameter wins proxy = yes
  doing parameter enhanced browsing = yes
  doing parameter dns proxy = yes
  doing parameter time server = yes
  doing parameter smb ports = 139
  doing parameter add user script = /usr/sbin/smbldap-useradd -a %u
  doing parameter delete user script = /usr/sbin/smbldap-userdel %u
  doing parameter add machine script = /usr/sbin/smbldap-useradd -w %u
  doing parameter add group script = /usr/sbin/smbldap-groupadd -p %g
  doing parameter delete group script = /usr/sbin/smbldap-groupdel %g
  doing parameter add user to group script = /usr/sbin/smbldap-groupmod
-m %u %g
  doing parameter delete user from group script =
/usr/sbin/smbldap-groupmod -x %u %g
  doing parameter set primary group script = /usr/sbin/smbldap-usermod
-g %g %u
  doing parameter ldap admin dn =
uid=amayo-fs2,ou=security,dc=jusbaires,dc=gov,dc=ar
  doing parameter ldap suffix = dc=jusbaires,dc=gov,dc=ar
  doing parameter ldap group suffix = ou=Group
  doing parameter ldap user suffix = ou=People
  doing parameter ldap machine suffix = ou=amayo,ou=Computers
  doing parameter ldap ssl = on
  doing parameter ldap delete dn = yes
  doing parameter ldap passwd sync = yes
  doing parameter printcap name = /dev/null
  doing parameter printing = bsd
  doing parameter load printers = no
  doing parameter admin users = administrador mchamorro mlopez gpanizzo
glorenzutti
  doing parameter enable privileges = yes
  doing parameter os level = 80
  doing parameter preferred master = yes
  doing parameter lm announce = yes
  doing parameter domain master = yes
  doing parameter domain logons = yes
  doing parameter encrypt passwords = yes
  doing parameter pam password change = yes
  doing parameter passdb backend =
ldapsam:ldap://amayo-fs2.jusbaires.gov.ar
ldap://alem-cups.jusbaires.gov.ar ldap://alem-systemlog.jusbaires.gov.ar;
  doing parameter passwd chat debug = no
  doing parameter check password script = /usr/local/bin/crackcheck -d
/var/cache/cracklib/cracklib_dict
  doing parameter unix charset = 850
  doing parameter dont descend = .recycle
  doing parameter delete veto files = yes
  doing parameter restrict anonymous = 1
  doing parameter logon script = netlogon.%U.bat
  doing parameter logon path = \\server\profiles\%U
  doing parameter logon home = \\server\profiles\%U
  doing parameter logon drive = C:
  doing parameter hide files = /Desktop.ini/desktop.ini/
  doing parameter hide dot files = yes
  doing parameter include = /etc/samba/default_shares.smb.conf
[2007/06/20 22:27:27, 3] param/params.c:pm_process(572)
  params.c:pm_process() - Processing configuration file
/etc/samba/default_shares.smb.conf
[2007/06/20 22:27:27, 4] param/loadparm.c:lp_load(4984)
  pm_process() returned Yes
[2007/06/20 22:27:27, 2] lib/interface.c:add_interface(81)
  added interface ip=10.2.0.2 bcast=10.2.255.255 nmask=255.255.0.0
Password:
[2007/06/20 22:27:29, 3] libsmb/cliconnect.c:cli_start_connection(1426)
  Connecting to host=BDCAMAYO
[2007/06/20 22:27:29, 3] lib/util_sock.c:open_socket_out(874)
  Connecting to 10.2.0.2 at port 445
[2007/06/20 22:27:29, 2] lib/util_sock.c:open_socket_out(911)
  error connecting to 10.2.0.2:445 (Connection refused)
[2007/06/20 22:27:29, 3] lib/util_sock.c:open_socket_out(874)
  Connecting to 10.2.0.2 at port 139
[2007/06/20 22:27:29, 3] libsmb/cliconnect.c:cli_session_setup_spnego(721)
  Doing spnego session setup (blob length=58)
[2007/06/20 22:27:29, 3] 

[Samba] Network issue in RHCS/GFS environment

2007-06-20 Thread Huang Xiong
Hello folks,

This thread is long, please pay more patients for your kindly reading.

1. Set up Storage-Cluster.

Cluster
-
node1: eth1 192.168.3.249 -- Connect to Storage
eth2 192.168.11.249 -- Access IP
eth0 192.168.13.249 -- HeartBeat
CentOS4.4(kernel 2.6.9-42.0.3.ELsmp)
cman-kernel-smp-2.6.9-45.8
cman-devel-1.0.11-0
cman-kernheaders-2.6.9-45.8
cman-1.0.11-0
GFS-6.1.6-1
GFS-kernel-smp-2.6.9-60.3
lvm2-cluster-2.02.06-7.0.RHEL4
iscsi-initiator-utils-4.0.3.0-4
samba-3.0.10-1.4E.9
dlm-1.0.1-1
dlm-kernel-smp-2.6.9-44.3
dlm-devel-1.0.1-1
dlm-kernheaders-2.6.9-44.3

node2: eth1 192.168.3.52 -- Connect to Storage
eth2 192.168.11.52 -- Access IP
eth0 192.168.13.52 -- HeartBeat
other setting as same as node1

2.Create lv and mount

The background storage is implemented by iscsi, I create logic volumn as 500G, 
and then format it to GFS filesystem.

Code:

# gfs_mkfs -p lock_dlm -t real:gfs -j 2 /dev/vg_milan/nesta

Here, the string real is the cluster name.

Then, I mount the formatted lv on the nodes one by one:

In node1:
[EMAIL PROTECTED] ~]# mkdir -p /share 
[EMAIL PROTECTED] ~]# mount -t gfs /dev/vg_milan/netsa /share 
[EMAIL PROTECTED] ~]# chmod 777 /share

Repeat the above three steps in node2.

3. Configure the samba on node1 and node2, export /share as SMB share 
named stress.

Now, I installed Windows on other two machines:
192.168.11.31 and 192.168.11.32

In 192.168.11.31, map the //192.168.11.249/stress as Z:;
In 192.168.11.32, map the //192.168.11.52/stress as Z:

4. Running pressure programs on 192.168.11.31 and 192.168.11.32 to create a 
large number of writing operations on the /stress samba share. The pressure 
tools is writen by my customer, it is used in Windows Operating System to 
create many processes to write random files into the mapped(Samba share) 
directory. As I seen(while not very sure),it doesn't use own locking, all the 
processes are running parallelly,

Use dstat command to monitor the networking status on nodes:

In node1, eth1 send and eth2 recv are both high, it is reasonable as I 
expect:

# dstat -N eth0,eth3,eth4 2
total-cpu-usage -dsk/total- --net/eth0net/eth1net/eth2-
usr sys idl wai hiq siq|_read _writ|_recv _send:_recv _send:_recv _send
  0   2  94   4   0   0|4322B 3753k|   0 0 :   0 0 :   0 0 
  0   1  50  49   0   0| 554k 2202k|   0 0 : 584k   26k: 462B0 
  0   2  49  49   0   0| 532k 2098k|   035B: 743k 4544k: 809B0 
  0   1  50  49   0   0| 484k   80k|  35B0 : 573k   24k: 569B0 
  0   1  50  49   0   0| 500k 2352k|   0 0 : 548k  739k: 440B0 
  0   1  50  49   0   0| 510k0 |  35B   35B: 604k 1775k:1066B0 
  0   2  50  49   0   0| 526k 2212k|   0 0 : 575k   25k: 412B0 
  0   1  50  49   0   0| 534k  458k|   035B: 663k 2804k:1739B0 
  0   1  50  49   0   0| 538k0 |  35B0 : 574k   37k: 591B0 
  0  11  37  51   0   0| 496k   24M| 121k  128k: 864k 6799k:8131B 4978B
  0   2  53  44   1   0| 494k0 | 162k  196k:1481k   19M: 806B0 
  1  19  58  22   1   0| 408k 9754k| 178k  243k: 597k 5339k:  35M  223k
  1  17  31  50   1   0| 506k  862k| 132B  158B: 914k 5904k:  60M  378k
  1  19  29  51   1   0| 300k 7182k|  35B0 : 435k   19k:  60M  377k
  1  32  27  39   1   0| 176k   47M|   0 0 :1216k   25M:  51M  323k
  1  29  27  43   1   0| 192k   42M|  35B   35B:2042k   50M:  42M  249k
  0  29  38  32   1   0| 198k   41M| 936B 1293B:1748k   40M:  41M  233k
  1  26  34  38   0   0| 246k   38M|   035B:1804k   42M:  41M  231k
  1  27  33  38   1   0| 234k   41M|  35B0 :1800k   40M:  40M  250k

However, it is very stranger in node2: eth1 recv and send are both very 
high! while eth0 and eth2 have low I/O.
# dstat -N eth0,eth3,eth4 2
total-cpu-usage -dsk/total- --net/eth0net/eth1net/eth2-
usr sys idl wai hiq siq|_read _writ|_recv _send:_recv _send:_recv _send
  0  25  72   3   1   0|  38k  192k| 125k  119k: 949B  268B: 584B   37k
  1  21  76   1   1   0|   0   446k| 191k  160k:  18M  339k: 843B  506k
  1  22  75   2   1   0|  40k  524k| 250k  183k:  69M  694k:1066B  490k
  1  35  61   1   1   0|   051M| 158B  123B:  72M  135k: 611B  467k
  1  33  61   5   1   0|  94k   52M|   035B:  61M   58M: 814B  399k
  0  19  60  20   0   0|  12k   33M|   0 0 :  54M   47M: 478B  260k
  1  33  40  25   1   0|   052M|  35B   35B:  38M   41M: 874B  576k
  1  41  19  39   1   0|   059M|1293B  936B:  60M   54M: 462B  552k
  0  25  61  13   0   0|   042M|  35B0 :  62M   62M: 575B  453k
  1  40  56   2   1   0|   056M|   035B:  41M   44M: 484B  400k
  1  39  52   7   1   0|   060M|   0 0 :  63M   59M: 442B  636k
  1  39  58   2   1   0|   057M|  35B   35B:  63M   63M: 638B  607k
  1  25  74   0   1   0|   038M|   0 0 :  56M   56M: 847B  221k
  1  37  60   2   1   0|   055M|  35B0 :  44M   42M:1354B  399k
  1  40  57   1   1   0|   061M|   035B:  63M   60M: 713B  447k

My question is, why does 

Re: [Samba] Problems adding a printer share

2007-06-20 Thread Gary Dale

Not an expert on CUPS either, but my server setup has
Location /
Order Deny,Allow
Deny From All
Allow From 127.0.0.1
Allow From 192.168.2.*
/Location

where my local network is in the 192.168.2 subnet.

I also have a
Port 631
line in the .conf file. I don't know if it's necessary but you could try 
adding it.


And after making the changes, be sure to restart CUPS.


Michael Powell wrote:

Looking at localhost:631, it looks like it should be all set up.  Still,
I went ahead and changed the conf file.  The values with the '#' are what it
said, and the uncommented values are what I set it to.  I would think that all
would be the least permissive, but Windows still thinks the printer is offline.

I also checked the printers.conf, and the printer in question is set as Share
Yes.

# Enable printer sharing and shared printers.
Browsing On
BrowseOrder allow,deny
#BrowseAllow @LOCAL
#BrowseAddress @LOCAL
BrowseAllow all
BrowseAddress all
DefaultAuthType Basic
Location /
  # Allow shared printing...
  Order allow,deny
#  Allow @LOCAL
  Allow all
/Location


On Wed, 20 Jun 2007 17:02:14 -0400
Gary Dale [EMAIL PROTECTED] wrote:

  
It's very important that your CUPS configuration allows printing from 
your local network. If not, Windows won't see it. Check your 
/etc/cups/cupsd.conf to make sure it allows printing from other than 
localhost.



Michael Powell wrote:


Gary,
Thanks!  I think there must be slightly more to it, though.  If I give
it that address (or anything like it), Win98 reports that the printer is 
offline  that I can install it but can't print to it until it returns
online.  Since it is online, that tells me something is not quite 
right.


If I type that address into a web browser on the Windows machine, it 
does show up.  But there is something about it that the Windows print

manager does not like.

I tried it as you have it typed below, as well as:
\\server:631\printers\printername

Windows does not like either one.


On Tue, 19 Jun 2007 10:47:33 -0400
Gary Dale [EMAIL PROTECTED] wrote:

  
  
You don't need Samba to print. As long as you set up your CUPS 
configuration to allow other local addresses to print to the server, you 
can print to it from windows using 
http://servername:631/printers/printername, where you replace 
servername and pritnername with the appropriate values. servername 
can also be an IP address.


If this works, you can also (but don't have to) set up the printer to be 
shared via Samba by adding a section to your Samba configuration. I 
recommend that you use SWAT for this - it makes it easy.


  
  
  
  
  

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


  
  

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba



  


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


svn commit: samba r23552 - in branches: SAMBA_3_0/source/param SAMBA_3_0_26/source/param

2007-06-20 Thread obnox
Author: obnox
Date: 2007-06-20 08:47:13 + (Wed, 20 Jun 2007)
New Revision: 23552

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=23552

Log:
Use proper comparison function an fix logic.

Michael


Modified:
   branches/SAMBA_3_0/source/param/loadparm.c
   branches/SAMBA_3_0_26/source/param/loadparm.c


Changeset:
Modified: branches/SAMBA_3_0/source/param/loadparm.c
===
--- branches/SAMBA_3_0/source/param/loadparm.c  2007-06-20 04:15:39 UTC (rev 
23551)
+++ branches/SAMBA_3_0/source/param/loadparm.c  2007-06-20 08:47:13 UTC (rev 
23552)
@@ -3163,7 +3163,7 @@
  type,
  size,
  data_p);
-   if (strcmp(valname,include)) {
+   if (strwicmp(valname,include) == 0) {
DEBUG(10, (process_registry_globals: Ignoring 
   parameter 'include' in registry.\n));
continue;

Modified: branches/SAMBA_3_0_26/source/param/loadparm.c
===
--- branches/SAMBA_3_0_26/source/param/loadparm.c   2007-06-20 04:15:39 UTC 
(rev 23551)
+++ branches/SAMBA_3_0_26/source/param/loadparm.c   2007-06-20 08:47:13 UTC 
(rev 23552)
@@ -3164,7 +3164,7 @@
  type,
  size,
  data_p);
-   if (strcmp(valname,include)) {
+   if (strwicmp(valname,include) == 0) {
DEBUG(10, (process_registry_globals: Ignoring 
   parameter 'include' in registry.\n));
continue;



Rev 5382: merge from upstream in http://samba.sernet.de/ma/bzr/SAMBA_3_0-registry.bzr/

2007-06-20 Thread Michael Adam
At http://samba.sernet.de/ma/bzr/SAMBA_3_0-registry.bzr/


revno: 5382
revision-id: [EMAIL PROTECTED]
parent: [EMAIL PROTECTED]
parent: [EMAIL PROTECTED]
committer: Michael Adam [EMAIL PROTECTED]
branch nick: SAMBA_3_0-registry.bzr
timestamp: Wed 2007-06-20 10:49:39 +0200
message:
  merge from upstream
modified:
  REVISION   REVISION-20060530022625-68239662668b41c3
  source/lib/errmap_unix.c   errmap_unix.c-20070529202201-h7olgulww7h3tzz1-1
  source/param/loadparm.cloadparm.c-20060530022627-1efa1edb3eb0e897
  source/utils/net_conf.cnet_conf.c-20070409110216-64p0zt0mes4j6yoe-1

revno: 5275.1.899
merged: [EMAIL PROTECTED]
parent: [EMAIL PROTECTED]
committer: [EMAIL PROTECTED]
branch nick: SAMBA_3_0.bzr
timestamp: Tue 2007-06-19 20:31:43 -0500
message:
  [EMAIL PROTECTED] (r23550)  2007-06-19 20:26:18 -0500 (Tue, 19 Jun 2007)
  
  Add more UNIX error - NT status mappings.
  Jeremy.
  

revno: 5275.1.898
merged: [EMAIL PROTECTED]
parent: [EMAIL PROTECTED]
committer: [EMAIL PROTECTED]
branch nick: SAMBA_3_0.bzr
timestamp: Tue 2007-06-19 16:46:19 -0500
message:
  [EMAIL PROTECTED] (r23549)  2007-06-19 16:40:27 -0500 (Tue, 19 Jun 2007)
  
  Make net conf setparm always use registry data type sz.
  This simplifies the usage of this command from
  net conf setparm section param type value
  to
  net conf setparm section param value.
  
  Micheal
  
  

revno: 5275.1.897
merged: [EMAIL PROTECTED]
parent: [EMAIL PROTECTED]
committer: [EMAIL PROTECTED]
branch nick: SAMBA_3_0.bzr
timestamp: Tue 2007-06-19 16:15:57 -0500
message:
  [EMAIL PROTECTED] (r23548)  2007-06-19 16:08:46 -0500 (Tue, 19 Jun 2007)
  
  Fix comments.
  
  Michael
  
  

revno: 5275.1.896
merged: [EMAIL PROTECTED]
parent: [EMAIL PROTECTED]
committer: [EMAIL PROTECTED]
branch nick: SAMBA_3_0.bzr
timestamp: Tue 2007-06-19 16:15:53 -0500
message:
  [EMAIL PROTECTED] (r23547)  2007-06-19 16:06:31 -0500 (Tue, 19 Jun 2007)
  
  Ignore parameter include in regsitry globals.
  
  Michael
  
  

revno: 5275.1.895
merged: [EMAIL PROTECTED]
parent: [EMAIL PROTECTED]
committer: [EMAIL PROTECTED]
branch nick: SAMBA_3_0.bzr
timestamp: Tue 2007-06-19 06:16:04 -0500
message:
  [EMAIL PROTECTED] (r23543)  2007-06-19 06:11:01 -0500 (Tue, 19 Jun 2007)
  
  Adjust comments.
  
  
=== modified file 'REVISION'
--- a/REVISION  2007-06-18 16:15:16 +
+++ b/REVISION  2007-06-20 01:31:43 +
@@ -2,9 +2,9 @@
 URL: file:///home/drizzt/jerry/src/svn/samba/branches/SAMBA_3_0
 Repository Root: file:///home/drizzt/jerry/src/svn/samba
 Repository UUID: 0c0555d6-39d7-0310-84fc-f1cc0bd64818
-Revision: 23541
+Revision: 23550
 Node Kind: directory
-Last Changed Author: jpeach
-Last Changed Rev: 23541
-Last Changed Date: 2007-06-18 11:10:00 -0500 (Mon, 18 Jun 2007)
+Last Changed Author: jra
+Last Changed Rev: 23550
+Last Changed Date: 2007-06-19 20:26:18 -0500 (Tue, 19 Jun 2007)
 

=== modified file 'source/lib/errmap_unix.c'
--- a/source/lib/errmap_unix.c  2007-05-29 20:22:03 +
+++ b/source/lib/errmap_unix.c  2007-06-20 01:31:43 +
@@ -63,9 +63,34 @@
{ ENOBUFS, ERRDOS, ERRnomem, NT_STATUS_INSUFFICIENT_RESOURCES },
 #endif
{ EAGAIN, ERRDOS, 111, NT_STATUS_NETWORK_BUSY },
+#ifdef EADDRINUSE
+   { EADDRINUSE, ERRDOS, 52, NT_STATUS_ADDRESS_ALREADY_ASSOCIATED},
+#endif
+#ifdef ENETUNREACH
+   { ENETUNREACH, ERRHRD, ERRgeneral, NT_STATUS_NETWORK_UNREACHABLE},
+#endif
+#ifdef EHOSTUNREACH
+   { EHOSTUNREACH, ERRHRD, ERRgeneral, NT_STATUS_HOST_UNREACHABLE},
+#endif
+#ifdef ECONNREFUSED
+   { ECONNREFUSED, ERRHRD, ERRgeneral, NT_STATUS_CONNECTION_REFUSED},
+#endif
+#ifdef ETIMEDOUT
+   { ETIMEDOUT, ERRHRD, 121, NT_STATUS_IO_TIMEOUT},
+#endif
+#ifdef ECONNABORTED
+   { ECONNABORTED, ERRHRD, ERRgeneral, NT_STATUS_CONNECTION_ABORTED},
+#endif
+#ifdef ENODEV
+   { ENODEV, ERRDOS, 55, NT_STATUS_DEVICE_DOES_NOT_EXIST},
+#endif
+#ifdef EPIPE
+   { EPIPE, ERRDOS, 109, NT_STATUS_PIPE_BROKEN},
+#endif
 #ifdef EWOULDBLOCK
{ EWOULDBLOCK, ERRDOS, 111, NT_STATUS_NETWORK_BUSY },
 #endif
+
{ 0, 0, 0, NT_STATUS_OK }
 };
 

=== modified file 'source/param/loadparm.c'
--- a/source/param/loadparm.c   2007-06-19 09:54:01 +

svn commit: samba r23553 - in branches: SAMBA_3_0/source/param SAMBA_3_0_26/source/param

2007-06-20 Thread obnox
Author: obnox
Date: 2007-06-20 10:08:31 + (Wed, 20 Jun 2007)
New Revision: 23553

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=23553

Log:
Also ignore lock directory in registry global options.

Michael


Modified:
   branches/SAMBA_3_0/source/param/loadparm.c
   branches/SAMBA_3_0_26/source/param/loadparm.c


Changeset:
Modified: branches/SAMBA_3_0/source/param/loadparm.c
===
--- branches/SAMBA_3_0/source/param/loadparm.c  2007-06-20 08:47:13 UTC (rev 
23552)
+++ branches/SAMBA_3_0/source/param/loadparm.c  2007-06-20 10:08:31 UTC (rev 
23553)
@@ -3163,9 +3163,12 @@
  type,
  size,
  data_p);
-   if (strwicmp(valname,include) == 0) {
+   if ((strwicmp(valname,include) == 0) ||
+   (strwicmp(valname, lock directory) == 0) ||
+   (strwicmp(valname, lock dir) == 0)) 
+   {
DEBUG(10, (process_registry_globals: Ignoring 
-  parameter 'include' in registry.\n));
+  parameter '%s' in registry.\n, valname));
continue;
}
DEBUG(10, (process_registry_globals: got value '%s'\n,

Modified: branches/SAMBA_3_0_26/source/param/loadparm.c
===
--- branches/SAMBA_3_0_26/source/param/loadparm.c   2007-06-20 08:47:13 UTC 
(rev 23552)
+++ branches/SAMBA_3_0_26/source/param/loadparm.c   2007-06-20 10:08:31 UTC 
(rev 23553)
@@ -3164,9 +3164,12 @@
  type,
  size,
  data_p);
-   if (strwicmp(valname,include) == 0) {
+   if ((strwicmp(valname,include) == 0) ||
+   (strwicmp(valname, lock directory) == 0) ||
+   (strwicmp(valname, lock dir) == 0)) 
+   {
DEBUG(10, (process_registry_globals: Ignoring 
-  parameter 'include' in registry.\n));
+  parameter '%s' in registry.\n, valname));
continue;
}
DEBUG(10, (process_registry_globals: got value '%s'\n,



svn commit: samba r23554 - in branches: SAMBA_3_0/source/auth SAMBA_3_0/source/client SAMBA_3_0/source/libsmb SAMBA_3_0/source/nmbd SAMBA_3_0/source/torture SAMBA_3_0/source/utils SAMBA_3_0/source/web

2007-06-20 Thread jra
Author: jra
Date: 2007-06-20 17:38:42 + (Wed, 20 Jun 2007)
New Revision: 23554

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=23554

Log:
Fix bug #4711 by makeing cli_connect return an NTSTATUS.
Long overdue fix
Jeremy.

Modified:
   branches/SAMBA_3_0/source/auth/auth_server.c
   branches/SAMBA_3_0/source/client/client.c
   branches/SAMBA_3_0/source/libsmb/cliconnect.c
   branches/SAMBA_3_0/source/libsmb/clidfs.c
   branches/SAMBA_3_0/source/libsmb/libsmbclient.c
   branches/SAMBA_3_0/source/libsmb/passchange.c
   branches/SAMBA_3_0/source/nmbd/nmbd_synclists.c
   branches/SAMBA_3_0/source/torture/locktest.c
   branches/SAMBA_3_0/source/torture/masktest.c
   branches/SAMBA_3_0/source/torture/torture.c
   branches/SAMBA_3_0/source/utils/net_rpc.c
   branches/SAMBA_3_0/source/utils/net_time.c
   branches/SAMBA_3_0/source/web/diagnose.c
   branches/SAMBA_3_0_25/source/auth/auth_server.c
   branches/SAMBA_3_0_25/source/client/client.c
   branches/SAMBA_3_0_25/source/libsmb/cliconnect.c
   branches/SAMBA_3_0_25/source/libsmb/clidfs.c
   branches/SAMBA_3_0_25/source/libsmb/libsmbclient.c
   branches/SAMBA_3_0_25/source/libsmb/passchange.c
   branches/SAMBA_3_0_25/source/nmbd/nmbd_synclists.c
   branches/SAMBA_3_0_25/source/torture/locktest.c
   branches/SAMBA_3_0_25/source/torture/masktest.c
   branches/SAMBA_3_0_25/source/torture/torture.c
   branches/SAMBA_3_0_25/source/utils/net_rpc.c
   branches/SAMBA_3_0_25/source/utils/net_time.c
   branches/SAMBA_3_0_25/source/web/diagnose.c
   branches/SAMBA_3_0_26/source/auth/auth_server.c
   branches/SAMBA_3_0_26/source/client/client.c
   branches/SAMBA_3_0_26/source/libsmb/cliconnect.c
   branches/SAMBA_3_0_26/source/libsmb/clidfs.c
   branches/SAMBA_3_0_26/source/libsmb/libsmbclient.c
   branches/SAMBA_3_0_26/source/libsmb/passchange.c
   branches/SAMBA_3_0_26/source/nmbd/nmbd_synclists.c
   branches/SAMBA_3_0_26/source/torture/locktest.c
   branches/SAMBA_3_0_26/source/torture/masktest.c
   branches/SAMBA_3_0_26/source/torture/torture.c
   branches/SAMBA_3_0_26/source/utils/net_rpc.c
   branches/SAMBA_3_0_26/source/utils/net_time.c
   branches/SAMBA_3_0_26/source/web/diagnose.c


Changeset:
Sorry, the patch is too large (1322 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=23554


svn commit: samba r23555 - in branches: SAMBA_3_0/source/rpcclient SAMBA_3_0_26/source/rpcclient

2007-06-20 Thread jra
Author: jra
Date: 2007-06-20 18:05:48 + (Wed, 20 Jun 2007)
New Revision: 23555

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=23555

Log:
Fix some uninitialiazed variable uses.
Jeremy

Modified:
   branches/SAMBA_3_0/source/rpcclient/cmd_echo.c
   branches/SAMBA_3_0_26/source/rpcclient/cmd_dfs.c
   branches/SAMBA_3_0_26/source/rpcclient/cmd_echo.c


Changeset:
Modified: branches/SAMBA_3_0/source/rpcclient/cmd_echo.c
===
--- branches/SAMBA_3_0/source/rpcclient/cmd_echo.c  2007-06-20 17:38:42 UTC 
(rev 23554)
+++ branches/SAMBA_3_0/source/rpcclient/cmd_echo.c  2007-06-20 18:05:48 UTC 
(rev 23555)
@@ -63,12 +63,14 @@
if ( (in_data = (uint8_t*)SMB_MALLOC(size)) == NULL ) {
printf(Failure to allocate buff of %d bytes\n,
   size);
-   goto done;  
+   result = NT_STATUS_NO_MEMORY;
+   goto done;
}
if ( (out_data = (uint8_t*)SMB_MALLOC(size)) == NULL ) {
printf(Failure to allocate buff of %d bytes\n,
   size);
-   goto done;  
+   result = NT_STATUS_NO_MEMORY;
+   goto done;
}
 
for (i = 0; i  size; i++)
@@ -111,6 +113,7 @@
if ( (out_data = (uint8_t*)SMB_MALLOC(size)) == NULL ) {
printf(Failure to allocate buff of %d bytes\n,
   size);
+   result = NT_STATUS_NO_MEMORY;
goto done;  
}

@@ -148,6 +151,7 @@
if ( (in_data = (uint8_t*)SMB_MALLOC(size)) == NULL ) {
printf(Failure to allocate buff of %d bytes\n,
   size);
+   result = NT_STATUS_NO_MEMORY;
goto done;  
}
 

Modified: branches/SAMBA_3_0_26/source/rpcclient/cmd_dfs.c
===
--- branches/SAMBA_3_0_26/source/rpcclient/cmd_dfs.c2007-06-20 17:38:42 UTC 
(rev 23554)
+++ branches/SAMBA_3_0_26/source/rpcclient/cmd_dfs.c2007-06-20 18:05:48 UTC 
(rev 23555)
@@ -36,7 +36,7 @@
return NT_STATUS_OK;
}
 
-   rpccli_dfs_GetManagerVersion(cli, mem_ctx, dfs_exists);
+   result = rpccli_dfs_GetManagerVersion(cli, mem_ctx, dfs_exists);
 
printf(dfs is %spresent\n, dfs_exists ?  : not );
 

Modified: branches/SAMBA_3_0_26/source/rpcclient/cmd_echo.c
===
--- branches/SAMBA_3_0_26/source/rpcclient/cmd_echo.c   2007-06-20 17:38:42 UTC 
(rev 23554)
+++ branches/SAMBA_3_0_26/source/rpcclient/cmd_echo.c   2007-06-20 18:05:48 UTC 
(rev 23555)
@@ -63,12 +63,14 @@
if ( (in_data = (uint8_t*)SMB_MALLOC(size)) == NULL ) {
printf(Failure to allocate buff of %d bytes\n,
   size);
-   goto done;  
+   result = NT_STATUS_NO_MEMORY;
+   goto done;
}
if ( (out_data = (uint8_t*)SMB_MALLOC(size)) == NULL ) {
printf(Failure to allocate buff of %d bytes\n,
   size);
-   goto done;  
+   result = NT_STATUS_NO_MEMORY;
+   goto done;
}
 
for (i = 0; i  size; i++)
@@ -111,6 +113,7 @@
if ( (out_data = (uint8_t*)SMB_MALLOC(size)) == NULL ) {
printf(Failure to allocate buff of %d bytes\n,
   size);
+   result = NT_STATUS_NO_MEMORY;
goto done;  
}

@@ -148,6 +151,7 @@
if ( (in_data = (uint8_t*)SMB_MALLOC(size)) == NULL ) {
printf(Failure to allocate buff of %d bytes\n,
   size);
+   result = NT_STATUS_NO_MEMORY;
goto done;  
}
 



svn commit: samba r23556 - in branches: SAMBA_3_0/source/nmbd SAMBA_3_0_25/source/nmbd SAMBA_3_0_26/source/nmbd

2007-06-20 Thread jra
Author: jra
Date: 2007-06-20 23:24:18 + (Wed, 20 Jun 2007)
New Revision: 23556

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=23556

Log:
Fix for error path from Atsushi Nakabayashi [EMAIL PROTECTED].
Jeremy.

Modified:
   branches/SAMBA_3_0/source/nmbd/nmbd_winsserver.c
   branches/SAMBA_3_0_25/source/nmbd/nmbd_winsserver.c
   branches/SAMBA_3_0_26/source/nmbd/nmbd_winsserver.c


Changeset:
Modified: branches/SAMBA_3_0/source/nmbd/nmbd_winsserver.c
===
--- branches/SAMBA_3_0/source/nmbd/nmbd_winsserver.c2007-06-20 18:05:48 UTC 
(rev 23555)
+++ branches/SAMBA_3_0/source/nmbd/nmbd_winsserver.c2007-06-20 23:24:18 UTC 
(rev 23556)
@@ -2333,6 +2333,7 @@
if (tdb_reopen(wins_tdb)) {
DEBUG(0,(wins_write_database: tdb_reopen failed. Error 
was %s\n,
strerror(errno)));
+   _exit(0);
return;
}
}

Modified: branches/SAMBA_3_0_25/source/nmbd/nmbd_winsserver.c
===
--- branches/SAMBA_3_0_25/source/nmbd/nmbd_winsserver.c 2007-06-20 18:05:48 UTC 
(rev 23555)
+++ branches/SAMBA_3_0_25/source/nmbd/nmbd_winsserver.c 2007-06-20 23:24:18 UTC 
(rev 23556)
@@ -2333,6 +2333,7 @@
if (tdb_reopen(wins_tdb)) {
DEBUG(0,(wins_write_database: tdb_reopen failed. Error 
was %s\n,
strerror(errno)));
+   _exit(0);
return;
}
}

Modified: branches/SAMBA_3_0_26/source/nmbd/nmbd_winsserver.c
===
--- branches/SAMBA_3_0_26/source/nmbd/nmbd_winsserver.c 2007-06-20 18:05:48 UTC 
(rev 23555)
+++ branches/SAMBA_3_0_26/source/nmbd/nmbd_winsserver.c 2007-06-20 23:24:18 UTC 
(rev 23556)
@@ -2333,6 +2333,7 @@
if (tdb_reopen(wins_tdb)) {
DEBUG(0,(wins_write_database: tdb_reopen failed. Error 
was %s\n,
strerror(errno)));
+   _exit(0);
return;
}
}



Build status as of Thu Jun 21 00:00:02 2007

2007-06-20 Thread build
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2007-06-20 
00:00:23.0 +
+++ /home/build/master/cache/broken_results.txt 2007-06-21 00:01:45.0 
+
@@ -1,4 +1,4 @@
-Build status as of Wed Jun 20 00:00:02 2007
+Build status as of Thu Jun 21 00:00:02 2007
 
 Build counts:
 Tree Total  Broken Panic 
@@ -11,15 +11,15 @@
 libreplace   33 9  0 
 lorikeet-heimdal 31 17 0 
 pidl 20 4  0 
-ppp  15 8  0 
+ppp  15 9  0 
 python   0  0  0 
 rsync36 10 0 
 samba0  0  0 
 samba-docs   0  0  0 
 samba-gtk4  4  0 
-samba4   32 22 12
+samba4   33 27 13
 samba_3_036 17 0 
 smb-build33 33 0 
 talloc   36 8  0 
-tdb  34 2  0 
+tdb  35 2  0 
 


svn commit: samba r23557 - in branches/SAMBA_4_0/source/lib/ldb/modules: .

2007-06-20 Thread abartlet
Author: abartlet
Date: 2007-06-21 01:28:33 + (Thu, 21 Jun 2007)
New Revision: 23557

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=23557

Log:
Ensure that we don't reorder the objectClass list, if we don't have
any subclasses loaded yet, or none are applicable.

This fixes MMC so that it at least displays the Samba domain as a
domain, but there is still work to be done.

Andrew Bartlett

Modified:
   branches/SAMBA_4_0/source/lib/ldb/modules/objectclass.c


Changeset:
Modified: branches/SAMBA_4_0/source/lib/ldb/modules/objectclass.c
===
--- branches/SAMBA_4_0/source/lib/ldb/modules/objectclass.c 2007-06-20 
23:24:18 UTC (rev 23556)
+++ branches/SAMBA_4_0/source/lib/ldb/modules/objectclass.c 2007-06-21 
01:28:33 UTC (rev 23557)
@@ -137,9 +137,9 @@
/* this is the root of the tree.  We will start
 * looking for subclasses from here */
if (ldb_attr_cmp(top, current-objectclass) == 0) {
-   DLIST_ADD(parent_class, current);
+   DLIST_ADD_END(parent_class, current, struct class_list 
*);
} else {
-   DLIST_ADD(unsorted, current);
+   DLIST_ADD_END(unsorted, current, struct class_list *);
}
}
 



svn commit: samba r23558 - in branches/SAMBA_4_0/testprogs/ejs: .

2007-06-20 Thread abartlet
Author: abartlet
Date: 2007-06-21 05:14:13 + (Thu, 21 Jun 2007)
New Revision: 23558

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=23558

Log:
MMC seems to ask for this, so I think we need to include it in our schema.

Andrew Bartlett

Modified:
   branches/SAMBA_4_0/testprogs/ejs/minschema.js


Changeset:
Modified: branches/SAMBA_4_0/testprogs/ejs/minschema.js
===
--- branches/SAMBA_4_0/testprogs/ejs/minschema.js   2007-06-21 01:28:33 UTC 
(rev 23557)
+++ branches/SAMBA_4_0/testprogs/ejs/minschema.js   2007-06-21 05:14:13 UTC 
(rev 23558)
@@ -73,6 +73,7 @@
subClassOf,
governsID,
possSuperiors,
+possibleInferiors,
mayContain,
mustContain,
auxiliaryClass,