VS: Default ACL dosn't work

2002-07-01 Thread Nieminen, Jooel
I've had the exact same problem. there has been no way to set samba use the rights. only way around was to set inheritance on acl's and permissions. anyway, this does not prevent samba from setting itself the file permissions. it forces them to be owner, domain users, and everyone! silly I say.

Re: Proposed patch for DNS and name resolution related problems inappliance branch

2002-07-01 Thread Simo Sorce
On Mon, 2002-07-01 at 03:55, Tim Potter wrote: I know Jeremy initially wasn't keen on the resolve/retry stuff going in to HEAD but maybe in the context of optimising name resolution he will change his mind. (-: I heartedly agree. We need some kind of DNS caching both of positive and

RE: Proposed patch for DNS and name resolution related problems inappliance branch

2002-07-01 Thread Toomas Soome
Please keep in mind that there is ns cache on some platforms already (solaris nscd etc), so this feature should be possible to be switched off. toomas -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Simo Sorce Sent: Monday, July 01, 2002 11:03

VS: Default ACL dosn't work

2002-07-01 Thread Nieminen, Jooel
I'm using bestbits ACL-patch too. got exchausted with the xfs. about samba picking the acl, yes it did pick it up. there is no other problem than making the default work. even if I manually locally make some domain group to be the default instead of domain users samba sets it to be domain users

Re: smbd

2002-07-01 Thread David Lee
On Fri, 28 Jun 2002, Lupscha, Franc (AU - Sydney) wrote: I am running Samba 2.2.2 on SUN SPARC Solaris 8 (feb 2002) with all the latest patches. Samba appears to be running fine except that I get the following appearing in the log.smbd file . yield_connection: tdb_delete for name

Samba and Netatalk

2002-07-01 Thread Max Bidlingmaier
Hi! I've got a Problem with the interaction between Samba and Netatalk. I compiled Samba with the --with_netatalk option for configure. I thought it should create the correct files in .AppleDouble but it doesn't. Can anybody help me with this? greets max bidlingmaier

RE: (no subject)

2002-07-01 Thread Simo Sorce
On Mon, 2002-07-01 at 11:42, Ulf Bertilsson wrote: An dummy desktop.ini and some generic cached fileid to show fancy icons would be nice, but brake stuff. I would not make that. Then my os allow many strange filenames, how should that be dealt with ? We check if the filename is OK (do not

Smbpasswd

2002-07-01 Thread kelvin
Hi, I am in the process of tranfering my samba users(around 150) from a Redhat6.1 server to a new Redhat7.3 server. I have successfully tranfered the smbusers file to the new 7.3 server.I have also tranfered over the passwd file,group file and shadow file over successfully.Now, my users are not

Re: Smbpasswd

2002-07-01 Thread Simo Sorce
Have you transfered also the (/etc[/samba/]/)smbpasswd file? Is it a domain? In this case have you copied over MACHINE.SID / secrets.tdb files? On Mon, 2002-07-01 at 14:04, kelvin wrote: Hi, I am in the process of tranfering my samba users(around 150) from a Redhat6.1 server to a new

sessionid.tdb missing after build and client read failutre

2002-07-01 Thread David Shapiro
Hello, The latest samba head as of 6/30/02 seems to not provide sessionid.tdb and gives me the following errors: I see this information in the log: 6/28 16:35:59, 3] nsswitch/winbindd_misc.c:winbindd_check_machine_acct(91) secret is good [2002/06/28 16:35:59, 5]

RE: Proposed patch for DNS and name resolution related problemsinappliance branch

2002-07-01 Thread Mike Gerdts
On Mon, 2002-07-01 at 04:37, Toomas Soome wrote: Please keep in mind that there is ns cache on some platforms already (solaris nscd etc), so this feature should be possible to be switched off. toomas nscd only comes into play when get*by*() routines (e.g. gethostbyname()) are used. If

RE: Proposed patch for DNS and name resolution related problemsinappliance branch

2002-07-01 Thread Mike Gerdts
On Mon, 2002-07-01 at 09:38, Mike Gerdts wrote: But... that begs the question, why not just use gethostbyname()? This way it will get resolved out of /etc/hosts, NIS, LDAP, DNS, etc., and nscd will take care of it. nscd exists on Solaris, Linux, and should be available anywhere else that

NT permissions

2002-07-01 Thread guy roussin
[Sorry, i post this message on samba list last week but without success] Hello, I try to use NT permissions on 2 Sun Solaris with ACL and samba 2.2.5. I configure samba --with-acl. I can modify permissions on the PDC (security = USER). But on the other one (XYZ) (security = SERVER and password

RE: Samba and Netatalk

2002-07-01 Thread Esh, Andrew
Title: RE: Samba and Netatalk Last time I looked at that code (two weeks ago?) in the 2.2 branch, it wasn't being called anywhere. -Original Message- From: Max Bidlingmaier [mailto:[EMAIL PROTECTED]] Sent: Monday, July 01, 2002 5:30 AM To: [EMAIL PROTECTED] Subject: Samba and

Re: sessionid.tdb missing after build and client read failutre

2002-07-01 Thread Richard Sharpe
On Mon, 1 Jul 2002, David Shapiro wrote: Hello, The latest samba head as of 6/30/02 seems to not provide sessionid.tdb and gives me the following errors: I see this information in the log: 6/28 16:35:59, 3] nsswitch/winbindd_misc.c:winbindd_check_machine_acct(91) secret is good

RE: (no subject)

2002-07-01 Thread Ulf Bertilsson
On Mon, 2002-07-01 at 11:42, Ulf Bertilsson wrote: An dummy desktop.ini and some generic cached fileid to show fancy icons would be nice, but brake stuff. I would not make that. I know, it don't make sence but the idea would provide great preformance. Like, my os don't multiuser

[Security Problem] --with-tdbsam

2002-07-01 Thread Yasuma Takeda
In Samba-JP, buffer overflow problem was reported. If samba is configured with --with-tdbsam, init_sam_from_buffer function contains a buffer overflow vulnerability. In a certain case, user can use this vulnerability by changing his password. Please examine this security problem and take

RE: sessionid.tdb missing after build and client read failutre

2002-07-01 Thread David Shapiro
Thanks. Any idea on why wbinfo -t fails? Is it related to sessionid.tdb missing? How do I get this file? I did remove myself from INS domain and rejoined again. David -Original Message- From: Richard Sharpe [mailto:[EMAIL PROTECTED]] Sent: Monday, July 01, 2002 12:08 PM To: David

RE: Default ACL dosn't work

2002-07-01 Thread Noel Kelly
yes i can see what you are getting at. we got around the group assignment by using the 'force group' parameter but this is more of a work around than a true ACL interpretation. -Original Message- From: Nieminen, Jooel [mailto:[EMAIL PROTECTED]] Sent: 01 July 2002 09:46 To: Noel Kelly;

RE: sessionid.tdb missing after build and client read failutre

2002-07-01 Thread Richard Sharpe
On Mon, 1 Jul 2002, David Shapiro wrote: Thanks. Any idea on why wbinfo -t fails? Is it related to sessionid.tdb missing? How do I get this file? I did remove myself from INS domain and rejoined again. Typically that fails because you have not joined the domain properly, or you cannot

Re: [Security Problem] --with-tdbsam

2002-07-01 Thread Jeremy Allison
On Mon, Jul 01, 2002 at 09:39:46PM +0900, Yasuma Takeda wrote: In Samba-JP, buffer overflow problem was reported. If samba is configured with --with-tdbsam, init_sam_from_buffer function contains a buffer overflow vulnerability. In a certain case, user can use this vulnerability by

Re: [Security Problem] --with-tdbsam

2002-07-01 Thread Jeremy Allison
On Mon, Jul 01, 2002 at 02:08:03PM -0700, Jeremy Allison wrote: Can you send more details please to [EMAIL PROTECTED], and CC: [EMAIL PROTECTED] I don't immediately see the problem this patch is fixing and need to understand it before I can apply it. Never mind - I see the problem now.

Re: [Security Problem] --with-tdbsam

2002-07-01 Thread Tim Potter
On Mon, Jul 01, 2002 at 03:27:02PM -0700, Jeremy Allison wrote: Please examine this security problem and take measures to be necessary. Ok - in conversation with tridge we don't think this is an exploitable hole. If you believe otherwise can you please mail [EMAIL PROTECTED] with full

Re: Proposed patch for DNS and name resolution related problems in appliance branch

2002-07-01 Thread Tim Potter
OK I've been working at this a bit more and have come up with some performance modifications: - Only cache the #1b and #1c names for a very short period of time (say 10 seconds) as these names can change quickly especially if they are stored on a WINS server. - If a cli_connect()