Re: winbindd architecture

2002-07-12 Thread Christopher R. Hertel
On Fri, Jul 12, 2002 at 10:44:54AM +1000, Andrew Bartlett wrote: Christopher R. Hertel wrote: Anyway, if the unexpected.tdb is the reason that winbindd needs nmbd, then I think it could be made optional. I imagine that winbindd would be sending regular name queries in order to find the

Some fixes applied to cifs-load-gen for NetApp plus etc

2002-07-12 Thread Richard Sharpe
Hi, I have applied some fixed to get rid of warnings, plus it now plays nice against NetApp, and you can now specify a path to add to all paths that are sent to the server. NetApp is the most picky filer I have seen. It demands share names of the form \\server\share in a TconX, where Windows

Re: smbmount with big file sizes

2002-07-12 Thread Giulio Orsero
On Thu, 11 Jul 2002 22:14:17 +0530, root [EMAIL PROTECTED] wrote: Finally it has been working out the box. Now i am able to rsync the data more than 4GB files as well. But during boot time i gets some error message of this kind. # /lib/ext3.o: unresolved symbol iget4_R7414451b /lib/ext3.o:

Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Johann Hanne
Hi folks, Short version: -- Can anybody tell me if there are hooks in Samba that make it possible to use it in conjunction with an apache module for HTTP-based NTLM-authentication? Long version: - Internet Explorer can authenticate against a Web-Server using the

Re: winbindd architecture

2002-07-12 Thread Richard Sharpe
On Thu, 11 Jul 2002, Christopher R. Hertel wrote: On Fri, Jul 12, 2002 at 10:44:54AM +1000, Andrew Bartlett wrote: Christopher R. Hertel wrote: Anyway, if the unexpected.tdb is the reason that winbindd needs nmbd, then I think it could be made optional. I imagine that winbindd would

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Richard Sharpe
On Fri, 12 Jul 2002, Johann Hanne wrote: Hi folks, Short version: -- Can anybody tell me if there are hooks in Samba that make it possible to use it in conjunction with an apache module for HTTP-based NTLM-authentication? Long version: - Internet Explorer

Two diffs to add paramater self-checking

2002-07-12 Thread David Collier-Brown
These are for param/loadparm.c and utils/testparm.c, respectively, to put in the self-checking that's been languishing... After these go in, I'll start tracking smb.conf changes again, so I can support them, any you can delete samba-patches 298 (Self-check patches for 2.2.0 alpha 3, 11 Apr

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Tim Potter
On Sat, Jul 13, 2002 at 04:47:17AM +0930, Richard Sharpe wrote: The whole thing is based on the authentication used by any SMB client that connects to a SMB server: - The client connects to the server - The server generates and sends some random bytes (challenge) - The client sends a

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Steve Langasek
On Sat, Jul 13, 2002 at 04:47:17AM +0930, Richard Sharpe wrote: Short version: -- Can anybody tell me if there are hooks in Samba that make it possible to use it in conjunction with an apache module for HTTP-based NTLM-authentication? Long version: -

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Alexander Bokovoy
On Fri, Jul 12, 2002 at 07:44:24PM +0200, Johann Hanne wrote: Short version: -- Can anybody tell me if there are hooks in Samba that make it possible to use it in conjunction with an apache module for HTTP-based NTLM-authentication? Yes, there are such hooks. You can look at

Kerberos with Samba 3.0 alpha9

2002-07-12 Thread Vijay Kota
Hi all, First off, apologies if this is the wrong forum or the message is a repeat. I have Samba set up to join a realm. Most of the time, my Win2k client gets authenticated as follows: 1. Client sends NTLMSSP_NEGOTIATE 2. Samba sends back NTLMSSP_CHALLENGE 3. Client sends

Re: winbindd architecture

2002-07-12 Thread Christopher R. Hertel
On Sat, Jul 13, 2002 at 04:21:47AM +0930, Richard Sharpe wrote: : We have to node status to get the *name* of the PDC, becouse the NETLOGON RPC requires that. Windows machines to a NETLOGON Mailslot message, but we don't do that at present. So you join the domain without knowing

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Richard Sharpe
On Fri, 12 Jul 2002, Tim Potter wrote: On Sat, Jul 13, 2002 at 04:47:17AM +0930, Richard Sharpe wrote: It's actually NTLMSSP base-64 encoded in http headers. There has been much discussion about this on this list and on #samba-technical and it may already be possible or close to

Re: 32 security group limitation ?

2002-07-12 Thread Jim McDonough
Possibly that Linux allows a user to be in a max of 32 groups? Yes, this is the limit. Look in your kernel source at include/asm/param.h for NGROUPS. Jim McDonough IBM Linux Technology Center Samba Team 6 Minuteman Drive Scarborough, ME 04074 USA [EMAIL PROTECTED]

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Tim Potter
On Sat, Jul 13, 2002 at 06:23:38AM +0930, Richard Sharpe wrote: Nope. There's a challenge sent by either the server and then the client produces a LM and NT response which is a hash of the challenge and the user's password. This is sent to the server (in this case winbindd) for

Re: Status Codes (and OS/2 error codes)

2002-07-12 Thread Christopher R. Hertel
On Thu, Jul 11, 2002 at 03:01:34PM -0500, Steven French wrote: OS/2 had 16 bit errors - basically the ERRdos range (SMB error class) is mostly error codes introduced in OS/2 development and could be just as easily named ERRos2 The old X/Open doc says (in its description of availabel

Quick Capabilities field question.

2002-07-12 Thread Christopher R. Hertel
I think I've got this figured, but someone let me know if'n I've got it sidewards. The server sends its Capabilities data in the NegProt respoinse, and then the client replies with its Capabilities in the SESSION_SETUP_ANDX. The two values are ANDed... and the result is the agreed upon

[PATCH] Password Locked Account Control

2002-07-12 Thread Patrick McCarty
Attached is a patch against HEAD that provides the 'P' option for acctFlags. I havent been able to test this yet, so use with care. Ideally, this would eventually set the user cannot change password bit to the client, but as Andrew mentioned, this hasnt been fully implemented, and I'm not

Re: [PATCH] Password Locked Account Control

2002-07-12 Thread Andrew Bartlett
Patrick McCarty wrote: Attached is a patch against HEAD that provides the 'P' option for acctFlags. Can you please verify that this is the correct bit to set? Rember, MS defines them - so we should check. Ethereal should be able to show you. I havent been able to test this yet, so use