Re: A RID allocator and its consequences

2002-09-27 Thread Volker.Lendecke
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OK, the really nasty bit about this is the implict mapping of existing unix accounts to rids. I went to a lot of effor to try and get rid of it - but the best I could do was hide it under a pile of interfaces and pretend it wasn't there ;-)

Re: --wuth-tdbsam ?

2002-09-27 Thread Volker Lendecke
On Thu, Sep 26, 2002 at 09:14:39PM +0200, Jean Francois Micouleau wrote: and tdbsam should be the default passdb backend in 3.0. We should remove the smbpasswd file and provide a migration script. Oh, this is radical. But it would make a *LOT* of stuff easier. Not sure if I really like that. I

Re: A RID allocator and its consequences

2002-09-27 Thread Andrew Bartlett
[EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OK, the really nasty bit about this is the implict mapping of existing unix accounts to rids. I went to a lot of effor to try and get rid of it - but the best I could do was hide it under a pile of interfaces and

Re: --wuth-tdbsam ?

2002-09-27 Thread Andrew Bartlett
Volker Lendecke wrote: On Thu, Sep 26, 2002 at 09:14:39PM +0200, Jean Francois Micouleau wrote: and tdbsam should be the default passdb backend in 3.0. We should remove the smbpasswd file and provide a migration script. Oh, this is radical. But it would make a *LOT* of stuff easier. Not

Re: --wuth-tdbsam ?

2002-09-27 Thread Volker Lendecke
On Fri, Sep 27, 2002 at 05:29:32PM +1000, Andrew Bartlett wrote: We actually have all this already. Jelmer has an XML passdb backend, and pdbedit -i and -e do the rest. So samba finally becomes buzzword-compliant :-) We should then better not have XML in the examples subdirectory. Volker

Re: A RID allocator and its consequences

2002-09-27 Thread Volker.Lendecke
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 pdb_smbpasswd and pdb_unixsam both use the code in passdb.c (pdb_fill_sam_pw()) to construct their SAM_ACCOUNT, and to do uid-sid mapping. In fact, becouse of this, smbpasswd already uses the gid code to determine the primary group RID on the

Re: acct_ctrl in context_sam_enum_accounts

2002-09-27 Thread Stefan (metze) Metzmacher
At 18:27 26.09.2002 +0200, Jelmer Vernooij wrote: Hi all! What kind of a value is the acct_ctrl argument of context_sam_enum_accounts supposed to be? It should be possible to list all accounts, that's why the current implementation isn't very usable... list all accounts withacct_ctrl =

Re: --wuth-tdbsam ?

2002-09-27 Thread Simo Sorce
On Fri, 2002-09-27 at 03:53, Andrew Bartlett wrote: I honestly doubt tdbsam is sufficiently stable for use as a default. I think we need that kind of backend, but given it's extremly limited testing, it worries me. Yes, this is circular dependency. I haven't had an extensive test setup

Re: removing group_rid from SAM_ACCOUNT rules out non-unix-accounts:-(

2002-09-27 Thread Andrew Bartlett
Simo Sorce wrote: And in my honest opinion we should get out the possibility to have multiple backends active at the same time, I really think that move has put us back 6 months in development and has caused more problems than what the pros get with such a monster. I still don't see where

Re: removing group_rid from SAM_ACCOUNT rules outnon-unix-accounts:-(

2002-09-27 Thread Simo Sorce
It seem easy, but that prevented (at least in my case) to make the system better. The way we use multiple module in passdb is subtly broken and exposes us to inconsistency and a lot of races. and is not nice to have races in the users database. the sam initially made a sane route and we also

Re: acct_ctrl in context_sam_enum_accounts

2002-09-27 Thread Jelmer Vernooij
On Fri, Sep 27, 2002 at 10:16:28AM +0200, Stefan (metze) Metzmacher wrote about 'Re: acct_ctrl in context_sam_enum_accounts': At 18:27 26.09.2002 +0200, Jelmer Vernooij wrote: Hi all! What kind of a value is the acct_ctrl argument of context_sam_enum_accounts supposed to be? It should be

CVS update for alpha release - update

2002-09-27 Thread James Bowes
Hi again. My faux pas; I used the HEAD branch, which was not correct. So I tried the 3_0 branch and it has compiled successfully as it should... The documentation on the web site regarding CVS did not list the 3_0 branch ;~{ -- James Bowes, Senior Systems Consultant, Xisit Ph: 604-535-6508

nmbd cldap patch

2002-09-27 Thread Jim McDonough
Here's a link to the patch that aliguori wrote and I cleaned up to respond to the connectionless ldap v3 requests for netlogon info. http://www-124.ibm.com/developer/opensource/linux/patches/?patch_id=540 I'm not so sure this belongs in nmbd, because once we respond to these, win2k clients send

Re: CVS update for alpha release - update

2002-09-27 Thread Jelmer Vernooij
On Fri, Sep 27, 2002 at 08:08:59AM -0700, James Bowes wrote about 'CVS update for alpha release - update': Hi again. My faux pas; I used the HEAD branch, which was not correct. What wasn't correct about it ? Jelmer

Samba 3.0 and ldap setup?

2002-09-27 Thread Eddie Lania
Hello everyone, Following the discussions on this list, I am getting a little confused now. Which configure string do I have to use when I want to setup Samba on a RedHat 7.0 system with ldap? What I have done so far is: Downloaded samba from cvs. ,/configure --sbindir=/usr/local/samba/bin

Hide Unreadable

2002-09-27 Thread Josh Brown
Anyone experience when the key hide unreadable = yes, where the user goes to create a directory and it prompts with (you may not be able to access the files created in \\server\share) do you want to continue. I am using Windows 2000 Sp3, when I create a file it does not do this. There

Re: nmbd cldap patch

2002-09-27 Thread Luke Howard
Quick comments: s/objectSID/domainSid/ -- the netlogon attribute does not conform to the the Active Directory schema. Also, LDAP attributes are case-insensitive; don't use memcmp(). -- Luke From: Jim McDonough [EMAIL PROTECTED] Subject: nmbd cldap patch To: [EMAIL PROTECTED] Date: Fri, 27