Re: Support for Multiple Data Streams?

2003-03-21 Thread Olaf Frczyk
On Fri, 2003-03-21 at 01:12, Richard Sharpe wrote: Right, XATTRs would be one way to do it on Linux. Of course, Samba needs some mods, and Tridge was looking at putting that into his NTVFS layer (where it belongs). Hi, It will not work. For example XFS has maximum length for them: 64 KB.

Extended Attributes and Hidden, System, Archive attrs?

2003-03-21 Thread Olaf Frczyk
Hi, I remember some time ago several people were discussing about putting the Hidden, System, Archive, Read-Only bits in EAs. Has it been done in 3.0? Will it be in 2.2.x serie? Regards, Olaf Frczyk

Re: patch for account policy, min password age, on samba30a22

2003-03-21 Thread Jianliang Lu
On Fri, 2003-03-21 at 01:36, Jianliang Lu wrote: On Thu, 2003-03-20 at 23:08, Jianliang Lu wrote: Hi, I'm working to complete the account policy that today worked only for min password len. The first patch is for tne min passwod age, than others... Now pdbedit is also

Re: very interesting!

2003-03-21 Thread Simo Sorce
On Fri, 2003-03-21 at 08:12, Martin Pool wrote: On 20 Mar 2003, Richard Sharpe [EMAIL PROTECTED] wrote: On Fri, 21 Mar 2003, Martin Pool wrote: I just noticed this in the libc manual. http://www.gnu.org/manual/glibc-2.2.5/html_node/Backtraces.html It could be pretty cool

Re: Extended Attributes and Hidden, System, Archive attrs?

2003-03-21 Thread Simo Sorce
On Fri, 2003-03-21 at 09:44, Olaf Frczyk wrote: Hi, I remember some time ago several people were discussing about putting the Hidden, System, Archive, Read-Only bits in EAs. Has it been done in 3.0? No, not yet. It will be available on on system the supports EAs btw, so we need to make

Re: patch for account policy, min password age, on samba30a22

2003-03-21 Thread Jianliang Lu
Now I patched in the place that Andrew wondered. Jianliang Lu TieSse s.p.a. [EMAIL PROTECTED] [EMAIL PROTECTED] --- samba-3.0alpha22/source/passdb/pdb_get_set.cFri Mar 21 11:25:35 2003 +++ samba-3.0alpha22/source/passdb/pdb_get_set.c.fixFri Mar 21 11:25:27 2003 @@ -1064,6 +1064,7 @@

Samba an NT40 Domain

2003-03-21 Thread Operator (SCHMIEDER it-solutions)
we have 2 NT40-SP6a Servers, on as PDC, one as BDC togehter with Samba 2.4.7a in on Network Segment. All the user-accounts are on the PDC - so we use winbind. The samba server should work as BDC in that domain an hold the profiles an the homes. Everythin works mostly but sometimes the clients dont

Lsa RPC

2003-03-21 Thread D Jemms
Greetings, I have samba setup on redhat linux with active directory server in place.How do I generate LsaLookupnames and LsaLookupSid RPCs ? What operation to carry from win2k client to generate these RPC? -DJ __ Do you Yahoo!? Yahoo! Platinum -

winbind and workstation account

2003-03-21 Thread Operator (SCHMIEDER it-solutions)
when i use winbind to connect a samba server to an existing nt-domain what i have to do: a) create a workstation account (unix+samba account) for every workstation in the domain manualy b) the workstation account dos not matter because that is handled by the PDC c) configure winbind (or rpc) to

Re: winbind and workstation account

2003-03-21 Thread Jelmer Vernooij
On Fri, Mar 21, 2003 at 02:18:24PM +0100, Operator (SCHMIEDER it-solutions) wrote about 'winbind and workstation account': when i use winbind to connect a samba server to an existing nt-domain what i have to do: a) create a workstation account (unix+samba account) for every workstation in

winbind and workstation account

2003-03-21 Thread Operator (SCHMIEDER it-solutions)
Hallo Jelmer, thank you for that very fast answer. I checked that but i did not findout a solution. I the script i called that commands: useradd -s /bin/false -d /dev/null machine_name\$ passwd -l machine_name\$ smbpasswd -a -m machine_name Without success Do you have an example for

Backup interface?

2003-03-21 Thread Derrell . Lipman
I am in search of a method of backing up open files on Windows machines, using Samba or libsmbclient on a Linux machine. I've heard rumors of a Backup Interface in the network protocols, which allows backing up open files when a normal open() would fail), but have not been able to find any

net rpc samsync: smarter patch than the previous one

2003-03-21 Thread Ronan Waide
Thanks to pointers from Andrew Bartlett, I redid my samsync sam_account_from_delta patch a little more sanely. Now it only marks as changed things which have actually changed. This patch is against current HEAD. The STRING_CHANGED macro and general style of the additions is copied from

another samsync diff (cosmetic)

2003-03-21 Thread Ronan Waide
This makes samsync tell you what record types it's skipping, rather than just dumping out the number corresponding to the type. It also prints the database type instead of database 1, database 2, database 3. Cheers, Waider. Index: utils/net_rpc_samsync.c

Re: Extended Attributes and Hidden, System, Archive attrs?

2003-03-21 Thread jra
On Fri, Mar 21, 2003 at 09:44:26AM +0100, Olaf Fr±czyk wrote: Hi, I remember some time ago several people were discussing about putting the Hidden, System, Archive, Read-Only bits in EAs. Has it been done in 3.0? Will it be in 2.2.x serie? Not done for 2.2., I'm thinking about it for

Re: Lsa RPC

2003-03-21 Thread D Jemms
Even I don't know any rpc client program for win2k . But the problem :what sequence of operations generate these RPC when perforemd from win2k client. -DJ --- Jelmer Vernooij [EMAIL PROTECTED] wrote: On Fri, Mar 21, 2003 at 05:07:46AM -0800, D Jemms wrote about 'Lsa RPC': Greetings, I

Re: [SECURITY] Samba 2.2.8 available for download

2003-03-21 Thread David Collier-Brown -- Customer Engineering
Green, Paul wrote: However, on a chip that does distinguish areas of virtual memory that are code, and areas that are data, and further disallows execution of data (absent a specific operating system call to change the access mode of that region of virtual memory), it seems to

PATCH: pdb_guest into 3.0

2003-03-21 Thread Volker Lendecke
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Andrew ( the rest :-) I took some minutes to extract two sets of changes from HEAD and made them suitable for 3_0 (to make merging easier for you): * pdb_getgr** in mapping.c * pdb_guest.c You only have to add pdb_guest.c after applying this

Re: Lsa RPC

2003-03-21 Thread Jelmer Vernooij
Quite some stuff. When viewing the owner of a file, your workstation needs to do a lookup of the sid one way or another. If you're using a domain, one of these RPC's will be issued to your DC. Jelmer On Fri, Mar 21, 2003 at 09:00:36AM -0800, D Jemms wrote about 'Re: Lsa RPC': Even I don't know

Re: Machine account password interoperablity for Samba 3.0secrets.tdb and keytabs

2003-03-21 Thread Andrew Bartlett
On Sat, 2003-03-22 at 06:15, Matt Peterson wrote: Hi, In situations where people are operating in a kerberized environment where Win2k is the KDC, machine objects will have already been created for machines that are participating in the kerberos realm. Am I wrong in thinking that

Re: Machine account password interoperablity for Samba 3.0secrets.tdb and keytabs

2003-03-21 Thread Luke Howard
Yes. This is a problem. In the past I have favored a 'krb5 keytab write' option that would write our password out into the standard keytab, but there were good reasons not to. The problem is, I can't remember what they were. Mostly 'if somebody changed our password under us' stuff. Hmm, why

Re: Machine account password interoperablity for Samba 3.0secrets.tdb and keytabs

2003-03-21 Thread Matt Peterson
Andrew, On Friday 21 March 2003 03:12 pm, Andrew Bartlett wrote: On Sat, 2003-03-22 at 06:15, Matt Peterson wrote: Hi, In situations where people are operating in a kerberized environment where Win2k is the KDC, machine objects will have already been created for machines that are

Re: Machine account password interoperablity for Samba 3.0secrets.tdb and keytabs

2003-03-21 Thread Andrew Bartlett
On Sat, 2003-03-22 at 09:13, Luke Howard wrote: Yes. This is a problem. In the past I have favored a 'krb5 keytab write' option that would write our password out into the standard keytab, but there were good reasons not to. The problem is, I can't remember what they were. Mostly 'if

Re: winbind and workstation account

2003-03-21 Thread 'Jelmer Vernooij'
IIRC there's more about this in the docs. I think the add user script was only supposed to create the unix account. Jelmer On Fri, Mar 21, 2003 at 02:42:39PM +0100, Operator (SCHMIEDER it-solutions) wrote about 'winbind and workstation account': Hallo Jelmer, thank you for that very fast

[pseudo-patch] passdb/pdb_interface.c

2003-03-21 Thread Green, Paul
Re: build farm errors for Stratus VOS on head and 3.0. I would be grateful if whomever added a reference to FALSE to line 31 of passdb/pdb_interface.c would change it to False. The latter is the POSIX name for the macro; the former is non-POSIX. Or grant me ([EMAIL PROTECTED]) cvs access and

Re: very interesting!

2003-03-21 Thread John E. Malmberg
Simo Sorce wrote: It would be really nice to have this feature! 90% of time I attach a gdb to get a backtrace, it wuold also speed up development imho. The interception of the signal by smb_panic() disables this feature on OpenVMS. If the operating system has a build in backtrace handler, it is

Re: [pseudo-patch] passdb/pdb_interface.c

2003-03-21 Thread Jelmer Vernooij
On Fri, Mar 21, 2003 at 06:59:03PM -0500, Green, Paul wrote about '[pseudo-patch] passdb/pdb_interface.c': Re: build farm errors for Stratus VOS on head and 3.0. I would be grateful if whomever added a reference to FALSE to line 31 of passdb/pdb_interface.c would change it to False. The

pdb_ldap.c, second attempt

2003-03-21 Thread Volker Lendecke
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Andrew! Thinking twice and arguing with you sometimes really helps. Thanks! This is my second attempt that is a lot more robust and less intrusive. I'm really amazed how picky LDAP really is. Volker -BEGIN PGP SIGNATURE- Version:

Re: [SECURITY] Samba 2.2.8 available for download

2003-03-21 Thread John E. Malmberg
Paul Green wrote about potential vulnerabilities in getting a stack overflow to execute arbitrary code by an attacker. Many hardware platforms do have the protection that you describe, but it depends on the software to set up the protection. Also someone would need to have intimate knowlege of

Re: pdb_ldap.c, second attempt

2003-03-21 Thread Andrew Bartlett
On Sat, 2003-03-22 at 11:21, Volker Lendecke wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Andrew! Thinking twice and arguing with you sometimes really helps. Thanks! This is my second attempt that is a lot more robust and less intrusive. This looks *much* better. Thanks!

3.0alpha22 does not execute add user script ?

2003-03-21 Thread A. S.
Hi The 3.0alpha22 does not seem to execute the add user script when running as security = domain. The same configuration used to work fine with samba 2.2.7 I am making samba as the member of the domain and have users store their files to the home shares on the samba, so that I need to have add

Re: [Samba] 3.0alpha22 does not execute add user script ?

2003-03-21 Thread Andrew Bartlett
On Sat, 2003-03-22 at 02:21, A. S. wrote: John H Terpstra [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] On Fri, 21 Mar 2003, A. S. wrote: Correct. When you configure samba with security = domain you re telling it to be a domain member server. Domain members do NOT provide the

Re: [Samba] 3.0alpha22 does not execute add user script ?

2003-03-21 Thread John H Terpstra
On Fri, 21 Mar 2003, A. S. wrote: Hi The 3.0alpha22 does not seem to execute the add user script when running as security = domain. The same configuration used to work fine with samba 2.2.7 Correct. When you configure samba with security = domain you re telling it to be a domain member

Re: [Samba] 3.0alpha22 does not execute add user script ?

2003-03-21 Thread A. S.
John H Terpstra [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] On Fri, 21 Mar 2003, A. S. wrote: Correct. When you configure samba with security = domain you re telling it to be a domain member server. Domain members do NOT provide the netlogon service nor do they partake in domain