Re: SID related debug messages

2003-03-31 Thread Tim Potter
On Mon, Mar 31, 2003 at 01:56:45PM +0200, Michael Steffens wrote: the attached enhancements of SID related debug messages were quite useful for me for tracking down where strange SIDs winbindd complained about are coming from. Being there I found that my suspicous SIDs are included in the

generating core dumps in winbindd and smbd

2003-03-27 Thread Tim Potter
I was poking around in the segv signal handling code today as I'm in a situation where an actual core dump would be handy to have. The intent of the current code looks like core dumps are to be made in $LOGDIR/corefiles but the dump_core() function is never executed as the argument to

Re: generating core dumps in winbindd and smbd

2003-03-27 Thread Tim Potter
On Thu, Mar 27, 2003 at 09:41:55PM -0800, Richard Sharpe wrote: On Fri, 28 Mar 2003, Tim Potter wrote: I was poking around in the segv signal handling code today as I'm in a situation where an actual core dump would be handy to have. The intent of the current code looks like core

Re: winbind build/link question

2003-03-25 Thread Tim Potter
On Tue, Mar 25, 2003 at 12:37:33PM -0500, Roylance, Stephen D. wrote: I'm trying to use some of the functions in winbind_nss.c in my winbind_aix.c module. It compiles, but when I try to link it fill_pwent is unresolved. What do I need to link against in order to get fill_pwent and such from

Re: SID_NAME_USE

2003-03-20 Thread Tim Potter
On Thu, Mar 20, 2003 at 02:12:17PM +0100, Stefan (metze) Metzmacher wrote: Hi Tim, why did you remove SID_NAME_NONE vars from type 'enum SID_NAME_USE' should be initialize with SID_NAME_NONE I removed it because it wasn't used anywhere!

Re: Compiling Samba 2.2.8 on HPUX 11.0

2003-03-20 Thread Tim Potter
On Thu, Mar 20, 2003 at 03:01:58PM -0800, Orwig, Paul wrote: [...] My fix is neither pretty nor proper. What is needed to fix the configure script to handle HPUX 11.0 properly?? I'd love to know as well. Can you send me the output of config.log in private mail? Tim.

Re: Support for Multiple Data Streams?

2003-03-20 Thread Tim Potter
On Thu, Mar 20, 2003 at 03:46:59PM -0500, Ken Cross wrote: Yes, to support it properly, the underlying filesystem should include all streams when you cp/mv/rm/... And a portable backup/restore could be interesting! However, I'm having trouble getting Samba to return goofy names like

Re: Support for Multiple Data Streams?

2003-03-20 Thread Tim Potter
On Thu, Mar 20, 2003 at 11:28:33PM +, [EMAIL PROTECTED] wrote: Yes, to support it properly, the underlying filesystem should include all streams when you cp/mv/rm/... And a portable backup/restore could be interesting! However, I'm having trouble getting Samba to return goofy

Re: Compiling samba 2.2.8 on HP-UX 11.00 - conflicting definitionof snprintf

2003-03-18 Thread Tim Potter
On Wed, Mar 19, 2003 at 04:09:19PM +1030, Adam Fox wrote: When I ran configure the following was reported about the printf functions: checking for asprintf declaration... no checking for vasprintf declaration... no checking for vsnprintf declaration... yes checking for snprintf

Re: typos in SAMBA_3_0 CVS

2003-03-17 Thread Tim Potter
On Mon, Mar 17, 2003 at 11:22:54AM +0100, [EMAIL PROTECTED] wrote: i tried to compile the current CVS today and found a typo and missing arguments. i append a small diff, that fixes these problems.. Hi - someone forgot their janitorial duties with regard to the smbwrapper support. I've

Re: Information on Samba QA process, Regression testsuites

2003-03-09 Thread Tim Potter
On Sun, Mar 09, 2003 at 06:03:05PM -0500, Scott Prive wrote: I hope this is the correct forum to request this information... I'm looking for information on the Samba test and release process. I expect there's nothing formal like Mozilla, but is there a group or individual who has a primary

Re: Urgent: Cvs download has changed unexpectedly

2003-03-09 Thread Tim Potter
On Sun, Mar 09, 2003 at 02:13:17PM -0500, Dave Collier-Brown wrote: For that last few years, I've been using a makefile to download and build samba, based on the instructions in http://us1.samba.org/samba/cvs.html These are the same instructions that we put in Using Samba, and are

Re: Information on Samba QA process, Regression testsuites

2003-03-09 Thread Tim Potter
On Sun, Mar 09, 2003 at 08:36:56PM -0500, Scott Prive wrote: I'd like to contribute to such an effort -- or start one (using Perl). I have plenty of time for such a thing, while looking for a SQA job :-/. Well hopefully we can get something checked in so people can start working on

Re: Clean up winbindd locking

2003-03-08 Thread Tim Potter
On Sat, Mar 08, 2003 at 09:10:23PM +1100, Andrew Bartlett wrote: Is there any reason I should not apply this patch to Samba HEAD? I think the patch was eaten by Mailman. Please re-send as text/plain. Without even seeing the patch (-: it's definitely a good idea. Tim.

Re: more rpcclient bughunting: PRINTER_ALL_ACCESS vs MAXIMUM_ALLOWED_ACCESS

2003-03-04 Thread Tim Potter
On Tue, Mar 04, 2003 at 05:39:25PM +, Ronan Waide wrote: using setdriver in rpcclient wasn't working for me, so I traced execution and discovered that it uses open_printer_ex with an access level of MAXIMUM_ALLOWED_ACCESS. This only grants me read access to the printer when I am in fact a

Re: file descriptors consumed by printing

2003-03-03 Thread Tim Potter
On Sun, Mar 02, 2003 at 10:25:27PM -0800, Richard Sharpe wrote: This seems like a good way to do it. Does anyone have any objections if I do so? Why do we need it? Just call lp_default_server_announce() and check if the SV_TYPE_PRINTQ_SERVER bit is set. If no print

Re: file descriptors consumed by printing

2003-03-02 Thread Tim Potter
On Sun, Mar 02, 2003 at 06:54:37AM -0800, Richard Sharpe wrote: On Sat, 1 Mar 2003, Vance Lankhaar wrote: What about adding a value to the printing param? - printing = disabled This seems like a good way to do it. Does anyone have any objections if I do so? Why do we need it? Just

Re: file descriptors consumed by printing

2003-03-02 Thread Tim Potter
On Sun, Mar 02, 2003 at 10:10:53PM -0800, Richard Sharpe wrote: This seems like a good way to do it. Does anyone have any objections if I do so? Why do we need it? Just call lp_default_server_announce() and check if the SV_TYPE_PRINTQ_SERVER bit is set. If no print shares are

Re: problem retrieving level 3 info for NT printer drivers

2003-02-27 Thread Tim Potter
On Thu, Feb 27, 2003 at 05:10:12PM +, Ronan Waide wrote: try again with HEAD. The Samba 2-2 client rpc code cannot handle fragmented PDU's too well. Sorry, should have mentioned. This is with HEAD. Tim Potter has been having a look at tcpdump plus a level ten debug trace

Re: [PATCH] More CLDAP changes (last round hopefully)

2003-02-27 Thread Tim Potter
On Thu, Feb 27, 2003 at 01:38:50PM -0800, Chere Zhou wrote: This patch works for me. Thanks a lot! But I do have to manually edit the file, because long lines got wrapped in the email. There's a neat-o program called 'unwrapdiff' that can do all the hard for for you. Under debian it is

Re: [PATCH] file change notification

2003-02-14 Thread Tim Potter
On Fri, Feb 14, 2003 at 10:21:04PM +0100, Juergen Hasch wrote: actually it looks quite good :-) That's good to hear! Attached is a capture from two W2K machines talking to each other. Packet No. 19 shows the NT NOTIFY response packet. This capture was made using the Windows version of

Re: query about rpcclient process_cmd:

2003-02-13 Thread Tim Potter
On Thu, Feb 13, 2003 at 10:24:57AM -0800, Herb Lewis wrote: Isn't the second check for newline redundant? Looks like it to me. Only redundant if we can guarentee that the cmd string will only have one \n at the end and no other ones embeded in the string. I don't know enough about

Re: winbindd losing trust relationship once in a while (Samba 3.0)

2003-02-12 Thread Tim Potter
On Wed, Feb 12, 2003 at 10:47:38AM +0200, Nir Soffer wrote: Scenario: Fresh compile of Samba 3.0, both a20 and a21. Attempt to use attached smb.conf. EXANET-QA is a part of the EXANET-IL domain (e.g - EXANET-IL is the parent domain). EXANET-QA is supposedly set in compatibility mode.

Re: Winbindd limited by select

2003-02-12 Thread Tim Potter
On Wed, Feb 12, 2003 at 04:26:21PM -0500, Michael B. Allen wrote: This is set at compile-time, not run-time. This line: #define FD_SETSIZE 2048 /* Max # of winbindd connections */ must occur before the first invocation of sys/types. This could be a build option, but it might

Re: Winbindd limited by select

2003-02-12 Thread Tim Potter
On Wed, Feb 12, 2003 at 10:23:14PM +, [EMAIL PROTECTED] wrote: Better still why not use poll() instead of select() in the winbindd main loop? Because not everyone has poll() :-(. Some have poll build on select. Some people have poll() and it doesn't work So many bugs, so little

Re: Enumerating from trusted domain - fix to winbindd_util.c

2003-02-11 Thread Tim Potter
On Tue, Feb 11, 2003 at 12:44:54PM -0500, Ken Cross wrote: You may or may not have noticed, but wbinfo -m doesn't work on SAMBA_3_0, and -u or -g don't return users/groups from trusted domains. The problem was in winbindd_util.c. init_domain_list would reset the list using free_domain_list

Re: Why reset winbindd_cache.tdb?

2003-02-09 Thread Tim Potter
On Sun, Feb 09, 2003 at 03:53:05PM -0500, Ken Cross wrote: We have a site with SAMBA_3_0 where it takes 12-15 minutes to initialize winbindd's cache (locks/winbindd_cache.tdb) every time winbindd restarts. While this is going on, users can't authenticate. (~12,000 users and 9,000 groups

Re: Annoying Minor Bug In Winbind 2.2.x

2003-02-06 Thread Tim Potter
On Fri, Feb 07, 2003 at 12:23:30PM +1100, Martin Pool wrote: The bug apparently came in Andrew Bartlett's merge in 1.45; the provenance of it I don't know. (TNG?) This patch ought to be applied to 2.2, HEAD, 3.0, and APPL_HEAD. Tim, how's this patch? How about this - I've collapsed the

Re: Gencache fails to open gencache.tdb

2003-02-05 Thread Tim Potter
On Thu, Feb 06, 2003 at 12:06:04AM +0100, Rafal Szczesniak wrote: Attached patch can be seen as proposal to discuss behavior of gencache in case when it is used in applications running under non-priviledged accounts so that O_RDWR|O_CREAT always fails against system-wide

Re: any work going into remote registry service?

2003-02-02 Thread Tim Potter
On Mon, Feb 03, 2003 at 12:12:58AM +0100, Andreas K. Huettel wrote: using google, I found out that some time ago there was some code in samba-tng for remotely changing the registry via rpc's. Are there any plans to implement this in Samba (3?)? Did it work, would it be possible to extract

Re: core dump in rpcclient getdriver

2003-01-28 Thread Tim Potter
On Tue, Jan 28, 2003 at 05:06:32PM +, Ronan Waide wrote: hi folks, ran this command: rpcclient -U Administrator%password PDC -c getdriver PRINTER and got this output: [Windows 4.0] Segmentation fault (core dumped) Hi - I've fixed this in the latest CVS. Thanks for reporting it!

compiler warning in libsmb/clireadwrite.c

2003-01-28 Thread Tim Potter
Er, should I be worried about this warning? libsmb/clireadwrite.c: In function `cli_issue_read': libsmb/clireadwrite.c:54: warning: right shift count = width of type libsmb/clireadwrite.c: In function `cli_issue_write': libsmb/clireadwrite.c:301: warning: right shift count = width of type It's

Re: Limitations of Samba-2.2.x as a domain member talking to an AD domain controller

2003-01-24 Thread Tim Potter
On Fri, Jan 24, 2003 at 09:02:41AM -0500, Damian, G. C. (Gerald) wrote: [...] Is the any way for our pre 3.0 Samba servers to participate in AD and how do you set it up? Tridge has written a HOWTO which should be up to date with the latest Samba code. Look at the file ADS-HOWTO.txt in the

Re: Limitations of Samba-2.2.x as a domain member talking to an AD domain controller

2003-01-24 Thread Tim Potter
On Fri, Jan 24, 2003 at 02:54:19PM -0800, Richard Sharpe wrote: Is the any way for our pre 3.0 Samba servers to participate in AD and how do you set it up? Tridge has written a HOWTO which should be up to date with the latest Samba code. Look at the file ADS-HOWTO.txt in the Samba

Re: Limitations of Samba-2.2.x as a domain member talking to an AD domain controller

2003-01-23 Thread Tim Potter
On Thu, Jan 23, 2003 at 10:54:19AM -0800, Richard Sharpe wrote: Can anyone point me at documentation on the limitations of a downlevel server being a member server in an AD network? The specific case I am thinking of is a Samba-2.2.x-based server. I don't have any documentation but I can

CVS pserver upgraded on samba.org

2003-01-21 Thread Tim Potter
I've just upgrade the CVS pserver running on samba.org. If anyone sees any problems please let me know via email. Luckily we are running the anonymous CVS pserver in a chroot jail which is updated via rsync from the actual repository so the effects of anyone exploiting the bug would be minimal.

Re: please report to samba-technical@samba.org

2003-01-13 Thread Tim Potter
On Mon, Jan 13, 2003 at 08:40:55AM -0500, Green, Paul wrote: [2003/01/08 08:26:20, 0] rpc_parse/parse_spoolss.c:spoolss_io_devmode(607) spoolss_io_devmode: Unknown specversion in devicemode [0x0] [2003/01/08 08:26:20, 0] rpc_parse/parse_spoolss.c:spoolss_io_devmode(608)

Re: recursive mutexes in appl_head winbindd_cm.c?

2003-01-13 Thread Tim Potter
On Sat, Jan 11, 2003 at 01:11:14AM +, [EMAIL PROTECTED] wrote: On Fri, Jan 10, 2003 at 05:31:48PM +1100, Martin Pool wrote: Here's my idea for fixing this in appliance-head, without reworking the mutex reference count. Thanks for that - I've just checked in something close to this.

Re: Kix Scripting KX RPC Service

2003-01-07 Thread Tim Potter
On Tue, Jan 07, 2003 at 02:42:39PM +0930, Barry Robinson wrote: Not sure if this is the right mailing list to direct this to, but just wondering if anyone would know of any functionality in using the KXRPC service through Samba? Basically you have to install the KXRPC service on a Windows

Re: Bug and Fix (Browse Lists)

2002-12-17 Thread Tim Potter
On Tue, Dec 17, 2002 at 08:24:18PM -0600, Matt Roberts, GRDA wrote: First, please accept my thanks for a really great product. I use Samba extensively and really enjoy it. I'm glad you enjoy Samba so much. (-: [...] In the NMBd debug output (nmbd run with -d 255), I find this excerpt:

Re: leak of some sort in smbcacls

2002-12-15 Thread Tim Potter
On Sun, Dec 15, 2002 at 10:06:19PM +, Ronan Waide wrote: just spotted this while leafing through the CVS tree (some code elided for clarity) Thanks - I've committed a fix for this. Tim.

Re: CIFS and Kerberos question

2002-12-13 Thread Tim Potter
On Sat, Dec 14, 2002 at 08:26:40AM +1100, Luke Howard wrote: [Question 3. What exactly does Kerberos do in the server? If Kerberos is used only for initial authentication, then all I need to do is PKINIT in the filesystem on UNIX, right? Or, does Kerberos actually check a ticket per each

Re: why is the machine trust account password....

2002-12-12 Thread Tim Potter
On Thu, Dec 12, 2002 at 05:29:03PM -0600, Gerald (Jerry) Carter wrote: stored in clear text in secrets.tdb (HEAD) when i join an NT 4.0 domain? It doesn't store the the last change time either. Unless someone yells, i'm going to fix this. Er, it's always been in clear text. Or are you

Re: Patch for 3_0 configure.in ??

2002-12-05 Thread Tim Potter
On Thu, Dec 05, 2002 at 11:44:36AM +0100, [EMAIL PROTECTED] wrote: I've never done anything in configure.in. What about the following? I think I fixed this in head already. I'll have to do some janitorial merging when I get in to work. I'm surprised I haven't been busted already by Jeremy.

Re: add VFSLIBDIR to 3_0

2002-11-27 Thread Tim Potter
On Wed, Nov 27, 2002 at 05:01:52PM +, John H Terpstra wrote: Great that you decided, but no one told me about that. And the Makefile had them going to $(LIBDIR). Every time any of us make any change to a path for any file - PLEASE BE AWARE: It may affect our binary packaging, may

Re: (fwd from jerry@theashergroup.com) Suggestion: describe (or link to) how to verify your distributions

2002-11-22 Thread Tim Potter
On Fri, Nov 22, 2002 at 03:16:09PM -0600, David W. Chapman Jr. wrote: Where do I get the samba codesigning key? How do I import it? How do I know I got the right one? What do I do if it doesn't verify? I always wondered if someone uploaded a tarball with a trojan, what's

Re: [PATCH] add 'modules path' and handle 'configure --with-configdir' right

2002-11-22 Thread Tim Potter
On Fri, Nov 22, 2002 at 01:21:21PM +0100, Jelmer Vernooij wrote: here's a patch that added the 'modules path' parameter. lp_modules_path() is prefixed to all lp_modules() witch are not start with '/' (not absolute pathes) the default for lp_modules_path() is selectable by

Re: uuid_to_string() conflict

2002-11-16 Thread Tim Potter
On Sat, Nov 16, 2002 at 11:34:15AM +1100, Luke Howard wrote: The uuid_to_string() function breaks including the OSF DCE headers in Samba (which we need for our DCE funnel) as there is a similarly named function in DCE. Any chance you could either use the same signature as the OSF DCE

Re: NULL sessions - Listing shares anonymously - restrict anonymous

2002-11-14 Thread Tim Potter
On Thu, Nov 14, 2002 at 08:50:47PM -0500, Yannick Mercier wrote: I am running 2.2.5 and I would like to know if the restrict anonymous as been implemented correctly, as it was supposed to behave from the start, in order to deny ALL anonymous connections as stated in the man : When

Re: Group Domain Users

2002-11-11 Thread Tim Potter
On Mon, Nov 11, 2002 at 01:40:25PM +0100, Michael Steffens wrote: recently David Shapiro complained about getent group not working in large domain groups, in particular Domain Users: http://lists.samba.org/pipermail/samba-technical/2002-November/040646.html Resolved the problem in my

Re: Error code 0

2002-11-10 Thread Tim Potter
On Sun, Nov 10, 2002 at 03:52:03PM +0200, Nir Soffer wrote: http://msdn.microsoft.com/library/en-us/debug/base/system_erro r_codes.asp?frame=false Err. AFAIK, error code 0 means Success, in nearly every errno system I've seen, btw. I've seen an error code 0 once in Samba, and I was

Re: [Samba] passwd command problem with Solaris/winbind/pam

2002-11-08 Thread Tim Potter
On Fri, Nov 08, 2002 at 01:42:22PM -0500, Mike Gerdts wrote: Now, one problem. nscd (Name Service Caching Daemon) will now run! That sounds good, right, because normally when winbind is in nsswitch.conf, nscd bails? Well, when nscd is running, name resolution is done by nscd, NOT the

Re: recent python changes

2002-11-05 Thread Tim Potter
On Tue, Nov 05, 2002 at 10:31:51PM +0100, Guenther Deschner wrote: a very small fix for the Makefile... -x1 LIBS=$(LIBS) \ + LIBS=$(LIBS) \ Thanks - you can tell I'm an emacs user and that my control key doesn't work very well. (-: Tim.

Re: CIFS Woes

2002-10-31 Thread Tim Potter
On Thu, Oct 31, 2002 at 10:38:32AM -0600, Steven French wrote: Scripts run just fine, but binaries give me: -bash: ./command: cannot execute binary file along with modprobe: modprobe: Can't locate module binfmt-464c in syslog Forgot to copy he list on my earlier response.

Re: Winbind doesnt enumerate more than one group from an AD domain

2002-10-26 Thread Tim Potter
On Fri, Oct 25, 2002 at 11:09:11PM +0200, Simo Sorce wrote: Domain local groups existed under Windows NT 4.0. They were just available among DC's of the domain. See my other post in response to JF. To my knowledge (derived from some doc on msdn) they are a different thing. local groups

Re: Fwd: Pidfile creation bugfix

2002-10-20 Thread Tim Potter
On Sun, Oct 20, 2002 at 06:24:22PM -0500, Kelledin wrote: Minor bugfix in the pidfile creation function. I figured I'd pass it on to you people as well...I hope this is the correct list. I've been using it on an NT domain controller since May with no ill effects. Well spotted. Applied

Re: PS: smbcacl doesn't work for me

2002-10-14 Thread Tim Potter
On Tue, Oct 15, 2002 at 08:41:15AM +1000, Tim Potter wrote: The smbcacls program was written before anyone understood access masks and generic mappings properly. The individual bitmasks are defined in WINNT.H if you have Visual C++. They are all the constants starting with FILE_. Now

Re: A RID allocator and its consequences

2002-10-14 Thread Tim Potter
On Fri, Sep 27, 2002 at 07:36:25AM +0200, Volker Lendecke wrote: It is the wrong place to do it. If some data should only be accessible by root then it should live in secrets.tdb otherwise it should go somewhere else. I know. This is just experimental code playing with the thought how

Re: Samba 2.2.6 rc2 released

2002-10-13 Thread Tim Potter
On Thu, Oct 10, 2002 at 08:58:18AM -0500, Gerald (Jerry) Carter wrote: 17) Merge winbindd with current (more advanced) state of play in APPLIANCE_HEAD Can anyone enlighten to me as to what exactly that means? What functionality was added, what fixes were applied, etc.?

Re: rpc_client/cli_dfs.c (not?) moved to libsmb/cli_dfs.c

2002-10-13 Thread Tim Potter
On Sun, Oct 13, 2002 at 09:00:17PM -0400, Green, Paul wrote: HEAD has cli_dfs.c in the directory source/rpc_client. 2_2 and 3_0 have cli_dfs.c in the directory source/libsmb. These file locations match source/Makefile.in *except* in 3_0, where it claims that cli_dfs.c is in

Re: Using winbind with Wine

2002-09-26 Thread Tim Potter
On Thu, Sep 26, 2002 at 01:47:38PM +0200, Martin Wilck wrote: To initiate this process we'd only need a standardized protocol for the socket communication. Andrew said that doesn't exist and won't with regard to winbind. I'd like to focus the discussion in this direction. - is the winbind

strupper() on username and domain in cli_session_setup_nt1()?

2002-09-23 Thread Tim Potter
I'm just wondering whether it is strictly necessary to uppercase the username and domain name when performing a session setup. Applying the following patch should not break anything and would make smbclient be able to test for case sensitivity bugs in the remote server. The behaviour of

Re: More mods to net {set,get}localsid ...

2002-09-23 Thread Tim Potter
On Tue, Sep 24, 2002 at 02:25:53AM +0930, Richard Sharpe wrote: While Volker has written the command net {get,set}localsid, it would be nice if it could do the following: net getlocalsid name and net setlocalsid name=SID Sounds good - can you make the name part optional and

Re: initial gencache implementation

2002-09-05 Thread Tim Potter
On Thu, Sep 05, 2002 at 12:15:36PM +0200, Rafal Szczesniak wrote: This is first implementation of caching mechanism. It includes both lib/gencache.c code and utils/net_cache.c as command-line control/testing tool. comments are welcome Rafal, that looks pretty good. Since you ask, I do

Re: initial gencache implementation

2002-09-05 Thread Tim Potter
On Fri, Sep 06, 2002 at 02:10:23AM +, [EMAIL PROTECTED] wrote: You assume that any cached data will be in null terminated string format which is not always the case. I understand this is a design property - it's up to the caller to mess with structs etc. This keeps the cache

Re: MS FTP site down?

2002-09-03 Thread Tim Potter
On Tue, Sep 03, 2002 at 06:42:16PM -0500, Christopher R. Hertel wrote: Earlier today, Microsoft's knowledge base appeared to be down. All the decorations would appear, but the content was missing. It now seems that ftp://ftp.microsoft.com/developr/drg/CIFS/ is also unavailable. I'm curious

Re: CVS update: samba/source/rpc_parse

2002-09-02 Thread Tim Potter
On Mon, Sep 02, 2002 at 10:05:57PM -0500, Gerald Carter wrote: This looks ok, but you did test the server code after you made the changes right? Sorry, but I'm a little paranoid about this code since it took me longer than it should have to work correctly I did - we don't

Re: Use less 'magic' environment variables

2002-08-16 Thread Tim Potter
On Fri, Aug 16, 2002 at 11:24:43PM +1000, Andrew Bartlett wrote: This patch removes WINBINDD_DOMAIN, and some of the misguided (and fruitless) attempts to prevent winbind from calling smbd recursivly. (I fixed that the 'proper' way, and the worst case is a pipe timeout of 30 sec, not a

Re: WERR_INSUFFICIENT_BUFFER if more than 21 printers on enumprinters

2002-08-15 Thread Tim Potter
On Thu, Aug 15, 2002 at 01:06:40PM +0200, Thomas Reifferscheid wrote: If I have more then 21 printers in smb.conf I get [2002/08/15 12:30:50, 5] rpc_parse/parse_prs.c:prs_werror(618) 000c status: WERR_INSUFFICIENT_BUFFER with the rpc enumprinters. What the heck is this ?

Re: WERR_INSUFFICIENT_BUFFER if more than 21 printers on enumprinters

2002-08-15 Thread Tim Potter
On Thu, Aug 15, 2002 at 07:26:09PM -0500, Gerald (Jerry) Carter wrote: This is a long standing bug in our client code that can't handle fragmented PDUs. It's been on my list to fix for a while and maybe I'll get around to it next week :-) Oh wow - I didn't know that. Thanks for the info.

Re: Any help would be greatly appreciated...

2002-08-14 Thread Tim Potter
On Thu, Aug 15, 2002 at 12:29:32AM -0500, Gerald (Jerry) Carter wrote: We run SAMBA on a Unix box with case sensitive file naming (i.e. standard Unix usage). Relevant entries in smb.conf case sensitive = yes This is really bad. Do no do this unless you are willing to suffer the

Re: net local functionality

2002-07-28 Thread Tim Potter
On Fri, Jul 26, 2002 at 11:05:05AM -0400, David Collier-Brown wrote: Please if even we pass functionality to net make it so it does not need a running samba to work for local management as current utilities do. Might I restate that as 1) there should be one way to do the

Re: how to deal with STATUS_PIPE_BUSY ?

2002-07-17 Thread Tim Potter
On Wed, Jul 17, 2002 at 11:17:34AM -0700, Ben Johnson wrote: This is part of a packet dump that ends with the STATUS_PIPE_BUSY. If I remove the user from just a few groups then I never get the STATUS_PIPE_BUSY message and the second request goes through. But nothing else (that I see so

Re: how to deal with STATUS_PIPE_BUSY ?

2002-07-16 Thread Tim Potter
On Tue, Jul 16, 2002 at 06:59:31PM -0700, Ben Johnson wrote: The problem comes when, after I succeed in getting a very large list of group names, I ask for another. The second request fails and I get an NT error code of STATUS_PIPE_BUSY. Does anyone know what that means? The latest school

Re: Posix Extended headers ...

2002-07-15 Thread Tim Potter
On Tue, Jul 16, 2002 at 04:30:06AM +0930, Richard Sharpe wrote: On Mon, 15 Jul 2002, Joerg Schilling wrote: [Added Samba-technical so that this discussion can be recorded] Please speak slowly and clearly into the microphone. The SEC_DESC contains the Owner SID and the Primary Group SID

Re: talloc

2002-07-14 Thread Tim Potter
On Sat, Jul 13, 2002 at 06:01:41PM +0200, Simo Sorce wrote: any objection into adding a function to talloc to import a previously allocated memory? something like that: bool talloc_memorize(TALLOC_CTX *t, void *src, size_t src_size) Hi Simo. Isn't this going to cause horrible problems

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Tim Potter
On Sat, Jul 13, 2002 at 04:47:17AM +0930, Richard Sharpe wrote: The whole thing is based on the authentication used by any SMB client that connects to a SMB server: - The client connects to the server - The server generates and sends some random bytes (challenge) - The client sends a

Re: Using Samba for HTTP-NTLM-authentication?

2002-07-12 Thread Tim Potter
On Sat, Jul 13, 2002 at 06:23:38AM +0930, Richard Sharpe wrote: Nope. There's a challenge sent by either the server and then the client produces a LM and NT response which is a hash of the challenge and the user's password. This is sent to the server (in this case winbindd) for

Re: winbindd architecture

2002-07-11 Thread Tim Potter
On Thu, Jul 11, 2002 at 03:57:11PM -0400, Leducq Dominique wrote: Le Mercredi 20 F?vrier 2002 12:51, Tim Potter a ?crit : Nmbd needs to be running on the local system as there are some lookup requests send by winbindd that are sent by Windows NT domain controllers to the incorrect port

Re: Draft of branch maintainence and release plans....

2002-07-09 Thread Tim Potter
On Tue, Jul 09, 2002 at 11:05:39AM +1000, Andrew Bartlett wrote: Just for the record, no one was placing the burden on you andrew (or even suggesting that it rested upon you). If you don't want to do it or would rather work on something else, then that's fine. I think you read too much

Re: Draft of branch maintainence and release plans....

2002-07-08 Thread Tim Potter
On Mon, Jul 08, 2002 at 10:43:13AM -0500, Gerald Carter wrote: We should probably apply the daemon tools patch if it is ok. This has been brought several times in the past. Do you have a link? Hmm - can't find the link in the mail archives. I do have:

Re: Some notes on Netlogon SAMSYNC

2002-07-08 Thread Tim Potter
On Sun, Jul 07, 2002 at 04:30:27PM +1000, Andrew Bartlett wrote: I've been messing about with some of the SAMSYNC stuff, in particular hoping that a domain member might be able to request a list of users. Unfortunetly not, it looks like this is restricted to BDCs. Yes. You have to be a

Re: CVS update: samba/source/include

2002-07-03 Thread Tim Potter
On Wed, Jul 03, 2002 at 04:09:17PM -0500, Gerald Carter wrote: congrats, that's a very good idea. but what is the aim ? you got some drivers requiring server registry access ? Debugging more than anything else. Comparing PrinterData keys between local and remote printers. Will

Re: VS: Can see Samba in printsharing list without printers shared.

2002-07-03 Thread Tim Potter
On Wed, Jul 03, 2002 at 10:08:29AM +0300, Nieminen, Jooel wrote: I'm using 2.2.4 and have same problem. I don't see printers in explorer when browse the samba-server but in add printer list of printer sharing machines I see it. This is fixed in HEAD - I thought I also merged it in to 2.2.5

Re: [Security Problem] --with-tdbsam

2002-07-01 Thread Tim Potter
On Mon, Jul 01, 2002 at 03:27:02PM -0700, Jeremy Allison wrote: Please examine this security problem and take measures to be necessary. Ok - in conversation with tridge we don't think this is an exploitable hole. If you believe otherwise can you please mail [EMAIL PROTECTED] with full

Re: Proposed patch for DNS and name resolution related problems in appliance branch

2002-07-01 Thread Tim Potter
OK I've been working at this a bit more and have come up with some performance modifications: - Only cache the #1b and #1c names for a very short period of time (say 10 seconds) as these names can change quickly especially if they are stored on a WINS server. - If a cli_connect()

Proposed patch for DNS and name resolution related problems in appliance branch

2002-06-30 Thread Tim Potter
I've put together some patches to solve some issues related to DNS and name resolution issues within Samba. They will probably go in to the appliance branch, but I am keen for them to also be applied to HEAD. The problem is that Samba is reliant on a working DNS server and misconfigurations of

Re: root smbd process ?

2002-06-20 Thread Tim Potter
On Thu, Jun 20, 2002 at 05:55:30PM +0200, Alain Defrance wrote: i wonder why i 've some process run by root and some by my users ? like this : 0001177 12078 218 2 17:46:33 ?0:11 -d2 smbd root 1373 218 0 13:53:20 ?0:49 -d2 smbd root 6301 218 0 15:41:37 ?

Re: max smbd processes

2002-06-19 Thread Tim Potter
On Wed, Jun 19, 2002 at 09:00:56AM +0200, Alain Defrance wrote: hello, i'm using Samba Version 2.2.4 on Solaris 5.8 in my smb.conf i have max smbd processes = 200 when i use tesparm for checking i've the following answer : ERROR: the 'max smbd processes' parameter is set and the

Re: Winbindd!

2002-06-18 Thread Tim Potter
On Tue, Jun 18, 2002 at 01:55:44PM +0300, Osman Tufanogullari (Garanti Teknoloji) wrote: But after starting winbindd deamon, wbinfo -m ( trusted domain names ) -- OK wbinfo -t ( check secret ) -- OK wbinfo -n username ( sid from username ) -- OK wbinfo -s sid ( username from sid) --

Re: UTF-8 support and other quirks in the LDAP backend (in 2.2.4).

2002-06-18 Thread Tim Potter
On Wed, Jun 19, 2002 at 12:02:00AM +0200, Simo Sorce wrote: Yes, I think internal format (and format for tdbs) of utf8 seems like the best idea (IMHO). There is a problem with utf8 for many fixed-size records in various tdbs. Also, most of data is in UCS-2 already. I don't think

Re: winbindd-NT_STATUS_CANT_ACCESS_DOMAIN_INFO

2002-06-12 Thread Tim Potter
On Fri, Jun 07, 2002 at 06:12:10PM -0400, Ingmar Koecher wrote: First I apologize if I am not posting this to the correct list, but it seems rather specific and I haven't had any success posting it to the regular samba list (but then I might just be impatient). I am running Samba as of

Re: spoolss back connections to client

2002-06-11 Thread Tim Potter
On Tue, Jun 11, 2002 at 11:12:08AM +0200, Tom Vandepoel wrote: Since we've switched to spoolss printing (samba 2.2.4) it seems that the server is always trying to connect to the client. [2002/06/11 10:52:41, 3] lib/util_sock.c:open_socket_out(843) Connecting to 10.0.40.80 at port 445

Re: CVS update: samba/source/rpc_server

2002-06-05 Thread Tim Potter
On Wed, Jun 05, 2002 at 11:34:43PM -0500, Gerald Carter wrote: I'm writing some test routines for the print notification stuff and it's rather a lot of mucking around. Can I do this after 2.2.5 ships and before HEAD printing gets blown away? Please don't mess with 2.2 printing before

Re: Access control to SAM / _samr_query_sec_obj

2002-05-31 Thread Tim Potter
On Sat, Jun 01, 2002 at 12:17:19AM +0200, Kai Krueger wrote: currently, as far as I can see, the access control to the SAM database is only based upon file access to the db-files. On normal installations therefore only the root user can change, delete or add things instead of the entire

taking back the 'restrict anonymous' parameter

2002-05-30 Thread Tim Potter
I'm thinking about taking back the restrict anonymous parameter and using it to do Good Things. Previously in HEAD and currently in 2.2 it stops people connecting to shares anonymously but I think Mr Bartlett removed it because it was either buggy or didn't do anything useful. I propose that

Re: taking back the 'restrict anonymous' parameter

2002-05-30 Thread Tim Potter
On Thu, May 30, 2002 at 04:37:59PM -0700, Jeremy Allison wrote: I propose that this parameter act like the RestrictAnonymous registry setting, i.e it prevents anonymous access to the SAMR pipe and anonymous access to the NetShareEnum RPC when set to 1. When set to 2, it disallows

Re: the undocumented charset parameters in 3.0 - any hints?

2002-05-26 Thread Tim Potter
On Sat, May 25, 2002 at 08:45:26PM +0200, Juergen Hasch wrote: dos charset - dos codepage used by clients unix charset - character set used in your unix system display charset - character set used in programs which display information to the user (e.g. smbclient) This is what my smb.conf

Re: Proposed code cleanup

2002-05-23 Thread Tim Potter
On Thu, May 23, 2002 at 01:01:05AM +1000, Andrew Bartlett wrote: This allowed me to remove cli_pipe_util.c, which was calling cli_establish_connection. tpot: I'm not sure what direction you were going with the client stuff, and you may well have been wanting the init functions. If

Re: Proposed code cleanup

2002-05-23 Thread Tim Potter
On Fri, May 24, 2002 at 11:17:59AM +1000, Andrew Bartlett wrote: Anyway - that looks like a good patch. I've been dying to get rid of all those silly make_nmb_name() calls everywhere but was not brave enough. I'll proabably add a cli_pipe_connection() function (feel free to suggest a

  1   2   >