Discussion:
sharing out nfs mounted filesystems with samba
Tim
2003-12-02 09:09:14 UTC
Permalink
Hello,

We have a few Solaris boxes each with Sun A1000 raid boxes attached. We
currently share these RAIDS to windoze boxes via a pc automounter. I
would obviously prefer to switch this over to samba. My question is,
if I set up a system with GB ethernet, and nfs mounted each filesystem I
wanted to share, and _then_ shared those out to the PC's via samba, would
I suffer any major performance issues? Does samba handle sharing nfs
mounted filesystems ok? I know this is adding an extra hop, will this
affect performance? Any opinions would be appreciated.

-Tim
David Collier-Brown
2003-12-02 09:09:14 UTC
Permalink
Post by Tim
My question is,
if I set up a system with GB ethernet, and nfs mounted each filesystem I
wanted to share, and _then_ shared those out to the PC's via samba, would
I suffer any major performance issues?
Latency would go up, which the end-users would
see as slowness, especially on large directories
and small files.

Total network bandwidth used doubles.

For small numbers of users, this is no big deal.
I run this at work, to avoid having more than one
server, but I know it doesn't scale.
Consider it a "application-level gateway", and
size it appropriately.
Post by Tim
Does samba handle sharing nfs
mounted filesystems ok?
Well, sorta.
File service is fine, but locking is problematic:
you need to run linux or irix to get the locks right.
Oplocks will cause some strange delays when updating a
file from both unix and the PC...

Fortunately, very few unix programs use any kind of locks,
and still work fine. This is noit true of databases,
and pc programs which have a database part (eg, calendars,
customer-tarckers, etc).

--dave
--
David Collier-Brown, | Always do right. This will gratify
Performance & Engineering Team | some people and astonish the rest.
Americas Customer Engineering | -- Mark Twain
(905) 415-2849 | ***@canada.sun.com
Michael Gerdts
2003-12-02 09:09:14 UTC
Permalink
Post by David Collier-Brown
Post by Tim
My question is,
if I set up a system with GB ethernet, and nfs mounted each filesystem I
wanted to share, and _then_ shared those out to the PC's via samba, would
I suffer any major performance issues?
Latency would go up, which the end-users would
see as slowness, especially on large directories
and small files.
The impact of this is reduced if the NFS client / Samba server does NFS
attribute caching and has a reasonable amount of RAM. Large files that are
read once in a great while will not benefit from this. OTOH, you don't
care much about latency when reading or writing large files as you do when
you are doing operations like stat() on each of 500 files in a directory.
Post by David Collier-Brown
Total network bandwidth used doubles.
If your network is switched and full duplex, this is likely not an issue.

Mike
Tim
2003-12-02 09:09:17 UTC
Permalink
I'm pretty sure the answer to this question is "no", but I figured I'd
give it a shot:

Is there any way to share out shares from different machines off of one
smb server? For example, I have three machines which contain filesystems
that need to be shared. I'd like to have all these shares stored in one
central location in network neighborhood, rather than three. Is it
possible, without using a gateway and nfs mounting all the filesystems
there (which creates an extra hop, and may cause locking probs)? THanks
in advance.

Tim
Christopher R. Hertel
2003-12-02 09:09:17 UTC
Permalink
Two ways I can think of:

The old way: Mount the shares on the samba server using smbmount
(assuming it's a Linux box). Reshare the mounted shares.
This also reportedly works with NFS.

The new way: Use the DFS code to combine all of the shares into one
virtual share. See the 'host msdfs' parameter in the
smb.conf(5) man page as a starting point.

Not all clients can talk to DFS shares, so consider your environment.

This question should really be on the ***@samba.org list, BTW.

Chris -)-----
Post by Tim
I'm pretty sure the answer to this question is "no", but I figured I'd
Is there any way to share out shares from different machines off of one
smb server? For example, I have three machines which contain filesystems
that need to be shared. I'd like to have all these shares stored in one
central location in network neighborhood, rather than three. Is it
possible, without using a gateway and nfs mounting all the filesystems
there (which creates an extra hop, and may cause locking probs)? THanks
in advance.
Tim
--
Christopher R. Hertel -)----- University of Minnesota
***@nts.umn.edu Networking and Telecommunications Services

Ideals are like stars; you will not succeed in touching them
with your hands...you choose them as your guides, and following
them you will reach your destiny. --Carl Schultz
David Collier-Brown
2003-12-02 09:09:17 UTC
Permalink
Post by Christopher R. Hertel
The new way: Use the DFS code to combine all of the shares into one
virtual share. See the 'host msdfs' parameter in the
smb.conf(5) man page as a starting point.
Can someone on the list (preferably the person
who got dfs running) write a short note on what
they achieved?

Back in November 1999 Luke wrote:
--
however, there are limitations: the path
name that is passed across is the FULL dfs path name
(\server\dfs-mount-point[\directory][\file]) so i've had to add
unix_dfs_convert() which calls unix_convert() after first checking dfs
paths, and converting to local if necessary.

ms's dfs implementation is weird: there appears to be a large burden
placed on the client, and the ms dfs client acts REALLY strange:
attempting to do SMBgetatr on mount points; doing NTcreateX on mount
points; attempting to create \server\dfs-mount\DESKTOP.INI ?????!
--

Ms sdescribes it at:
http://www.microsoft.com/ntserver/fileprint/exec/feature/DFSWP.asp
Post by Christopher R. Hertel
Not all clients can talk to DFS shares, so consider your environment.
What ones fail? I'd suspect WfW and perhaps Warp...
Redirected to samba-docs, as we need a how-to.

--dave
--
David Collier-Brown, | Always do right. This will gratify
Performance & Engineering Team | some people and astonish the rest.
Americas Customer Engineering | -- Mark Twain
(905) 415-2849 | ***@canada.sun.com
Shirish Kalele
2003-12-02 09:09:17 UTC
Permalink
Yes, you can do this using the MSDFS functionality in Samba
2.2. You'll need to share the directories on the different machines by
running SMB servers on all of them. And then set up a DFS tree on the one
machine you want to have users access these shares through.

I don't know if this fits what you're looking for..

Cheers,
Shirish
Post by Tim
I'm pretty sure the answer to this question is "no", but I figured I'd
Is there any way to share out shares from different machines off of one
smb server? For example, I have three machines which contain filesystems
that need to be shared. I'd like to have all these shares stored in one
central location in network neighborhood, rather than three. Is it
possible, without using a gateway and nfs mounting all the filesystems
there (which creates an extra hop, and may cause locking probs)? THanks
in advance.
Tim
Christopher R. Hertel
2003-12-02 09:09:18 UTC
Permalink
Post by David Collier-Brown
Can someone on the list (preferably the person
who got dfs running) write a short note on what
they achieved?
Shirish: Are there docs?
Post by David Collier-Brown
Post by Christopher R. Hertel
Not all clients can talk to DFS shares, so consider your environment.
What ones fail? I'd suspect WfW and perhaps Warp...
I'm not sure about 95. It may need a patch or service pack. I am pulling
this from memory. It was discussed at one of the CIFS conferences.
Post by David Collier-Brown
Redirected to samba-docs, as we need a how-to.
Makes sense.

Chris -)-----
--
Christopher R. Hertel -)----- University of Minnesota
***@nts.umn.edu Networking and Telecommunications Services

Ideals are like stars; you will not succeed in touching them
with your hands...you choose them as your guides, and following
them you will reach your destiny. --Carl Schultz
Samba
2003-12-02 09:09:38 UTC
Permalink
Hello everybody!. I am new in this list and I have problems with the samba
or maybe with the W2k, I don't know!!..

This is my problem, We have 20 computers with W2k and, we want to change
the W2K Server by a Linux Server, So we installed Linux Slackware 7.1 and
the Samba 2.2.0, I dont have a lot of experince in Samba, but I think that
I configure it correctly, this is my smb.conf:

[global]
workgroup = SCT2
netbios name = ZERG
server string = ZERG Server
encrypt passwords = Yes
smb passwd file = /usr/local/samba/private/smbpasswd
unix password sync = Yes
log file = /var/log/samba.log.%m
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
domain logons = Yes
os level = 10
preferred master = Yes
domain master = Yes
wins support = No
guest account = smbguest
security = user
local master = yes
logon path = \\%N\profiles\%u
logon drive = H:
logon home = \\SCT2\%u
[netlogon]
path = /usr/local/samba/lib/netlogon
writeable = no
write list = ntadmin
[profiles]
path = /home
writeable = yes
create mask = 0600
directory mask = 0700

I started the daemons and probed everything in Linux and everything seems
ok. but when I change the domain in W2k, appears this message "The
procedure number is out the range", I am using a normal user account, but
if I used a root account the W2k send me the message "Welcome to SCT
domain" and "You have to reboot the computer", I did it and when W2k start
in the log on box appears the SCT2 domain, I choose it I write the user
and password but when I click in ok button appears this

"The system cannot log you on to this domain because the system's computer
account in its primary domain is missing or the password on that account
is incorrect"

I read that when it create a computer account the password in Samba is the
same but in lower case. For example I have a account with this name

"phros$" the password is "phros" is it correct??? If somebody knows what
is my mistake, please send me a message, thank you.
Nehemiah, Mark
2003-12-02 10:12:44 UTC
Permalink
So far so GOOD!, I pass testlock every time. I have tried our Clarion Apps
with a few test stations connected, and everything works. This is limited
to several stations, as I can't move the live data during 8-5. at 5 tonight
I will move 2 production Clarion apps to Samba. Tomorrow, I will have
about 100 simultaneous users in the database, so hopefully all will go well.


I'll keep samba-tech up on everthing! THANKS
regards,
Mark.
-----Original Message-----
Sent: Monday, July 02, 2001 2:00 AM
To: Mark
Subject: Re: 2nd post.locking problem, is it fixed?inCVS?
Thanks Jeremy!!
Should I just watch at http://www.samba.org/samba/buglist.html
for a fix, or will you let me know how it goes?
I found the other bug today, and have committed fixes
to both HEAD and 2.2. These were *amazingly* subtle
bugs so a big *thanks* for nagging me into tracking
them down and fixing them.
I'd appreciate it if you could try the lock testers
against the current CVS code, I can't make it fail
with any combination using Win9x or NT or W2K clients,
oplocks on or off.....
Thanks,
Jeremy.
--
--------------------------------------------------------
Buying an operating system without source is like buying
a self-assembly Space Shuttle with no instructions.
--------------------------------------------------------
*******************************
Mark E. Nehemiah Urschel Laboratories, Inc.
Network Administrator http://www.urschel.com/
mailto:***@urschel.com mailto:***@urschel.com
*******************************
Steven French
2003-12-02 09:01:27 UTC
Permalink
The PAM module code normally does this (e.g. pam_sm_authenticate routine in
the nsswitch directory), but if you don't want to use that code, you can do
a quick and dirty one by invoking NetWkstaUserLogon in clirap.c but that is
overkill. The cliconnect.c file gives you all you really need - see e.g.
the routine cli_establish_connection. To tell if you are authenticated as
user or guest you may have to change the return code processing slightly.

By the way I have been coding quite a few more RAP RPC calls, some of which
may be useful for this type of module (like an easier to use routine that
locates the domain controller that you would want to authenticate with).
The intent was not to provide an authentication module (winbind already
does that) but to provide some cross-platform SMB server management code
for smbclient (or a similar utility).
Subject: smbval and libsmb
...
Is it currently possible by only relying on libsmb to write a
user validation in short ?
...
- Markus
Steve French
Senior Software Engineer
Linux Technology Center
IBM Austin
phone: 512-838-2294, T/L 678-2294;
pager: 512-480-6393; cell phone: 512-296-4687
email: ***@us.ibm.com
Jeremy Allison
2003-12-02 09:01:27 UTC
Permalink
Post by Steven French
By the way I have been coding quite a few more RAP RPC calls, some of which
may be useful for this type of module (like an easier to use routine that
locates the domain controller that you would want to authenticate with).
The intent was not to provide an authentication module (winbind already
does that) but to provide some cross-platform SMB server management code
for smbclient (or a similar utility).
Steven,

Care to submit these patches ? :-).

Jeremy.
--
--------------------------------------------------------
Buying an operating system without source is like buying
a self-assembly Space Shuttle with no instructions.
--------------------------------------------------------
Jim McDonough
2003-12-02 09:01:27 UTC
Permalink
Post by Jeremy Allison
Care to submit these patches ? :-).
Jeremy,
Steve will submit these patches pretty soon. We're just doing some testing
first...

Jim

----------------------------
Jim McDonough
IBM Linux Technology Center
6 Minuteman Drive
Scarborough, ME 04074
USA

***@us.ibm.com

Phone: (207) 885-5565
IBM tie-line: 776-9984


Jeremy Allison <***@valinux.com>@lists.samba.org on 08/02/2001 06:05:10
PM

Sent by: samba-technical-***@lists.samba.org


To: Steven French/Austin/***@IBMUS
cc: samba-***@lists.samba.org, ***@guru.josefine.at
Subject: Re: (no subject)
Post by Jeremy Allison
By the way I have been coding quite a few more RAP RPC calls, some of
which
Post by Jeremy Allison
may be useful for this type of module (like an easier to use routine that
locates the domain controller that you would want to authenticate with).
The intent was not to provide an authentication module (winbind already
does that) but to provide some cross-platform SMB server management code
for smbclient (or a similar utility).
Steven,

Care to submit these patches ? :-).

Jeremy.

--
--------------------------------------------------------
Buying an operating system without source is like buying
a self-assembly Space Shuttle with no instructions.
--------------------------------------------------------
Steven French
2003-12-02 09:01:27 UTC
Permalink
I still have to write a somewhat more useable test driver utility to call
these functions, and not being a qt expert it will probably end up being a
text oriented utility. I also want to add about five more RAP calls and
test more against Win2K etc. servers (and I have not written the Samba
server, i.e. lanman.c, side of these RPCs yet but this could probably be
done in two stages). It is slow going and tedious to verify each of the
parameter description strings two different ways. My main point was to
see if anyone was in the process of modifying clirap.c and lanman.c so I
didn't needlessly duplicate work in progress.
Post by Jeremy Allison
Post by Steven French
By the way I have been coding quite a few more RAP RPC calls, some of
which
Post by Jeremy Allison
Post by Steven French
may be useful for this type of module (like an easier to use routine
that
Post by Jeremy Allison
Post by Steven French
locates the domain controller that you would want to authenticate with).
The intent was not to provide an authentication module (winbind already
does that) but to provide some cross-platform SMB server management code
for smbclient (or a similar utility).
Steven,
Care to submit these patches ? :-).
Jeremy.
Steve French
Senior Software Engineer
Linux Technology Center
IBM Austin
phone: 512-838-2294, T/L 678-2294;
pager: 512-480-6393; cell phone: 512-296-4687
email: ***@us.ibm.com
Jeremy Allison
2003-12-02 09:01:27 UTC
Permalink
Post by Steven French
I still have to write a somewhat more useable test driver utility to call
these functions, and not being a qt expert it will probably end up being a
text oriented utility. I also want to add about five more RAP calls and
test more against Win2K etc. servers (and I have not written the Samba
server, i.e. lanman.c, side of these RPCs yet but this could probably be
done in two stages). It is slow going and tedious to verify each of the
parameter description strings two different ways. My main point was to
see if anyone was in the process of modifying clirap.c and lanman.c so I
didn't needlessly duplicate work in progress.
No, no one is currently updating the rap stuff so any
work there is very welcome.

Thanks,

Jeremy.
--
--------------------------------------------------------
Buying an operating system without source is like buying
a self-assembly Space Shuttle with no instructions.
--------------------------------------------------------
Nawasthi
2003-12-02 09:01:31 UTC
Permalink
Hello Everyone...

I have successfully connected the Samba to windows networked and configured
it.

The only problem that I have is I am not able to make a publically
accessible folder
whihc can be read/write anywhere from windows network.

Though I tried to set the smb.conf and restart the samba daemons.

[public]
comment = Public Stuff
path = /home/public
public = yes
only guest = yes
writable = yes
printable = no
browseable =yes

But When i click on network neighbourhood it says public folder not
accessible.
I want to make a public folder that doesnot need any username and password
to get into.

Secondly, for creating the user accounts to linux machine i used useradd
username but
in network neightbourhood on clicking it opens with the
invalid username and password message box.

If anyone has got a wonder ideas please suggest.

NAwasthi
Lim Choon Kiat
2003-12-02 09:01:36 UTC
Permalink
Dear Chris, Patrick and helpful souls,

I appreciated very much your advices. Currently, the Samba LAN I've set up
is very close to what Chris suggested. I've dual boot Windows ME / Redhat 7
for all my PCs. The Pentium III-800 is serving to all the rest of the PCs.
Incorporated in this server are smbd, dhcpd and gateway to the Internet.
However, I have problem setting up DNS. In fact the only way I can do
resolution of names is through '/etc/hosts' file. While I have quite a
success in setting up my samba (after booting, Windows will have share
directories automatically mapped to drive alphabets like S:, H: under
[netlogon] .bat files), but I hope to know more (and eventually can set up)
NIS or WINS.

Web Development has always been an interest since I picked up Linux. In
fact, I managed to purchase
www.SingCorp.com, www.SingEvent.com, www.SingProduct.com,
www.SingIndustry.com and www.SingEdu.com from Network Solutions 18 months
ago. However, since I do not wish to maintain a leased line (which is very
expensive here in Singapore), I let a web hosting company host my wed pages.
Since you've an ISP, Chris, how may I host these sites on my server without
incurring huge cost of a leased line? Depending on another company really
restrict my progress in Web Development (this company don't even allow me to
use CGI nor give me space for emails). In fact, I picked up database with
Windows Visual Basic lately. Applying some SQL, I managed to do some data
manipulation. However, my real objective is to be able to use Java to
program database eventually. (By the way, I managed to set up Apache, but do
not know how to set up SQL & PHP [What's it?] servers.)

Another great interest of mine with PC is graphics. In fact this is how I
earn my living. I work about one or two days a week, supplying custom-made
mass games on PCs for Corporate Dinner & Dances. My dream is to be able to
remotely monitor and control the systems when they are on site. I also hope
I can phase out Windows eventually.

Concerning X-Windows, I managed to start it in the past, but do not like it.
Applications like Star Office seem to 'hang' very often. In addition,
downloading web pages through dial-up ISP seem very slowly from Netscape. I
knew I must have did something very wrong somewhere. I was quite discouraged
with Linux as a workstation and have not use it for at least six months. If
one of you can help me improve my X-Windows configurations, I'll be
extremely grateful.

Well, it seems at the meanwhile I've been asking for lots of help. Through
your experiences with Linux group, what can individual really do to benefit
the group? It seem that while I may have quite a bit of knowledge in
programming, I cannot comprehend most technical details raised up in the
discussion about samba or other Linux development. In fact, I don't even
know what to do with a 'patch' or a *.tar file. If such are not alien to you
guys, do help me a bit with such. I believe after I know more, I should be
able to contribute more productively to Linux group.

Oh yes, Amiga. I love this machine. But sad to say, the systems I have are
mobile type. Hence I cannot add network cards to them. To make matter worst,
there are no more vendors selling Amigas in Singapore. However, it has
parallel and serial port and runs on a 68020 CPU. I wonder if there is a way
to use the ports to link Amigas to a Linux box directly?

Well, thanks again for replying and have a good weekend and happy networking

Lim Choon Kiat
Singapore

PS: Should you guys need me to assist in any way, do say so. I have too much
time at hand and not know what to do. I'll help as long as I can & know how.

PPS: PC Hardware, I think is real cheap here in Singapore. That's why I can
afford so many boxes. Email details to me if you wish to compare prices.

Lim Choon Kiat
Singapore
Esh, Andrew
2003-12-02 09:01:40 UTC
Permalink
I am trying to use smbpasswd in a system exec environment to join a domain.
I found that it was prompting for a password. I found a place in
smbpasswd.c, in the function "process_root" where that prompt occurred. The
prompt occurred right after a test of a null in the first character of the
"user_name" argument. Since I am trying to use smbpasswd to join a domain, I
don't need a user name, so I tried to find out why it wasn't null. It looks
as though it's because it isn't initialized in "process_root". Running this
in a command line environment always happens to place a null in
user_name[0], but my exec environment appears to get something else in
there.

I tested a workaround for the current version. Instead of:

smbpasswd -j domain -r pdc_host

I can use:

smbpasswd -j domain -r pdc_host -U ""

I verified that user_name gets zeroed by the empty -U argument by single
stepping through it with gdb. I wrote a fix into smbpasswd.c, and it
compiles. I haven't tested it.

Here's a patch against the latest SAMBA_2_2:

--- utils/smbpasswd.c Wed Aug 29 15:04:23 2001
+++ utils/smbpasswd.c.new Wed Aug 29 14:57:45 2001
@@ -578,6 +578,8 @@
char *old_passwd = NULL;
char *remote_machine = NULL;

+ user_name[0] = '\0';
+
while ((ch = getopt(argc, argv, "ax:d:e:hmnj:r:sw:R:D:U:L")) != EOF)
{
switch(ch) {
case 'L':

---
Andrew C. Esh mail:***@tricord.com
Tricord Systems, Inc.
2905 Northwest Blvd., Suite 20 763-557-9005 (main)
Plymouth, MN 55441-2644 USA 763-551-6418 (direct)
http://www.tricord.com - Tricord Home Page

-------------- next part --------------
HTML attachment scrubbed and removed
Gerald Carter
2003-12-02 09:01:40 UTC
Permalink
Post by Esh, Andrew
I am trying to use smbpasswd in a system exec environment to join a
domain. I found that it was prompting for a password. I found a place
in smbpasswd.c, in the function "process_root" where that prompt
occurred. The prompt occurred right after a test of a null in the
first character of the "user_name" argument. Since I am trying to use
smbpasswd to join a domain, I don't need a user name, so I tried to
find out why it wasn't null. It looks as though it's because it isn't
initialized in "process_root". Running this in a command line
environment always happens to place a null in user_name[0], but my
exec environment appears to get something else in there.
I saw this toom but for some reason never checked in the file. :-(
Sorry. I'll patch it. Thanks Andrew,






cheers, jerry
---------------------------------------------------------------------
http://www.valinux.com/ VA Linux Systems ***@valinux.com
http://www.samba.org/ SAMBA Team ***@samba.org
http://www.plainjoe.org/ ***@plainjoe.org
--"I never saved anything for the swim back." Ethan Hawk in Gattaca--
Prasad, Sreenivasa
2003-12-02 10:13:18 UTC
Permalink
Where can I post the queries on Samba?
Simo Sorce
2003-12-02 10:13:18 UTC
Permalink
Post by Prasad, Sreenivasa
Where can I post the queries on Samba?
--
Simo Sorce ***@samba.org
-------------------------------
Samba Team http://www.samba.org
Prasad, Sreenivasa
2003-12-02 10:13:18 UTC
Permalink
Thank you.
I am new to this area and need your help on this.
My questions are

1. Will samba provide the locking mechanism?
2. If the underlying file system also has the locking mechanism, then how
does samba handle this situation?

cheers,

/Prasad.



-----Original Message-----
From: ***@samba.org [mailto:***@samba.org]
Sent: Monday, September 24, 2001 3:00 PM
To: Prasad, Sreenivasa
Cc: 'samba-***@samba.org'
Subject: Re: (no subject)
Post by Prasad, Sreenivasa
Where can I post the queries on Samba?
--
Simo Sorce ***@samba.org
-------------------------------
Samba Team http://www.samba.org
Simo Sorce
2003-12-02 10:13:18 UTC
Permalink
Post by Prasad, Sreenivasa
Thank you.
I am new to this area and need your help on this.
My questions are
1. Will samba provide the locking mechanism?
yes
Post by Prasad, Sreenivasa
2. If the underlying file system also has the locking mechanism, then how
does samba handle this situation?
Samba support POSIX lock and oplock on linux

--
Simo Sorce ***@samba.org
-------------------------------
Samba Team http://www.samba.org
Prasad, Sreenivasa
2003-12-02 10:13:19 UTC
Permalink
For example, I have a server with samba and AFS on it serving multiple
clients (linux and nt).
where interfaces are through nt->samba and linux->afs.
My doubts are

1. At the server level how the requests are processed?
Is it some thing like below.

client request
|
|
V


Samba server
-----------------
AFS
-----------------
Under lying unix file system.
-------------------------

Is the above correct?

2. If so, do every linux client request should travel through the samba
server interface to the afs interface?


Regards,

/Prasad.


-----Original Message-----
From: ***@samba.org [mailto:***@samba.org]
Sent: Monday, September 24, 2001 3:24 PM
To: Prasad, Sreenivasa
Cc: '***@samba.org'; 'samba-***@samba.org'; '***@smaba.org'
Subject: Re: (no subject)
Post by Prasad, Sreenivasa
Thank you.
I am new to this area and need your help on this.
My questions are
1. Will samba provide the locking mechanism?
yes
Post by Prasad, Sreenivasa
2. If the underlying file system also has the locking mechanism, then how
does samba handle this situation?
Samba support POSIX lock and oplock on linux

--
Simo Sorce ***@samba.org
-------------------------------
Samba Team http://www.samba.org
Mark Jervis Sr.
2003-12-02 10:13:38 UTC
Permalink
CHIN,KOON-FATT (A-Malaysia,ex2)
2003-12-02 10:13:44 UTC
Permalink
Joachim.Tork at gad.de ()
2003-12-02 10:13:54 UTC
Permalink
confirm 737744
Steven French
2003-12-02 10:13:57 UTC
Permalink
An alternate way to do this may be to add UserGetGroups to the clirap2.c
code that Jim and I added to the head branch (for use by the new "net"
utility) a few weeks ago. We added a function called cli_NetGroupGetUsers
that does list the users that are members of the named group (works to at
least NT, Win2K, and OS/2 domain controllers so far). You seem to want
the reverse i.e. something like a cli_NetUserGetGroups which is possible
and could be remoted via either RAP or RPC. The trick is simply that it
may not handle local groups (I have not been able to find the RAP ordinal,
if there is one, for a UserGetLocalGroups unfortunately) - but certainly it
could be done via RPC. Have you tried the get_samr_query_usergroups call
in cli_samr.c to see whether it returns localgroups too?

I will experiment with the RAP code for this (I have also been cleaning up
more of net.c and experimenting with the ServiceInstall RAP calls for
stopping and starting services remotely) to see if I can get something
useful working.
Date: Wed, 31 Oct 2001 15:33:18 -0800
Subject: getting local groups/aliases via rpc?
I recently downloaded the latest samba and am looking through the
rpcclient code. It looks like a lot has changed in the last few months,
and like the functionality I couldn't put together back then has been
added for me. I'm still missing something though. I have a feeling it's
there but it's not clear.
My goal is to authenticate a user to an NT server and get a list of
groups for that user from the NT machine. Authenticating and fetching
_global_ groups appears to be straight forward, but I can't figure out,
so far, how to fetch the local groups associated with the authenticating
user...
Steve French
Senior Software Engineer
Linux Technology Center
IBM Austin
phone: 512-838-2294, T/L 678-2294;
pager: 512-480-6393; cell phone: 512-296-4687
email: ***@us.ibm.com
Ben Johnson
2003-12-02 10:13:57 UTC
Permalink
I am using the 2.2.2 sources for my experimentation so far and it looks
like get_samr_query_usergroups is not implemented there. I'm hoping for
excellent stability when I'm done so I've steered clear so far, but I'll
start looking into CVS. Thanks a lot for your help.

- Ben
Post by Steven French
An alternate way to do this may be to add UserGetGroups to the clirap2.c
code that Jim and I added to the head branch (for use by the new "net"
utility) a few weeks ago. We added a function called cli_NetGroupGetUsers
that does list the users that are members of the named group (works to at
least NT, Win2K, and OS/2 domain controllers so far). You seem to want
the reverse i.e. something like a cli_NetUserGetGroups which is possible
and could be remoted via either RAP or RPC. The trick is simply that it
may not handle local groups (I have not been able to find the RAP ordinal,
if there is one, for a UserGetLocalGroups unfortunately) - but certainly it
could be done via RPC. Have you tried the get_samr_query_usergroups call
in cli_samr.c to see whether it returns localgroups too?
I will experiment with the RAP code for this (I have also been cleaning up
more of net.c and experimenting with the ServiceInstall RAP calls for
stopping and starting services remotely) to see if I can get something
useful working.
Tim Potter
2003-12-02 10:13:57 UTC
Permalink
Post by Ben Johnson
I am using the 2.2.2 sources for my experimentation so far and it looks
like get_samr_query_usergroups is not implemented there. I'm hoping for
excellent stability when I'm done so I've steered clear so far, but I'll
start looking into CVS. Thanks a lot for your help.
Ben, a group list is also available in the response to a sam logon
request. I recently added a "samlogon" command to rpcclient for
testing purposes. If you check out the HEAD version of Samba you
will find it there. Winding up the debuglevel to 10 you can see
te list of groups returned in the num_groups2 and an array of gids
immediately after this field in the net_io_r_ram_logon structure.

Interestingly enough the get user groups rpc command does not return
all windows 2000 groups (i.e universal groups) the user is a member
of so you can get in to trouble that way.


Tim.
Steven French
2003-12-02 10:14:03 UTC
Permalink
The NetBIOS name resolution doesn't get in the way of using port
445 at all. The end result of name resolution--NBT or otherwise--is an
IP address.
Regarding the use of a DNS SRV RR... *That* I don't know. How hard would
it be to add? Also, if you have the DNS name of the W2K.DC do you need
to look up an SRV record? I don't think you do.
Chris -)-----
Remphasizing what Chris said - whether port 445 is used or not, name
resolution is optional. On either port you can simply create a tcp
session and immediately start by sending SMBnegprot (without sending any of
the other RFC1001 frame types). I tested this with some prototype
kernel smb client code a few months ago (and it sure saved the hassle of
writting a lot of RFC 1001 specific code in the kernel) against both Samba
and Win2K.

The second question, the DNS SRV RR if there isn't one there in Samba head
already - I was planning on writing a routine to do DC lookup that way.
This, and a companion DNS entry, were reasonably documented on the
Microsoft site and it sure would be nice to be able to have a fall back
mechanism that works better on multiple subnets than the existing 0x1C and
0x1D stuff and the mailslot domain broadcasts for locating the DCs ip
address. Microsoft even put sample Linux & BSD code on their site to show
people how to do this.

Steve French
Senior Software Engineer
Linux Technology Center - IBM Austin
phone: 512-838-2294
email: ***@us.ibm.com
Gerald (Jerry) Carter
2003-12-02 10:14:03 UTC
Permalink
Post by Steven French
The second question, the DNS SRV RR if there isn't one there in Samba
head already - I was planning on writing a routine to do DC lookup
that way. This, and a companion DNS entry, were reasonably documented
on the Microsoft site and it sure would be nice to be able to have a
fall back mechanism that works better on multiple subnets than the
existing 0x1C and 0x1D stuff and the mailslot domain broadcasts for
locating the DCs ip address. Microsoft even put sample Linux & BSD
code on their site to show people how to do this.
This is what I was referring to. There is more to existing
in a Win2k NetBIOS less domain than port 445. That's all.
Thanks Steve.






cheers, jerry
---------------------------------------------------------------------
www.samba.org SAMBA Team jerry_at_samba.org
www.plainjoe.org jerry_at_plainjoe.org
http://www.hp.com Hewlett-Packard
--"I never saved anything for the swim back." Ethan Hawk in Gattaca--
root
2003-12-02 10:14:14 UTC
Permalink
From: "Daniel Deimert" <***@dtek.chalmers.se>
Subject: BUG: winbindd dumps core on redhat 7.2 (SAMBA_2_2 cvs 20 nov)

Samba team,

I would like to file a bug report:

winbindd from SAMBA_2_2 cvs dumps core on redhat 7.2.

This bug report is a followup of my previous report that samba 2.2.2
winbindd fails read all groups from a NT4 PDC controlled domain.

samba sources were checked out on Nov 20 with

cvs -z5 -d :pserver:***@pserver.samba.org:/cvsroot co -r SAMBA_2_2 samba

samba was compiled using the build-rpms script in the packages directory.
up2date was run on the redhat system before compiling.

Please contact me directly by e-mail if you would like me to compile
and test any patches.



GNU gdb Red Hat Linux 7.x (5.0rh-15) (MI_OUT)
Copyright 2001 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux"...
(no debugging symbols found)...
(gdb) run winbind -d 10 -i
Starting program: /usr/sbin/winbindd winbind -d 10 -i
INFO: Debug class all level = 10 (pid 21380 from pid 21380)
doing parameter winbind separator = +
doing parameter winbind uid = 10000-20000
doing parameter winbind gid = 10000-20000
doing parameter winbind enum users = yes
doing parameter winbind enum groups = yes
doing parameter template shell = /bin/false
doing parameter template homedir = /home/%D/%U
doing parameter workgroup = FAIRFIELD
doing parameter server string = Samba Server
doing parameter hosts allow = 192.168. 10. 127.
doing parameter printcap name = /etc/printcap
doing parameter load printers = yes
doing parameter log file = /var/log/samba/log.%m
doing parameter max log size = 50
doing parameter security = domain
doing parameter password server = IMT_PDC *
doing parameter encrypt passwords = yes
doing parameter socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
doing parameter dns proxy = no
Processing section "[homes]"
doing parameter comment = Home Directories
doing parameter browseable = no
doing parameter writable = yes
Processing section "[printers]"
doing parameter comment = All Printers
doing parameter path = /var/spool/samba
doing parameter browseable = no
doing parameter guest ok = no
doing parameter writable = no
doing parameter printable = yes
Processing section "[cadfiles]"
doing parameter comment = Fairfield CAD files
doing parameter path = /home/CADFILES
doing parameter public = no
doing parameter read list = @FAIRFIELD+cadread
doing parameter write list = @FAIRFIELD+Cadcreate
pm_process() returned Yes
adding IPC service IPC$
adding IPC service ADMIN$
added interface ip=192.168.10.9 bcast=192.168.10.255 nmask=255.255.255.0
added interface ip=192.168.10.9 bcast=192.168.10.255 nmask=255.255.255.0
getting trusted domain list
Creating get_dc_name_cache entry for FAIRFIELD
resolve_lmhosts: Attempting lmhosts lookup for name FAIRFIELD<0x1c>
getlmhostsent: lmhost entry: 127.0.0.1 localhost
resolve_wins: Attempting wins lookup for name FAIRFIELD<0x1c>
wins_srv_count: WINS status: 0 servers.
resolve_wins: WINS server resolution selected and no WINS servers listed.
name_resolve_bcast: Attempting broadcast lookup for name FAIRFIELD<0x1c>
bind succeeded on port 0
socket option SO_KEEPALIVE = 0
socket option SO_REUSEADDR = 1
socket option SO_BROADCAST = 1
Could not test socket option TCP_NODELAY.
socket option IPTOS_LOWDELAY = 0
socket option IPTOS_THROUGHPUT = 0
socket option SO_SNDBUF = 65535
socket option SO_RCVBUF = 65535
socket option SO_SNDLOWAT = 1
socket option SO_RCVLOWAT = 1
socket option SO_SNDTIMEO = 0
socket option SO_RCVTIMEO = 0
Sending a packet of len 50 to (192.168.10.255) on port 137
read_udp_socket: lastip 192.168.10.28 lastport 137 read: 62
parse_nmb: packet id = 973
Received a packet of len 62 from (192.168.10.28) port 137
nmb packet from 192.168.10.28(137) header: id=973 opcode=Query(0) response=Yes
header: flags: bcast=No rec_avail=No rec_des=Yes trunc=No auth=Yes
header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0
answers: nmb_name=FAIRFIELD<1c> rr_type=32 rr_class=1 ttl=300000
answers 0 char ...... hex E000C0A80A1C
Got a positive name query response from 192.168.10.28 ( 192.168.10.28 )
read_udp_socket: lastip 192.168.10.11 lastport 31734 read: 58
parse_nmb: packet id = 973
Received a packet of len 58 from (192.168.10.11) port 31734
nmb packet from 192.168.10.11(31734) header: id=973 opcode=WACK(7) response=Yes
header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes
header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0
answers: nmb_name=FAIRFIELD<1c> rr_type=32 rr_class=1 ttl=10
answers 0 char .. hex 0100
bind succeeded on port 0
Sending a packet of len 50 to (192.168.10.28) on port 137
read_udp_socket: lastip 192.168.10.28 lastport 137 read: 283
parse_nmb: packet id = 27970
Received a packet of len 283 from (192.168.10.28) port 137
nmb packet from 192.168.10.28(137) header: id=27970 opcode=Query(0) response=Yes
header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes
header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0
answers: nmb_name=*<00> rr_type=33 rr_class=1 ttl=0
answers 0 char .IMT_BDC hex 09494D545F4244432020202020202020
answers 10 char .D.IMT_BDC hex 004400494D545F424443202020202020
answers 20 char D.FAIRFIELD hex 2020204400464149524649454C442020
answers 30 char ...FAIRFIELD hex 2020202000C400464149524649454C44
answers 40 char ...IMT_BDC hex 2020202020201CC400494D545F424443
answers 50 char .D.SMS&_ hex 2020202020202020034400534D53265F
answers 60 char IMT_BDC .D.INe hex 494D545F424443202020034400494E65
answers 70 char t~Services ...I hex 747E536572766963657320201CC40049
answers 80 char S~IMT_BDC......D hex 537E494D545F42444300000000000044
answers 90 char .FAIRFIELD hex 00464149524649454C44202020202020
answers a0 char ........I....... hex 1EC40000A0C9ECD64900000000000000
answers b0 char ................ hex 00000000000000000000000000000000
answers c0 char ................ hex 00000000000000000000000000000000
answers d0 char . hex 00
resolve_srv_name: IMT_BDC
resolve_lmhosts: Attempting lmhosts lookup for name IMT_BDC<0x20>
getlmhostsent: lmhost entry: 127.0.0.1 localhost
resolve_hosts: Attempting host lookup for name IMT_BDC<0x20>
resolve_wins: Attempting wins lookup for name IMT_BDC<0x20>
wins_srv_count: WINS status: 0 servers.
resolve_wins: WINS server resolution selected and no WINS servers listed.
name_resolve_bcast: Attempting broadcast lookup for name IMT_BDC<0x20>
bind succeeded on port 0
socket option SO_KEEPALIVE = 0
socket option SO_REUSEADDR = 1
socket option SO_BROADCAST = 1
Could not test socket option TCP_NODELAY.
socket option IPTOS_LOWDELAY = 0
socket option IPTOS_THROUGHPUT = 0
socket option SO_SNDBUF = 65535
socket option SO_RCVBUF = 65535
socket option SO_SNDLOWAT = 1
socket option SO_RCVLOWAT = 1
socket option SO_SNDTIMEO = 0
socket option SO_RCVTIMEO = 0
Sending a packet of len 50 to (192.168.10.255) on port 137
read_udp_socket: lastip 192.168.10.28 lastport 137 read: 62
parse_nmb: packet id = 8600
Received a packet of len 62 from (192.168.10.28) port 137
nmb packet from 192.168.10.28(137) header: id=8600 opcode=Query(0) response=Yes
header: flags: bcast=No rec_avail=No rec_des=Yes trunc=No auth=Yes
header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0
answers: nmb_name=IMT_BDC<20> rr_type=32 rr_class=1 ttl=300000
answers 0 char `..... hex 6000C0A80A1C
Got a positive name query response from 192.168.10.28 ( 192.168.10.28 )
read_udp_socket: lastip 192.168.10.11 lastport 31739 read: 58
parse_nmb: packet id = 8600
Received a packet of len 58 from (192.168.10.11) port 31739
nmb packet from 192.168.10.11(31739) header: id=8600 opcode=WACK(7) response=Yes
header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes
header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0
answers: nmb_name=IMT_BDC<20> rr_type=32 rr_class=1 ttl=10
answers 0 char .. hex 0100
cli_init_creds: user domain flgs: 0
ntlmssp_cli_flgs:0
cli_establish_connection: CADFILES<00> connecting to IMT_BDC<20> (192.168.10.28) - []
Connecting to 192.168.10.28 at port 445
error connecting to 192.168.10.28:445 (Connection refused)
Connecting to 192.168.10.28 at port 139
socket option SO_KEEPALIVE = 0
socket option SO_REUSEADDR = 0
socket option SO_BROADCAST = 0
socket option TCP_NODELAY = 1
socket option IPTOS_LOWDELAY = 0
socket option IPTOS_THROUGHPUT = 0
socket option SO_SNDBUF = 16384
socket option SO_RCVBUF = 16384
socket option SO_SNDLOWAT = 1
socket option SO_RCVLOWAT = 1
socket option SO_SNDTIMEO = 0
socket option SO_RCVTIMEO = 0
write_socket(6,76)
write_socket(6,76) wrote 76
Sent session request
got smb length of 0
size=0
smb_com=0x0
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=0
smb_flg2=0
smb_tid=0
smb_pid=0
smb_uid=0
smb_mid=0
smt_wct=0
smb_bcc=0
write_socket(6,168)
write_socket(6,168) wrote 168
got smb length of 97
size=97
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=1
smb_tid=0
smb_pid=21380
smb_uid=0
smb_mid=1
smt_wct=17
smb_vwv[0]=7 (0x7)
smb_vwv[1]=12803
Program received signal SIGSEGV, Segmentation fault.
0x0807153c in chroot ()
(gdb) bt
#0 0x0807153c in chroot ()
#1 0x081534f0 in ?? () at eval.c:41
#2 0x0808c6cc in chroot ()
#3 0x080814fc in chroot ()
#4 0x08082235 in chroot ()
#5 0x0805323e in chroot ()
#6 0x08053494 in chroot ()
#7 0x08050254 in chroot ()
#8 0x0804c4f0 in chroot ()
#9 0x40064306 in __libc_start_main (main=0x804c310 <chroot+4004>, argc=5,
ubp_av=0xbffffb14, init=0x804a6a4 <_init>, fini=0x80cf390 <_fini>,
rtld_fini=0x4000d2cc <_dl_fini>, stack_end=0xbffffb0c)
at ../sysdeps/generic/libc-start.c:129
(gdb) quit
The program is running. Exit anyway? (y or n)
ken
2003-12-02 10:14:22 UTC
Permalink
I have finally connected w2k and win9x to a samba pdc!Now when I want
to share a printer thats on a windows machine with certain people,only
about 50 names show up in the list...we have 400 users.I have checked
the passwd,smbpasswd,shadow files and all 400 names are in these files


ken
***@kenscomp.com
jurriën Koopmans
2003-12-02 10:14:42 UTC
Permalink
FreeBSD cc16672-b.zwoll1.ov.nl.home.com 4.3-RELEASE FreeBSD 4.3-RELEASE #2:
Fri Nov 9 11:50:13 CET
2001
***@cc16672-b.zwoll1.ov.nl.home.com:/usr/src/sys/compile/FREEBIE i386

the program did not compile so you have some info so you can fix it :)


thanks
jurri?n Koopmans
-------------- next part --------------
A non-text attachment was scrubbed...
Name: output.txt.gz
Type: application/octet-stream
Size: 1869 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20020102/c2a07cbb/output.txt.obj
-------------- next part --------------
A non-text attachment was scrubbed...
Name: config.log.gz
Type: application/octet-stream
Size: 14267 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20020102/c2a07cbb/config.log.obj
Steven French
2003-12-02 10:14:54 UTC
Permalink
Chris,
You are right the Unix extensions are in the SNIA CIFS spec in Appendix D.
The specifications for the individual Unix specific info levels themselves
are interspersed through the document in the FILE_INFO and PATH_INFO and
FIND_FIRST sections.

I will investigate implementing the Unix extensions in my CIFS Linux VFS
prototype (which I have just started working on again). The combination
of running Winbind and an enhanced VFS module (implementing at least the
FIND_FIRST extension) for a Linux client should be a visible improvement
for the user. This is excellent news.

I am still curious whether we will discover future XP or .Net server levels
which will make obsolete/redundant the level 201 and 203 infolevels (for
soft and hard links) given that Microsoft already introduced a slightly
different form of link into NTFS (which their Windows 2000 Groveler service
takes advantage of) to achieve "copy-on-write" behavior saving diskspace
for their disk space intensive RIS client images.

From: "Christopher R. Hertel" <***@nts.umn.edu>
Subject: Re: CIFS UNIX Extensions.
To: Urban Widmark <***@teststation.com>
Date: Wed, 9 Jan 2002 21:17:20 -0600 (CST)
Cc: Jeremy Allison <***@samba.org>, samba-***@samba.org

I believe that the Unix extensions are in the SNIA doc, and I also
believe that Byron had a look at them in that context.

Worth checking.

Chris -)-----


Steve French
Senior Software Engineer
Linux Technology Center - IBM Austin
phone: 512-838-2294
email: ***@us.ibm.com
Jose Gabriel Carrasco
2003-12-02 10:15:23 UTC
Permalink
Hello, I would like if we can help me about this:

I'm administration and I have to do many users samba. My idea is editing
smbpasswd (the file), but I don't know how resolve the algoritm MD4.
Please, if can help me. I hope request. Thank's

_________________________________________________________________
Descargue GRATUITAMENTE MSN Explorer en http://explorer.yupimsn.com/intl.asp
Chris Porter
2003-12-02 10:15:39 UTC
Permalink
--
Christopher L Porter
Business Systems Analyst III
Invensys Process Systems
(858) 720-7298
***@esscor.com
McIntosh, Qi
2003-12-02 10:15:57 UTC
Permalink
Hi,
I am new to samba and CIFS. I am just trying to learn and understand how
samba/CIFS works. I saw some of the discussion about users without local
uid, but I also remember that samba support a client access file share on a
Samba server without having a account on the host Unix machine.
I am confused...
So reading the code of Samba head. When ADS, kerberos are enabled, how
does Samba support a client "session setup" request while the client doesn't
have a local account on the samba host?
I assume that smb_getpwnam() will return NULL if the client doesn't have a
local account there. right?

If the client has an account in the MS domain, what is the way to get that
account information over? With NTLM, NetrSamLogon to the domain controller
will get some of it, right? I am guessing that with Active Directory, it
should be available via LDAP. Am I right? Is there something I missed?

Thanks very much for any information on this!
Qi
Andrew Bartlett
2003-12-02 10:16:00 UTC
Permalink
Post by McIntosh, Qi
Hi,
I am new to samba and CIFS. I am just trying to learn and understand how
samba/CIFS works. I saw some of the discussion about users without local
uid, but I also remember that samba support a client access file share on a
Samba server without having a account on the host Unix machine.
I am confused...
Well, the 'non-unix-account' stuff I've been going on about is a bit
weird. There are parts of the protocol where we do things like lookup
users and authorised logins, but we don't need to actually *become* that
user.

For cases where we need to do that (and I havn't coded this yet) I'll
have some kind of 'map to guest' option. Probably 'map to guest = non
unix account'.
Post by McIntosh, Qi
So reading the code of Samba head. When ADS, kerberos are enabled, how
does Samba support a client "session setup" request while the client doesn't
have a local account on the samba host?
I assume that smb_getpwnam() will return NULL if the client doesn't have a
local account there. right?
Yes.
Post by McIntosh, Qi
If the client has an account in the MS domain, what is the way to get that
account information over? With NTLM, NetrSamLogon to the domain controller
will get some of it, right? I am guessing that with Active Directory, it
should be available via LDAP. Am I right? Is there something I missed?
This is where Samba must be paired with 'winbind'. Winbind gets this
information from the DC and presents it to the unix getpw* apis.

Andrew Bartlett
--
Andrew Bartlett ***@pcug.org.au
Manager, Authentication Subsystems, Samba Team ***@samba.org
Student Network Administrator, Hawker College ***@hawkerc.net
http://samba.org http://build.samba.org http://hawkerc.net
Ivan Van den Bossche
2003-12-02 10:16:03 UTC
Permalink
Hi all,

I'm a newbie in Samba development and I would like to know more about the project? Where can I find technical information about samba development?

Many thanks,

Ivan Van den Bossche

-------------- next part --------------
HTML attachment scrubbed and removed
Andrew Bartlett
2003-12-02 10:16:03 UTC
Permalink
Post by Ivan Van den Bossche
Hi all,
I'm a newbie in Samba development and I would like to know more about
the project? Where can I find technical information about samba
development?
Mostly by following the lists - both this and samba-cvs. There is a
small smattering of information on the website, but it very quickly gets
out of date.

Finally, just download and read the source.

Andrew Bartlett
--
Andrew Bartlett ***@pcug.org.au
Manager, Authentication Subsystems, Samba Team ***@samba.org
Student Network Administrator, Hawker College ***@hawkerc.net
http://samba.org http://build.samba.org http://hawkerc.net
Cleiton L. Siqueira
2003-12-02 10:16:59 UTC
Permalink
Cleiton L. Siqueira
Col?gio Monjolo
***@colegiomonjolo.com.br
(0xx45) 522-1915

Esta mensagem foi enviada pelo sistema MONJOLO WEBMAIL

http://www.colegiomonjolo.com.br
Steve Cleveland
2003-12-02 10:17:00 UTC
Permalink
I'm running Samba 2.2.2 on Solaris 8 in a college environment with
approximately 200 PC workstations. The Solaris server is a Sunfire 280R
2x750MHz, and 4GB RAM.

The end of the term is here, and the labs are near capacity for most of
the day. As the usage has gone up, we've started to experience a lot of
problems. I've been tracking the number of smbd processes and as they
reach 300+, it suddenly jumps to ~400, the load on the server jumps to
around 70 (from 2 or 3) and all of the processes disconnect from the
parent.

I basically have to kill off the processes by hand and restart samba to
get things straightened out.

Looking at the logs, I see quite a lot of stuff, and don't really know
what any of it means.


Mar 14 14:00:47 stak smbd[23433]: [ID 702911 local7.error] reply_lockingX:
Error : oplock break from client for fnum = 7937 and no oplock granted on
this file (stella/mcsm1 fit/Mass Transfer Limitiation/BUtane
only/BUTONLY.TXT).

Mar 14 14:00:35 stak smbd[24115]: [ID 702911 local7.error] locking :
delete_fn. LOGIC ERROR ! Entry for pid 23930 and it no longer exists !

Mar 14 14:00:35 stak smbd[24105]: [ID 702911 local7.error] PANIC:
request_oplock_break: no fsp found for our own oplock

Mar 14 14:00:35 stak smbd[24105]: [ID 702911 local7.error] ERROR: string
overflow by 1 in safe_strcpy [mcintosh]

Mar 14 15:00:03 stak smbd[29962]: [ID 702911 local7.error]
request_oplock_break: PANIC : breaking our own oplock requested for dev =
30c0432, inode = 570228,

Mar 14 15:00:40 stak smbd[2305]: [ID 702911 local7.error]
yield_connection: tdb_delete for name failed with error Record does not
exist.


The "string overflow" message we have always gotten. For some reason, the
length of the usernames is being limited to seven characters instead of
eight. It would also be nice to stop getting that error message!

I can post the logs if anyone is interested. Right now it's just log
level 1, but I can increase that for a short amount of time (The logs get
large as it is).

If someone can explain these errors and tell me if they could cause the
errors I am seeing, I would greatly appreciate it!

Thanks,
- Steve
David Collier-Brown
2003-12-02 10:17:01 UTC
Permalink
Post by Steve Cleveland
I'm running Samba 2.2.2 on Solaris 8 in a college environment with
approximately 200 PC workstations. The Solaris server is a Sunfire 280R
2x750MHz, and 4GB RAM.
Hmmn, you can probably transfer something on
the order of 159 MB/S, which is reasonable
as long as the students are doing editing
and the like, not running mass compiles.
Post by Steve Cleveland
The end of the term is here, and the labs are near capacity for most of
the day. As the usage has gone up, we've started to experience a lot of
problems. I've been tracking the number of smbd processes and as they
reach 300+, it suddenly jumps to ~400, the load on the server jumps to
around 70 (from 2 or 3) and all of the processes disconnect from the
parent.
Yoiks, something's building up: you should
average around 200-odd processes, one per
logged-on user.

In a lab/office environment, you should
have
keepalive = 3600
dead time = 10
set, to cause Samba to detect dead
or inactive or disconnected clients,
and clean them up.

That it isn't indicates there is an
underlying problem, that "hits the wall"
when the load gets high.

As we know there is a problem, start with
keepalive = 30
and if the behavior improves, set it done
to 3600.
Post by Steve Cleveland
Error : oplock break from client for fnum = 7937 and no oplock granted on
this file (stella/mcsm1 fit/Mass Transfer Limitiation/BUtane
only/BUTONLY.TXT).
One of the clients has failed to get an oplock,
which can be harmless **if** more than one person
is supposed to be editing/reading the same file.
Post by Steve Cleveland
delete_fn. LOGIC ERROR ! Entry for pid 23930 and it no longer exists !
A smbd has exited unexpectedly, and another
noticed and logged it.
Post by Steve Cleveland
request_oplock_break: no fsp found for our own oplock
looks like an internal error
Post by Steve Cleveland
Mar 14 15:00:03 stak smbd[29962]: [ID 702911 local7.error]
request_oplock_break: PANIC : breaking our own oplock requested for dev =
30c0432, inode = 570228,
internal error, of the "can't happen" sort.
Post by Steve Cleveland
Mar 14 15:00:40 stak smbd[2305]: [ID 702911 local7.error]
yield_connection: tdb_delete for name failed with error Record does not
exist.
internal error

First, try the options.

Second, try
netstat -s | egrep -i 'coll|defer|err|drop|reset'
You should get something like
elsbeth> netstat -s | egrep -i 'coll|defer|err'
rawipInDatagrams = 11504 rawipInErrors = 0
rawipInCksumErrs = 0 rawipOutDatagrams = 3
rawipOutErrors = 0
udpInDatagrams =2719515 udpInErrors = 0
udpOutDatagrams =2653659 udpOutErrors = 0
ipInReceives =4064815 ipInHdrErrors = 0
ipInAddrErrors = 0 ipInCksumErrs = 0
tcpInErrs = 0 udpNoPorts =584671
udpInCksumErrs = 0 udpInOverflows = 0
ipv6InReceives = 0 ipv6InHdrErrors = 0
ipv6InTooBigErrors = 0 ipv6InNoRoutes = 0
ipv6InAddrErrors = 0 ipv6InUnknownProtos = 0
udpInCksumErrs = 0 udpInOverflows = 0
ICMPv4 icmpInMsgs = 11504 icmpInErrors = 0
icmpInCksumErrs = 0 icmpInUnknowns = 0
icmpOutDrops =584660 icmpOutErrors = 0
ICMPv6 icmp6InMsgs = 0 icmp6InErrors = 0
icmp6OutMsgs = 0 icmp6OutErrors = 0

Any errors are bad,
all resets are bad
tcp drops are abd, other don't matter
defers are suspicious (as a % of packets sent)
collisions ditto

One well-known cause is a flaky hub/router, as well
as bad and mis-set ethernet cards in the PCs.

--dave
--
David Collier-Brown, | Always do right. This will gratify
Performance & Engineering | some people and astonish the rest.
Americas Customer Engineering, | -- Mark Twain
(905) 415-2849 | ***@canada.sun.com
David Lee
2003-12-02 10:17:01 UTC
Permalink
Post by Steve Cleveland
I'm running Samba 2.2.2 on Solaris 8 in a college environment with
approximately 200 PC workstations. The Solaris server is a Sunfire 280R
2x750MHz, and 4GB RAM.
The end of the term is here, and the labs are near capacity for most of
the day. As the usage has gone up, we've started to experience a lot of
problems. I've been tracking the number of smbd processes and as they
reach 300+, it suddenly jumps to ~400, the load on the server jumps to
around 70 (from 2 or 3) and all of the processes disconnect from the
parent.
I basically have to kill off the processes by hand and restart samba to
get things straightened out.
(Aside: Do you know the command "pkill" in the more recent Solaris
releases? A single "pkill smbd" command can assist such firefighting.)
Post by Steve Cleveland
[...]
If someone can explain these errors and tell me if they could cause the
errors I am seeing, I would greatly appreciate it!
Executive summary: run (don't walk) to your nearest Samba mirror and get
release 2.2.3a .

Detail: Problems relating to oplocks, and to such smbd-avalanching have
been noticeable in the the combination of Solaris and the evolving 2.2.x
samba. By release 2.2.2 things were much better, but there were still a
couple of significant remaining problems in precisely these areas.

Jeremy has continued to do much work in this area. Sometime after 2.2.2
was released, he had one of those "Eureka!" moments (forgive poetic
licence), and found and fixed the smbd-avalanching bug. This fix was
incorporated into Samba 2.2.3a . So I strongly recommend that you plan a
migration from 2.2.2 up 2.2.3a .

Hope that helps.
--
: David Lee I.T. Service :
: Systems Programmer Computer Centre :
: University of Durham :
: http://www.dur.ac.uk/t.d.lee/ South Road :
: Durham :
: Phone: +44 191 374 2882 U.K. :
Steve Cleveland
2003-12-02 10:17:01 UTC
Permalink
Post by David Lee
(Aside: Do you know the command "pkill" in the more recent Solaris
releases? A single "pkill smbd" command can assist such firefighting.)
Thanks for the tip! I was doing a funky foreach command, but pkill is
much better!
Post by David Lee
Executive summary: run (don't walk) to your nearest Samba mirror and get
release 2.2.3a .
Detail: Problems relating to oplocks, and to such smbd-avalanching have
been noticeable in the the combination of Solaris and the evolving 2.2.x
samba. By release 2.2.2 things were much better, but there were still a
couple of significant remaining problems in precisely these areas.
Jeremy has continued to do much work in this area. Sometime after 2.2.2
was released, he had one of those "Eureka!" moments (forgive poetic
licence), and found and fixed the smbd-avalanching bug. This fix was
incorporated into Samba 2.2.3a . So I strongly recommend that you plan a
migration from 2.2.2 up 2.2.3a .
Hope that helps.
I upgraded early this afternoon after another melt-down, and things seem
to be running much smoother. The number of smbd processes is within a few
of the number of users on the system (using utmp). Before it was always
off by 30-40. Plus, the machine seems to be using a lot fewer resources.

I had been a little reluctant to upgrade to this release as I had read
about some problems. But I think I would rather deal with those problems
than this one! :)

Thanks for the explanation!

- Steve
Imap_sonam
2003-12-02 10:17:05 UTC
Permalink
-------------- next part --------------
HTML attachment scrubbed and removed
RANJANI NAGARAJAN
2003-12-02 10:17:22 UTC
Permalink
hi

i have downloaded the source code of samba,and also know it's functionality.i know that this site is strictly for samba internals ,but i did not know whom else to approach.

my ques: is there any paricular order in which i can go thriugh the source code to get a hang of it faster? if i make any modifications to the source, and compile, will the changes be automatically reflected?







---------------------------------
Do You Yahoo!?
Yahoo! Tax Center - online filing with TurboTax
-------------- next part --------------
HTML attachment scrubbed and removed
RANJANI NAGARAJAN
2003-12-02 10:17:22 UTC
Permalink
hi

i know this site is strictly for samba internals but since i didnot know whom else to app. i am posting the ques here.please do reply

is there any particular way that i can go through the source code so that i can get a hang of it very fast.

also, if i change the code and compile--what are the steps to follow so that these changes are refleted when i restart the smbd





---------------------------------
Do You Yahoo!?
Yahoo! Tax Center - online filing with TurboTax
-------------- next part --------------
HTML attachment scrubbed and removed
salsa_net
2003-12-02 10:17:28 UTC
Permalink
i am a problem,is the following:
- I have two printing windows for which drivers don't exist for linux, epson epl n2700
- I want to print by clients linux on these printers in my lan

how can I do? is there a solution?
thanks
-------------- next part --------------
HTML attachment scrubbed and removed
phani krishna somayajula
2003-12-02 10:17:31 UTC
Permalink
Hi,
i had configured my linux box in office as dial in server so
that
i can dial up from my home pc.
i am able to log onto the remote machine and do telnet or ftp.
my problem is i want to access the systems present in the
network
with the linux server from my home.how to do that.i had
configured
my home pc as the same workgroup as the samba server but unable
to
find the systems in my home pc network neighbour hood.kindly
help
me in solving this problem.
phani

_________________________________________________________
Click below to visit monsterindia.com and review jobs in India or
Abroad
http://monsterindia.rediff.com/jobs
Raymundo, Joseph
2003-12-02 10:17:46 UTC
Permalink
We're using Redhat Linux 6.2 and Samba 2.0.7 for our file server. It is driven by an Intel Pentium III 900Mhz processor, 128MB PC133 DIMM, and RAID1 (40GB 5400rpm IDE). We have an average of 30-40 active connections. Users workstation is mostly Intel Pentium III 900Mhz with 128MB memory and connected via 10mbps Ethernet.
File access is not that heavy, but the files can be quite large, 100Kb to 30Mb. A software being used by production directly accessed hi-res images in TIFF format or .tif file. We also have postscript files that are being extracted from the server to a local PC for distilling. The average size is about 100-200MB and sometimes goes up to 1.5GB.
Users are complaining that the server is going very slow whenever a large file is taken out or during peak hours where a lot of users are accessing the server all at the same time. Based on the result of the "top" command, I have only 3.5 to 3MB left on my memory. What I'm doing is just restart the samba and everything goes back to normal.
The problem is that this is happening almost once or at least twice everyday. We have another file server with Redhat 7.2 and Samba 2.2.1 same processor, but have a RAID5, 5400rpm IDE hard disk and 256MB DIMM PC133 memory. This too is having the same problems as the first one.
Is 128MB enough for our file server or is there something wrong with the configuration of our Linux? Is RAID really adding that much load to the CPU usage, I/O operation and memory considering that the disks are controlled by the motherboard and/or processor? Do you have any hardware recommendations or softwares needed to be install on our samba files server?
Regards,

Joseph S. Raymundo
SPS SYSTEMS ENGINEER
SPI TECHNOLOGIES INC.
(632) 855-8756
(632) 853-2773/4 (fax)
URL : http:www.spitech.com/ <spitech.com>
Email : mailto:***@spitech.com <mailto:***@spitech.com>
LAURENT MPETI KABILA
2003-12-02 10:17:49 UTC
Permalink
REQUEST FOR URGENT BUSINESS ASSISTANCE
--------------------------------------
I stumbled into your contact by stroke of luck after a
long search for an honest and trust worthy person who
could handle issue with high confidentiality.
I was so dilghted when i got your contact and i decided
to contact you and solicite for your kind assistance.
i hope you will let this issue to remain confidential even
if you are not interested because of my status.

I am Laurent Mpeti Kabila (Jnr) the second son of
Late President LAURENT DESIRE KABILA the immediate
Past president of the DEMOCRATIC REPUBLIC OF CONGO in
Africa who was murdered by his opposition through his personal
bodyguards in his bedroom on Tuesday 16th January, 2001.
I have the privilege of being mandated by my father,s
colleagues to seek your immediate and urgent co-operation
to receive into your bank account the sum of US $25m.
(twenty-five million Dollars) and some thousands carats
of Diamond. This money and treasures was lodged in a vault with a
security firm in Europe and South-Africa.

SOURCES OF DIAMONDS AND FUND
In August 2000, my father as a defence minister and
president has a meeting with his cabinet and armychief about the
defence budget for 2000 to 2001 which was US $700m.
so he directed one of his best friend. Frederic Kibasa Maliba
who was a minister of mines and a political party leader known
as the Union Sacree de,opposition radicale et ses allies (USORAL)
to buy arms with US $200m on 5th January 2001; for him to finalize
the arms deal,my father was murdered. f.K. Maliba (FKM) and I have
decided to keep the money with a foreigner after which he will use
it to contest for the political election. Inspite of all this we
have resolved to present you or your company for the firm to pay
it into your nominated account the above sum and diamonds.
This transaction should be finalized within seven (7) working
days and for your co-operation and partnership, we have unanimously
agreed that you will be entitled to 5.5% of the money when successfully
receive it in your account. The nature of your business is not relevant to
the successful execution of this transaction what we require is your
total co-operation and commitment to ensure 100%risk-free transaction at
both ends and to protect the persons involved in this transaction strict
confidence and utmost secrecy is required even after the uccessful conclusion
of this transaction. If this proposal is acceptable to you, kindly provide me
with your personal telephone and fax through my E-mail box for immediate
commencement of the transaction. I count on your honour to keep my
secret, SECRET.

Looking forward for your urgent reply

Thanks.
Best Regards

MPETI L. KABILA (Jnr)
Lapers Stefan
2003-12-02 10:18:04 UTC
Permalink
Sorry, hit the reply button instead to the maillist.

Hi there,

Well the problem seems to be resolved, I didn't get it working on RH7.3
I reverted to RH 7.2 and used an rpm of 2.2.4 instead of compiling it
myself, now it seems ok.
I used the same smb.conf.
What i saw :

- On NT4 when the printer was installed, all properties were accessible by a
normal user and under ports I had a Lanman printer port, also the speed to
access these settings were a lot faster.

- On W2k and XP I had a samba printer port and a normal user didn't have
access to the settings of the printer, CPU on my server went around 20% ->
30% for 1 connection ( loglevel 0 ! )

I thought the disable spoolss was the solution, but as it seems it has been
planned to be removed in version 3.x ?
So this means I am stuck with the braindead MS-RPC, I really want to get
this stable as it will go in production in a month or so, I already have
been testing for about 4 months now and it was a real nightmare... ( I don't
blame samba :-) )
Even with version 2.2.4 i have problems with landscape and paper settings.
The strange thing is that it is so unpredictable, I admit I used use client
drivers = yes , but if I don't use it printer settings are not accessible
for the users and the smbd process is really eating the CPU, we are testing
it with about 20 users so the load shouldn't be that high.

It will have about 1200 user on it and 130 printers, printing a monthly
volume of about 300.000 pages. It's a big project for our head office here
in Belgium.

Greets,

Stefan Lapers


-----Original Message-----
From: Gerald Carter [SMTP:***@samba.org]
Sent: zondag 2 juni 2002 22:35
To: Lapers Stefan
Cc: 'samba-***@samba.org'
Subject: Re: Disable spoolss
Due to quite some problems with the RPC printing code in samba
(landscape,
paper size), I would like to disable the spoolss functionality and
use the
old code.
However I will probably need Active Directory support in the near
future, so
reverting to samba 2.0 is no option.
Happy me, there is the disable spoolss option in the smb.conf
file.
I'm using 2.2.4 compiled on Intel RH 7.3, but samba seems to
ignore the
disable spoolss = yes option for Win2K and WinXP clients. NT 4
seems to be
ok.
Anyone has a solution, quite desperate over here.
This works fine with my Win2kSP2 client here.
What behavior makes you think that smbd is not obeying the
parameter?





cheers, jerry

---------------------------------------------------------------------
Hewlett-Packard
http://www.hp.com
SAMBA Team
http://www.samba.org
--
http://www.plainjoe.org
"Sam's Teach Yourself Samba in 24 Hours" 2ed. ISBN
0-672-32269-2

-------------- next part --------------
HTML attachment scrubbed and removed
Jetapa at aol.com ()
2003-12-02 10:18:05 UTC
Permalink
Billy Passauer
2003-12-02 10:18:12 UTC
Permalink
Luke Kenneth Casson Leighton
2003-12-02 10:18:16 UTC
Permalink
a reminder.

i'm still extremely distressed and upset with you.
the only way for me to deal with this is not to deal
with it.

i still receive messages from people asking for my
assistance.

and it distresses me to have to turn them down.

you still have a lot to answer for, and it's been over
two years now.

you think you are so clever, that you have to have an
answer for everything, to win everything, to control
everything.

sometimes by winning you cause people pain and distress
and you lose more than you could possibly have gained.

l.

p.s. if you have an answer to this guy's questions, please
forward them to me, i'll forward them to him.

------

hiya,

well i been out the picture so long it'd take me a while
to answer you, and it's time i really don't have right
now.

two years ago, i would definitely help you out, no question.

now all this does is remind me of the opportunities that
have been forcibly lost.

l.
--
----------------------------------------------------------
this message is private, confidential, and is intented for
the specified recipients only. if you received in error,
altered, deleted, modified, destroyed or interfered with
the contents of this message, in whole or in part, please
inform the sender (that's me), immediately.

if you, the recipient, reply to this message, and do not
then receive a response, please consider your reply to have
been lost or deliberately destroyed: i *always* acknowledge
personal email received. please therefore take appropriate
action and use appropriate protocols to ensure effective
communication.

thank you.

----- Forwarded message from -----

Envelope-to: ***@localhost
From:
X-Confirm-Reading-To:
Disposition-Notification-To:
Return-Receipt-To:
To: ***@samba-tng.org

Hello Luke,

I really want to start sleeping at night ........

Investigating the TNG source code I reached the function
"create_ntlmssp_bind_cont" in "cli_pipe_ntlmssp.c"

Please let me know if I'm on the right way.....


-> pwd_make_lm_nt_owf(&usr->pwd, a->ntlmssp_chal.challenge, usr_sess_key);
Here the LM and NT OWFs are created and DES encrypted using the server
challenge from a previous packet from the server.


-> create_ntlmssp_rpc_bind_resp(&usr->pwd, usr->domain,usr->user_name, global_myname,
-> a->ntlmssp_chal.neg_flags,rpc_call_id,
-> &hdra, &hdr_autha, &auth_resp);
The response NTLMSSP packet is created

-> cli_set_con_usr_sesskey(con, usr_sess_key);
The session Key is set

-> pwd_get_lm_nt_owf(&usr->pwd, lm_owf, NULL, NULL);
-> pwd_get_lm_nt_16(&usr->pwd, lm_hash, NULL);
Here the LM OWF and LM Hash (I suppose the first 16 bytes of LM OWF)
are inserted in lm_owf and lm_hash variables.

-> NTLMSSPOWFencrypt(lm_hash, lm_owf, p24);
This is another DES encryption of the LM OWF generating a 24 bytes
value used for another RC4 encryption that follows....

-> {
-> unsigned char j = 0;
-> int ind;
-> unsigned char k2[8];
-> memcpy(k2, p24, 5);
-> k2[5] = 0xe5;
-> k2[6] = 0x38;
-> k2[7] = 0xb0;

This is and RC4 Table Initialization
-> for (ind = 0; ind < 256; ind++){
-> a->ntlmssp_hash[ind] = (unsigned char)ind;
-> }
This is an RC4 Table Expansion using the 8 bytes (5 + 0xe5 0x38 0xb0)
Key derived from the above NTLMSSPOWFencrypt function.
-> for (ind = 0; ind < 256; ind++)
-> {
-> unsigned char tc;
-> j += (a->ntlmssp_hash[ind] + k2[ind%8]);
-> tc = a->ntlmssp_hash[ind];
-> a->ntlmssp_hash[ind] = a->ntlmssp_hash[j];
-> a->ntlmssp_hash[j] = tc;
-> }
-> a->ntlmssp_hash[256] = 0;
-> a->ntlmssp_hash[257] = 0;
-> }

Data is not encrypted here this is only a preparation of the RC4
table. The RC4 encryption routine is the function
"static void NTLMSSPcalc_ap( struct ntlmssp_auth_struct *a, unsigned char *data, int len)"
that uses the RC4 pre-created table a->ntlmssp_hash.

It is not clear to me if at this point this RC4 encryption is used to
encrypt the entire data or the AUTH structure only.....
From the other side (the server side) I reached the function
"api_ntlmssp_verify" in "srv_pipe_ntlmssp.c" that seems to be written by/for you...

-> if (l->auth_validated)
-> {
-> /************************************************************/
-> /****************** lkclXXXX - NTLMv1 ONLY! *****************/
-> /************************************************************/
-> uchar p24[24];
-> uchar j = 0;
-> int ind;
-> uchar password[16];
-> uchar k2[16];
-> int len;
-> ZERO_STRUCT(password);

I really have to figure out the contents of info3.padding.....
Can you confirm to me that these are the first 8 byte of the LM Hash
transmitted on the network ?????!!?!?!?!?!?
-> memcpy(password, info3.padding, 8);

Here there is another DES encryption/decryption of the lm_owf using
the password (8 bytes ?????) as key -> generating a 24 bytes key used
in the following RC4 expansion .....
-> NTLMSSPOWFencrypt(password, lm_owf, p24);

-> if (True)
-> {
-> len = 8;
-> memcpy(k2, p24, 5);
-> k2[5] = 0xe5;
-> k2[6] = 0x38;
-> k2[7] = 0xb0;
-> }
-> else
-> {
-> len = 16;
-> memcpy(k2, p24, 16);
-> }

Here the RC4 Table Initialization
-> for (ind = 0; ind < 256; ind++) {
-> a->ntlmssp_hash[ind] = (uchar) ind;
-> }

Here the RC4 Table Expansion
-> for (ind = 0; ind < 256; ind++)
-> {
-> uchar tc;
-> j += (a->ntlmssp_hash[ind] + k2[ind % len]);
-> tc = a->ntlmssp_hash[ind];
-> a->ntlmssp_hash[ind] = a->ntlmssp_hash[j];
-> a->ntlmssp_hash[j] = tc;
-> }
-> a->ntlmssp_hash[256] = 0;
-> a->ntlmssp_hash[257] = 0;
-> a->ntlmssp_seq_num = 0;
-> }

The RC4 encryption routine is done in another function:

"void NTLMSSPcalc_p(ntlmssp_auth_struct * a, uchar * data, int len)"

another time it is not clear what is the data to be encrypted,
decrypted.......

At this point (4.12 am) I think that I really need some debugging
informations...

I've modified the file "cliconnect.c" and "clientgen.c" in the way
that Samba can handle NTLMSSP packets but I really cannot make it work
with them.

I'm using the "rpclient", NTLMv2 disabled and encrypted password = yes...
The error code is "failed session setup" from the
/* first session negotiation stage */

How can I do to make Samba TNG working with NTLMSSP packets ????


I really appreciate any kind of help from you, I promise that I'll buy
ten copies of your book....

My goal is to check the correctness of a password sent on the network
using NTLMv1 and NTLMSSP packets (security blobs). An example of the
parameters grabbed from the network are:
(I'm on a Win2k workstation with a local security policy for LM
Authentication level set as "Send NTLM response only" and I'm
connecting to another Win2k workstation)

Username = Test;
Domain = TEST
Local Policy Setting = NTLMv1 only (NTLMSSP);
LM Hash = C0E61B6CA7808A030000000000000000;
NT Hash = 5D942D84DA6ECB92754A09CB4508BAD8;
Server Challange = C36EDAF998C401FA;
LM Client Challange = 0000000000000000;
NT Client Challange = D13D968B16C00063;

Using these parameters I want to check the correctness of the password
that is "test".

thanks in advance....
--
Best regards,


----- End forwarded message -----
--
----------------------------------------------------------
this message is private, confidential, and is intented for
the specified recipients only. if you received in error,
altered, deleted, modified, destroyed or interfered with
the contents of this message, in whole or in part, please
inform the sender (that's me), immediately.

if you, the recipient, reply to this message, and do not
then receive a response, please consider your reply to have
been lost or deliberately destroyed: i *always* acknowledge
personal email received. please therefore take appropriate
action and use appropriate protocols to ensure effective
communication.

thank you.
Osman Tufanogullari (Garanti Teknoloji)
2003-12-02 10:18:19 UTC
Permalink
Hi All,

Firstly, do you have any idea why winbindd gets all the users and groups from the trusted domains except its own domain?

Secondly, did you ever face with the winbindd killing itself suddenly because it cannot find the domain user ( teknoloji\OsmanTuf ) in its unix passwd database...? Teknoloji domain is the domain which samba Linux machine works and winbindd doesnt get users and groups of its own domain as i mentioned above? This is really strange...

Have any ideas ?

Thanks in advance...
-------------- next part --------------
HTML attachment scrubbed and removed
Reddy, Ashok (Indsys)
2003-12-02 10:18:20 UTC
Permalink
"THIS E-MAIL MESSAGE ALONG WITH ANY ATTACHMENTS IS INTENDED ONLY FOR THE
ADDRESSEE and may contain confidential and privileged information.
If the reader of this message is not the intended recipient,
you are notified that any dissemination, distribution or copy of this
communication is strictly Prohibited.
If you have received this message by error, please notify us
immediately, return the original mail to the sender and delete the
message from your system."
Reddy, Ashok (Indsys)
2003-12-02 10:18:20 UTC
Permalink
"THIS E-MAIL MESSAGE ALONG WITH ANY ATTACHMENTS IS INTENDED ONLY FOR THE
ADDRESSEE and may contain confidential and privileged information.
If the reader of this message is not the intended recipient,
you are notified that any dissemination, distribution or copy of this
communication is strictly Prohibited.
If you have received this message by error, please notify us
immediately, return the original mail to the sender and delete the
message from your system."
Reddy, Ashok (Indsys)
2003-12-02 10:18:20 UTC
Permalink
"THIS E-MAIL MESSAGE ALONG WITH ANY ATTACHMENTS IS INTENDED ONLY FOR THE
ADDRESSEE and may contain confidential and privileged information.
If the reader of this message is not the intended recipient,
you are notified that any dissemination, distribution or copy of this
communication is strictly Prohibited.
If you have received this message by error, please notify us
immediately, return the original mail to the sender and delete the
message from your system."
Andreas Moroder
2003-12-02 10:18:34 UTC
Permalink
Hello Terry,

did you create your two files from your client via
samba or did you create
them localy on the servers console or a server
application? It seems to me
that you used the second way because there is no way to
create this two
files via samba. Windows machines don\'t check the case
of a filename ( NT
and > mantain the case ) so both files are the same for
Windows.

-rw-rw-r-- 1 13301 csr 108681 Jun 20 12:37
File1.txt ==
file1.txt
-rw-rw-r-- 1 13301 csr 170180 Jun 20 12:32
FILE1.TXT ==
file1.txt

On a NT Server you could never create this two files
in the same directory.

Bye
Andreas


-----------------------------------------------------
This mail sent through IMP: http://web.horde.org/imp/
Terry Davis
2003-12-02 10:18:34 UTC
Permalink
I created them on the server, NOT via samba. But there has to be a way
for samba to recognize this and display the right contents to the user.
Post by Andreas Moroder
Hello Terry,
did you create your two files from your client via
samba or did you create
them localy on the servers console or a server
application? It seems to me
that you used the second way because there is no way to
create this two
files via samba. Windows machines don\'t check the case
of a filename ( NT
and > mantain the case ) so both files are the same for
Windows.
-rw-rw-r-- 1 13301 csr 108681 Jun 20 12:37
File1.txt ==
file1.txt
-rw-rw-r-- 1 13301 csr 170180 Jun 20 12:32
FILE1.TXT ==
file1.txt
On a NT Server you could never create this two files
in the same directory.
Bye
Andreas
-----------------------------------------------------
This mail sent through IMP: http://web.horde.org/imp/
Simo Sorce
2003-12-02 10:18:34 UTC
Permalink
Post by Terry Davis
I created them on the server, NOT via samba. But there has to be a way
for samba to recognize this and display the right contents to the user.
It is not that easy.
We may think of sending back the mangled name if these files are found,
but that would mean that every time a directory listing is retrieved, we
should lower case every file and check in the list if any file has a
duplicate, and if it is true substitute the duplicate with a mangled
name.

now try to do that in a directory with 10.000 files and not timeout ...

I may think of a special option, to do that, but I do no think we should
do that by default.

Simo.
Post by Terry Davis
Post by Andreas Moroder
Hello Terry,
did you create your two files from your client via
samba or did you create
them localy on the servers console or a server
application? It seems to me
that you used the second way because there is no way to
create this two
files via samba. Windows machines don\'t check the case
of a filename ( NT
and > mantain the case ) so both files are the same for
Windows.
-rw-rw-r-- 1 13301 csr 108681 Jun 20 12:37
File1.txt ==
file1.txt
-rw-rw-r-- 1 13301 csr 170180 Jun 20 12:32
FILE1.TXT ==
file1.txt
On a NT Server you could never create this two files
in the same directory.
Bye
Andreas
-----------------------------------------------------
This mail sent through IMP: http://web.horde.org/imp/
--
Simo Sorce
----------
Una scelta di liberta': Software Libero.
A choice of freedom: Free Software.
http://www.softwarelibero.it
Richard Sharpe
2003-12-02 10:18:34 UTC
Permalink
Post by Simo Sorce
Post by Terry Davis
I created them on the server, NOT via samba. But there has to be a way
for samba to recognize this and display the right contents to the user.
It is not that easy.
Indeed ... We need a case-independent file system :-)
Post by Simo Sorce
We may think of sending back the mangled name if these files are found,
but that would mean that every time a directory listing is retrieved, we
should lower case every file and check in the list if any file has a
duplicate, and if it is true substitute the duplicate with a mangled
name.
now try to do that in a directory with 10.000 files and not timeout ...
Now that is an interesting number. I am seeing all sorts of interesting
N^2 behaviour on a file system I am working with ATM up to about 6,000
files and after that, linear.

Regards
-----
Richard Sharpe, ***@ns.aus.com, ***@samba.org,
***@ethereal.com
Ulf Bertilsson
2003-12-02 10:18:35 UTC
Permalink
Post by Simo Sorce
I may think of a special option, to do that, but I do no
think we should do that by default.
I have learned that samba should report the files no mater sanity.
I had simular ideas to speed up things by i.e emulating explorer web
view thing.

Turning of "web view" speeds up things dramatic on my platform.

An dummy "desktop.ini" and some generic cached fileid to show
fancy icons would be nice, but brake stuff.

Then my os allow many strange filenames, how should that be dealt with ?

--
Ulf
Simo Sorce
2003-12-02 10:18:35 UTC
Permalink
Post by Ulf Bertilsson
An dummy "desktop.ini" and some generic cached fileid to show
fancy icons would be nice, but brake stuff.
I would not make that.
Post by Ulf Bertilsson
Then my os allow many strange filenames, how should that be dealt with ?
We check if the filename is OK (do not have invalid chracters) yet, if
so we mangle it, but this a O(n) operation.
--
Simo Sorce
----------
Una scelta di liberta': Software Libero.
A choice of freedom: Free Software.
http://www.softwarelibero.it
Ulf Bertilsson
2003-12-02 10:18:35 UTC
Permalink
Post by Simo Sorce
Post by Ulf Bertilsson
An dummy "desktop.ini" and some generic cached fileid to show
fancy icons would be nice, but brake stuff.
I would not make that.
I know, it don't make sence but the idea would provide great
preformance.
Like, my os don't multiuser filesystem (builtin that is)

Why should we waste IO to try emulate unix rights
when we could just give an mask ?

NT also do this crazy file IO, why not just feed it some generic stuff
to keep it happy.
My OS don't support half of it's operands anyway.

Not to mention the file examination explorer do.

Isn't the .icon stuff stured in the PX exe file resource ?

(Ages size I played with it)
Post by Simo Sorce
Post by Ulf Bertilsson
Then my os allow many strange filenames, how should that be
dealt with ?
We check if the filename is OK (do not have invalid chracters) yet, if
so we mangle it, but this a O(n) operation.
What would the "correct" way be here.
Bear in mind that there is more none POSIX platforms out there.

An basic open() on the file first for sanity check ?

--
Ulf
rajendran rajen
2003-12-02 10:18:54 UTC
Permalink
Hello,
Can any one help me on my samba 2.04,my samba is working fine on
my local lan that use 64.0.0.The problem is i cannot se my
samba server on the remote side which are using 68.0.0, 66.0.0, 69.0.0
and 65.0.0 but from this remote i can telnet to the HP server which is
using 64.0.0.100. I have attached my smb.conf file. Can any one
tell me where the problem. Please help me on this.
Thanks
rajen


_________________________________________________________________
Send and receive Hotmail on your mobile device: http://mobile.msn.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smb.conf
Type: application/octet-stream
Size: 8412 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20020729/c2cd5d7e/smb.obj
JOE PUJEH
2003-12-02 10:18:55 UTC
Permalink
REPLY TO: ***@rediffmail.com

FROM: MR JOE PUJEH
TELEPHONE: 00229-981587
FAX: 00229-338466
COUNTRY: (BENIN REPUBLIC)


I am MR JOE PUJEH from SIERRA LEONE, a Country in
WEST AFRICA. My father is MR MOMOH PUJEH, former
MINISTER of TRANSPORT and COMMUNICATIONS and one time
DEPUTY FINANCE MINISTER in Sierra Leone. My father and
mother were arrested by the government of my Country
and put in detention since 1st NOVEMBER, 2001.
My parents were accused of keeping large quantity of
DIAMONDS in the house, and also privately selling
large quantity of DIAMONDS abroad. You can verify
this from SIERRA LEONE EMBASSY in your country.

I escaped to a hide out in BENIN REPUBLIC, another
Country in West African with 2 boxes containing
about Forty EIGHT Million U.S. dollars (US$48000000).
I kept the boxes in a TRUST COMPANY in COTONOU,Capital
of BENIN REPUBLIC. For my safety and that of the boxes,
i did not let the company know that the boxes contain
money.I told them that the boxes contain documents.

I cannot move about freely now. I need Your help
urgently for both SAFE KEEPING and INVESTING of this
money in your country. You are one of the three email
contacts given to me by a Cyber Cafe' operator on my
request for a foreign contact. She did not tell me
your name or country of origin. Though I did not tell
her why I needed the contact of any foreigner.

Because of the urgent and confidential nature of this
business, you are advised to keep everything secret for
now. if you are interested in doing this business with me,
kindly reply immediately on my email Address for more
explanations. When replying, include your safe and private
telephone numbers for easy communications.
Kindly send your reply to:

***@rediffmail.com

Thanks for your anticipated co-operation.

Yours faithfully,
MR JOE PUJEH (For the family)
TELEPHONE: +229-981587
FAX: +229-338466
Ernst Cozijnsen
2003-12-02 10:18:56 UTC
Permalink
I tought open-source was a non profit thing?. hehehehe
REPLY TO: ***@rediffmail.com

FROM: MR JOE PUJEH
TELEPHONE: 00229-981587
FAX: 00229-338466
COUNTRY: (BENIN REPUBLIC)


I am MR JOE PUJEH from SIERRA LEONE, a Country in
WEST AFRICA. My father is MR MOMOH PUJEH, former
MINISTER of TRANSPORT and COMMUNICATIONS and one time
DEPUTY FINANCE MINISTER in Sierra Leone. My father and
mother were arrested by the government of my Country
and put in detention since 1st NOVEMBER, 2001.
My parents were accused of keeping large quantity of
DIAMONDS in the house, and also privately selling
large quantity of DIAMONDS abroad. You can verify
this from SIERRA LEONE EMBASSY in your country.

I escaped to a hide out in BENIN REPUBLIC, another
Country in West African with 2 boxes containing
about Forty EIGHT Million U.S. dollars (US$48000000).
I kept the boxes in a TRUST COMPANY in COTONOU,Capital
of BENIN REPUBLIC. For my safety and that of the boxes,
i did not let the company know that the boxes contain
money.I told them that the boxes contain documents.

I cannot move about freely now. I need Your help
urgently for both SAFE KEEPING and INVESTING of this
money in your country. You are one of the three email
contacts given to me by a Cyber Cafe' operator on my
request for a foreign contact. She did not tell me
your name or country of origin. Though I did not tell
her why I needed the contact of any foreigner.

Because of the urgent and confidential nature of this
business, you are advised to keep everything secret for
now. if you are interested in doing this business with me,
kindly reply immediately on my email Address for more
explanations. When replying, include your safe and private
telephone numbers for easy communications.
Kindly send your reply to:

***@rediffmail.com

Thanks for your anticipated co-operation.

Yours faithfully,
MR JOE PUJEH (For the family)
TELEPHONE: +229-981587
FAX: +229-338466

--
****************************************************************************
This message contains information that may be privileged or confidential and
is the property of the Cap Gemini Ernst & Young Group. It is only intended
for the person to whom it is addressed. If you are not the intended
recipient, you are not authorized to read, print, retain, copy disseminate,
distribute, or use this message or any part thereof. If you receive this
message in error, please notify the sender immediately and delete all copies
of this message.
****************************************************************************
John E. Malmberg
2003-12-02 10:18:56 UTC
Permalink
Post by Ernst Cozijnsen
I tought open-source was a non profit thing?. hehehehe
Please do not repost spam!

As funny as this scam may sound, this scam is run by organized crime,
and the some of the perpetrators are known to be murderers and worse.

This is known as a Nigerian 419 scam, and most countries have task
forces that want to be notified about these e-mails.

If the scammer receives a traceable e-mail, they will use that
information to steal the identity of the person. The money scam
mentioned in the spam is only a small part of the scam.

In addition to financial loss, you risk life and limb for you or your
family if you correspond with anyone associated with this scam.

-John
***@qsl.network
Personal Opinion Only
nOrh Loudspeaker
2003-12-02 10:19:07 UTC
Permalink
For more details, check out http://www.norh.com/norhtec/index.html.

For the past year, I have been working on ideas to improve computing. Most
computer companies continue to focus on making computers either less
expensive or more powerful. In the process, they tend to forget the user.
I have spent the past 20 years working in
the computer industry. Last year, I decided to take my experience and
build products that will change the way computers are used.
There are many applications for computers where the computer performs a
single task. This includes gateways, firewalls, routers, point of sale,
kiosks, facility management, reservation systems and so on. I continue to
see PCs used in stores as cash registers where
the computers still boot from a floppy. There are many applications where
a small, energy efficient, x86 (Pentium class) computer
could take the place of larger and more complicated systems. For
applications that are still MS DOS based, it would be easy to migrate
these solutions to solid state devices. These will boot faster and have
fewer problems.

I recently received a call from a company that installs highway signs.
They told me that the signs are controlled by PCs that are attached to
modems. The systems boot off of floppies. The computers hang frequently
because they generate too much heat in the signs.
The floppies fail frequently and require frequent service calls. Such an
application would be ideal for our Microservers. NorhTec has developed
the ideal replacement for dedicated PCs. NorhTec Microservers are fully
integrated, inexpensive, energy efficient and
highly reliable.

In addition to our Microservers, NorhTec has also developed what we
consider the ideal office and home desktop, the Panda PC. The Panda PC is
a small form factor computer that requires no fan for the CPU or the power
supply. The Panda PC is small, quiet and
energy efficient. The Panda PC is better integrated than virtually an
other PC available. While most computers use very inexpensive parts, the
Panda PC uses some of the finest components available. Instead of a
standard CD ROM that comes in most PCs, the
Panda PC includes a slimline DVD that can also record CDRs and CDRWs.
Because we can create CDROMs, we have taken out the useless floppy. Of
course slimline devices are more expensive. Of course the combination of a
DVD and CDRW is also more
expensive. We believe that the our choice makes the Panda PC a much better
desktop than. The Panda PC will offer a choice of Windows XP or a special
version of Linux. Both version will be preconfigured with useful open
source applications such as office
suites, browsers, viewers and multimedia players.



Our Linux offering will feature keystroke and mouse click compatibility to
Microsoft Windows. For example, you can share files by right clicking on
the file and selecting "share this file". You can adjust the screen
resolution the same way you do on a Microsoft
Windows desktops. The ICONs will look very familiar with MY COMPUTER and
MY NETWORK NEIGHBORHOOD making the environment very familar to Windows
users.

For customers who already have licenses for or willing to purchase
licenses for Microsoft Office, we can host these applications and other
popular Microsoft Windows applications on Linux. For a slightly extra fee,
we will install to authorized customers, Winword,
Outlook, Excel, Internet Explorer 5.5, Microsoft Media Player 6.4, Access,
and Power Point. We can also install Lotus Notes and several other
packages.

Recently, I read about a large chain that was selling PCs for $299.95.
This is the lowest price for a standard PC in the United States. This
configuration included 128 MB RAM and 10 GB disk. To upgrade to 256 MB RAM
and 20 GB disk, the price was $595.95.

This price included a full size CD ROM. A DVD player would be extra as
would a CDRW. The Panda PC will sell for $495.95 with 256 MB RAM, 20 GB
disk, and our DVD/CDRW combination. The Panda PC uses less power,
generates less heat and takes less
space than virtually any other fully configured desktop.
Additionally, the Panda PC is one of the first computers to operate either
AC or DC. Some smaller computers cheat by using an external power supply
(ala laptop). Our power supply is built into the case. The power supply
will switch between 12 and 24 volts DC and
120 and 240 AC. This is one of the first computers that is ideal to be
powered in a vehicle, battery or solar power.

It can cost $1,000 per desktop just to buy the windowing system and the
office suite. We will deliver a computer that is fully configured with
Linux and a fully functional office suite for the price of the hardware.
This will not be a "hacker style" system. The system will
be expertly configured so that it is one of the easiest to use systems you
have ever used. The Panda PC does not need a fan for normal operation.
However, we have put an 82 mm fan inside just in case. The fan is attached
to a circuit that measure the temperature
and will go on only if the temperature reaches a preset temperature. An 82
mm fan is much quieter than the smaller fans used on processors, video
cards and power supplies. Additionally, we have positioned the fan so that
even if the fan is activated, it will create
very little turbulence.

Our goal is to create the friendliest computer possible. NorhTec will
offer a variety of components to make networking easier than ever before.
We have selected networking strategies that make networking computers as
easy as possible. In most cases, you simply
connect the networking cable and boot the computer. We have preconfigured
microservers and Pandas to perform specific tasks such as firewall,
gateway, printer server, and desktop. I personally think we have developed
the best networking strategies for the
home and office. Our strategies include wired and wireless LANs.

While we are a couple of months away from delivering products, we would
like to invite you to consult with us before you upgrade those power
hungry, energy inefficient, aging computers in your office. I can show you
how to replace these with systems that are far
friendlier and much less expensive to operate.

Sincerely,

Michael C. Barnes
President
NorhTec Microservers
Dimiter Kehajov
2003-12-02 10:19:09 UTC
Permalink
Sorry for my misunderstanding I'm a novice in Linux and want to ask
something. Untill now I successfuly used RHL working as a PDC and everything
just working fine.

I'm trying to implement Red Hat Linux 7.3 system in Windows NT enviroment
with PDC and BDC's as a standalone server using samba. I want to use this
machine to provide file services for users.
I compiled and instaled samba 2.2.5 with winbind and pam modules,
successfully join a domain with smbpasswd -j DOMAINNAME -r PDC NAME -U
Administrator , and I can see users and groups from console with wbinfo -u
and wbinfo -g.
The samba server appears in Server manager, I can see server from network
neighbourhood and shares but when I try to configure permissions i receive
errors and can't give the correct permissions on selected shares.
Actually I can see domain users and groups. Default users on selected share
is smbroot and everyone. When I try to add someone else and choose apply I
receive error and can't accept the permisions.
Does anyone tell if that is possible to realize and what I'm doing wrong. I
just want to install RHL 7.3 server with samba as a standalone aplication
server and give permissions on shared resources for users and groups from NT
Domain controler. Is it possible or not?
Steven French
2003-12-02 10:19:12 UTC
Permalink
I'm searching docs about all the parameters ("WrLeh.B....")
for the several named pipes types : mailslot, lanman,
srvsvc and how it works.
This is "RAP" - also known as the LANMAN RPC protocol. It was used for
administering IBM Lan Server/Warp Server (i.e OS/2) and early versions of
NT although there are still a few critical places where Windows still
relies on RAP in preference to sending the same call over DCE/RPC (as most
others are). The X/Open SMB references describes some of the mechanism for
RAP and you should definately take a look at that. The SNIA Technical
Reference just lists the ordinals for the RAP calls, not the parameter
descriptor strings. Note that Paul Leach posted the parameter description
strings publically a few years ago. He also did a writeup on a few of the
simpler calls in ftp://ftp.microsoft.com/developr/drg/CIFS/cifsrap2.doc and
cifslog.doc

Also See samba/source/include/rap.h and the Samba "net" utility which may
be useful for understanding more.
I've checked the docs from Microsoft (CIFS drafts of 1997
and 2001) and there is not a lot of description of
parameters for the TRANS2_QUERY_FS_INFORMATION,
SMB_INFO_ALLOCATION, SMB_INFO_VOLUME,
SMB_QUERY_FS_VOLUME_INFO, SMB_QUERY_FS_SIZE_INFO and
SMB_QUERY_FS_DEVICE_INFO.
How this commands works and what there are doing.
There wasn't a Microsoft CIFS draft for 2001 (which doc are you talking
about) but the 1997 Microsoft draft missed a few pieces of information in
this area that was later filled in the SNIA CIFS Technical Reference. The
cifs vfs (cifspdu.h) includes defines for some of the useful device
attributes but not all of the volume attributes yet.

Steve French
Senior Software Engineer
Linux Technology Center - IBM Austin
phone: 512-838-2294
email: ***@us.ibm.com
A Kulu
2003-12-02 10:19:19 UTC
Permalink
Hi folks,
I have the following queries.
1. I was looking at w2K - w2k traces. The tree connect And X
always happens only for a validated user. This implies that
a user should have done a SS&X before t con X.
Does samba follow the same philosophy or is it an implementation
feature( ? :) ) of the w2k redirector ?
Can I have a connected tree and no user logged on ?

2. I have also observed that a tree disconnect always happens
before a logoff . What happens to any other trees that
have been mounted by that user ?
Is it that all the trees that have been mounted by the user
will be unmounted before the client actually sends a user
logoff ?
Or can other users continue to use the mounted trees even after
a user has logged off ?


Thanks and Regards,
Kulu.
--
__________________________________________________________
Sign-up for your own FREE Personalized E-mail at Mail.com
http://www.mail.com/?sr=signup
Dan Dumont
2003-12-02 10:19:25 UTC
Permalink
I ran this command today and was startled. Am I calling the ls command
in a bad way? Or could this be a bug?

It doesn't happen all the time. only on a few machines in our network.
But it happens all the time on those machines.

If you need any more info, I'll try to get it for you, but right now I'm
stumped.

Please respond with any info you might have. This version is 2.2.6
pre1 compiled on Freebsd using ports.



/usr/local/bin/smbclient "//VIPM22/MUSIC" -U Guest% -I 128.119.26.204
-d1 -c "ls Beatles*" -D "/"
beatles - 13 - yesterday.mp3 R 2033674 Fri Dec 1 20:58:36
2000
eatles - And I love her.mp3 1174414699 Wed Dec 31 18:59:59
1969
eatles - Oh Darling.mp3 2046836501 Wed Dec 31 18:59:59
1969
eatles - Revolver - 01 - Taxman.mp3 4110427861 Sun Sep 11
06:45:24 2005
eatles - Revolver - 02 - Eleanor Rigby.mp3 939532056 Wed Sep
10 07:03:06 2014
eatles - Revolver - 03 - I'm Only Sleeping.mp3 436218971 Thu
Sep 10 03:21:24 2015
eatles - Revolver - 04 - Love You Too.mp3 1879059509 Wed Dec
31 18:59:59 1969
eatles - Revolver - 05 - here, there and everywhere.mp3
436216731 Wed Dec 31 18:59:59 1969
eatles - Revolver - 06 - Yellow Submarine.mp3 2147493456 Wed
Dec 31 18:59:59 1969
eatles - Revolver - 07 - She Said She Said.mp3 9824 Sat
Jan 10 00:05:26 2037
eatles - Revolver - 08 - Good Day Sunshine.mp3 2365607733 Wed
Sep 10 17:45:28 2036
eatles - Revolver - 09 - And Your Bird Can Sing.mp3 2835357111
Wed Dec 31 18:59:59 1969
eatles - Revolver - 10 For No One.mp3 3758103957 Tue Jan 11
04:05:28 2033
eatles - Revolver - 11 - Doctor Robert.mp3 8552 Wed Dec 31
18:59:59 1969
eatles - Revolver - 12 - I Want To Tell You.mp3 3019910590 Wed
Dec 31 18:59:59 1969

-------------- next part --------------
HTML attachment scrubbed and removed
James Bowes
2003-12-02 10:19:44 UTC
Permalink
Skipped content of type multipart/alternative-------------- next part --------------
A non-text attachment was scrubbed...
Name: James Bowes (***@xisit.net).vcf
Type: text/x-vcard
Size: 431 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20020926/f5379c04/JamesBowesjamesxisit.net.vcf
Jelmer Vernooij
2003-12-02 10:19:44 UTC
Permalink
I am not a developer but I'd like to help with testing if needed. The
roadmap indicates some areas of interest for me personally and if you
could use the help.
Trust relationships and the migration script would be some of the areas
where I could help.
Let me know.
Good bug reports are always welcome; samba3.0alpha20 will be released
soon - and it needs testing... :-)

Jelmer
--
Jelmer Vernooij <***@samba.org>
Pending (unfinished) patches http://samba.org/~jelmer/diffs.php
Rafal Szczesniak
2003-12-02 10:19:45 UTC
Permalink
Hi.
I am not a developer but I'd like to help with testing if needed. The
roadmap indicates some areas of interest for me personally and if you
could use the help.
Trust relationships and the migration script would be some of the areas
where I could help.
If you're able to test some parts of samba trusted domains capability,
then it's good to know. This area may need a lots of testing soon.
--
cheers,
+------------------------------------------------------------+
|Rafal 'Mimir' Szczesniak <***@diament.ists.pwr.wroc.pl> |
|*BSD, GNU/Linux and Samba /
|__________________________________________________________/
Stefan (metze) Metzmacher
2003-12-02 10:19:47 UTC
Permalink
Hi Andrew,

I've updated my sam_ads module can you merge the changes to HEAD?



metze
-----------------------------------------------------------------------------
Stefan "metze" Metzmacher <***@metzemix.de>
Andrew Bartlett
2003-12-02 10:19:47 UTC
Permalink
Post by Stefan (metze) Metzmacher
Hi Andrew,
I've updated my sam_ads module can you merge the changes to HEAD?
Done.

Kai: I'll take your sam_passdb stuff in as soon as you like - it's
easier to track if we keep it all in CVS.

(Yes, the bar on 'must be fully functional' is lower while the SAM is
being developed - but once we start hooking into the rest of Samba I'll
get very strict, on both new and existing code...)

Andrew Bartlett
--
Andrew Bartlett ***@pcug.org.au
Manager, Authentication Subsystems, Samba Team ***@samba.org
Student Network Administrator, Hawker College ***@hawkerc.net
http://samba.org http://build.samba.org http://hawkerc.net
In Labore Fructus
2003-12-02 10:19:55 UTC
Permalink
Hello,

I am hoping someone can help me....

I am trying to configure my samba...and the problem is the following:

When I use nmblookup with -B option and Broadcast address it is
impossible to find my samba server (named prova) that is:

# nmblookup -B 10.254.14.127 prova
querying prova on 10.254.14.127
name_query failed to find name prova

If I do the same lookin up to another machine different from my samba
server, then it is ok:

# nmblookup -B 10.254.14.127 my_win_client
querying my_win_client on 10.254.14.127
10.254.14.94 my_win_client<00>

Would some body help me ????
Gerald Carter
2003-12-02 10:19:56 UTC
Permalink
Please send all general use, nistallation, & configuration questions to
***@samba.org. This list is for discussions regarding Samba
development. Thanks.




cheers, jerry
Post by Tim
Hello,
I am hoping someone can help me....
When I use nmblookup with -B option and Broadcast address it is
# nmblookup -B 10.254.14.127 prova
querying prova on 10.254.14.127
name_query failed to find name prova
If I do the same lookin up to another machine different from my samba
# nmblookup -B 10.254.14.127 my_win_client
querying my_win_client on 10.254.14.127
10.254.14.94 my_win_client<00>
Would some body help me ????
--
---------------------------------------------------------------------
Hewlett-Packard http://www.hp.com
SAMBA Team http://www.samba.org
-- http://www.plainjoe.org
"SAMS Teach Yourself Samba in 24 Hours" 2ed. ISBN 0-672-32269-2
--"I never saved anything for the swim back." Ethan Hawk in Gattaca--
Josh Durham
2003-12-02 10:19:56 UTC
Permalink
Jerry and the list,

I've got the final patch for doing the flat file UID lookup ready.

It's a solution, that works for me in the short term, but I'd like to
work on something that is more useful. Right now my patch just uses
regular UNIX passwd and group files to do a UID/GID lookup before it
tries to dynamically allocate.

Basically, I was wondering what was meant by "hook for utilizing a
centralized winbindd id map database". Who's idea that was, and
perhaps get some ideas on what people want regarding this.

Also, I finally did do testing with the samba-3.0alpha20 patch. It
worked fine, but i just checked it with an ADS setup. (Which worked
very well, I was impressed.)

These patches are completely different than the ones before. I
processed the group file incorrectly (I tried using fgetpwent instead
of fgetgrent). I tried to make the patches as non-invasive as
possible; it mostly added code, and didn't change code. I also redid
the error checking to use a goto, it made alot more sense and is -much-
more readable.

Any comments are welcome. This samba-2.2.5 patch has been in use on a
production system for about 4-5 days now and it works as intended.

ps. Mike, I havn't had a chance to look at your stuff yet.. I probably
should. :)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: samba2.2.5-winbind-flat-files.patch
Type: application/octet-stream
Size: 8793 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20021009/cca96830/samba2.2.5-winbind-flat-files.obj
-------------- next part --------------
A non-text attachment was scrubbed...
Name: samba3.0-winbind-flat-files.patch
Type: application/octet-stream
Size: 8874 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20021009/cca96830/samba3.0-winbind-flat-files.obj
Steven French
2003-12-02 10:20:30 UTC
Permalink
Subject: Running smb without nmb? (Linux Suse 8.1 feature)
I recently upgraded my Linux distro to SuSE 8.1 which
came w/samba 2.2.5.
A feature of the upgrade was that it 'split' the startup
script for samba from 1 script for _smb_ & _nmb_ to 2 scripts.
Ok -- enough of my whining. Question is this: is there any good reason
for splitting the two or making so one is runnable w/o the other?
That is cool. I thought that I was the only one who prefers not to run
nmbd :)

On my test systems I don't want to deal with WINS related traffic, and as a
general practice prefer to limit the network services running on my servers
to the minimum. Although that means the server will not be sending
browser announcements which might make it harder for other servers to find
mine, if you are configured for DFS (or perhaps with 3.0 servers publish
your servers shares in ActiveDirectory) that may not be a big restriction.
The Linux CIFS VFS is passed IP addresses and does not need/use Netbios
names anyway so the RFC1001 support that nmbd helps with is not necessary.
It is also a lot easier to only have to (re)start one daemon (smbd) when
you are testing different versions of the server.

Steve French
Senior Software Engineer
Linux Technology Center - IBM Austin
phone: 512-838-2294
email: ***@us.ibm.com
Christopher R. Hertel
2003-12-02 10:20:31 UTC
Permalink
I've been known to do things the other way, with nmbd running on a system
that isn't running smbd. I set nmbd to act as a WINS server and Domain
Master Browser to handle the namespace issues, but I don't offer any
file services.

Chris -)-----
Post by Steven French
Subject: Running smb without nmb? (Linux Suse 8.1 feature)
I recently upgraded my Linux distro to SuSE 8.1 which
came w/samba 2.2.5.
A feature of the upgrade was that it 'split' the startup
script for samba from 1 script for _smb_ & _nmb_ to 2 scripts.
Ok -- enough of my whining. Question is this: is there any good reason
for splitting the two or making so one is runnable w/o the other?
That is cool. I thought that I was the only one who prefers not to run
nmbd :)
On my test systems I don't want to deal with WINS related traffic, and as a
general practice prefer to limit the network services running on my servers
to the minimum. Although that means the server will not be sending
browser announcements which might make it harder for other servers to find
mine, if you are configured for DFS (or perhaps with 3.0 servers publish
your servers shares in ActiveDirectory) that may not be a big restriction.
The Linux CIFS VFS is passed IP addresses and does not need/use Netbios
names anyway so the RFC1001 support that nmbd helps with is not necessary.
It is also a lot easier to only have to (re)start one daemon (smbd) when
you are testing different versions of the server.
Steve French
Senior Software Engineer
Linux Technology Center - IBM Austin
phone: 512-838-2294
--
Samba Team -- http://www.samba.org/ -)----- Christopher R. Hertel
jCIFS Team -- http://jcifs.samba.org/ -)----- ubiqx development, uninq.
ubiqx Team -- http://www.ubiqx.org/ -)----- ***@ubiqx.mn.org
OnLineBook -- http://ubiqx.org/cifs/ -)----- ***@ubiqx.org
Andrew Bartlett
2003-12-02 10:20:48 UTC
Permalink
Post by Christopher R. Hertel
I've been known to do things the other way, with nmbd running on a system
that isn't running smbd. I set nmbd to act as a WINS server and Domain
Master Browser to handle the namespace issues, but I don't offer any
file services.
Doesn't that break browse sync?

Andrew Bartlett
--
Andrew Bartlett ***@pcug.org.au
Manager, Authentication Subsystems, Samba Team ***@samba.org
Student Network Administrator, Hawker College ***@hawkerc.net
http://samba.org http://build.samba.org http://hawkerc.net
Christopher R. Hertel
2003-12-02 10:20:49 UTC
Permalink
Post by Andrew Bartlett
Post by Christopher R. Hertel
I've been known to do things the other way, with nmbd running on a system
that isn't running smbd. I set nmbd to act as a WINS server and Domain
Master Browser to handle the namespace issues, but I don't offer any
file services.
Doesn't that break browse sync?
It might. I'm still digging into the inner workings of browse sync. I've
heard (on IRC the other day) that W/9x browse sync doesn't work reliably
anyway. I need to do a lot more digging. Unearthing things that others
already know and have moved beyond.

Anyway, setting up without smbd works okay if you're just doing NBNS
(WINS). I need to verify the DMB claim.

Thanks for checking.

Chris -)-----
Jay Ts
2003-12-02 10:20:35 UTC
Permalink
Post by Steven French
Subject: Running smb without nmb? (Linux Suse 8.1 feature)
Ok -- enough of my whining. Question is this: is there any good reason
for splitting the two or making so one is runnable w/o the other?
That is cool. I thought that I was the only one who prefers not to run
nmbd :)
That's because the rest of us didn't even know it would work!
Steve, can you please clarify?

You are obviously running without NBNS (NetBIOS Name Service = WINS),
and browsing protocol, so your system can't ever be chosen as the
master browser, or act as a backup browser.

Do you have another system on the net acting as a WINS server? And
a system running as master browser? I assume the system you are
talking about is one of many SMB servers on your network, and you
find that that particular one doesn't need to run nmbd.
Post by Steven French
On my test systems I don't want to deal with WINS related traffic, and as a
general practice prefer to limit the network services running on my servers
to the minimum.
Although that means the server will not be sending
browser announcements which might make it harder for other servers to find
mine, if you are configured for DFS (or perhaps with 3.0 servers publish
your servers shares in ActiveDirectory) that may not be a big restriction.
You mean, your nmbd-free system has its shares included in a Dfs tree
hosted by another server, right? If you are suggesting that a general-
purpose Samba server can be effectively run without nmbd, I'd like to
hear more about it.
Post by Steven French
The Linux CIFS VFS is passed IP addresses and does not need/use Netbios
names anyway so the RFC1001 support that nmbd helps with is not necessary.
Er, is that all you're using your test systems for?

Jay Ts
Christopher R. Hertel
2003-12-02 10:20:35 UTC
Permalink
First, some terminology...

In the RFCs, the term NBNS refers specifically to the NetBIOS Name Server,
and not the service as a whole. The service is called the NetBIOS Name
Service and isn't abbreviated. Yes, it's quirky. The reason I bother
being pedantic is that there are situations in which confusing the server
with the service has messed me up.

The term WINS referrs to Microsoft's implementation of the NetBIOS Name
Service. It is often used, in Microsoft documentation, to mean the
service as a whole rather than just the name server. Urg. It gets very
confusing trying to keep it straight.

Anyway, on to the main question...

What nmbd does, essentially, is create and manage the virtual NetBIOS
network over TCP transport. That's the purpose behind the RFCs
(RFC1001/1002). They define a means for overlaying NetBIOS networking on
TCP/IP. NetBIOS has also been implemented on top of at least a half-dozen
other protocols. In addition to the Name Service, the RFCs define a
Datagram Service (that was never fully implemented by Microsoft) and a
Session Service. The Browse Service was later added by IBM and Microsoft,
and then updated by Microsoft.

The Name Service maps NetBIOS addresses to IP addresses, so you only need
it if you are using NetBIOS names to locate and connect with servers.

The Datagram Service is broken, and isn't used for filesharing services.

The Browse Service is only ever used for collecting and distributing the
lists of servers.

So, if you know the DNS name or IP address of the destination server *and*
if you can figure out or bypass the need for a valid NetBIOS name in the
Session Service Session Request... then you don't need nmbd at all.

Samba makes it easy to bypass the need for a valid NetBIOS name in the
Session Request... Samba accepts anything in there. Windows systems tend
to be more particular, but newer versions of Windows (NT4, W2K, and
probably W/XP) all accept the generic name "*SMBSERVER".

Finally, if SMB is running over naked TCP transport on port 445, you don't
need any of the RFC stuff at all.

Of course, all of this breaks the model set up in the RFCs, so you need to
know what you are doing if you go this route. Don't expect good behavior
from your Network Neighborhood, and don't expect to be able to contact a
server using its NetBIOS name.

Otherwise, yeah... nmbd is optional.

Chris -)-----
Post by Jay Ts
Post by Steven French
Subject: Running smb without nmb? (Linux Suse 8.1 feature)
Ok -- enough of my whining. Question is this: is there any good reason
for splitting the two or making so one is runnable w/o the other?
That is cool. I thought that I was the only one who prefers not to run
nmbd :)
That's because the rest of us didn't even know it would work!
Steve, can you please clarify?
You are obviously running without NBNS (NetBIOS Name Service = WINS),
and browsing protocol, so your system can't ever be chosen as the
master browser, or act as a backup browser.
Do you have another system on the net acting as a WINS server? And
a system running as master browser? I assume the system you are
talking about is one of many SMB servers on your network, and you
find that that particular one doesn't need to run nmbd.
Post by Steven French
On my test systems I don't want to deal with WINS related traffic, and as a
general practice prefer to limit the network services running on my servers
to the minimum.
Although that means the server will not be sending
browser announcements which might make it harder for other servers to find
mine, if you are configured for DFS (or perhaps with 3.0 servers publish
your servers shares in ActiveDirectory) that may not be a big restriction.
You mean, your nmbd-free system has its shares included in a Dfs tree
hosted by another server, right? If you are suggesting that a general-
purpose Samba server can be effectively run without nmbd, I'd like to
hear more about it.
Post by Steven French
The Linux CIFS VFS is passed IP addresses and does not need/use Netbios
names anyway so the RFC1001 support that nmbd helps with is not necessary.
Er, is that all you're using your test systems for?
Jay Ts
--
Samba Team -- http://www.samba.org/ -)----- Christopher R. Hertel
jCIFS Team -- http://jcifs.samba.org/ -)----- ubiqx development, uninq.
ubiqx Team -- http://www.ubiqx.org/ -)----- ***@ubiqx.mn.org
OnLineBook -- http://ubiqx.org/cifs/ -)----- ***@ubiqx.org
樱鬼花道
2003-12-02 10:26:15 UTC
Permalink
ÅóÓÑÄãºÃ£º

ÏÈ×£Ä㣺ÑòÄêÀŽ©Ñó×°£¬¿ªÑó³µ£¬ÅÝÑó怣¬œ»ÑóÔË£¬¿ªÑó»ç£¬·¢Ñó²Æ£¬ÐÄÀïůÑóÑó£¬Á³ÉÏϲÑóÑó£¬ÊÂʵÃÒâÑóÑó£¡


Ç×°®µÄÅóÓÑ£¬ÎÒÏëÎÊÄú£¬80Ôª¿ÉÒÔ×öʲΣ¿ÂòÒ»ÕÅÕý°æCD£¿ÂòŒþÆÕÍš¿îÊœµÄÒ·þ£¿³ÔÒ»¶Ù¿ÏµÂ»ù£¿»¹ÊÇ¡£¡£¡££¿ÄãÓÐûÓÐÏë¹ýŒžÊ®ÔªŸÍ¿ÉÒÔµ±Àϰ壿
ÈÃÎÒžæËßÄú°É£¬ŒÓÈëœðÈÚÉÌÎñÐÅÏ¢Íø£¬ÄúŸÍ¿ÉÒÔÖÕÉú×öÀÏ°å¡£Ò»µ©³ÉΪÕýÊœ»áÔ±ºó£¬ÄúŸÍ¿ÉÒÔÓµÓÐÒ»žöÏֳɵÄÍøÕŸÀ­£¬Äú»¹¿ÉÒÔÉêÇëžöÈËÂÛ̳£»»áÔ±ÇøÓО÷ÀàʵÓ÷þÎñ£¬È磺ÔÚÏßµçÓ°¡¢ÃÀÅ®ÌùÍŒ¡¢ÐÅÏ¢·¢²Œ¡¢Í¬Ê±»¹»ñµÃžü¶àµÄÍø׬֪ʶºÍŸ­Ñ飬Õõµœžü¶àµÄÇ®£¡

œðÈÚÉÌÎñŸÍÏóÒ»žöÍÚŸòœð¿óµÄ³úÍ·£¬¶ø»¥Á¬ÍøŸÍÊÇÕâ×ùœð¿ó¡£µ±Ä㻚ÁË80Ôª£¬ÂòÁËÕâ°Ñ³úÍ·£¬Äã²»µ«µÃµœÁËÎÞÊýµÄÓÐÓÃÐÅÏ¢¡£žü¿É¹óµÄÊÇÄ㻹µÃµœÁËÍÚŸòœð¿óµÄÌõŒþ¡£œð¿óŸÍÔÚÄãÃæÇ°£¬Èç¹ûÄãŬÁŠÁË£¬ÄãµÃµœµÄœ«ÊÇÒ»žùžùœðÌõ£¬Èç¹ûÄãŸÍŽË·ÅÆú£¬ÒÔΪœð¿óŸÍÊÇœðÌõ£¬ÄÇÃŽÄãµÄµœµÄÖ»ÄÜÊÇһЩʵÓÃÐÅÏ¢¡£ËäȻҲÊÇÊÕ»ñ²»ÉÙ£¬¿ÉÊǺÍŬÁŠµÄÈ˱ÈÆðÀŽ£¬±ðÈ˵õœµÄÊÇÎ÷¹Ï£¬ÄãµÃµœµÄÖ»ÊÇÖ¥Âé¶øÒÑ¡£×¬²»×¬Ç®£¬×îÖÕ»¹ÊÇÐèÒªÄãµÄŬÁŠºÍŒá³Ö¡£Å¬ÁŠÁË£¬Œá³ÖÁË£¬Ã»ÓÐÒ»žöÈË»á¿ÕÊÖ¶ø¹éµÄ¡£³ä·Ö·¢»ÓÄúµÄ²ÅÄÜ£¡·²³ÉΪœðÈÚÉÌÎñÕýÊœ»áÔ±Õߣ¬ËÍŒÛÖµ380ÔªµÄÒÚ»¢ÓÊŒþȺ·¢ÏµÁÐÈíŒþÒÔŒ°ÆäËüÓйØ׬Ǯ·¢Õ¹ÈíŒþ£¡ 80ÔªŸÍÈÃÄúÖÕÉúÊÜÒ棬Äú»¹ÓÌԥʲÎÄØ£¿žÏ¿ìŒÓÈëÎÒÃÇ°É£¡

œðÈÚÉÌÎñµÄÌصãÓУº

£±¡¢ÎÒÃÇʹÓõĿՌä·þÎñÆ÷ËٶȌ«¿ì£¬¿ÕŒä·þÎñÆ÷Ö»Žæ·ÅœðÈÚÉÌÎñϵͳ£¬¿É¿¿ÐÔžß¡£

£²¡¢ÎÒÃǵÄϵͳÊÇʹÓÃPHP+MySQL³ÌÐò£¬Ïà±ÈÓÚÆäËüASP³ÌÐòµÄMLM׬ǮÍøÕŸ£¬ÏµÍ³ŸßÓО߶ȵݲȫ£¬Óû§×ÊÁϱ£ÃÜ£¬Óû§¹ÜÀí²Ù×÷·œ±ã£¬¹ŠÄÜÇ¿Žó¡£ÎÒÃǵĻáÔ±ÇøÊÇÏ൱·áž»µÄ£¬°üÀš

¡¡¡¡1¡¢»áÔ±¿ÉÒÔ×ÔÒåÊ×Ò³µÄ¡°ÕŸ³€ÉÌÎñ¡±ÒÔ±íŽïÄãµÄžöÐÔ»¯£¡
¡¡¡¡2¡¢»áÔ±¿ÉÒÔ×ÔÒåÊ×Ò³µÄ¡°88*31µÄlogoÍŒ±ê¡±œøÒ»²œÂú×ãÄãžöÐÔ»¯µÄÒªÇó¡£
¡¡¡¡3¡¢»áÔ±¿ÉÒÔ×ÔÒåÊ×Ò³µÄ¡°468*60µÄ¹ãžæ͌ʟ¡±¿ÉÒÔÈÃŒÓÉÏž÷ÖÖÍøÉÏ׬Ǯ¹ãžæÌõ¡£
¡¡¡¡4¡¢»áÔ±¿ÉÒÔ×ÔÒåÊ×ҳϷœµÄ¡°£¶žölogoÓÑÇéÁŽœÓ¡±»áÔ±ÍøÕŸŸÍÊÇÄã×ÔŒºµÄÍøÕŸÒ»Ñù¡£
¡¡¡¡5¡¢»áÔ±¿ÉÒÔ×ÔÒåÊ×Ò³µ×²¿µÄ¡°¹ãžæÇø¡±¿ÉÒÔÈÃÄãŒÓÈëÖÃһЩ¹ãžæÁŽŽúÂ룬ÒÔ±ãÄãÌážß·ÃÎÊÁ¿¡£
¡¡¡¡6¡¢»áÔ±ÇøÓО÷ÀàʵÓ÷þÎñ£¬È磺ÔÚÏßµçÓ°¡¢ÃÀÅ®ÌùÍŒ¡¢ÐÅÏ¢·¢²Œ¡¢Ÿ«Æ·Àà·¢Õ¹ÏÂÏßÈíŒþµÈµÈ¡£
¡¡¡¡7¡¢»áÔ±ÏÂÏß¹ÜÀíÊÇŒ«Îª·œ±ã£¬ÎÒÃÇÉèÓÐÏÂÏßµÄËÑË÷ÒýÇ棬ÎÞÂÛÄãÏÂÏßÓжàÉÙ£¬Òª²éÕÒ»áԱʱ£¬Ö»ÒªÊäÈëËüµÄÓû§Ãû£¬ÂíÉÏ°ïÄãÕÒµœ»áÔ±£¬·œ±ãÄã¶Ô»áÔ±Œ€»î¡£
¡¡¡¡8¡¢ÁíÍ⣬ÎÒÃÇÊÇΪ»áÔ±Ìṩ£²žö»áÔ±ÍøÕŸµÄ£¬ÆäÖеڶþžö»áÔ±ÍøÕŸ¿ÉÒÔÖ§³Ö»áÔ±ÔÚ·¢Õ¹œðÈÚÉÌÎñµÄÏÂÏßͬʱ£¬»¹¿ÉÒÔ·¢Õ¹ÊôÓÚÄã×ÔŒºµÄ¹úÍâÃâ·Ñ׬ǮÏÂÏß¡£

£³¡¢Ä¿Ç°ºÜ¶àMLM¿ªÊŒµÄʱºòŸÍÊÇÏÈÃâ·Ñ¿ªÍšÒ»Žó¶ÑÈËŒÓÈ룬ÄãÃÇÊÔÏëһϣ¬ÄãŒÓÈëµÄÍøÕŸ£¬ÒÔÇ°ÁíÈËÊÇÃâ·ÑŒÓÈ룬¶øÄãÈŽÒª×ÔŒºž¶Ç®£¬ÄãÔžÒâÂ𣿶øÇÒÄÄЩÒÑŸ­ÊÔ¹ýÃâ·Ñ¿ªÍšµÄMLMÍøÕŸ£¬ÈÕºóœéÉܱðÈËŒÓÈ붌»ážÐµœÏ൱À§ÄÑ¡£¡¡¡¡
ËùÒÔ£¬œðÈÚÉÌÎñÊÇŸÜŸøÒ»ÇÐÃâ·Ñ¿ªÍš»î¶¯£¬ÎÒÃÇûÓÐΪÈκÎÁÙʱ»áÔ±¿ªÃâ·Ñ¿ªÍš¹ýÕ˺ţ¬¶øÄ㞶³ö£ž£°ÔªÊÇŸø¶ÔÊÇÓÐŒÛÖµµÄ£¬ÒòΪÄ㞶¿îºó£¬ÄãµÄÉÏÏß»á¶ÔÄ㞺Ôð£¬Ëû»á°Ñ×ÔŒº·¢Õ¹µÄŸ­Ñ鶌žæËßÄã¡£ËùÒÔ£ž£°ÔªÈ¥Ñ§Ï°Ò»žöÖž»·œ·š£¬ÕâÊÇŸø¶Ô³¬ÖµµÄ¡£

£Ž¡¢ÎÒÃÇÀíÏëµÄ¹¹ËŒ£º¶Ô»áÔ±ÃÇÌṩ£²žö»áÔ±ÐûŽ«ÍøÕŸ£¬Ò»žöÊÇŽ¿MLMÓªÏú׬ǮÍøÕŸ£¬ÕâžöÖ÷ÒªÊÇÃæÏòÒ»°ãÕýÊœ»áÔ±·¢Õ¹ÏÂÏßʹÓõġ£¡¡¡¡
ÁíÒ»žöÍøÕŸÊÇÖ§³ÖÕýÊœ»áÔ±ÔÚ·¢Õ¹œðÈÚÉÌÎñÏÂÏßµÄͬʱ¿ÉÒÔ·¢Õ¹×ÔŒº×¢²á¹ýµÄ¹úÍâÃâ·Ñ׬Ǯ¹«ËŸÏÂÏß¡£Ò»ŸÙË«µÃ¡£ÕâÖ÷ÒªÊÇÃæÏòךҵÍø׬µÄ»áԱʹÓõģ¬ÒòΪÏÖÔںܶàžãÍø׬µÄÈ˶ŒÏëÓµÓÐÒ»žö׬ǮÍøÕŸ£¬ÓÃÓÚ·¢Õ¹ÏÂÏߣ¬ÏÖÔÚÎÒÃÇÒÑŸ­°ïÄã×öµœÁË¡£ÄãÖ»ÒªŒÓÈëœðÈÚÉÌÎñ³ÉΪÕýÊœ»áÔ±£¬ÄãŸÍ¿ÉÒÔ»ñµÃÕâÁœžöÊôÓÚÄã×ÔŒºµÄךҵ׬ǮÍøÕŸÁË¡£



<b>©çŒÓÈëœðÈÚÉÌÎñ©ç </b> ^_*
ŠžÇ°ÍŸÊǹâÃ÷µÄ£¬ \_\/ .-==/~\
ŠžÇ®ÍŸÊÇ¿ÉŒûµÄ£¬ ___/_,__,_ __ ____ ____ __)/ /{~}}
ŠžŸ­ÑéÊǶà¶àµÄ£¬ ---,---,------------------,\'-' {{~}
ŠžÊÜÒæÊÇŽóŽóµÄ£¬ '-==\}/
ŠžÍ¬Ê±£¬ŽóŒÒ»¹Òª¿ì¿ìµÄ£¬Óʻ㡢µç»ã¡¢Ãâ»ã£šÓÉÓÚ×Êœð²»×㣬±Ÿ¹ŠÄÜÎŽÄÜÍƳö£¬Ð»Ð»£©žøÉÏÏߣ¬
¡©ÓÐÎÊÌâÕÒÎÒ£¬ @_@
¡©ÓÐÀ§ÄÑÕÒÎÒ£¬
¡©ÓÐÏûÏ¢ºôÎÒ£¬ ^v^
¡©ÓÐÐÄÊÂMÎÒ£¬ *u_u*
ŠÎÏëÒªÈíŒþµÄÕÒÎÒ£¬-=>
ŠÎÏëÒªµçÓ°µÄÕÒÎÒ£¬-=>
ŠÎÏëÒª¹¥»÷µÄÕÒÎÒ£¬-=>
ŠÎÏëÒªÆÆœâµÄÕÒÎÒ£¬-=> |¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª |
ŠÎÏëҪ͌ƬµÄÕÒÎÒ£¬-=> | žñÑÔ£ºÓÐÀ§ÄÑÒª°ï£¬Ã»ÓÐÀ§ÄÑÖÆÔìÀ§ÄÑÒ²Òª°ï£¡|
ŠÎÏëҪС˵µÄÕÒÎÒ£¬-=> |¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª¡ª |
ŠÎÏëÒªÍøÖ·µÄÕÒÎÒ£¬-=>
ŠÎÏëÒªËزĵÄÕÒÎÒ£¬-=>
ŠÎÏëÒªœÌ²ÄµÄÕÒÎÒ£¬-=>


×îÖØÒªµÄÊÇ£¬ÏëҪǮµÄÕÒÎÒ£¬²»ÏëžøÇ®µÄ±ðÀíÎÒ:-<£¬ÒòΪֻÓО¶³ö²Å»áÓлرš£¡£¡£¡

ÍÆŒö£ºÕÒһλÓÐʵÁŠµÄÉÏŒ¶ŽúÀí£¬ÓëÕÒһλÏͻ۵ÄÀÏÆÅÒ»ÑùÖØÒª£¡

Ô­°æ»áÔ±ÐûŽ«ÍøÕŸ:

http://yyp8998.k666.com

µÚ¶þ°æÐûŽ«ÍøÕŸ:

http://jrsw.k666.com

œðÈÚÉÌÎñµÄ×ÚÖŒÊÇ£º»áÔ±µÄÀûÒæžßÓÚÒ»ÇС£œðÈÚÉÌÎñµÄ±£Ö€ÊÇ£ºÄãÔÚÕâÀ³öŸÍ±ØÓÐÊÕ»ñ¡£



¡ïšTšTšTšTšTšT €ä €ä ×£ÄúÑòÄê¿ì˜· €ä €äšTšTšTšTšTšTšT¡ï
šU Ñò šq¡îšs ÓH°®µÄ ºÃÅóÓÑ št¡îšr Äê šU
šU šq¡îšs×£ÄúÔÚеÄÒ»ÄêÀïؔԎ°lµÃÏñ·ÊÑò št¡îšr šU
Ñòšq¡îšs ÉíówÊݵÄÏóÍÃ×Ó ÛÇéÃÀµÃÏñÃÛ·ä ºÃß\ št¡îšrµÃ
Ñòšt¡îšr ¶àµÃÏñÑòë ʘIÕôÕô ÔœïwÔœžßÏñŽóÅô šq¡îšsÒâ
šU št¡îšr http://jrsw.k666.com šq¡îšs šU
¡ïšTšTšTšTšTšT €ä €ä ×£ÄúÑòÄê¿ì˜· €ä €äšTšTšTšTšTšTšT¡ï


ÈçÒª»ØÐÅÇë»Ø£º ***@sohu.com ·ñÔòÎÒœ«ÊÕ²»µœÄãµÄÀŽÐÅ£¬Ð»Ð»£¡£º£©
ÁªÏµQQ 147546479

Èç¹û²»ÏëÔÙÊÕµœŽËÀàµÄÐÅ£¬ÇëŒÓÎÒQQ˵Ã÷£¬Ð»Ð»£¡£º£©

$ ˆJšŽœðÈÚÉÌÎñÐÅÏ¢ÍøÂ皍ˆJ $
ˆJšŽÓ£¹í»šµÀšˆJ
ˆJšŽœðÈÚÍøÐÅÏ¢ÍøÂçÂÛ̳šˆJ
$ ˆJ http://bbs.jrsw.net ˆJ $

žœ£ºÒ»Œþ³£ÓõÄÍøÖ·£º

°ìÀíÍøÉÏÒøÐеÄÍøÕŸµØÖ·ÊÇ£º
œšÉèÒøÐУºhttp://www.ccb.com.cn/
¹€ÉÌÒøÐУºhttp://www.icbc.com.cn/index.jsp
ÕÐÉÌÒøÐУºhttp://www.cmbchina.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ¡¶ž÷λ՟³€±Ø¿Ž±Ø׬¡·.txt
Type: application/octet-stream
Size: 5600 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20030131/41ee88db/.obj
Aladdin_Cai at asus.com.cn ()
2003-12-02 10:26:17 UTC
Permalink
Thank for attention!
And I am a newer of this newsgroup and I don't know how to reply in =
web,I find no REPLY button in samba-technical/ web site:) ( So I simply =
reply this email, am I right?)

Now to the topic. I find it is not due to MS, I tried to connect to =
linux, it also give me a keep-alive.
I don't know how to tell it from the other packets since raw read and =
raw write have some packets sent without header.
And keep-alive packet will mix up with my normal response in socket =
buffer, I can't tell who is who. I feel crazy.
And I haven't found what I want in the website you list till now.

-----=D4=AD=CA=BC=D3=CA=BC=FE-----
=B7=A2=BC=FE=C8=CB: Andrew Bartlett [mailto:***@samba.org]
=B7=A2=CB=CD=CA=B1=BC=E4: 2003=C4=EA3=D4=C231=C8=D5 18:07
=CA=D5=BC=FE=C8=CB: Aladdin =
Cai(=B2=CC=C8=D5=BB=F9_=C8A=BD=DD=C9=CF=BA=A3=A3=A9
=B3=AD=CB=CD: samba-***@lists.samba.org
=D6=F7=CC=E2: Re: When the keep-alive packet sent out,rfc1002 says
differentthings!!
Hello everyone, When I am programming a samba client in freeDOS,using =
wattcp,=20
I found a strange thing, which is not the same as rfc1002 claims.
So,during I write data or read data to server, it seems that server =
will=20
not send me any keep-alive packet because he will reset the timer.But
in fact,during I raw write a very large piece data to server(not
matter windows or linux),it will send me a keep-alive
occasionally,leading my defendless code crash.
I REALLY don't understand why they don't obey the rules,or do I =
mistake rfc1002?
=20
Urgently hope for your kindly help,thank you!!!!
See www.ubiqx.org/cifs for a description of this horrid protocol...

Also, make sure you understand - the standard is what Microsoft does,
not what what any RFC says.

Andrew Bartlett

--=20
Andrew Bartlett ***@pcug.org.au
Manager, Authentication Subsystems, Samba Team ***@samba.org
Student Network Administrator, Hawker College ***@hawkerc.net
http://samba.org http://build.samba.org http://hawkerc.net
Альтаир
2003-12-02 10:26:08 UTC
Permalink
????????????.

???????? ???? ??????????, ?? ???? ? ???, ??? ? ????????? RH 7,2 ? ????
??????? ?????? ?? ?????? Linux ?? ? ???? ?????? ?? ???????????, ???
??????????????? ??????? ????????? Samba ? ? ???? ??? ??????. ?? ???? ? ???
??? ??????? ?? ? ?? ??????? ????? ? ???? ??? ????? ? ????????? ?? ???,
???????? ????????? ??? ????? ?? ????? ? ???? ????? ?? ??? ??????
???????????? ?? ???? ????? ???????????.

????? ? Linux.
??????? ?????? ?????!!!!!!!!! ? ???? ??? ???? !!!!!!!!! ???????
????????????? ??? ??? ????????? ????? ?????????!!!!!!!.

? ????????? ? ??????????????, ?? ????? ??????? ?? ??????, ??????? ?.?. ???
???. ???????
e-mail: ***@vologda.ru
ginhua at dklfjj.com.cn ()
2003-12-02 10:26:17 UTC
Permalink
ÀÏͬѧ:
ÄãºÃ£¡
ÄãÉώΞúÎÒ˵µÄ http://91.91dj.net Õâžöȷʵ²»Ží£¬ÉÏÃæµÄ FLASH ÒôÀֺܟ«²Ê£¬²»ÖªÄãÓÐûÓз¢ÏÖ
°ÑÇ°ÃæµÄ 91 È¥µôÖ±œÓÓà http://91dj.net ÕâÒ²ÊÇÒ»žöÒôÀÖÍøÕŸ£¬Ò²ºÜºÃ¡£
ÁíÍâÎÒÓОúÄÇžöÍøÕŸµÄ¹ÜÀíÔ±ÁªÏµ¹ý£¬ËûÃÇÄDZ߿Ռä×îœüÌػ݌ÛÔÚÂô£¬×öÍøÕŸºÜ±ãÒË£¬
200Masp + 200MÓÊŸÖ + ËÍÒ»žö¹úŒÊÓòÃûÒ»ÄêÒ²²Å 330Ôª¡£ÎÒÃǹ«ËŸ×Œ±žœÐËû×öÒ»žöÍøÕŸ£¬ÄãÃǹ«ËŸ
Òª×öÍøÕŸÒ²¿ÉÒÔžúËûÁªÏµÒ»Ï£¬ËûµÄ QQ£º40327558 £¬µç»°£º0592-8667174 ¡£
ÏÈÕâÑù£¬žÄÌìÓпÕÎÒÔÙÕÒÄãÍ棡


×££ººÃÔËÌìÌìÓУ¬ÐÒÔ˳£°éË棡


°¢»ª
massbear
2003-12-02 10:26:18 UTC
Permalink
A non-text attachment was scrubbed...
Name: ¡¶ÇൺŒŒÊõ²úÈšœ»Òס·µç×ÓÆÚ¿¯2003ÄêµÚÎåÆÚ.zip
Type: application/octet-stream
Size: 46216 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20030527/09994293/2003.obj
marinair
2003-12-02 10:26:18 UTC
Permalink
A non-text attachment was scrubbed...
Name: ¡¶ÇൺŒŒÊõ²úÈšœ»Òס·µç×ÓÆÚ¿¯2003ÄêµÚÎåÆÚ.zip
Type: application/octet-stream
Size: 46216 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20030527/93e50c28/2003.obj
stephan.theiler at css.ch ()
2003-12-02 10:27:09 UTC
Permalink
Hy together

I have a Problem with compiling Samba 3.0Beta2 with ADS Support on Solaris
9 with gcc version 2.95.3
I have the openldap-2.1.22 installed.

I get the following Error in the make Section

Linking bin/smbd
Undefined first referenced
symbol in file
ber_printf passdb/pdb_ldap.o (symbol belongs to
implicit dependency /usr/local/lib/liblber.so.2)
ber_init libads/ldap.o (symbol belongs to
implicit dependency /usr/local/lib/liblber.so.2)
ber_flatten passdb/pdb_ldap.o (symbol belongs to
implicit dependency /usr/local/lib/liblber.so.2)
ber_scanf libads/ldap.o (symbol belongs to
implicit dependency /usr/local/lib/liblber.so.2)
ber_memfree passdb/pdb_ldap.o (symbol belongs to
implicit dependency /usr/local/lib/liblber.so.2)
ber_bvdup libads/ldap.o (symbol belongs to
implicit dependency /usr/local/lib/liblber.so.2)
ber_bvfree passdb/pdb_ldap.o (symbol belongs to
implicit dependency /usr/local/lib/liblber.so.2)
ber_free passdb/pdb_ldap.o (symbol belongs to
implicit dependency /usr/local/lib/liblber.so.2)
ber_alloc_t passdb/pdb_ldap.o (symbol belongs to
implicit dependency /usr/local/lib/liblber.so.2)
ld: fatal: Symbol referencing errors. No output written to bin/smbd
collect2: ld returned 1 exit status
*** Error code 1
make: Fatal error: Command failed for target `bin/smbd'

Configure Option's

env CPPFLAGS="-I/usr/local/include -I/usr/local/include" LDFLAGS="
-L/usr/local/lib" \
./configure --prefix=/tools/samba/samba-3_beta_2 \
--with-krb5=/usr/local \
--with-ads=yes \
--with-codepagedir=/tools/samba/samba-2.2.8a/lib/codepages
\
--localstatedir=/var/log/css/samba
~

Can anyone help me

Regards

Stephan
___________________________________________________________________

CSS Versicherung
Stephan Theiler ITCE
Systemtechnik Client/Server
R?sslimattstrasse 40
CH-6002 Luzern
Telefon ++41 (0)41 369 1470
Telefax ++41 (0)41 369 1266
***@css.ch
www.css.ch
Alberto Patino
2003-12-02 10:27:09 UTC
Permalink
Post by stephan.theiler at css.ch ()
Hy together
I have a Problem with compiling Samba 3.0Beta2 with ADS Support on Solaris
9 with gcc version 2.95.3
I have the openldap-2.1.22 installed.
I get the following Error in the make Section
Linking bin/smbd
Undefined first referenced
symbol in file
ber_printf passdb/pdb_ldap.o (symbol belongs to
implicit dependency /usr/local/lib/liblber.so.2)
Easy answer.

In the Makefile replace all the strings '-lldap' with '-lldap -llber'

Alberto Pati?o

Loading...