headers
P Ranjit Kumar | 1 Feb 2003 02:50
Picon

RE: Samba 3.0alpha21, Windows XP SP1 and Kerberos authentication

Hello Antti,

I have been having this problem for a long time now. I have a few questions
on how you have configured it.

1) How did you create the service principal host/machine.domain.com <at> REALM in
Windows 2000 KDC?

2) Did the setup work with any Windows 2000 clients?

3) Do you have any other services, such as telnet etc., that want to use
Kerberos on your Linux box?

I am playing around with Samba in a Kerberos environment (Windows 2000 KDC)
and am having problems with host/machine.domain.com <at> REALM type of principal
names when I use Windows 2000 clients.

So I am just wondering how did it work for you :) If you are interested, you
can email me your phone number. I can call you.

Thanks,
Ranjit
HP CIFS Team.

-----Original Message-----
From: samba-technical-bounces+marc_jacobsen=hp.com <at> lists.samba.org
[mailto:samba-technical-bounces+marc_jacobsen=hp.com <at> lists.samba.org]On
Behalf Of Antti Tikkanen
Sent: Friday, January 31, 2003 2:00 PM
To: samba-technical <at> lists.samba.org
(Continue reading)

Permalink | Reply | 5 comments |
headers
Andrew Bartlett | 1 Feb 2003 09:07
Picon
Favicon

Status of docs merge to 3.0

I've been doing a few doc updates in HEAD, and was about to merge them
to 3.0 - but I'm not quite sure what the status is, given we seem to
have a slightly different syntax in HEAD (XML compliant?)

So, should I just merge my text changes, or wait for the lot to be
merged or?

Andrew Bartlett
--

-- 
Andrew Bartlett                                 abartlet <at> pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet <at> samba.org
Student Network Administrator, Hawker College   abartlet <at> hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
Permalink | Reply | 3 comments |
headers
Jelmer Vernooij | 1 Feb 2003 11:49
Picon
Favicon

Re: Status of docs merge to 3.0


On Saturday 01 February 2003 09:07, Andrew Bartlett wrote:
> I've been doing a few doc updates in HEAD, and was about to merge them
> to 3.0 - but I'm not quite sure what the status is, given we seem to
> have a slightly different syntax in HEAD (XML compliant?)
>
> So, should I just merge my text changes, or wait for the lot to be
> merged or?
Yeah, both should be in sync - I'll make sure the XML changes make it into 
the 3.0 branch.

Jelmer
--

-- 
Jelmer Vernooij                                      <jelmer <at> samba.org>
Pending (unfinished) patches                         
http://samba.org/~jelmer/diffs.php
Permalink | Reply | 0 comments |
headers
Stefan (metze) Metzmacher | 1 Feb 2003 13:01
Picon

heimdal didn't have AP_OPTS_USE_SUBKEY

Hi Jeremy,

the latest HEAD didn't not compile with heimdal on SuSE8.1

because AP_OPTS_USE_SUBKEY is not defined in the heimdal/krb5.h
only in the MIT krb5.h :-(

is it possible to fix samba that it finally compiles fine?

metze
-----------------------------------------------------------------------------
Stefan "metze" Metzmacher <metze <at> metzemix.de>
Permalink | Reply | 2 comments |
headers
Stefan (metze) Metzmacher | 1 Feb 2003 13:03
Picon

heimdal didn't have AP_OPTS_USE_SUBKEY

Hi Jeremy,

the latest HEAD didn't not compile with heimdal on SuSE8.1

because AP_OPTS_USE_SUBKEY is not defined in the heimdal/krb5.h
only in the MIT krb5.h :-(

is it possible to fix samba that it finally compiles fine?
(in libads/krb5_setpw.c)

and this :

Compiling libads/kerberos_verify.c
libads/kerberos_verify.c: In function `ads_verify_ticket':
libads/kerberos_verify.c:40: `krb5_encrypt_block' undeclared (first use in 
this function)
libads/kerberos_verify.c:40: (Each undeclared identifier is reported only once
libads/kerberos_verify.c:40: for each function it appears in.)
libads/kerberos_verify.c:40: parse error before "eblock"
libads/kerberos_verify.c:95: warning: implicit declaration of function 
`krb5_principal2salt'
libads/kerberos_verify.c:105: warning: implicit declaration of function 
`krb5_get_permitted_enctypes'
libads/kerberos_verify.c:113: warning: implicit declaration of function 
`krb5_use_enctype'
libads/kerberos_verify.c:113: `eblock' undeclared (first use in this function)
libads/kerberos_verify.c:115: warning: passing arg 3 of 
`krb5_string_to_key' from incompatible pointer type
libads/kerberos_verify.c:115: warning: passing arg 4 of 
`krb5_string_to_key' from incompatible pointer type
(Continue reading)

Permalink | Reply | 0 comments |
headers
Ralf G. R. Bergs | 1 Feb 2003 13:28
Picon
Picon
Favicon

REPOST: Meaning of "tdb_free: left read failed at ...?"

Hi there,

I can't believe that NO-ONE of you tech guys can comment on this?!

Thanks,

Ralf

========================= 8x ==========================

Hi there,

since I upgraded our fileserver running Debian 3.0/i386 with Samba 2.2.7a (a 
package I created myself) I'm seeing the following messages in syslog:

Jan 28 14:55:50 Fileserver nmbd[22451]: [2003/01/28 14:55:50, 0] 
tdb/tdbutil.c:tdb_log(531) 
Jan 28 14:55:50 Fileserver nmbd[22451]:   tdb(/var/run/samba/unexpected.tdb): 
tdb_oob len -2320 beyond eof at 16384 
Jan 28 14:55:50 Fileserver nmbd[22451]: [2003/01/28 14:55:50, 0] 
tdb/tdbutil.c:tdb_log(531) 
Jan 28 14:55:50 Fileserver nmbd[22451]:   tdb(/var/run/samba/unexpected.tdb): 
tdb_free: left read failed at 4294964952 (4096) 

I've already searched Google, but to no avail.

Is this something to worry about? Can I stop these messages (or rather the 
cause 
of those messages)? Or should I just filter them away?
(Continue reading)

Permalink | Reply | 4 comments |
headers
Erik Jakobsen | 1 Feb 2003 13:43
Picon

Printing in Samba.

Hi.

Please tell if this is the list to ask questions about
printing & samba.

--

-- 
mvh Erik Jakobsen.
Permalink | Reply | 1 comment |
headers
Ken Cross | 1 Feb 2003 14:48

RE: Finding group members - fix to winbindd_ads.c

Andrew et al:

On further reflection, you may want to reconsider my original patch.

Currently, if you do WINBINDD_GETGRNAM to an NT domain, you get *all*
the members of a group, whether primary or supplemental.  

The same call to an AD just returns supplemental members.

My patch causes the call to either an NT domain or AD to return the same
thing.  It seems like they should be consistent.

Ken

-----Original Message-----
From: Andrew Bartlett [mailto:abartlet <at> samba.org] 
Sent: Friday, January 31, 2003 5:47 PM
To: Ken Cross
Cc: 'Andrew Bartlett'
Subject: RE: Finding group members - fix to winbindd_ads.c

On Sat, 2003-02-01 at 09:15, Ken Cross wrote:
> Thanks, Andrew, will do.
> 
> We're definitely abusing Samba 3.0 to its limits and beyond.

It's called innovation :-)

> The change
> below was necessary because we have a GUI that lets you select things
(Continue reading)

Permalink | Reply | 0 comments |
headers
Bradley W. Langhorst | 1 Feb 2003 17:56
Gravatar

Re: Printing in Samba.

On Sat, 2003-02-01 at 07:43, Erik Jakobsen wrote:
> Hi.
> 
> Please tell if this is the list to ask questions about
> printing & samba.
nope - ask at samba <at> samba.org

brad
Permalink | Reply | 0 comments |
headers
Juergen Hasch | 1 Feb 2003 19:09
Picon
Favicon

Re: file change notification issues

Jeremy,

jra <at> dp.samba.org wrote:

>Great detective work ! Actaully this is a bug in IIS. The
>protocol states that STATUS_NOTIFY_ENUM_DIR is a valid return,
>if too many files were changed (hmmm. define "too many" :-).
>
>It would be possible to cause this to break on Windows 2000
>servers also, but I imagine that under 'normal' circumstances
>few enough files have changed that this doesn't cause a problem
>for IIS.
>
well it looks like Matlab, the application I'm having trouble with, also 
doesn't like STATUS_NOTIFY_ENUM_DIR
as return value. It starts polling its working directory like crazy, 
which is quite annyoing (you can change the program
configuration, but this is the default for me). Older versions of Matlab 
behave better, I checked this some time ago.

I hacked a patch to have Samba behave like W2K and deliver the name of 
the changed file and it looks quite good.
No more endless file stat polling, so I'm all for adding this 
functionality to Samba :-)

The most difficult part is getting a file name from Linux  without 
reimplementing the change  notification interface.
 I don't like fam or dazuko or the other stuff that is available as an 
alternative to the kernel  dnotify support,
it's too much bloat.
(Continue reading)

Permalink | Reply | 2 comments |

Gmane