similar to: Status on fixes for MS04-11/MS04-12/KB828741 issues

Hi all, I wanted to give an update on this as I know this MS Hotfix is critical and must be applied to protect against the (latest) Microsoft worm. I think I've found the problem in the code, and am currently testing a fix for this (not in the release to others to test stage yet). As soon as I'm reasonably confident I'll put a patch out there for others to test, and we'll

Sorry if this question is more for the LDAP community, but since I ran into this via the Samba3 by Example book, I'm asking here. :) As described in Chapter 6, PAM and NSS Client Configuration, in the ldap.conf file, is it necessary to have the bindpw line? From what I have seen, ldap.conf needs to be world readable and having that entry would seem to me to be a security risk. Am I

Hi guys. I'm running: Mandrake 9.2 Kernel 2.4.22-30mdk XFS file system Samba 3.0.5 plus patches for bugs 1315, 1319 and 1345 (self compiled) OpenLDAP 2.1.22-5mdk smbldap-tools 0.8.5 I was able to join the Samba to the NT PDC as a BDC and vampire without issue. I have setup duplicate shares on Samba and am trying to copy over the data from NT. I have tried scopy, xcopy and copying via

I just downloaded and installed Samba 3.0.3 and it still doesn't fix the problem caused by the windows update discussed in KB828741. Still getting the message "You do not have permission to change your password" on some boxes, or "The system cannot change your password because the domain DOMAIN is not available" on others. Uninstalling the update still works, however this

Hello, I have problems with my Samba servers. The PDC in the Windows domain is a NT4 and has the patch KB828741 installed on it. 1st server : HP-UX 10.20 with Samba 2.2.8a ------------ workgroup = FR-MON netbios name = TIMIX security = domain encrypt passwords = Yes password server = * All shares are OK when accessed from Windows workstations. But from

I just installed Samba 3.0.4 on Freebsd 4.10-rel. I can connect to it from a linux box using smbclient. However, when attempting to connect from a windows 2000 box I get an error: System error 50 occured So, I look in the event logs and found this: ====================== Event Type: Warning Event Source: MRxSmb Event Category: None Event ID: 3034 Date: 7/14/2004 Time: 11:07:57 AM User: N/A

We recently discovered after applying Microsoft Windows 2000 patch ms04-044 to our computers we can no longer communicate with our samba server we use for spooling printers. Symptoms: - when trying to display printer queue status, we get a "Failed to open, retrying" message across the top of the queue window - from within various applications, trying to open a printer dialog box

The LIBS line at the top of the Makefile read: LIBS=-lsec -lgen -lresolv -lsocket -lnsl -ldl Is there somewhere else that I need to add -lsocket? David -----Original Message----- From: Andrew Bartlett [mailto:abartlet@pcug.org.au] Sent: Thursday, February 28, 2002 4:22 PM To: David Edward Shapiro Cc: 'samba-technical@lists.samba.org'; 'samba@lists.samba.org' Subject: Re:

If I have a Samba server that is part of a Windows 2000 domain and is not a domain controller (all of our authentication goes against a Windows 2000 box), do I need to upgrade to 3.0.4/2.2.9? What is the interaction between a Samba server that is part of a domain and the Windows client if all of the authentication is being done against a Windows 2000 PDC? Mike Auleta Boeing IDS, Philadelphia

I'm a little unconfortable with the way the privsep user is created in the RedHat spec files. In particular the way a fixed UID is specified. Now it looks (from a glance at the apache/bind spec file) that it is 'the way it is done' - but is there a register of these numbers somewhere? Andrew Bartlett -- Andrew Bartlett abartlet at pcug.org.au

I'm sending this out again because although I know what causes the problem now, I'm still not sure what to do about it . . . Zieba Pete wrote: > > Hello, > I'm running Slack 8.1 and Samba 2.2.4. The mp3 I'm playing off of the > server, or anything else realtime for that matter, pauses when a print job > is sent to the box. I'm printing to a small cheap print

OK we do all the steps in my previous missive and everything looks fine, landscape, collating the whole works. This is on a Laserjet 4000 with the latest PCL6 driver. The firm still has a good number of Laserjet 4s so we dutifully load up the latest PCL5E driver for the 4 and connect to the 4 on a couple of workstations. Everything goes to hell. Landscpae, collating and all other problems

I'm sure this has been discussed before, but would it then be possible to join a "real" NT4 or Win2k BDC to the Samba domain and establish the trust relation from our other Win2k? Or does the trust relationship have to be "registered" with the entire domain and therefore all the domain controllers? Khanh Tran Network Operations Sarah Lawrence College 1 Mead Way

Cool, thanks alot, I really appreciate your time. I'm extremely pleased with 3.0.x's stability, I don't think local segment failover is really going to be a huge issue. Keep up the great work :) -- Cy > > > > Date: Fri, 30 Jan 2004 18:14:36 +1100 > From: Andrew Bartlett <abartlet@samba.org> > To: Cybr0t McWhulf <cybre@killcybre.org> > Cc:

Is there a way for me to disable signing? I have looked around but couldn't find anything > -----Original Message----- > From: samba-bounces+ycayer=3webmedia.com@lists.samba.org > [mailto:samba-bounces+ycayer=3webmedia.com@lists.samba.org] > On Behalf Of Andrew Bartlett > Sent: Friday, July 25, 2003 20:01 > To: Yannick Cayer > Cc: samba@lists.samba.org > Subject: Re:

Hi, I was wondering upon how some of you think upon some issues upon block policies in firewalls. Basically you can choose a firewall to send resets back as answer upon probes etc to not allowed ports, or you can choose a firewall to drop the packets. In general i think just dropping is the better one. Consider the lastest worms like blaster and sasser. How many hits would some firewalls

Dear Herman, We had the same problems over here. The problem seems to be related to Windows Hotfix KB828741. Removing the hotfix through the control panel solved it for us. Greetz, Jerome Borsboom >>BTW, i use samba 302 & 303 pre2.. >> >>Thursday, April 22, 2004, 2:33:16 PM, you wrote: >> >>CBM> well the subject tell's it.. >> >>CBM>

I was thinking of using rsync, since it has the ability of mapping the written user-name instead of using UID's. Anyone know how this work on WindowsNT? I've read, that CygWin hasn't the ACL's properly implemented yet? Does another "cross-platform" exist, that can map between the written usernames? Jacob ps. I've tried using scopy, but it fails : "Acces

I need some assistance from a talented C programmer, preferably with some experience in Apache 2.0 module development. For a while, I have had a version of mod_ntlm_winbind cleaned up to work with ntlm_auth, and handling both NTLM and Negotiate HTTP authentication via Samba 3 and Samba4's ntlm_auth utility. I have not had the time or energy to properly maintain (it needs basic auth added),

I patched samba to always return ACCESS_GRANTED for testing. So I came to this: IASSAM.LOG [556] 23:23:53:671: Inserting attribute msNPAllowDialin. [556] 23:23:53:671: Successfully retrieved per-user attributes. Dialin now "only" fails with "Dialin not allowed for user", but I'm not able to set it in UserMgr. Is it difficult to map this attribute? Daniel