[Bug 363576] Re: problem accessing shared folders

2009-04-22 Thread Thierry Carrez
Thanks for the extra info. I think there is no bug here.
When you use libsmbclient (by smbclient or nautilus) to access 
//nasdrive/public it must first resolve nasdrive to an IP address. It does so 
by several methods, trying by default in that order: lmhosts, host, wins, 
bcast. In your case it first tries to find nasdrive in /etc/samba/lmhosts but 
it's not there. Then it tries classic name resolution... and there it finds a 
match: nasdrive = 206.112.100.151.

So it means something in your name resolution (/etc/hosts file, DNS...)
resolves nasdrive as 206.112.100.151. For example you're using
OpenDNS and it is kind enough to answer something completely wrong based
on its search engine. In all cases, it's not a bug in samba.

Solutions to fixing it include:
- rename nasdrive to something your name resolution won't find
- fix your name resolution so that ping nasdrive doesn't go to 206.112.100.151
- add nasdrive to your lmhosts file
- changing name resolve order in /etc/samba/smb.conf so that bcast appears 
before host and the nasdrive name is found by broadcast rather than host 
resolution (noisy and wrong, like what Windows does)

** Changed in: samba (Ubuntu)
   Status: Incomplete = Invalid

-- 
problem accessing shared folders
https://bugs.launchpad.net/bugs/363576
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 350291] Re: Samba cannot resolv ip

2009-04-22 Thread Thierry Carrez
Also
- Does using -R bcast option in smbclient help ?
- Please send the output of the smbclient failure with -d4 debug level.

** Changed in: samba (Ubuntu)
   Status: New = Incomplete

-- 
Samba cannot resolv ip
https://bugs.launchpad.net/bugs/350291
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 363083] Re: [samba] tree connect failed

2009-04-22 Thread Thierry Carrez
Eh, thanks :)
I've tried unsuccessfully to reproduce the setup, works for me under Intrepid.

Just to be sure, could you please give me the output of the following command:
testparm -v -s | grep usershare
Then you can uncomment (by removing leading ;) the following line in 
/etc/samba/smb.conf:
;   usershare max shares = 100
and try smbclient //nkbp/public again...

-- 
[samba] tree connect failed
https://bugs.launchpad.net/bugs/363083
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 348126] Re: ssh are using ssh-userauth but ignores private key

2009-04-22 Thread Claus
I have not read all post, but I think I have found the reason of this. 
I have two keys. One works without problems, the other don't work. 
The correct working key is a dsa key. The rsa key don't work.

I hope this will help a little bit.

-- 
ssh are using ssh-userauth but ignores private key
https://bugs.launchpad.net/bugs/348126
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 191251] Re: [needs-packaging] php5-embed

2009-04-22 Thread Lawrence
Is this package/feature available somewhere?

-- 
[needs-packaging] php5-embed
https://bugs.launchpad.net/bugs/191251
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to php5 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 217159] Re: slapd + gnutls fails

2009-04-22 Thread Adrian Bridgett
FWIW I've got the same on a debian box I've just upgraded from etch to lenny:
slapd 2.4.11-1
libldap-2.4-2 2.4.11-1
libgnutls26 2.4.2-6+lenny1

certs are not blacklisted (checked ca and server), gnutls-serv works
fine.

tracign with openssl shows a very quick reply:
openssl s_client -connect localhost:636  -debug
CONNECTED(0003)
write to 0x68d7c0 [0x68e390] (118 bytes = 118 (0x76))
 - 80 74 01 03 01 00 4b 00-00 00 20 00 00 39 00 00   .tK... ..9..
0010 - 38 00 00 35 00 00 16 00-00 13 00 00 0a 07 00 c0   8..5
0020 - 00 00 33 00 00 32 00 00-2f 03 00 80 00 00 05 00   ..3..2../...
0030 - 00 04 01 00 80 00 00 15-00 00 12 00 00 09 06 00   
0040 - 40 00 00 14 00 00 11 00-00 08 00 00 06 04 00 80   @...
0050 - 00 00 03 02 00 80 88 ce-a0 bb 73 ed f1 ba 4a 72   ..s...Jr
0060 - de c5 25 dc 88 8d b5 8a-d7 15 10 17 68 46 a7 23   ..%.hF.#
0070 - 94 41 2e 07 92 aa .A
read from 0x68d7c0 [0x6938f0] (7 bytes = 0 (0x0))
8434:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake 
failure:s23_lib.c:188:

gnutls-cli -l shows a huge list too. permissions all seem fine (and
readable)

-- 
slapd + gnutls fails 
https://bugs.launchpad.net/bugs/217159
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openldap in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


Re: [Bug 217159] Re: slapd + gnutls fails

2009-04-22 Thread Mathias Gug

Could you please include the information requested at
https://wiki.ubuntu.com/DebuggingOpenldap#ssl-client-failure?

Thank you,

-- 
Mathias Gug
Ubuntu Developer  http://www.ubuntu.com

-- 
slapd + gnutls fails 
https://bugs.launchpad.net/bugs/217159
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openldap in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 317564] Re: upgrade to Subversion 1.5.5 for jaunty

2009-04-22 Thread Grizzly
How about 1.6.1 - at work, on windows, I always have the latest slik-svn and 
tortoissvn with easy popup update notification. Now I have upgraded to 1.6.1 
all my repos and can't use them on linux any more...
But 1.6.1 is so cool - it can pack every slice (usually 1000 revisions) of a 
repo into just one optimised file with the svnadmin pack command. And its _WAY_ 
faster because they keep a lot of stuff no more in XML format, so says the 
subversion book... If git were not behind also, svn for the main repo and 
git-svn for an offline copy would be fine.
OK - there's also bazaar and mercural and ... but still, svn is enough for most 
scenarios and I would like to work with the most recent version to profit from 
innovation - if it were in jaunty proposed that would be enough OR some info 
how to get a ppa for .debs...

-- 
upgrade to Subversion 1.5.5 for jaunty
https://bugs.launchpad.net/bugs/317564
You received this bug notification because you are a member of Ubuntu
Server Team, which is a direct subscriber.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 217159] Re: slapd + gnutls fails

2009-04-22 Thread Adrian Bridgett
sure:

/etc/ldap/ldap.conf:
BASE dc=opsera,dc=com
URI  ldap://foo.opsera.com
TLS_CACERT /etc/ssl/certs/ca.opsera.com.crt
TLS_REQCERT demand

TLS_CACERT file:
-BEGIN CERTIFICATE-
MIIEUTCCAzmgAwIBAgIJAI+dj7GhDEy1MA0GCSqGSIb3DQEBBQUAMHgxCzAJBgNV
BAYTAkdCMRIwEAYDVQQIEwlCZXJrc2hpcmUxEDAOBgNVBAcTB1JlYWRpbmcxDzAN
BgNVBAoTBk9wc2VyYTESMBAGA1UEAxMJT3BzZXJhIENBMR4wHAYJKoZIhvcNAQkB
Fg9yb290QG9wc2VyYS5jb20wHhcNMDgwNTE0MTEyNDAxWhcNMTgwNTEyMTEyNDAx
WjB4MQswCQYDVQQGEwJHQjESMBAGA1UECBMJQmVya3NoaXJlMRAwDgYDVQQHEwdS
ZWFkaW5nMQ8wDQYDVQQKEwZPcHNlcmExEjAQBgNVBAMTCU9wc2VyYSBDQTEeMBwG
CSqGSIb3DQEJARYPcm9vdEBvcHNlcmEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5NBn4qZQmpNSfAZGicY11YoRbG2ZW+IMNd6P0t3uqbqlS/xd
toLXiLQOKcm0k1FdBXgeredDAd7Lm0KOvXOu85oDcSB4Y+8Xny0ug/oyw5HhrvaT
ACP4DdFkVK0rOncpgqjUoPPlHpAtRE+vruxgYqG4WHRZQv2aIfDCLP1vorLNLl68
JoPsTfP8O4ISOHVY5KlmngOjBeU0JuFP7luFoPshXbxpQ8VL2frTNLV3SKpU7zMe
QGkUh+86HSCKxk3ahq5grZIYLm+RlOXORTisT8xK6VWTDO1O0DF1HnVN/pkx6AwN
HyC4sveyYzm4f+nwVTFd/vKXVRHWJoKLltSUkwIDAQABo4HdMIHaMB0GA1UdDgQW
BBQ7ztgRvxawSnughvTiN0BuzzrOMDCBqgYDVR0jBIGiMIGfgBQ7ztgRvxawSnug
hvTiN0BuzzrOMKF8pHoweDELMAkGA1UEBhMCR0IxEjAQBgNVBAgTCUJlcmtzaGly
ZTEQMA4GA1UEBxMHUmVhZGluZzEPMA0GA1UEChMGT3BzZXJhMRIwEAYDVQQDEwlP
cHNlcmEgQ0ExHjAcBgkqhkiG9w0BCQEWD3Jvb3RAb3BzZXJhLmNvbYIJAI+dj7Gh
DEy1MAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEBAKtJww1eJjGtr3c4
xrvRfNlS5FJphmh6xqIyTJf7cglcOziob/FtPD7HJ3FLq2dj1uwRlbreTzTmpajl
hr4h/2gxjLTjrMSriLbHjuBhuotHa8/NsuFm3USWZyca0zASOQV4+yGu4AydUmo5
vcOymiVZ4JWprPC4bmALti8ykqejDjhydcl8Vd9nLKz8KuU1EwBMWHtBjSfkuAao
IxJZHNTpi+iBXRFguola0aTX3K0g1+IABaYKb1MUerszmvXdqaJ0KnszT79d9R2u
XavJFc33egXQUO7K/Vm0tg2+phP7QbRwix95pNP8jkalWbCuXMDbMqLNBN28+u3V
w4gO30E=
-END CERTIFICATE-

gnutls-cli output:
Connecting to '127.0.1.1:636'...
*** Fatal error: A TLS packet with unexpected length was received.
*** Handshake has failed
GNUTLS ERROR: A TLS packet with unexpected length was received.

package versions:
gnutls-bin 2.4.2-6+lenny1 gnutls26 install ok installed
ldap-utils 2.4.11-1 openldap install ok installed
libgnutls26 2.4.2-6+lenny1 gnutls26 install ok installed
libldap-2.4-2 2.4.11-1 openldap install ok installed
libnss-ldap 261-2.1  install ok installed
libpam-ldap 184-4.2  install ok installed
slapd 2.4.11-1 openldap install ok installed
sudo-ldap 1.6.9p17-2.1 sudo install ok installed

ldapsearch:
ldap_url_parse_ext(ldaps://foo.opsera.com/)
ldap_create
ldap_url_parse_ext(ldaps://foo.opsera.com:636/??base)
ldap_sasl_bind
ldap_send_initial_request
ldap_new_connection 1 1 0
ldap_int_open_connection
ldap_connect_to_host: TCP foo.opsera.com:636
ldap_new_socket: 3
ldap_prepare_socket: 3
ldap_connect_to_host: Trying 127.0.1.1:636
ldap_pvt_connect: fd: 3 tm: -1 async: 0
tls_write: want=93, written=93
  :  16 03 02 00 58 01 00 00  54 03 02 49 ef 6d 28 ac   X...T..I.m(.  
  0010:  b6 ff 62 fd 12 78 93 a8  58 cb f7 39 a6 b7 61 59   ..b..x..X..9..aY  
  0020:  1e 8f f4 5a 5d 4c a6 83  b5 73 d0 00 00 24 00 33   ...Z]L...s...$.3  
  0030:  00 45 00 39 00 88 00 16  00 32 00 44 00 38 00 87   .E.9.2.D.8..  
  0040:  00 13 00 66 00 2f 00 41  00 35 00 84 00 0a 00 05   ...f./.A.5..  
  0050:  00 04 01 00 00 07 00 09  00 03 02 00 01. 
tls_read: want=5, got=0

TLS: can't connect: A TLS packet with unexpected length was received..
ldap_err2string
ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

-- 
slapd + gnutls fails 
https://bugs.launchpad.net/bugs/217159
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openldap in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 365259] [NEW] on update to jaunty, configuration questions are asked in curses dialog but debconf is configured to use kde

2009-04-22 Thread Ernst Kloppenburg
Public bug reported:

Binary package hint: samba-common

on update to jaunty, configuration questions are asked in curses dialog
inside the terminal-window of the update manager.

But debconf is configured to use kde, and questions for other packages
actually have been asked with kde dialogs

** Affects: samba (Ubuntu)
 Importance: Undecided
 Status: New

-- 
on update to jaunty, configuration questions are asked in curses dialog but 
debconf is configured to use kde
https://bugs.launchpad.net/bugs/365259
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 363083] Re: [samba] tree connect failed

2009-04-22 Thread rems14
Hi,

This is the command you request me :

rem...@nkbp:~$ testparm -v -s | grep usershare
Load smb config files from /etc/samba/smb.conf
Processing section [printers]
Processing section [print$]
Loaded services file OK.
Server role: ROLE_STANDALONE
usershare allow guests = Yes
usershare max shares = 100
usershare owner only = Yes
usershare path = /var/lib/samba/usershares
usershare prefix allow list = 
usershare prefix deny list = 
usershare template share =

I uncomment the line in smb.conf and restart samba, but it doesn't work.

-- 
[samba] tree connect failed
https://bugs.launchpad.net/bugs/363083
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 358612] Re: X11 forwarding fails (Invalid MIT-MAGIC-COOKIE)

2009-04-22 Thread Andrew Schulman
Bernie, thanks.  You are correct, XAuthLocation wasn't correctly set,
and this was the cause of the problem.

I didn't set XAuthLocation at all, so ssh used the default value, which
ssh_config(5) says is /usr/bin/X11/xauth.  But in Ubuntu xauth is
/usr/bin/xauth.  Setting XAuthLocation /usr/bin/xauth in my ssh config
solved the problem.

Since xauth is /usr/bin/xauth and not /usr/bin/X11/xauth in Ubuntu, it
seems that Ubuntu's openssh-client should change its default value of
XAuthLocation.  Debian solves this by making /usr/bin/X11 a symlink to .
, but that seems like an overbroad solution for just this problem.

Thanks,
Andrew.

-- 
X11 forwarding fails (Invalid MIT-MAGIC-COOKIE)
https://bugs.launchpad.net/bugs/358612
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 363576] Re: problem accessing shared folders

2009-04-22 Thread James Pakko
Thanks, that was very helpful. I changed /etc/samba/smb.conf to include:
   name resolve order = lmhosts bcast host wins
and it works now.

One more question: in the response above to smbclient -d4 there is a line that 
says:
tdb(unnamed): tdb_open_ex: could not open file /var/run/samba/gencache.tdb: 
Permission denied

This looks like a bad thing. Is this bad?

-- 
problem accessing shared folders
https://bugs.launchpad.net/bugs/363576
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 364616] [NEW] Wrong iscsistart path in iscsi hook

2009-04-22 Thread Launchpad Bug Tracker
You have been subscribed to a public bug:

Binary package hint: initramfs-tools

Problem came up after upgrade to jaunty where  iscsi root support was
added.  Path to the iscsistart binary is /sbin/iscsistart not
/usr/sbin/iscsistart as used in the copy_exec call of /usr/share
/initramfs-tools/hook/iscsi. Changing  it to

copy_exec  /sbin/iscsistart /sbin

fixes the error.

** Affects: open-iscsi (Ubuntu)
 Importance: High
 Status: Triaged

-- 
Wrong iscsistart path in iscsi hook
https://bugs.edge.launchpad.net/bugs/364616
You received this bug notification because you are a member of Ubuntu Server 
Team, which is subscribed to open-iscsi in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 364616] Re: Wrong iscsistart path in iscsi hook

2009-04-22 Thread Colin Watson
** Package changed: initramfs-tools (Ubuntu) = open-iscsi (Ubuntu)

** Changed in: open-iscsi (Ubuntu)
   Importance: Undecided = High

** Changed in: open-iscsi (Ubuntu)
   Status: New = Triaged

-- 
Wrong iscsistart path in iscsi hook
https://bugs.launchpad.net/bugs/364616
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to open-iscsi in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Blueprint server-karmic-update-motd-inotify] Enhance update-motd to use inotify

2009-04-22 Thread Dustin Kirkland
Blueprint changed by Dustin Kirkland:

Whiteboard changed to:

With contribution from Jon Bernard, this feature has been mostly
implemented in upstream update-motd.

We need to do a few more, minor things to complete the feature.  Mainly,
we need an init script, or some other sticky mechanism for launching the
inotify portion of the daemon.  Scott James Remnant suggested that
upstart could be used to do this.

This blueprint suggests that we complete this functionality and use
inotify for some update-motd events.

Additionally, we should discuss the types of applications that perhaps
should be hooked to add useful information in the /etc/motd.

:-Dustin

-- 
  Enhance update-motd to use inotify
  
https://blueprints.edge.launchpad.net/ubuntu/+spec/server-karmic-update-motd-inotify

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 365390] [NEW] postfix: invalid value for smtpd_tls_mandatory_ciphers in main.cf

2009-04-22 Thread a7x
Public bug reported:

Binary package hint: postfix

postfix-2.5.5-1.1 (jaunty release candidate)

The default /etc/postfix/main.cf file contains the line:

smtpd_tls_mandatory_ciphers = medium, high

This is an invalid value; it must be either 'medium' or 'high', not
'medium, high'.  With it set to 'medium, high', sending mail via the
submission port (uncommented in master.cf) results in the following
error message in /var/log/mail.log:

Apr 23 00:20:06 socket postfix/smtpd[28385]: warning:
localhost[127.0.0.1]: invalid TLS cipher grade: medium, high: aborting
TLS session

The documentation (man 5 postconf) says this:

smtpd_tls_mandatory_ciphers (default: medium).  The minimum TLS cipher
grade that the Postfix SMTP server will use with mandatory TLS
encryption.  Cipher types listed in smtpd_tls_mandatory_exclude_ciphers
or smtpd_tls_exclude_ciphers are excluded from the base definition of
the selected cipher grade.  With opportunistic TLS encryption,  the
export grade is used unconditionally with exclusions specified only
via smtpd_tls_exclude_ciphers.

** Affects: postfix (Ubuntu)
 Importance: Undecided
 Status: New

-- 
postfix:  invalid value for smtpd_tls_mandatory_ciphers in main.cf
https://bugs.launchpad.net/bugs/365390
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to postfix in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs