Bug#385372: [Pkg-samba-maint] Bug#385372: This create_builtin_administrators: Failed to create Administrators bug is probably away in samba
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian Perrier wrote: Is any of the bug reporters still affected by this bug? I deeply suspect that this bug is over for a while and was probably fixed during the various fixes that happened for 3.0.23d. I really consider closing the bug. If not running winbindd, this is normal. The debug message in later Samba releases was increased so as not to cause undue concern. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGhPf4IR7qMdg1EfYRAp1mAKCs7YkRbMhlkBDTXiPiwjg1/BHSCQCg0UkA bJdVgjWU3rYENrdYPBwKOHI= =u7c1 -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#429429: [Pkg-samba-maint] Bug#429429: samba: nmbd not always necessary
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Steve Langasek wrote: On Sun, Jun 17, 2007 at 08:19:43PM -0400, Robert Edmonds wrote: Package: samba Version: 3.0.24-6etch4 Severity: wishlist nmbd is not always necessary; for instance in a non-Windows environment with working name resolution. It would be nice if the samba init script supported only starting the smbd daemon. If you have a non-Windows environment, use a better protocol. :) I consider this a wontfix. Steve, Many distribtions will not start nmbd if disable netbios = yes in smb.conf for those AD environments that have disabled the legacy protocol. Something to consider. jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGdoTXIR7qMdg1EfYRAlFnAJ9A5CGHTfGbPmzf24T+bZJ5eIRkmACglzNP 10zdzJTli87wBJQdvo/SCRE= =ro5i -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#424629: [Samba] force group to Unix group in 3.0.25
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian Perrier wrote: Guys, I want to double check the patch to 3.0.24 (thanks, Jerry, for it) but I need a test case... Given that I have to coordinate that update with Debian's security team, I better have to be triple secured..:-) However, I still haven't understood what *exactly* is the bug..:-) David, do you have a smb.conf excerpt which I could use for testing this ? Christian, The issue that setting force group on a share was causing all additional supplementary gids to be dropped from the user's token. So setup a share that has force group = foo and then create a directory or file that the user should be able to access based on supplementary groups other than foo. You can verify the fix by looking at the NT and UNIX user token debug output in smbd's level 10 debug logs. Sorry for all the hassle and the regression. Jeremy and I have both looked over the code and haven't seen any other code paths than would be problematic so I think this one patch is enough. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.4 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGTucPIR7qMdg1EfYRAlWVAKDRiZSq/FfghaiUWznGJOpOVEZ2GQCgs4Hg sezgqgVmbsq2HnODTW9sNCE= =ybgQ -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#424629: [Samba] force group to Unix group in 3.0.25
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Christian Perrier wrote:
Our bug. I fixed it last night for next week's 3.0.25a release
(http://wiki.samba.org/index.php/Release_Planning_for_Samba_3.0).
You can either retest against the SAMBA_3_0_25 svn tree or I
can send you a patch.
Jerry, apparently this bug hits Debian's version in etch as it
appeared after the security fix for CVE-2007-2444. See
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=424629
As you certainly know, upgrading the version in etch
to 3.0.25a is out of question, so we need to patch the
3.0.24 version to fix this.
So, if you have the patch handy, we'd be deeply interested.
Ah yeah. I didn't think about that. Attached.
Is there a bug report for this issue in Samba's BTS? I can't
find one.
Note sure. We went back and forth with David Rankin on it
getting the necessary information.
cheers, jerry
=
Samba--- http://www.samba.org
Centeris --- http://www.centeris.com
What man is a man who does not make the world better? --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFGTeSIIR7qMdg1EfYRAoygAJ9zPh6jIMt5ri9UzuNLtEgiiDekHQCgndPF
DyDNcagDKoir8QjGfBZPY1o=
=w3wZ
-END PGP SIGNATURE-
=== modified file 'source/smbd/uid.c'
--- source/smbd/uid.c 2007-05-12 16:45:55 +
+++ source/smbd/uid.c 2007-05-18 17:33:11 +
@@ -151,7 +151,9 @@
char group_c;
BOOL must_free_token = False;
NT_USER_TOKEN *token = NULL;
-
+ int num_groups = 0;
+ gid_t *group_list = NULL;
+
if (!conn) {
DEBUG(2,(change_to_user: Connection not open\n));
return(False);
@@ -190,14 +192,14 @@
if (conn-force_user) /* security = share sets this too */ {
uid = conn-uid;
gid = conn-gid;
- current_user.ut.groups = conn-groups;
- current_user.ut.ngroups = conn-ngroups;
+ group_list = conn-groups;
+ num_groups = conn-ngroups;
token = conn-nt_user_token;
} else if (vuser) {
uid = conn-admin_user ? 0 : vuser-uid;
gid = vuser-gid;
- current_user.ut.ngroups = vuser-n_groups;
- current_user.ut.groups = vuser-groups;
+ num_groups = vuser-n_groups;
+ group_list = vuser-groups;
token = vuser-nt_user_token;
} else {
DEBUG(2,(change_to_user: Invalid vuid used %d in accessing
@@ -230,8 +232,8 @@
*/
int i;
- for (i = 0; i current_user.ut.ngroups; i++) {
- if (current_user.ut.groups[i] == conn-gid) {
+ for (i = 0; i num_groups; i++) {
+ if (group_list[i] == conn-gid) {
gid = conn-gid;
gid_to_sid(token-user_sids[1], gid);
break;
@@ -243,6 +245,12 @@
}
}
+ /* Now set current_user since we will immediately also call
+ set_sec_ctx() */
+
+ current_user.ut.ngroups = num_groups;
+ current_user.ut.groups = group_list;
+
set_sec_ctx(uid, gid, current_user.ut.ngroups, current_user.ut.groups,
token);
Bug#424629: [Samba] force group to Unix group in 3.0.25
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 david rankin wrote: The patch is working fine. I have had it running on the production machine at work since 12:00 am and there have been no *howls* from the rest of the minions and I haven't run into any trouble. OK. Thanks. I'll push out a new patched 3.0.24 snapshot for people if they don't want to patch on their own. Thanks for testing. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGTe9qIR7qMdg1EfYRAmp7AKDzoQmu7GH7akyDdBlZA/HjfsNwYgCg4yb2 oM6eI8lAJSnHrI3prx/da+0= =OOxm -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#168732: Still in BTS cleaning mood: should smbclient allow listing/browsing shares with spaces in their names
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian Perrier wrote: Windows clients get around this by doing a NetrShareEnum call on \SRVSVC instead. Samba also implements this functionality, but the necessary code is not linked into smbclient. Volker fixed this last week I think. Will be in 3.0.23. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFETqCRIR7qMdg1EfYRAuE1AJ9Br301qcCqiP2ol6vms0M1YUsCLQCfUPDg w8dlUSRIi9Ds5/m+XcHKdX0= =eEO2 -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#353107: known bug in samba server (sarge-version) that does not allow connect from OSX tiger clients.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian Perrier wrote: Looks like samba included with debian-sarge has know bug witch affect that way that OSX tiger clients can't connect to server running debian sarge and samba. Jerry, this is bug #2973 in bugzilla... Is the relevant patch available somewhere so that we can see whether it may be fixed in Debian's 3.0.14 (aka backport the patch)? The case seems to fall among fixes that are acceptable for the Debian stable distribution, assuming we backport the fix (as having 3.0.2x in Debian stable is out of question for well known Debian policy reasons). My guess is that you need to look at svn revisions 7696, 7708, 7385. It's mostly changes to source/rpc_parse/parse_rpc.c I think. cheers, jerry = I live in a Reply-to-All world--- Samba--- http://www.samba.org Centeris --- http://www.centeris.com -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFD/HetIR7qMdg1EfYRAipAAKDDpb1P3mGtL+giWck7bloyDBcn+wCgzUdN IEYVq6F1g4WsG+inA5+28XI= =TcLW -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#265577: #265577: One Debian bug that could be worth looking at
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian Perrier wrote: | Jerry, | | In Debian BTS, we have numerous old bug reports about smbd/nmbd hangs | and most of the time they lead nowhere (this must be user error...:-)). | | However, http://bugs.debian.org/265577 seems to be of higher interest | as it describes an issue which seems to have some background and seems | reproducible at least in 3.0.14a | | The buginning of the bug log seems to suggest a user error, but later | Loïc Minier adds a contribution which explains a possible race | condition. | | Could you have at least a quick look at this part? Will do. I'll try to spend some time on it next week. jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDbhCeIR7qMdg1EfYRAimkAJ4jp8jPqkeidvp/1tpTPrzRdrfDuACg2txu MXMSCYGYqfzjF4sB25L/Co4= =ecvf -END PGP SIGNATURE-
Bug#259973: Debian bug #259973: template primary group seems to be an unknown parameter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian Perrier wrote: | Quoting Andrew Suffield ([EMAIL PROTECTED]): | | It doesn't appear anywhere in the sourceexcept in WHATSNEW.txt and | in a few places in Samba3-ByExample and Samba3-HOWTO. | I can see it in 3.0.14a-6. It's this line: | | source/nsswitch/winbindd_acct.c:group = lp_template_primary_group(); | | Plus the associated config parsing stuff. | | | Yes, you're right. | | However, it disappeared in 3.0.20 as far as I can see. | This is what confused me. | | Jerry, what happened to that parameter? Nothing in | the WHATSNEW.txt file says it disappeared but it doesn't | seem to be used anymore and it is no mor ein the | smb.conf.5 man page. It was removed with the 'winbind enable local accounts' as it was only used in that code path. It was a badly named parameter since people confused it with the 'template homedir' and 'template shell' options. Had nothing to do with domain accounts. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc There's an anonymous coward in all of us. --anonymous -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDXOBKIR7qMdg1EfYRAm2eAKCQGzjBPB+RjO+ASXtAqa8zGKG17gCcDAa6 m7ohdWI3nbw++iMTeFkStOo= =K1aB -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#295260: Could you have a look at Debian samba bug #295260?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian Perrier wrote: | Jerry, | | As far as I know, none of current samba package maintainers have an AD | domain to test the situation described in | http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295260 | | Could you have a look at it? It seems, according to Steve Langasek, a | pretty well known situation with AD domains. Sure. But tracking down the exact permissions needed is a little tricky. May take a while as I'm buried in some things most of this week. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc There's an anonymous coward in all of us. --anonymous -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDXOmLIR7qMdg1EfYRAnbQAKCysxKt3OTQLkUgDhE24i145U5y9ACg1ODv bBjeZpcZzVgDsjVVlSwXVz4= =hV1T -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#197172: Debian bug #197172: smbclient dies with a bus error on Sparc
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian Perrier wrote: | Jerry, | | Back on digging in the big mess of samba Debian package | BTS...:-). Life is coming back to the maintenance of official samba | packages in Debian | | Bug #197172 in Debian seems to have a good explanation (actually by | Eloy Paris, one of the maintainers...) and a simple patch | proposed...which I just adapted to the current source (of 3.0.14a, I | don't have 3.0.20 handy right now). The patch looks ok. But This should be fixed in 3.0.20 as Jeremy went through and fixed the string handling code wrt to this exact issue. Eloy's patch is a band-aid I think since there are other places where the server code could crash. | PS: in case some other contact address is better suited for us to | forward you such problems exhumated from Debian BTS, please tell us | so. Email preferred (at least for me, I work on my packages while | being offline most of the time) Email is fine and this address is good as well. :-) cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDVpUAIR7qMdg1EfYRAhatAKCxuKDQvm3+iFtZ7wwACvbmJV633gCgh+5F Bd7kMnUYFuvL2ZBqhzt43L4= =lkXR -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#302771: Win XP file listing bug in smbclient and libsmbclient
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian Perrier wrote: | | Jerry, I grabbed SAMBA_3_0 from svn 2 hours ago | and, while trying to recompile a Debian | package from it (to get it tested by our bug submitter): | ... | python/py_spoolss_printers_conv.c:294: error: |parse error before ')' token | error: command 'gcc' failed with exit status 1 This is fixed in the svn tree now. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc I never saved anything for the swim back. Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCf1sfIR7qMdg1EfYRAuEDAJ46clbPKEjnMGpq51UpfPE73hifZACcDXrT ILVsY8KUItxEOcjfA+0Xsmw= =QGGo -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#302771: Win XP file listing bug in smbclient and libsmbclient
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian Perrier wrote: | Quoting Gerald (Jerry) Carter ([EMAIL PROTECTED]): | |I remember you fixing this post 3.0.14a correct ? Maybe |even post 3.0.15pre2. | |Would one of you debian dudes retest the latest SAMBA_3_0 |tree and let us know ? | | | Jerry, I grabbed SAMBA_3_0 from svn 2 hours | ago and, while trying to recompile a Debian | package from it (to get it tested by our bug submitter): | | python/py_spoolss_printers_conv.c: In function `py_to_PRINTER_INFO_2': | python/py_spoolss_printers_conv.c:294: error: parse error before ')' token | error: command 'gcc' failed with exit status 1 This is due to the recent merge of the talloc code from Samba 4. Gives us a few days to finish cleaning it up. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc I never saved anything for the swim back. Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCfg6HIR7qMdg1EfYRAn1VAKC+Wm5LDqdt+8KV7kc9/1fqLSyxgACgwCHE USLF0R2haTaOc7hrcPkYO4o= =Lf62 -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#307746: smbclient: Port option (-p) is ignored
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian Perrier wrote: | Jerry, Jeremy, this is from Debian BTS... | | Quoting Frank Chung ([EMAIL PROTECTED]): |Package: smbclient |Version: 3.0.14a-1 |Severity: normal | |I have a samba server listening on port 1390. To use smbclient to connect to |it, I have to use the -p 1390 option. | |Since upgrading to 3.0.14a-1, smbclient has started ignoring -p (or - --port, |for that matter): | |# smbclient -U user -W DOMAIN -p 1390 //server/share |timeout connecting to 160.19.25.253:445 |timeout connecting to 160.19.25.253:139 |Error connecting to 160.19.25.253 (Operation already in progress) |Connection to 160.19.25.253 failed Looks like someone else has reported it as well. See https://bugzilla.samba.org/bug/2688. I'll track it from there. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc I never saved anything for the swim back. Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCfg1xIR7qMdg1EfYRAmT8AKCAghkhiZJGb2RmgvtIr5n7Dg4wKwCgsha4 3t3Kf/wSJpL6hRf5ifnuGWg= =w1gq -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#307746: smbclient: Port option (-p) is ignored
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christian Perrier wrote: | Jerry, Jeremy, this is from Debian BTS... | | Quoting Frank Chung ([EMAIL PROTECTED]): |Package: smbclient |Version: 3.0.14a-1 |Severity: normal | | I have a samba server listening on port 1390. To use | smbclient to connect to it, I have to use the -p 1390 | option. Christian, This is my bug I'm pretty sure. If I haven't mailed you back with a fix by mid-week, ping me about it again. Thanks. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc I never saved anything for the swim back. Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCfMrMIR7qMdg1EfYRAkENAKDA+InU+HM2bAgDqOZD/YXgz7Y1XQCgo+hK X6gLIEsEnFEi48tn7ngJjnI= =Kk6U -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
