Re: [Samba] Saving files with MS Word to samba3 server is very slow!
Hi! I'm still hunting this problem and now have some additional information. I tried to save an empty Word file from the NT workstation to the Samba3 server, which takes more than 20 seconds(!), and took a strace log from the samba process. I found that the samba process does 19 select(2) system calls which all time out after a little less than 1 second. This of course sums up to the long delay I see when saving a file with Word. These 19 select calls all follow the same pattern: [...] 0.50 stat64(test/~WRD0005.tmp, {st_mode=S_IFREG|0744, st_size=23040, ...}) = 0 0.15 0.74 fcntl64(14, F_SETLKW64, {type=F_WRLCK, whence=SEEK_SET, start=436, len=1}, 0xbfffedf0) = 0 0.12 0.53 fcntl64(15, F_SETLKW64, {type=F_RDLCK, whence=SEEK_SET, start=376, len=1}, 0xbfffe8c0) = 0 0.09 0.47 fcntl64(15, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=376, len=1}, 0xbfffe900) = 0 0.09 0.46 kill(16973, SIG_0)= 0 0.08 0.40 fcntl64(15, F_SETLKW64, {type=F_RDLCK, whence=SEEK_SET, start=376, len=1}, 0xbfffece0) = 0 0.08 0.45 fcntl64(15, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=376, len=1}, 0xbfffed20) = 0 0.08 0.45 fcntl64(15, F_SETLKW64, {type=F_WRLCK, whence=SEEK_SET, start=376, len=1}, 0xbfffecd0) = 0 0.08 0.45 fcntl64(15, F_SETLK64, {type=F_WRLCK, whence=SEEK_SET, start=696, len=1}, 0xbfffecc0) = 0 0.08 0.43 fcntl64(15, F_SETLK64, {type=F_UNLCK, whence=SEEK_SET, start=696, len=1}, 0xbfffecc0) = 0 0.09 0.45 fcntl64(15, F_SETLKW64, {type=F_WRLCK, whence=SEEK_SET, start=164, len=1}, 0xbfffec30) = 0 0.08 0.45 fcntl64(15, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=164, len=1}, 0xbfffec30) = 0 0.09 0.44 fcntl64(15, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=376, len=1}, 0xbfffed10) = 0 0.09 0.75 fcntl64(14, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=436, len=1}, 0xbfffedf0) = 0 0.08 0.48 write(26, \0\0\0#\377SMB\242C\0\0\300\210\1\300\0\0\0\0\0\0\0\0\0..., 39) = 39 0.14 0.72 select(27, [5 23 26], NULL, NULL, {60, 0}) = 1 (in [26], left {60, 0}) 0.000286 0.000332 read(26, \0\0\0z, 4)= 4 0.09 0.42 read(26, \377SMB\242\0\0\0\0\30\3\200\343\200\0\0\0\0\0\0\0\0\0..., 122) = 122 0.09 0.54 gettimeofday({1133509647, 607911}, NULL) = 0 0.07 0.47 stat64(test/~WRD0005.tmp, {st_mode=S_IFREG|0744, st_size=23040, ...}) = 0 0.10 0.67 gettimeofday({1133509647, 608025}, NULL) = 0 0.05 0.38 fcntl64(14, F_SETLKW64, {type=F_WRLCK, whence=SEEK_SET, start=436, len=1}, 0xbfffedf0) = 0 0.11 0.54 kill(16973, SIG_0)= 0 0.07 0.41 open(test/~WRD0005.tmp, O_RDONLY|O_LARGEFILE) = 31 0.16 0.55 fcntl64(15, F_SETLKW64, {type=F_RDLCK, whence=SEEK_SET, start=376, len=1}, 0xbfffe8a0) = 0 0.08 0.45 fcntl64(15, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=376, len=1}, 0xbfffe8a0) = 0 0.08 0.47 fcntl64(15, F_SETLKW64, {type=F_RDLCK, whence=SEEK_SET, start=376, len=1}, 0xbfffeca0) = 0 0.08 0.44 fcntl64(15, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=376, len=1}, 0xbfffeca0) = 0 0.08 0.46 fcntl64(15, F_SETLKW64, {type=F_WRLCK, whence=SEEK_SET, start=376, len=1}, 0xbfffecd0) = 0 0.08 0.46 fcntl64(15, F_SETLKW64, {type=F_WRLCK, whence=SEEK_SET, start=164, len=1}, 0xbfffec70) = 0 0.08 0.45 fcntl64(15, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=164, len=1}, 0xbfffec70) = 0 0.08 0.44 fcntl64(15, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=376, len=1}, 0xbfffecd0) = 0 0.08 0.45 fcntl64(14, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=436, len=1}, 0xbfffedf0) = 0 0.08 0.46 close(31) = 0 0.11 0.45 gettimeofday({1133509647, 608666}, NULL) = 0 0.07 0.40 select(27, [5 23 26], NULL, NULL, {0, 949359}) = 0 (Timeout) 0.947049 0.947273 time(NULL)= 1133509648 0.08 [...] This trace was taken with strace -r -T. The first column shows the relative time between system calls and at the end of each line the total time of the system call is printed. Look at the last select call of this example: it times out and takes 0.947049 seconds to finish. I found 19 of these situations in my test of saving an empty Word file, resulting in a total time of more than 20 seconds for the operation. This is just too long to be accepted. # fgrep Timeout samba.trace 0.41 select(27, [5 23 26], NULL, NULL, {0, 947307}) = 0 (Timeout) 0.949387 0.42 select(27, [5 23 26], NULL, NULL, {0, 949308}) = 0 (Timeout) 0.944988 0.44 select(27, [5 23 26], NULL, NULL, {0, 3427}) = 0 (Timeout) 0.009098 0.42 select(27, [5 23 26], NULL, NULL, {0, 949354}) = 0 (Timeout) 0.946990 0.45 select(27, [5 23 26], NULL,
Re: [Samba] Saving files with MS Word to samba3 server is very slow!
Hi! Some more infos: With a samba debug level of 10 I get the following logs which IMHO are relevant for the problem: [...] [2005/12/02 09:12:00, 3] smbd/process.c:switch_message(900) switch message SMBntcreateX (pid 17354) conn 0x8426cb0 [2005/12/02 09:12:00, 4] smbd/uid.c:change_to_user(217) change_to_user: Skipping user change - already user [2005/12/02 09:12:00, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x6, access_mask = 0x20181 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x140 root_dir_fid = 0x0 [2005/12/02 09:12:00, 5] smbd/filename.c:unix_convert(108) unix_convert called on file test/~WRD1676.tmp [2005/12/02 09:12:00, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [TEST/~WRD1676.TMP] - [test/~WRD1676.tmp] [2005/12/02 09:12:00, 3] smbd/dosmode.c:unix_mode(121) unix_mode(test/~WRD1676.tmp) returning 0744 [2005/12/02 09:12:00, 10] smbd/open.c:open_file_ntcreate(1236) open_file_ntcreate: fname=test/~WRD1676.tmp, dos_attrs=0x80 access_mask=0x20181 share_access=0x7 create_disposition = 0x1 create_options=0x140 unix mode=0744 oplock_request=3 [2005/12/02 09:12:00, 8] smbd/dosmode.c:dos_mode(294) dos_mode: test/~WRD1676.tmp [2005/12/02 09:12:00, 8] smbd/dosmode.c:dos_mode_from_sbuf(162) dos_mode_from_sbuf returning a [2005/12/02 09:12:00, 8] smbd/dosmode.c:dos_mode(328) dos_mode returning a [2005/12/02 09:12:00, 10] smbd/open.c:open_file_ntcreate(1409) open_file_ntcreate: fname=test/~WRD1676.tmp, after mapping access_mask=0x20181 [2005/12/02 09:12:00, 5] smbd/files.c:file_new(139) allocated file structure 7559, fnum = 11655 (2 used) [2005/12/02 09:12:00, 10] locking/locking.c:get_share_modes(491) get_share_modes: delete_on_close: 0 [2005/12/02 09:12:00, 10] locking/locking.c:get_share_modes(516) get_share_modes: share_mode_entry[0]: pid = 17354, share_access = 0x0, private_options = 0x40, access_mask = 0x2019f, port = 0x0, type= 0x0, file_id = 1, dev = 0x3a0b, inode = 134217858 [2005/12/02 09:12:00, 10] smbd/open.c:share_conflict(409) share_conflict: entry-access_mask = 0x2019f, entry-share_access = 0x0, entry-private_options = 0x40 [2005/12/02 09:12:00, 10] smbd/open.c:share_conflict(412) share_conflict: access_mask = 0x20181, share_access = 0x7 [2005/12/02 09:12:00, 10] smbd/open.c:share_conflict(463) share_conflict: [1] am (0x2019f) right (0x6) = 0x6 [2005/12/02 09:12:00, 10] smbd/open.c:share_conflict(463) share_conflict: [1] sa (0x7) share (0x2) = 0x2 [2005/12/02 09:12:00, 10] smbd/open.c:share_conflict(465) share_conflict: [2] am (0x20181) right (0x6) = 0x0 [2005/12/02 09:12:00, 10] smbd/open.c:share_conflict(465) share_conflict: [2] sa (0x0) share (0x2) = 0x0 [2005/12/02 09:12:00, 10] smbd/open.c:share_conflict(468) share_conflict: [3] am (0x2019f) right (0x21) = 0x1 [2005/12/02 09:12:00, 10] smbd/open.c:share_conflict(468) share_conflict: [3] sa (0x7) share (0x1) = 0x1 [2005/12/02 09:12:00, 10] smbd/open.c:share_conflict(470) share_conflict: [4] am (0x20181) right (0x21) = 0x1 [2005/12/02 09:12:00, 10] smbd/open.c:share_conflict(470) share_conflict: [4] sa (0x0) share (0x1) = 0x0 [2005/12/02 09:12:00, 10] smbd/open.c:share_conflict(470) share_conflict: check 4 conflict am = 0x20181, right = 0x21, sa = 0x0, share = 0x1 [2005/12/02 09:12:00, 10] smbd/open.c:fd_open(55) fd_open: name test/~WRD1676.tmp, flags = 00 mode = 0744, fd = 30. [2005/12/02 09:12:00, 2] smbd/open.c:open_file(372) wunderli opened file test/~WRD1676.tmp read=Yes write=No (numopen=2) [2005/12/02 09:12:00, 4] smbd/open.c:open_file_ntcreate(1526) open_file_ntcreate : share_mode deny - calling open_file with flags=0x0 flags2=0x0 mode=0744 returned 1 [2005/12/02 09:12:00, 10] smbd/open.c:defer_open_sharing_error(873) defer_open_sharing_error: time [1133511120.559863] adding deferred open entry for mid 3584, file test/~WRD1676.tmp [2005/12/02 09:12:00, 10] smbd/process.c:push_sharing_violation_open_smb_message(275) push_sharing_violation_open_smb_message: pushing message len 126 mid 3584 timeout time [1133511121.509863] [2005/12/02 09:12:00, 10] smbd/process.c:push_queued_message(131) push_message: pushed message length 126 on queue smb_sharing_violation_queue [2005/12/02 09:12:00, 10] locking/locking.c:add_deferred_open(1224) add_deferred_open: creating entry for file test/~WRD1676.tmp. num_deferred_open_entries = 1 [2005/12/02 09:12:00, 10] locking/locking.c:print_deferred_open_table(976) print_deferred_open_table: deferred_open_entry[0]: pid = 17354, mid = 3584, dev = 0x3a0b, inode = 134217858, port = 33113, time = [1133511120.559863] [2005/12/02 09:12:00, 5] smbd/files.c:file_free(459) freed files structure 11655 (1 used) [2005/12/02 09:12:00, 10] smbd/process.c:receive_message_or_smb(403) receive_message_or_smb: select with timeout of [0.949586] [2005/12/02 09:12:01, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) -
Re: [Samba] Internet explorer not authenticating properly
On Fri, 2005-12-02 at 14:16 +1100, Adam Clark wrote: Hi all, We are having a an ongoing problem with out NTLM authentication on out squid system. The problem tends to arise when users change their passwords. I have read a KB article that says that DC's will still continue to authenticate Old password for an hour or so after the password is changed. This seems to happen on win2k3 SP1 DCs, from my testing. (But not earlier versions). But I think it is between IE and winbindd that is the problem. Below is a trace at debug level 5 from winbindd. The first is a correct authentication Attempt from boh\mobeid. The second is the user that had chaged his password 2.5 hours before this trace. NTLM authentication has failed and he is Prompted for basic, he types in his name and it attempts to authenticate as Proxy\james.clavering, which no such user exists. If I manually use ntlm_auth to authenticate with the new password I get a result code 0, So I know that the DC's are working correctly. [22734]: pam auth crap domain: BOH user: MOBEID Using cleartext machine password cred_create cred_create cred_assert [22734]: pam auth crap domain: PROXY user: JAMES.CLAVERING Using cleartext machine password cred_create cred_create cred_assert NTLM CRAP authentication for user [PROXY]\[JAMES.CLAVERING] returned NT_STATUS_NO_SUCH_USER (PAM: 10) [22734]: pam auth crap domain: BOH user: MVELLA Using cleartext machine password cred_create cred_create cred_assert Has anybody else experienced these problems with NTLM auth. Our installation is RedHad ES Linux 3, with samba-3.0.9-1.3E.5 The problem with the [PROXY] domain is that the user is entering no domain. They should enter domain\\username for the basic authentication. You could set 'winbind use default domain = yes' to get the behaviour your users are after. It is frustrating that IE isn't picking up the new password after the change. It would be interesting to see how firefox reacts (as a comparison/contrast). Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] can't mount smb shares
Hi list, it's me again. I have 2 samba servers, one as a PDC, the other as a file server. I can now join the domain. But it's impossible to mount the smb shares. The 2 servers are listening on several private networks, using vlans. 10.16.41.0/24 is a routed network, all over the campus. The others are just nated through a FreeBSD box. All dns datas are ok and uptodate If I connect from a box on the 10.16.40.0/24 network, everything is ok, I can mount the shares on the file server. But if I connect from a box on 192.168.x.y networks, I don't mount the shares, sometimes don't mount the home, and it seems that the netlogon script is not executed. I make an automatic copy of the netlogon script in the user home ; if i execute it, i have this error : network path not found (or something like that, don't know how to translate it from french). The problem is, I think, that in the logon script, I refer to monoxyde's shares as \\monoxyde\some_share. But this server is known as monoxyde only on the 10.16.41.0/24 network. On other networks, it's known differently on the dns. This morning, if i execute the logon script by hand, i can mount all the shares, but it's not executed at logon time. If the workstation is configured with dhcp, the connexion to the domain is erratic (domain unknown) ; i must reboot the workstation for a good login on the domain. I think the problem is a network browsing problem, isn't it ? But i don't find any solution. If anybody has an idea... I'm desperate, please help. I pasted the global sections of the 2 smb.conf. Thanks for reading this, Valéry Roché - PDC's smb.conf. [global] workgroup = LETTRES netbios name = CARBONE interfaces = 10.16.41.21/255.255.255.0, 192.168.41.253/255.255.255.192, 192.168.42.61/255.255.255.192, 192.168.43.125/255.255.255.224, 127.0.0.1/255.0.0.0 bind interfaces only = yes #smb ports = 139 admin users= @Domain Admins server string = Controleur de domaine security = user encrypt passwords = Yes obey pam restrictions = No ldap passwd sync = Yes ldap passwd sync = Yes log level = 1 syslog = 1 log file = /var/log/samba/log.%m max log size = 1 time server = No socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 mangling method = hash2 Dos charset = 850 Unix charset = ISO8859-1 time server = yes logon script = %U.bat logon drive = h: logon home = \\carbone\%U logon path = \\carbone\profiles\%U add machine script = /samba_system/scripts/smbldap-useradd -w %u root preexec = /samba_system/scripts/connect.sh %u %m %I %T %D root preexec close = yes domain logons = Yes os level = 254 local master = Yes preferred master = Yes domain master = yes wins support = Yes name resolve order = wins lmhost hosts bcast dns proxy = yes max wins ttl = 518400 min wins ttl = 21600 passdb backend = ldapsam:ldap://ldapserver ldap filter = ((sambaSID=S-1-5-21-mysid-*)(uid=%u)) ldap admin dn = my_dn ldap suffix = ldap_suffix ldap user suffix = user_suffix ldap group suffix = group_suffix ldap machine suffix = machine_suffixe - File server's smb.conf [global] workgroup = LETTRES netbios name = MONOXYDE #interfaces = 10.16.41.22, 192.168.42.60 interfaces = 10.16.41.22/255.255.255.0, 192.168.41.252/255.255.255.192, 192.168.42.60/255.255.255.192, 192.168.43.124/255.255.255.224, 127.0.0.1/255.0.0.0 bind interfaces only = yes #username map = /etc/samba/smbusers admin users= @Domain Admins server string = BDC - partages security = user encrypt passwords = Yes obey pam restrictions = No ldap passwd sync = Yes ldap passwd sync = Yes log level = 1 syslog = 1 log file = /var/log/samba/log.%m max log size = 1 time server = No socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 mangling method = hash2 Dos charset = 850 Unix charset = ISO8859-1 domain logons = No os level = 200 local master = No preferred master = No domain master = No wins support = No wins server = 10.16.41.21 name resolve order = hosts passdb backend = ldapsam:ldap_server ldap filter = ((sambaSID=S-1-5-21-mysid-*)(uid=%u)) ldap admin dn = mydn ldap suffix = suffic ldap user suffix = ldap group suffix = ldap machine suffix = . -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba net groupmap
On Fri, December 2, 2005 2:48 am, Stefan Sowa said: Hello List, on a windows-pc are files with an EURO-Sign included in the filenames. This is working between all XP and 2000 Clients. But if i try to access such a file from a linux-box, I cannot read this files. I switched to the german charset with EURO Sign but no success. Then i tried the cifs instead of smbfs. But the same effect. Switching to UTF-8 doesn't work too. Example: The wintEUROSIGNuro.txt file was created on a WindowsXP Workstation. All other files are created from the Linuxbox with writeaccess to the WindowsXP PC. mount -t cifs //192.168.9.115/Xchange /mnt/test -o codepage=cp850,iocharset=iso8859-15,unixcharset=iso8859-15 [EMAIL PROTECTED] ]# ls -lah /mnt/test/EURO insgesamt 2,5K drwxrwxrwx 1 root root 0 2005-12-01 16:30 . drwxrwxrwx 1 root root 0 2005-12-01 14:26 .. -rwxrwSrwt 1 root root 7 2005-12-01 09:14 [EMAIL PROTECTED] (linux) -rwxrwSrwt 1 root root 7 2005-12-01 10:09 Turo(linux) -rwxrwSrwt 1 root root 0 2005-12-01 14:37 Ümläute (linux) -rwxrwSrwt 1 root root 7 2005-12-01 09:40 uro (linux) -rwxrwSrwt 1 root root 23 2005-12-01 14:26 wint?uro.txt (win) 1. [EMAIL PROTECTED] ]# ls -lah /mnt/test/EURO/wint\?uro.txt -rwxrwSrwt 1 root root 23 2005-12-01 14:26 /mnt/test/EURO/wint?uro.txt (seems to work) Now with arrow-up from the history: 2. [EMAIL PROTECTED] ]# ls -lah /mnt/test/EURO/wint\?uro.txt ls: /mnt/test/EURO/wint?uro.txt: Datei oder Verzeichnis nicht gefunden (no such file or directory) 3. [EMAIL PROTECTED] ]# cat /mnt/test/EURO/wint\?uro.txt cat: /mnt/test/EURO/wint?uro.txt: Datei oder Verzeichnis nicht gefunden (no such file or directory) NGREP Analysis: --- I don't now what to do. So i ngreped the stuff: 1. the first ls (seems to work) SMB2.c..B./\.E.U.R.O.\.w.i.n.t.\.?.u.r.o...t.x.t... = the strange ? sign gets escaped. It seems to work. 2. the seconds ls SMB2.d...d..,.,.B.-\.E.U.R.O.\.w.i.n.t.?.u.r.o...t.x.t... 3. cat .h...i...[EMAIL PROTECTED]'..\.E.U.R.O.\.w.i.n.t.?.u.r.o...t.x.t... What can I do? No matter if i cannot see the EURO Sign. But I have to backup this files. Windows is allowing these characters. regards Stefan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba when mapping nt groups to unixgroups must the users on the linux system be a member of the group to read files from the system? i am talking particularly about the domain users group. or must it just be a valade group -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba as pdc with ldap: trouble with smbldap-populate: error adding from cn=Domain Admins,ou=Groups onwards
Hello Andreas, Andreas Bittner wrote: adding new entry: cn=Domain Admins,ou=Groups,dc=mycomp,dc=de failed to add entry: no structural object class provided at ./smbldap-populate line 471, GEN1 line 9. Did you copy the samba schema to the LDAP schema directory and include it to the configuration file include /etc/openldap/schema/samba.schema Greetings, Willi Schiegel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Problem migrating share acls
Hi list, I'm having a problem migrating share acls from an NT4 BDC to a samba domain member server. I can migrate the shares and the files and folders (with acls) but if I do a 'migrate security' I get a list of the acls that it is proposing to transfer and then WERR_ACCESS_DENIED. I have fs acl support, tested with setfacl and I've tried connecting as a variety of users (including root). Is it possible to get a more specific error message, maybe I need to give my connecting user write acces to my smb.conf or perhaps the share_info.tdb (both of which I've tried) or maybe some other file that I don't know about. I'm quite baffled so any ideas would be gratefully received. Thanks in advance, James. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Temporary Profiles
If you are sure there is a solution in your book, I am going to buy it. That shouldn't be a problem. I don't want roaming profiles. It would be enough, if i get a local NOT temporary profile. I have tried to get roaming profiles to work as a part of the solution for the local profiles but that didn't helped neither. All I get then was a temporary serverside profile. All I want is a not temporary profile, where my changes are saved... Oliver Schneider 2005/12/1, John H Terpstra [EMAIL PROTECTED]: On Thursday 01 December 2005 03:01, Oliver Schneider wrote: Hi, I have got a problem with samba for days now and I don't know how to solve it. My problem is, that it doesn't matter if I enable or disable Roaming Profiles, all I get is a temporary profile. If i enable Roaming Profiles, than i get a temporary serverside Profile. If I disable Roaming Profiles, than i get a temporary local Profile. Can somebody please help me? With Roaming Profiles I think it is a problem with Filepermissions. Root get's a full Serverside Profile (not the smb.conf below), but only root. I just want a local Profile for the users, so it is not so relevant. Please follow the examples in my book Samba-3 by Example. This book is the official Samba deployment guide. If you experince any problems with the examples in this book I will help you to find the cause by which the book mis-directed you. After all, I want the documentation to be correct and of true value. Samba-3 by Example provides fully documented, step-by-step, installation and depoyment instructions for complete networking solutions. It coveres simple networks and progressively introduces complex networking examples. Every necessary configuration file is provided. Every time I have helped people on this list who have reported problems with Samba deployment - issues such as logon scripts that will not run, roaming profiles that fail to work correctly, not being able to join a domain, and so on, the solutions in this book solved the users' problem. If you do not follow the documentation provided, you will possibly go through a more painful learning process. The choice is yours. - John T. Oliver Samba is PDC [global] include = /etc/samba/dhcp.conf socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 logon drive = H: hide dot files = yes domain master = Yes username map = /etc/samba/smbusers map to guest = Bad User printer admin = @ntadmin, root, administrator logon home = \\%L\%U\.9xprofile passwd program = /usr/bin/passwd %u wins support = true printcap cache time = 750 netbios name = fileserver cups options = raw printing = cups unix password sync = yes local master = Yes logon path = logon script = logon.bat workgroup = SJ os level = 65 printcap name = cups security = user add machine script = /usr/sbin/useradd -c Machine -d /var/lib/nobody -s /bin/false %m$ domain logons = Yes preferred master = Yes load printers = yes passdb backend = smbpasswd [homes] comment = Home Directories valid users = %S browseable = No read only = No inherit acls = Yes [profiles] comment = Network Profiles Service path = %H read only = No # store dos attributes = Yes create mask = 0600 directory mask = 0700 [users] comment = All users path = /home read only = No inherit acls = Yes veto files = /aquota.user/groups/shares/ [groups] comment = All groups path = /home/groups read only = No inherit acls = Yes [printers] comment = All Printers path = /var/tmp printable = Yes create mask = 0600 browseable = No [print$] comment = Printer Drivers path = /var/lib/samba/drivers write list = @ntadmin root force group = ntadmin create mask = 0664 directory mask = 0775 [netlogon] comment = Network Logon Service path = /var/lib/samba/netlogon write list = @user, root guest ok = yes locking = No -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO Reference Guide, 2 Ed., ISBN: 0131882228 Samba-3 by Example, 2 Ed., ISBN: 0131882221X Hardening Linux, ISBN: 0072254971 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions:
RE: [Samba] Samba 3.0.9 == 3.0.14a migration LDIF problem
(This time to the list) Andrew and Craig: Thank you both for replying. Following Andrew's advice, I set out to add the line objectClass: account to all of my computer accounts in the LDIF. (None of them had this declaration) After that was acommplished, I tried to re-import the LDIF. The process got much farther than before, but it again failed a computer account. A little closer investigation revealed a difference in these accounts. And it appears to be coincidental to certain point in time. All of the older accounts are one way and the newer accounts are a different way. Now, I'm wondering which the proper way for me moving forward. Here are the examples: Old computer account === dn: uid=nei-10$,ou=Computers,dc=nesbitt,dc=local uidNumber: 1008 gidNumber: 553 homeDirectory: /dev/null loginShell: /bin/false objectClass: top objectClass: posixAccount objectClass: sambaSamAccount objectClass: account uid: nei-10$ displayName: NEI-10$ cn: NEI-10$ description: Computer sambaSID: S-1-5-21-3325760187-3909277049-4208064797-3016 sambaPrimaryGroupSID: S-1-5-21-3325760187-3909277049-4208064797-2107 sambaAcctFlags: [W ] sambaLogonTime: 0 sambaLogoffTime: 0 sambaKickoffTime: 0 sambaPwdMustChange: 2147483647 sambaPwdCanChange: 1130941262 sambaNTPassword: 3520D823FF3A3EA0D246ACF5D99F5061 sambaPwdLastSet: 1130941262 modifiersName: cn=Manager,dc=nesbitt,dc=local modifyTimestamp: 20051102142102Z === New computer account: === dn: uid=stargazer$,ou=Computers,dc=nesbitt,dc=local objectClass: top objectClass: inetOrgPerson objectClass: posixAccount objectClass: sambaSamAccount objectClass: account cn: stargazer$ sn: stargazer$ uid: stargazer$ uidNumber: 1081 gidNumber: 553 homeDirectory: /dev/null loginShell: /bin/false description: Computer creatorsName: cn=Manager,dc=nesbitt,dc=local createTimestamp: 20040309024546Z sambaSID: S-1-5-21-3325760187-3909277049-4208064797-3162 sambaPrimaryGroupSID: S-1-5-21-3325760187-3909277049-4208064797-2107 displayName: stargazer$ sambaPwdMustChange: 2147483647 sambaAcctFlags: [W ] sambaPwdCanChange: 1078869765 sambaLMPassword: F8490F746485FE71A1E92A4788FB2592 sambaNTPassword: F8490F746485FE71A1E92A4788FB2592 sambaPwdLastSet: 1078869765 modifiersName: cn=Manager,dc=nesbitt,dc=local modifyTimestamp: 20040309220245Z === When I run the LDIF import, I get this error: slapadd: dn=uid=stargazer$,ou=Computers,dc=nesbitt,dc=local (line=2415): (65) invalid structural object class chain (inetOrgPerson/account) My gut tells me the new definition minus the objectClass: account is the way to go, but before I do anything else, I'd like to know. John T: If you're reading this, it might not be a bad idea to show the proper basic requirements for each of the account types in LDIF format somewhere in one of your books. I searched through both of them looking for the answer to this and couldn't find it. Maybe it would help someone in the future. Thanks in advance, Kevin -Original Message- From: Andrew Bartlett [mailto:[EMAIL PROTECTED] Sent: Thursday, December 01, 2005 4:11 PM To: Collins, Kevin Cc: samba@lists.samba.org Subject: Re: [Samba] Samba 3.0.9 == 3.0.14a migration LDIF problem On Thu, 2005-12-01 at 15:52 -0500, Collins, Kevin wrote: I'm trying to migrate my existing RedHat ES Samba PDC to Ubuntu. I'm certain that is caused by the differing version of OpenLDAP that I'm running, Yes, it is the OpenLDAP upgrade that is causing you pain. dn: uid=magellan$,ou=Computers,dc=nesbitt,dc=local uidNumber: 1040 gidNumber: 553 homeDirectory: /dev/null loginShell: /bin/false objectClass: top objectClass: posixAccount objectClass: sambaSamAccount Can someone give me a pointer as to what I'm doing wrong? In this specific instance you are missing an objectClass: account Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] aliases for share Definitions
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Fredrik Pihl wrote: | Hi | I have NT4 clients that have problem accessing my share: | [ccview1_view02] (Because it's more then 8 character long) | I would like to add an alias in this entry. Does anyone know if this is | possible? | | I know I could do like this: | | [ccview1_view01] | comment = Views on ccase cluster | guest ok = no | path = /export/ccview1_view01 | directory mask = 0775 | create mask = 0775 | writeable = true | map archive = no | oplocks = no | kernel oplocks = no Sure. The easitest way is [sts_nt4] ~ copy = ccview1_view01 cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org Centeris --- http://www.centeris.com There's an anonymous coward in all of us. --anonymous -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDkEuzIR7qMdg1EfYRAu0/AKCpm4j4oZO4LHx6XmboSGPeOev9SACgsyXv FzeYw6XzlVAaTcE1q10n+zQ= =npyg -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Saving files with MS Word to samba3 server is very slow!
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andreas Haumer wrote: | Hi! | | I'm currently hunting a strange problem and looking for help! | | I have a samba3 fileserver (currently samba-3.0.20b, but | problem can be reproduced with samba-3.0.7, but | _not_ with samba2 like 2.2.8a), and I see performance | problems when writing files with MS word 2002 SP3 | from a NT4.0 (SP6a) workstation. Saving even the | smallest file takes more than 10 seconds! Copying | files with Windows Explorer takes less than a second! Can yoiu test against the current SAMBA_3_0_RELEASE tree? Samba 3.0.21 should be out in the next day or so and the release branch will give you a chance to test prior to release. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDkE2mIR7qMdg1EfYRAlmHAKDVNZ0CyLqFfqNDt1bQgUj7MDCLFwCgzOIk sZtO13Iwvzm6F2SPaQgwQWk= =0ZOl -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: samba Digest, Vol 35, Issue 18
Hi All I use Samba 3.X as PDC. I have a problem with, when i make a file whit farsi name some of charcters change to unreadable and so i can't read my file name. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.9 == 3.0.14a migration LDIF problem
On Fri, 2005-12-02 at 08:22 -0500, Collins, Kevin wrote: (This time to the list) Andrew and Craig: Thank you both for replying. Following Andrew's advice, I set out to add the line objectClass: account to all of my computer accounts in the LDIF. (None of them had this declaration) After that was acommplished, I tried to re-import the LDIF. The process got much farther than before, but it again failed a computer account. A little closer investigation revealed a difference in these accounts. And it appears to be coincidental to certain point in time. All of the older accounts are one way and the newer accounts are a different way. Now, I'm wondering which the proper way for me moving forward. Here are the examples: Old computer account === dn: uid=nei-10$,ou=Computers,dc=nesbitt,dc=local uidNumber: 1008 gidNumber: 553 homeDirectory: /dev/null loginShell: /bin/false objectClass: top objectClass: posixAccount objectClass: sambaSamAccount objectClass: account uid: nei-10$ displayName: NEI-10$ cn: NEI-10$ description: Computer sambaSID: S-1-5-21-3325760187-3909277049-4208064797-3016 sambaPrimaryGroupSID: S-1-5-21-3325760187-3909277049-4208064797-2107 sambaAcctFlags: [W ] sambaLogonTime: 0 sambaLogoffTime: 0 sambaKickoffTime: 0 sambaPwdMustChange: 2147483647 sambaPwdCanChange: 1130941262 sambaNTPassword: 3520D823FF3A3EA0D246ACF5D99F5061 sambaPwdLastSet: 1130941262 modifiersName: cn=Manager,dc=nesbitt,dc=local modifyTimestamp: 20051102142102Z === New computer account: === dn: uid=stargazer$,ou=Computers,dc=nesbitt,dc=local objectClass: top objectClass: inetOrgPerson objectClass: posixAccount objectClass: sambaSamAccount objectClass: account cn: stargazer$ sn: stargazer$ uid: stargazer$ uidNumber: 1081 gidNumber: 553 homeDirectory: /dev/null loginShell: /bin/false description: Computer creatorsName: cn=Manager,dc=nesbitt,dc=local createTimestamp: 20040309024546Z sambaSID: S-1-5-21-3325760187-3909277049-4208064797-3162 sambaPrimaryGroupSID: S-1-5-21-3325760187-3909277049-4208064797-2107 displayName: stargazer$ sambaPwdMustChange: 2147483647 sambaAcctFlags: [W ] sambaPwdCanChange: 1078869765 sambaLMPassword: F8490F746485FE71A1E92A4788FB2592 sambaNTPassword: F8490F746485FE71A1E92A4788FB2592 sambaPwdLastSet: 1078869765 modifiersName: cn=Manager,dc=nesbitt,dc=local modifyTimestamp: 20040309220245Z === When I run the LDIF import, I get this error: slapadd: dn=uid=stargazer$,ou=Computers,dc=nesbitt,dc=local (line=2415): (65) invalid structural object class chain (inetOrgPerson/account) My gut tells me the new definition minus the objectClass: account is the way to go, but before I do anything else, I'd like to know. John T: If you're reading this, it might not be a bad idea to show the proper basic requirements for each of the account types in LDIF format somewhere in one of your books. I searched through both of them looking for the answer to this and couldn't find it. Maybe it would help someone in the future. My domain workstations only have the account and sambaSamAccount objectclasses but when I looked at yours, I didn't know that sambaSamAccount had a specific requirements beyond uid and sambaSID but got the impression from Andrew's response that you must have the account objectclass and thought that your usage of posixAccount was enough. thus one of my workstations would end up with this... # win-workstation$, People, azapple.com dn: uid=win-workstation$,ou=Computers,ou=Accounts,dc=azapple,dc=com uid: win-workstation$ sambaSID: S-1-5-21-XX-XXX-XX-2006 objectClass: sambaSamAccount objectClass: account displayName: WIN-WORKSTATION$ sambaPwdMustChange: 2147483647 sambaAcctFlags: [W ] sambaPrimaryGroupSID: S-1-5-21-XX-XXX-XX-553 sambaPwdCanChange: 1132660033 sambaNTPassword: removed sambaPwdLastSet: 1132660033 and thus, I don't have to deal with all the other attributes required by the posixAccount and inetOrgPerson objectclasses and the structural problems of all those, though it would seem that having to top structural object should put them in order...it may be as simple as the order of the objectclasses as they are presented within your ldif file. I would suggest that you consider... copying the ldif file and sectioning it to import all the easy stuff first and perhaps move the computer accounts to a separate section (file) to deal with separately. This way, you could try adding one computer account at a time to simplify troubleshooting use slapadd instead of ldapadd (you didn't specify which you are
[Samba] Any help! printer lexz25-z35 in client w98 using USB no print
hello list..., I using samba 2.2.5 on linux suse 8.1. I have windows98 called w98 on my network sharing printer lexmark Z25-Z35 as lexz35w98. I using following command for print in windows98 through samba from suse, in prompt: smbclient //w98/lexz35w98 -N -c print /tmp/o but the printer no print. the printer lexz35w98 is connected via USB in client w98, and recive the file, move the headers, but no print. what happens ? sincerely.. J.A.R.C. Analista Programador Cartagena-Colombia __ Renovamos el Correo Yahoo! Nuevos servicios, más seguridad http://correo.yahoo.es J.A.R.C. Analista Programador Cartagena-Colombia __ Renovamos el Correo Yahoo! Nuevos servicios, más seguridad http://correo.yahoo.es -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] can't mount smb shares
Hi again, Although the PDC is configured as a wins server, I added 2 lines in lmhost.sam on a client machine : 192.168.41.253 carbone #PRE#DOM:MY_DOMAIN 192.168.41.252 monoxyde#PRE Now, the client can mount the shares, if I try it by the way of the explorer. But it seems that the logon script is not executed, as the roaming profile is not mounted. Has anybody any idea about it ? Valéry -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] 64 bit lock offset message
I am using 3.0.20b. I understand that these messages show up because client sends a lock request that is not on the valid range. [2005/12/01 15:16:25, 0] locking/posix.c:posix_fcntl_lock(667) an Invalid argument error. This can happen when using 64 bit lock offsets [2005/12/01 15:16:25, 0] locking/posix.c:posix_fcntl_lock(668) on 32 bit NFS mounted file systems. [2005/12/01 15:16:26, 0] locking/posix.c:posix_fcntl_lock(666) posix_fcntl_lock: WARNING: lock request at offset 0, length 349 returned [2005/12/01 15:16:26, 0] locking/posix.c:posix_fcntl_lock(667) an Invalid argument error. This can happen when using 64 bit lock offsets [2005/12/01 15:16:26, 0] locking/posix.c:posix_fcntl_lock(668) Searching the archive, I discovered that this should have been fixed in the newer version and I should look for this piece of code in posix.c: (I found this) /* * We must truncate the count to less than max_positive_lock_offset. */ if (u_count ~((SMB_BIG_UINT)max_positive_lock_offset)) count = max_positive_lock_offset; /* any idea? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] PDC/BDC Load-Balanced?
Hallo, I've setup a BDC in the same subnet like my PDC. I observed that some User take the BDC to logon. The Domain-Join of some PCs will also done at the BDC. Is this behavior normal and wanted? If done so, I have to rsync the profiles or only netlogon? Best regards Matthias PDC: [global] netbios name = PDC workgroup = MyDOMAIN server string = DC (PDC) (%v) security = user domain master = yes time server = yes domain logons = yes encrypt passwords = yes wins support = yes local master = yes prefered master = yes os level = 64 enable privileges = yes BDC: [global] netbios name = BDC workgroup = MyDOMAIN server string = DC Backup (%v) security = user domain master = no time server = yes domain logons = yes wins support = no wins server = PDC encrypt passwords = yes local master = yes os level = 62 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Permission problems after an NT4 - Samba LDAP PDC migration
Hello, I replaced an NT4 server by a Samba 3.0.14a ldap server following the instructions in 'Samba by example'. Everything works fine except for some files on a W2003 SP2 server: - when the W2003 server uses the Linux PDC, from a WinXP client, some files are not writable, and ACLs can be listed but not changed. - when the NT4 server is up, the same files on the W2003 server can be modified and ACLs can be changed. I've attached the 2 ethereal captures. Also, I've noticed that when the WinXP reads some files on the W2K3 server, not a single packet is sent to the PDC. Is it normal ? It seems that the W2K3 has an ACL cache, and does not try to communicate with our samba server. Any ideas ? -- Ludovic DROLEZ Frame 4886 (178 on wire, 178 captured) Arrival Time: Dec 1, 2005 18:24:14.337183000 Time delta from previous packet: 0.000235000 seconds Time relative to first packet: 1.955019000 seconds Frame Number: 4886 Packet Length: 178 bytes Capture Length: 178 bytes Ethernet II Destination: 00:14:22:11:93:c1 (00:14:22:11:93:c1) Source: 00:11:43:ca:d9:04 (00:11:43:ca:d9:04) Type: IP (0x0800) Internet Protocol, Src Addr: 10.164.8.148 (10.164.8.148), Dst Addr: 10.164.8.12 (10.164.8.12) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 00.. = Differentiated Services Codepoint: Default (0x00) ..0. = ECN-Capable Transport (ECT): 0 ...0 = ECN-CE: 0 Total Length: 164 Identification: 0x546d Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (0x06) Header checksum: 0x7fff (correct) Source: 10.164.8.148 (10.164.8.148) Destination: 10.164.8.12 (10.164.8.12) Transmission Control Protocol, Src Port: 1740 (1740), Dst Port: netbios-ssn (139), Seq: 716625107, Ack: 2010932993, Len: 124 Source port: 1740 (1740) Destination port: netbios-ssn (139) Sequence number: 716625107 Next sequence number: 716625231 Acknowledgement number: 2010932993 Header length: 20 bytes Flags: 0x0018 (PSH, ACK) 0... = Congestion Window Reduced (CWR): Not set .0.. = ECN-Echo: Not set ..0. = Urgent: Not set ...1 = Acknowledgment: Set 1... = Push: Set .0.. = Reset: Not set ..0. = Syn: Not set ...0 = Fin: Not set Window size: 64824 Checksum: 0xd924 (correct) NetBIOS Session Service Message Type: Session message Flags: 0x00 ...0 = Add 0 to length Length: 120 SMB (Server Message Block Protocol) SMB Header Server Component: SMB SMB Command: NT Create AndX (0xa2) NT Status: STATUS_SUCCESS (0x) Flags: 0x18 0... = Request/Response: Message is a request to the server .0.. = Notify: Notify client only on open ..0. = Oplocks: OpLock not requested/granted ...1 = Canonicalized Pathnames: Pathnames are canonicalized 1... = Case Sensitivity: Path names are caseless ..0. = Receive Buffer Posted: Receive buffer has not been posted ...0 = Lock and Read: LockRead, WriteUnlock are not supported Flags2: 0xc807 1... = Unicode Strings: Strings are Unicode .1.. = Error Code Type: Error codes are NT error codes ..0. = Execute-only Reads: Don't permit reads if execute-only ...0 = Dfs: Don't resolve pathnames with Dfs 1... = Extended Security Negotiation: Extended security negotiation is supported .0.. = Long Names Used: Path names in request are not long file names .1.. = Security Signatures: Security signatures are supported ..1. = Extended Attributes: Extended attributes are supported ...1 = Long Names Allowed: Long file names are allowed in the response Reserved: Tree ID: 22530 Process ID: 3040 User ID: 43010 Multiplex ID: 17984 NT Create AndX Request (0xa2) Word Count (WCT): 24 AndXCommand: No further commands (0xff) Reserved: 00 AndXOffset: 57054 Reserved: 00 File Name Len: 34 Create Flags: 0x0016 0... = Create Directory: Target of open can be a file .1.. = Batch Oplock: Requesting BATCH OPLOCK ..1. = Exclusive Oplock: Requesting OPLOCK Root FID: 0x Access Mask: 0x0002019f 0... = Generic
Re: [Samba] PDC/BDC Load-Balanced?
On Fri, 2005-12-02 at 17:16 +0100, Matthias Spork wrote: Hallo, I've setup a BDC in the same subnet like my PDC. I observed that some User take the BDC to logon. The Domain-Join of some PCs will also done at the BDC. Is this behavior normal and wanted? If done so, I have to rsync the profiles or only netlogon? Only the Netlogon, just specify the same server name for the profile path in both servers confs. Simo. -- Simo Sorce- [EMAIL PROTECTED] Samba Team- http://www.samba.org Italian Site - http://samba.xsec.it -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] can't mount smb shares
On Fri, Dec 02, 2005 at 04:00:03PM +0100, Valéry Roché wrote: Hi again, Although the PDC is configured as a wins server, I added 2 lines in lmhost.sam on a client machine : lmhost.sam is just a SAMple file. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] PDC/BDC Load-Balanced?
On Fri, Dec 02, 2005 at 05:16:59PM +0100, Matthias Spork wrote: Hallo, I've setup a BDC in the same subnet like my PDC. I observed that some User take the BDC to logon. The Domain-Join of some PCs will also done at the BDC. Is this behavior normal and wanted? If done so, I have to rsync the It's the client that chooses which xDC it will use any given time. So yes, it can be either the BDCs or the PDC. profiles or only netlogon? [netlogon] is a must to keep in sync. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Saving files with MS Word to samba3 server is very slow!
On Fri, Dec 02, 2005 at 09:39:10AM +0100, Andreas Haumer wrote: Here you can see the receive_message_or_smb: select with timeout of [0.949586] message. The whole pattern repeats 19 times when saving an empty Word file. If I set share modes = no for the smaba share in question, saving the Word file is completed almost instantly! But this is IMHO not a real solution as I think we can not live without this feature. Does this ring a bell? Anyone? You're getting share mode violations - thus the opens are being deferred for 1 second (as CIFS requires). What exact client version, what exact version of Word are you using ? Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] roaming profiles odd.
using samba 3.14a, windows xp sp2 configured with roaming profiles. the profile seems to download properly but the start menu seems to be empty of shortcuts. anything tht requires reading of files seems to be acting strangely the files exist on the server but somehow they are not read on the workstation all of the /profiles/username directories are configured exactly the same. drwx-- 13 mmyuser staff 4096 2005-12-01 15:00 agarceau drwx-- 14 guest1guest14096 2005-12-01 17:43 guest1 the /profiles dir has the following permissions. drwxrwsr-x 17 root root 4096 2005-11-30 11:43 profiles etc. not sure what i have wrong here but any ideas would be great. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Can not list shares more than 12 characters long
While listing shares with command like: smbclient -L 192.168.0.4 -N , shares with length of name more than 12 (that ability appeared in Win2000) are just not listed. But if know their names, I can mount them (using mount_smbfs). How can I see these shares while listing? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Can not list shares more than 12 characters long
What version of samba you're using ? I believe it's an issue with some of the older versions, 2.2.7a or prior. -Ravi -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, December 02, 2005 12:23 PM To: samba@lists.samba.org Subject: [Samba] Can not list shares more than 12 characters long While listing shares with command like: smbclient -L 192.168.0.4 -N , shares with length of name more than 12 (that ability appeared in Win2000) are just not listed. But if know their names, I can mount them (using mount_smbfs). How can I see these shares while listing? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba LDAP Tools and mkntpwd
I'm in the middle of Samba 3.0.9 == 3.0.14a migration testing. Because I'm using newer tools, I am also using a newer verions of the Samba LDAP Tools. My older version, 0.8.4, used the 'mkntpwd' utility to generate NT passwords. The new version, 0.9.1 defaults to using (what looks like) a Perl module called Crypt::SmbHash. My questions: Do I need to continue to use mkntpwd? Will I need to reset all the passwords for my users if I move to Crypt::SmbHash? Or will it just work if I leave the defaults alone? -- Kevin L. Collins, MCSE Systems Manager Nesbitt Engineering, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] fedora-ds
With the release of Fedora Directory Server, I am wanting to play around with it. Is there any 'official' references to Fedora/NsDS that I have missed? Un-official references that might be of use? (Non-samba specific) Tools to convert slapcat output from openldap DSA to objectclasses/attributes suitable to use with Fedora-DS? Craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re[2]: [Samba] Can not list shares more than 12 characters long
Oh sorry, I forgot to say, version is 3.0.14a . -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] security=server, port 445 and winnt
Hi folks, I'm running several samba servers that use security= server and password server to point authentications to a WinNT pdc. Snooping at the network traffic, I find that the samba server initially tries to connect to the WinNT server through port 445 (which fails), then reverts to 139 (which succeeds). I know it's possible to use the samba ports parameter to control which ports the samba server listens on, but this seems to have no effect on which ports are used to talk to the password server. I'd like to tell the samba server not to try port 445, since the failover seems to add a few seconds to the time necessary for clients to establish a connection to the samba server. Any ideas? BTW, the samba version is 3.0.20. Thanks, Bryan -- == Bryan Wright|If you take cranberries and stew them like Physics Department | applesauce, they taste much more like prunes University of Virginia | than rhubarb does. -- Groucho Charlottesville, VA 22901 | (434) 924-7218 | [EMAIL PROTECTED] == -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba LDAP Tools and mkntpwd
On Fri, 2005-12-02 at 15:43 -0500, Collins, Kevin wrote: I'm in the middle of Samba 3.0.9 == 3.0.14a migration testing. Because I'm using newer tools, I am also using a newer verions of the Samba LDAP Tools. My older version, 0.8.4, used the 'mkntpwd' utility to generate NT passwords. The new version, 0.9.1 defaults to using (what looks like) a Perl module called Crypt::SmbHash. My questions: Do I need to continue to use mkntpwd? Will I need to reset all the passwords for my users if I move to Crypt::SmbHash? Or will it just work if I leave the defaults alone? I think that an smb hashed password is going to be an smb hashed password regardless of the tool used to create it. Otherwise, how could the Windows user log in? Craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] PDC/BDC Load-Balanced?
[netlogon] is a must to keep in sync. You might also define where the profiles are to come from more specifically, rather than \\%L\%U maybe you want to say \\staticservername\%U or define each user as living on a particular server in their account details, assuming you use tdb or ldap. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] security=server, port 445 and winnt
This is man smb.conf smb ports (G) Specifies which ports the server should listen on for SMB traffic. Default: smb ports = 445 139 So I guess you can just smb ports = 139. On 12/2/05, Bryan K. Wright [EMAIL PROTECTED] wrote: Hi folks, I'm running several samba servers that use security= server and password server to point authentications to a WinNT pdc. Snooping at the network traffic, I find that the samba server initially tries to connect to the WinNT server through port 445 (which fails), then reverts to 139 (which succeeds). I know it's possible to use the samba ports parameter to control which ports the samba server listens on, but this seems to have no effect on which ports are used to talk to the password server. I'd like to tell the samba server not to try port 445, since the failover seems to add a few seconds to the time necessary for clients to establish a connection to the samba server. Any ideas? BTW, the samba version is 3.0.20. Thanks, Bryan -- == Bryan Wright|If you take cranberries and stew them like Physics Department | applesauce, they taste much more like prunes University of Virginia | than rhubarb does. -- Groucho Charlottesville, VA 22901 | (434) 924-7218 | [EMAIL PROTECTED] == -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: security=server, port 445 and winnt
Hi Sharif, Thanks for your reply, but as I said in my post the smb ports option only controls which ports the samba server listens on. It doesn't (determined experimentally) control how the samba server tries to communicate with the password server. That's what I'm trying to do here. Bryan sharif islam [EMAIL PROTECTED] wrote: This is man smb.conf smb ports (G) Specifies which ports the server should listen on for SMB traffic. Default: smb ports = 445 139 So I guess you can just smb ports = 139. -- == Bryan Wright|If you take cranberries and stew them like Physics Department | applesauce, they taste much more like prunes University of Virginia | than rhubarb does. -- Groucho Charlottesville, VA 22901 | (434) 924-7218 | [EMAIL PROTECTED] == -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.9 == 3.0.14a migration LDIF problem
On Fri, 2005-12-02 at 08:21 -0500, Collins, Kevin wrote: Andrew and Craig: Thank you both for replying. Following Andrew's advice, I set out to add the line objectClass: account to all of my computer accounts in the LDIF. (None of them had this declaration) When I run the LDIF import, I get this error: slapadd: dn=uid=stargazer$,ou=Computers,dc=nesbitt,dc=local (line=2415): (65) invalid structural object class chain (inetOrgPerson/account) My gut tells me the new definition minus the objectClass: account is the way to go, but before I do anything else, I'd like to know. I personally don't think of my computers as people, so I would choose account as the structural class for computers. (Actually, on my network I used device). account, device and inetOrgPerson are structural classes, and a single entry can only be one of them. Pick one :-) Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba LDAP Tools and mkntpwd
On Fri, 2005-12-02 at 13:53 -0700, Craig White wrote: On Fri, 2005-12-02 at 15:43 -0500, Collins, Kevin wrote: I'm in the middle of Samba 3.0.9 == 3.0.14a migration testing. Because I'm using newer tools, I am also using a newer verions of the Samba LDAP Tools. My older version, 0.8.4, used the 'mkntpwd' utility to generate NT passwords. The new version, 0.9.1 defaults to using (what looks like) a Perl module called Crypt::SmbHash. My questions: Do I need to continue to use mkntpwd? Will I need to reset all the passwords for my users if I move to Crypt::SmbHash? Or will it just work if I leave the defaults alone? I think that an smb hashed password is going to be an smb hashed password regardless of the tool used to create it. Otherwise, how could the Windows user log in? Yes. One is a perl port of the C routines, while the older mkntwpd is just that particular C file compiled standalone. If the perl code does the unicode translation right, it might even be more accurate for non-ASCII. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] roaming profiles odd.
On Fri, 2005-12-02 at 13:39 -0500, Jack Mendez wrote: using samba 3.14a, windows xp sp2 configured with roaming profiles. the profile seems to download properly but the start menu seems to be empty of shortcuts. anything tht requires reading of files seems to be acting strangely the files exist on the server but somehow they are not read on the workstation all of the /profiles/username directories are configured exactly the same. drwx-- 13 mmyuser staff 4096 2005-12-01 15:00 agarceau drwx-- 14 guest1guest14096 2005-12-01 17:43 guest1 the /profiles dir has the following permissions. drwxrwsr-x 17 root root 4096 2005-11-30 11:43 profiles etc. not sure what i have wrong here but any ideas would be great. Since you didn't follow the instructions and answering the questions I asked you to verify a few days ago, I hesitated in answering this. It strikes me as logical to find out the common 'Domain Users' group that all users would belong to... # net groupmap list|grep Domain Users Domain Users (S-1-5-21-XX-XX-XX-513) - dom_users note that the posix(unix/linx) name for the group is dom_users. All of my users belong to that group - thus their sambaPrimaryGroupSID is that SID. chmod 775 /profiles chgrp dom_users /profiles -R The person who suggested that you set /profiles to 777 probably would have worked but then you went and made it setguid which has to interfere with that logic. This concept (setting /profiles to 777) probably is a better idea if you have a lot of users and aren't going to make their primary group the same but you are going to have to work it through. If you are gonna do it this way, I would suggest that you... chmod g-s /profiles chmod 700 /profiles/* -R Note - the two methods I have suggested are mutually exclusive. Craig PS - your top mounted replies make it harder to respond to you. - your lack of answers to the things that I asked you to verify previously made me stop answering -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba LDAP Tools and mkntpwd
On Sat, 2005-12-03 at 09:10 +1100, Andrew Bartlett wrote: On Fri, 2005-12-02 at 13:53 -0700, Craig White wrote: On Fri, 2005-12-02 at 15:43 -0500, Collins, Kevin wrote: I'm in the middle of Samba 3.0.9 == 3.0.14a migration testing. Because I'm using newer tools, I am also using a newer verions of the Samba LDAP Tools. My older version, 0.8.4, used the 'mkntpwd' utility to generate NT passwords. The new version, 0.9.1 defaults to using (what looks like) a Perl module called Crypt::SmbHash. My questions: Do I need to continue to use mkntpwd? Will I need to reset all the passwords for my users if I move to Crypt::SmbHash? Or will it just work if I leave the defaults alone? I think that an smb hashed password is going to be an smb hashed password regardless of the tool used to create it. Otherwise, how could the Windows user log in? Yes. One is a perl port of the C routines, while the older mkntwpd is just that particular C file compiled standalone. If the perl code does the unicode translation right, it might even be more accurate for non-ASCII. my experiences with perl is that this is never a given. ;-) Craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Problem with Samba Timestamp
I have a problem with timestamps. Files that are being modified/copies/etc coming from QNX hosts that are mounting the samba share using mount smbfs against a samba server running Sun Solaris 9. If the two servers are in the same time zone, the time stamps are correct. However if the QNX host is in the Eastern Time zone for example, the timestamp on the file is in the future. The time zone for the samba host is pacific. We verified that timezone settings in all the hosts are correct and that the current time is correct. What could be causing this? Nathan Keeter -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] file shown as open
I migrate a server from smba2 to samba3. I am using version 3.0.20b. the prolem is the following. user A run a program, that program use a flat file database. user A close the program, but the flat file db and some other files showns in smbstatus as open. oplocks for the flat file extension (.DAT AND .TPS) are disabled. tHE software is made on clarion for windows. the server running samba 2.2 seems to release the file almost inmediately. any ideas ??? thanks! RP -- Raúl D. Pittí Palma Associate Global Engineering and Technologies mobile (507)-6616-0194 office (507)-264-2362 Republic of Panama www.globaltecsa.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Shares Problem
Folks, I'm running SUSE Pro 9.3 with Samba 3.0.13, and I have LAN with 2 subnets. The problem (or the symptom; I may actually have two problems) is that I can't get into some of the shares from my Win2k box (one subnet) or from my XP laptop (other subnet). The directory structure is /data /data/accounts /data/finsvcs and the shares are accounts and finsvcs. /data is owned by root:root, while the share directories are owned by mfwic:accounts and mfwic:finsvcs. Each user can get into his own /home/directory just fine, and I've confirmed that the users are correctly entered in the passwd and smbpasswd files (as also implied by being able to get into the /home directories). User access to the shares is granted via valid user=%G. From the windows devices, it's possible to browse over to (or to go via Network Neighborhood), and see, the shares, but entering is denied--the Windows devices invite me to log in and then reject the login. Winbindd is running, and the windows devices are pointed to the samba box for the WINS service. I've run the checklist from TOSHARG2, and the only items that _don't_ work are smbclient //lserver0/accounts -Uuser (including mfwic). That gets me a tree connect failed: NT_STATUS_ACCESS_DENIED error. However, if I run smbclient //lserver0/accounts -Uroot with the root password, I get into the shares. I cannot ping by name the machines (PC and laptop) from lserver0, the samba box, or lserver0 from the windows machine. I can ping in both directions by IP address. nmblookup -B xxx '*' works when xxx=IP address, fails when xxx=machine name. net use x: \\lserver0\accounts fails with a bad password error from my Win2k PC, and with a multiple connections not allowed error from my XP laptop. Any advice would be greatly appreciated. Eric Hines There is no nonsense so errant that it cannot be made the creed of the vast majority by adequate governmental action. --Bertrand Russell -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba timekeeping
Just wondering why Samba time and system time are different. Eg: # net time;date Sat Dec 3 12:56:57 2005 Sat Dec 3 12:56:22 EST 2005 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Problem Access Linux Folder From win2000 !!
hello . I try to access my SUSE Linux Folder ( /data ) from my win2000. I use Samba at my Linux. i already make my smb.conf just like this one : [global] workgroup = SMARTGROUP netbios name = linux security = share [data] comment = data path = /data guest ok = yes read only = no when i look at my network place in my win2000, there is one workgroup name SMARTGROUP. In that groups i have 2 computer names, they are : server2000 ( my win2000 have same workgroup's name ) and linux ( my suse linux ). But when i try to open my Linux, it always said \\LINUX network path not found I already try it for 2 days and still don't know what is the problem and how to solve this problem. for Note. In my win2000 i already install TCP/IP protocol, ipx/spx and netbeui protocol. I hope someone could help me !!! Thanx and Best Regards Ronny Widjaja -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Fwd: [Fwd: [Samba] Problem with setting Normal attribute for a file owned by another user]]
Hi Everyone, I thought I'd ask again and maybe someone knows the answer.. How come I can read/write to files on a share with any user, but the Normal attribute can only be set by the owner of the file. Is this by design or am I not setting the right configuration? How is the Normal attribute being handled in Samba? Thanks, Oleg. Original Message Subject: [Samba] Problem with setting Normal attribute for a file owned by another user Date: Wed, 30 Nov 2005 13:16:07 -0600 From: Oleg Starshinov [EMAIL PROTECTED] To: samba@lists.samba.org Hi Everyone, We have a Samba 3.0.20b server running in a multi-user environment. There is a serveruser username that does batch processing on the files using VB.NET code. There are many other regular users: user1, user2, etc... They are all part of the users group If user1 opens up a file in Excel, it changes the ownership on the file and permissions to: User - rwe Group - rw- Other - --- The default setting is: User - rwe Group - rwe Other - --- I can live with the change of the permissions, but it also changes the ownership from serveruser to user1. As part of my code, the server applies a Normal attribute to the files once it is done copying them. It works fine when the serveruser is the owner of the file, but when someone else owns the file an exception is raised. This is the line of code: File.SetAttributes(myFile.FullName, FileAttributes.Normal) I can open and save the files with any user name, but the setting of the attribute is only allowed if I own the file. Is this by design or am I missing something? As a workaround I included this line in the conf file: force user = serveruser I would rather have the last user that saved the file to be registered as the owner. Here is the conf file relating to that share: writeable = yes path = /data force user = serveruser write list = @users force directory mode = 2775 force group = users valid users = user1,user2,serveruser,@users create mode = 0771 directory mode = 2775 Thanks, Oleg. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.20rc2 Available for Download
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 == I need a good quote. Anyone got one? -- Gerald Carter == Release Announcements = This is a release candidate of the 3.0.21 code base and is provided for testing purposes only. While this snapshot is *not* intended for production servers, we do believe that this will become the 3.0.21 final release. Your testing and feedback is greatly appreciated. If all goes well, you should see the final 3.0.21 release within 2 weeks. Common bugs fixed in 3.0.21 include: ~ o Missing groups in a user's token when logging in via kerberos ~ o Incompatibilities with newer MS Windows hotfixes and ~embedded OS platforms ~ o Portability and crash bugs. ~ o Performance issues in winbindd. New features introduced in Samba 3.0.21 include: ~ o Complete NTLMv2 support by consolidating authentication ~mechanism used at the CIFS and RPC layers. ~ o The capability to manage Unix services using the Win32 ~Service Control API. ~ o The capability to view external Unix log files via the ~Microsoft Event Viewer. ~ o New libmsrpc share library for application developers. ~ o Rewrite of CIFS oplock implementation. ~ o Performance Counter external daemon. ~ o Winbindd auto-detection query methods when communicating with ~a domain controller. Download Details The uncompressed tarballs and patch files have been signed using GnuPG (ID 157BC95E). The source code can be downloaded from: http://download.samba.org/samba/ftp/rc/ The release notes (WHATSNEW-3-0-21rc2.txt) are available in the same download directory as the source distribution. Binary packages are available at http://download.samba.org/samba/ftp/Binary_Packages/ Our Code, Our Bugs, Our Responsibility. (https://bugzilla.samba.org/) --Enjoy The Samba Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDkO/eIR7qMdg1EfYRAjNkAKCe7QVPri/ueo5Syv0OjKMjY7iMvACdEJcQ Jag5zg5Gs9AHshAPv4nvfBc= =3m6/ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
svn commit: samba r12015 - branches/SAMBA_3_0/source/client trunk/source/client
Author: gd Date: 2005-12-02 10:26:29 + (Fri, 02 Dec 2005) New Revision: 12015 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12015 Log: When smbspool tries to connect to a printer shared on a standalone Windows XP box, smbspool has to mimic smbclient behaviour and also send a password-less NTLMSSP session setup. Guenther Modified: branches/SAMBA_3_0/source/client/smbspool.c trunk/source/client/smbspool.c Changeset: Modified: branches/SAMBA_3_0/source/client/smbspool.c === --- branches/SAMBA_3_0/source/client/smbspool.c 2005-12-02 07:30:34 UTC (rev 12014) +++ branches/SAMBA_3_0/source/client/smbspool.c 2005-12-02 10:26:29 UTC (rev 12015) @@ -461,6 +461,7 @@ { struct cli_state *cli;/* New connection */ pstringmyname;/* Client name */ + struct passwd *pwd; /* * Get the names and addresses of the client and server... @@ -488,12 +489,24 @@ if (cli ) { return cli; } + /* give a chance for a passwordless NTLMSSP session setup */ + + pwd = getpwuid(geteuid()); + if (pwd == NULL) { + return NULL; + } + + cli = smb_complete_connection(myname, server, port, pwd-pw_name, , +workgroup, share, 0); + + if (cli) { return cli; } + /* * last try. Use anonymous authentication */ + cli = smb_complete_connection(myname, server, port, , , workgroup, share, 0); - /* * Return the new connection... */ Modified: trunk/source/client/smbspool.c === --- trunk/source/client/smbspool.c 2005-12-02 07:30:34 UTC (rev 12014) +++ trunk/source/client/smbspool.c 2005-12-02 10:26:29 UTC (rev 12015) @@ -461,6 +461,7 @@ { struct cli_state *cli;/* New connection */ pstringmyname;/* Client name */ + struct passwd *pwd; /* * Get the names and addresses of the client and server... @@ -488,12 +489,24 @@ if (cli ) { return cli; } + /* give a chance for a passwordless NTLMSSP session setup */ + + pwd = getpwuid(geteuid()); + if (pwd == NULL) { + return NULL; + } + + cli = smb_complete_connection(myname, server, port, pwd-pw_name, , +workgroup, share, 0); + + if (cli) { return cli; } + /* * last try. Use anonymous authentication */ + cli = smb_complete_connection(myname, server, port, , , workgroup, share, 0); - /* * Return the new connection... */
svn commit: samba r12016 - in branches/SAMBA_4_0/source/librpc/ndr: .
Author: tridge Date: 2005-12-02 11:33:19 + (Fri, 02 Dec 2005) New Revision: 12016 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12016 Log: fixed a valgrind error Modified: branches/SAMBA_4_0/source/librpc/ndr/ndr_basic.c Changeset: Modified: branches/SAMBA_4_0/source/librpc/ndr/ndr_basic.c === --- branches/SAMBA_4_0/source/librpc/ndr/ndr_basic.c2005-12-02 10:26:29 UTC (rev 12015) +++ branches/SAMBA_4_0/source/librpc/ndr/ndr_basic.c2005-12-02 11:33:19 UTC (rev 12016) @@ -132,7 +132,7 @@ { NTSTATUS status; status = ndr_pull_uint32(ndr, NDR_SCALARS, v); - if (*v != 0) { + if (NT_STATUS_IS_OK(status) *v != 0) { ndr-ptr_count++; } return status;
svn commit: samba r12017 - in branches/SAMBA_3_0_RELEASE: . examples/VFS source source/auth source/client source/include source/lib source/libads source/nsswitch source/param source/passdb source/rpc_
Author: jerry Date: 2005-12-02 13:33:07 + (Fri, 02 Dec 2005) New Revision: 12017 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12017 Log: starting the sync up for 3.0.21. Gotten through r11915 so far. Jeremy, This is turning out ot be more changes that I anticipated and may end up being a full sync. But the changes appear sar or on a non-default code path. Modified: branches/SAMBA_3_0_RELEASE/WHATSNEW.txt branches/SAMBA_3_0_RELEASE/examples/VFS/skel_opaque.c branches/SAMBA_3_0_RELEASE/source/Makefile.in branches/SAMBA_3_0_RELEASE/source/VERSION branches/SAMBA_3_0_RELEASE/source/auth/auth_sam.c branches/SAMBA_3_0_RELEASE/source/client/client.c branches/SAMBA_3_0_RELEASE/source/client/smbspool.c branches/SAMBA_3_0_RELEASE/source/configure.in branches/SAMBA_3_0_RELEASE/source/include/includes.h branches/SAMBA_3_0_RELEASE/source/include/libsmbclient.h branches/SAMBA_3_0_RELEASE/source/include/rpc_eventlog.h branches/SAMBA_3_0_RELEASE/source/include/rpc_samr.h branches/SAMBA_3_0_RELEASE/source/lib/crc32.c branches/SAMBA_3_0_RELEASE/source/lib/smbldap.c branches/SAMBA_3_0_RELEASE/source/lib/snprintf.c branches/SAMBA_3_0_RELEASE/source/lib/system.c branches/SAMBA_3_0_RELEASE/source/libads/kerberos_verify.c branches/SAMBA_3_0_RELEASE/source/libads/ldap.c branches/SAMBA_3_0_RELEASE/source/nsswitch/winbind_nss_solaris.c branches/SAMBA_3_0_RELEASE/source/nsswitch/winbindd.h branches/SAMBA_3_0_RELEASE/source/nsswitch/winbindd_ads.c branches/SAMBA_3_0_RELEASE/source/nsswitch/winbindd_cache.c branches/SAMBA_3_0_RELEASE/source/nsswitch/winbindd_misc.c branches/SAMBA_3_0_RELEASE/source/nsswitch/winbindd_pam.c branches/SAMBA_3_0_RELEASE/source/nsswitch/winbindd_passdb.c branches/SAMBA_3_0_RELEASE/source/nsswitch/winbindd_reconnect.c branches/SAMBA_3_0_RELEASE/source/nsswitch/winbindd_rpc.c branches/SAMBA_3_0_RELEASE/source/param/loadparm.c branches/SAMBA_3_0_RELEASE/source/passdb/pdb_ldap.c branches/SAMBA_3_0_RELEASE/source/passdb/pdb_nds.c branches/SAMBA_3_0_RELEASE/source/rpc_client/cli_lsarpc.c branches/SAMBA_3_0_RELEASE/source/rpc_parse/parse_eventlog.c branches/SAMBA_3_0_RELEASE/source/rpc_parse/parse_samr.c branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_eventlog_lib.c branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_eventlog_nt.c branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_samr.c branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_samr_nt.c branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_util.c branches/SAMBA_3_0_RELEASE/source/rpcclient/cmd_lsarpc.c branches/SAMBA_3_0_RELEASE/source/rpcclient/cmd_samr.c branches/SAMBA_3_0_RELEASE/source/script/installman.sh branches/SAMBA_3_0_RELEASE/source/script/mkproto.awk branches/SAMBA_3_0_RELEASE/source/services/services_db.c branches/SAMBA_3_0_RELEASE/source/smbd/dosmode.c branches/SAMBA_3_0_RELEASE/source/smbd/filename.c branches/SAMBA_3_0_RELEASE/source/smbd/session.c branches/SAMBA_3_0_RELEASE/source/smbd/sesssetup.c branches/SAMBA_3_0_RELEASE/source/utils/eventlogadm.c branches/SAMBA_3_0_RELEASE/source/utils/net_lookup.c branches/SAMBA_3_0_RELEASE/source/utils/smbget.c Changeset: Sorry, the patch is too large (4063 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12017
svn commit: samba r12018 - in branches/SAMBA_3_0_RELEASE: examples/logon/mklogon examples/perfcounter source source/auth source/client source/include source/lib source/libsmb source/nsswitch source/pa
Author: jerry Date: 2005-12-02 14:18:11 + (Fri, 02 Dec 2005) New Revision: 12018 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12018 Log: more 3.0.21 changes. This is a full sync except for changes to rpc-server/rpc_samr*.c Modified: branches/SAMBA_3_0_RELEASE/examples/logon/mklogon/mklogon.conf branches/SAMBA_3_0_RELEASE/examples/logon/mklogon/mklogon.pl branches/SAMBA_3_0_RELEASE/examples/perfcounter/perf_writer_util.c branches/SAMBA_3_0_RELEASE/source/Makefile.in branches/SAMBA_3_0_RELEASE/source/auth/auth_rhosts.c branches/SAMBA_3_0_RELEASE/source/auth/auth_util.c branches/SAMBA_3_0_RELEASE/source/client/client.c branches/SAMBA_3_0_RELEASE/source/client/mount.cifs.c branches/SAMBA_3_0_RELEASE/source/client/smbspool.c branches/SAMBA_3_0_RELEASE/source/include/passdb.h branches/SAMBA_3_0_RELEASE/source/include/rpc_dce.h branches/SAMBA_3_0_RELEASE/source/include/rpc_netlogon.h branches/SAMBA_3_0_RELEASE/source/include/rpc_samr.h branches/SAMBA_3_0_RELEASE/source/include/talloc.h branches/SAMBA_3_0_RELEASE/source/lib/talloc.c branches/SAMBA_3_0_RELEASE/source/lib/tallocmsg.c branches/SAMBA_3_0_RELEASE/source/lib/util_unistr.c branches/SAMBA_3_0_RELEASE/source/libsmb/cliconnect.c branches/SAMBA_3_0_RELEASE/source/libsmb/clientgen.c branches/SAMBA_3_0_RELEASE/source/nsswitch/wbinfo.c branches/SAMBA_3_0_RELEASE/source/param/loadparm.c branches/SAMBA_3_0_RELEASE/source/passdb/lookup_sid.c branches/SAMBA_3_0_RELEASE/source/passdb/passdb.c branches/SAMBA_3_0_RELEASE/source/passdb/pdb_interface.c branches/SAMBA_3_0_RELEASE/source/passdb/pdb_ldap.c branches/SAMBA_3_0_RELEASE/source/passdb/util_sam_sid.c branches/SAMBA_3_0_RELEASE/source/printing/print_svid.c branches/SAMBA_3_0_RELEASE/source/registry/reg_eventlog.c branches/SAMBA_3_0_RELEASE/source/registry/reg_printing.c branches/SAMBA_3_0_RELEASE/source/rpc_client/cli_netlogon.c branches/SAMBA_3_0_RELEASE/source/rpc_client/cli_samr.c branches/SAMBA_3_0_RELEASE/source/rpc_parse/parse_lsa.c branches/SAMBA_3_0_RELEASE/source/rpc_parse/parse_net.c branches/SAMBA_3_0_RELEASE/source/rpc_parse/parse_samr.c branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_netlog_nt.c branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_pipe.c branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_pipe_hnd.c branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_samr_nt.c branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_spoolss_nt.c branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_srvsvc_nt.c branches/SAMBA_3_0_RELEASE/source/rpc_server/srv_util.c branches/SAMBA_3_0_RELEASE/source/rpcclient/cmd_lsarpc.c branches/SAMBA_3_0_RELEASE/source/rpcclient/cmd_netlogon.c branches/SAMBA_3_0_RELEASE/source/rpcclient/cmd_samr.c branches/SAMBA_3_0_RELEASE/source/smbd/dosmode.c branches/SAMBA_3_0_RELEASE/source/smbd/filename.c branches/SAMBA_3_0_RELEASE/source/utils/smbcontrol.c branches/SAMBA_3_0_RELEASE/source/utils/testparm.c Changeset: Sorry, the patch is too large (4647 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12018
svn commit: samba r12019 - in branches/SAMBA_4_0/source/ntvfs/posix: .
Author: metze Date: 2005-12-02 14:53:56 + (Fri, 02 Dec 2005) New Revision: 12019 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12019 Log: - let us only reference libblkid stuff in one file - and make it it bit simpler, by caching the GUID struct instead of the device name - and this also removes all compiler warnings... metze Modified: branches/SAMBA_4_0/source/ntvfs/posix/pvfs_fsinfo.c branches/SAMBA_4_0/source/ntvfs/posix/vfs_posix.c branches/SAMBA_4_0/source/ntvfs/posix/vfs_posix.h Changeset: Modified: branches/SAMBA_4_0/source/ntvfs/posix/pvfs_fsinfo.c === --- branches/SAMBA_4_0/source/ntvfs/posix/pvfs_fsinfo.c 2005-12-02 14:18:11 UTC (rev 12018) +++ branches/SAMBA_4_0/source/ntvfs/posix/pvfs_fsinfo.c 2005-12-02 14:53:56 UTC (rev 12019) @@ -26,19 +26,62 @@ /* We use libblkid out of e2fsprogs to identify UUID of a volume */ #ifdef HAVE_LIBBLKID -static int blkid_cache_destructor(void * cache_wrap) { - blkid_cache_wrap_t * cache = (blkid_cache_wrap_t *)cache_wrap; - blkid_put_cache(cache-cache); - if(cache-devname) free((void *)cache-devname); - return 0; +#include blkid/blkid.h +#endif + +static NTSTATUS pvfs_blkid_fs_uuid(struct pvfs_state *pvfs, struct stat *st, struct GUID *uuid) +{ +#ifdef HAVE_LIBBLKID + NTSTATUS status; + char *uuid_value = NULL; + char *devname = NULL; + + devname = blkid_devno_to_devname(st-st_dev); + if (!devname) { + return NT_STATUS_DEVICE_CONFIGURATION_ERROR; + } + + uuid_value = blkid_get_tag_value(NULL, UUID, devname); + free(devname); + if (!uuid_value) { + return NT_STATUS_DEVICE_CONFIGURATION_ERROR; + } + + status = GUID_from_string(uuid_value, uuid); + free(uuid_value); + if (!NT_STATUS_IS_OK(status)) { + return NT_STATUS_DEVICE_CONFIGURATION_ERROR; + } + return NT_STATUS_OK; +#else + ZERO_STRUCTP(uuid); + return NT_STATUS_OK; +#endif } -#endif + +static NTSTATUS pvfs_cache_base_fs_uuid(struct pvfs_state *pvfs, struct stat *st) +{ + NTSTATUS status; + struct GUID uuid; + + if (pvfs-base_fs_uuid) return NT_STATUS_OK; + + status = pvfs_blkid_fs_uuid(pvfs, st, uuid); + NT_STATUS_NOT_OK_RETURN(status); + + pvfs-base_fs_uuid = talloc(pvfs, struct GUID); + NT_STATUS_HAVE_NO_MEMORY(pvfs-base_fs_uuid); + *pvfs-base_fs_uuid = uuid; + + return NT_STATUS_OK; +} /* return filesystem space info */ NTSTATUS pvfs_fsinfo(struct ntvfs_module_context *ntvfs, struct smbsrv_request *req, union smb_fsinfo *fs) { + NTSTATUS status; struct pvfs_state *pvfs = ntvfs-private_data; uint64_t blocks_free, blocks_total; uint_t bpunit; @@ -145,38 +188,15 @@ return NT_STATUS_OK; case RAW_QFS_OBJECTID_INFORMATION: - { -#ifdef HAVE_LIBBLKID - NTSTATUS status; - const char *uuid_value; -#endif - ZERO_STRUCT(fs-objectid_information.out); -#ifdef HAVE_LIBBLKID - if (!pvfs-blkid_cache) { - pvfs-blkid_cache = talloc(ntvfs, blkid_cache_wrap_t); - - if (!pvfs-blkid_cache) { - return NT_STATUS_NO_MEMORY; - } - - pvfs-blkid_cache-cache = NULL; - pvfs-blkid_cache-devname = blkid_devno_to_devname(st.st_dev); - - talloc_set_destructor(pvfs-blkid_cache, blkid_cache_destructor); - - if (blkid_get_cache(pvfs-blkid_cache-cache,NULL) 0 ) { - return NT_STATUS_DEVICE_CONFIGURATION_ERROR; - } - } - - if ((uuid_value = blkid_get_tag_value(pvfs-blkid_cache-cache, - UUID, pvfs-blkid_cache-devname))) { - GUID_from_string(uuid_value, fs-objectid_information.out.guid); - free((void*)uuid_value); - } -#endif + ZERO_STRUCT(fs-objectid_information.out.guid); + ZERO_STRUCT(fs-objectid_information.out.unknown); + + status = pvfs_cache_base_fs_uuid(pvfs, st); + NT_STATUS_NOT_OK_RETURN(status); + + fs-objectid_information.out.guid = *pvfs-base_fs_uuid; return NT_STATUS_OK; - } + default: break; } Modified: branches/SAMBA_4_0/source/ntvfs/posix/vfs_posix.c === --- branches/SAMBA_4_0/source/ntvfs/posix/vfs_posix.c 2005-12-02 14:18:11 UTC (rev 12018) +++
svn commit: samba r12020 - in branches/SAMBA_4_0/source/libcli/nbt: .
Author: metze Date: 2005-12-02 15:02:21 + (Fri, 02 Dec 2005) New Revision: 12020 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12020 Log: fix memory hierachie metze Modified: branches/SAMBA_4_0/source/libcli/nbt/namequery.c Changeset: Modified: branches/SAMBA_4_0/source/libcli/nbt/namequery.c === --- branches/SAMBA_4_0/source/libcli/nbt/namequery.c2005-12-02 14:53:56 UTC (rev 12019) +++ branches/SAMBA_4_0/source/libcli/nbt/namequery.c2005-12-02 15:02:21 UTC (rev 12020) @@ -108,7 +108,7 @@ } for (i=0;iio-out.num_addrs;i++) { - io-out.reply_addrs[i] = talloc_steal(mem_ctx, + io-out.reply_addrs[i] = talloc_steal(io-out.reply_addrs, packet-answers[0].rdata.netbios.addresses[i].ipaddr); } io-out.reply_addrs[i] = NULL;
svn commit: samba r12025 - in branches/SAMBA_3_0_RELEASE: .
Author: jerry Date: 2005-12-02 17:25:49 + (Fri, 02 Dec 2005) New Revision: 12025 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12025 Log: finishing up release notes Modified: branches/SAMBA_3_0_RELEASE/WHATSNEW.txt Changeset: Modified: branches/SAMBA_3_0_RELEASE/WHATSNEW.txt === --- branches/SAMBA_3_0_RELEASE/WHATSNEW.txt 2005-12-02 15:51:39 UTC (rev 12024) +++ branches/SAMBA_3_0_RELEASE/WHATSNEW.txt 2005-12-02 17:25:49 UTC (rev 12025) @@ -8,7 +8,7 @@ bug-fixes. Please read the following important changes in this release. -Common bugs fixed in 3.0.21rc1 include: +Common bugs fixed in 3.0.21 include: o Missing groups in a user's token when logging in via kerberos o Incompatibilities with newer MS Windows hotfixes and @@ -16,7 +16,7 @@ o Portability and crash bugs. o Performance issues in winbindd. -New features introduced in Samba 3.0.21rc1 include: +New features introduced in Samba 3.0.21 include: o Complete NTLMv2 support by consolidating authentication mechanism used at the CIFS and RPC layers. @@ -45,6 +45,7 @@ eventlog list New iprint server New map read only New +passdb expand explicit New rename user script New reset on zero vc New svcctl listRenamed from 'enable svcctl' @@ -56,7 +57,8 @@ commits --- o Jeremy Allison [EMAIL PROTECTED] -* Remove #define of close - close_fn maxcor in libsmbclient. +* Filter stored DOS attributes by SAMBA_ATTRIBUTES_MASK. +* Remove #define of close - close_fn macro in libsmbclient. * Return early if -1 returned from *BSD EA call (reported by Timur). * Name space cleanup by marking local functions static. @@ -66,6 +68,16 @@ OS/2 servers (based on patch from Guenter Kukkukk). * Ensure default applies to new files (reported by Thomas Neumann). +* BUG 3293: Use SMBecho to testing the server in client rather + than SMBchkpath. +* Merge talloc fixes from Samba 4 branch. +* Add support DCE/RPC cancel operation. +* Don't reset attrs to zero in EA get. Fixes 'hide dot files' + when using EA for DOS attributes. +* Fix bug in returning remote time (reported by Thomas Bork). +* No users or groups to return in BUILTIN domain. +* Removed separate builtin search enumeration. +* Added count_sam_aliases to return the correct alias count. o Rashid N. Achilov [EMAIL PROTECTED] @@ -94,27 +106,47 @@ o Guenther Deschner [EMAIL PROTECTED] -* Avoid an inifinite loop when retying to connect in smbspool. +* Avoid an infinite loop when retrying to connect in smbspool. * Memory leak fixes in the kerberos PAC parsing code. * Improve NT_STATUS error messages returned from pam_winbind. * Rename unknown samr group fields in samr structures with - the correct name. + the correct name.removed separate builtin search enumeration. * Cleanup redundant StartTLS code. * Allow StartTLS support when connecting to Windows 2003 by setting 'ldap ssl = start_tls'. +* Support raw NTLMSSP session setups in smbspool. +* Add rpccli_samr_chgpasswd3(). +* Add 'wbinfo --separator'. o Volker Lendecke [EMAIL PROTECTED] -* Removed unused alternative_name cocde from winbindd. +* Removed unused alternative_name code from winbindd. * Protect against NULL alternative_name strings in winbindd. * Define a default panic action with -DEVELOPER is defined. -* Add the capability ot reset smbd connections on a zero VC id. +* Add the capability to reset smbd connections on a zero VC id. +* Allow smb.conf variable expansion to be disabled in passdb + backends. +* Add lookupname to rpcclient query_user as a fallback. +* BUG 3292: Prevent smbclient from spinning when the server + disconnects. +* BUG 2191: Fix valgrind error in cli_session_setup_guest(). +* Add samr_lookup_rids for the builtin domain. +* Memory allocation cleanups in passdb. +* Restrict samr_open_domain() to our domain only. +* Change local_lookup_sid() to local_lookup_rid() since it + is responsible for our domain only. o Jim McDonough [EMAIL PROTECTED] * BUG 3187: Fix time zone offset in logon hours restrictions. +o Steve French [EMAIL PROTECTED] +* Fix cifs to handle non-numeric uid and gid parameters. +* Merge trunk and SAMBA_3_0 mount.cifs code. +* Cleanup cifs cfs help message. + + o Lars Müller [EMAIL PROTECTED] * Only install smbsh manpage if smbwrapper has been successfully built. @@ -129,6 +161,15 @@ reloading the printer name cache. +o Marcin Porwit [EMAIL PROTECTED] +* Fix directory permissions in the perfcounter daemon. +* Add
svn commit: samba r12026 - in branches/SAMBA_3_0_RELEASE: . source
Author: jerry Date: 2005-12-02 19:28:55 + (Fri, 02 Dec 2005) New Revision: 12026 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12026 Log: changing version and release notes to 3.0.21rc2 Modified: branches/SAMBA_3_0_RELEASE/WHATSNEW.txt branches/SAMBA_3_0_RELEASE/source/VERSION Changeset: Modified: branches/SAMBA_3_0_RELEASE/WHATSNEW.txt === --- branches/SAMBA_3_0_RELEASE/WHATSNEW.txt 2005-12-02 17:25:49 UTC (rev 12025) +++ branches/SAMBA_3_0_RELEASE/WHATSNEW.txt 2005-12-02 19:28:55 UTC (rev 12026) @@ -1,13 +1,14 @@ - == - Release Notes for Samba 3.0.21 - Dec 3, 2005 - == + = + Release Notes for Samba 3.0.21rc2 + Dec 2, 2005 + = -This is the latest stable release of Samba. This is the version -that production Samba servers should be running for all current -bug-fixes. Please read the following important changes in this -release. +This is a release candidate of the 3.0.21 code base and is provided +for testing purposes only. While this snapshot is *not* intended +for production servers, we do believe that this will become the 3.0.21 +final release. Your testing and feedback is greatly appreciated. + Common bugs fixed in 3.0.21 include: o Missing groups in a user's token when logging in via kerberos Modified: branches/SAMBA_3_0_RELEASE/source/VERSION === --- branches/SAMBA_3_0_RELEASE/source/VERSION 2005-12-02 17:25:49 UTC (rev 12025) +++ branches/SAMBA_3_0_RELEASE/source/VERSION 2005-12-02 19:28:55 UTC (rev 12026) @@ -51,7 +51,7 @@ # e.g. SAMBA_VERSION_RC_RELEASE=1 # # - 3.0.0rc1 # -SAMBA_VERSION_RC_RELEASE= +SAMBA_VERSION_RC_RELEASE=2 # To mark SVN snapshots this should be set to 'yes'#
svn commit: samba r12027 - in branches/SAMBA_3_0/source: .
Author: jerry Date: 2005-12-02 19:30:01 + (Fri, 02 Dec 2005) New Revision: 12027 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12027 Log: changing version to 3.0.22pre1 since 3.0.21 is frozen now Modified: branches/SAMBA_3_0/source/VERSION Changeset: Modified: branches/SAMBA_3_0/source/VERSION === --- branches/SAMBA_3_0/source/VERSION 2005-12-02 19:28:55 UTC (rev 12026) +++ branches/SAMBA_3_0/source/VERSION 2005-12-02 19:30:01 UTC (rev 12027) @@ -19,7 +19,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=0 -SAMBA_VERSION_RELEASE=21 +SAMBA_VERSION_RELEASE=22 # If a official release has a serious bug # @@ -41,7 +41,7 @@ # e.g. SAMBA_VERSION_PRE_RELEASE=1 # # - 2.2.9pre1 # -SAMBA_VERSION_PRE_RELEASE=3 +SAMBA_VERSION_PRE_RELEASE=1 # For 'rc' releases the version will be#
svn commit: samba-docs r875 - in trunk/smbdotconf/security: .
Author: jht Date: 2005-12-02 19:35:10 + (Fri, 02 Dec 2005) New Revision: 875 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=875 Log: Tidy up only. Modified: trunk/smbdotconf/security/passdbexpandexplicit.xml Changeset: Modified: trunk/smbdotconf/security/passdbexpandexplicit.xml === --- trunk/smbdotconf/security/passdbexpandexplicit.xml 2005-12-01 17:03:58 UTC (rev 874) +++ trunk/smbdotconf/security/passdbexpandexplicit.xml 2005-12-02 19:35:10 UTC (rev 875) @@ -5,15 +5,12 @@ xmlns:samba=http://www.samba.org/samba/DTD/samba-doc; description para -This parameter controls whether Samba substitutes %-macros in the passdb -fields if they are explicitly set. We used to expand macros here, but this -turned out to be a bug because the Windows client can expand a variable -%G_osver% in which %G would have been substituted by the user's primary -group. + This parameter controls whether Samba substitutes %-macros in the passdb fields if they are explicitly set. We + used to expand macros here, but this turned out to be a bug because the Windows client can expand a variable + %G_osver% in which %G would have been substituted by the user's primary group. /para para -This parameter is set to yes by default, but this is about to change in -the future. +This parameter is set to yes by default, but this is about to change in the future. /para /description
svn commit: samba-docs r876 - in trunk/Samba3-HOWTO: .
Author: jht Date: 2005-12-02 19:55:41 + (Fri, 02 Dec 2005) New Revision: 876 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=876 Log: Update changed parameters for 3.0.21. Modified: trunk/Samba3-HOWTO/TOSHARG-upgrading-to-3.0.xml Changeset: Modified: trunk/Samba3-HOWTO/TOSHARG-upgrading-to-3.0.xml === --- trunk/Samba3-HOWTO/TOSHARG-upgrading-to-3.0.xml 2005-12-02 19:35:10 UTC (rev 875) +++ trunk/Samba3-HOWTO/TOSHARG-upgrading-to-3.0.xml 2005-12-02 19:55:41 UTC (rev 876) @@ -169,16 +169,18 @@ titleConfiguration Parameter Changes/title para -This section contains a brief listing of changes to smb.conf; options -in the 3.0.20 release. Please refer to the smb.conf(5) man page for -complete descriptions of new or modified parameters. +This section contains a brief listing of changes to smb.conf; options since the Samba-2.2.x series up to an +including Samba-3.0.21. Please refer to the smb.conf(5) man page for complete descriptions of new or modified +parameters. /para sect2 titleRemoved Parameters/title indextermprimarydeleted parameters/primary/indexterm -paraIn alphabetical order, these are the parameters eliminated during the Samba 3.0.0 series prior to release of Samba 3.0.20./para +para +In alphabetical order, these are the parameters eliminated from Samba-2.2.x through 3.0.21. +/para itemizedlist listitemparaadmin log /para/listitem @@ -189,11 +191,13 @@ listitemparacoding system /para/listitem listitemparadomain admin group /para/listitem listitemparadomain guest group /para/listitem + listitemparaenable svcctl/para/listitem listitemparaforce unknown acl user /para/listitem listitemparaldap filter/para/listitem listitemparamin password length (deprecated)/para/listitem listitemparant smb support /para/listitem listitemparapost script /para/listitem + listitemparaprinter admin/para/listitem listitemparaprinter driver /para/listitem listitemparaprinter driver file /para/listitem listitemparaprinter driver location /para/listitem @@ -235,7 +239,9 @@ listitemparadelete group script/para/listitem listitemparadelete user from group script/para/listitem listitemparapassdb backend/para/listitem + listitempararename user script/para/listitem listitemparaset primary group script/para/listitem + listitemparausername map script/para/listitem /itemizedlist paraAuthentication/para @@ -243,6 +249,7 @@ itemizedlist listitemparaauth methods/para/listitem listitemparaldap password sync/para/listitem + listitemparapassdb expand explicit/para/listitem listitempararealm/para/listitem /itemizedlist @@ -266,6 +273,7 @@ listitemparaserver schannel/para/listitem listitemparaserver signing/para/listitem listitemparasmb ports/para/listitem + listitemparasvcctl list/para/listitem listitemparause spnego/para/listitem /itemizedlist @@ -278,6 +286,8 @@ listitemparaacl map full control/para/listitem listitemparaaio read size/para/listitem listitemparaaio write size/para/listitem + listitemparadfree cache time/para/listitem + listitemparadfree command/para/listitem listitemparaea support/para/listitem listitemparaenable asu support/para/listitem listitemparaforce unknown acl user/para/listitem @@ -304,6 +314,7 @@ listitemparacups options/para/listitem listitemparacups server/para/listitem listitemparaforce printername/para/listitem + listitemparaiprint server/para/listitem listitemparamax reported print jobs/para/listitem listitemparaprintcap cache time/para/listitem /itemizedlist @@ -324,7 +335,9 @@ listitemparaidmap gid/para/listitem listitemparaidmap uid/para/listitem listitemparausername map script/para/listitem + listitemparawinbind enable local accounts/para/listitem listitemparawinbind nested groups/para/listitem + listitemparawinbind nss info/para/listitem listitemparawinbind trusted domains only/para/listitem listitemparatemplate primary group/para/listitem listitemparaenable rid algorithm/para/listitem @@ -346,7 +359,9 @@ paraGeneral Configuration/para itemizedlist + listitemparaeventlog list/para/listitem listitemparapreload modules/para/listitem + listitemparareset on zero vc/para/listitem listitemparaprivatedir/para/listitem /itemizedlist @@ -359,12 +374,11 @@ listitemparados filetimes (enabled by default)/para/listitem listitemparaencrypt passwords (enabled by default) /para/listitem listitemparamangling method (set to hash2 by default) /para/listitem - listitemparamap to guest (new parameter added)/para/listitem +
svn commit: samba-docs r877 - in trunk/Samba3-HOWTO: .
Author: jht Date: 2005-12-02 20:02:27 + (Fri, 02 Dec 2005) New Revision: 877 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=877 Log: Removal of parameter mistakenly readded into list. Modified: trunk/Samba3-HOWTO/TOSHARG-upgrading-to-3.0.xml Changeset: Modified: trunk/Samba3-HOWTO/TOSHARG-upgrading-to-3.0.xml === --- trunk/Samba3-HOWTO/TOSHARG-upgrading-to-3.0.xml 2005-12-02 19:55:41 UTC (rev 876) +++ trunk/Samba3-HOWTO/TOSHARG-upgrading-to-3.0.xml 2005-12-02 20:02:27 UTC (rev 877) @@ -183,33 +183,33 @@ /para itemizedlist - listitemparaadmin log /para/listitem - listitemparaalternate permissions /para/listitem - listitemparacharacter set /para/listitem - listitemparaclient codepage /para/listitem - listitemparacode page directory /para/listitem - listitemparacoding system /para/listitem - listitemparadomain admin group /para/listitem - listitemparadomain guest group /para/listitem + listitemparaadmin log/para/listitem + listitemparaalternate permissions/para/listitem + listitemparacharacter set/para/listitem + listitemparaclient codepage/para/listitem + listitemparacode page directory/para/listitem + listitemparacoding system/para/listitem + listitemparadomain admin group/para/listitem + listitemparadomain guest group/para/listitem listitemparaenable svcctl/para/listitem - listitemparaforce unknown acl user /para/listitem + listitemparaforce unknown acl user/para/listitem listitemparaldap filter/para/listitem - listitemparamin password length (deprecated)/para/listitem - listitemparant smb support /para/listitem - listitemparapost script /para/listitem + listitemparamin password length/para/listitem + listitemparant smb support/para/listitem + listitemparapost script/para/listitem listitemparaprinter admin/para/listitem - listitemparaprinter driver /para/listitem - listitemparaprinter driver file /para/listitem - listitemparaprinter driver location /para/listitem + listitemparaprinter driver/para/listitem + listitemparaprinter driver file/para/listitem + listitemparaprinter driver location/para/listitem listitempararead size/para/listitem listitemparasource environment/para/listitem listitemparastatus /para/listitem listitemparastrip dot /para/listitem - listitemparatotal print jobs /para/listitem + listitemparatotal print jobs/para/listitem listitemparaunicode/para/listitem - listitemparause rhosts /para/listitem - listitemparavalid chars /para/listitem - listitemparavfs options /para/listitem + listitemparause rhosts/para/listitem + listitemparavalid chars/para/listitem + listitemparavfs options/para/listitem listitemparawinbind enable local accounts/para/listitem /itemizedlist @@ -335,7 +335,6 @@ listitemparaidmap gid/para/listitem listitemparaidmap uid/para/listitem listitemparausername map script/para/listitem - listitemparawinbind enable local accounts/para/listitem listitemparawinbind nested groups/para/listitem listitemparawinbind nss info/para/listitem listitemparawinbind trusted domains only/para/listitem @@ -383,8 +382,8 @@ listitemparasecurity (new ads value) /para/listitem listitemparastrict locking (enabled by default) /para/listitem listitemparawinbind cache time (increased to 5 minutes) /para/listitem - listitemparawinbind uid (deprecated in favor of idmap uid) /para/listitem - listitemparawinbind gid (deprecated in favor of idmap gid) /para/listitem + listitemparawinbind uid (deprecated in favor of idmap uid)/para/listitem + listitemparawinbind gid (deprecated in favor of idmap gid)/para/listitem listitemparawinbindd nss info/para/listitem listitemparawrite cache (deprecated)/para/listitem /itemizedlist
svn commit: samba r12028 - in branches/SAMBA_3_0_RELEASE/packaging/Fedora: .
Author: jerry Date: 2005-12-02 20:08:51 + (Fri, 02 Dec 2005) New Revision: 12028 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12028 Log: fedora specfile fixes Modified: branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl Changeset: Modified: branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl === --- branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl 2005-12-02 19:30:01 UTC (rev 12027) +++ branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl 2005-12-02 20:08:51 UTC (rev 12028) @@ -213,12 +213,8 @@ ## ## Clean out man pages for tools not installed here ## -rm -f $RPM_BUILD_ROOT/%{_mandir}/man1/editreg.1* rm -f $RPM_BUILD_ROOT%{_mandir}/man1/log2pcap.1* rm -f $RPM_BUILD_ROOT%{_mandir}/man1/smbsh.1* -rm -f $RPM_BUILD_ROOT%{_mandir}/man1/smbget.1* -rm -f $RPM_BUILD_ROOT%{_mandir}/man5/smbgetrc.5* -rm -f $RPM_BUILD_ROOT/%{_mandir}/man1/testprns.1* %clean rm -rf $RPM_BUILD_ROOT @@ -343,12 +339,15 @@ %{_mandir}/man8/umount.cifs.8.* %{_mandir}/man8/smbspool.8* %{_bindir}/nmblookup +%{_bindir}/smbget %{_bindir}/smbclient %{_bindir}/smbprint %{_bindir}/smbspool %{_bindir}/smbtar %{_bindir}/net %{_bindir}/smbtree +%{_mandir}/man1/smbget.1* +%{_mandir}/man1/smbgetrc.5* %{_mandir}/man1/findsmb.1* %{_mandir}/man1/nmblookup.1* %{_mandir}/man1/rpcclient.1*
svn commit: samba r12029 - in trunk/source/param: .
Author: jra Date: 2005-12-02 20:13:09 + (Fri, 02 Dec 2005) New Revision: 12029 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12029 Log: Ensure we reset mod time on usershare service. Add a parameter usershare template share to allow admins to configure a template for all user shares. Jeremy. Modified: trunk/source/param/loadparm.c Changeset: Modified: trunk/source/param/loadparm.c === --- trunk/source/param/loadparm.c 2005-12-02 20:08:51 UTC (rev 12028) +++ trunk/source/param/loadparm.c 2005-12-02 20:13:09 UTC (rev 12029) @@ -189,6 +189,7 @@ char *szManglingMethod; char **szServicesList; char *szUsersharePath; + char *szUsershareTemplateShare; int mangle_prefix; int max_log_size; char *szLogLevel; @@ -1220,6 +1221,7 @@ {available, P_BOOL, P_LOCAL, sDefault.bAvailable, NULL, NULL, FLAG_BASIC | FLAG_ADVANCED | FLAG_SHARE | FLAG_PRINT}, {usershare max shares, P_INTEGER, P_GLOBAL, Globals.iUsershareMaxShares, NULL, NULL, FLAG_ADVANCED}, {usershare path, P_STRING, P_GLOBAL, Globals.szUsersharePath, NULL, NULL, FLAG_ADVANCED}, + {usershare template share, P_STRING, P_GLOBAL, Globals.szUsershareTemplateShare, NULL, NULL, FLAG_ADVANCED}, {volume, P_STRING, P_LOCAL, sDefault.volume, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE }, {fstype, P_STRING, P_LOCAL, sDefault.fstype, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE}, {set directory, P_BOOLREV, P_LOCAL, sDefault.bNo_set_dir, NULL, NULL, FLAG_ADVANCED | FLAG_SHARE}, @@ -1638,6 +1640,7 @@ /* User defined shares. */ string_set(Globals.szUsersharePath, ); + string_set(Globals.szUsershareTemplateShare, ); Globals.iUsershareMaxShares = 0; } @@ -1825,7 +1828,6 @@ FN_GLOBAL_STRING(lp_change_share_cmd, Globals.szChangeShareCommand) FN_GLOBAL_STRING(lp_delete_share_cmd, Globals.szDeleteShareCommand) -FN_GLOBAL_STRING(lp_usershare_path, Globals.szUsersharePath) FN_GLOBAL_LIST(lp_eventlog_list, Globals.szEventLogs) FN_GLOBAL_BOOL(lp_disable_netbios, Globals.bDisableNetbios) @@ -4240,7 +4242,7 @@ with permissions to share directory etc. ***/ -static int process_usershare_file(const char *dir_name, const char *file_name) +static int process_usershare_file(const char *dir_name, const char *file_name, int snum_template) { SMB_STRUCT_STAT sbuf; pstring fname; @@ -4353,9 +4355,14 @@ SAFE_FREE(lines); - /* Everything ok - add the service. */ + /* Everything ok - add the service possibly using a template. */ if (snum = 0) { - if ((snum = add_a_service(sDefault, service_name)) 0) { + const service *sp = sDefault; + if (snum_template != -1) { + sp = ServicePtrs[snum_template]; + } + + if ((snum = add_a_service(sp, service_name)) 0) { DEBUG(0, (process_usershare_file: Failed to add new service %s\n, service_name)); talloc_destroy(ctx); @@ -4367,8 +4374,15 @@ talloc_destroy(ctx); + /* If from a template it may be marked invalid. */ + ServicePtrs[snum]-valid = True; + /* Set the service as a valid usershare. */ ServicePtrs[snum]-usershare = USERSHARE_VALID; + + /* And note when it was loaded. */ + ServicePtrs[snum]-usershare_last_mod = sbuf.st_mtime; + return 0; } @@ -4385,6 +4399,7 @@ unsigned int num_dir_entries, num_bad_dir_entries; unsigned int allowed_bad_entries = ((2*max_user_shares)/10); int iService; + int snum_template = -1; add_to_file_list(usersharepath, usersharepath); @@ -4409,6 +4424,26 @@ return; } + /* Ensure the template share exists if it's set. */ + if (Globals.szUsershareTemplateShare[0]) { + /* We can't use lp_servicenumber here as we are recommending that + template shares have -valid=False set. */ + for (snum_template = iNumServices - 1; snum_template = 0; snum_template--) { + if (ServicePtrs[snum_template]-szService + strequal(ServicePtrs[snum_template]-szService, + Globals.szUsershareTemplateShare)) { + break; + } + } + + if (snum_template == -1) { + DEBUG(0,(process_usershare_directory: usershare template share %s + does not exist.\n, + Globals.szUsershareTemplateShare )); + return; + } + } +
svn commit: samba r12030 - in branches/SAMBA_3_0_RELEASE/packaging/Fedora: .
Author: jerry Date: 2005-12-02 20:37:54 + (Fri, 02 Dec 2005) New Revision: 12030 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12030 Log: another Fedora spec file fix Modified: branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl Changeset: Modified: branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl === --- branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl 2005-12-02 20:13:09 UTC (rev 12029) +++ branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl 2005-12-02 20:37:54 UTC (rev 12030) @@ -347,7 +347,6 @@ %{_bindir}/net %{_bindir}/smbtree %{_mandir}/man1/smbget.1* -%{_mandir}/man1/smbgetrc.5* %{_mandir}/man1/findsmb.1* %{_mandir}/man1/nmblookup.1* %{_mandir}/man1/rpcclient.1*
svn commit: samba r12031 - in branches/SAMBA_3_0/source/utils: .
Author: jht Date: 2005-12-02 20:46:15 + (Fri, 02 Dec 2005) New Revision: 12031 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12031 Log: Added net idmap to common help list. Modified: branches/SAMBA_3_0/source/utils/net_help.c Changeset: Modified: branches/SAMBA_3_0/source/utils/net_help.c === --- branches/SAMBA_3_0/source/utils/net_help.c 2005-12-02 20:37:54 UTC (rev 12030) +++ branches/SAMBA_3_0/source/utils/net_help.c 2005-12-02 20:46:15 UTC (rev 12031) @@ -61,7 +61,7 @@ Valid functions are:\n\ RPC RAP ADS FILE SHARE SESSION SERVER DOMAIN PRINTQ USER GROUP VALIDATE\n\ GROUPMEMBER ADMIN SERVICE PASSWORD TIME LOOKUP GETLOCALSID SETLOCALSID\n\ - CHANGESCRETPW\n); + CHANGESCRETPW IDMAP\n); return -1; } @@ -224,6 +224,7 @@ net user\t\tto manage users\n\ net group\t\tto manage groups\n\ net groupmap\t\tto manage group mappings\n\ + net idmap\t\tto manage the idmap id mappings\n\ net join\t\tto join a domain\n\ net cache\t\tto operate on cache tdb file\n\ net getlocalsid [NAME]\tto get the SID for local name\n\ @@ -273,7 +274,7 @@ #ifdef WITH_FAKE_KASERVER {AFS, net_help_afs}, #endif - + {IDMAP, net_help_idmap}, {HELP, help_usage}, {NULL, NULL}};
svn commit: samba-docs r878 - in trunk/Samba3-HOWTO: .
Author: jht Date: 2005-12-02 21:04:10 + (Fri, 02 Dec 2005) New Revision: 878 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=878 Log: Added IDMAP dump/restore command info. Modified: trunk/Samba3-HOWTO/TOSHARG-TheNetCommand.xml Changeset: Modified: trunk/Samba3-HOWTO/TOSHARG-TheNetCommand.xml === --- trunk/Samba3-HOWTO/TOSHARG-TheNetCommand.xml2005-12-02 20:02:27 UTC (rev 877) +++ trunk/Samba3-HOWTO/TOSHARG-TheNetCommand.xml2005-12-02 21:04:10 UTC (rev 878) @@ -1802,6 +1802,62 @@ /sect1 + sect1 + titleManaging IDMAP UID/SID Mappings/title + + para + The IDMAP UID to SID, and SID to UID, mappings that are created by commandwinbindd/command can be + backed up to a text file. The text file can be manually edited, although it is highly recommended that + you attempt this only if you know precisely what you are doing. + /para + + para + An IDMAP text dump file can be restored (or reloaded). There are two situations that may necessitate + this action: a) The existing IDMAP file is corrupt, b) It is necessary to install an editted version + of the mapping information. + /para + + para + Winbind must be shut down to dump the IDMAP file. Before restoring a dump file, shut down + commandwinbindd/command and delete the old filenamewinbindd_idmap.tdb/filename file. + /para + + sect2 + titleCreating an IDMAP Database Dump File/title + + para + The IDMAP database can be dumped to a text file as shown here: +screen +net idmap dump lt;full_path_and_tdb_filenamegt; gt; dumpfile.txt +/screen + Where the Samba run-time tdb files are stored in the filename/var/lib/samba/filename directory + the the following commands to create the dump file will suffice: +screen +net idmap dump /var/lib/samba/winbindd_idmap.tdb gt; idmap_dump.txt +/scrreen + /para + + /sect2 + + sect2 + titleRestoring the IDMAP Database Dump File/title + + para + The IDMAP dump file can be restored using the following command: +screen +net idmap restore lt;full_path_and_tdb_filenamegt; lt; dumpfile.txt +/screen + Where the Samba run-time tdb files are stored in the filename/var/lib/samba/filename directory +the the following commands can be used to restore the data to the tdb file. +screen +net idmap restore /var/lib/samba/winbindd_idmap.tdb lt; idmap_dump.txt +/screen + /para + + /sect2 + + /sect1 + sect1 id=netmisc1 titleOther Miscellaneous Operations/title
svn commit: samba-docs r879 - in trunk/Samba3-HOWTO: .
Author: jht Date: 2005-12-02 21:35:01 + (Fri, 02 Dec 2005) New Revision: 879 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=879 Log: Fixes only. Modified: trunk/Samba3-HOWTO/TOSHARG-TheNetCommand.xml trunk/Samba3-HOWTO/TOSHARG-upgrading-to-3.0.xml Changeset: Modified: trunk/Samba3-HOWTO/TOSHARG-TheNetCommand.xml === --- trunk/Samba3-HOWTO/TOSHARG-TheNetCommand.xml2005-12-02 21:04:10 UTC (rev 878) +++ trunk/Samba3-HOWTO/TOSHARG-TheNetCommand.xml2005-12-02 21:35:01 UTC (rev 879) @@ -1834,7 +1834,7 @@ the the following commands to create the dump file will suffice: screen net idmap dump /var/lib/samba/winbindd_idmap.tdb gt; idmap_dump.txt -/scrreen +/screen /para /sect2 Modified: trunk/Samba3-HOWTO/TOSHARG-upgrading-to-3.0.xml === --- trunk/Samba3-HOWTO/TOSHARG-upgrading-to-3.0.xml 2005-12-02 21:04:10 UTC (rev 878) +++ trunk/Samba3-HOWTO/TOSHARG-upgrading-to-3.0.xml 2005-12-02 21:35:01 UTC (rev 879) @@ -709,6 +709,7 @@ titleIdMap LDAP Support/title para +indextermprimaryidmap backend/primary/indexterm Samba-3 supports an LDAP backend for the idmap subsystem. The following options inform Samba that the idmap table should be stored on the directory server emphasisonterose/emphasis in the ou=idmap,dc=quenya,dc=org partition.
svn commit: samba r12032 - in branches/SAMBA_3_0_RELEASE/packaging: Fedora Solaris
Author: jerry Date: 2005-12-02 21:48:55 + (Fri, 02 Dec 2005) New Revision: 12032 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12032 Log: one day I'll get this fixed; more packaging fixes found during 3.0.21rc2 builds Modified: branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl branches/SAMBA_3_0_RELEASE/packaging/Solaris/makepkg.sh Changeset: Modified: branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl === --- branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl 2005-12-02 20:46:15 UTC (rev 12031) +++ branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl 2005-12-02 21:48:55 UTC (rev 12032) @@ -215,6 +215,7 @@ ## rm -f $RPM_BUILD_ROOT%{_mandir}/man1/log2pcap.1* rm -f $RPM_BUILD_ROOT%{_mandir}/man1/smbsh.1* +rm -f $RPM_BUILD_ROOT%{_mandir}/man1/vfstest.1* %clean rm -rf $RPM_BUILD_ROOT @@ -347,6 +348,7 @@ %{_bindir}/net %{_bindir}/smbtree %{_mandir}/man1/smbget.1* +%{_mandir}/man1/smbgetrc.5* %{_mandir}/man1/findsmb.1* %{_mandir}/man1/nmblookup.1* %{_mandir}/man1/rpcclient.1* @@ -375,15 +377,12 @@ %{_libdir}/samba/auth/script.so %{_bindir}/testparm %{_bindir}/smbpasswd -# %{_bindir}/make_printerdef %{_bindir}/wbinfo -# %{_bindir}/editreg %{_bindir}/ntlm_auth %{_bindir}/pdbedit %{_bindir}/eventlogadm %{_bindir}/profiles %{_bindir}/smbcquotas -#%{_bindir}/vfstest %{_sbindir}/winbindd %config(noreplace) %{_sysconfdir}/samba/smb.conf %config(noreplace) %{_sysconfdir}/samba/lmhosts @@ -402,7 +401,6 @@ %{_mandir}/man8/smbpasswd.8* %{_mandir}/man1/wbinfo.1* %{_mandir}/man8/winbindd.8* -%{_mandir}/man1/vfstest.1* %changelog * Fri Jan 16 2004 Gerald (Jerry) Carter [EMAIL PROTECTED],org Modified: branches/SAMBA_3_0_RELEASE/packaging/Solaris/makepkg.sh === --- branches/SAMBA_3_0_RELEASE/packaging/Solaris/makepkg.sh 2005-12-02 20:46:15 UTC (rev 12031) +++ branches/SAMBA_3_0_RELEASE/packaging/Solaris/makepkg.sh 2005-12-02 21:48:55 UTC (rev 12032) @@ -14,7 +14,7 @@ VFSLIBS=audit.so default_quota.so extd_audit.so full_audit.so readonly.so shadow_copy.so cap.so expand_msdfs.so fake_perms.so netatalk.so recycle.so DATFILES=lowcase.dat upcase.dat valid.dat CHARSETLIBS=CP437.so CP850.so -AUTHLIBS=auth_script.so +AUTHLIBS=script.so add_dynamic_entries() {
svn commit: samba r12033 - in branches/SAMBA_3_0_RELEASE/source: auth bin script
Author: jerry Date: 2005-12-02 21:52:00 + (Fri, 02 Dec 2005) New Revision: 12033 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12033 Log: portability fixes for installman script and some egnored files Modified: branches/SAMBA_3_0_RELEASE/source/auth/ branches/SAMBA_3_0_RELEASE/source/bin/ branches/SAMBA_3_0_RELEASE/source/script/installman.sh Changeset: Property changes on: branches/SAMBA_3_0_RELEASE/source/auth ___ Name: svn:ignore + *.po Property changes on: branches/SAMBA_3_0_RELEASE/source/bin ___ Name: svn:ignore - *.so *.a .dummy .libs debug2html editreg locktest locktest2 log2pcap make_printerdef make_smbcodepage make_unicodemap masktest msgtest net nmbd nmblookup nsstest ntlm_auth pdbedit profiles rpcclient samsync samtest smbcacls smbcacls smbclient smbcontrol smbcquotas smbd smbfilter smbget smbgroupedit smbiconv smbmnt smbmount smbpasswd smbsh smbspool smbstatus smbtorture smbtree smbumount swat t_push_ucs2 t_snprintf t_strcmp t_stringoverflow talloctort tdbbackup tdbdump tdbtool testparm testprns vfstest wbinfo winbindd wrepld + *.so *.a .dummy .libs debug2html editreg locktest locktest2 log2pcap make_printerdef make_smbcodepage make_unicodemap masktest msgtest net nmbd nmblookup nsstest ntlm_auth pdbedit profiles rpcclient samsync samtest smbcacls smbcacls smbclient smbcontrol smbcquotas smbd smbfilter smbget smbgroupedit smbiconv smbmnt smbmount smbpasswd smbsh smbspool smbstatus smbtorture smbtree smbumount swat t_push_ucs2 t_snprintf t_strcmp t_stringoverflow talloctort tdbbackup tdbdump tdbtool testparm testprns vfstest wbinfo winbindd wrepld eventlogadm Modified: branches/SAMBA_3_0_RELEASE/source/script/installman.sh === --- branches/SAMBA_3_0_RELEASE/source/script/installman.sh 2005-12-02 21:48:55 UTC (rev 12032) +++ branches/SAMBA_3_0_RELEASE/source/script/installman.sh 2005-12-02 21:52:00 UTC (rev 12033) @@ -19,8 +19,7 @@ fi # Get the configured feature set -test -f ${SRCDIR}/config.log \ - eval $( grep ^[[:alnum:]]*=.* ${SRCDIR}/config.log) +test -f ${SRCDIR}/config.log eval `grep '^[A-Za-z0-9]*=.*' ${SRCDIR}/config.log` for lang in $langs; do if [ X$lang = XC ]; then @@ -44,7 +43,7 @@ for sect in 1 5 7 8 ; do for m in $langdir/man$sect ; do for s in $SRCDIR../docs/manpages/$lang/*$sect; do - MP_BASENAME=${s##*/} + MP_BASENAME=`basename $s` # Check if this man page if required by the configured feature set case ${MP_BASENAME} in
svn commit: samba r12034 - in branches/SAMBA_3_0_RELEASE/packaging/Fedora: .
Author: jerry Date: 2005-12-02 21:56:12 + (Fri, 02 Dec 2005) New Revision: 12034 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12034 Log: a little voice says 'get some sleep jerry'...fix typo in spec file Modified: branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl Changeset: Modified: branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl === --- branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl 2005-12-02 21:52:00 UTC (rev 12033) +++ branches/SAMBA_3_0_RELEASE/packaging/Fedora/samba.spec.tmpl 2005-12-02 21:56:12 UTC (rev 12034) @@ -348,7 +348,7 @@ %{_bindir}/net %{_bindir}/smbtree %{_mandir}/man1/smbget.1* -%{_mandir}/man1/smbgetrc.5* +%{_mandir}/man5/smbgetrc.5* %{_mandir}/man1/findsmb.1* %{_mandir}/man1/nmblookup.1* %{_mandir}/man1/rpcclient.1*
svn commit: samba-docs r880 - in trunk/Samba3-HOWTO: .
Author: jht Date: 2005-12-02 22:19:58 + (Fri, 02 Dec 2005) New Revision: 880 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=880 Log: Another touch-up. Modified: trunk/Samba3-HOWTO/TOSHARG-TheNetCommand.xml Changeset: Modified: trunk/Samba3-HOWTO/TOSHARG-TheNetCommand.xml === --- trunk/Samba3-HOWTO/TOSHARG-TheNetCommand.xml2005-12-02 21:35:01 UTC (rev 879) +++ trunk/Samba3-HOWTO/TOSHARG-TheNetCommand.xml2005-12-02 22:19:58 UTC (rev 880) @@ -1848,7 +1848,7 @@ net idmap restore lt;full_path_and_tdb_filenamegt; lt; dumpfile.txt /screen Where the Samba run-time tdb files are stored in the filename/var/lib/samba/filename directory -the the following commands can be used to restore the data to the tdb file. +the the following command can be used to restore the data to the tdb file: screen net idmap restore /var/lib/samba/winbindd_idmap.tdb lt; idmap_dump.txt /screen
svn commit: samba r12035 - in branches/SAMBA_4_0/source/kdc: .
Author: abartlet Date: 2005-12-02 22:37:07 + (Fri, 02 Dec 2005) New Revision: 12035 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12035 Log: Fix memory leaks in the KDC. Andrew Bartlett Modified: branches/SAMBA_4_0/source/kdc/hdb-ldb.c Changeset: Modified: branches/SAMBA_4_0/source/kdc/hdb-ldb.c === --- branches/SAMBA_4_0/source/kdc/hdb-ldb.c 2005-12-02 21:56:12 UTC (rev 12034) +++ branches/SAMBA_4_0/source/kdc/hdb-ldb.c 2005-12-02 22:37:07 UTC (rev 12035) @@ -704,6 +704,7 @@ nt_status = sam_get_results_principal((struct ldb_context *)db-hdb_db, mem_ctx, principal_string, msg, realm_ref_msg); + free(principal_string); if (NT_STATUS_EQUAL(nt_status, NT_STATUS_NO_SUCH_USER)) { return HDB_ERR_NOENTRY; } else if (NT_STATUS_EQUAL(nt_status, NT_STATUS_NO_MEMORY)) { @@ -785,6 +786,7 @@ mem_ctx, user_dn, msg, krb5_attrs); if (ldb_ret != 1) { + talloc_free(mem_ctx); return HDB_ERR_NOENTRY; } @@ -793,6 +795,7 @@ ncName=%s, ldb_dn_linearize(mem_ctx, domain_dn)); if (ldb_ret != 1) { + talloc_free(mem_ctx); return HDB_ERR_NOENTRY; }
Build status as of Sat Dec 3 00:00:02 2005
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2005-12-02 00:00:10.0 + +++ /home/build/master/cache/broken_results.txt 2005-12-03 00:00:11.0 + @@ -1,17 +1,17 @@ -Build status as of Fri Dec 2 00:00:01 2005 +Build status as of Sat Dec 3 00:00:02 2005 Build counts: Tree Total Broken Panic -ccache 13 3 0 -distcc 13 3 0 -lorikeet-heimdal 32 16 0 +ccache 12 3 0 +distcc 13 2 0 +lorikeet-heimdal 32 19 0 ppp 19 0 0 rsync35 2 0 samba4 0 0 samba-docs 0 0 0 samba4 35 18 1 -samba_3_036 7 0 +samba_3_036 6 0 smb-build28 2 0 talloc 33 12 0 -tdb 10 3 0 +tdb 9 2 0
svn commit: lorikeet r503 - in trunk/heimdal/lib/krb5: .
Author: abartlet Date: 2005-12-03 00:32:32 + (Sat, 03 Dec 2005) New Revision: 503 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=503 Log: Test krb5_kt_remove_entry in the test_keytab, and therefore find a MEMORY keytab bug on systems where realloc(ptr, 0) is equivilant to free(). Andrew Bartlett Modified: trunk/heimdal/lib/krb5/keytab_memory.c trunk/heimdal/lib/krb5/test_keytab.c Changeset: Modified: trunk/heimdal/lib/krb5/keytab_memory.c === --- trunk/heimdal/lib/krb5/keytab_memory.c 2005-12-01 21:36:07 UTC (rev 502) +++ trunk/heimdal/lib/krb5/keytab_memory.c 2005-12-03 00:32:32 UTC (rev 503) @@ -217,6 +217,9 @@ e = realloc(d-entries, d-num_entries * sizeof(*d-entries)); if(e != NULL) d-entries = e; +if (d-num_entries == 0) + d-entries = 0; + return 0; } Modified: trunk/heimdal/lib/krb5/test_keytab.c === --- trunk/heimdal/lib/krb5/test_keytab.c2005-12-01 21:36:07 UTC (rev 502) +++ trunk/heimdal/lib/krb5/test_keytab.c2005-12-03 00:32:32 UTC (rev 503) @@ -65,11 +65,11 @@ */ static void -test_memory_keytab(krb5_context context, const char *keytab) +test_memory_keytab(krb5_context context, const char *keytab, const char *keytab2) { krb5_error_code ret; -krb5_keytab id, id2; -krb5_keytab_entry entry, entry2; +krb5_keytab id, id2, id3; +krb5_keytab_entry entry, entry2, entry3; ret = krb5_kt_resolve(context, keytab, id); if (ret) @@ -119,7 +119,24 @@ krb5_err(context, 1, ret, krb5_kt_close); +ret = krb5_kt_resolve(context, keytab2, id3); +if (ret) + krb5_err(context, 1, ret, krb5_kt_resolve); +memset(entry3, 0, sizeof(entry3)); +ret = krb5_parse_name(context, [EMAIL PROTECTED], entry3.principal); +if (ret) + krb5_err(context, 1, ret, krb5_parse_name); +entry3.vno = 1; +ret = krb5_generate_random_keyblock(context, + ETYPE_AES256_CTS_HMAC_SHA1_96, + entry3.keyblock); +if (ret) + krb5_err(context, 1, ret, krb5_generate_random_keyblock); + +krb5_kt_add_entry(context, id3, entry3); + + ret = krb5_kt_resolve(context, keytab, id); if (ret) krb5_err(context, 1, ret, krb5_kt_resolve); @@ -132,11 +149,23 @@ if (ret == 0) krb5_errx(context, 1, krb5_kt_get_entry when if should fail); +krb5_kt_remove_entry(context, id, entry); +if (ret == 0) + krb5_errx(context, 1, krb5_kt_get_entry when if should fail); + ret = krb5_kt_close(context, id); if (ret) krb5_err(context, 1, ret, krb5_kt_close); krb5_kt_free_entry(context, entry); + +krb5_kt_remove_entry(context, id3, entry3); + +ret = krb5_kt_close(context, id3); +if (ret) + krb5_err(context, 1, ret, krb5_kt_close); + + } int @@ -155,7 +184,7 @@ test_empty_keytab(context, FILE:foo); test_empty_keytab(context, KRB4:foo); -test_memory_keytab(context, MEMORY:foo); +test_memory_keytab(context, MEMORY:foo, MEMORY:foo2); krb5_free_context(context);
svn commit: lorikeet r504 - in trunk/heimdal/lib/krb5: .
Author: abartlet Date: 2005-12-03 00:37:48 + (Sat, 03 Dec 2005) New Revision: 504 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=504 Log: I think this is a better fix for the realloc/free bugs. Andrew Bartlett Modified: trunk/heimdal/lib/krb5/keytab_memory.c Changeset: Modified: trunk/heimdal/lib/krb5/keytab_memory.c === --- trunk/heimdal/lib/krb5/keytab_memory.c 2005-12-03 00:32:32 UTC (rev 503) +++ trunk/heimdal/lib/krb5/keytab_memory.c 2005-12-03 00:37:48 UTC (rev 504) @@ -214,12 +214,15 @@ krb5_clear_error_string (context); return KRB5_KT_NOTFOUND; } -e = realloc(d-entries, d-num_entries * sizeof(*d-entries)); -if(e != NULL) - d-entries = e; -if (d-num_entries == 0) - d-entries = 0; - +if (d-num_entries == 0) { + free(d-entries); + d-entries = NULL; +} else { + e = realloc(d-entries, d-num_entries * sizeof(*d-entries)); + if(e != NULL) + d-entries = e; +} + return 0; }
svn commit: samba r12036 - in branches/SAMBA_4_0/source/kdc: .
Author: abartlet Date: 2005-12-03 00:46:23 + (Sat, 03 Dec 2005) New Revision: 12036 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12036 Log: Fix more KDC memory leaks (and there are probably still more...). Andrew Bartlett Modified: branches/SAMBA_4_0/source/kdc/hdb-ldb.c Changeset: Modified: branches/SAMBA_4_0/source/kdc/hdb-ldb.c === --- branches/SAMBA_4_0/source/kdc/hdb-ldb.c 2005-12-02 22:37:07 UTC (rev 12035) +++ branches/SAMBA_4_0/source/kdc/hdb-ldb.c 2005-12-03 00:46:23 UTC (rev 12036) @@ -706,10 +706,13 @@ msg, realm_ref_msg); free(principal_string); if (NT_STATUS_EQUAL(nt_status, NT_STATUS_NO_SUCH_USER)) { + talloc_free(mem_ctx); return HDB_ERR_NOENTRY; } else if (NT_STATUS_EQUAL(nt_status, NT_STATUS_NO_MEMORY)) { + talloc_free(mem_ctx); return ENOMEM; } else if (!NT_STATUS_IS_OK(nt_status)) { + talloc_free(mem_ctx); return EINVAL; } @@ -751,6 +754,7 @@ break; } else { /* we should lookup trusted domains */ + talloc_free(mem_ctx); return HDB_ERR_NOENTRY; }
svn commit: samba r12037 - in branches/SAMBA_4_0/source/heimdal/lib/krb5: .
Author: abartlet Date: 2005-12-03 00:47:51 + (Sat, 03 Dec 2005) New Revision: 12037 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12037 Log: Fix malloc corruption caused by double-free(), where realloc(ptr, 0) is equivilant to free(). This is the issue tridge was seeing in the MEMORY: keytab code. Andrew Bartlett Modified: branches/SAMBA_4_0/source/heimdal/lib/krb5/keytab_memory.c Changeset: Modified: branches/SAMBA_4_0/source/heimdal/lib/krb5/keytab_memory.c === --- branches/SAMBA_4_0/source/heimdal/lib/krb5/keytab_memory.c 2005-12-03 00:46:23 UTC (rev 12036) +++ branches/SAMBA_4_0/source/heimdal/lib/krb5/keytab_memory.c 2005-12-03 00:47:51 UTC (rev 12037) @@ -214,9 +214,15 @@ krb5_clear_error_string (context); return KRB5_KT_NOTFOUND; } -e = realloc(d-entries, d-num_entries * sizeof(*d-entries)); -if(e != NULL) - d-entries = e; +if (d-num_entries == 0) { + free(d-entries); + d-entries = NULL; +} else { + e = realloc(d-entries, d-num_entries * sizeof(*d-entries)); + if(e != NULL) + d-entries = e; +} + return 0; }
svn commit: samba r12038 - in branches/SAMBA_3_0/source/lib: .
Author: jra Date: 2005-12-03 00:51:23 + (Sat, 03 Dec 2005) New Revision: 12038 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12038 Log: This file is no longer used, and no one noticed Jeremy. Removed: branches/SAMBA_3_0/source/lib/util_smbd.c Changeset: Deleted: branches/SAMBA_3_0/source/lib/util_smbd.c === --- branches/SAMBA_3_0/source/lib/util_smbd.c 2005-12-03 00:47:51 UTC (rev 12037) +++ branches/SAMBA_3_0/source/lib/util_smbd.c 2005-12-03 00:51:23 UTC (rev 12038) @@ -1,86 +0,0 @@ -/* - Unix SMB/CIFS implementation. - Samba utility functions, used in smbd only - Copyright (C) Andrew Tridgell 2002 - - This program is free software; you can redistribute it and/or modify - it under the terms of the GNU General Public License as published by - the Free Software Foundation; either version 2 of the License, or - (at your option) any later version. - - This program is distributed in the hope that it will be useful, - but WITHOUT ANY WARRANTY; without even the implied warranty of - MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the - GNU General Public License for more details. - - You should have received a copy of the GNU General Public License - along with this program; if not, write to the Free Software - Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. -*/ - -#include includes.h - -/* - This function requires sys_getgrouplist - which is only - available in smbd due to it's use of become_root() in a - legacy systems hack. -*/ - -/* - return a full list of groups for a user - - returns the number of groups the user is a member of. The return will include the - users primary group. - - remember to free the resulting gid_t array - - NOTE! uses become_root() to gain correct priviages on systems - that lack a native getgroups() call (uses initgroups and getgroups) -*/ -BOOL getgroups_user(const char *user, gid_t primary_gid, gid_t **ret_groups, int *ngroups) -{ - int ngrp, max_grp; - gid_t *temp_groups; - gid_t *groups; - int i; - - max_grp = groups_max(); - temp_groups = SMB_MALLOC_ARRAY(gid_t, max_grp); - if (! temp_groups) { - return False; - } - - if (sys_getgrouplist(user, primary_gid, temp_groups, max_grp) == -1) { - - gid_t *groups_tmp; - - groups_tmp = SMB_REALLOC_ARRAY(temp_groups, gid_t, max_grp); - - if (!groups_tmp) { - SAFE_FREE(temp_groups); - return False; - } - temp_groups = groups_tmp; - - if (sys_getgrouplist(user, primary_gid, temp_groups, max_grp) == -1) { - DEBUG(0, (get_user_groups: failed to get the unix group list\n)); - SAFE_FREE(temp_groups); - return False; - } - } - - ngrp = 0; - groups = NULL; - - /* Add in primary group first */ - add_gid_to_array_unique(NULL, primary_gid, groups, ngrp); - - for (i=0; imax_grp; i++) - add_gid_to_array_unique(NULL, temp_groups[i], groups, ngrp); - - *ngroups = ngrp; - *ret_groups = groups; - SAFE_FREE(temp_groups); - return True; -} -
svn commit: samba r12041 - in trunk/source: lib param rpc_server
Author: jra Date: 2005-12-03 01:09:11 + (Sat, 03 Dec 2005) New Revision: 12041 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12041 Log: Fixup usershare code more... Still need to make permission checks efficient and decide about ACL format storage. Jeremy. Modified: trunk/source/lib/dummysmbd.c trunk/source/param/loadparm.c trunk/source/rpc_server/srv_srvsvc_nt.c Changeset: Modified: trunk/source/lib/dummysmbd.c === --- trunk/source/lib/dummysmbd.c2005-12-03 01:03:16 UTC (rev 12040) +++ trunk/source/lib/dummysmbd.c2005-12-03 01:09:11 UTC (rev 12041) @@ -38,3 +38,8 @@ { return False; } + +BOOL set_share_security(TALLOC_CTX *ctx, const char *share_name, SEC_DESC *psd) +{ + return False; +} Modified: trunk/source/param/loadparm.c === --- trunk/source/param/loadparm.c 2005-12-03 01:03:16 UTC (rev 12040) +++ trunk/source/param/loadparm.c 2005-12-03 01:09:11 UTC (rev 12041) @@ -4220,16 +4220,112 @@ } /*** + Parse the contents of an acl string. +***/ + +static BOOL parse_share_acl(TALLOC_CTX *ctx, const char *acl_str, SEC_DESC **ppsd) +{ + return False; +} + +#if 0 +/*** + A user and group id cache. +***/ + +struct ug_cache { + struct ug_cache *prev, *next; + uid_t user_id; + gid_t *group_list; + size_t num_groups; +}; +#endif + +/*** Parse the contents of a usershare file. ***/ static BOOL parse_usershare_file(TALLOC_CTX *ctx, SMB_STRUCT_STAT *psbuf, + int snum, char **lines, int numlines, pstring sharepath, SEC_DESC **ppsd) { + SMB_STRUCT_DIR *dp; + SMB_STRUCT_STAT sbuf; + + if (!strequal(lines[0], #VERSION 1)) { + return False; + } + + if (strnequal(lines[1], path=, 5)) { + return False; + } + + pstrcpy(sharepath, lines[1][5]); + trim_string(sharepath, , ); + + if (strnequal(lines[2], usershare_acl=, 14)) { + return False; + } + + if (!parse_share_acl(ctx, lines[2][14], ppsd)) { + return False; + } + + if (snum != -1 strequal(sharepath, ServicePtrs[snum]-szPath)) { + /* Path didn't change, no checks needed. */ + return True; + } + + /* Ensure this is pointing to a directory. */ + dp = sys_opendir(sharepath); + + if (!dp) { + DEBUG(0,(parse_usershare_file: path %s is not a directory.\n, + sharepath)); + return False; + } + + /* Ensure the owner of the usershare file has permission to share + this directory. */ + + if (sys_stat(sharepath, sbuf) == -1) { + DEBUG(0,(parse_usershare_file: stat failed on path %s. %s\n, + sharepath, strerror(errno) )); + sys_closedir(dp); + return False; + } + + if (!S_ISDIR(sbuf.st_mode)) { + DEBUG(0,(parse_usershare_file: %s is not a directory.\n, + sharepath )); + sys_closedir(dp); + return False; + } + + /* Owner can always share. */ + if (sbuf.st_uid == psbuf-st_uid) { + sys_closedir(dp); + return True; + } + +#if 0 + /* We have to check if the user requesting the share is in the + owning group of the directory. */ + + username = uidtoname(psbuf-st_uid); + owning_group_name = gidtoname(sbuf.st_gid); + + getgroups_user(); + + user_in_group_list(u_name, g_name, NULL, 0); +#endif + + sys_closedir(dp); + return False; } @@ -4347,7 +4443,7 @@ return 1; } - if (!parse_usershare_file(ctx, sbuf, lines, numlines, sharepath, psd)) { + if (!parse_usershare_file(ctx, sbuf, snum, lines, numlines, sharepath, psd)) { talloc_destroy(ctx); SAFE_FREE(lines); return -1; @@ -4371,6 +4467,14 @@ } /* Write the ACL of the new/modified share. */ + if (!set_share_security(ctx, service_name, psd)) { +DEBUG(0, (process_usershare_file: Failed to set share + security for user share %s\n, + service_name )); +
svn commit: samba-docs r881 - in trunk/Samba3-HOWTO: .
Author: jht Date: 2005-12-03 02:25:59 + (Sat, 03 Dec 2005) New Revision: 881 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=881 Log: Updating documentation of tdb files some more. Modified: trunk/Samba3-HOWTO/TOSHARG-CUPS-printing.xml trunk/Samba3-HOWTO/TOSHARG-Install.xml trunk/Samba3-HOWTO/TOSHARG-PDC.xml trunk/Samba3-HOWTO/TOSHARG-Printing.xml trunk/Samba3-HOWTO/TOSHARG-TheNetCommand.xml trunk/Samba3-HOWTO/TOSHARG-upgrading-to-3.0.xml Changeset: Sorry, the patch is too large (422 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=881
svn commit: samba-docs r882 - in trunk/Samba3-HOWTO: .
Author: jht Date: 2005-12-03 03:18:16 + (Sat, 03 Dec 2005) New Revision: 882 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=882 Log: Further updates from one of Jerry's emails. Modified: trunk/Samba3-HOWTO/TOSHARG-Install.xml Changeset: Modified: trunk/Samba3-HOWTO/TOSHARG-Install.xml === --- trunk/Samba3-HOWTO/TOSHARG-Install.xml 2005-12-03 02:25:59 UTC (rev 881) +++ trunk/Samba3-HOWTO/TOSHARG-Install.xml 2005-12-03 03:18:16 UTC (rev 882) @@ -174,7 +174,7 @@ tbody row entryaccount_policy/entry - entryparaUser policy settings./para/entry + entryparaSamba/NT account policy settings, includes password expiration settings./para/entry /row row entrygroup_mapping/entry @@ -182,11 +182,11 @@ /row row entryntdrivers/entry - entryparaStores per-printer driver information./para/entry + entryparaStores per-printer installed driver information./para/entry /row row entryntforms/entry - entryparaStores per-printer forms information./para/entry + entryparaStores per-printer installed forms information./para/entry /row row entryntprinters/entry @@ -203,8 +203,8 @@ row entryregistry/entry entrypara - Read-only Samba registry skeleton that provides support for exporting various database tables - via the winreg RPCs. + Read-only Samba database of a Windows registry skeleton that provides support for exporting + various database tables via the winreg RPCs. /para/entry /row row @@ -222,7 +222,7 @@ /row row entrywinbindd_idmap/entry - entryparaNew ID map table from SIDS to UNIX UIDs/GIDs./para/entry + entryparaWinbindd's local IDMAP database./para/entry /row /tbody /tgroup @@ -248,17 +248,22 @@ /row row entryconnections/entry - entryparaA temporary cache for current connection information./para/entry + entryparaA temporary cache for current connection information used to enforce max connections./para/entry entryno/entry /row row + entryeventlog/*tdb/entry + entryparaRecords of eventlog entries. In most circumstances this is just a cache of system logs./para/entry + entryno/entry + /row + row entrygencache/entry entryparaGeneric caching database for dead WINS servers and trusted domain data./para/entry entryno/entry /row row entrylogin_cache/entry - entryparaA temporary cache for login information./para/entry + entryparaA temporary cache for login information, in particular bad password attempts./para/entry entryno/entry /row row @@ -268,10 +273,15 @@ /row row entrynetsamlogon_cache/entry - entryparaPackets received for which no process is listening./para/entry + entryparaCaches user net_info_3 structure data from net_samlogon requests (as a domain member)./para/entry entryno/entry /row row + entryperfmon/*.tdb/entry + entryparaPerformance counter information./para/entry + entryno/entry + /row + row entryprinting/*.tdb/entry entryparaCached output from lpq command created on a per-print-service basis./para/entry entryno/entry @@ -287,7 +297,7 @@ /row row entrysessionid/entry - entryparaTemporary cache for miscellaneous session information./para/entry + entryparaTemporary cache for miscellaneous session information and for utmp handling./para/entry entryno/entry /row row @@
svn commit: samba-web r866 - in trunk: .
Author: jerry Date: 2005-12-03 04:30:32 + (Sat, 03 Dec 2005) New Revision: 866 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=866 Log: announcing 3.0.21rc2 Modified: trunk/index.html Changeset: Modified: trunk/index.html === --- trunk/index.html2005-12-02 01:25:32 UTC (rev 865) +++ trunk/index.html2005-12-03 04:30:32 UTC (rev 866) @@ -15,31 +15,33 @@ h2Current Release/h2 -h4a name=latest12 Nov 2005/a/h4 -p class=headlineSamba 3.0.21rc1 Available for Download/p +h4a name=latest2 Dec 2005/a/h4 +p class=headlineSamba 3.0.21rc2 Available for Download/p pThis is a release candidate of the 3.0.21 code base and is provided - for testing purposes only. While close to the final stable release, - this snapshot is emnot/em intended for production servers. Please read - the specific changes in the - a href=/samba/ftp/rc/WHATSNEW-3-0-21rc1.txtRelease Notes/a./p + for testing purposes only. While this snapshot is emnot/em intended + for production servers, we do believe that this will become the 3.0.21 + final release. Your testing and feedback is greatly appreciated. + If all goes well, we should release the final version of 3.0.21 within two weeks. + Please read the specific changes in the + a href=/samba/ftp/rc/WHATSNEW-3-0-21rc2.txtRelease Notes/a./p -pThe a href=/samba/ftp/rc/samba-3.0.21rc1.tar.gzSamba 3.0.21rc1 +pThe a href=/samba/ftp/rc/samba-3.0.21rc2.tar.gzSamba 3.0.21rc2 source code/a can be downloaded now. The a - href=/samba/ftp/rc/samba-3.0.21rc1.tar.ascGnuPG + href=/samba/ftp/rc/samba-3.0.21rc2.tar.ascGnuPG signature for the emun/emcompressed tarball/a is also available. - If you prefer to download just the diff between 3.0.21pre1 to 3.0.21rc1, the - a href=/samba/ftp/rc/patch-3.0.21pre1-3.0.21rc1.diffs.gzpatch file/a - (a href=/samba/ftp/rc/patch-3.0.21pre1-3.0.21rc1.diffs.ascgpg signature/a) is also available. + If you prefer to download just the diff from 3.0.21rc1 to 3.0.21rc2, the + a href=/samba/ftp/rc/patch-3.0.21rc1-3.0.21rc2.diffs.gzpatch file/a + (a href=/samba/ftp/rc/patch-3.0.21rc1-3.0.21rc2.diffs.ascgpg signature/a) is also available. Precompiled packages for Solaris and Fedora Core 4 are available in the a href=/samba/ftp/Binary_Packages/Binary_Packages download area/a. Packages for other platforms will be available shortly./p -pSamba 3.0.21pre1 is also available via BitTorrent - (a href=http://torrent.samba.org/samba/ftp/rc/samba-3.0.21rc1.tar.gz.torrent;samba-3.0.21rc1.tar.gz.torrent/a). +pSamba 3.0.21rc2 is also available via BitTorrent + (a href=http://torrent.samba.org/samba/ftp/rc/samba-3.0.21rc2.tar.gz.torrent;samba-3.0.21rc2.tar.gz.torrent/a). Note that when downloading via BitTorrent, you are encouraged to verify the resulting uncompressed tarball's - a href=/samba/ftp/rc/samba-3.0.21rc1.tar.ascGPG signature/a./p + a href=/samba/ftp/rc/samba-3.0.21rc2.tar.ascGPG signature/a./p div class=plugs
svn commit: samba-web r867 - in trunk: history news/releases
Author: deryck Date: 2005-12-03 05:44:46 + (Sat, 03 Dec 2005) New Revision: 867 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=867 Log: Add news item on 3.0.21rc2. Move old announcement to history page, and update latest release link. deryck Added: trunk/news/releases/3.0.21rc2.html Modified: trunk/history/index.html Changeset: Modified: trunk/history/index.html === --- trunk/history/index.html2005-12-03 04:30:32 UTC (rev 866) +++ trunk/history/index.html2005-12-03 05:44:46 UTC (rev 867) @@ -6,7 +6,7 @@ div class=latest ul - liLatest Release mdash; a href=/samba/#latestSamba 3.0.21rc1/a/li + liLatest Release mdash; a href=/samba/#latestSamba 3.0.21rc2/a/li liCurrent Stable Release mdash; a href=#stableSamba 3.0.20b/a/li !-- Second link will point to #stable on this page when current release is a development release -- /ul @@ -17,6 +17,33 @@ h2Previous Release Announcments/h2 +h4a12 Nov 2005/a/h4 +p class=headlineSamba 3.0.21rc1 Available for Download/p + +pThis is a release candidate of the 3.0.21 code base and is provided +for testing purposes only. While close to the final stable release, +this snapshot is emnot/em intended for production servers. Please read +the specific changes in the +a href=/samba/ftp/rc/WHATSNEW-3-0-21rc1.txtRelease Notes/a./p + +pThe a href=/samba/ftp/rc/samba-3.0.21rc1.tar.gzSamba 3.0.21rc1 +source code/a can be downloaded now. The a +href=/samba/ftp/rc/samba-3.0.21rc1.tar.ascGnuPG +signature for the emun/emcompressed tarball/a is also available. +If you prefer to download just the diff between 3.0.21pre1 to 3.0.21rc1, the +a href=/samba/ftp/rc/patch-3.0.21pre1-3.0.21rc1.diffs.gzpatch file/a +(a href=/samba/ftp/rc/patch-3.0.21pre1-3.0.21rc1.diffs.ascgpg signature/a) is also available. +Precompiled packages for Solaris and Fedora Core 4 are available in the +a href=/samba/ftp/Binary_Packages/Binary_Packages download area/a. +Packages for other platforms will be available shortly./p + +pSamba 3.0.21pre1 is also available via BitTorrent +(a href=http://torrent.samba.org/samba/ftp/rc/samba-3.0.21rc1.tar.gz.torrent;samba-3.0.21rc1.tar.gz.torrent/a). +Note that when downloading via BitTorrent, you are encouraged +to verify the resulting uncompressed tarball's +a href=/samba/ftp/rc/samba-3.0.21rc1.tar.ascGPG signature/a./p + + h4a18 Oct 2005/a/h4 p class=headlineSamba 3.0.21pre1 Available for Download/p @@ -358,28 +385,4 @@ a href=/samba/ftp/samba-3.0.14a.tar.ascGPG signature/a./p -h4a24 March 2005/a/h4 -p class=headlineSamba 3.0.13 Available for Download/p - -pThis is the latest stable release of Samba. This is the version -that production Samba servers should be running for all current -bug-fixes. Please read about the important a -href=/samba/history/samba-3.0.13.htmlchanges in this -release/a./p - -pThe a href=/samba/ftp/samba-3.0.13.tar.gzSamba 3.0.13 -source code/a can be downloaded now. The a -href=/samba/ftp/samba-3.0.13.tar.ascGnuPG -signature for the emun/emcompressed tarball/a is also available. -Precompiled packages for various platforms are available in the -a href=/samba/ftp/Binary_Packages/Binary_Packages -download area/a./p - -pSamba 3.0.13 is also available via BitTorrent -(a href=http://torrent.samba.org/samba/ftp/samba-3.0.13.tar.gz.torrent;samba-3.0.13.tar.gz.torrent/a). -Note that when downloading via BitTorrent, you are encouraged -to verify the resulting uncompressed tarball's -a href=/samba/ftp/samba-3.0.13.tar.ascGPG signature/a./p - - !--#include virtual=footer_history.html -- Added: trunk/news/releases/3.0.21rc2.html === --- trunk/news/releases/3.0.21rc2.html 2005-12-03 04:30:32 UTC (rev 866) +++ trunk/news/releases/3.0.21rc2.html 2005-12-03 05:44:46 UTC (rev 867) @@ -0,0 +1,30 @@ +h3a name=3.0.21rc2Samba 3.0.21rc2 Available for Download/a/h3 + +div class=article +pThis is a release candidate of the 3.0.21 code base and is provided + for testing purposes only. While this snapshot is emnot/em intended + for production servers, we do believe that this will become the 3.0.21 + final release. Your testing and feedback is greatly appreciated. + If all goes well, we should release the final version of 3.0.21 within two weeks. + Please read the specific changes in the + a href=/samba/ftp/rc/WHATSNEW-3-0-21rc2.txtRelease Notes/a./p + +pThe a href=/samba/ftp/rc/samba-3.0.21rc2.tar.gzSamba 3.0.21rc2 + source code/a can be downloaded now. The a + href=/samba/ftp/rc/samba-3.0.21rc2.tar.ascGnuPG + signature for the emun/emcompressed tarball/a is also available. + If you prefer to download just the diff from 3.0.21rc1 to 3.0.21rc2, the + a href=/samba/ftp/rc/patch-3.0.21rc1-3.0.21rc2.diffs.gzpatch file/a + (a
svn commit: samba r12042 - in trunk/source: lib libads libsmb nmbd param passdb rpc_parse rpc_server smbd
Author: jra Date: 2005-12-03 06:46:42 + (Sat, 03 Dec 2005) New Revision: 12042 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12042 Log: It's amazing the warnings you find when compiling on a 64-bit box with gcc4 and -O6... Fix a bunch of C99 dereferencing type-punned pointer will break strict-aliasing rules errors. Also added prs_int32 (not uint32...) as it's needed in one place. Find places where prs_uint32 was being used to marshall/unmarshall a time_t (a big no no on 64-bits). More warning fixes to come. Thanks to Volker for nudging me to compile like this. Jeremy. Modified: trunk/source/lib/charcnv.c trunk/source/lib/crc32.c trunk/source/lib/util_file.c trunk/source/libads/ads_ldap.c trunk/source/libads/ldap.c trunk/source/libsmb/climessage.c trunk/source/libsmb/samlogon_cache.c trunk/source/nmbd/nmbd_namelistdb.c trunk/source/param/loadparm.c trunk/source/passdb/secrets.c trunk/source/rpc_parse/parse_net.c trunk/source/rpc_parse/parse_prs.c trunk/source/rpc_server/srv_eventlog_nt.c trunk/source/rpc_server/srv_lsa_nt.c trunk/source/rpc_server/srv_reg_nt.c trunk/source/rpc_server/srv_samr_nt.c trunk/source/rpc_server/srv_spoolss_nt.c trunk/source/rpc_server/srv_svcctl_nt.c trunk/source/smbd/message.c Changeset: Sorry, the patch is too large (700 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12042
svn commit: samba r12044 - in trunk/source: client nsswitch utils
Author: jra Date: 2005-12-03 06:58:51 + (Sat, 03 Dec 2005) New Revision: 12044 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12044 Log: More warning fixes... Just a few more to go. Jeremy. Modified: trunk/source/client/clitar.c trunk/source/nsswitch/winbindd_ads.c trunk/source/utils/net_lookup.c trunk/source/utils/smbcquotas.c Changeset: Modified: trunk/source/client/clitar.c === --- trunk/source/client/clitar.c2005-12-03 06:46:46 UTC (rev 12043) +++ trunk/source/client/clitar.c2005-12-03 06:58:51 UTC (rev 12044) @@ -1097,6 +1097,8 @@ char *longfilename = NULL, linkflag; int skip = False; + ZERO_STRUCT(finfo); + GetTimeOfDay(tp_start); DEBUG(5, (RJS do_tarput called ...\n)); Modified: trunk/source/nsswitch/winbindd_ads.c === --- trunk/source/nsswitch/winbindd_ads.c2005-12-03 06:46:46 UTC (rev 12043) +++ trunk/source/nsswitch/winbindd_ads.c2005-12-03 06:58:51 UTC (rev 12044) @@ -621,7 +621,7 @@ goto done; } - rc = ads_search_retry_dn(ads, (void**)msg, user_dn, attrs); + rc = ads_search_retry_dn(ads, (void**)(void *)msg, user_dn, attrs); if (!ADS_ERR_OK(rc)) { status = ads_ntstatus(rc); DEBUG(1,(lookup_usergroups(sid=%s) ads_search tokenGroups: %s\n, Modified: trunk/source/utils/net_lookup.c === --- trunk/source/utils/net_lookup.c 2005-12-03 06:46:46 UTC (rev 12043) +++ trunk/source/utils/net_lookup.c 2005-12-03 06:58:51 UTC (rev 12044) @@ -211,7 +211,7 @@ realm.length = strlen(realm.data); } - rc = krb5_locate_kdc(ctx, realm, (struct sockaddr **) addrs, num_kdcs, 0); + rc = krb5_locate_kdc(ctx, realm, (struct sockaddr **)(void *)addrs, num_kdcs, 0); if (rc) { DEBUG(1, (krb5_locate_kdc failed (%s)\n, error_message(rc))); return -1; Modified: trunk/source/utils/smbcquotas.c === --- trunk/source/utils/smbcquotas.c 2005-12-03 06:46:46 UTC (rev 12043) +++ trunk/source/utils/smbcquotas.c 2005-12-03 06:58:51 UTC (rev 12044) @@ -396,7 +396,7 @@ pstring username_str = {0}; pstring path = {0}; pstring set_str = {0}; - enum SMB_QUOTA_TYPE qtype; + enum SMB_QUOTA_TYPE qtype = SMB_INVALID_QUOTA_TYPE; int cmd = 0; static BOOL test_args = False; struct cli_state *cli;
svn commit: samba r12045 - in branches/SAMBA_3_0/source: client nsswitch utils
Author: jra Date: 2005-12-03 06:58:54 + (Sat, 03 Dec 2005) New Revision: 12045 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12045 Log: More warning fixes... Just a few more to go. Jeremy. Modified: branches/SAMBA_3_0/source/client/clitar.c branches/SAMBA_3_0/source/nsswitch/winbindd_ads.c branches/SAMBA_3_0/source/utils/net_lookup.c branches/SAMBA_3_0/source/utils/smbcquotas.c Changeset: Modified: branches/SAMBA_3_0/source/client/clitar.c === --- branches/SAMBA_3_0/source/client/clitar.c 2005-12-03 06:58:51 UTC (rev 12044) +++ branches/SAMBA_3_0/source/client/clitar.c 2005-12-03 06:58:54 UTC (rev 12045) @@ -1097,6 +1097,8 @@ char *longfilename = NULL, linkflag; int skip = False; + ZERO_STRUCT(finfo); + GetTimeOfDay(tp_start); DEBUG(5, (RJS do_tarput called ...\n)); Modified: branches/SAMBA_3_0/source/nsswitch/winbindd_ads.c === --- branches/SAMBA_3_0/source/nsswitch/winbindd_ads.c 2005-12-03 06:58:51 UTC (rev 12044) +++ branches/SAMBA_3_0/source/nsswitch/winbindd_ads.c 2005-12-03 06:58:54 UTC (rev 12045) @@ -621,7 +621,7 @@ goto done; } - rc = ads_search_retry_dn(ads, (void**)msg, user_dn, attrs); + rc = ads_search_retry_dn(ads, (void**)(void *)msg, user_dn, attrs); if (!ADS_ERR_OK(rc)) { status = ads_ntstatus(rc); DEBUG(1,(lookup_usergroups(sid=%s) ads_search tokenGroups: %s\n, Modified: branches/SAMBA_3_0/source/utils/net_lookup.c === --- branches/SAMBA_3_0/source/utils/net_lookup.c2005-12-03 06:58:51 UTC (rev 12044) +++ branches/SAMBA_3_0/source/utils/net_lookup.c2005-12-03 06:58:54 UTC (rev 12045) @@ -211,7 +211,7 @@ realm.length = strlen(realm.data); } - rc = krb5_locate_kdc(ctx, realm, (struct sockaddr **) addrs, num_kdcs, 0); + rc = krb5_locate_kdc(ctx, realm, (struct sockaddr **)(void *)addrs, num_kdcs, 0); if (rc) { DEBUG(1, (krb5_locate_kdc failed (%s)\n, error_message(rc))); return -1; Modified: branches/SAMBA_3_0/source/utils/smbcquotas.c === --- branches/SAMBA_3_0/source/utils/smbcquotas.c2005-12-03 06:58:51 UTC (rev 12044) +++ branches/SAMBA_3_0/source/utils/smbcquotas.c2005-12-03 06:58:54 UTC (rev 12045) @@ -396,7 +396,7 @@ pstring username_str = {0}; pstring path = {0}; pstring set_str = {0}; - enum SMB_QUOTA_TYPE qtype; + enum SMB_QUOTA_TYPE qtype = SMB_INVALID_QUOTA_TYPE; int cmd = 0; static BOOL test_args = False; struct cli_state *cli;