[Samba] make a machine create an account in samba / ldap automagically
hi, thought i would see if some one could help i have finally got a samba ldap setup working near flawlessly, how ever the one thing i would like is for a machine to create an account on joining the domain. at present i need to add the account before hand which will just be an extra job so i would like to automate this, i have about 300 + computers to add to this domain. I can add the machine using the IDEALX smbldap_useradd but i am not sure it is creating all the info in ldap. the commands below seem to add it in perfectly. sudo useradd -d /dev/null -c machine nickname -s /bin/false ict1_01$ sudo passwd -l ict_01$ sudo pdbedit -a -m ict_01 so i tryed making a bash script which samba would then call this seemed not to work, i also read that the pdbedit should be auto run by samba if this is the case i can only guess there is a problem some where. can anyone offer some advice / suggestions if you need more info or log files just let me know and at what level of logging you would like. Oliver -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Access shares over IPSEC
If you become a 'local' ip (eg. meaning a normal internal ip in your LAN) wins should already been covered. However you VPN concentrator or DHCP provide should forward you the ip of the wins server. To check this: use an ip from a server to connect to eg: \\SERVERIP If this works, your wins server is not forwarded. You might be able the configure this manually in the properties of your UMTS connection, however I do not know if that will work. Another issues could be the MTU of the connection. IPSEC adds some overhead to the connection so packets from the server might not reach the other side. Good luck. Barry, Christopher wrote: You could be SOL then. -Original Message- From: Michael Voss [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 28, 2006 10:30 AM To: Barry, Christopher Subject: AW: [Samba] Access shares over IPSEC Hm, but i don't no where i can this make. We connect over an IPSec-Client and here is it impossible to make WINS-entry. I become a local Ip (i.e. 192.168.10.50) and that's all. I can't see my details of the IPSec connection. I have a internet connection via UMTS and with ipconfig /all I see only the details of the UMTS-internet connection. Well it's not the preferred method, but lmhosts can do the job. windir/system32/drivers/etc/lmhosts Add any machine names that are needed. Regards, Doug -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] libsmb/nmblib.c:receive_packet(1018)
On Tue, Apr 26, 2005 at 04:31:03PM -0700, Travis Knabe wrote: Received the following messages ( scrolling ) in the log.smbd: users could not access the samba server. had to stop the samba daemons. ran a ps -ef | grep smb found many smbd processes running. had to pkill the process, and then re-start samba to make the shares available. Running 3.012 Can't find anything anywhere. Any help would be appreciated. Interesting, what platform was smbd running on ? Jeremy. FYI. I have experienced this same issue with 3.0.10 running on Solaris 9. Only happens VERY occasionally though. Might be time to upgrade. top shows a single smbd process out of control and the log is flooded with the errors mentioned by Travis. Cheers, Aaron -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.21c on AIX 5.2 ML7
After installing Samba3.0.21c, on AIX 5.2 ML7 I get the following error trying to join a domain, can anyone offer any advice? Thanks Mark [WMSTRAIN:root]/opt/samba-3.0.21c/lib testparm Load smb config files from /opt/samba-3.0.21c/lib/smb.conf Loaded services file OK. WARNING: passdb expand explicit = yes is deprecated Server role: ROLE_DOMAIN_MEMBER Press enter to see a dump of your service definitions [global] workgroup = CORP realm = CORP.YW.KELDA security = ADS log level = 3 log file = /opt/Samba/3.0.21b/var/log.%m ldap ssl = no [WMSTRAIN:root]/opt/samba-3.0.21c/lib net ads join -U Administrator Administrator's password: Using short domain name -- CORP [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356) get_service_ticket: kerberos_kinit_password [EMAIL PROTECTED]@CORP.YW.KELDA failed: Client not found in Kerberos database [2006/03/30 11:07:04, 0] libads/kerberos.c:get_service_ticket(356)
[Samba] Strange problem with just 1 file..?
We are experiencing a strange problem with accessing a file, i tested it on samba 3.0.11 and 3.0.14a when we access the file (ask property's,copy or just run it) windows explorer gets system load of aprox. 100% for about 50 sec, and then starts (or shows the prop) the program. if i do the same, with another normal program on the same share and dir, the 50 sec. hick up isn't there. if i copy the file locally the issue is gone! the program is about 3,5 meg big, but i have a hunch that it's a so called compressed executable. (WilmarkWizard II Suite i guess) samba log files don't show strange behavior (no panics or errors on level 2). the server does it's work normally, we don't experience other probs with samba, it's just this one file. someone got a clue ?? Cheers Collen. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] FreeBSD Samba Binary Package
FreeBSD is using port to install everything. go to /usr/ports/net/samba/; make install clean ALex On Thu, 30 Mar 2006 19:14:57 +0530 ?? .??. ?? Vivek Varghese Cherian [EMAIL PROTECTED] wrote: Hi, The Samba URL http://us3.samba.org/samba/ftp/Binary_Packages/ does not seem to have a FreeBSD binary package. I tried a web search but to no avail. I have searched the samba list archives and i could not find any pointers either. Any assistance would be most welcome Thanks in Advance, -- Vivek Varghese Cherian Free as in Freedom www.gnu.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] FreeBSD Samba Binary Package
actually, it might be /usr/ports/net/samba3/. I think FreeBSD still keeps two versions of samba in their ports. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Alex Wang Sent: Thursday, March 30, 2006 5:56 AM To: ?? .??. ?? Vivek Varghese Cherian Cc: samba@lists.samba.org Subject: Re: [Samba] FreeBSD Samba Binary Package FreeBSD is using port to install everything. go to /usr/ports/net/samba/; make install clean ALex On Thu, 30 Mar 2006 19:14:57 +0530 ?? .??. ?? Vivek Varghese Cherian [EMAIL PROTECTED] wrote: Hi, The Samba URL http://us3.samba.org/samba/ftp/Binary_Packages/ does not seem to have a FreeBSD binary package. I tried a web search but to no avail. I have searched the samba list archives and i could not find any pointers either. Any assistance would be most welcome Thanks in Advance, -- Vivek Varghese Cherian Free as in Freedom www.gnu.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re[2]: [Samba] FreeBSD Samba Binary Package
Yes. U'r right. Normally I use tab to fix this error. :) ALex On Thu, 30 Mar 2006 06:25:28 -0800 Guillermo Gutierrez [EMAIL PROTECTED] wrote: actually, it might be /usr/ports/net/samba3/. I think FreeBSD still keeps two versions of samba in their ports. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Alex Wang Sent: Thursday, March 30, 2006 5:56 AM To: ?? .??. ?? Vivek Varghese Cherian Cc: samba@lists.samba.org Subject: Re: [Samba] FreeBSD Samba Binary Package FreeBSD is using port to install everything. go to /usr/ports/net/samba/; make install clean ALex On Thu, 30 Mar 2006 19:14:57 +0530 ?? .??. ?? Vivek Varghese Cherian [EMAIL PROTECTED] wrote: Hi, The Samba URL http://us3.samba.org/samba/ftp/Binary_Packages/ does not seem to have a FreeBSD binary package. I tried a web search but to no avail. I have searched the samba list archives and i could not find any pointers either. Any assistance would be most welcome Thanks in Advance, -- Vivek Varghese Cherian Free as in Freedom www.gnu.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] HowTo Manually edit TDB files?
Dear list, Does anyone know how to manually edit the UID and GID to SID database (.TDB files) so that I can specify exactly what user gets what ID? Thanks! -Cheers, Peter. In specification, Murphy's Law supersedes Ohm's Law. --Unknown -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] [SECURITY] Samba 3.0.21-3.0.21c: Exposure of machine account credentials in winbindd log files
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 == == == Subject: Exposed clear text of domain machine == account password in debug logs (log == level = 5) == CVE ID#: CAN_2006-1059 == == Versions:Samba Samba 3.0.21 - 3.0.21c (inclusive) == == Summary: The winbindd daemon writes the clear text == of the machine trust account password to == log files. These log files are world == readable by default. == == === Description === The machine trust account password is the secret shared between a domain controller and a specific member server. Access to the member server machine credentials allows an attacker to impersonate the server in the domain and gain access to additional information regarding domain users and groups. The winbindd daemon included in Samba 3.0.21 and subsequent patch releases (3.0.21a-c) writes the clear text of server's machine credentials to its log file at level 5. The winbindd log files are world readable by default and often log files are requested on open mailing lists as tools used to debug server misconfigurations. This affects servers configured to use domain or ads security and possibly Samba domain controllers as well (if configured to use winbindd). == Patch Availability == Samba 3.0.22 has been released to address this one security defect. A patch for Samba 3.0.21[a-c] has been posted at http://www.samba.org/samba/security/ An unpatched server may be protected by ensuring that non-administrative users are unable to read any winbindd log files generated at level 5 or greater. === Credits === This security issue discovered during an internal security audit of the Samba source code by the Samba Team. == == Our Code, Our Bugs, Our Responsibility. == The Samba Team == -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEK2qkIR7qMdg1EfYRAnxrAJ0Q2Egg+fWXUcgdWRHgGiEIs9BDXQCfdXiV NPVl/9WSNw7weI0c6EaDl1g= =1oLt -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Subversion on windows showing makefiles modified.
We are running samba 3.0.10 at work on our server. It is serving a filesystem which contains all of our subversion workspaces for our developers. We are using subversion 1.3.0. The source code and makefile have the eol-style set to native. When I first created the individual workspaces, I checked them out under linux; therefore, all of the files were in unix format. We generally do our work on windows computers; therefore, as files have been modified and committed, they are put back into the workspaces in dos format since the windows computers did the commit. Now here's the issue. The svn status command on windows will show a makefile as having been modified when it has not. This only occurs if I update my workspace because another developer modified and committed the makefile from their workspace. At first I thought the problem was because the normal file was in dos format while the file in the text-base directory was in unix format. I tried setting both files to unix format and also dos format and still get the same result from svn status saying the file has been modified. If I modify a makefile and commit it, svn status does not show the makefile as being modified after the commit. I checked and when I do the commit in my workspace, the normal file is in dos format and the text-base file is in unix format so I sure can't figure out what's going on. Normal source code files do not have this behavior even though they also end up in dos format while the text-base file is in unix format. To take this a step further, I copied my entire workspace onto my local disk on my windows computer and svn status does NOT report the makefile as having been modified. By the way, under linux, it does not report the makefile as modified. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] HowTo Manually edit TDB files?
Hi Peter, [EMAIL PROTECTED] schrieb am 30.03.2006 17:03:59: Dear list, Does anyone know how to manually edit the UID and GID to SID database (.TDB files) so that I can specify exactly what user gets what ID? Thanks! -Cheers, Peter. to change the primary group RID or SID using pdbedit a tool for trivial database (tdb) files is tdbtool Cheers, Michael -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Winbind and email server
Folks, Sincere apologies for asking this again, but I'm just not getting this to work, and must be missing something here: My company's network is based around a Windows 2003 server AD, with several RHEL AS 3 boxes connected to it via samba (3.0.21c-1). This scheme works very well. I've set up, and have successfully been using a sendmail-based email system, too. My issue is this: When I create a user account in AD, I have to also create it in the mail server. This is inconvenient and inefficient. I have samba installed on the mail server. I also have the mkhomedir module installed, and the appropriate line to invoke it is in the samba, pop, and smtp.sendmail config files under /etc/pam.d. My users are using the Outlook 2003 mail client. If I create a user in the email server, then Outlook has no problem connecting to the mail server using the user's credentials from the email server. But, if the user is only created in AD, then Outlook complains that the incoming pop server won't authenticate the user, despite the fact that winbind is fired up, wbinfo -u shows the user, and getent passwd shows the user's credentials. Arrrgh! IMHO, this is the one small thing that keeps this from being a really great system. Can anybody show me the way to get over the hump? Many thanks. Dimitri -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] changing passwords from Windows XP Pro workstations
I'm keeping this on list. On Thu, 2006-03-30 at 08:52 -0500, Gary Dale wrote: Craig White wrote: if I was going to guess...I think your problems are... http://samba.org/samba/docs/man/Samba3-ByExample/small.html#id2525330 see items #3 through #7 you don't have a passwd chat script as I recall. That's probably important. your setup should track this setup as I see it. http://samba.org/samba/docs/man/Samba3-ByExample/secure.html since you have no interest in advancing your skills, count me out next time unless you learn to ask simple questions. The simple truth is, if you want know little, point and click Windows network administration, you are probably better off using a Microsoft Windows server. My interest is in helping people that actually are interested in learning something, yes gasp, those that actually do want to become expert. Lastly, I would heavily suggest you forget about LDAP until your attitude changes because it is hostile to administrators that don't want to become knowledgdable. Craig Thanks Craig. I think you'll see a problem here. You suggest that the issue may be a lack of a passwd chat script, while two others suggest I remove the passwd chat script - which is almost identical to the one in the second URL you just gave. The issue isn't about whether people want to learn. It's about how much they have to learn to get things to work. If something takes too much effort, in the real world it doesn't get done. There is nothing inherently complicated about managing a directory service. Look at the simple Linux tools for user or printer administration for proof. I see no virtue in making Samba-LDAP configuration a black art. A basic setup should be easy to achieve. In fact, from what I have been reading, LDAP should be the standard Samba backend. That won't happen if people have to spend a week or more learning how to use it. You completely do not get it. Samba is infinitely configurable. Windows - at the moment of setup you have to choose the role for a server, whether a domain controller or a member server. The workstation is sold separately. Samba provides all of those roles including a Windows 95/98 server too. There is no way that anyone can solve your problem with any certainty without suitable logs, an inspection of your tdbsam and your /etc/passwd files AND the smb.conf, the whole of which you dumped on us last night and undoubtedly have changed many times since. Proper mail list etiquette and a commitment to demonstrating that you are actually focused on the problem would dictate that you limit those items to only the minimum necessary logs, smb.conf, etc. Your information is incomplete and as I stated last night, I am not going to speculate any further on your problems. In fact, your reply has made me sorry that I even speculated on the solution to your problem. As for my 'seeing' the problem - that being in your mind - different suggestions to solve your problem - that is absolutely absurd. ***The problem*** is you don't know how to provide the information with which someone can tell you what the definitive solution would be. As for your suggestion that Samba-LDAP a black art...Samba is Samba and LDAP is LDAP - you understand neither package so expecting them to work for you is a rather pointless endeavor. Knowledge is power and you appear to be lacking both. Yet you expect them to work for you even though you don't understand them nor wish to understand them - I wish you luck. Let me be blunt - you are a help vampire. Please don't email me any more until you change your ways. Craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] FreeBSD Samba Binary Package
Quoting ?? .??. ?? Vivek Varghese Cherian [EMAIL PROTECTED]: Hi, I think that you can use the ports support of freebsd to install the package Regards Michaeò Hi, The Samba URL http://us3.samba.org/samba/ftp/Binary_Packages/ does not seem to have a FreeBSD binary package. I tried a web search but to no avail. I have searched the samba list archives and i could not find any pointers either. Any assistance would be most welcome Thanks in Advance, -- Vivek Varghese Cherian Free as in Freedom www.gnu.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba This message was sent using IMP, the Internet Messaging Program. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] changing passwords from Windows XP Pro workstations
Craig White wrote: I'm keeping this on list. On Thu, 2006-03-30 at 08:52 -0500, Gary Dale wrote: Craig White wrote: if I was going to guess...I think your problems are... http://samba.org/samba/docs/man/Samba3-ByExample/small.html#id2525330 see items #3 through #7 you don't have a passwd chat script as I recall. That's probably important. your setup should track this setup as I see it. http://samba.org/samba/docs/man/Samba3-ByExample/secure.html since you have no interest in advancing your skills, count me out next time unless you learn to ask simple questions. The simple truth is, if you want know little, point and click Windows network administration, you are probably better off using a Microsoft Windows server. My interest is in helping people that actually are interested in learning something, yes gasp, those that actually do want to become expert. Lastly, I would heavily suggest you forget about LDAP until your attitude changes because it is hostile to administrators that don't want to become knowledgdable. Craig Thanks Craig. I think you'll see a problem here. You suggest that the issue may be a lack of a passwd chat script, while two others suggest I remove the passwd chat script - which is almost identical to the one in the second URL you just gave. The issue isn't about whether people want to learn. It's about how much they have to learn to get things to work. If something takes too much effort, in the real world it doesn't get done. There is nothing inherently complicated about managing a directory service. Look at the simple Linux tools for user or printer administration for proof. I see no virtue in making Samba-LDAP configuration a black art. A basic setup should be easy to achieve. In fact, from what I have been reading, LDAP should be the standard Samba backend. That won't happen if people have to spend a week or more learning how to use it. You completely do not get it. Samba is infinitely configurable. Windows - at the moment of setup you have to choose the role for a server, whether a domain controller or a member server. The workstation is sold separately. Samba provides all of those roles including a Windows 95/98 server too. There is no way that anyone can solve your problem with any certainty without suitable logs, an inspection of your tdbsam and your /etc/passwd files AND the smb.conf, the whole of which you dumped on us last night and undoubtedly have changed many times since. Proper mail list etiquette and a commitment to demonstrating that you are actually focused on the problem would dictate that you limit those items to only the minimum necessary logs, smb.conf, etc. Your information is incomplete and as I stated last night, I am not going to speculate any further on your problems. In fact, your reply has made me sorry that I even speculated on the solution to your problem. As for my 'seeing' the problem - that being in your mind - different suggestions to solve your problem - that is absolutely absurd. ***The problem*** is you don't know how to provide the information with which someone can tell you what the definitive solution would be. As for your suggestion that Samba-LDAP a black art...Samba is Samba and LDAP is LDAP - you understand neither package so expecting them to work for you is a rather pointless endeavor. Knowledge is power and you appear to be lacking both. Yet you expect them to work for you even though you don't understand them nor wish to understand them - I wish you luck. Let me be blunt - you are a help vampire. Please don't email me any more until you change your ways. Craig Under your rules, it is up to the patient to figure out what tests need to be performed before visiting the doctor. :) I have always regarded the help process as a dialogue - maybe that comes from my having worked in systems support at one time, or maybe it comes from my being a systems consultant (both inhouse and contract at various times) - but I have never expected the customer to tell me what is wrong in a manner that I can immediately say here's what you have to do. In my experience, the customer/patient comes to the experts with a problem. The experts dig around to determine what the issue really is, including asking for specific tests or more information. Then they make a diagnosis and prescribe a treatment/solution. Insulting the patient/customer is usually not a good way to go about things. I've been working with PCs since 1978 and with Linux since 1998. I put a lot of effort into learning about making things work. And according the the Mensa test, I'm not stupid. :) But I'm also not someone who has a narrowly defined role. My customers expect me to be broadly knowledgeable on just about every topic associated with computers. Even if I became an LDAP guru, I'd be unlikely to maintain that level of expertice for long. That is a fact of life in the real world.
[Samba] w2k ADS + Samba ADS Member, quirky browse mode
Hello, I'm seeing an odd quirk running samba 3.0.21c winbind with kerberos 1.3.4 joining a windows 2000 ADS domain on RHEL3. The Samba server's hostname is staging. I run: /usr/kerberos/bin/kinit [EMAIL PROTECTED] net ads join Then I start up winbind and smb. winbind works prefectly. I can log in as a domain user from via sshd/PAM, and the usual: getent passwd getent group Shows my domain users and groups just fine. In addition, I can see a machine named staging in my PDC's Computer list. From a Windows XP domain member on the network, I can see a server named Staging in my network places browse list. But if I click it I can't log in, and I see this in /var/log/samba/my.ip.goes.here.log: [2006/03/30 12:13:24, 2] smbd/sesssetup.c:setup_new_vc_session(772) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2006/03/30 12:13:24, 1] smbd/sesssetup.c:reply_spnego_kerberos(197) Failed to verify incoming ticket! HOWEVER, if I attempt to access the samba machine directly using this URL syntax: \\staging.domain.com Then it works fine. It would appear that samba/kerberos doesn't want to respond to just: \\staging Is this a bug, or an error in my config? I'll be happy to provide more config info if needed. Any ideas? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.22 RPM packages for all SuSE Linux products
Hello, RPM packages of Samba 3.0.22 for all SuSE Linux products are available at ftp://ftp.SuSE.com/pub/projects/samba/3.0/ or http://ftp.SuSE.com/pub/projects/samba/3.0/ Supported SuSE Linux based products are at the moment SuSE Linux 9.1, 9.2, 9.3, 10.0, UnitedLinux 1/ SuSE Linux Enterprise Server (SLES) 8, SLES 9, and factory (= the currently developed product). For some architectures - like ia64, ppc, s390(x) - you find a limited releases subset. The same packages are also available at http://download.Samba.org/samba/ftp/Binary_Packages/SuSE/3.0/ Please use a mirror close to your site. A list of Samba.org mirrors is available at http://Samba.org/ There choose a mirror at the right top of the page. There are also a bunch of SuSE mirrors. A list of international mirror sites is at http://www.novell.com/products/suselinux/downloads/ftp/int_mirrors.html A list of mirrors in Germany is at http://www.novell.com/products/suselinux/downloads/ftp/germ_mirrors.html If you encounter any problem with these packages please don't blame the Samba Team. Instead file a bug to https://bugzilla.Samba.org/, pick product Samba 3.0, then select 'component' Packaging and set 'assign to' to samba-maintainers at suse dot de. Or use http://bugzilla.Novell.com with the same assignee instead. For additional information - how to report bugs and which log files are required - see http://en.openSUSE.org/Samba Our customers, our products, our responsibility. Have a lot of fun... Lars - for the Novell Samba Team -- Lars Müller [ˈlaː(r)z ˈmʏlɐ] Samba Team SuSE Linux, Maxfeldstraße 5, 90409 Nürnberg, Germany pgpGGufY9JWl3.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Domain Browsing broken after upgrade from 3.0.10 - 3.0.21
Anyone have any thoughts on this?? On 3/28/06, George Wolanin [EMAIL PROTECTED] wrote: Or maybe it was the upgrade from FC2 - FC4.. I recently was running a FC2 Samba PDC and OpenLDAP, using Samba-3.0.10. After I upgraded the server from FC2 to FC4 samba was broken and wouldn't load because it was complaining about a library file not existing. (libldap.so.2) I believe.. Sure enough it wasn't there. So I had to recompile Samba 3.0.10 again. Well the compile failed for 3.0.10 with the following error --snip--- ./configure --prefix=/opt/samba-3.0.10 --with-ldapsam --snip--- # make Using FLAGS = -O -Iinclude -I/usr/src/samba-3.0.10/source/include -I/usr/src/samba-3.0.10/source/ubiqx -I/usr/src/samba-3.0.10/source/smbwrapper -I. -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -D_GNU_SOURCE -I/usr/src/samba-3.0.10/source LIBS = -lcrypt -lresolv -lnsl -ldl LDSHFLAGS = -shared -Wl,-Bsymbolic LDFLAGS = Compiling dynconfig.c In file included from include/smb.h:1679, from include/includes.h:819, from dynconfig.c:21: include/popt_common.h:25: error: array type has incomplete element type include/popt_common.h:26: error: array type has incomplete element type include/popt_common.h:27: error: array type has incomplete element type include/popt_common.h:28: error: array type has incomplete element type --snip--- So i downloaded the latest version of samba, 3.0.21c and it compiled just fine but when i started the SMB server, I wasn't able to browse the servers within the domain. They just wouldn't show up. What I do in my WinXP pro clients is click: Start-My Network Places-Entire Network-Microsoft Windows Network-BUNSIZE I see the BUNSIZE domain, but as soon as I click BUNSIZE I get a blank screen. In version 3.0.10 I used to see my two servers, OSCAR HEFE-WEZIEN However, when I put in the Exploder address bar, \\OSCAR \\HEFE-WEIZEN, I am able to browse those servers. They just aren't showing up in the Domain view. Is there some kind of special upgrade procedure that I was supposed to follow to maybe update the secret.tdb or is it just as easy as creating a new one? Also, when I try to browse the domain ON the FC4 server, I am unable to see it and the servers. So this just doesn't seem to be a Winblows issue. All firewalls are off in the server. I am wondering if FC4 has some hidden security features that I am not aware of.. --smb.conf--- [global] ; unix charset = LOCALE netbios name = OSCAR workgroup = BUNSIZE server string = Primary Domain Controller ; interfaces = eth0, lo remote announce = xxx.xxx.xxx.xxx use sendfile = no ; bind interfaces only = Yes passdb backend = ldapsam:ldap://127.0.0.1 ; username map = /opt/samba/private/smbusers log level = 6 syslog = 0 log file = /var/log/samba/%m max log size = 50 smb ports = 139 445 ; name resolve order = wins bcast hosts time server = Yes add user script = /opt/samba/sbin/smbldap-useradd -a -m %u delete user script = /opt/samba/sbin/smbldap-userdel %u add group script = /opt/samba/sbin/smbldap-groupadd -p %g delete group script = /opt/samba/sbin/smbldap-groupdel %g add user to group script = /opt/samba/sbin/smbldap-groupmod -m %u %g delete user from group script = /opt/samba/sbin/smbldap-groupmod -x %u %g set primary group script = /opt/samba/sbin/smbldap-usermod -g %g %u add machine script = /opt/samba/sbin/smbldap-useradd -w %u logon script = scripts\logon.bat logon path = \\%L\profiles\%U logon drive = X: domain logons = yes os level = 255 preferred master = yes domain master = yes security = user local master = yes wins support = yes browseable = yes ldap suffix = dc=xx,dc=xxx,dc=com ldap machine suffix = ou=Computers ldap user suffix = ou=Pee ldap group suffix = ou=Groups ldap idmap suffix = ou=Users ldap admin dn = cn=Manager,dc=xx,dc=xx,dc=com idmap backend = ldap:ldap://127.0.0.1 idmap uid = 1-2 idmap gid = 1-2 # printer configuration load printers = Yes printing = cups printcap name = cups guest account = nobody --snip--- Thanks in advance for any help that you can provide. -G -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] changing passwords from Windows XP Pro workstations
Gary Dale wrote: Craig White wrote: I'm keeping this on list. On Thu, 2006-03-30 at 08:52 -0500, Gary Dale wrote: Craig White wrote: if I was going to guess...I think your problems are... http://samba.org/samba/docs/man/Samba3-ByExample/small.html#id2525330 see items #3 through #7 you don't have a passwd chat script as I recall. That's probably important. your setup should track this setup as I see it. http://samba.org/samba/docs/man/Samba3-ByExample/secure.html since you have no interest in advancing your skills, count me out next time unless you learn to ask simple questions. The simple truth is, if you want know little, point and click Windows network administration, you are probably better off using a Microsoft Windows server. My interest is in helping people that actually are interested in learning something, yes gasp, those that actually do want to become expert. Lastly, I would heavily suggest you forget about LDAP until your attitude changes because it is hostile to administrators that don't want to become knowledgdable. Craig Thanks Craig. I think you'll see a problem here. You suggest that the issue may be a lack of a passwd chat script, while two others suggest I remove the passwd chat script - which is almost identical to the one in the second URL you just gave. The issue isn't about whether people want to learn. It's about how much they have to learn to get things to work. If something takes too much effort, in the real world it doesn't get done. There is nothing inherently complicated about managing a directory service. Look at the simple Linux tools for user or printer administration for proof. I see no virtue in making Samba-LDAP configuration a black art. A basic setup should be easy to achieve. In fact, from what I have been reading, LDAP should be the standard Samba backend. That won't happen if people have to spend a week or more learning how to use it. You completely do not get it. Samba is infinitely configurable. Windows - at the moment of setup you have to choose the role for a server, whether a domain controller or a member server. The workstation is sold separately. Samba provides all of those roles including a Windows 95/98 server too. There is no way that anyone can solve your problem with any certainty without suitable logs, an inspection of your tdbsam and your /etc/passwd files AND the smb.conf, the whole of which you dumped on us last night and undoubtedly have changed many times since. Proper mail list etiquette and a commitment to demonstrating that you are actually focused on the problem would dictate that you limit those items to only the minimum necessary logs, smb.conf, etc. Your information is incomplete and as I stated last night, I am not going to speculate any further on your problems. In fact, your reply has made me sorry that I even speculated on the solution to your problem. As for my 'seeing' the problem - that being in your mind - different suggestions to solve your problem - that is absolutely absurd. ***The problem*** is you don't know how to provide the information with which someone can tell you what the definitive solution would be. As for your suggestion that Samba-LDAP a black art...Samba is Samba and LDAP is LDAP - you understand neither package so expecting them to work for you is a rather pointless endeavor. Knowledge is power and you appear to be lacking both. Yet you expect them to work for you even though you don't understand them nor wish to understand them - I wish you luck. Let me be blunt - you are a help vampire. Please don't email me any more until you change your ways. Craig Under your rules, it is up to the patient to figure out what tests need to be performed before visiting the doctor. :) I have always regarded the help process as a dialogue - maybe that comes from my having worked in systems support at one time, or maybe it comes from my being a systems consultant (both inhouse and contract at various times) - but I have never expected the customer to tell me what is wrong in a manner that I can immediately say here's what you have to do. In my experience, the customer/patient comes to the experts with a problem. The experts dig around to determine what the issue really is, including asking for specific tests or more information. Then they make a diagnosis and prescribe a treatment/solution. Insulting the patient/customer is usually not a good way to go about things. I've been working with PCs since 1978 and with Linux since 1998. I put a lot of effort into learning about making things work. And according the the Mensa test, I'm not stupid. :) But I'm also not someone who has a narrowly defined role. My customers expect me to be broadly knowledgeable on just about every topic associated with computers. Even if I became an LDAP guru, I'd be unlikely to maintain that level of expertice for long. That is a fact of life in the real
Re: [Samba] date created attribute doesn't seem right
-Original Message- From: Henrik Zagerholm [mailto:[EMAIL PROTECTED] Sent: Monday, March 13, 2006 09:54 AM To: 'g wenzel' Cc: samba@lists.samba.org Subject: Re: [Samba] date created attribute doesn't seem right Just be sure to use the same compile flags as Samba or you get errors. I forgot the -D_LARGFILE flag and got wrong mtime/atime numbers. I think the file pointers get messed up. Thank you responding, but please understand that I didn't compile samba. I run debian sarge and I installed from a debian package. Furthermore, we have a snap server which runs a locked down version of linux with samba. Both machines have the following problem: When I copy files from a windows machines to the samba servers, the 'date created' attribute is always the same value as the 'date modified' attribute. The 'date modified' attribute remains the same, but the 'date created' changes as noted above. Can anyone on this list verify that their samba server doesn't have the same type of behaviour, especially if you run debian. Thanks, Gerald Cheers, Henrik 13 mar 2006 kl. 05:34 skrev g wenzel: I have transfered files larger than 2GB on both the debian server and the snap. In both cases, the md5 sums of the files are equal. Perhaps the issue doesn't have to do with large file support? -gerald -Original Message- From: Henrik Zagerholm [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 8, 2006 11:11 PM To: 'g wenzel' Cc: samba@lists.samba.org Subject: Re: [Samba] date created attribute doesn't seem right Hi, I had the same problem when developing with libsmbclient. The problem was that I didn't compile with -D_LARGEFILE support. If you've compiled samba by yourself please make sure you use that flag. Cheers, Henrik 8 mar 2006 kl. 22:27 skrev g wenzel: Greetings, I've setup a samba server (ver 3.0.14a-3) on debian sarge. When I copy files to the server, the 'date created' attribute is always the same value as the 'date modified' attribute. The 'date modified' attribute remains the same, but the 'date created' changes as noted above. I also have a snap server which has the same type of behavior. It is my understanding that snap servers run samba. Is this a bug with samba or am I missing something? Thanks. Gerald Wenzel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba 3 performance issues
I believe I have some hardware or configuration related performance issues running samba 3.0.14a-3sarge. Our server is an Intel Celeron 2 Ghz with 512 MB of RAM and a 3ware card using SATA disks in a RAID 5 configuration (3ware controller card). We have a gigabit network and are using Intel Gigabit ethernet cards e1000). When copying large files to the samba shares on the system, the transfer rate maxes out near 100 mb/s. We tested with nttcp and were able to get speeds of nearly 800mb/s. So I think it is safe to conclude this is not a network issue. Various tools like top, xosview and mpstat convinced us that we are bound in the CPU. Stopping the samba file transfer and the cpu idle time exceeds 90%. We are convinced that our CPU is the bottleneck, but not sure why. #cat /proc/cpuinfo processor : 0 vendor_id : GenuineIntel cpu family : 15 model : 2 model name : Intel(R) Celeron(R) CPU 2.00GHz stepping: 9 cpu MHz : 1996.920 cache size : 128 KB fdiv_bug: no hlt_bug : no f00f_bug: no coma_bug: no fpu : yes fpu_exception : yes cpuid level : 2 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe cid bogomips: 3956.73 Does anyone have any advice on how to speed up our file transfers? We regularly have to 18 GB worth of files to this system, and it would be very good if we could speed it up. At current speeds, we get no advantage at all from even having gigabit network cards! Please feel free to ask me any other questions about our system setup. Thanks in advance for any advice, Rohit -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba 3 performance issues
On Thu, Mar 30, 2006 at 01:52:29PM -0500, Rohit Kumar Mehta wrote: I believe I have some hardware or configuration related performance issues running samba 3.0.14a-3sarge. Our server is an Intel Celeron 2 Ghz with 512 MB of RAM and a 3ware card using SATA disks in a RAID 5 configuration (3ware controller card). We have a gigabit network and are using Intel Gigabit ethernet cards e1000). When copying large files to the samba shares on the system, the transfer rate maxes out near 100 mb/s. We tested with nttcp and were able to get speeds of nearly 800mb/s. So I think it is safe to conclude this is not a network issue. Various tools like top, xosview and mpstat convinced us that we are bound in the CPU. Stopping the samba file transfer and the cpu idle time exceeds 90%. We are convinced that our CPU is the bottleneck, but not sure why. Have you tried transferring the files using smbclient ? That will tell you if it's a Windows client issue. I'm assuming you're using Windows clients although you didn't give that information in your message. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Mount a share from windows on a folder rather than a drive
Hi Every body: I have a questin and I dont know if this is the right place to ask. If not please provide me with an advice. I'm looking to mount a samba share form windows. However this is possible if I want to map it as a drive. Is't possible to mount it as a folder. example, let's say I need to mount a remote share for extra programs. Windows will allow me to do: net use x: \\myserver but what if I need to connect \\myserver to a folder c:\extra_prog Is't there a way around this without using links and short cuts ??? Thank you -- Mansour Al-Aqeel [EMAIL PROTECTED] -- http://www.fastmail.fm - Faster than the air-speed velocity of an unladen european swallow -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] changing passwords from Windows XP Pro workstations
simo wrote: On Wed, 2006-03-29 at 23:33 -0500, Gary Dale wrote: --- OK, the logs aren't quite silent. Here's one when I tried to change my password from a workstation (the log fragment is from samba/log.netbiosname - log.nmbd and log.smbd are silent for the period). This time it came back with you do not have permission to change your password after only a few seconds. The other passwords I've been trying to change (and this password in previous attempts) have gone away for more than 15 minutes before the dialogue box closed (without changing the password): Log level 0 is not that useful, you may raise it to 3 or 5 and see what error is returned on a password change. ... Anyway, for some masochistic reason I took the time to go back and see your recent postings and ... well man, you really need to take a breath. All your attempts to set up samba with LDAP have failed just because you do not understand the openLdap ACL model and, more simply, you failed to do basic things like defining the same dn as ldap manager in slapd.conf and smb.conf (as the documentation clearly states). Anyway you got back to tdbsam, fine, it is the simpler option. Now can you check the smb.conf you posted earlier today and: 1. Raise the log level 2. comment out password program, password chat and unix password sync so that we are sure they are not set up wrongly 3. tell me how add group script and add user to group script can possibly ever work (unless the text of the conf has been mangled the first misses the only meaningful parameter which is the group name and the second has a wild back tick ...) And then also invalid users and admin users are in conflict about root and printing is set to cups yet you try to define a mysterious lpq command = %p I agree that one not need to be a developer to set up things, but at least, please, check carefully the configuration file AND the logs before shouting against the hard work of other people and claiming the documentation is wrong. Simo. Thanks Simo. It really is better to light one candle than to curse the darkness! re. 1) At various times I did have admin in both files and at others it was samba in both. That didn't work either. re. 2) my current problem: your suggestion #2 worked. When unix passwd synch is commented out, I was able to change my Samba password. When it was set to Yes, the password synch took forever, then failed silently. It looks like there is an issue with changing the Unix/Linux password that I have to resolve. It appears also that Windows may be waiting for a response such as is included in the passwd chat in By Example's Example 3.4. 130 User Network with //tdbsam// [globals] Section. When I included the response, the Windows dialogue failed fairly quickly. Possibly (probably) it an issue with the group script problems you identified. I'll work on it. Also, I never said the documentation was wrong, just not perfect. I also said I don't personally like the style it's written in. RTFM is rarely a useful response to anything except the most basic problems. :) Anyway, as proof that even bright and knowledgeable people miss things, your suggestions have got me further than my previous exchange with Jeremy Allison. :) I'm not going to send you the log file since I gather that people here have lost interest in my postings (I have a keen grasp of the obvious, to borrow a phrase Gary Trudeau used a few decades ago). Besides, you and Craig have given me enough help to follow through myself. So again thanks. Much appreciated! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] changing passwords from Windows XP Pro workstations
A note on the password sync issue. Someone more knowledgeable correct me if I'm wrong. When using the password syncing feature, the password must be changed using the smbpasswd program on the pdc. The reason being that using the dialog from a windows client sends the updated password to the pdc as a pre-hashed value. The pdc never sees the clear text password...just like it doesn't during authentication. (This is a good thing.) When using smbpasswd, the smbpasswd binary actually has the clear text password to work with. It first attempts to update the unix password and only proceeds to change the samba password if the unix change was a success. So, in my implementation, I've done the following to allow clients to change their passwords (unix + samba) from the windows machine. It's clumsy (requires original password twice) and is text based (a linux login) rather than a pretty gui, but it does keep the passwords the same from the windows client. Step 1: Disable the password change buttons via policy, registry hack, etc. Step 2: I have a perl script that sets up a custom session (passwd) in putty, stuffs in the key for the password changing server (yes, this isn't ideal, keys are meant to be validated for a reason) and then launches putty, calling the custom session. The user sees a putty window pop up asking for their password. Once authenticated, I present some text, and then drive smbpasswd on the Linux side. If you didn't need to present any custom text, you could simply drive smbpasswd directly...I keep this script on a shared drive, and can therefore update the servers key very easily if it changes for some reason. I've attached my script. I hope someone else can make use of it. If I'm way off on my assessment of the different password changing methods (gui vs smbpasswd) and there is a way to do this from the gui, I'd appreciate someone letting me know. Thanks -Ben On Thu, 2006-03-30 at 14:31 -0500, Gary Dale wrote: simo wrote: On Wed, 2006-03-29 at 23:33 -0500, Gary Dale wrote: --- OK, the logs aren't quite silent. Here's one when I tried to change my password from a workstation (the log fragment is from samba/log.netbiosname - log.nmbd and log.smbd are silent for the period). This time it came back with you do not have permission to change your password after only a few seconds. The other passwords I've been trying to change (and this password in previous attempts) have gone away for more than 15 minutes before the dialogue box closed (without changing the password): Log level 0 is not that useful, you may raise it to 3 or 5 and see what error is returned on a password change. ... Anyway, for some masochistic reason I took the time to go back and see your recent postings and ... well man, you really need to take a breath. All your attempts to set up samba with LDAP have failed just because you do not understand the openLdap ACL model and, more simply, you failed to do basic things like defining the same dn as ldap manager in slapd.conf and smb.conf (as the documentation clearly states). Anyway you got back to tdbsam, fine, it is the simpler option. Now can you check the smb.conf you posted earlier today and: 1. Raise the log level 2. comment out password program, password chat and unix password sync so that we are sure they are not set up wrongly 3. tell me how add group script and add user to group script can possibly ever work (unless the text of the conf has been mangled the first misses the only meaningful parameter which is the group name and the second has a wild back tick ...) And then also invalid users and admin users are in conflict about root and printing is set to cups yet you try to define a mysterious lpq command = %p I agree that one not need to be a developer to set up things, but at least, please, check carefully the configuration file AND the logs before shouting against the hard work of other people and claiming the documentation is wrong. Simo. Thanks Simo. It really is better to light one candle than to curse the darkness! re. 1) At various times I did have admin in both files and at others it was samba in both. That didn't work either. re. 2) my current problem: your suggestion #2 worked. When unix passwd synch is commented out, I was able to change my Samba password. When it was set to Yes, the password synch took forever, then failed silently. It looks like there is an issue with changing the Unix/Linux password that I have to resolve. It appears also that Windows may be waiting for a response such as is included in the passwd chat in By Example's Example 3.4. 130 User Network with //tdbsam// [globals] Section. When I included the response, the Windows dialogue failed fairly quickly. Possibly (probably) it an issue with the group script problems you identified. I'll work on it. Also, I never
Re: [Samba] samba 3 performance issues
On Thu, 2006-03-30 at 13:52 -0500, Rohit Kumar Mehta wrote: I believe I have some hardware or configuration related performance issues running samba 3.0.14a-3sarge. Our server is an Intel Celeron 2 Ghz with 512 MB of RAM and a 3ware card using SATA disks in a RAID 5 configuration (3ware controller card). We have a gigabit network and are using Intel Gigabit ethernet cards e1000). When copying large files to the samba shares on the system, the transfer rate maxes out near 100 mb/s. We tested with nttcp and were able to get speeds of nearly 800mb/s. So I think it is safe to conclude this is not a network issue. Various tools like top, xosview and mpstat convinced us that we are bound in the CPU. Stopping the samba file transfer and the cpu idle time exceeds 90%. We are convinced that our CPU is the bottleneck, but not sure why. #cat /proc/cpuinfo processor : 0 vendor_id : GenuineIntel cpu family : 15 model : 2 model name : Intel(R) Celeron(R) CPU 2.00GHz stepping: 9 cpu MHz : 1996.920 cache size : 128 KB fdiv_bug: no hlt_bug : no f00f_bug: no coma_bug: no fpu : yes fpu_exception : yes cpuid level : 2 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe cid bogomips: 3956.73 Does anyone have any advice on how to speed up our file transfers? We regularly have to 18 GB worth of files to this system, and it would be very good if we could speed it up. At current speeds, we get no advantage at all from even having gigabit network cards! Please feel free to ask me any other questions about our system setup. Thanks in advance for any advice, Have you done *ANY* system caching parameters, filesystem tuning, or Samba Config tuning? What have you done besides verify it is not the network itself? Have you tested throughput for the 3ware card? I can tell you this, if you have the RAID-5 setup not-optimally to work with the block sizing on your Filesystem you'll never get excellent throughput. I always tend to use largest blocking factors with the 3ware cards for RAID-5. This (for me at least) has proven the fastest and least latency ridden settings for me. But then I am using XFS on all of my 3ware RAID-5 setups. For Mirroring, I typically let the defaults work. Defaults have been by far the best setup for most filesystems. If you still believe you are suffering from CPU overload, I'd suggest sending it to the RAID-5 array with over compressed scp (with mild compression of 4 or 5) and then without compression. See what you get. I am betting the real problem comes from multiple bus-mastering cards conflicting or colliding. The Intel-E1000 and the 3ware card are definitely both bus-mastering. There are a couple of things on the Samba side you can do. Turn off Logging (you don't need it really), change the read and send buffer sizes, change the TCP setting it uses to be more in line with Gigabit, move to using Jumbo frames, get a TOE (TCP Offload Engine) NIC. Then if you still have issues, turn on logging for the stuff you are worried about (auth would be 0, etc...) and then add a sniffer to you connection. You'll definitely find something. My gut reaction is that since this is a Celeron Processor, you really need to goto 64-bit slots on the mother board. Getting a PCI-X capable motherboard would greatly help your problems. One last thing, any of the 95xx cards from 3ware are 3.3V only and are PCI2.3 compliant, they will function incorrectly possibly even be ruined or not recognized by a 5V or Auto-detect 5v/3.3v slot. The 9xxx, 8xxx and 7xxx cards can be used in either a 5V or 3.3V PCI slot. Good luck. -- greg, [EMAIL PROTECTED] The technology that is Stronger, Better, Faster: Linux Use Debian GNU/Linux, its a bazaar thing NOTICE: Due to Presidential Executive Orders, the National Security Agency may have read this email without warning, warrant, or notice, and certainly without probable cause. They may do this without any judicial or legislative oversight. You have no recourse nor protection. signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba 3 performance issues
On Thu, Mar 30, 2006 at 02:46:12PM -0500, Rohit Kumar Mehta wrote: Hi, The tests were done with BartPE/WindowsXP and with Knoppix 4.0 and smbmount. Would smbmount perform much different than smbclient? I can certainly repeat the test using a different client tomorrow. The Celeron CPU may very well be our problem. I wish it were a simple misconfiguration and not a hardware issue. Yes, smbmount might perform differently from smbclient. I don't know the smbfs codebase at all - I know a lot about the smbclient code :-). Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] changing passwords from Windows XP Pro workstations
On a RHEL4, with Samba 3.0.10, I have the following password options below. I just tested and with a WinXP Pro client, I did the ctrl-alt-delete and changed my password. Once I did that, I ssh'ed into the box and it used my new password. [global] encrypt passwords = yes null passwords = yes obey pam restrictions = yes passwd chat = *New*UNIX*password* %n\n*ReType*new*UNIX*password*%n\n *passwd:*all*authentication*tokens*update d*successfully* passwd program = /usr/bin/passwd %u unix password sync = Yes Ben Walton wrote: A note on the password sync issue. Someone more knowledgeable correct me if I'm wrong. -- Eric Feldhusen System Administrator http://www.remc1.org [EMAIL PROTECTED] PO Box 270 (906) 482-4520 x239 809 Hecla St(906) 482-5031 fax Hancock, MI 49930 (906) 370 6202 mobile -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] changing passwords from Windows XP Pro workstations
On Thu, 2006-03-30 at 14:31 -0500, Gary Dale wrote: re. 2) my current problem: your suggestion #2 worked. When unix passwd synch is commented out, I was able to change my Samba password. When it was set to Yes, the password synch took forever, then failed silently. It looks like there is an issue with changing the Unix/Linux password that I have to resolve. It appears also that Windows may be waiting for a response such as is included in the passwd chat in By Example's Example 3.4. 130 User Network with //tdbsam// [globals] Section. When I included the response, the Windows dialogue failed fairly quickly. You need to check your password chat option, that is a very senitive option that need to match exactly what your system asks on the command line when you want to change a password. Failing to do that may led the expect script to wait forever on a never coming input. Simo. -- Simo Sorce Samba Team GPL Compliance Officer email: [EMAIL PROTECTED] http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] changing passwords from Windows XP Pro workstations
On Thu, 2006-03-30 at 14:45 -0500, Ben Walton wrote: A note on the password sync issue. Someone more knowledgeable correct me if I'm wrong. You are wrong, see Eric's answer. Simo. -- Simo Sorce Samba Team GPL Compliance Officer email: [EMAIL PROTECTED] http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] changing passwords from Windows XP Pro workstations
Yes, I just verified this on my setup. I've never had luck in the past, but I must have had a non-working password chat at those times (quite some time ago now). Apologies for misleading anyone. I have a 'unique' setup for my user accounts, so my little script will still be useful for certain purposes here, but I can now allow normal password changes. Thanks Eric Simo. -Ben On Thu, 2006-03-30 at 15:04 -0500, Eric J. Feldhusen wrote: On a RHEL4, with Samba 3.0.10, I have the following password options below. I just tested and with a WinXP Pro client, I did the ctrl-alt-delete and changed my password. Once I did that, I ssh'ed into the box and it used my new password. [global] encrypt passwords = yes null passwords = yes obey pam restrictions = yes passwd chat = *New*UNIX*password* %n\n*ReType*new*UNIX*password*%n\n *passwd:*all*authentication*tokens*update d*successfully* passwd program = /usr/bin/passwd %u unix password sync = Yes Ben Walton wrote: A note on the password sync issue. Someone more knowledgeable correct me if I'm wrong. -- Eric Feldhusen System Administrator http://www.remc1.org [EMAIL PROTECTED] PO Box 270 (906) 482-4520 x239 809 Hecla St(906) 482-5031 fax Hancock, MI 49930 (906) 370 6202 mobile -- Ben Walton Systems Programmer Office of Planning IT Faculty of Arts Science University of Toronto Cell: 416.407.5610 PGP Key Id: 8E89F6D2 signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] date created attribute doesn't seem right
Sorry I misinterpret your question. My bad. The thing is that common linux filesystem does not save the creation time of files but maybe a samba share can. I'm not currently running samba on a debian server but I will, as soon as I can get my new SATA drives to work on my debian system :) Just wanted to clarify my first answer :) Cheers, 30 mar 2006 kl. 20:25 skrev g wenzel: -Original Message- From: Henrik Zagerholm [mailto:[EMAIL PROTECTED] Sent: Monday, March 13, 2006 09:54 AM To: 'g wenzel' Cc: samba@lists.samba.org Subject: Re: [Samba] date created attribute doesn't seem right Just be sure to use the same compile flags as Samba or you get errors. I forgot the -D_LARGFILE flag and got wrong mtime/atime numbers. I think the file pointers get messed up. Thank you responding, but please understand that I didn't compile samba. I run debian sarge and I installed from a debian package. Furthermore, we have a snap server which runs a locked down version of linux with samba. Both machines have the following problem: When I copy files from a windows machines to the samba servers, the 'date created' attribute is always the same value as the 'date modified' attribute. The 'date modified' attribute remains the same, but the 'date created' changes as noted above. Can anyone on this list verify that their samba server doesn't have the same type of behaviour, especially if you run debian. Thanks, Gerald Cheers, Henrik 13 mar 2006 kl. 05:34 skrev g wenzel: I have transfered files larger than 2GB on both the debian server and the snap. In both cases, the md5 sums of the files are equal. Perhaps the issue doesn't have to do with large file support? -gerald -Original Message- From: Henrik Zagerholm [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 8, 2006 11:11 PM To: 'g wenzel' Cc: samba@lists.samba.org Subject: Re: [Samba] date created attribute doesn't seem right Hi, I had the same problem when developing with libsmbclient. The problem was that I didn't compile with -D_LARGEFILE support. If you've compiled samba by yourself please make sure you use that flag. Cheers, Henrik 8 mar 2006 kl. 22:27 skrev g wenzel: Greetings, I've setup a samba server (ver 3.0.14a-3) on debian sarge. When I copy files to the server, the 'date created' attribute is always the same value as the 'date modified' attribute. The 'date modified' attribute remains the same, but the 'date created' changes as noted above. I also have a snap server which has the same type of behavior. It is my understanding that snap servers run samba. Is this a bug with samba or am I missing something? Thanks. Gerald Wenzel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Cannot Access Shares (Permission Denied)
Hello, I am having trouble accessing my shares. I have set up a homes directory, public and temp directory. Every time I try to either browse to my samba server, or map to it I am prompted with a password dialog box. I have tried to set up samba to be a member server in Active Directory and set my valid users = @DOMAIN+info_sys , which is the security group that I belong to. When I enter my user name and password nothing happens. I desperately want to get this working, but I cannot seem to figure out how to make Samba use my Active Directory user accounts for accessing shares. Do I need to assign permissions to the folder (/data) itself? If so can someone please explain how to give ownership or full control over a linux folder (/data) to a security group from Active Directory? Any help is greatly appreciated. Adam Katulak -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] changing passwords from Windows XP Pro workstations
simo wrote: On Thu, 2006-03-30 at 14:31 -0500, Gary Dale wrote: re. 2) my current problem: your suggestion #2 worked. When unix passwd synch is commented out, I was able to change my Samba password. When it was set to Yes, the password synch took forever, then failed silently. It looks like there is an issue with changing the Unix/Linux password that I have to resolve. It appears also that Windows may be waiting for a response such as is included in the passwd chat in By Example's Example 3.4. 130 User Network with //tdbsam// [globals] Section. When I included the response, the Windows dialogue failed fairly quickly. You need to check your password chat option, that is a very senitive option that need to match exactly what your system asks on the command line when you want to change a password. Failing to do that may led the expect script to wait forever on a never coming input. Simo. Hey, you're good! That was exactly the problem. My original passwd chat was almost correct, except that it ended with a . field. That, I gather, prevented it from reporting to Windows - hence the hang. I changed the entire chat to one from the Samba By Example, which didn't work on my system, but at least reported the failure. Changing the first two fields back to my original, and correcting the third one, got it humming along. Thanks again Simo! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] changing passwords from Windows XP Pro workstations
I'm wondering about the pros and cons of simplifying the default chat - maybe something like: *password* %n\n *password* %n\n *success* This should work on my system as well. I'm not sure about the system from the Example 3.4. 130 User Network with tdbsam [globals] Section, since the final success condition may or may not report success after the password is reported changed. Anyway, a simpler default dialogue would make the chat more immune to differences between systems, so things like retype versus re-enter wouldn't come into play. Ben Walton wrote: Yes, I just verified this on my setup. I've never had luck in the past, but I must have had a non-working password chat at those times (quite some time ago now). Apologies for misleading anyone. I have a 'unique' setup for my user accounts, so my little script will still be useful for certain purposes here, but I can now allow normal password changes. Thanks Eric Simo. -Ben On Thu, 2006-03-30 at 15:04 -0500, Eric J. Feldhusen wrote: On a RHEL4, with Samba 3.0.10, I have the following password options below. I just tested and with a WinXP Pro client, I did the ctrl-alt-delete and changed my password. Once I did that, I ssh'ed into the box and it used my new password. [global] encrypt passwords = yes null passwords = yes obey pam restrictions = yes passwd chat = *New*UNIX*password* %n\n*ReType*new*UNIX*password*%n\n *passwd:*all*authentication*tokens*update d*successfully* passwd program = /usr/bin/passwd %u unix password sync = Yes Ben Walton wrote: A note on the password sync issue. Someone more knowledgeable correct me if I'm wrong. -- Eric Feldhusen System Administrator http://www.remc1.org [EMAIL PROTECTED] PO Box 270 (906) 482-4520 x239 809 Hecla St (906) 482-5031 fax Hancock, MI 49930 (906) 370 6202 mobile -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Winbind and email server
well the problem i think your having is that you have not edited the /etc/nsswitch.conf file. change from passwd: files shadow: files group: files to: passwd: winbind files shadow: winbind files group: winbind files or something along those lines, play with the /etc/nsswitch.conf to find the right configuration for you. check out the post i've made on my website about how we use have setup my mail system, i think i've done it fairly well http://www.yourhowto.org/content/view/25/9/ Paul Matthews I.T Trainee | The Cathedral School Ph (07) 47222 194 | Fax (07) 47222 111 PO Box 944 Aitkenvale Q 4814 E: [EMAIL PROTECTED] W: www.cathedral.qld.edu.au Anglican coeducation | Day and Boarding | Early Childhood to Year 12 Educating for life-long success *** IMPORTANT NOTICE REGARDING CONFIDENTIALITY This electronic email message is intended only for the addressee and may contain confidential information. If you are not the addressee, you are notified that any transmission, distribution or photocopying of this email is strictly prohibited. The confidentiality attached to this email is not waived, lost or destroyed by reasons of a mistaken delivery to you. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] ]On Behalf Of Dimitri Yioulos Sent: Friday, 31 March 2006 1:53 AM To: samba@lists.samba.org Subject: [Samba] Winbind and email server Folks, Sincere apologies for asking this again, but I'm just not getting this to work, and must be missing something here: My company's network is based around a Windows 2003 server AD, with several RHEL AS 3 boxes connected to it via samba (3.0.21c-1). This scheme works very well. I've set up, and have successfully been using a sendmail-based email system, too. My issue is this: When I create a user account in AD, I have to also create it in the mail server. This is inconvenient and inefficient. I have samba installed on the mail server. I also have the mkhomedir module installed, and the appropriate line to invoke it is in the samba, pop, and smtp.sendmail config files under /etc/pam.d. My users are using the Outlook 2003 mail client. If I create a user in the email server, then Outlook has no problem connecting to the mail server using the user's credentials from the email server. But, if the user is only created in AD, then Outlook complains that the incoming pop server won't authenticate the user, despite the fact that winbind is fired up, wbinfo -u shows the user, and getent passwd shows the user's credentials. Arrrgh! IMHO, this is the one small thing that keeps this from being a really great system. Can anybody show me the way to get over the hump? Many thanks. Dimitri -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Owner changes when modifying Excel Word files
what about the following settings: - force user - force group []s Marcos --- Trimble, Ronald D [EMAIL PROTECTED] escreveu: There is not solution and it is by design. You can read all about it on the samba.org page. They have covered it extensively. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ivan Tadic Sent: Tuesday, March 28, 2006 1:46 PM To: samba@lists.samba.org Subject: [Samba] Owner changes when modifying Excel Word files Dear all, I am using Samba 3.0.20-4 SUSE. When a user (under Windows) modifies an Excel or Word file, he/she becomes the owner of that file !!! I have read that this is because Excel Word delete the original file and recreate a new one with the modifications. But I didn't find a solution to prevent this. Thank you in advance for your reply. Ivan Tadic Brussels, Belgium -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba ___ Yahoo! doce lar. Faça do Yahoo! sua homepage. http://br.yahoo.com/homepageset.html -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Duplex printer + samba + cups
Hi Fabiano, you can try this: - use a windows machine to conect to the linux print server - as a printer operator or as administrator, configure the printer settings and enable the duplex setting. []s Marcos --- Fabiano Caixeta Duarte [EMAIL PROTECTED] escreveu: Gentleman, In one of my slackware servers I put samba acting as a printer server connected to a Hewlett-Packard 2420D (D stands for duplex). In CUPS I'm using the 'raw' driver. So I let the clients to perform the driver stuff. On samba, I followed the procedures described on http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/classicalprinting.html#inst-rpc to make possible windows clients to get the files needed to achieve driver installation. I took those files from an WinXP installation through rpcclient+smbclient. As expected, clients can get the drivers and print. The main thing is working. THE PROBLEM is: If the client is connected to the WinXP Printer Server, the printer properties shows some advanced options which includes the ability to choose duplex printing. If it's connected to the samba server, none of those options even appear. Do you have any suggestions? Thanks in advance! -- Fabiano Caixeta Duarte Seção Técnica de Informática FEA-RP/USP DESISTIR é uma solução permanente para um problema temporário. James MacArthur -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba ___ Yahoo! doce lar. Faça do Yahoo! sua homepage. http://br.yahoo.com/homepageset.html -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Winbind and email server
how about you post your pam module here, you might have it configured to require both local and winbind users instead of either or Paul Matthews I.T Trainee | The Cathedral School Ph (07) 47222 194 | Fax (07) 47222 111 PO Box 944 Aitkenvale Q 4814 E: [EMAIL PROTECTED] W: www.cathedral.qld.edu.au Anglican coeducation | Day and Boarding | Early Childhood to Year 12 Educating for life-long success *** IMPORTANT NOTICE REGARDING CONFIDENTIALITY This electronic email message is intended only for the addressee and may contain confidential information. If you are not the addressee, you are notified that any transmission, distribution or photocopying of this email is strictly prohibited. The confidentiality attached to this email is not waived, lost or destroyed by reasons of a mistaken delivery to you. -Original Message- From: Dimitri Yioulos [mailto:[EMAIL PROTECTED] Sent: Friday, 31 March 2006 8:33 AM To: Paul Matthews Subject: Re: [Samba] Winbind and email server top-posting by necessity ... Hi, Paul. Alas, my nsswitch.conf is properly configured. Any other ideas? Dimitri On Thursday March 30 2006 5:12 pm, you wrote: well the problem i think your having is that you have not edited the /etc/nsswitch.conf file. change from passwd: files shadow: files group: files to: passwd: winbind files shadow: winbind files group: winbind files or something along those lines, play with the /etc/nsswitch.conf to find the right configuration for you. check out the post i've made on my website about how we use have setup my mail system, i think i've done it fairly well http://www.yourhowto.org/content/view/25/9/ Paul Matthews I.T Trainee | The Cathedral School Ph (07) 47222 194 | Fax (07) 47222 111 PO Box 944 Aitkenvale Q 4814 E: [EMAIL PROTECTED] W: www.cathedral.qld.edu.au Anglican coeducation | Day and Boarding | Early Childhood to Year 12 Educating for life-long success *** * *** * *** IMPORTANT NOTICE REGARDING CONFIDENTIALITY This electronic email message is intended only for the addressee and may contain confidential information. If you are not the addressee, you are notified that any transmission, distribution or photocopying of this email is strictly prohibited. The confidentiality attached to this email is not waived, lost or destroyed by reasons of a mistaken delivery to you. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] ]On Behalf Of Dimitri Yioulos Sent: Friday, 31 March 2006 1:53 AM To: samba@lists.samba.org Subject: [Samba] Winbind and email server Folks, Sincere apologies for asking this again, but I'm just not getting this to work, and must be missing something here: My company's network is based around a Windows 2003 server AD, with several RHEL AS 3 boxes connected to it via samba (3.0.21c-1). This scheme works very well. I've set up, and have successfully been using a sendmail-based email system, too. My issue is this: When I create a user account in AD, I have to also create it in the mail server. This is inconvenient and inefficient. I have samba installed on the mail server. I also have the mkhomedir module installed, and the appropriate line to invoke it is in the samba, pop, and smtp.sendmail config files under /etc/pam.d. My users are using the Outlook 2003 mail client. If I create a user in the email server, then Outlook has no problem connecting to the mail server using the user's credentials from the email server. But, if the user is only created in AD, then Outlook complains that the incoming pop server won't authenticate the user, despite the fact that winbind is fired up, wbinfo -u shows the user, and getent passwd shows the user's credentials. Arrrgh! IMHO, this is the one small thing that keeps this from being a really great system. Can anybody show me the way to get over the hump? Many thanks. Dimitri -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] RE: ACL on groups working half
Is this an AD group? If so, what type? mygroup is a global group in this example: mygroup is kantoorautomatisering tjaco is mastt it shows up by getent group as: ARCRDM+kantoorautomatisering:x:10077:ARCRDM+mastt: reading the logs it seems to authenticate correctly but seems to bail out at: chdir [2006/03/29 12:34:30, 3] smbd/process.c:switch_message(886) switch message SMBtrans2 (pid 18809) conn 0x8380258 [2006/03/29 12:34:30, 0] smbd/service.c:set_current_service(51) chdir (/mnt/sdb1/data/shares/KantoorAutomatisering/) failed [2006/03/29 12:34:30, 3] smbd/error.c:error_packet(105) error string = Permission denied [2006/03/29 12:34:30, 3] smbd/error.c:error_packet(129) error packet at smbd/process.c(959) cmd=50 (SMBtrans2) NT_STATUS_NETWORK_ACCESS_DENIED -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba 3 performance issues
I believe I have some hardware related performance issues running samba 3.0.14a-3sarge. Our server is an Intel Celeron 2 Ghz with 512 MB of RAM and a 3ware card using SATA disks in a RAID 5 configuration (3ware controller card). We have a gigabit network and are using Intel Gigabit ethernet cards e1000). When copying large files to the samba shares on the system, the transfer rate maxes out near 100 mb/s. We tested with nttcp and were able to get speeds of nearly 800mb/s. So I think it is safe to conclude this is a software issue and not a network issue. So running top while doing this large copy, showed that smbd was the top process chewing on 80% of the CPU. Kill the copy, and the cpu idle time exceeds 90%. We are convinced that our CPU is the bottleneck, but not sure why. #cat /proc/cpuinfo processor : 0 vendor_id : GenuineIntel cpu family : 15 model : 2 model name : Intel(R) Celeron(R) CPU 2.00GHz stepping: 9 cpu MHz : 1996.920 cache size : 128 KB fdiv_bug: no hlt_bug : no f00f_bug: no coma_bug: no fpu : yes fpu_exception : yes cpuid level : 2 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe cid bogomips: 3956.73 Does anyone have any advice on how to speed up our file transfers? We regularly have to 18 GB worth of files to this system, and it would be very good if we could speed it up. At current speeds, we get no advantage from even having gigabit network cards! Please feel free to ask me any other questions about our system setup. Thanks in advance for any advice, Rohit -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] unexpected reloc type 0x42
I am having the same problem on a headless build, gentoo, hppa 2.0 pa-risc also. Did you ever find the problem?? Thanks Mike -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] winbind error: rpc_pipe_bind failed
Hi folks, I want to set up an samba printserver with cups. after configuering and starting the deamons I found this entry´s in my winbind logs: 1. log.wb-servername - [2006/03/21 18:15:01, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupname(695) [10919]: lookupname PRINTBAK+root --- what does it mean? is this an error, or is this ok? 2. log.wb-BUILTIN --- [2006/03/21 17:15:15, 0] nsswitch/winbindd_dual.c:child_read_request(49) Got invalid request length: 0 [2006/03/21 18:09:38, 3] nsswitch/winbindd_async.c:winbindd_dual_getsidaliases(847) [10919]: getsidaliases --- what does it mean? is this an error, or is this ok? 3. log.wb-DOMAIN.COM --- [2006/03/23 18:20:40, 0] rpc_client/cli_pipe.c:cli_rpc_open_noauth(1700) rpc_pipe_bind failed --- what does this error mean. I´ve never found any useful information about this with google!!! 4. log.wb-PRINTBAK --- [2006/03/23 18:15:01, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupname(695) [ 5125]: lookupname PRINTBAK+root what does it mean? is this an error, or is this ok? 5. log.winbindd [2006/03/23 18:20:39, 1] nsswitch/winbindd.c:main(935) winbindd version 3.0.20-4-SUSE started. Copyright The Samba Team 2000-2004 This is ok. 6. log.winbindd-idmap [2006/03/21 12:27:50, 0] nsswitch/winbindd_dual.c:child_read_request(49) Got invalid request length: 0 what does it mean? is this an error, or is this ok? I´m using SuSE OpenSource 10.0 - samba 3.0.20 - samba-client 3.0.20 - samba-winbind 3.0.20 My smb.conf: [global] workgroup = DOMAIN.COM netbios name = PRINTSERVER domain master = No security = domain password server = SERVERPWD printing = cups printcap name = cups printcap cache time = 60 cups options = raw wins proxy = No wins server = 192.168.1.xxx load printers = Yes log level = 1 winbind separator = + idmap uid = 1-2 idmap gid = 1-2 winbind enum users = Yes winbind enum groups = Yes [printers] comment = All Printers path = /var/tmp printable = Yes guest ok = No browseable = No read only = No [print$] comment = Printer Drivers path = /var/lib/samba/drivers write list = @ntadmin root force group = ntadmin create mask = 0664 directory mask = 0775 Especially the error in log.wb-DOMAIN.COM makes me nervous. I want to terminate every error, before move this server in productive environment. After installing a Printer on a XP-Client I get Access Denied as Status Message. But printing is possible and without errors. How can solve this? If answer, please in reference to the praticular logfile. I hope someone has any ideas. Thanks. Manfred -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- - Landratsamt Bad Tölz - Wolfratshausen Tel: 08041 / 505 261 Fax: 08041 / 505 397 [EMAIL PROTECTED] - -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] please help me
hello i use samba 3.0.21c and the os linux suse 10 x86_64 on one system and os win xp media center on the other system. when i try connect with os win xp to server samba 3.0.21c the below message was shown : my workgrp is not accessible. You might not have premission to use this network resource. contact the administrator of this server to find out if you have access premission. the list of server for this wrkgrp is not currently available. i am biginner to use samba and can not type english correct totally. please help me step by step if you can. my mail is [EMAIL PROTECTED] - Talk is cheap. Use Yahoo! Messenger to make PC-to-Phone calls. Great rates starting at 1cent;/min. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] performance regression between 30.14a and 3.0.20
Hey Jeremy, This happens when testing under iometer. I can give you the exact paramaters if you want. Thanks, Greg On Wed, 2006-03-29 at 09:50 -0800, Jeremy Allison wrote: On Wed, Mar 29, 2006 at 11:03:02AM -0500, Greg Dickie wrote: Suddenly occurred to me that I wasn't seeing the performance I used to while running 3.0.21c. Went back and tested 3.0.14a on the exact same configuration and boom, smaller writes (8K) were about twice as fast. I narrowed it down to a change between 14a and 20 but there were alot of changes in there. Can anyone think of what this could be? How are you testing this ? If you can give me the exact same test config I can run under cachegrind and it'll tell me exactly where the extra time is being spent between the 3.0.14a and 3.0.20 versions. Thanks, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] performance regression between 30.14a and 3.0.20
On Thu, Mar 30, 2006 at 08:04:21PM -0500, Greg Dickie wrote: Hey Jeremy, This happens when testing under iometer. I can give you the exact paramaters if you want. That's the Win32 version ? If so, yes please the exact parameters would be extremely useful as I can reproduce this here. Thanks, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Owner changes when modifying Excel Word files
Those settings would definitely work, but not unless you had a share defined for each group. If that is the case, then it would work just fine. Another potential option is to use default ACLs. My original comments were merely to point out that this is exactly the way Samba was supposed to work. -Original Message- From: marcos rocha [mailto:[EMAIL PROTECTED] Sent: Thursday, March 30, 2006 5:18 PM To: Trimble, Ronald D; Ivan Tadic; samba@lists.samba.org Subject: RE: [Samba] Owner changes when modifying Excel Word files what about the following settings: - force user - force group []s Marcos --- Trimble, Ronald D [EMAIL PROTECTED] escreveu: There is not solution and it is by design. You can read all about it on the samba.org page. They have covered it extensively. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ivan Tadic Sent: Tuesday, March 28, 2006 1:46 PM To: samba@lists.samba.org Subject: [Samba] Owner changes when modifying Excel Word files Dear all, I am using Samba 3.0.20-4 SUSE. When a user (under Windows) modifies an Excel or Word file, he/she becomes the owner of that file !!! I have read that this is because Excel Word delete the original file and recreate a new one with the modifications. But I didn't find a solution to prevent this. Thank you in advance for your reply. Ivan Tadic Brussels, Belgium -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba ___ Yahoo! doce lar. Faça do Yahoo! sua homepage. http://br.yahoo.com/homepageset.html -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Semaphore timeouts
Using 3.0.20 with an ldap backend running on Suse Linux ES 9 SP2. I have two remotes sites and one site is getting a semaphore timeout displayed on the XP sp1 and sp2 client workstations. None of the other sites are affected. Usually a ldap resync and a samba restart will fix it but sometimes I have to pull the plug on the server because it simply will not respond. Hardware is exactly the same between all the sites. Google hasn't revealed much regarding my problem. Thanks _ Express yourself instantly with MSN Messenger! Download today - it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] NT_STATUS_BAD_NETWORK_NAME
Eric you rule Such a simple change. Thanks!. -Original Message- From: Eric Hines [mailto:[EMAIL PROTECTED] Sent: Thursday, March 30, 2006 6:13 PM To: Frank Simorjay Subject: Re: [Samba] NT_STATUS_BAD_NETWORK_NAME At 03/28/06 23:52, you wrote: Hello, I could use a bit of help with a samba install. Installation is Samba 3.0.21c on fedora 4 No major changes to smb.conf just added a share point. [disk] comment = Disk shares path =/disk public = yes writable = yes printable = no guest ok = yes I opened my share up wide. ls -l drwxrwxrwx 10 bob users 1024 Mar 21 16:07 disk I get my share info as expected smbclient -L localhost Password: Domain=[SHARE] OS=[Unix] Server=[Samba 3.0.14a-2] Sharename Type Comment - --- diskDisk Disk shares tmpDisk I can connect to to tmp smbclient //localhost/tmp -Ufranks Password: Domain=[SHARE] OS=[Unix] Server=[Samba 3.0.14a-2] smb: \ However when I try to connect to local host I get this error smbclient //localhost/disk -Ubob Password: Domain=[SHARE] OS=[Unix] Server=[Samba 3.0.21c] tree connect failed: NT_STATUS_BAD_NETWORK_NAME following errs in /var/log error.log :: [2006/03/28 20:31:13, 0] smbd/service.c:make_connection_snum(615) '/disk' does not exist or is not a directory, when connecting to [disk] share.log :: [2006/03/28 20:22:49, 0] smbd/service.c:make_connection_snum(615) '/disk' does not exist or is not a directory, when connecting to [disk] Anyone have any ideas? Thanks in advance. I solved a similar problem by setting inherit permissions = yes in my problem shares. Eric Hines There is no nonsense so errant that it cannot be made the creed of the vast majority by adequate governmental action. --Bertrand Russell -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] FreeBSD Samba Binary Package
On 3/30/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Quoting ?? .??. ?? Vivek Varghese Cherian [EMAIL PROTECTED]: Hi, I think that you can use the ports support of freebsd to install the package Regards Michaeò Hi, The Samba URL http://us3.samba.org/samba/ftp/Binary_Packages/ does not seem to have a FreeBSD binary package. I tried a web search but to no avail. I have searched the samba list archives and i could not find any pointers either. Any assistance would be most welcome Thanks in Advance, -- Vivek Varghese Cherian Free as in Freedom www.gnu.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba Thanks again for the pointer(s). -- Vivek Varghese Cherian Free as in Freedom www.gnu.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Domain Member Server
Hi all, We have a samba 3.0.21c with ldap backend(PDC) , we have a another member server (Linux 3.0.21c). 1q) To configure the member server do we need to compile the samba with ldapsam option. 2q)if we do not compile with ldapsam , will it support inherit permissions and inherit acls Regards Niranjan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba 3 performance issues
Beside the story Greg Folkert wrote (witch make sense) remember this about GB network carts: You'll never get a full 1000 mb/s ! i saw you have a celeron processor (witch ain't the fastest in performance) coz' gb nic's tent to use a lot processor overhead, also raid cards use (a little) processor time. hdd through put is an issue, all together makes the performance. I've tested 2 marvel yukons (pci-x) between 2 xp clients, with only memory transfers and got (after some windows tweaking, coz windows isn't gb lan ready by default) 500mb/s (so that is only 50%) and had 99% proc. load. (pentium M 1.8) on realtek gb lan cards it was even worse. so a big processor(s) and real fast hdd's might do you some good! so put this together with Greg's story, and you'll get the fact's. Cheers, and good luck with testing/tweaking Collen. Greg Folkert wrote: On Thu, 2006-03-30 at 13:52 -0500, Rohit Kumar Mehta wrote: I believe I have some hardware or configuration related performance issues running samba 3.0.14a-3sarge. Our server is an Intel Celeron 2 Ghz with 512 MB of RAM and a 3ware card using SATA disks in a RAID 5 configuration (3ware controller card). We have a gigabit network and are using Intel Gigabit ethernet cards e1000). When copying large files to the samba shares on the system, the transfer rate maxes out near 100 mb/s. We tested with nttcp and were able to get speeds of nearly 800mb/s. So I think it is safe to conclude this is not a network issue. Various tools like top, xosview and mpstat convinced us that we are bound in the CPU. Stopping the samba file transfer and the cpu idle time exceeds 90%. We are convinced that our CPU is the bottleneck, but not sure why. #cat /proc/cpuinfo processor : 0 vendor_id : GenuineIntel cpu family : 15 model : 2 model name : Intel(R) Celeron(R) CPU 2.00GHz stepping: 9 cpu MHz : 1996.920 cache size : 128 KB fdiv_bug: no hlt_bug : no f00f_bug: no coma_bug: no fpu : yes fpu_exception : yes cpuid level : 2 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe cid bogomips: 3956.73 Does anyone have any advice on how to speed up our file transfers? We regularly have to 18 GB worth of files to this system, and it would be very good if we could speed it up. At current speeds, we get no advantage at all from even having gigabit network cards! Please feel free to ask me any other questions about our system setup. Thanks in advance for any advice, Have you done *ANY* system caching parameters, filesystem tuning, or Samba Config tuning? What have you done besides verify it is not the network itself? Have you tested throughput for the 3ware card? I can tell you this, if you have the RAID-5 setup not-optimally to work with the block sizing on your Filesystem you'll never get excellent throughput. I always tend to use largest blocking factors with the 3ware cards for RAID-5. This (for me at least) has proven the fastest and least latency ridden settings for me. But then I am using XFS on all of my 3ware RAID-5 setups. For Mirroring, I typically let the defaults work. Defaults have been by far the best setup for most filesystems. If you still believe you are suffering from CPU overload, I'd suggest sending it to the RAID-5 array with over compressed scp (with mild compression of 4 or 5) and then without compression. See what you get. I am betting the real problem comes from multiple bus-mastering cards conflicting or colliding. The Intel-E1000 and the 3ware card are definitely both bus-mastering. There are a couple of things on the Samba side you can do. Turn off Logging (you don't need it really), change the read and send buffer sizes, change the TCP setting it uses to be more in line with Gigabit, move to using Jumbo frames, get a TOE (TCP Offload Engine) NIC. Then if you still have issues, turn on logging for the stuff you are worried about (auth would be 0, etc...) and then add a sniffer to you connection. You'll definitely find something. My gut reaction is that since this is a Celeron Processor, you really need to goto 64-bit slots on the mother board. Getting a PCI-X capable motherboard would greatly help your problems. One last thing, any of the 95xx cards from 3ware are 3.3V only and are PCI2.3 compliant, they will function incorrectly possibly even be ruined or not recognized by a 5V or Auto-detect 5v/3.3v slot. The 9xxx, 8xxx and 7xxx cards can be used in either a 5V or 3.3V PCI slot. Good luck. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
svn commit: samba r14806 - in branches/SAMBA_4_0/source/lib/tls: .
Author: jelmer Date: 2006-03-30 08:31:39 + (Thu, 30 Mar 2006) New Revision: 14806 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14806 Log: Fix compiler warnings Modified: branches/SAMBA_4_0/source/lib/tls/tlscert.c Changeset: Modified: branches/SAMBA_4_0/source/lib/tls/tlscert.c === --- branches/SAMBA_4_0/source/lib/tls/tlscert.c 2006-03-30 06:07:38 UTC (rev 14805) +++ branches/SAMBA_4_0/source/lib/tls/tlscert.c 2006-03-30 08:31:39 UTC (rev 14806) @@ -41,7 +41,7 @@ gnutls_x509_crt cacrt, crt; gnutls_x509_privkey key, cakey; uint32_t serial = (uint32_t)time(NULL); - char keyid[100]; + unsigned char keyid[100]; char buf[4096]; size_t bufsize; size_t keyidsize = sizeof(keyid);
svn commit: samba r14809 - in branches/SAMBA_3_0/source/script/tests: .
Author: metze
Date: 2006-03-30 09:34:02 + (Thu, 30 Mar 2006)
New Revision: 14809
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14809
Log:
- add my email address
- fix usage()
- remove unused var
metze
Modified:
branches/SAMBA_3_0/source/script/tests/timelimit.c
Changeset:
Modified: branches/SAMBA_3_0/source/script/tests/timelimit.c
===
--- branches/SAMBA_3_0/source/script/tests/timelimit.c 2006-03-30 09:24:31 UTC
(rev 14808)
+++ branches/SAMBA_3_0/source/script/tests/timelimit.c 2006-03-30 09:34:02 UTC
(rev 14809)
@@ -1,5 +1,6 @@
/* run a command with a limited timeout
[EMAIL PROTECTED], June 2005
+ [EMAIL PROTECTED], March 2006
attempt to be as portable as possible (fighting posix all the way)
*/
@@ -17,9 +18,11 @@
static void usage(void)
{
printf(usage: timelimit time command\n);
- printf( SIGALRM - passes SIGKILL to command's process group and
exit(1)\n);
printf( SIGUSR1 - passes SIGTERM to command's process group\n);
- printf( SIGTERM - passes SIGTERM to command's process group and
exit(0)\n);
+ printf( SIGALRM - passes SIGTERM to command's process group\n);
+ printf( after 5s SIGKILL will be passed and exit(1)\n);
+ printf( SIGTERM - passes SIGTERM to command's process group\n);
+ printf( after 1s SIGKILL will be passed and exit(1)\n);
}
static void sig_alrm_kill(int sig)
@@ -67,7 +70,6 @@
int main(int argc, char *argv[])
{
int maxtime, ret=1;
- pid_t pgid;
if (argc 3) {
usage();
svn commit: samba r14810 - in trunk/source/script/tests: .
Author: metze
Date: 2006-03-30 09:34:36 + (Thu, 30 Mar 2006)
New Revision: 14810
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14810
Log:
- add my email address
- fix usage()
- remove unused var
metze
Modified:
trunk/source/script/tests/timelimit.c
Changeset:
Modified: trunk/source/script/tests/timelimit.c
===
--- trunk/source/script/tests/timelimit.c 2006-03-30 09:34:02 UTC (rev
14809)
+++ trunk/source/script/tests/timelimit.c 2006-03-30 09:34:36 UTC (rev
14810)
@@ -1,5 +1,6 @@
/* run a command with a limited timeout
[EMAIL PROTECTED], June 2005
+ [EMAIL PROTECTED], March 2006
attempt to be as portable as possible (fighting posix all the way)
*/
@@ -17,9 +18,11 @@
static void usage(void)
{
printf(usage: timelimit time command\n);
- printf( SIGALRM - passes SIGKILL to command's process group and
exit(1)\n);
printf( SIGUSR1 - passes SIGTERM to command's process group\n);
- printf( SIGTERM - passes SIGTERM to command's process group and
exit(0)\n);
+ printf( SIGALRM - passes SIGTERM to command's process group\n);
+ printf( after 5s SIGKILL will be passed and exit(1)\n);
+ printf( SIGTERM - passes SIGTERM to command's process group\n);
+ printf( after 1s SIGKILL will be passed and exit(1)\n);
}
static void sig_alrm_kill(int sig)
@@ -67,7 +70,6 @@
int main(int argc, char *argv[])
{
int maxtime, ret=1;
- pid_t pgid;
if (argc 3) {
usage();
svn commit: samba r14811 - in trunk/source/script/tests: .
Author: metze Date: 2006-03-30 10:16:39 + (Thu, 30 Mar 2006) New Revision: 14811 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14811 Log: make scripts executable metze Modified: trunk/source/script/tests/test_smbclient_s3.sh trunk/source/script/tests/test_smbtorture_s3.sh Changeset: Property changes on: trunk/source/script/tests/test_smbclient_s3.sh ___ Name: svn:executable + * Property changes on: trunk/source/script/tests/test_smbtorture_s3.sh ___ Name: svn:executable + *
svn commit: samba r14812 - in branches/SAMBA_4_0/source/build/m4: .
Author: jelmer Date: 2006-03-30 10:29:41 + (Thu, 30 Mar 2006) New Revision: 14812 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14812 Log: Fix typos Modified: branches/SAMBA_4_0/source/build/m4/check_perl.m4 Changeset: Modified: branches/SAMBA_4_0/source/build/m4/check_perl.m4 === --- branches/SAMBA_4_0/source/build/m4/check_perl.m42006-03-30 10:16:39 UTC (rev 14811) +++ branches/SAMBA_4_0/source/build/m4/check_perl.m42006-03-30 10:29:41 UTC (rev 14812) @@ -8,7 +8,7 @@ case $host_os in *irix*) # On IRIX, we prefer Freeware or Nekoware Perl, because the - # system perl so ancient. + # system perl is so ancient. AC_PATH_PROG(PERL, perl, , /usr/freeware/bin:/usr/nekoware/bin:$PATH) ;; *) @@ -17,7 +17,7 @@ esac if test x$PERL = x; then - AC_MSG_WARN([No version of perl was not found!]) + AC_MSG_WARN([No version of perl was found!]) AC_MSG_ERROR([Please install perl from http://www.perl.com/]) fi if test x$debug = xyes;then
svn commit: samba r14813 - in branches/SAMBA_4_0/source/build/m4: .
Author: jelmer Date: 2006-03-30 10:46:36 + (Thu, 30 Mar 2006) New Revision: 14813 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14813 Log: Remove headers already checked for earlier or not used. Modified: branches/SAMBA_4_0/source/build/m4/rewrite.m4 Changeset: Modified: branches/SAMBA_4_0/source/build/m4/rewrite.m4 === --- branches/SAMBA_4_0/source/build/m4/rewrite.m4 2006-03-30 10:29:41 UTC (rev 14812) +++ branches/SAMBA_4_0/source/build/m4/rewrite.m4 2006-03-30 10:46:36 UTC (rev 14813) @@ -59,9 +59,8 @@ AC_CHECK_HEADERS(sys/vfs.h sys/fs/s5param.h sys/filsys.h termios.h termio.h) AC_CHECK_HEADERS(fnmatch.h pwd.h sys/termio.h sys/time.h sys/statfs.h sys/statvfs.h stdarg.h) AC_CHECK_HEADERS(stdint.h inttypes.h locale.h shadow.h) -AC_CHECK_HEADERS(nss.h nss_common.h ns_api.h sys/security.h security/pam_appl.h) +AC_CHECK_HEADERS(nss.h nss_common.h ns_api.h sys/security.h) AC_CHECK_HEADERS(sys/capability.h sys/acl.h) -AC_CHECK_HEADERS(alloca.h) AC_CHECK_HEADERS(sys/mount.h, , , [AC_INCLUDES_DEFAULT #ifdef HAVE_SYS_PARAM_H
svn commit: samba r14814 - in branches/SAMBA_4_0/source/script/tests: .
Author: metze Date: 2006-03-30 10:53:40 + (Thu, 30 Mar 2006) New Revision: 14814 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14814 Log: also run the BASE-DIR test with 'make test' metze Modified: branches/SAMBA_4_0/source/script/tests/test_posix.sh Changeset: Modified: branches/SAMBA_4_0/source/script/tests/test_posix.sh === --- branches/SAMBA_4_0/source/script/tests/test_posix.sh2006-03-30 10:46:36 UTC (rev 14813) +++ branches/SAMBA_4_0/source/script/tests/test_posix.sh2006-03-30 10:53:40 UTC (rev 14814) @@ -22,7 +22,7 @@ tests=BASE-FDPASS BASE-LOCK1 BASE-LOCK2 BASE-LOCK3 BASE-LOCK4 tests=$tests BASE-LOCK5 BASE-LOCK6 BASE-LOCK7 BASE-UNLINK BASE-ATTR -tests=$tests BASE-DIR1 BASE-DIR2 BASE-VUID +tests=$tests BASE-DIR BASE-DIR1 BASE-DIR2 BASE-VUID tests=$tests BASE-DENY1 BASE-DENY2 BASE-TCON BASE-TCONDEV BASE-RW1 tests=$tests BASE-DENY3 BASE-XCOPY BASE-OPEN BASE-DENYDOS tests=$tests BASE-PROPERTIES BASE-MANGLE BASE-DELETE
svn commit: samba r14815 - in branches/SAMBA_4_0/source/script/tests: .
Author: metze Date: 2006-03-30 11:07:17 + (Thu, 30 Mar 2006) New Revision: 14815 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14815 Log: BASE-DIR doesn't exists... metze Modified: branches/SAMBA_4_0/source/script/tests/test_posix.sh Changeset: Modified: branches/SAMBA_4_0/source/script/tests/test_posix.sh === --- branches/SAMBA_4_0/source/script/tests/test_posix.sh2006-03-30 10:53:40 UTC (rev 14814) +++ branches/SAMBA_4_0/source/script/tests/test_posix.sh2006-03-30 11:07:17 UTC (rev 14815) @@ -22,7 +22,7 @@ tests=BASE-FDPASS BASE-LOCK1 BASE-LOCK2 BASE-LOCK3 BASE-LOCK4 tests=$tests BASE-LOCK5 BASE-LOCK6 BASE-LOCK7 BASE-UNLINK BASE-ATTR -tests=$tests BASE-DIR BASE-DIR1 BASE-DIR2 BASE-VUID +tests=$tests BASE-DIR1 BASE-DIR2 BASE-VUID tests=$tests BASE-DENY1 BASE-DENY2 BASE-TCON BASE-TCONDEV BASE-RW1 tests=$tests BASE-DENY3 BASE-XCOPY BASE-OPEN BASE-DENYDOS tests=$tests BASE-PROPERTIES BASE-MANGLE BASE-DELETE
svn commit: samba r14816 - in branches/SAMBA_4_0/source: auth/gensec build/m4 lib/replace
Author: jelmer
Date: 2006-03-30 11:20:47 + (Thu, 30 Mar 2006)
New Revision: 14816
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14816
Log:
Simplify test for comparison_fn_t
Modified:
branches/SAMBA_4_0/source/auth/gensec/gensec.h
branches/SAMBA_4_0/source/build/m4/rewrite.m4
branches/SAMBA_4_0/source/lib/replace/config.m4
Changeset:
Modified: branches/SAMBA_4_0/source/auth/gensec/gensec.h
===
--- branches/SAMBA_4_0/source/auth/gensec/gensec.h 2006-03-30 11:07:17 UTC
(rev 14815)
+++ branches/SAMBA_4_0/source/auth/gensec/gensec.h 2006-03-30 11:20:47 UTC
(rev 14816)
@@ -24,6 +24,8 @@
#ifndef __GENSEC_H__
#define __GENSEC_H__
+#include core.h
+
#define GENSEC_OID_NTLMSSP 1 3 6 1 4 1 311 2 2 10
#define GENSEC_OID_SPNEGO 1 3 6 1 5 5 2
#define GENSEC_OID_KERBEROS5 1 2 840 113554 1 2 2
Modified: branches/SAMBA_4_0/source/build/m4/rewrite.m4
===
--- branches/SAMBA_4_0/source/build/m4/rewrite.m4 2006-03-30 11:07:17 UTC
(rev 14815)
+++ branches/SAMBA_4_0/source/build/m4/rewrite.m4 2006-03-30 11:20:47 UTC
(rev 14816)
@@ -714,23 +714,3 @@
AC_DEFINE(STAT_STATFS2_FS_DATA,1,[Whether statfs requires 2 arguments and
struct fs_data is available])
fi
fi
-
-
-
-###
-# Check for comparison_fn_t
-AC_CACHE_CHECK([for comparison_fn_t],samba_cv_HAVE_COMPARISON_FN_T,[
-AC_TRY_COMPILE([
-#include stdlib.h
-int list_find(const void *needle,
- const void *base, size_t nmemb, size_t size, comparison_fn_t
comp_fn)
-{
- return 1;
-}
-],[],
-samba_cv_HAVE_COMPARISON_FN_T=yes,samba_cv_HAVE_COMPARISON_FN_T=no)
-])
-if test x$samba_cv_HAVE_COMPARISON_FN_T = xyes; then
- AC_DEFINE(HAVE_COMPARISON_FN_T,1,[Whether or not we have
comparison_fn_t])
-fi
-
Modified: branches/SAMBA_4_0/source/lib/replace/config.m4
===
--- branches/SAMBA_4_0/source/lib/replace/config.m4 2006-03-30 11:07:17 UTC
(rev 14815)
+++ branches/SAMBA_4_0/source/lib/replace/config.m4 2006-03-30 11:20:47 UTC
(rev 14816)
@@ -11,6 +11,8 @@
AC_CHECK_TYPE(u_int16_t, unsigned short)
AC_CHECK_TYPE(u_int8_t, unsigned char)
AC_CHECK_TYPE(ssize_t, int)
+AC_CHECK_TYPE(comparison_fn_t,
+[AC_DEFINE(HAVE_COMPARISON_FN_T, 1,[Whether or not we have comparison_fn_t])])
AC_CACHE_CHECK([for broken inet_ntoa],samba_cv_REPLACE_INET_NTOA,[
AC_TRY_RUN([
svn commit: samba r14817 - in branches/SAMBA_4_0/source/torture: . rap
Author: metze
Date: 2006-03-30 11:58:46 + (Thu, 30 Mar 2006)
New Revision: 14817
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14817
Log:
rename some tests
tridge: is SCAN-EAMAX ok?
metze
Modified:
branches/SAMBA_4_0/source/torture/rap/rap.c
branches/SAMBA_4_0/source/torture/torture.c
Changeset:
Modified: branches/SAMBA_4_0/source/torture/rap/rap.c
===
--- branches/SAMBA_4_0/source/torture/rap/rap.c 2006-03-30 11:20:47 UTC (rev
14816)
+++ branches/SAMBA_4_0/source/torture/rap/rap.c 2006-03-30 11:58:46 UTC (rev
14817)
@@ -428,7 +428,7 @@
return res;
}
-BOOL torture_raw_rap(struct torture_context *torture)
+BOOL torture_rap_basic(struct torture_context *torture)
{
struct smbcli_state *cli;
BOOL ret = True;
@@ -438,7 +438,7 @@
return False;
}
- mem_ctx = talloc_init(torture_raw_rap);
+ mem_ctx = talloc_init(torture_rap_basic);
if (!test_rap(cli)) {
ret = False;
Modified: branches/SAMBA_4_0/source/torture/torture.c
===
--- branches/SAMBA_4_0/source/torture/torture.c 2006-03-30 11:20:47 UTC (rev
14816)
+++ branches/SAMBA_4_0/source/torture/torture.c 2006-03-30 11:58:46 UTC (rev
14817)
@@ -610,10 +610,8 @@
{RAW-RENAME, torture_raw_rename, 0},
{RAW-SEEK, torture_raw_seek, 0},
{RAW-EAS, torture_raw_eas, 0},
- {RAW-EAMAX, torture_max_eas, 0},
{RAW-STREAMS, torture_raw_streams, 0},
{RAW-ACLS, torture_raw_acls, 0},
- {RAW-RAP, torture_raw_rap, 0},
{RAW-COMPOSITE, torture_raw_composite, 0},
/* SMB2 tests */
@@ -626,11 +624,15 @@
{SMB2-SETINFO, torture_smb2_setinfo, 0},
{SMB2-FIND, torture_smb2_find, 0},
+ /* RAP tests */
+ {RAP-BASIC, torture_rap_basic, 0},
+
/* protocol scanners */
{SCAN-MAXFID, NULL, run_maxfidtest},
{SCAN-PIPE_NUMBER, run_pipe_number, 0},
{SCAN-IOCTL, torture_ioctl_test, 0},
{SCAN-RAP, torture_rap_scan, 0},
+ {SCAN-EAMAX, torture_max_eas, 0},
/* local (no server) testers */
{LOCAL-NTLMSSP, torture_ntlmssp_self_check, 0},
svn commit: samba r14818 - in branches/SAMBA_4_0/source/torture: .
Author: metze
Date: 2006-03-30 12:16:25 + (Thu, 30 Mar 2006)
New Revision: 14818
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14818
Log:
give an error on an unknown test
so we catch typos in the make test scripts
metze
Modified:
branches/SAMBA_4_0/source/torture/smbtorture.c
Changeset:
Modified: branches/SAMBA_4_0/source/torture/smbtorture.c
===
--- branches/SAMBA_4_0/source/torture/smbtorture.c 2006-03-30 11:58:46 UTC
(rev 14817)
+++ branches/SAMBA_4_0/source/torture/smbtorture.c 2006-03-30 12:16:25 UTC
(rev 14818)
@@ -83,6 +83,7 @@
if (!matched) {
printf(Unknown torture operation '%s'\n, name);
+ ret = False;
}
return ret;
svn commit: samba-web r938 - in trunk: . history security
Author: jerry Date: 2006-03-30 13:19:59 + (Thu, 30 Mar 2006) New Revision: 938 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=938 Log: announcing 3.0.22 security release Added: trunk/history/samba-3.0.22.html trunk/security/CAN-2006-1059.html Modified: trunk/history/security.html trunk/index.html Changeset: Sorry, the patch is too large (6247 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=938
svn commit: samba-web r939 - in trunk: .
Author: jerry Date: 2006-03-30 13:22:10 + (Thu, 30 Mar 2006) New Revision: 939 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=939 Log: fix a few bad links Modified: trunk/index.html Changeset: Modified: trunk/index.html === --- trunk/index.html2006-03-30 13:19:59 UTC (rev 938) +++ trunk/index.html2006-03-30 13:22:10 UTC (rev 939) @@ -23,8 +23,8 @@ discovered to expose the clear text of the server's machine account credentials in the winbind log files when the log level is set to 5 or higher. Details can be found in the - a href=/samba/history/samba-3.0.21c.htmlon-line release notes/a - or in the a href=/samba/history/samba-3.0.21c.htmloriginal security + a href=/samba/history/samba-3.0.22.htmlon-line release notes/a + or in the a href=/samba/security/CAN-2006-1059.htmloriginal security announcement for CAN-2006-1059/a./p pThe a href=/samba/ftp/samba-3.0.22.tar.gzSamba 3.0.22 @@ -32,7 +32,7 @@ href=/samba/ftp/samba-3.0.22.tar.ascGnuPG signature for the emun/emcompressed tarball/a is also available. If you prefer to download just the diff from 3.0.21c to 3.0.22, the - a href=/samba/ftp/patch-3.0.21c-3.0.22c.diffs.gzpatch file/a + a href=/samba/ftp/patch-3.0.21c-3.0.22.diffs.gzpatch file/a (a href=/samba/ftp/patch-3.0.21c-3.0.22.diffs.ascgpg signature/a) is also available. Precompiled packages for Fedora Core 4, RedHat 9, and Solaris are available in the
svn commit: samba-web r940 - in trunk: .
Author: jerry Date: 2006-03-30 13:27:13 + (Thu, 30 Mar 2006) New Revision: 940 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=940 Log: chnaging the headline to highlight the security announcment Modified: trunk/index.html Changeset: Modified: trunk/index.html === --- trunk/index.html2006-03-30 13:22:10 UTC (rev 939) +++ trunk/index.html2006-03-30 13:27:13 UTC (rev 940) @@ -16,7 +16,7 @@ h2Current Release/h2 h4a name=latest30 Mar 2006/a/h4 -p class=headlineSamba 3.0.22 Available for Download/p +p class=headlineSecurity Release: Samba 3.0.22 Available for Download/p pThis is a security release of Samba. The Samba 3.0.21 release series (including the patch releases a through c) has been
Re: svn commit: samba r14821 - in trunk/source/script/tests: .
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] schrieb: Log: sync test_posix_p3.sh with test_posix.sh from samba4 but only run the BASE-* tests and ignore some more than in samba4 Hi *, trunk currently fails LOCK4 and LOCK5, and SAMBA_3_0 passes... metze -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEK91km70gjA5TCD8RAm//AKDQOIyJfi67nDdf8GOpsQ+aNH4V9gCgkWvX sNw3YuCNxC7Y+3GbPcv8Z6U= =tKBL -END PGP SIGNATURE-
svn commit: samba-web r941 - in trunk/news/releases: .
Author: deryck Date: 2006-03-30 13:54:39 + (Thu, 30 Mar 2006) New Revision: 941 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=941 Log: Add release announcement to news. deryck Added: trunk/news/releases/3.0.22.html Changeset: Added: trunk/news/releases/3.0.22.html === --- trunk/news/releases/3.0.22.html 2006-03-30 13:27:13 UTC (rev 940) +++ trunk/news/releases/3.0.22.html 2006-03-30 13:54:39 UTC (rev 941) @@ -0,0 +1,26 @@ +h3a name=3.0.22Security Release: Samba 3.0.22 Available for Download/a/h3 + +div class=article +pThis is a security release of Samba. The Samba 3.0.21 release + series (including the patch releases a through c) has been + discovered to expose the clear text of the server's machine + account credentials in the winbind log files when the log + level is set to 5 or higher. Details can be found in the + a href=/samba/history/samba-3.0.22.htmlonline release notes/a + or in the a href=/samba/security/CAN-2006-1059.htmloriginal security + announcement for CAN-2006-1059/a./p + +pThe a href=/samba/ftp/samba-3.0.22.tar.gzSamba 3.0.22 + source code/a can be downloaded now. The a + href=/samba/ftp/samba-3.0.22.tar.ascGnuPG + signature for the emun/emcompressed tarball/a is also available. + If you prefer to download just the diff from 3.0.21c to 3.0.22, the + a href=/samba/ftp/patch-3.0.21c-3.0.22.diffs.gzpatch file/a + (a href=/samba/ftp/patch-3.0.21c-3.0.22.diffs.ascgpg signature/a) is also available. + Precompiled packages for Fedora Core 4, RedHat 9, and Solaris + are available in the + a href=/samba/ftp/Binary_Packages/Binary_Packages download area/a. + Packages for other platforms will be available shortly./p +/div + +
svn commit: samba r14822 - in branches/SAMBA_4_0/source/ntvfs/common: .
Author: metze
Date: 2006-03-30 13:56:25 + (Thu, 30 Mar 2006)
New Revision: 14822
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14822
Log:
if we use the snum used by the lp_* functions instead of the wire TID,
then don't use tid as name...
metze
Modified:
branches/SAMBA_4_0/source/ntvfs/common/brlock.c
Changeset:
Modified: branches/SAMBA_4_0/source/ntvfs/common/brlock.c
===
--- branches/SAMBA_4_0/source/ntvfs/common/brlock.c 2006-03-30 13:11:45 UTC
(rev 14821)
+++ branches/SAMBA_4_0/source/ntvfs/common/brlock.c 2006-03-30 13:56:25 UTC
(rev 14822)
@@ -48,7 +48,7 @@
struct lock_context {
uint32_t server;
uint16_t smbpid;
- uint16_t tid;
+ int snum;
};
/* The data in brlock records is an unsorted linear array of these
@@ -66,7 +66,7 @@
struct brl_context {
struct tdb_wrap *w;
uint32_t server;
- uint16_t tid;
+ int snum;
struct messaging_context *messaging_ctx;
struct lock_struct last_lock;
};
@@ -77,7 +77,7 @@
talloc_free(). We need the messaging_ctx to allow for
pending lock notifications.
*/
-struct brl_context *brl_init(TALLOC_CTX *mem_ctx, uint32_t server, uint16_t
tid,
+struct brl_context *brl_init(TALLOC_CTX *mem_ctx, uint32_t server, int snum,
struct messaging_context *messaging_ctx)
{
char *path;
@@ -98,7 +98,7 @@
}
brl-server = server;
- brl-tid = tid;
+ brl-snum = snum;
brl-messaging_ctx = messaging_ctx;
ZERO_STRUCT(brl-last_lock);
@@ -113,7 +113,7 @@
{
return (ctx1-server == ctx2-server
ctx1-smbpid == ctx2-smbpid
- ctx1-tid == ctx2-tid);
+ ctx1-snum == ctx2-snum);
}
/*
@@ -200,7 +200,7 @@
static NTSTATUS brl_lock_failed(struct brl_context *brl, struct lock_struct
*lock)
{
if (lock-context.server == brl-last_lock.context.server
- lock-context.tid == brl-last_lock.context.tid
+ lock-context.snum == brl-last_lock.context.snum
lock-fnum == brl-last_lock.fnum
lock-start == brl-last_lock.start
lock-size == brl-last_lock.size) {
@@ -263,7 +263,7 @@
lock.context.smbpid = smbpid;
lock.context.server = brl-server;
- lock.context.tid = brl-tid;
+ lock.context.snum = brl-snum;
lock.start = start;
lock.size = size;
lock.fnum = fnum;
@@ -398,7 +398,7 @@
context.smbpid = smbpid;
context.server = brl-server;
- context.tid = brl-tid;
+ context.snum = brl-snum;
/* there are existing locks - find a match */
locks = (struct lock_struct *)dbuf.dptr;
@@ -548,7 +548,7 @@
lock.context.smbpid = smbpid;
lock.context.server = brl-server;
- lock.context.tid = brl-tid;
+ lock.context.snum = brl-snum;
lock.start = start;
lock.size = size;
lock.fnum = fnum;
@@ -601,7 +601,7 @@
for (i=0; icount; i++) {
struct lock_struct *lock = locks[i];
- if (lock-context.tid == brl-tid
+ if (lock-context.snum == brl-snum
lock-context.server == brl-server
lock-fnum == fnum) {
/* found it - delete it */
svn commit: samba r14823 - in branches/SAMBA_3_0_RELEASE: . source source/nsswitch
Author: jerry Date: 2006-03-30 14:22:08 + (Thu, 30 Mar 2006) New Revision: 14823 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14823 Log: committing changes for 3.0.22 Modified: branches/SAMBA_3_0_RELEASE/WHATSNEW.txt branches/SAMBA_3_0_RELEASE/source/VERSION branches/SAMBA_3_0_RELEASE/source/nsswitch/winbindd_cm.c Changeset: Modified: branches/SAMBA_3_0_RELEASE/WHATSNEW.txt === --- branches/SAMBA_3_0_RELEASE/WHATSNEW.txt 2006-03-30 13:56:25 UTC (rev 14822) +++ branches/SAMBA_3_0_RELEASE/WHATSNEW.txt 2006-03-30 14:22:08 UTC (rev 14823) @@ -1,3 +1,42 @@ + == + Release Notes for Samba 3.0.22 +Mar 30, 2006 + == + +This is a security release of Samba. The Samba 3.0.21 release +series (including the patch releases a through c) has been +discovered to expose the clear text of the server's machine +account credentials in the winbind log files when the log +level is set to 5 or higher. This defect has been assigned +the CVE number CAN-2006-1059. + +Summary +=== + +The machine trust account password is the secret shared +between a domain controller and a specific member server. +Access to the member server machine credentials allows +an attacker to impersonate the server in the domain and +gain access to additional information regarding domain +users and groups. + +The winbindd daemon included in Samba 3.0.21 and subsequent +patch releases (3.0.21a-c) writes the clear text of server's +machine credentials to its log file at level 5. The winbindd +log files are world readable by default and often log files +are requested on open mailing lists as tools used to debug +server misconfigurations. + +This affects servers configured to use domain or ads security +and possibly Samba domain controllers as well (if configured +to use winbindd). + +=== + +Release Notes for older release follow: + + -- + === Release Notes for Samba 3.0.21c Feb 24, 2006 @@ -3,9 +42,4 @@ === -This is the latest stable release of Samba. This is the version -that production Samba servers should be running for all current -bug-fixes. Please read the following important changes in this -release. - Common bugs fixed in 3.0.21c include: @@ -122,9 +156,6 @@ connection code in winbindd. - -Release Notes for older release follow: - -- === Release Notes for Samba 3.0.21b Modified: branches/SAMBA_3_0_RELEASE/source/VERSION === --- branches/SAMBA_3_0_RELEASE/source/VERSION 2006-03-30 13:56:25 UTC (rev 14822) +++ branches/SAMBA_3_0_RELEASE/source/VERSION 2006-03-30 14:22:08 UTC (rev 14823) @@ -25,7 +25,7 @@ SAMBA_VERSION_MAJOR=3 SAMBA_VERSION_MINOR=0 -SAMBA_VERSION_RELEASE=21 +SAMBA_VERSION_RELEASE=22 # If a official release has a serious bug # @@ -37,7 +37,7 @@ # e.g. SAMBA_VERSION_REVISION=a# # - 2.2.8a# -SAMBA_VERSION_REVISION=c +SAMBA_VERSION_REVISION= # For 'pre' releases the version will be # Modified: branches/SAMBA_3_0_RELEASE/source/nsswitch/winbindd_cm.c === --- branches/SAMBA_3_0_RELEASE/source/nsswitch/winbindd_cm.c2006-03-30 13:56:25 UTC (rev 14822) +++ branches/SAMBA_3_0_RELEASE/source/nsswitch/winbindd_cm.c2006-03-30 14:22:08 UTC (rev 14823) @@ -294,7 +294,7 @@ DEBUG(5, (connecting to %s from %s with username [%s]\\[%s]\n, controller, global_myname(), - machine_account, machine_password)); + lp_workgroup(), machine_account)); ads_status = cli_session_setup_spnego(*cli, machine_account,
svn commit: samba r14824 - in tags: .
Author: jerry Date: 2006-03-30 14:23:47 + (Thu, 30 Mar 2006) New Revision: 14824 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14824 Log: tagging 3.0.22 Added: tags/release-3-0-22/ Changeset: Copied: tags/release-3-0-22 (from rev 14823, branches/SAMBA_3_0_RELEASE)
svn commit: samba-docs r934 - in tags: .
Author: jerry Date: 2006-03-30 14:24:55 + (Thu, 30 Mar 2006) New Revision: 934 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=934 Log: tagging 3.0.22 Added: tags/release-3-0-22/ Changeset: Copied: tags/release-3-0-22 (from rev 933, tags/release-3-0-21c)
svn commit: samba r14825 - in branches/SAMBA_3_0/examples/scripts/shares/perl: .
Author: jerry
Date: 2006-03-30 14:28:33 + (Thu, 30 Mar 2006)
New Revision: 14825
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14825
Log:
add support for max connections parameter
Modified:
branches/SAMBA_3_0/examples/scripts/shares/perl/modify_samba_config.pl
Changeset:
Modified: branches/SAMBA_3_0/examples/scripts/shares/perl/modify_samba_config.pl
===
--- branches/SAMBA_3_0/examples/scripts/shares/perl/modify_samba_config.pl
2006-03-30 14:23:47 UTC (rev 14824)
+++ branches/SAMBA_3_0/examples/scripts/shares/perl/modify_samba_config.pl
2006-03-30 14:28:33 UTC (rev 14825)
@@ -36,7 +36,7 @@
if ($#ARGV == 1) {
$delete_mode = 1;
}
-elsif ($#ARGV == 3) {
+elsif ($#ARGV == 4) {
$add_mode = 1;
}
else {
@@ -101,6 +101,7 @@
if ($add_mode) {
$config{$ARGV[1]}{'path'} = $ARGV[2];
$config{$ARGV[1]}{'comment'} = $ARGV[3];
+ $config{$ARGV[1]}{'max connections'} = $ARGV[4];
}
elsif ($delete_mode) {
delete $config{$ARGV[1]};
svn commit: samba-web r943 - in trunk: . devel history
Author: deryck Date: 2006-03-30 14:31:50 + (Thu, 30 Mar 2006) New Revision: 943 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=943 Log: Update latest stable links. Archive older release announcments in history. deryck Modified: trunk/devel/index.html trunk/header_columns.html trunk/history/index.html Changeset: Modified: trunk/devel/index.html === --- trunk/devel/index.html 2006-03-30 13:57:39 UTC (rev 942) +++ trunk/devel/index.html 2006-03-30 14:31:50 UTC (rev 943) @@ -14,8 +14,8 @@ pAs of 4 April 2004, the Samba Team converted from CVS to Subversion for maintaining the Samba source code. All current development is done in a Subversion repository. All older code is in the original CVS tree; this would include 2.2.x versions of Samba, which are no longer in active development./p -pThe latest stable release is emSamba 3.0.21c/em (a -href=/samba/history/samba-3.0.21c.htmlrelease notes/a and a +pThe latest stable release is emSamba 3.0.22/em (a +href=/samba/history/samba-3.0.22.htmlrelease notes/a and a href=/samba/download/download/a). /p pThe next major release will be emSamba 4.0/em, an ambitious Modified: trunk/header_columns.html === --- trunk/header_columns.html 2006-03-30 13:57:39 UTC (rev 942) +++ trunk/header_columns.html 2006-03-30 14:31:50 UTC (rev 943) @@ -129,9 +129,9 @@ div class=releases h4Current Stable Releases/h4 ul -lia href=/samba/ftp/stable/samba-3.0.21c.tar.gzSamba 3.0.21c (gzipped)/a/li -lia href=/samba/history/samba-3.0.21c.htmlRelease Notes/a/li -lia href=/samba/ftp/stable/samba-3.0.21c.tar.ascSignature/a/li +lia href=/samba/ftp/stable/samba-3.0.22Samba 3.0.22 (gzipped)/a/li +lia href=/samba/history/samba-3.0.22.htmlRelease Notes/a/li +lia href=/samba/ftp/stable/samba-3.0.22.tar.ascSignature/a/li /ul h4Historical/h4 Modified: trunk/history/index.html === --- trunk/history/index.html2006-03-30 13:57:39 UTC (rev 942) +++ trunk/history/index.html2006-03-30 14:31:50 UTC (rev 943) @@ -6,8 +6,8 @@ div class=latest ul - liLatest Release mdash; a href=/samba/#latestSamba 3.0.21c/a/li - liCurrent Stable Release mdash; a href=/samba/#latestSamba 3.0.21c/a/li + liLatest Release mdash; a href=/samba/#latestSamba 3.0.22/a/li + liCurrent Stable Release mdash; a href=/samba/#latestSamba 3.0.22/a/li !-- Second link will point to #stable on this page when current release is a development release -- /ul /div @@ -16,6 +16,56 @@ h2Previous Release Announcments/h2 +h4a24 Feb 2005/a/h4 +p class=headlineSamba 3.0.21c Available for Download/p + +pThis is the latest stable release of Samba. This is the version +that production Samba servers should be running for all current +bug-fixes. This release addresses password changes issues +with older clients, several SPNEGO and schannel non-default +configuration problems, and a few crash bugs. Please read the a +href=/samba/history/samba-3.0.21c.htmlchanges in this release/a./p + +pThe a href=/samba/ftp/samba-3.0.21c.tar.gzSamba 3.0.21c +source code/a can be downloaded now. The a +href=/samba/ftp/samba-3.0.21c.tar.ascGnuPG +signature for the emun/emcompressed tarball/a is also available. +If you prefer to download just the diff from 3.0.21b to 3.0.21c, the +a href=/samba/ftp/patch-3.0.21b-3.0.21c.diffs.gzpatch file/a +(a href=/samba/ftp/patch-3.0.21b-3.0.21c.diffs.ascgpg signature/a) is also available. +Precompiled packages for Fedora Core 4, RedHat 9, AIX, all SuSE Linux products, and Solaris +are available in the +a href=/samba/ftp/Binary_Packages/Binary_Packages download area/a. +Packages for other platforms will be available shortly./p + + +h424 Jan 2006/h4 +p class=headlineSamba 4.0.0TP1 Available for Download/p + +pSamba 4 is the ambitious next version of the Samba suite that is being +developed in parallel to the stable 3.0 series. The main emphasis in +this branch is support for the Active Directory logon protocols used +by Windows 2000 and above./p + +pSamba 4 is currently bnot/b yet in a state where it is usable in +production environments. Note the WARNINGS, and the STATUS file, +which aims to document what should and should not work./p + +pWith 3 years of development under our belt since Tridge first proposed +a new Virtual File System (VFS) layer for Samba3 (a project which +eventually lead to our Active Directory efforts), it was felt that we +should create something we could 'show off' to our users. This is a +Technology Preview (TP), aimed at allowing users, managers and +developers to see how we have progressed, and to invite feedback and +support./p + +pThe uncompressed tarball and patch files have been signed +using GnuPG (ID 1EEF5276). The source code can be +a
svn commit: samba-web r944 - in trunk/history: .
Author: jerry Date: 2006-03-30 15:23:12 + (Thu, 30 Mar 2006) New Revision: 944 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=944 Log: fixed release note historical links Modified: trunk/history/header_history.html Changeset: Modified: trunk/history/header_history.html === --- trunk/history/header_history.html 2006-03-30 14:31:50 UTC (rev 943) +++ trunk/history/header_history.html 2006-03-30 15:23:12 UTC (rev 944) @@ -77,115 +77,71 @@ div class=notes h6Release Notes/h6 ul -lia href=samba-3.0.21a.htmlsamba-3.0.21a.html/a/li -lia href=samba-3.0.21.htmlsamba-3.0.21.html/a/li -lia href=samba-3.0.20b.htmlsamba-3.0.20b.html/a/li -lia href=samba-3.0.20a.htmlsamba-3.0.20a.html/a/li -lia href=samba-3.0.20.htmlsamba-3.0.20.html/a/li -lia href=samba-3.0.14a.htmlsamba-3.0.14a.html/a/li -lia href=samba-3.0.13.htmlsamba-3.0.13.html/a/li -lia href=samba-3.0.12.htmlsamba-3.0.12.html/a/li -lia href=samba-3.0.11.htmlsamba-3.0.11.html/a/li -lia href=samba-3.0.10.htmlsamba-3.0.10.html/a/li -lia href=samba-3.0.9.htmlsamba-3.0.9.html/a/li -lia href=samba-3.0.8.htmlsamba-3.0.8.html/a/li -lia href=samba-3.0.7.htmlsamba-3.0.7.html/a/li -lia href=samba-3.0.6.htmlsamba-3.0.6.html/a/li -lia href=samba-3.0.5.htmlsamba-3.0.5.html/a/li -lia href=samba-3.0.4.htmlsamba-3.0.4.html/a/li -lia href=samba-3.0.3.htmlsamba-3.0.3.html/a/li -lia href=samba-3.0.2a.htmlsamba-3.0.2a.html/a/li -lia href=samba-3.0.2.htmlsamba-3.0.2.html/a/li -lia href=samba-3.0.1.htmlsamba-3.0.1.html/a/li -lia href=samba-3.0.0.htmlsamba-3.0.0.html/a/li -lia href=samba-2.2.12.htmlsamba-2.2.12.html/a/li -lia href=samba-2.2.11.htmlsamba-2.2.11.html/a/li -lia href=samba-2.2.10.htmlsamba-2.2.10.html/a/li -lia href=samba-2.2.9.htmlsamba-2.2.9.html/a/li -lia href=samba-2.2.8a.htmlsamba-2.2.8a.html/a/li -lia href=samba-2.2.8.htmlsamba-2.2.8.html/a/li -lia href=samba-2.2.7a.htmlsamba-2.2.7a.html/a/li -lia href=samba-2.2.7.htmlsamba-2.2.7.html/a/li -lia href=samba-2.2.6.htmlsamba-2.2.6.html/a/li -lia href=samba-2.2.5.htmlsamba-2.2.5.html/a/li -lia href=samba-2.2.4.htmlsamba-2.2.4.html/a/li -lia href=samba-2.2.3a.htmlsamba-2.2.3a.html/a/li -lia href=samba-2.2.3.htmlsamba-2.2.3.html/a/li -lia href=samba-2.2.2.htmlsamba-2.2.2.html/a/li -lia href=samba-2.2.1.htmlsamba-2.2.1.html/a/li -lia href=samba-2.2.0.htmlsamba-2.2.0.html/a/li -lia href=samba-2.0.7.htmlsamba-2.0.7.html/a/li -lia href=samba-2.0.6.htmlsamba-2.0.6.html/a/li -lia href=samba-2.0.5a.htmlsamba-2.0.5a.html/a/li -lia href=samba-2.0.5.htmlsamba-2.0.5.html/a/li -lia href=samba-2.0.4.htmlsamba-2.0.4.html/a/li -lia href=samba-2.0.3.htmlsamba-2.0.3.html/a/li -lia href=samba-2.0.2.htmlsamba-2.0.2.html/a/li -lia href=samba-2.0.1.htmlsamba-2.0.1.html/a/li -lia href=samba-2.0.0.htmlsamba-2.0.0.html/a/li -lia href=samba1.9.18p10.htmlsamba1.9.18p10.html/a/li -lia href=samba1.9.18p8.htmlsamba1.9.18p8.html/a/li -lia href=samba1.9.18p7.htmlsamba1.9.18p7.html/a/li -lia href=samba1.9.18p6.htmlsamba1.9.18p6.html/a/li -lia href=samba1.9.18p5.htmlsamba1.9.18p5.html/a/li -lia href=samba1.9.18p4.htmlsamba1.9.18p4.html/a/li -lia href=samba1.9.18p3.htmlsamba1.9.18p3.html/a/li -lia href=samba1.9.18p2.htmlsamba1.9.18p2.html/a/li -lia href=samba1.9.18p1.htmlsamba1.9.18p1.html/a/li -lia href=samba1.9.18.htmlsamba1.9.18.html/a/li -lia href=samba1.9.17p5.htmlsamba1.9.17p5.html/a/li -lia href=samba1.9.17p4.htmlsamba1.9.17p4.html/a/li -lia href=samba1.9.17p3.htmlsamba1.9.17p3.html/a/li -lia href=samba1.9.17p2.htmlsamba1.9.17p2.html/a/li -lia href=samba1.9.17p1.htmlsamba1.9.17p1.html/a/li -lia href=samba1.9.17.htmlsamba1.9.17.html/a/li - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - +lia href=samba-3.0.22samba-3.0.22.html/a/li +lia href=samba-3.0.21csamba-3.0.21c.html/a/li +lia href=samba-3.0.21bsamba-3.0.21b.html/a/li +lia href=samba-3.0.21asamba-3.0.21a.html/a/li +lia href=samba-3.0.21samba-3.0.21.html/a/li +lia href=samba-3.0.20bsamba-3.0.20b.html/a/li +lia href=samba-3.0.20asamba-3.0.20a.html/a/li +lia href=samba-3.0.20samba-3.0.20.html/a/li +lia href=samba-3.0.14asamba-3.0.14a.html/a/li +lia href=samba-3.0.13samba-3.0.13.html/a/li +lia href=samba-3.0.12samba-3.0.12.html/a/li +lia href=samba-3.0.11samba-3.0.11.html/a/li +lia href=samba-3.0.10samba-3.0.10.html/a/li +lia href=samba-3.0.9samba-3.0.9.html/a/li +lia href=samba-3.0.8samba-3.0.8.html/a/li +lia href=samba-3.0.7samba-3.0.7.html/a/li
svn commit: samba r14826 - in branches/SAMBA_4_0/source/torture/raw: .
Author: metze Date: 2006-03-30 15:47:41 + (Thu, 30 Mar 2006) New Revision: 14826 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14826 Log: initialize pid1 and pid2:-) metze Modified: branches/SAMBA_4_0/source/torture/raw/context.c Changeset: Modified: branches/SAMBA_4_0/source/torture/raw/context.c === --- branches/SAMBA_4_0/source/torture/raw/context.c 2006-03-30 14:28:33 UTC (rev 14825) +++ branches/SAMBA_4_0/source/torture/raw/context.c 2006-03-30 15:47:41 UTC (rev 14826) @@ -535,6 +535,9 @@ return False; } + pid1 = cli-session-pid; + pid2 = pid1 + 1; + printf(pid1=%d pid2=%d\n, pid1, pid2); printf(create a file using pid1\n);
Re: svn commit: samba r14821 - in trunk/source/script/tests: .
On Thu, Mar 30, 2006 at 03:30:12PM +0200, Stefan (metze) Metzmacher wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] schrieb: Log: sync test_posix_p3.sh with test_posix.sh from samba4 but only run the BASE-* tests and ignore some more than in samba4 Hi *, trunk currently fails LOCK4 and LOCK5, and SAMBA_3_0 passes... That's probably due to my POSIX lock work in trunck (still incomplete). I'll fix this up asap. Jeremy.
svn commit: samba r14827 - in trunk/source: locking smbd
Author: jra
Date: 2006-03-30 18:55:46 + (Thu, 30 Mar 2006)
New Revision: 14827
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14827
Log:
Fix lock tests 4 and 5 when underlying POSIX locks are enabled.
Fix crash bug in error case on blocking lock processing.
Jeremy.
Modified:
trunk/source/locking/brlock.c
trunk/source/smbd/blocking.c
trunk/source/smbd/trans2.c
Changeset:
Modified: trunk/source/locking/brlock.c
===
--- trunk/source/locking/brlock.c 2006-03-30 15:47:41 UTC (rev 14826)
+++ trunk/source/locking/brlock.c 2006-03-30 18:55:46 UTC (rev 14827)
@@ -371,7 +371,7 @@
lock type so it can cope with the difference between
Windows stacking locks and POSIX flat ones. */
- if (lp_posix_locking(SNUM(fsp-conn))) {
+ if ((plock-lock_type != PENDING_LOCK)
lp_posix_locking(SNUM(fsp-conn))) {
if (!set_posix_lock(fsp, plock-start, plock-size,
plock-lock_type, WINDOWS_LOCK)) {
if (errno == EACCES || errno == EAGAIN) {
return NT_STATUS_FILE_LOCK_CONFLICT;
@@ -660,7 +660,7 @@
lock type so it can cope with the difference between
Windows stacking locks and POSIX flat ones. */
- if (lp_posix_locking(SNUM(fsp-conn))) {
+ if ((plock-lock_type != PENDING_LOCK)
lp_posix_locking(SNUM(fsp-conn))) {
if (!set_posix_lock(fsp, plock-start, plock-size,
plock-lock_type, POSIX_LOCK)) {
if (errno == EACCES || errno == EAGAIN) {
SAFE_FREE(tp);
@@ -800,6 +800,11 @@
return False;
}
+ /* Unlock any POSIX regions. */
+ if(lp_posix_locking(br_lck-fsp-conn-cnum)) {
+ release_posix_lock(br_lck-fsp, plock-start, plock-size);
+ }
+
/* Send unlock messages to any pending waiters that overlap. */
for (j=0; j br_lck-num_locks; j++) {
struct lock_struct *pend_lock = locks[j];
@@ -876,8 +881,8 @@
lock = locks[i];
/* Only remove our own locks - ignore fnum. */
- if (!brl_same_context(lock-context, plock-context) ||
- lock-lock_type == PENDING_LOCK) {
+ if (lock-lock_type == PENDING_LOCK ||
+ !brl_same_context(lock-context,
plock-context)) {
memcpy(tp[count], lock, sizeof(struct lock_struct));
count++;
continue;
@@ -945,6 +950,11 @@
return True;
}
+ /* Unlock any POSIX regions. */
+ if(lp_posix_locking(br_lck-fsp-conn-cnum)) {
+ release_posix_lock(br_lck-fsp, plock-start, plock-size);
+ }
+
/* Realloc so we don't leak entries per unlock call. */
if (count) {
tp = (struct lock_struct *)SMB_REALLOC(tp, count *
sizeof(*locks));
Modified: trunk/source/smbd/blocking.c
===
--- trunk/source/smbd/blocking.c2006-03-30 15:47:41 UTC (rev 14826)
+++ trunk/source/smbd/blocking.c2006-03-30 18:55:46 UTC (rev 14827)
@@ -100,6 +100,9 @@
return False;
}
+ blr-next = NULL;
+ blr-prev = NULL;
+
if((blr-inbuf = (char *)SMB_MALLOC(length)) == NULL) {
DEBUG(0,(push_blocking_lock_request: Malloc fail (2)!\n ));
SAFE_FREE(blr);
@@ -281,19 +284,29 @@
static void blocking_lock_reply_error(blocking_lock_record *blr, NTSTATUS
status)
{
switch(blr-com_type) {
+#if 0
+ /* We no longer push blocking lock requests for anything but lockingX
and trans2. */
case SMBlock:
case SMBlockread:
generic_blocking_lock_error(blr, status);
break;
+#endif
case SMBlockingX:
reply_lockingX_error(blr, status);
break;
+ case SMBtrans2:
+ case SMBtranss2:
+ generic_blocking_lock_error(blr, status);
+ break;
default:
DEBUG(0,(blocking_lock_reply_error: PANIC - unknown type on
blocking lock queue - exiting.!\n));
exit_server(PANIC - unknown type on blocking lock queue);
}
}
+#if 0
+/* We no longer push blocking lock requests for anything but lockingX and
trans2. */
+
/
Attempt to finish off getting all pending blocking locks for a lockread call.
Returns True if we want to be removed from the list.
@@ -431,6 +444,7 @@
send_blocking_reply(outbuf,outsize);
return True;
}
+#endif
/
Attempt to finish off getting all pending blocking locks for a lockingX call.
@@
svn commit: samba r14828 - in trunk/source/smbd: .
Author: jra
Date: 2006-03-30 21:09:09 + (Thu, 30 Mar 2006)
New Revision: 14828
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14828
Log:
Hook in the trans2 returns for blocking POSIX locks.
If we don't map down onto posix locks in the filesystem
(ie. if posix locking = False) this code should now
be working to allow POSIX style locks over SMB. Of course
I now need to test it :-). Finally I'll have to bite
the bullet and fix the mapping onto underlying POSIX
locks...
Jeremy.
Modified:
trunk/source/smbd/blocking.c
trunk/source/smbd/trans2.c
Changeset:
Modified: trunk/source/smbd/blocking.c
===
--- trunk/source/smbd/blocking.c2006-03-30 18:55:46 UTC (rev 14827)
+++ trunk/source/smbd/blocking.c2006-03-30 21:09:09 UTC (rev 14828)
@@ -296,8 +296,20 @@
break;
case SMBtrans2:
case SMBtranss2:
- generic_blocking_lock_error(blr, status);
- break;
+ {
+ char *outbuf = get_OutBuffer();
+ char *inbuf = blr-inbuf;
+ construct_reply_common(inbuf, outbuf);
+ /* construct_reply_common has done us the favor to
pre-fill the
+* command field with SMBtranss2 which is wrong :-)
+*/
+ SCVAL(outbuf,smb_com,SMBtrans2);
+ ERROR_NT(status);
+ if (!send_smb(smbd_server_fd(),outbuf)) {
+ exit_server(blocking_lock_reply_error:
send_smb failed.);
+ }
+ break;
+ }
default:
DEBUG(0,(blocking_lock_reply_error: PANIC - unknown type on
blocking lock queue - exiting.!\n));
exit_server(PANIC - unknown type on blocking lock queue);
@@ -531,6 +543,51 @@
}
/
+ Attempt to get the posix lock request from a SMBtrans2 call.
+ Returns True if we want to be removed from the list.
+*/
+
+static BOOL process_trans2(blocking_lock_record *blr)
+{
+ extern int max_send;
+ char *inbuf = blr-inbuf;
+ char *outbuf;
+ BOOL my_lock_ctx = False;
+ char params[2];
+ NTSTATUS status;
+
+ status = do_lock(blr-fsp,
+ blr-lock_pid,
+ blr-count,
+ blr-offset,
+ blr-lock_type,
+ blr-lock_flav,
+ my_lock_ctx);
+
+ if (!NT_STATUS_IS_OK(status)) {
+ if (ERROR_WAS_LOCK_DENIED(status)) {
+ /* Still can't get the lock, just keep waiting. */
+ return False;
+ }
+ /*
+* We have other than a can't get lock
+* error. Send an error and return True so we get dequeued.
+*/
+ blocking_lock_reply_error(blr, status);
+ return True;
+ }
+
+ /* We finally got the lock, return success. */
+ outbuf = get_OutBuffer();
+ construct_reply_common(inbuf, outbuf);
+ SCVAL(outbuf,smb_com,SMBtrans2);
+ SSVAL(params,0,0);
+ send_trans2_replies(outbuf, max_send, params, 2, NULL, 0);
+ return True;
+}
+
+
+/
Process a blocking lock SMB.
Returns True if we want to be removed from the list.
*/
@@ -547,7 +604,9 @@
#endif
case SMBlockingX:
return process_lockingX(blr);
- /* TODO - need to add POSIX SMBtrans and SMBtranss switch here.
*/
+ case SMBtrans2:
+ case SMBtranss2:
+ return process_trans2(blr);
default:
DEBUG(0,(blocking_lock_record_process: PANIC - unknown
type on blocking lock queue - exiting.!\n));
exit_server(PANIC - unknown type on blocking lock
queue);
Modified: trunk/source/smbd/trans2.c
===
--- trunk/source/smbd/trans2.c 2006-03-30 18:55:46 UTC (rev 14827)
+++ trunk/source/smbd/trans2.c 2006-03-30 21:09:09 UTC (rev 14828)
@@ -563,7 +563,7 @@
HACK ! Always assumes smb_setup field is zero.
/
-static int send_trans2_replies(char *outbuf,
+int send_trans2_replies(char *outbuf,
int bufsize,
char *params,
int paramsize,
Build status as of Fri Mar 31 00:00:02 2006
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2006-03-30 00:00:29.0 + +++ /home/build/master/cache/broken_results.txt 2006-03-31 00:00:03.0 + @@ -1,17 +1,17 @@ -Build status as of Thu Mar 30 00:00:02 2006 +Build status as of Fri Mar 31 00:00:02 2006 Build counts: Tree Total Broken Panic -ccache 7 1 0 -distcc 9 2 0 +ccache 9 1 0 +distcc 11 2 0 lorikeet-heimdal 15 15 0 -ppp 15 0 0 +ppp 16 0 0 rsync32 2 0 samba2 0 0 samba-docs 0 0 0 samba4 34 27 0 samba_3_034 7 0 -smb-build21 0 0 -talloc 8 6 0 -tdb 5 1 0 +smb-build24 0 0 +talloc 8 7 0 +tdb 28 3 0
svn commit: samba r14829 - in branches/SAMBA_3_0/source/rpc_parse: .
Author: jra
Date: 2006-03-31 00:44:24 + (Fri, 31 Mar 2006)
New Revision: 14829
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14829
Log:
Fix reversed test in coverity fixes.
Jeremy.
Modified:
branches/SAMBA_3_0/source/rpc_parse/parse_reg.c
Changeset:
Modified: branches/SAMBA_3_0/source/rpc_parse/parse_reg.c
===
--- branches/SAMBA_3_0/source/rpc_parse/parse_reg.c 2006-03-30 21:09:09 UTC
(rev 14828)
+++ branches/SAMBA_3_0/source/rpc_parse/parse_reg.c 2006-03-31 00:44:24 UTC
(rev 14829)
@@ -1117,7 +1117,7 @@
q_u-value-buf_max_len = max_buf_len;
q_u-buffer_len = TALLOC_P( get_talloc_ctx(), uint32 );
- if (q_u-buffer_len) {
+ if (!q_u-buffer_len) {
smb_panic(init_reg_q_enum_val: talloc fail\n);
return;
}
svn commit: samba r14830 - in trunk/source/rpc_parse: .
Author: jra
Date: 2006-03-31 00:44:32 + (Fri, 31 Mar 2006)
New Revision: 14830
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14830
Log:
Fix reversed test in coverity fixes.
Jeremy.
Modified:
trunk/source/rpc_parse/parse_reg.c
Changeset:
Modified: trunk/source/rpc_parse/parse_reg.c
===
--- trunk/source/rpc_parse/parse_reg.c 2006-03-31 00:44:24 UTC (rev 14829)
+++ trunk/source/rpc_parse/parse_reg.c 2006-03-31 00:44:32 UTC (rev 14830)
@@ -1117,7 +1117,7 @@
q_u-value-buf_max_len = max_buf_len;
q_u-buffer_len = TALLOC_P( get_talloc_ctx(), uint32 );
- if (q_u-buffer_len) {
+ if (!q_u-buffer_len) {
smb_panic(init_reg_q_enum_val: talloc fail\n);
return;
}
svn commit: samba r14831 - in branches/SAMBA_3_0/source/utils: .
Author: jra
Date: 2006-03-31 00:47:08 + (Fri, 31 Mar 2006)
New Revision: 14831
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14831
Log:
Fix possible null deref. Coverity #279.
Jeremy.
Modified:
branches/SAMBA_3_0/source/utils/net_ads.c
Changeset:
Modified: branches/SAMBA_3_0/source/utils/net_ads.c
===
--- branches/SAMBA_3_0/source/utils/net_ads.c 2006-03-31 00:44:32 UTC (rev
14830)
+++ branches/SAMBA_3_0/source/utils/net_ads.c 2006-03-31 00:47:08 UTC (rev
14831)
@@ -1045,6 +1045,13 @@
asprintf(prt_dn, cn=%s-%s,%s, srv_cn[0], printername, srv_dn);
pipe_hnd = cli_rpc_pipe_open_noauth(cli, PI_SPOOLSS, nt_status);
+ if (!pipe_hnd) {
+ d_fprintf(stderr, Unable to open a connnection to the spoolss
pipe on %s\n,
+servername);
+ ads_destroy(ads);
+ return -1;
+ }
+
get_remote_printer_publishing_data(pipe_hnd, mem_ctx, mods,
printername);
svn commit: samba r14832 - in trunk/source/utils: .
Author: jra
Date: 2006-03-31 00:47:19 + (Fri, 31 Mar 2006)
New Revision: 14832
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14832
Log:
Fix possible null deref. Coverity #279.
Jeremy.
Modified:
trunk/source/utils/net_ads.c
Changeset:
Modified: trunk/source/utils/net_ads.c
===
--- trunk/source/utils/net_ads.c2006-03-31 00:47:08 UTC (rev 14831)
+++ trunk/source/utils/net_ads.c2006-03-31 00:47:19 UTC (rev 14832)
@@ -1045,6 +1045,13 @@
asprintf(prt_dn, cn=%s-%s,%s, srv_cn[0], printername, srv_dn);
pipe_hnd = cli_rpc_pipe_open_noauth(cli, PI_SPOOLSS, nt_status);
+ if (!pipe_hnd) {
+ d_fprintf(stderr, Unable to open a connnection to the spoolss
pipe on %s\n,
+servername);
+ ads_destroy(ads);
+ return -1;
+ }
+
get_remote_printer_publishing_data(pipe_hnd, mem_ctx, mods,
printername);
svn commit: samba r14833 - in branches/SAMBA_3_0/source/rpcclient: .
Author: jra Date: 2006-03-31 00:50:09 + (Fri, 31 Mar 2006) New Revision: 14833 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14833 Log: Fix resource leak on error code path. Coverity #280. Jeremy. Modified: branches/SAMBA_3_0/source/rpcclient/cmd_spoolss.c Changeset: Modified: branches/SAMBA_3_0/source/rpcclient/cmd_spoolss.c === --- branches/SAMBA_3_0/source/rpcclient/cmd_spoolss.c 2006-03-31 00:47:19 UTC (rev 14832) +++ branches/SAMBA_3_0/source/rpcclient/cmd_spoolss.c 2006-03-31 00:50:09 UTC (rev 14833) @@ -2396,9 +2396,10 @@ curkey += strlen(subkey) + 1; } - safe_free(keylist); +done: -done: + SAFE_FREE(keylist); + if (got_hnd) rpccli_spoolss_close_printer(cli, mem_ctx, hnd);
svn commit: samba r14834 - in trunk/source/rpcclient: .
Author: jra Date: 2006-03-31 00:50:17 + (Fri, 31 Mar 2006) New Revision: 14834 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14834 Log: Fix resource leak on error code path. Coverity #280. Jeremy. Modified: trunk/source/rpcclient/cmd_spoolss.c Changeset: Modified: trunk/source/rpcclient/cmd_spoolss.c === --- trunk/source/rpcclient/cmd_spoolss.c2006-03-31 00:50:09 UTC (rev 14833) +++ trunk/source/rpcclient/cmd_spoolss.c2006-03-31 00:50:17 UTC (rev 14834) @@ -2396,9 +2396,10 @@ curkey += strlen(subkey) + 1; } - safe_free(keylist); +done: -done: + SAFE_FREE(keylist); + if (got_hnd) rpccli_spoolss_close_printer(cli, mem_ctx, hnd);
svn commit: samba-web r946 - in trunk: .
Author: jerry Date: 2006-03-31 02:52:25 + (Fri, 31 Mar 2006) New Revision: 946 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=946 Log: add mention of SuSE in the main release announcement Modified: trunk/index.html Changeset: Modified: trunk/index.html === --- trunk/index.html2006-03-30 17:21:42 UTC (rev 945) +++ trunk/index.html2006-03-31 02:52:25 UTC (rev 946) @@ -34,7 +34,7 @@ If you prefer to download just the diff from 3.0.21c to 3.0.22, the a href=/samba/ftp/patch-3.0.21c-3.0.22.diffs.gzpatch file/a (a href=/samba/ftp/patch-3.0.21c-3.0.22.diffs.ascgpg signature/a) is also available. - Precompiled packages for Fedora Core 4, RedHat 9, and Solaris + Precompiled packages for Fedora Core 4, RedHat 9, all SuSE platforms, and Solaris are available in the a href=/samba/ftp/Binary_Packages/Binary_Packages download area/a. Packages for other platforms will be available shortly./p
svn commit: samba r14835 - in branches/SAMBA_4_0/source/ntvfs: . common
Author: tridge Date: 2006-03-31 03:02:39 + (Fri, 31 Mar 2006) New Revision: 14835 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14835 Log: split out the config rules for the ntvfs/common/ directory Added: branches/SAMBA_4_0/source/ntvfs/common/config.mk Modified: branches/SAMBA_4_0/source/ntvfs/config.mk Changeset: Added: branches/SAMBA_4_0/source/ntvfs/common/config.mk === --- branches/SAMBA_4_0/source/ntvfs/common/config.mk2006-03-31 00:50:17 UTC (rev 14834) +++ branches/SAMBA_4_0/source/ntvfs/common/config.mk2006-03-31 03:02:39 UTC (rev 14835) @@ -0,0 +1,13 @@ + +# Start MODULE ntvfs_common +[MODULE::ntvfs_common] +SUBSYSTEM = ntvfs +PRIVATE_PROTO_HEADER = vfs_common_proto.h +OBJ_FILES = \ + brlock.o \ + opendb.o \ + notify.o \ + sidmap.o +REQUIRED_SUBSYSTEMS = +# End MODULE ntvfs_common + Modified: branches/SAMBA_4_0/source/ntvfs/config.mk === --- branches/SAMBA_4_0/source/ntvfs/config.mk 2006-03-31 00:50:17 UTC (rev 14834) +++ branches/SAMBA_4_0/source/ntvfs/config.mk 2006-03-31 03:02:39 UTC (rev 14835) @@ -1,5 +1,6 @@ # NTVFS Server subsystem include posix/config.mk +include common/config.mk include unixuid/config.mk @@ -75,11 +76,7 @@ ntvfs_base.o \ ntvfs_generic.o \ ntvfs_interface.o \ - ntvfs_util.o \ - common/brlock.o \ - common/opendb.o \ - common/notify.o \ - common/sidmap.o + ntvfs_util.o REQUIRED_SUBSYSTEMS = NDR_OPENDB NDR_NOTIFY # # End SUBSYSTEM NTVFS
svn commit: samba r14836 - in branches/SAMBA_4_0/source/librpc/idl: .
Author: tpot
Date: 2006-03-31 03:05:39 + (Fri, 31 Mar 2006)
New Revision: 14836
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14836
Log:
Keep constants in the right order, and line things up nicely.
Modified:
branches/SAMBA_4_0/source/librpc/idl/dcerpc.idl
Changeset:
Modified: branches/SAMBA_4_0/source/librpc/idl/dcerpc.idl
===
--- branches/SAMBA_4_0/source/librpc/idl/dcerpc.idl 2006-03-31 03:02:39 UTC
(rev 14835)
+++ branches/SAMBA_4_0/source/librpc/idl/dcerpc.idl 2006-03-31 03:05:39 UTC
(rev 14836)
@@ -57,10 +57,10 @@
[flag(NDR_REMAINING)] DATA_BLOB stub_and_verifier;
} dcerpc_request;
- const int DCERPC_BIND_PROVIDER_REJECT = 2;
- const int DCERPC_BIND_REASON_ASYNTAX = 1;
+ const int DCERPC_BIND_REASON_ASYNTAX = 1;
+ const int DCERPC_BIND_PROVIDER_REJECT= 2;
const int DECRPC_BIND_PROTOCOL_VERSION_NOT_SUPPORTED = 4;
- const int DCERPC_BIND_REASON_INVALID_AUTH_TYPE = 8;
+ const int DCERPC_BIND_REASON_INVALID_AUTH_TYPE = 8;
typedef struct {
uint16 result;
svn commit: samba r14837 - in branches/SAMBA_4_0/source/auth/credentials: .
Author: tridge
Date: 2006-03-31 05:33:35 + (Fri, 31 Mar 2006)
New Revision: 14837
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=14837
Log:
fixed build error
Modified:
branches/SAMBA_4_0/source/auth/credentials/credentials_ntlm.c
Changeset:
Modified: branches/SAMBA_4_0/source/auth/credentials/credentials_ntlm.c
===
--- branches/SAMBA_4_0/source/auth/credentials/credentials_ntlm.c
2006-03-31 03:05:39 UTC (rev 14836)
+++ branches/SAMBA_4_0/source/auth/credentials/credentials_ntlm.c
2006-03-31 05:33:35 UTC (rev 14837)
@@ -185,11 +185,12 @@
}
}
} else {
+ const char *password;
+
/* LM Key is incompatible... */
lm_response = nt_response;
*flags = ~CLI_CRED_LANMAN_AUTH;
- const char *password;
password = cli_credentials_get_password(cred);
if (password) {
E_deshash(password, lm_hash);
