[Samba] Samba and Windows XP: foogroup is not accessible

2007-01-15 Thread thomas Armstrong

Hi.

I've got Samba 3.0 on a Linux FC2 machine, and Windows XP on another machine.

When trying to access from Windows to Linux through 'fooworkgroup', I
get this error message:
foogroup is not accessible. You might not have permission to use this
network resource. Contact the administrator of this server to find out
if you have access permissions. The list of servers for this workgroup
is currently not available.

The '/etc/samba/smb.conf' on the Linux FC machine is:
--
[global]
   workgroup = foogroup
   netbios name = pc01
   server string = Samba Server at PC01
   log file = /var/log/samba/log.%m
   max log size = 50
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   printcap name = /etc/printcap
   dns proxy = No
   hosts allow = 192.168.2.
   security = user

[printers]
   comment = All Printers
path = /var/spool/samba
   printable = Yes
   browseable = No

[shared]
   comment = shared
   path = /home/john/shared
   read only = No
   public = Yes

[tmp]
  comment = Temporary file space
  path = /tmp
  read only = no
  public = yes
--

It worked ok some weeks ago, but I reinstalled Windows XP and now it doesn't.

Any suggestion?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Samba and Windows XP: foogroup is not accessible

2007-01-15 Thread thomas Armstrong

Fixed.

Just a Windows ZoneAlarm issue...

On 1/15/07, thomas Armstrong [EMAIL PROTECTED] wrote:

Hi.

I've got Samba 3.0 on a Linux FC2 machine, and Windows XP on another machine.

When trying to access from Windows to Linux through 'fooworkgroup', I
get this error message:
foogroup is not accessible. You might not have permission to use this
network resource. Contact the administrator of this server to find out
if you have access permissions. The list of servers for this workgroup
is currently not available.

The '/etc/samba/smb.conf' on the Linux FC machine is:
--
[global]
workgroup = foogroup
netbios name = pc01
server string = Samba Server at PC01
log file = /var/log/samba/log.%m
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printcap name = /etc/printcap
dns proxy = No
hosts allow = 192.168.2.
security = user

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No

[shared]
comment = shared
path = /home/john/shared
read only = No
public = Yes

[tmp]
   comment = Temporary file space
   path = /tmp
   read only = no
   public = yes
--

It worked ok some weeks ago, but I reinstalled Windows XP and now it doesn't.

Any suggestion?


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] windows user problem

2007-01-15 Thread kailash vyas

Hi all,

I am trying to configure samba but having problems login with different
username than the windows default but it does not allow me. it comes greyed
out.
This is the smb.conf file. Which parameter do i need to change so that
windows will allow me to login with different user in windows

smb.conf
===
[global]
   workgroup = IMS
   server string = Linux Server
   security = SHARE
   username map = /etc/samba/smbusers
   unix password sync = Yes
   log file = /var/log/samba/%m.log
   max log size = 50
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   dns proxy = No
   default service = htdocs
   idmap uid = 16777216-33554431
   idmap gid = 16777216-33554431
   valid users = @programmers
   admin users = pankaj, kailash

[homes]
   comment = Home Directories
   path = /home/
   valid users =
   admin users = pankaj
   read only = No

[htdocs]
   path = /home/htdocs
   read only = No
   only user = Yes




Thanks,
Kailash
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] tree connect failed: NT_STATUS_BAD_NETWORK_NAME

2007-01-15 Thread Philippe Andries
Dear all,
 
Since this morning my samba server is acting weird.
I have searched on the web for response on how to resolve this, but could
not find any solution, and only little relevant information.
I need your help.
 
My samba server version is 3.0.9-1.3E.10 running on RedHat ES 3
(2.4.21-47.0.1.ELsmp)
I wanted to add a share to my smb.conf.  Made a copy of it, added the share
and restarted smb.
Since then I can see the share but I cannot access them in both windows and
Linux. (Network name cannot be found or unable to display content)
I went back to the copy of smb (without the new share and which was working,
but no change, it does not work anymore.
 
Here are some test command and their results:
 
[EMAIL PROTECTED] etc]# smbstatus
 
Samba version 3.0.9-1.3E.10
PID Username  Group Machine
---
 2878   administrator  Domain Users  ntmad(10.234.1.1)
 
Service  pid machine   Connected at
---
IPC$  2878   ntmad Mon Jan 15 14:22:24 2007
 
No locked files
 
 
 
[EMAIL PROTECTED] etc]# testparm
Load smb config files from /etc/samba/smb.conf
Processing section [capital]
Processing section [finanzas]
Loaded services file OK.
'winbind separator = +' might cause problems with group membership.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions
 
# Global parameters
[global]
workgroup = DOMCAWMAD
server string = Madrid Samba Server
security = DOMAIN
log file = /var/log/samba/smbd.log
max log size = 50
printcap name = /etc/printcap
show add printer wizard = No
dns proxy = No
wins server = 10.234.1.1
idmap uid = 15000-2
idmap gid = 15000-2
winbind separator = +
winbind use default domain = Yes
use sendfile = Yes
 
[capital]
comment = Capital shared files
path = /home/capital
read only = No
create mask = 0777
directory mask = 0777
 
[finanzas]
comment = Old Finanzas shared files
path = /home/finanzas
read only = No
create mask = 0777
directory mask = 0777

[EMAIL PROTECTED] etc]# nmblookup madsamba
querying madsamba on 10.234.1.255
10.234.1.3 madsamba00

 
[EMAIL PROTECTED] etc]# smbclient -L MADSAMBA -U pandries
Password:
Domain=[DOMCAWMAD] OS=[Unix] Server=[Samba 3.0.9-1.3E.10]
 
Sharename   Type  Comment
-     ---
capital Disk  Capital shared files
finanzasDisk  Old Finanzas shared files
IPC$IPC   IPC Service (Madrid Samba Server)
ADMIN$  IPC   IPC Service (Madrid Samba Server)
Domain=[DOMCAWMAD] OS=[Unix] Server=[Samba 3.0.9-1.3E.10]
 
Server   Comment
----
MADSAMBA Madrid Samba Server
NTMAD
 
WorkgroupMaster
----
DOMCAWMADNTMAD

But this one failed
 
[EMAIL PROTECTED] etc]# smbclient //madsamba/capital -U pandries
Password:
Domain=[DOMCAWMAD] OS=[Unix] Server=[Samba 3.0.9-1.3E.10]
tree connect failed: NT_STATUS_BAD_NETWORK_NAME

Winbind is working fine webinfo  getent give answers.
 
Thanks in advance for your help,
 
Philippe A
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Testing subnets with samba[Scanned]

2007-01-15 Thread David Greenhall
OK before i start, this was something i was just testing while everyone was in 
training this afternoon. I have never had to deal with subnets before as we 
only have a few users, but decided to do a little bit of messing around to gain 
some experience.

Basically we have one server (mandriva 2006) running samba, it has two 4 port 
ethernet cards in it but only utilitising one port from each card. (10.10.10.1 
and 10.10.10.3) 
Every machine on the network is using the same subnet mask (255.255.255.0) 
All machines are connected using one cisco switch.

What I tried was enabling one of the other ports on the server and giving it 
the following details:
IP address: 10.10.10.32
Netmask: 255.255.255.224
Broadcast: 10.10.10.63

After enabling the card, everything seemed ok (I could ping the machine from 
mine straight away) However when I changed my network settings (win98) to the 
same subnet, samba would not let me login.

The message was  password expired or logon server refused connection
I could not login at all until I reset my network settings back to the default 
subnet 255.255.25.0. 

Would be grateful if anyone could shed some light on this as I don't understand 
why I could not login.

Thanks
Dave.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] How to get Soft Links to work

2007-01-15 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 01/12/2007 09:12 PM, [EMAIL PROTECTED] escreveu:
 I am running Samba on a Solaris 8.x box and my Samba (Win XP) 
 users can't see or make any softlinks work that are on the
 unix filesystem. I've seen opinions that one needs to set the
 's' sticky bit on but that doesn't seem to  work.

Sorry, I would like to clarify what's your problem.

By soft links you mean symlinks in unix-like
environment? Or you mean MS Windows Shortcuts? Maybe
a more detailed example (and your smb.conf) could help
to understand what's going on.


 Any suggestions?

Any chance that is related with your 'follow symlinks'
configuration?

Kind regards,

- --
Felipe Augusto van de Wiel [EMAIL PROTECTED]
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFq5GPCj65ZxU4gPQRAu/VAKCKCpWEeKshPjLLjYrTywdC4LYztwCfcMEv
0HDLWOcOxalfcPQv1ihVEtw=
=iW7T
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Repost: Can't connect to my smb share from Win machine

2007-01-15 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 01/12/2007 08:08 AM, Marc escreveu:
 Hello list,
 
 could somebody please point me to the information (tutorial) how to
 configure this properly, or where is the problem? I need to access
 the share without authentication (it's an isolated home network)...
 It used to work on FC3 but I can't figure it out on FC6 :-(

The Samba HOWTO has the information you want.

http://samba.org/samba/docs/man/Samba-HOWTO-Collection/


At a first look, I would say that in the security share
mode, you shouldn't configure the samba host as a domain master,
I'm not even sure about 'local master'.


 By the way, there's a typo in the original post: the windows machine
 is W98 not 95. 

Kind regards,

- --
Felipe Augusto van de Wiel [EMAIL PROTECTED]
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFq5JjCj65ZxU4gPQRAtk+AJwM7dEOHhrxTXNnCqcrH3UwRzVlnACgpK5I
ADQWrMRnYJJpOG7NH6o9OWU=
=ieNW
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba storing filenames as utf8

2007-01-15 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 01/12/2007 07:38 AM, Kurt Weiss escreveu:
 samba 3.0.22
 debian woody.
 linux charset: iso8859-15
 windows charset iso8859-15
 
 tested parameters:
unix charset = ISO_8859-15
display charset = ISO_8859-15
unix charset = ISO-8859-15
unix charset = iso8859-15
unix charset = utf8
unix charset = UTF8
unix charset = LOCALE
 
 problem:
 
 files are seen in windows correct iso8859 named.
 if i look at the linux server, there are encrypted special characters in
 the filenames. (e.g. Entwürfe looks like EntwÃ1/4rfe)
 
 i've tested a long time and today i've tried to convert the filename:
 
 sv01samba:/# echo EntwÃ1/4rfe | iconv -f utf8 -t iso8859-15
 Entwürfe
 
 in my view, it seems, that samba ignores the given unix charset
 parameter.

Try convmv, it solves most of our problems. We made the
convertion of entire filesystems to use UTF-8 instead of latin1.


Kind regards,

- --
Felipe Augusto van de Wiel [EMAIL PROTECTED]
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFq5LCCj65ZxU4gPQRAu6qAJ97lwmzn3fWcgpqUyk0vKxnUy0DRwCeNNnz
7CsAmyeaTJMZ8HgjD3E4mtk=
=wksZ
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Logon script problem

2007-01-15 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 01/12/2007 03:00 AM, Christophe Raluy escreveu:
 Hello,
 I've changed my Samba Server 2.2.7a on a Mandrake 9.1 (2.4.21) for a
 Samba server 3.0.20-3.1 (with samba-vscan-clamav-3.0.20-3.1) on a
 Mandrake 2006 (2.6.12). I've always used for the samba clients (WXP pro)
 the logon scripts created by make_logon_script. In this script, I used
 to use the commands  listed below:
 net use K: \\PDC\share
 route add network mask mask gateway
 Now the command 'net use' always works fine but the route command 
 returns an error message like (i translate from french, sorry :-)
 Route add has failed: network access denied
 Does anybody knows this problem ?

Any policies that could limit the privileges of your users?


 Thanks for reply
 Best regards
 Chris

Kind regards,

- --
Felipe Augusto van de Wiel [EMAIL PROTECTED]
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFq5N4Cj65ZxU4gPQRAjsBAJwJ2h+zWB7X5TQDTzW8yTHS/UAgQwCfbQDr
5icgV2oeptlfcu5P9ntkS1Q=
=BF7/
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] read only share problem

2007-01-15 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 01/13/2007 04:00 AM, Danilo Moretto escreveu:
 Felipe Augusto van de Wiel escribió:
 On 01/11/2007 02:22 PM, [EMAIL PROTECTED] escreveu:
 HI,
 I have setup a samba share called DATOS it look like this:

 [DATOS]
 path = /data/datos
 comment = QAQC y SHA
 locking = no
 admin users = zulloa2
 write list = @qaqc, zulloa2
 browseable = yes
 public = yes
 guest ok = yes
 force create mode = 775
 force directory mode = 775
 read only = yes
 force group = qaqc
 
 Your share is a little bit messy. You have
 public and guest ok, they are synonyms, you only
 need one of them.
 
 Besides that, it seems to have the configuration
 that you are imagining, a read only directory which a
 few people are able to write.

 in linux debian samba Version 3.0.14a-Debian

 it work good, opening the documents read only for every one, and can
 write with the user zulloa2 or the users in
 sha group.

 The problem is, some time some files in this share appear in read
 only mode for the user zulloa2...
 
 In a hard guess I would say that you have problems
 with your filesystem permissions.

 all the files in the share are in 775
 this is the smbstatus when the file appear in readonly
 tipecasrv:~# smbstatus -u zulloa2
 Samba version 3.0.14a-Debian
 PID Username  Group Machine
 ---
 14974   zulloa2   zulloa2   sha  (192.168.0.3)

 Service  pid machine   Connected at
 ---
 DATOS14974   sha   Thu Jan 11 07:01:38 2007
 PUBLICO  14974   sha   Thu Jan 11 07:01:38 2007
 IPC$ 14974   sha   Thu Jan 11 12:12:01 2007
 GESTION  14974   sha   Thu Jan 11 07:01:38 2007
 CALIDADySHA   14974   sha   Thu Jan 11 07:01:38 2007

 Locked files:
 PidDenyMode   Access  R/WOplock   Name
 --
 14974  DENY_WRITE 0x20089 RDONLY NONE   
 /data/datos/QAQC/CONTINUACION.ppt   Thu Jan 11 11:41:02 2007
 14974  DENY_NONE  0x2019f RDWR   EXCLUSIVE+BATCH
 /data/datos/QAQC/ITOPMT.doc   Thu Jan 11 12:13:06 2007
 14974  DENY_WRITE 0x20089 RDONLY NONE   
 /data/datos/QAQC/PGT.doc   Thu Jan 11 12:00:32 2007
 14974  DENY_WRITE 0x20089 RDONLY NONE   
 /data/datos/QAQC/Copia de SISTEMA QAQC.pps   Thu Jan 11 11:40:57 2007
 
 Can you send a full smbstatus, with logs of the
 access from the user?

 look that not all the files appears read only but is the same
 share an
 folder...
 
  
 Investigate the filesystem permissions.
 
 There are more users accessing this share?
 
 what happend? how can i do ?

 when i do a /etc/init.d/samba restart so i can write them with
 zulloa2 user, but hours later the read only show
 again...

[...]

 mister as you can see

Sorry, I can't see, I don't have access to your samba
server, I can only read the information you send, and it is
not the complete information.


 the file premission are set trhought samba:
 force create mode = 775
 force directory mode = 775
 force group = qaqc

That's not the only way to set permissions, you could
have migrate files, restored them from backup or even create
a few directories without noticed that the start permissions
were wrong.


 So all the share, i mean chmod -R 775 /data/datos
 and, chown -R root:sha /data/datos/

 are set up with 755 permissions with sha group as write enabled

That's strange, because you said the permission are
755. Besides that, I asked you other questions and I told
you it was a hard guess because there was not enough
information (like logs, testparm and full smbstatus). But if
you want to play the 'you don't read my entire mail', fine
by me, good luck.



 read all please
 thanks


Kind regards,


- --
Felipe Augusto van de Wiel [EMAIL PROTECTED]
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFq5URCj65ZxU4gPQRAk97AKCBu78iMB8ivNbQv+eNtIkhXCGevACglegc
FB5QwXoTpVJwRCi7E4j/Kq0=
=REqU
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] /etc/passwd needed for tdbsam?

2007-01-15 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 01/11/2007 11:08 AM, Henrik Zagerholm escreveu:
 Hi list,
 
 I wonder if /etc/passwd is needed for tdbsam?
 
 If so which backend is not dependant of /etc/passwd? Onle LDAP or ?

AIUI, you need to have your users available in the unix
environment, either by passwd/shadow, or by any other way you
want using NSS. ;)



 Regards,
 henrik

Kind regards,

- --
Felipe Augusto van de Wiel [EMAIL PROTECTED]
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFq5aqCj65ZxU4gPQRAsKzAJ9QI9VgnrtXT1L+B+jEtC1cjz46OQCaAt1Y
MZTwzHBVB6KBj/2Bne7DY/s=
=HgiH
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Account is not authorized to log in from this station

2007-01-15 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 01/11/2007 10:30 AM, mahesh pawar escreveu:
 Hello All,
 
 When I try to connect to the samba installed linux machine from windows
 I get the message Account is not authorized to log in from this
 station.
 I have made three entries(user name and password) in the smbpasswd file.
 But if I log in the windows machine using these user names and passwords
 I get the message Account is not authorized to log in from this
 station. If I log in as administrator(nobody) without a password, I can
 access the samba share. And if I try to connect to samba machine using
 it's ip address I can access it, but nopt with netbios name.
 
 This is my smb.conf file,
 
 [global]
 workgroup = BSIL
 netbios name = MDT506
 security = share
 server string = samba testing

Using 'security = share' you can't act as a login server,
so your accounts will not be able to login in the workstations.


 [data]
 read only = No
 guest ok = yes
 path = /export
 force user = mahesh.pawar
 force group = users
 comment = for everyone...
 
 
 with this configuration I am able to access the share on samba If a
 windows machine is logged in as a administrator.
 If I log in with a user account (which is also stored in smbpasswd) I am
 unable to access the samba share.
 
 also I am not sure about the behavior of the samba, because if I change
 the authentication in the configuration file it doesn't take effect.
 but I can access the samba from other unix machine with the user account
 I created in the smbpasswd file.
 
 Guide me through the configuration as I think I have missed out
 something, which is not letting me access the folder from windows user
 account.

Please, check the Samba Official HOWTO:

http://samba.org/samba/docs/


 Regards,
 Mahesh Pawar

Kind regards,

- --
Felipe Augusto van de Wiel [EMAIL PROTECTED]
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFq5kaCj65ZxU4gPQRAg6fAJ9KGt9gYc+vli65f0RNfiO3s18e0gCgu/1I
b+4aMcvaxqrvXXbhLRsS6vY=
=HHMn
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] problem with mapped group

2007-01-15 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 01/11/2007 04:05 AM, Dmitry Melekhov escreveu:
 Hello!
 
 We have samba 3.0.23d PDC and windows 2003 terminal server as samba
 domain member.
 And we have mapped group with about 170 members.
 We found that last added users (looks like last member of group) can't
 connect to windows server, i.e. they are not recognized by windows as
 group members.
 How can we check that this is samba problem , not windows problem?

Increase the log level to something like '10' and try to
contact Samba Team in the samba-technical maillist with as much
information as possible (full log, smb.conf). Maybe you will need
to provide 'net dumps' and strace log depending on how the
problem evolves.


If you find out it is a bug in Samba, report it into Samba
Bugzilla, attach your log and the test you have made so far (it
smells like a bug, either in Windows or in Samba). :D

https://bugzilla.samba.org


Kind regards,

- --
Felipe Augusto van de Wiel [EMAIL PROTECTED]
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFq5pQCj65ZxU4gPQRArO5AJ4pg60ZaB1WBvbt5+DmZ0+U68NaWgCgx0Eq
hALKsXP6mxET/TlifZTX+RU=
=XCN1
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] NT_STATUS_UNEXPECTED_NETWORK_ERROR

2007-01-15 Thread M Azer

Hello all,

I am running samba-3.0.23c-2 on Redhat 3 enterprise as ADS. I am able to see
the windows users and groups with wbinfo.

[EMAIL PROTECTED] /]# getent passwd windowuser
windowuser:*:1:10002:windowuser:/home/CAD/windowuser:/bin/bash

when i log to the network with one of the xp client machine i see home share
as well as a public share but i get access denied to both even after giving
the public share chmod 777 to everything on.

from the linux terminal i tried to:
[EMAIL PROTECTED] /]# smbclient //itbox/windowuser -U windowuser
Password:
session setup failed: NT_STATUS_UNEXPECTED_NETWORK_ERROR

the second time I ran the same command i got:

[EMAIL PROTECTED] /]# smbclient //itbox/windowuser -U windowuser
Password:
Domain=[CAD] OS=[Unix] Server=[Samba 3.0.23c-2]
tree connect failed: NT_STATUS_ACCESS_DENIED


all of my windows users are able to logon the linux termainl with their
windows username and password

[global]
#ADS
   security = ADS
   workgroup = CAD
   realm = CAD.TESTDOMAIN
   netbios name = itbox
   preferred master = no
   password server = 192.168.1.6
   client use spnego = yes
   server signing = auto
   encrypt passwords = yes
#winbind
   winbind separator = +
   idmap uid = 1000-2
   idmap gid = 1000-2
   winbind enum users = yes
   winbind enum groups = yes
   winbind use default domain = yes
   winbind cache time = 0
   winbind nested groups = yes
   template homedir = /home/%D/%U
   template shell = /bin/bash
#logs
   log file = /var/log/samba/%m.log
   log level = 3
   max log size= 50
#extras
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   hosts allow = 192.168.1. 192.168.0. 127.
[homes]
   comment = Home Directories
   valid users = %S
   read only = No
   browseable = No
[data]
   path = /data
   public = yes
   writable = yes
   browseable = yes
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: NT_STATUS_UNEXPECTED_NETWORK_ERROR - Solved

2007-01-15 Thread M Azer

I removed the valid users = %S and it worked -  Thanks for you help


On 1/15/07, M Azer [EMAIL PROTECTED] wrote:


Hello all,

I am running samba-3.0.23c-2 on Redhat 3 enterprise as ADS. I am able to
see the windows users and groups with wbinfo.

[EMAIL PROTECTED] /]# getent passwd windowuser
windowuser:*:1:10002:windowuser:/home/CAD/windowuser:/bin/bash

when i log to the network with one of the xp client machine i see home
share as well as a public share but i get access denied to both even after
giving the public share chmod 777 to everything on.

from the linux terminal i tried to:
[EMAIL PROTECTED] /]# smbclient //itbox/windowuser -U windowuser
Password:
session setup failed: NT_STATUS_UNEXPECTED_NETWORK_ERROR

the second time I ran the same command i got:

[EMAIL PROTECTED] /]# smbclient //itbox/windowuser -U windowuser
Password:
Domain=[CAD] OS=[Unix] Server=[Samba 3.0.23c-2]
tree connect failed: NT_STATUS_ACCESS_DENIED


all of my windows users are able to logon the linux termainl with their
windows username and password

[global]
#ADS
security = ADS
workgroup = CAD
realm = CAD.TESTDOMAIN
netbios name = itbox
preferred master = no
password server = 192.168.1.6
client use spnego = yes
server signing = auto
encrypt passwords = yes
#winbind
winbind separator = +
idmap uid = 1000-2
idmap gid = 1000-2
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
winbind cache time = 0
winbind nested groups = yes
template homedir = /home/%D/%U
template shell = /bin/bash
#logs
log file = /var/log/samba/%m.log
log level = 3
max log size= 50
#extras
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
hosts allow = 192.168.1. 192.168.0. 127.
[homes]
comment = Home Directories
valid users = %S
read only = No
browseable = No
[data]
path = /data
public = yes
writable = yes
browseable = yes



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Auto Create user home directory

2007-01-15 Thread M Azer

now that all permissions are right - if i create a new user on the win 2003
active directory and specify a home user under profile i will get  the home
folder could not be created because: the network name cannot be found I
know for sure I am getting that error because the user home folder doesn't
exist yet on the samba machine - is there any way to get the user home
created automatically once a new user are added to active directory.

Note: If the new user log in the linux terminal the home user will be
created automatically because i am using session required
/lib/security/$ISA/pam_mkhomedir.so skel=/etc/skel umask=0077
in my pam.d/system_auth. how do i get the same thing working when i create a
user with active directory.

Thanks for you help

___

I removed the valid users = %S and it worked -  Thanks for you help


On 1/15/07, M Azer [EMAIL PROTECTED]  wrote:Hello all,

I am running samba-3.0.23c-2 on Redhat 3 enterprise as ADS. I am able to see
the windows users and groups with wbinfo.

[EMAIL PROTECTED] /]# getent passwd windowuser
windowuser:*:1:10002:windowuser:/home/CAD/windowuser:/bin/bash

when i log to the network with one of the xp client machine i see home share
as well as a public share but i get access denied to both even after giving
the public share chmod 777 to everything on.

from the linux terminal i tried to:
[EMAIL PROTECTED] /]# smbclient //itbox/windowuser -U windowuser
Password:
session setup failed: NT_STATUS_UNEXPECTED_NETWORK_ERROR

the second time I ran the same command i got:

[EMAIL PROTECTED] /]# smbclient //itbox/windowuser -U windowuser
Password:
Domain=[CAD] OS=[Unix] Server=[Samba 3.0.23c-2]
tree connect failed: NT_STATUS_ACCESS_DENIED


all of my windows users are able to logon the linux termainl with their
windows username and password

[global]
#ADS
   security = ADS
   workgroup = CAD
   realm = CAD.TESTDOMAIN
   netbios name = itbox
   preferred master = no
   password server = 192.168.1.6
   client use spnego = yes
   server signing = auto
   encrypt passwords = yes
#winbind
   winbind separator = +
   idmap uid = 1000-2
   idmap gid = 1000-2
   winbind enum users = yes
   winbind enum groups = yes
   winbind use default domain = yes
   winbind cache time = 0
   winbind nested groups = yes
   template homedir = /home/%D/%U
   template shell = /bin/bash
#logs
   log file = /var/log/samba/%m.log
   log level = 3
   max log size= 50
#extras
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   hosts allow = 192.168.1. 192.168.0. 127.
[homes]
   comment = Home Directories
   valid users = %S
   read only = No
   browseable = No
[data]
   path = /data
   public = yes
   writable = yes
   browseable = yes
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] User permissions

2007-01-15 Thread M Azer

I just discovered that from windows client with a domain user logged in. i
could right click on any share, samba shares, go to the security tab and
change all the security. How do I prevent users from changing permissions?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Winbind nested groups not working

2007-01-15 Thread Joshua Penix
Is the winbind nested groups functionality not currently working in  
Samba 3.0.23d?  The readme files seem to indicate it should be (since  
3.0.3), but then this message by Jerry to the list...


http://groups.google.com/group/linux.samba/msg/5ecc575f70af3c8c

...seems to indicate that there's some patch waiting for 3.0.24.   
Unfortunately he's not specific as to what it solves.


I've actually tried it with the 3.0.10 that comes with RHEL4, 3.0.23d  
straight from Samba.org, and 3.0.22 from Ubuntu on three different  
servers.  I have no trouble getting winbind talking to AD on any of  
them, but all of them absolutely refuse to resolve membership of  
anything nested in a local group.


My smb.conf is as follows:

[global]
workgroup = DOM1
realm = DOM1.DOMAIN.COM
security = ADS
password server = 192.168.1.37 192.168.1.33
log file = /var/log/samba/%m.log
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = No
ldap ssl = no
idmap uid = 1-2
idmap gid = 1-2
winbind separator = +
winbind nested groups = yes
winbind enum groups = yes
winbind enum users = yes
winbind use default domain = no
allow trusted domains = yes

The goal is to create a local group on DOM1 that contains a global  
group of users from DOM1 as well as a global group from trusted  
domain DOM2.  I'd like to assign rights to the local group, and  
therefore allow anyone in either of the global groups access.


Am I just missing something?

--
Joshua Penixhttp://www.binarytribe.com
Binary Tribe   Linux Integration Services  Network Consulting


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Group permissions issue migrating from 2.2.8a to 3.0.23a

2007-01-15 Thread Tim Wunder
Hi, 

I have a share that worked fine in samba 2.2.8a, users were able to read and 
write to the share, and edit files. After migrating to 3.0.23a, users are no 
longer able to edit existing files.

Samba 2.2.8a config:
[sales]
comment = SALES
path = /home/netshare/sales
read list = @purch, @shipping
write list = @adm, @mgt, @sales, @vag, +hap
force group = +sales
create mask = 0664
directory mask = 00
force directory mode = 01775
vfs object = /usr/local/samba/recycle.so
vfs options = /etc/samba/salesrecycle.conf

Samba 3.0.23a config:
[sales]
comment = SALES
path = /home/netshare/sales
read list = @purch, @shipping
write list = @adm, @mgt, @sales, @vag, +hap
force group = +sales
create mask = 0664
directory mask = 00
force directory mode = 01775
vfs objects = recycle:recycle
recycle:repository = .recycle/%U
recycle:keeptree = Yes
recycle:touch = Yes
recycle:versions = No

the directory the file is in has the following permissions:
drwxrwxr-t  3 tpw sales
the file has:
-rwxrw-r--  1 tpw sales

I can only edit the file as user tpw. In samba 2.2.8a, anyone in the sales 
group could edit the file.

Additionally, it seems that samba is changing the group to tpw when saving the 
file as user tpw. The unix group sales exists and the user tpw is a 
memeber of that group. Shouldn't the force group = +sales cause the group 
to be sales when the file is saved?

Has something changed with samba? If so, how do I need to configure this share 
to allow users in group sales to edit files?

Thanks, 
Tim


pgps7TGG2fslE.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Group permissions issue migrating from 2.2.8a to 3.0.23a

2007-01-15 Thread Tim Wunder
Thanks for the response Thomas, questions below...

On Monday 15 January 2007 2:13 pm, you wrote:
 Tim Wunder wrote:
  I have a share that worked fine in samba 2.2.8a, users were able to read
  and write to the share, and edit files. After migrating to 3.0.23a, users
  are no longer able to edit existing files.

 I would use 3.0.23d - there were some changes in group behaviour.

  Samba 3.0.23a config:
  [sales]
  comment = SALES
  path = /home/netshare/sales
  read list = @purch, @shipping

 Try   read list = +purch, +shipping

  write list = @adm, @mgt, @sales, @vag, +hap

 Try   write list = +adm, +mgt, +sales, +vag, +hap


Changing the @ to a + seems to make no difference.
Also, according to the Help file that came with samba, the @ is the proper 
syntax:
This is a list of users that are given read-write access to a service. If the 
connecting user is in this list then they will be given write access, no 
matter what the read only option is set to. The list can include group names 
using the @group syntax.

  force group = +sales

 Try   force group = sales

  I can only edit the file as user tpw. In samba 2.2.8a, anyone in the
  sales group could edit the file.

 You need the '+' as group flag now (tested with 3.0.23d).

  Additionally, it seems that samba is changing the group to tpw when
  saving the file as user tpw. The unix group sales exists and the user
  tpw is a memeber of that group. Shouldn't the force group = +sales
  cause the group to be sales when the file is saved?

 No. You must have no group flag (+) in 'force group' because 'force
 group' forces ... a group and not also users as in 'read list' and
 'write list' ;)

Again, according to the Help file, In Samba 2.0.5 and above this parameter 
has extended functionality in the following way. If the group name listed 
here has a '+' character prepended to it then the current user accessing the 
share only has the primary group default assigned to this group if they are 
already assigned as a member of that group.


pgpuoOR3WZo8a.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Auto Create user home directory

2007-01-15 Thread Dale Schroeder
I see you have template homedir = /home/%D/%U.  Did you create the 
directory /home/CAD?  It is not created automatically, and that is one 
thing that seems to be left out of the how-to's.  I set the directory 
permissions to 770, owned by root*:*DOMAIN+Domain Users.  After doing 
this, all my user home directories were created on 1st login.


Good luck,
Dale

M Azer wrote:
now that all permissions are right - if i create a new user on the win 
2003
active directory and specify a home user under profile i will get  
the home

folder could not be created because: the network name cannot be found I
know for sure I am getting that error because the user home folder 
doesn't

exist yet on the samba machine - is there any way to get the user home
created automatically once a new user are added to active directory.

Note: If the new user log in the linux terminal the home user will be
created automatically because i am using session required
/lib/security/$ISA/pam_mkhomedir.so skel=/etc/skel umask=0077
in my pam.d/system_auth. how do i get the same thing working when i 
create a

user with active directory.

Thanks for you help

___ 



I removed the valid users = %S and it worked -  Thanks for you help


On 1/15/07, M Azer [EMAIL PROTECTED]  wrote:Hello all,

I am running samba-3.0.23c-2 on Redhat 3 enterprise as ADS. I am able 
to see

the windows users and groups with wbinfo.

[EMAIL PROTECTED] /]# getent passwd windowuser
windowuser:*:1:10002:windowuser:/home/CAD/windowuser:/bin/bash

when i log to the network with one of the xp client machine i see home 
share
as well as a public share but i get access denied to both even after 
giving

the public share chmod 777 to everything on.

from the linux terminal i tried to:
[EMAIL PROTECTED] /]# smbclient //itbox/windowuser -U windowuser
Password:
session setup failed: NT_STATUS_UNEXPECTED_NETWORK_ERROR

the second time I ran the same command i got:

[EMAIL PROTECTED] /]# smbclient //itbox/windowuser -U windowuser
Password:
Domain=[CAD] OS=[Unix] Server=[Samba 3.0.23c-2]
tree connect failed: NT_STATUS_ACCESS_DENIED


all of my windows users are able to logon the linux termainl with their
windows username and password

[global]
#ADS
   security = ADS
   workgroup = CAD
   realm = CAD.TESTDOMAIN
   netbios name = itbox
   preferred master = no
   password server = 192.168.1.6
   client use spnego = yes
   server signing = auto
   encrypt passwords = yes
#winbind
   winbind separator = +
   idmap uid = 1000-2
   idmap gid = 1000-2
   winbind enum users = yes
   winbind enum groups = yes
   winbind use default domain = yes
   winbind cache time = 0
   winbind nested groups = yes
   template homedir = /home/%D/%U
   template shell = /bin/bash
#logs
   log file = /var/log/samba/%m.log
   log level = 3
   max log size= 50
#extras
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   hosts allow = 192.168.1. 192.168.0. 127.
[homes]
   comment = Home Directories
   valid users = %S
   read only = No
   browseable = No
[data]
   path = /data
   public = yes
   writable = yes
   browseable = yes

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Auto Create user home directory

2007-01-15 Thread Jason Haar
Dale Schroeder wrote:
 I see you have template homedir = /home/%D/%U.  Did you create the
 directory /home/CAD?  It is not created automatically, and that is one
 thing that seems to be left out of the how-to's.  I set the directory
 permissions to 770, owned by root*:*DOMAIN+Domain Users.  After
 doing this, all my user home directories were created on 1st login.
I think that should be reported as a bug. As %D is dynamic and may
change with time (as new domains are added to an existing site),
expecting it to be manually created beforehand is a bit odd. If %U can
be created on the fly - why not anything else?

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Active directory not working across openvpn tunnel

2007-01-15 Thread Bill Ries-Knight

resend as original did not post in the last 36 hours

-- Forwarded message --
From: Bill Ries-Knight [EMAIL PROTECTED]
Date: Jan 14, 2007 12:00 AM
Subject: Active directory not working across openvpn tunnel
To: samba@lists.samba.org


Network is

192.168.1.x office --HSP domain --small business server and exchange host
 Linux server
  openvpn tunnel
 Linux server
192.168.19.x 192.168.10.x  CRAGMART domain --school--small business server

I had to replace the linux server on the office side.
We now have nost services except active direcory stuff, and can only
see the local domain from either side.  Browsing by IP across the
tunnel to the other domain in either direction brings up a logon
request, but the username is not accepted on the other side.  the
local domain is expected to provide credentials.

from HSP it try to logon to a CRAGMART workstation with a username
that is valid on both active server domains as an entry on both
servers.  I have a return for HSP/username.  I cannot authenticate.

In the other direction I will get a logon request from CRAGMART to an
HSP workstation and it will return CRAGMART/username.  I cannot
authenticate.

Looking at syslog I get the following:

Jan 13 23:31:51 router kernel: REJECT INPUT IN=eth0 OUT= MAC=
SRC=XX.XX.21.78 DST=XX.XX.21.255 LEN=78 TOS=0x00 PREC=0x00 TTL=64 ID=0
DF PROTO=UDP SPT=137 DPT=137 LEN=58
Jan 13 23:31:51 router winbindd[21809]: [2007/01/13 23:31:51, 0]
libsmb/namequery.c:getlmhostsent(681)
Jan 13 23:31:51 router winbindd[21809]:   getlmhostsent: Ill formed
hosts line [127.0.0.0]
Jan 13 23:31:53 router kernel: REJECT INPUT IN=eth0 OUT= MAC=
SRC=XX.XX.21.78 DST=XX.XX.21.255 LEN=78 TOS=0x00 PREC=0x00 TTL=64 ID=0
DF PROTO=UDP SPT=137 DPT=137 LEN=58
Jan 13 23:31:55 router last message repeated 2 times
Jan 13 23:31:56 router kernel: REJECT INPUT IN=eth0 OUT= MAC=
SRC=XX.XX.21.78 DST=XX.XX.21.255 LEN=211 TOS=0x00 PREC=0x00 TTL=64
ID=0 DF PROTO=UDP SPT=138 DPT=138 LEN=191



System specifics.

OFFICE  Debian Etch  192.168.1.1  mail:/# smbd -V  :: Version 3.0.23d

mail:~# cat /etc/hosts
127.0.0.1 localhost.localdomainlocalhostmail
192.168.1.1   ntserver.mail...org
XX.XX.21.78   mail..org
192.168.1.3 server
192.168.19.3 cserver
192.168.1.1 router.hsp.local router ntserver ntserver.hsp.local mail



# The following lines are desirable for IPv6 capable hosts
::1 ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts


SCHOOL  Fedora Core 4  192.168.19.1  [EMAIL PROTECTED] ~]# smbd -V ::
Version 3.0.14a-2


[EMAIL PROTECTED] ~]# cat /etc/hosts
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1   ntserver.cragmart.local localhost.localdomain
localhost  filter.cragmart.localfilter
192.168.1.9 jukebox



--
--
Bill Ries-Knight
Stockton, CA

Respect the process, Vote.


--
--
Bill Ries-Knight
Stockton, CA

Respect the process, Vote.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Auto Create user home directory

2007-01-15 Thread M Azer

I have created the Domain folder CAD where all the users home should be
created under. however I still can't create a new  user in win 2003 AD and
have the home folder be created automatically - I still have to create the
home folder first then create the user. does it have anything to do with
pam.d directory? any modification need to be done there?

On 1/15/07, Jason Haar [EMAIL PROTECTED] wrote:


Dale Schroeder wrote:
 I see you have template homedir = /home/%D/%U.  Did you create the
 directory /home/CAD?  It is not created automatically, and that is one
 thing that seems to be left out of the how-to's.  I set the directory
 permissions to 770, owned by root*:*DOMAIN+Domain Users.  After
 doing this, all my user home directories were created on 1st login.
I think that should be reported as a bug. As %D is dynamic and may
change with time (as new domains are added to an existing site),
expecting it to be manually created beforehand is a bit odd. If %U can
be created on the fly - why not anything else?

--
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Mac OSX doesn't retain file timestamp when copying to SAMBA share

2007-01-15 Thread Troy Kenah


Hi All,

I'm not sure what's causing this but every time I copy a file from one 
of the Macs (details below) to the Samba server the file timestamp is 
changed to the copy time rather than retaining the last modified time. 
Does anyone know what could be causing this?


Systems:
Mac OSX (versions 10.3.x - 10.4.x)
Windows 2000 Professional
Solaris 10 running Samba 3.0.11

Tests...
Mac OSX  -  Mac OSX  retains timestamp
Mac OSX  -  W2K share retains timestamp
Mac OSX  -  Solaris Samba share REPLACES timestamp with copy time
W2K - Solaris Samba share retains timestamp

smb.conf
[global]
  workgroup = OTP
  server string = OTP Server
  security = share
  load printers = yes
  log file = /usr/local/samba/var/log.%m
  max log size = 50
  socket options = TCP_NODELAY
  dns proxy = no
[otpserver]
  comment = OTP Server
  browseable = no
  writable = yes
[printers]
  comment = All Printers
  path = /var/spool/samba
  browseable = no
  guest ok = no
  writable = no
  printable = yes
[otpdata]
  comment = OTP Data
  path = /otp/Shared
  guest ok = yes
  read only = no
  writable = yes
  public = yes
[ftpdata]
  comment = FTP Data
  path = /otp/user/guest
  guest ok = yes
  read only = no
  writable = yes
  public = yes


Regards,
Troy.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Winbind caching group membership issue

2007-01-15 Thread Miles, Noal
Hi All,

I am using samba-common-3.0.10-1.4E.9 on a RHEL4_U4 x86 machine.  The
ADS server is WS03 sp1 running in Windows Server 2003 interim mode.  In
general thing are working well.  However, when winbind caching is
enabled (default), group membership does not appear to update, i.e.
wbinfo -r bob and groups bob don't reflect changes in ADS group
membership.  getent group groupname does show the correct info on the
second query.  Always takes 2 queries regardless of elapsed time.  With
winbind caching off, each command returns correctly the first time
(though slowly).

Using tcpdump with winbind caching enabled, I can see the ADS domain
controller being queried when winbind cache time expires when each
command is executed.  However, the wbinfo and groups results are not
updated no matter the amount of elapsed time.  It should be noted that
if I stop winbind and delete *.tdb then restart, updated info is
returned by wbinfo and groups but again, next changes will not  be
reflected.

Why do I care?  I am trying to use pam_listfile.so to control what ADS
accounts can log on to the box (by group membership).  Pam_listfile is
not seeing updated group membership when winbind caching is enabled.
Somewhat ironically pam_winbind.so sees things correctly I suppose
because it never consults the cache.

What am I missing?  Thanks for the help,
Noal

Some potentially relevant settings from smb.conf include:
   idmap backend = idmap_rid:APP=1700-4000
   winbind enum users = yes
   winbind enum groups = yes
   idmap uid = 1700-4000
   idmap gid = 1700-4000
   winbind use default domain = yes
   winbind cache time = 30
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Auto Create user home directory

2007-01-15 Thread Ed Plese
On Mon, Jan 15, 2007 at 12:11:29PM -0500, M Azer wrote:
 now that all permissions are right - if i create a new user on the win 2003
 active directory and specify a home user under profile i will get  the home
 folder could not be created because: the network name cannot be found I
 know for sure I am getting that error because the user home folder doesn't
 exist yet on the samba machine - is there any way to get the user home
 created automatically once a new user are added to active directory.
 
 Note: If the new user log in the linux terminal the home user will be
 created automatically because i am using session required
 /lib/security/$ISA/pam_mkhomedir.so skel=/etc/skel umask=0077
 in my pam.d/system_auth. how do i get the same thing working when i create a
 user with active directory.

You might try adding the following to your smb.conf file:

[global]
  obey pam restrictions = yes


Ed Plese
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Complicated question

2007-01-15 Thread Jamrock

Jason Baker [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
 I'm not sure if this is the right place to post this, but here goes. I
 just put together a PDC using Samba. I have given users the ability to
 change their passwords (once every 7 days) if they wish. I used to keep
 a list of usernames and passwords in a spread-sheet, so I could keep
 track of the servers that I needed to update with the correct password
 if anything changed. That being said. What do I do about authentication
 if I want to add a NAS? I basically won't know what user's passwords are
 and if/when they change them. How do I allow them access to the NAS
 shares with the proper permissions, while still maintaining the
 flexibility of allowing them to change their passwords?

It sounds as if you were using a workgroup logic before.  Are you saying
that each server had its own list of users and passwords?

With a PDC there is one list of usernames and passwords.  This is stored on
the PDC.  You give access to specific shares on each server to specific
users or groups.

When a user logs on to the network, the PDC verifies his password.  When he
tries to access a share, the relevant server checks to see if he has access
to the share and if he has been authenticated by the PDC.

Each server does not authenticate the user's password.



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Account is not authorized to log in from this station

2007-01-15 Thread mahesh pawar
I removed  share = security , and now it is working smoothly.
Thanks for your help.

Best Regards,
Mahesh Pawar.




On Mon, 2007-01-15 at 13:09 -0200, Felipe Augusto van de Wiel wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 On 01/11/2007 10:30 AM, mahesh pawar escreveu:
  Hello All,
  
  When I try to connect to the samba installed linux machine from windows
  I get the message Account is not authorized to log in from this
  station.
  I have made three entries(user name and password) in the smbpasswd file.
  But if I log in the windows machine using these user names and passwords
  I get the message Account is not authorized to log in from this
  station. If I log in as administrator(nobody) without a password, I can
  access the samba share. And if I try to connect to samba machine using
  it's ip address I can access it, but nopt with netbios name.
  
  This is my smb.conf file,
  
  [global]
  workgroup = BSIL
  netbios name = MDT506
  security = share
  server string = samba testing
 
   Using 'security = share' you can't act as a login server,
 so your accounts will not be able to login in the workstations.
 
 
  [data]
  read only = No
  guest ok = yes
  path = /export
  force user = mahesh.pawar
  force group = users
  comment = for everyone...
  
  
  with this configuration I am able to access the share on samba If a
  windows machine is logged in as a administrator.
  If I log in with a user account (which is also stored in smbpasswd) I am
  unable to access the samba share.
  
  also I am not sure about the behavior of the samba, because if I change
  the authentication in the configuration file it doesn't take effect.
  but I can access the samba from other unix machine with the user account
  I created in the smbpasswd file.
  
  Guide me through the configuration as I think I have missed out
  something, which is not letting me access the folder from windows user
  account.
 
   Please, check the Samba Official HOWTO:
 
   http://samba.org/samba/docs/
 
 
  Regards,
  Mahesh Pawar
 
   Kind regards,
 
 - --
 Felipe Augusto van de Wiel [EMAIL PROTECTED]
 Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
 http://www.paranacidade.org.br/   Phone: (+55 41 3350 3300)
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.6 (GNU/Linux)
 Comment: Using GnuPG with Debian - http://enigmail.mozdev.org
 
 iD8DBQFFq5kaCj65ZxU4gPQRAg6fAJ9KGt9gYc+vli65f0RNfiO3s18e0gCgu/1I
 b+4aMcvaxqrvXXbhLRsS6vY=
 =HHMn
 -END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] nested groups with ADS does not work?

2007-01-15 Thread Vladimir Shved

Using current samba 3.0.23d package on debian etch. Joined AD,
everything works but
when doing something like:

net rpc group add demo -L

Could not connect to server 127.0.0.1
The username or password was not correct.
Connection failed: NT_STATUS_LOGON_FAILURE

or when doing:

net rpc group add demo -L -U administrator
Password:
add alias failed: NT_STATUS_ACCESS_DENIED

also at the same time log spits this out:
[2007/01/15 22:24:54, 0] auth/auth_util.c:create_builtin_administrators(785)
 create_builtin_administrators: Failed to create Administrators
[2007/01/15 22:24:54, 0] auth/auth_util.c:create_builtin_users(751)
 create_builtin_users: Failed to create Users

I did some mappings, so running this:
net groupmap list
Domain Admins (S-1-5-21-2251837095-2786957548-4043407633-512) - root
Domain Guests (S-1-5-21-2251837095-2786957548-4043407633-514) - nogroup
Domain Users (S-1-5-21-2251837095-2786957548-4043407633-513) - users

I'm not using LDAP, only tdbsam.

wbinfo -m
shows only joined AD domain, should it show domain and local domain too?

Also  when doing
getent group domain users
does not list everyone, maybe only one user. Usually after reboot, it
lists everyone but then after awhile the list becomes empty.

Is it even possible to use nested groups(local groups) on samba when
its in the ADS mode? Is it an issue with debian packages? Can anyone
help?

I'm trying to build ADS member file server without hustle of adding
extra groups to AD, and manage permissions by using local groups on
samba.

Thanks,
--Vlad
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


svn commit: samba r20794 - in branches/SAMBA_4_0/source/lib/events: .

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 08:17:15 + (Mon, 15 Jan 2007)
New Revision: 20794

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20794

Log:
hopefully fix the build on systems without native linux aio

metze
Modified:
   branches/SAMBA_4_0/source/lib/events/config.m4


Changeset:
Modified: branches/SAMBA_4_0/source/lib/events/config.m4
===
--- branches/SAMBA_4_0/source/lib/events/config.m4  2007-01-15 07:53:45 UTC 
(rev 20793)
+++ branches/SAMBA_4_0/source/lib/events/config.m4  2007-01-15 08:17:15 UTC 
(rev 20794)
@@ -13,5 +13,5 @@
SMB_ENABLE(EVENTS_AIO,YES)
AC_DEFINE(HAVE_LINUX_AIO, 1, [Whether Linux AIO is available])
fi
-   SMB_EXT_LIB(LIBAIO_LINUX, $AIO_LIBS)
 fi
+SMB_EXT_LIB(LIBAIO_LINUX, $AIO_LIBS)



svn commit: samba r20795 - in branches/SAMBA_4_0/source/libcli/security: .

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 09:02:58 + (Mon, 15 Jan 2007)
New Revision: 20795

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20795

Log:
dom_sid_parse_talloc() gets an null terminated string as input,
the SDDL string has the sid strings embedded, so we need to create
a null terminated string...

metze
Modified:
   branches/SAMBA_4_0/source/libcli/security/sddl.c


Changeset:
Modified: branches/SAMBA_4_0/source/libcli/security/sddl.c
===
--- branches/SAMBA_4_0/source/libcli/security/sddl.c2007-01-15 08:17:15 UTC 
(rev 20794)
+++ branches/SAMBA_4_0/source/libcli/security/sddl.c2007-01-15 09:02:58 UTC 
(rev 20795)
@@ -100,9 +100,17 @@
 
/* see if its in the numeric format */
if (strncmp(sddl, S-, 2) == 0) {
+   struct dom_sid *sid;
+   char *sid_str;
size_t len = strspn(sddl+2, -0123456789);
+   sid_str = talloc_strndup(mem_ctx, sddl, len+2);
+   if (!sid_str) {
+   return NULL;
+   }
(*sddlp) += len+2;
-   return dom_sid_parse_talloc(mem_ctx, sddl);
+   sid = dom_sid_parse_talloc(mem_ctx, sid_str);
+   talloc_free(sid_str);
+   return sid;
}
 
/* now check for one of the special codes */



svn commit: samba r20796 - in branches: SAMBA_3_0/source/printing SAMBA_3_0/source/smbd SAMBA_3_0_24/source/printing SAMBA_3_0_24/source/smbd

2007-01-15 Thread vlendec
Author: vlendec
Date: 2007-01-15 09:17:11 + (Mon, 15 Jan 2007)
New Revision: 20796

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20796

Log:
Fix the same problem Jeremy has fixed (improper handling of deferred opens)
for delete_driver_files. Proper fix pending... :-)

Jeremy, please check.

Volker

Modified:
   branches/SAMBA_3_0/source/printing/nt_printing.c
   branches/SAMBA_3_0/source/smbd/reply.c
   branches/SAMBA_3_0_24/source/printing/nt_printing.c
   branches/SAMBA_3_0_24/source/smbd/reply.c


Changeset:
Modified: branches/SAMBA_3_0/source/printing/nt_printing.c
===
--- branches/SAMBA_3_0/source/printing/nt_printing.c2007-01-15 09:02:58 UTC 
(rev 20795)
+++ branches/SAMBA_3_0/source/printing/nt_printing.c2007-01-15 09:17:11 UTC 
(rev 20796)
@@ -4853,7 +4853,7 @@
pstrcpy( file, s );
driver_unix_convert(file, conn, NULL, st);
DEBUG(10,(deleting driverfile [%s]\n, s));
-   unlink_internals(conn, 0, file, False);
+   unlink_internals(conn, 0, file, False, False);
}
}

@@ -4862,7 +4862,7 @@
pstrcpy( file, s );
driver_unix_convert(file, conn, NULL, st);
DEBUG(10,(deleting configfile [%s]\n, s));
-   unlink_internals(conn, 0, file, False);
+   unlink_internals(conn, 0, file, False, False);
}
}

@@ -4871,7 +4871,7 @@
pstrcpy( file, s );
driver_unix_convert(file, conn, NULL, st);
DEBUG(10,(deleting datafile [%s]\n, s));
-   unlink_internals(conn, 0, file, False);
+   unlink_internals(conn, 0, file, False, False);
}
}

@@ -4880,7 +4880,7 @@
pstrcpy( file, s );
driver_unix_convert(file, conn, NULL, st);
DEBUG(10,(deleting helpfile [%s]\n, s));
-   unlink_internals(conn, 0, file, False);
+   unlink_internals(conn, 0, file, False, False);
}
}

@@ -4896,7 +4896,7 @@
pstrcpy( file, p );
driver_unix_convert(file, conn, NULL, st);
DEBUG(10,(deleting dependent file [%s]\n, 
file));
-   unlink_internals(conn, 0, file, False);
+   unlink_internals(conn, 0, file, False, False);
}

i++;

Modified: branches/SAMBA_3_0/source/smbd/reply.c
===
--- branches/SAMBA_3_0/source/smbd/reply.c  2007-01-15 09:02:58 UTC (rev 
20795)
+++ branches/SAMBA_3_0/source/smbd/reply.c  2007-01-15 09:17:11 UTC (rev 
20796)
@@ -1679,7 +1679,8 @@
  Check if a user is allowed to delete a file.
 /
 
-static NTSTATUS can_delete(connection_struct *conn, char *fname, uint32 
dirtype)
+static NTSTATUS can_delete(connection_struct *conn, char *fname,
+  uint32 dirtype, BOOL can_defer)
 {
SMB_STRUCT_STAT sbuf;
uint32 fattr;
@@ -1777,7 +1778,7 @@
FILE_OPEN,
0,
FILE_ATTRIBUTE_NORMAL,
-   0,
+   can_defer ? 0 : INTERNAL_OPEN_ONLY,
NULL, fsp);
 
if (NT_STATUS_IS_OK(status)) {
@@ -1791,7 +1792,8 @@
  code.
 /
 
-NTSTATUS unlink_internals(connection_struct *conn, uint32 dirtype, char *name, 
BOOL has_wild)
+NTSTATUS unlink_internals(connection_struct *conn, uint32 dirtype,
+ char *name, BOOL has_wild, BOOL can_defer)
 {
pstring directory;
pstring mask;
@@ -1835,7 +1837,7 @@
if (dirtype == 0) {
dirtype = FILE_ATTRIBUTE_NORMAL;
}
-   status = can_delete(conn,directory,dirtype);
+   status = can_delete(conn,directory,dirtype,can_defer);
if (!NT_STATUS_IS_OK(status))
return status;
 
@@ -1885,7 +1887,8 @@
continue;

slprintf(fname,sizeof(fname)-1, 
%s/%s,directory,dname);
-   status = can_delete(conn, fname, dirtype);
+   status = can_delete(conn, fname, dirtype,
+

svn commit: samba r20797 - in branches/SAMBA_4_0/source/librpc/idl: .

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 09:52:25 + (Mon, 15 Jan 2007)
New Revision: 20797

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20797

Log:
make it more clear that this is a 32bit bitmap

metze
Modified:
   branches/SAMBA_4_0/source/librpc/idl/security.idl


Changeset:
Modified: branches/SAMBA_4_0/source/librpc/idl/security.idl
===
--- branches/SAMBA_4_0/source/librpc/idl/security.idl   2007-01-15 09:17:11 UTC 
(rev 20796)
+++ branches/SAMBA_4_0/source/librpc/idl/security.idl   2007-01-15 09:52:25 UTC 
(rev 20797)
@@ -240,7 +240,7 @@
SEC_ACE_TYPE_SYSTEM_ALARM_OBJECT= 8
} security_ace_type;
 
-   typedef bitmap {
+   typedef [bitmap32bit] bitmap {
SEC_ACE_OBJECT_TYPE_PRESENT = 0x0001,
SEC_ACE_INHERITED_OBJECT_TYPE_PRESENT   = 0x0002
} security_ace_object_flags;



svn commit: samba r20798 - in branches/SAMBA_4_0/source/librpc/ndr: .

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 09:54:08 + (Mon, 15 Jan 2007)
New Revision: 20798

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20798

Log:
fix ndr_size_security_ace() it should include the optional sub object
for ADS style ace's

metze
Modified:
   branches/SAMBA_4_0/source/librpc/ndr/ndr_sec_helper.c


Changeset:
Modified: branches/SAMBA_4_0/source/librpc/ndr/ndr_sec_helper.c
===
--- branches/SAMBA_4_0/source/librpc/ndr/ndr_sec_helper.c   2007-01-15 
09:52:25 UTC (rev 20797)
+++ branches/SAMBA_4_0/source/librpc/ndr/ndr_sec_helper.c   2007-01-15 
09:54:08 UTC (rev 20798)
@@ -54,11 +54,30 @@
 */
 size_t ndr_size_security_ace(const struct security_ace *ace, int flags)
 {
+   size_t ret;
+
if (!ace) return 0;
-   return 8 + ndr_size_dom_sid(ace-trustee, flags);
+
+   ret = 8 + ndr_size_dom_sid(ace-trustee, flags);
+
+   switch (ace-type) {
+   case SEC_ACE_TYPE_ACCESS_ALLOWED_OBJECT:
+   case SEC_ACE_TYPE_ACCESS_DENIED_OBJECT:
+   case SEC_ACE_TYPE_SYSTEM_AUDIT_OBJECT:
+   case SEC_ACE_TYPE_SYSTEM_ALARM_OBJECT:
+   ret += 4; /* uint32 bitmap ace-object.object.flags */
+   if (ace-object.object.flags  SEC_ACE_OBJECT_TYPE_PRESENT) {
+   ret += 16; /* GUID ace-object.object.type.type */
+   }
+   if (ace-object.object.flags  
SEC_ACE_INHERITED_OBJECT_TYPE_PRESENT) {
+   ret += 16; /* GUID 
ace-object.object.inherited_typeinherited_type */
+   }
+   break;
+   }
+
+   return ret;
 }
 
-
 /*
   return the wire size of a security_acl
 */



svn commit: samba r20799 - in branches/SAMBA_4_0/source/libcli/security: .

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 10:10:15 + (Mon, 15 Jan 2007)
New Revision: 20799

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20799

Log:
if any ace has the optional sub object, the acl revision needs
to be SECURITY_ACL_REVISION_ADS (4)

metze
Modified:
   branches/SAMBA_4_0/source/libcli/security/sddl.c


Changeset:
Modified: branches/SAMBA_4_0/source/libcli/security/sddl.c
===
--- branches/SAMBA_4_0/source/libcli/security/sddl.c2007-01-15 09:54:08 UTC 
(rev 20798)
+++ branches/SAMBA_4_0/source/libcli/security/sddl.c2007-01-15 10:10:15 UTC 
(rev 20799)
@@ -312,6 +312,14 @@
talloc_free(acl);
return NULL;
}
+   switch (acl-aces[acl-num_aces].type) {
+   case SEC_ACE_TYPE_ACCESS_ALLOWED_OBJECT:
+   case SEC_ACE_TYPE_ACCESS_DENIED_OBJECT:
+   case SEC_ACE_TYPE_SYSTEM_AUDIT_OBJECT:
+   case SEC_ACE_TYPE_SYSTEM_ALARM_OBJECT:
+   acl-revision = SECURITY_ACL_REVISION_ADS;
+   break;
+   }
talloc_free(astr);
sddl += len+2;
acl-num_aces++;



svn commit: samba r20800 - in branches/SAMBA_4_0/source: libcli/security librpc/ndr

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 10:39:17 + (Mon, 15 Jan 2007)
New Revision: 20800

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20800

Log:
fix compiler warnings

metze
Modified:
   branches/SAMBA_4_0/source/libcli/security/sddl.c
   branches/SAMBA_4_0/source/librpc/ndr/ndr_sec_helper.c


Changeset:
Modified: branches/SAMBA_4_0/source/libcli/security/sddl.c
===
--- branches/SAMBA_4_0/source/libcli/security/sddl.c2007-01-15 10:10:15 UTC 
(rev 20799)
+++ branches/SAMBA_4_0/source/libcli/security/sddl.c2007-01-15 10:39:17 UTC 
(rev 20800)
@@ -319,6 +319,8 @@
case SEC_ACE_TYPE_SYSTEM_ALARM_OBJECT:
acl-revision = SECURITY_ACL_REVISION_ADS;
break;
+   default:
+   break;
}
talloc_free(astr);
sddl += len+2;

Modified: branches/SAMBA_4_0/source/librpc/ndr/ndr_sec_helper.c
===
--- branches/SAMBA_4_0/source/librpc/ndr/ndr_sec_helper.c   2007-01-15 
10:10:15 UTC (rev 20799)
+++ branches/SAMBA_4_0/source/librpc/ndr/ndr_sec_helper.c   2007-01-15 
10:39:17 UTC (rev 20800)
@@ -73,6 +73,8 @@
ret += 16; /* GUID 
ace-object.object.inherited_typeinherited_type */
}
break;
+   default:
+   break;
}
 
return ret;



svn commit: samba r20801 - in branches/SAMBA_4_0/source/libcli/security: .

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 10:47:22 + (Mon, 15 Jan 2007)
New Revision: 20801

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20801

Log:
try to always fix up the acl revision when we add or remove
an ace

metze
Modified:
   branches/SAMBA_4_0/source/libcli/security/security_descriptor.c


Changeset:
Modified: branches/SAMBA_4_0/source/libcli/security/security_descriptor.c
===
--- branches/SAMBA_4_0/source/libcli/security/security_descriptor.c 
2007-01-15 10:39:17 UTC (rev 20800)
+++ branches/SAMBA_4_0/source/libcli/security/security_descriptor.c 
2007-01-15 10:47:22 UTC (rev 20801)
@@ -150,7 +150,7 @@
if (sd-dacl == NULL) {
return NT_STATUS_NO_MEMORY;
}
-   sd-dacl-revision = NT4_ACL_REVISION;
+   sd-dacl-revision = SECURITY_ACL_REVISION_NT4;
sd-dacl-size = 0;
sd-dacl-num_aces = 0;
sd-dacl-aces = NULL;
@@ -171,7 +171,18 @@
if (sd-dacl-aces[sd-dacl-num_aces].trustee.sub_auths == NULL) {
return NT_STATUS_NO_MEMORY;
}
-   
+
+   switch (sd-dacl-aces[sd-dacl-num_aces].type) {
+   case SEC_ACE_TYPE_ACCESS_ALLOWED_OBJECT:
+   case SEC_ACE_TYPE_ACCESS_DENIED_OBJECT:
+   case SEC_ACE_TYPE_SYSTEM_AUDIT_OBJECT:
+   case SEC_ACE_TYPE_SYSTEM_ALARM_OBJECT:
+   sd-dacl-revision = SECURITY_ACL_REVISION_ADS;
+   break;
+   default:
+   break;
+   }
+
sd-dacl-num_aces++;
 
sd-type |= SEC_DESC_DACL_PRESENT;
@@ -187,11 +198,13 @@
  struct dom_sid *trustee)
 {
int i;
+   bool found = false;
 
if (sd-dacl == NULL) {
return NT_STATUS_OBJECT_NAME_NOT_FOUND;
}
-   
+
+   /* there can be multiple ace's for one trustee */
for (i=0;isd-dacl-num_aces;i++) {
if (dom_sid_equal(trustee, sd-dacl-aces[i].trustee)) {
memmove(sd-dacl-aces[i], sd-dacl-aces[i+1],
@@ -200,10 +213,30 @@
if (sd-dacl-num_aces == 0) {
sd-dacl-aces = NULL;
}
+   found = true;
+   }
+   }
+
+   if (!found) {
+   return NT_STATUS_OBJECT_NAME_NOT_FOUND;
+   }
+
+   sd-dacl-revision = SECURITY_ACL_REVISION_NT4;
+
+   for (i=0;isd-dacl-num_aces;i++) {
+   switch (sd-dacl-aces[i].type) {
+   case SEC_ACE_TYPE_ACCESS_ALLOWED_OBJECT:
+   case SEC_ACE_TYPE_ACCESS_DENIED_OBJECT:
+   case SEC_ACE_TYPE_SYSTEM_AUDIT_OBJECT:
+   case SEC_ACE_TYPE_SYSTEM_ALARM_OBJECT:
+   sd-dacl-revision = SECURITY_ACL_REVISION_ADS;
return NT_STATUS_OK;
+   default:
+   break; /* only for the switch statement */
}
}
-   return NT_STATUS_OBJECT_NAME_NOT_FOUND;
+
+   return NT_STATUS_OK;
 }
 
 



svn commit: samba r20802 - in branches/SAMBA_4_0/source/build/smb_build: .

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 10:49:02 + (Mon, 15 Jan 2007)
New Revision: 20802

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20802

Log:
- don't add the same Makefile vars twice...
- this fixes a lot of warnings on Tru64

maybe this also fixes the build on Tru64 and HPUX...

metze
Modified:
   branches/SAMBA_4_0/source/build/smb_build/makefile.pm


Changeset:
Modified: branches/SAMBA_4_0/source/build/smb_build/makefile.pm
===
--- branches/SAMBA_4_0/source/build/smb_build/makefile.pm   2007-01-15 
10:47:22 UTC (rev 20801)
+++ branches/SAMBA_4_0/source/build/smb_build/makefile.pm   2007-01-15 
10:49:02 UTC (rev 20802)
@@ -215,6 +215,7 @@
my ($self,$ctx) = @_;
 
my $init_obj = ;
+   my $has_static_lib = 0;

if ($ctx-{TYPE} eq LIBRARY) {
push (@{$self-{shared_libs}}, 
$ctx-{SHAREDDIR}/$ctx-{LIBRARY_REALNAME}) if (defined($ctx-{SO_VERSION}));
@@ -237,9 +238,13 @@
}
}
 
-   $self-output($ctx-{TYPE}_$ctx-{NAME}_OUTPUT = $ctx-{OUTPUT}\n);
-   $self-_prepare_list($ctx, OBJ_LIST);
-   $self-_prepare_list($ctx, FULL_OBJ_LIST);
+   $has_static_lib = 1 if grep(/STATIC_LIBRARY/, @{$ctx-{OUTPUT_TYPE}});
+
+   if (not $has_static_lib) {
+   $self-output($ctx-{TYPE}_$ctx-{NAME}_OUTPUT = 
$ctx-{OUTPUT}\n);
+   $self-_prepare_list($ctx, OBJ_LIST);
+   $self-_prepare_list($ctx, FULL_OBJ_LIST);
+   }
$self-_prepare_list($ctx, DEPEND_LIST);
$self-_prepare_list($ctx, LINK_FLAGS);
 



svn commit: samba r20803 - in branches/SAMBA_4_0/source/heimdal_build: .

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 11:11:16 + (Mon, 15 Jan 2007)
New Revision: 20803

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20803

Log:
fix compiler warning about extra semicolon

metze
Modified:
   branches/SAMBA_4_0/source/heimdal_build/config.h


Changeset:
Modified: branches/SAMBA_4_0/source/heimdal_build/config.h
===
--- branches/SAMBA_4_0/source/heimdal_build/config.h2007-01-15 10:49:02 UTC 
(rev 20802)
+++ branches/SAMBA_4_0/source/heimdal_build/config.h2007-01-15 11:11:16 UTC 
(rev 20803)
@@ -9,7 +9,7 @@
 #include include/config.h
 #include lib/replace/replace.h
 
-#define RCSID(msg)
+#define RCSID(msg) struct __rcsid { int __rcsdi; }
 #define KRB5
 
 /* This needs to be defined for roken too */



svn commit: samba r20804 - in branches/SAMBA_4_0/source/heimdal_build: .

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 13:28:09 + (Mon, 15 Jan 2007)
New Revision: 20804

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20804

Log:
work arround HPUX and Tru64 make which don't like $$startdir

we now call asn1_compile and compile_et via a wrapper script

metze
Added:
   branches/SAMBA_4_0/source/heimdal_build/asn1_compile_wrapper.sh
   branches/SAMBA_4_0/source/heimdal_build/et_compile_wrapper.sh
Modified:
   branches/SAMBA_4_0/source/heimdal_build/asn1_deps.pl
   branches/SAMBA_4_0/source/heimdal_build/et_deps.pl


Changeset:
Added: branches/SAMBA_4_0/source/heimdal_build/asn1_compile_wrapper.sh
===
--- branches/SAMBA_4_0/source/heimdal_build/asn1_compile_wrapper.sh 
2007-01-15 11:11:16 UTC (rev 20803)
+++ branches/SAMBA_4_0/source/heimdal_build/asn1_compile_wrapper.sh 
2007-01-15 13:28:09 UTC (rev 20804)
@@ -0,0 +1,73 @@
+#!/bin/sh
+#
+
+SELF=$0
+SELFDIR=`dirname ${SELF}`
+
+SRCDIR=$1
+BUILDDIR=$2
+DESTDIR=$3
+
+CMD=$4
+FILE=$5
+NAME=$6
+shift 6
+OPTIONS=$@
+
+test -z ${SRCDIR}  {
+   echo ${SELF}:SRCDIR: '${SRCDIR}' 2;
+   exit 1;
+}
+
+test -z ${BUILDDIR}  {
+   echo ${SELF}:BUILDDIR: '${BUILDDIR}' 2;
+   exit 1;
+}
+
+test -z ${DESTDIR}  {
+   echo ${SELF}:DESTDIR: '${DESTDIR}' 2;
+   exit 1;
+}
+
+test -z ${CMD}  {
+   echo ${SELF}:CMD: '${CMD}' 2;
+   exit 1;
+}
+
+test -z ${FILE}  {
+   echo ${SELF}:FILE: '${FILE}' 2;
+   exit 1;
+}
+
+test -z ${NAME}  {
+   echo ${SELF}:NAME: '${NAME}' 2;
+   exit 1;
+}
+
+CURDIR=`pwd`
+
+cd ${SRCDIR}  {
+   ABS_SRCDIR=`pwd`
+   cd ${CURDIR}
+} || {
+   echo ${SELF}:cannot cd into '${SRCDIR}' 2;
+   exit 1;
+}
+
+cd ${BUILDDIR}  {
+   ABS_BUILDDIR=`pwd`
+   cd ${CURDIR}
+} || {
+   echo ${SELF}:cannot cd into '${BUILDDIR}' 2;
+   exit 1;
+}
+
+cd ${DESTDIR}  {
+   ${ABS_BUILDDIR}/${CMD} ${OPTIONS} ${ABS_SRCDIR}/${FILE} ${NAME} 2 || 
exit 1;
+   cd ${CURDIR}
+} || {
+   echo ${SELF}:cannot cd into '${BUILDDIR}' 2;
+   exit 1;
+}
+
+exit 0;


Property changes on: 
branches/SAMBA_4_0/source/heimdal_build/asn1_compile_wrapper.sh
___
Name: svn:executable
   + *

Modified: branches/SAMBA_4_0/source/heimdal_build/asn1_deps.pl
===
--- branches/SAMBA_4_0/source/heimdal_build/asn1_deps.pl2007-01-15 
11:11:16 UTC (rev 20803)
+++ branches/SAMBA_4_0/source/heimdal_build/asn1_deps.pl2007-01-15 
13:28:09 UTC (rev 20804)
@@ -25,7 +25,7 @@
 
 print $header: $file bin/asn1_compile\n;
 print [EMAIL PROTECTED] \Compiling ASN1 file $file\\n;
-print [EMAIL PROTECTED]  cd $dirname   . ' $$startdir/bin/asn1_compile ' 
.  $options  . '$$startdir/' . $file $prefix\n\n;
+print [EMAIL PROTECTED](builddir)/heimdal_build/asn1_compile_wrapper.sh 
\$(srcdir) \$(builddir) $dirname bin/asn1_compile $file $prefix $options\n\n;
 
 open(IN,$file) or die(Can't open $file: $!);
 foreach(IN) {
@@ -49,19 +49,19 @@
 print CFLAGS = -Iheimdal_build -I$dirname\n;
 print OBJ_FILES = ;
 foreach $o_file (@o_files) {
-print \\\n\t$o_file ;
+print \\\n\t$o_file;
 }
 print \nPRIVATE_DEPENDENCIES = HEIMDAL_ASN1\n\n;
 
 print clean:: \n;
-print [EMAIL PROTECTED] \Deleting ASN1 output files generated from $file\;
-print [EMAIL PROTECTED] -f $header;
+print [EMAIL PROTECTED] \Deleting ASN1 output files generated from 
$file\\n;
+print [EMAIL PROTECTED] -f $header\n;
 foreach $c_file (@c_files) {
-print [EMAIL PROTECTED] -f $c_file;
+print [EMAIL PROTECTED] -f $c_file\n;
 }
 foreach $x_file (@x_files) {
-print [EMAIL PROTECTED] -f $x_file;
+print [EMAIL PROTECTED] -f $x_file\n;
 }
-print [EMAIL PROTECTED] -f $dirname/$prefix\_files;
-print [EMAIL PROTECTED] -f $dirname/$prefix\.h;
-print \n\n;
+print [EMAIL PROTECTED] -f $dirname/$prefix\_files\n;
+print [EMAIL PROTECTED] -f $dirname/$prefix\.h\n;
+print \n;

Added: branches/SAMBA_4_0/source/heimdal_build/et_compile_wrapper.sh
===
--- branches/SAMBA_4_0/source/heimdal_build/et_compile_wrapper.sh   
2007-01-15 11:11:16 UTC (rev 20803)
+++ branches/SAMBA_4_0/source/heimdal_build/et_compile_wrapper.sh   
2007-01-15 13:28:09 UTC (rev 20804)
@@ -0,0 +1,66 @@
+#!/bin/sh
+#
+
+SELF=$0
+SELFDIR=`dirname ${SELF}`
+
+SRCDIR=$1
+BUILDDIR=$2
+DESTDIR=$3
+
+CMD=$4
+FILE=$5
+shift 5
+
+test -z ${SRCDIR}  {
+   echo ${SELF}:SRCDIR: '${SRCDIR}' 2;
+   exit 1;
+}
+
+test -z ${BUILDDIR}  {
+   echo ${SELF}:BUILDDIR: '${BUILDDIR}' 2;
+   exit 1;
+}
+
+test -z ${DESTDIR}  {
+   echo ${SELF}:DESTDIR: '${DESTDIR}' 2;
+   exit 1;
+}
+
+test -z ${CMD}  {
+   echo ${SELF}:CMD: '${CMD}' 2;
+   exit 1;
+}
+
+test -z ${FILE}  {
+   echo ${SELF}:FILE: '${FILE}' 2;
+   exit 1;
+}
+
+CURDIR=`pwd`
+
+cd ${SRCDIR}  {
+  

svn commit: samba r20805 - in branches/SAMBA_4_0/source: scripting/libjs setup

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 13:54:21 + (Mon, 15 Jan 2007)
New Revision: 20805

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20805

Log:
don't use hardcoded values for secrects.keytab and sam.ldb

metze
Modified:
   branches/SAMBA_4_0/source/scripting/libjs/provision.js
   branches/SAMBA_4_0/source/setup/secrets.ldif


Changeset:
Modified: branches/SAMBA_4_0/source/scripting/libjs/provision.js
===
--- branches/SAMBA_4_0/source/scripting/libjs/provision.js  2007-01-15 
13:28:09 UTC (rev 20804)
+++ branches/SAMBA_4_0/source/scripting/libjs/provision.js  2007-01-15 
13:54:21 UTC (rev 20805)
@@ -382,6 +382,7 @@
paths.hkpt = hkpt.ldb;
paths.samdb = lp.get(sam database);
paths.secrets = secrets.ldb;
+   paths.keytab = secrets.keytab;
paths.dns = lp.get(private dir) + / + subobj.DNSDOMAIN + .zone;
paths.winsdb = wins.ldb;
paths.ldap_basedn_ldif = lp.get(private dir) + / + subobj.DNSDOMAIN 
+ .ldif;
@@ -431,7 +432,7 @@
return true;
 }
 
-function provision_fix_subobj(subobj, message)
+function provision_fix_subobj(subobj, message, paths)
 {
subobj.REALM   = strupper(subobj.REALM);
subobj.HOSTNAME= strlower(subobj.HOSTNAME);
@@ -442,6 +443,10 @@
var rdns = split(,, subobj.DOMAINDN);
subobj.RDN_DC = substr(rdns[0], strlen(DC=));
 
+   subobj.SAM_LDB  = paths.samdb;
+   subobj.SECRETS_LDB  = paths.secrets;
+   subobj.SECRETS_KEYTAB   = paths.keytab;
+
return true;
 }
 
@@ -451,7 +456,7 @@
var sys = sys_init();
var info = new Object();
 
-   var ok = provision_fix_subobj(subobj, message);
+   var ok = provision_fix_subobj(subobj, message, paths);
assert(ok);
 
info.subobj = subobj;
@@ -491,7 +496,7 @@
var sys = sys_init();
var info = new Object();
 
-   var ok = provision_fix_subobj(subobj, message);
+   var ok = provision_fix_subobj(subobj, message, paths);
assert(ok);
 
if (subobj.DOMAINGUID != undefined) {

Modified: branches/SAMBA_4_0/source/setup/secrets.ldif
===
--- branches/SAMBA_4_0/source/setup/secrets.ldif2007-01-15 13:28:09 UTC 
(rev 20804)
+++ branches/SAMBA_4_0/source/setup/secrets.ldif2007-01-15 13:54:21 UTC 
(rev 20805)
@@ -36,7 +36,7 @@
 whenChanged: ${LDAPTIME}
 msDS-KeyVersionNumber: 1
 objectSid: ${DOMAINSID}
-privateKeytab: secrets.keytab
+privateKeytab: ${SECRETS_KEYTAB}
 
 # A hook from our credentials system into HDB, as we must be on a KDC,
 # we can look directly into the database.
@@ -51,5 +51,5 @@
 whenChanged: ${LDAPTIME}
 objectSid: ${DOMAINSID}
 servicePrincipalName: kadmin/changepw
-krb5Keytab: HDB:ldb:sam.ldb:
+krb5Keytab: HDB:ldb:${SAM_LDB}:
 #The trailing : here is a HACK, but it matches the Heimdal format. 



svn commit: samba r20806 - in branches/SAMBA_4_0/source: param scripting/libjs torture/libnet

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 14:17:26 + (Mon, 15 Jan 2007)
New Revision: 20806

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20806

Log:
make it possible to configure the secrets.ldb url
via secrets database = my_secrets.ldb

metze
Modified:
   branches/SAMBA_4_0/source/param/loadparm.c
   branches/SAMBA_4_0/source/param/secrets.c
   branches/SAMBA_4_0/source/scripting/libjs/provision.js
   branches/SAMBA_4_0/source/torture/libnet/libnet_BecomeDC.c


Changeset:
Modified: branches/SAMBA_4_0/source/param/loadparm.c
===
--- branches/SAMBA_4_0/source/param/loadparm.c  2007-01-15 13:54:21 UTC (rev 
20805)
+++ branches/SAMBA_4_0/source/param/loadparm.c  2007-01-15 14:17:26 UTC (rev 
20806)
@@ -107,6 +107,7 @@
char *szConfigFile;
char *szShareBackend;
char *szSAM_URL;
+   char *szSECRETS_URL;
char *szSPOOLSS_URL;
char *szWINS_CONFIG_URL;
char *szWINS_URL;
@@ -403,6 +404,7 @@
{obey pam restrictions, P_BOOL, P_GLOBAL, 
Globals.bObeyPamRestrictions, NULL, NULL, FLAG_ADVANCED | FLAG_DEVELOPER},
{password server, P_LIST, P_GLOBAL, Globals.szPasswordServers, NULL, 
NULL, FLAG_ADVANCED | FLAG_WIZARD | FLAG_DEVELOPER},
{sam database, P_STRING, P_GLOBAL, Globals.szSAM_URL, NULL, NULL, 
FLAG_ADVANCED | FLAG_DEVELOPER},
+   {secrets database, P_STRING, P_GLOBAL, Globals.szSECRETS_URL, NULL, 
NULL, FLAG_ADVANCED | FLAG_DEVELOPER},
{spoolss database, P_STRING, P_GLOBAL, Globals.szSPOOLSS_URL, NULL, 
NULL, FLAG_ADVANCED | FLAG_DEVELOPER},
{wins config database, P_STRING, P_GLOBAL, 
Globals.szWINS_CONFIG_URL, NULL, NULL, FLAG_ADVANCED | FLAG_DEVELOPER},
{wins database, P_STRING, P_GLOBAL, Globals.szWINS_URL, NULL, NULL, 
FLAG_ADVANCED | FLAG_DEVELOPER},
@@ -610,6 +612,7 @@
do_parameter(auth methods, anonymous sam_ignoredomain, NULL);
do_parameter(private dir, dyn_PRIVATE_DIR, NULL);
do_parameter(sam database, sam.ldb, NULL);
+   do_parameter(secrets database, secrets.ldb, NULL);
do_parameter(spoolss database, spoolss.ldb, NULL);
do_parameter(wins config database, wins_config.ldb, NULL);
do_parameter(wins database, wins.ldb, NULL);
@@ -833,6 +836,7 @@
 _PUBLIC_ FN_GLOBAL_STRING(lp_configfile, Globals.szConfigFile)
 _PUBLIC_ FN_GLOBAL_STRING(lp_share_backend, Globals.szShareBackend)
 _PUBLIC_ FN_GLOBAL_STRING(lp_sam_url, Globals.szSAM_URL)
+_PUBLIC_ FN_GLOBAL_STRING(lp_secrets_url, Globals.szSECRETS_URL)
 _PUBLIC_ FN_GLOBAL_STRING(lp_spoolss_url, Globals.szSPOOLSS_URL)
 _PUBLIC_ FN_GLOBAL_STRING(lp_wins_config_url, Globals.szWINS_CONFIG_URL)
 _PUBLIC_ FN_GLOBAL_STRING(lp_wins_url, Globals.szWINS_URL)

Modified: branches/SAMBA_4_0/source/param/secrets.c
===
--- branches/SAMBA_4_0/source/param/secrets.c   2007-01-15 13:54:21 UTC (rev 
20805)
+++ branches/SAMBA_4_0/source/param/secrets.c   2007-01-15 14:17:26 UTC (rev 
20806)
@@ -96,6 +96,7 @@
 struct ldb_context *secrets_db_connect(TALLOC_CTX *mem_ctx)
 {
char *path;
+   const char *url;
struct ldb_context *ldb;
BOOL existed;
const char *init_ldif = 
@@ -103,11 +104,16 @@
computerName: CASE_INSENSITIVE\n \
flatname: CASE_INSENSITIVE\n;
 
-   path = private_path(mem_ctx, secrets.ldb);
+   url = lp_secrets_url();
+   if (!url || !url[0]) {
+   return NULL;
+   }
+
+   path = private_path(mem_ctx, url);
if (!path) {
return NULL;
}
-   
+
existed = file_exist(path);
 
/* Secrets.ldb *must* always be local.  If we call for a

Modified: branches/SAMBA_4_0/source/scripting/libjs/provision.js
===
--- branches/SAMBA_4_0/source/scripting/libjs/provision.js  2007-01-15 
13:54:21 UTC (rev 20805)
+++ branches/SAMBA_4_0/source/scripting/libjs/provision.js  2007-01-15 
14:17:26 UTC (rev 20806)
@@ -381,7 +381,7 @@
paths.hkpd = hkpd.ldb;
paths.hkpt = hkpt.ldb;
paths.samdb = lp.get(sam database);
-   paths.secrets = secrets.ldb;
+   paths.secrets = lp.get(secrets database);
paths.keytab = secrets.keytab;
paths.dns = lp.get(private dir) + / + subobj.DNSDOMAIN + .zone;
paths.winsdb = wins.ldb;
@@ -484,6 +484,20 @@
ok = samdb.transaction_commit();
assert(ok);
 
+   message(Setting up  + paths.secrets + \n);
+   setup_ldb(secrets.ldif, info, paths.secrets);
+
+   tmp = lp.get(secrets database);
+   ok = lp.set(secrets database, paths.secrets);
+   assert(ok);
+
+   message(Setting up keytabs\n);
+   var keytab_ok = credentials_update_all_keytabs();
+   assert(keytab_ok);
+
+   ok = lp.set(secrets database, tmp);
+   assert(ok);
+
return true;
 }
 
@@ 

svn commit: samba r20807 - in branches/SAMBA_4_0/source/torture/libnet: .

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 14:19:03 + (Mon, 15 Jan 2007)
New Revision: 20807

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20807

Log:
test static password for the test_*.ldb' files

metze
Modified:
   branches/SAMBA_4_0/source/torture/libnet/libnet_BecomeDC.c


Changeset:
Modified: branches/SAMBA_4_0/source/torture/libnet/libnet_BecomeDC.c
===
--- branches/SAMBA_4_0/source/torture/libnet/libnet_BecomeDC.c  2007-01-15 
14:17:26 UTC (rev 20806)
+++ branches/SAMBA_4_0/source/torture/libnet/libnet_BecomeDC.c  2007-01-15 
14:19:03 UTC (rev 20807)
@@ -198,6 +198,10 @@
subobj.CONFIGDN_MOD = \repl_meta_data\;\n
subobj.SCHEMADN_MOD = \schema_fsmo,repl_meta_data\;\n
\n
+   subobj.KRBTGTPASS   = \test\;\n
+   subobj.MACHINEPASS  = \test\;\n
+   subobj.ADMINPASS= \test\;\n
+   \n
var paths = provision_default_paths(subobj);\n
paths.samdb = \%s\;\n
paths.secrets = \%s\;\n



Rev 11155: Update .bzrignore. in file:///home/jelmer/bzr.samba/4.0-regwrite/

2007-01-15 Thread Jelmer Vernooij

revno: 11155
revision-id: [EMAIL PROTECTED]
parent: [EMAIL PROTECTED]
committer: Jelmer Vernooij [EMAIL PROTECTED]
branch nick: 4.0-regwrite
timestamp: Mon 2007-01-15 18:04:35 +0100
message:
  Update .bzrignore.
modified:
  .bzrignore svn-v2:[EMAIL PROTECTED]
=== modified file '.bzrignore'
--- a/.bzrignore2007-01-14 15:22:36 +
+++ b/.bzrignore2007-01-15 17:04:35 +
@@ -148,3 +148,6 @@
 source/lib/policy/lex.c
 source/lib/policy/parse_adm.c
 source/lib/policy/parse_adm.h
+source/heimdal/lib/roken/err.h
+source/kdc/pac_glue.h
+source/scripting/ejs/ejsnet/proto.h



Re: svn commit: samba r20791 - in branches/SAMBA_4_0/source: . scripting/ejs scripting/ejs/ejsnet

2007-01-15 Thread Rafal Szczesniak
On Mon, Jan 15, 2007 at 07:34:04AM +, [EMAIL PROTECTED] wrote:
 Author: metze
 Date: 2007-01-15 07:34:04 + (Mon, 15 Jan 2007)
 New Revision: 20791
 
 WebSVN: 
 http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20791
 
 Log:
 the ejsnet stuff can be a normal smbcalls module...

Why is it still called smbcalls ? I realise there are historical
reasons, but ejs interface has became much more than just a gateway
to smbcalls.

 mimir: when you want to register more functions
please do that in the smb_setup_ejs_net() function

ok.


cheers,
-- 
Rafal Szczesniak
Samba Team member  http://www.samba.org



signature.asc
Description: Digital signature


svn commit: samba r20808 - in branches/SAMBA_4_0/source/heimdal_build: .

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 17:41:53 + (Mon, 15 Jan 2007)
New Revision: 20808

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20808

Log:
remove whitespace

metze
Modified:
   branches/SAMBA_4_0/source/heimdal_build/config.mk


Changeset:
Modified: branches/SAMBA_4_0/source/heimdal_build/config.mk
===
--- branches/SAMBA_4_0/source/heimdal_build/config.mk   2007-01-15 14:19:03 UTC 
(rev 20807)
+++ branches/SAMBA_4_0/source/heimdal_build/config.mk   2007-01-15 17:41:53 UTC 
(rev 20808)
@@ -54,7 +54,7 @@
 ###
 # Start SUBSYSTEM HEIMDAL_GSSAPI
 [SUBSYSTEM::HEIMDAL_GSSAPI]
-CFLAGS = -Iheimdal_build -Iheimdal/lib/gssapi/spnego -Iheimdal/lib/gssapi 
-Iheimdal/lib/gssapi/krb5 -I heimdal/lib/gssapi/mech
+CFLAGS = -Iheimdal_build -Iheimdal/lib/gssapi/spnego -Iheimdal/lib/gssapi 
-Iheimdal/lib/gssapi/krb5 -Iheimdal/lib/gssapi/mech
 OBJ_FILES = \
../heimdal/lib/gssapi/mech/gss_krb5.o \
../heimdal/lib/gssapi/mech/gss_mech_switch.o \



Re: svn commit: samba r20791 - in branches/SAMBA_4_0/source: . scripting/ejs scripting/ejs/ejsnet

2007-01-15 Thread Stefan (metze) Metzmacher
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

 Log:
 the ejsnet stuff can be a normal smbcalls module...
 
 Why is it still called smbcalls ? I realise there are historical
 reasons, but ejs interface has became much more than just a gateway
 to smbcalls.

maybe ejscalls or so would be better...

metze
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFFq73cm70gjA5TCD8RArQUAJ0e+jlQtjVqwpi/YYO8FkgBTUftLgCgyzuZ
elVHWsM3U2M11vw/bmC0Blk=
=Oui7
-END PGP SIGNATURE-


Re: svn commit: samba r20808 - in branches/SAMBA_4_0/source/heimdal_build: .

2007-01-15 Thread Stefan (metze) Metzmacher
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

 remove whitespace

This was the problem on the Tru64 build...

it's very important to not have whitespaces between -Ifoo...

axp cat ipath.c
#include standards.h
int main(void) { return 0; }
axp cc -I foo -c -o ipath.o ipath.c
cc: Severe: ipath.c, line 1: Cannot find file standards.h specified in
#include directive. (noinclfilef)
#include standards.h
- -^
axp cc -Ifoo -c -o ipath.o ipath.c

metze
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFFq765m70gjA5TCD8RAkc6AJsGqr41WxgeOjwh0E3OPSezhaS8ogCeOxeI
RN9Lz/ccBS3xlhWDHa6mijg=
=TD6P
-END PGP SIGNATURE-


svn commit: samba r20809 - in branches/SAMBA_4_0/source/dsdb/samdb/ldb_modules: .

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 17:53:53 + (Mon, 15 Jan 2007)
New Revision: 20809

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20809

Log:
rename struct partition into struct dsdb_control_current_partition

we'll soon pass this down as DSDB_CONTROL_CURRENT_PARTITION_OID control
so that the repl_meta_data module knows where to update the replUpToDateVector
attribute

metze
Modified:
   branches/SAMBA_4_0/source/dsdb/samdb/ldb_modules/partition.c


Changeset:
Modified: branches/SAMBA_4_0/source/dsdb/samdb/ldb_modules/partition.c
===
--- branches/SAMBA_4_0/source/dsdb/samdb/ldb_modules/partition.c
2007-01-15 17:41:53 UTC (rev 20808)
+++ branches/SAMBA_4_0/source/dsdb/samdb/ldb_modules/partition.c
2007-01-15 17:53:53 UTC (rev 20809)
@@ -38,13 +38,13 @@
 #include ldb/include/includes.h
 #include dsdb/samdb/samdb.h
 
-struct partition {
+struct dsdb_control_current_partition {
struct ldb_module *module;
const char *backend;
struct ldb_dn *dn;
 };
 struct partition_private_data {
-   struct partition **partitions;
+   struct dsdb_control_current_partition **partitions;
struct ldb_dn **replicate;
 };
 
@@ -609,10 +609,12 @@
 static int sort_compare(void *void1,
void *void2, void *opaque)
 {
-   struct partition **pp1 = void1;
-   struct partition **pp2 = void2;
-   struct partition *partition1 = talloc_get_type(*pp1, struct partition);
-   struct partition *partition2 = talloc_get_type(*pp2, struct partition);
+   struct dsdb_control_current_partition **pp1 = void1;
+   struct dsdb_control_current_partition **pp2 = void2;
+   struct dsdb_control_current_partition *partition1 = 
talloc_get_type(*pp1,
+   struct 
dsdb_control_current_partition);
+   struct dsdb_control_current_partition *partition2 = 
talloc_get_type(*pp2,
+   struct 
dsdb_control_current_partition);
 
return ldb_dn_compare(partition1-dn, partition2-dn);
 }
@@ -666,7 +668,7 @@
talloc_free(mem_ctx);
return LDB_ERR_CONSTRAINT_VIOLATION;
}
-   data-partitions = talloc_array(data, struct partition *, 
partition_attributes-num_values + 1);
+   data-partitions = talloc_array(data, struct 
dsdb_control_current_partition *, partition_attributes-num_values + 1);
if (!data-partitions) {
talloc_free(mem_ctx);
return LDB_ERR_OPERATIONS_ERROR;
@@ -690,7 +692,7 @@
talloc_free(mem_ctx);
return LDB_ERR_CONSTRAINT_VIOLATION;
}
-   data-partitions[i] = talloc(data-partitions, struct 
partition);
+   data-partitions[i] = talloc(data-partitions, struct 
dsdb_control_current_partition);
if (!data-partitions[i]) {
talloc_free(mem_ctx);
return LDB_ERR_OPERATIONS_ERROR;
@@ -771,7 +773,7 @@
for (i=0; i  modules_attributes-num_values; i++) {
struct ldb_dn *base_dn;
int partition_idx;
-   struct partition *partition = NULL;
+   struct dsdb_control_current_partition *partition = NULL;
const char **modules = NULL;
 
char *base = talloc_strdup(data-partitions, (char 
*)modules_attributes-values[i].data);



svn commit: samba r20810 - in branches/SAMBA_4_0/source/lib/replace/test: .

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 17:55:26 + (Mon, 15 Jan 2007)
New Revision: 20810

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20810

Log:
unlink the test file when the test is done

metze
Modified:
   branches/SAMBA_4_0/source/lib/replace/test/testsuite.c


Changeset:
Modified: branches/SAMBA_4_0/source/lib/replace/test/testsuite.c
===
--- branches/SAMBA_4_0/source/lib/replace/test/testsuite.c  2007-01-15 
17:53:53 UTC (rev 20809)
+++ branches/SAMBA_4_0/source/lib/replace/test/testsuite.c  2007-01-15 
17:55:26 UTC (rev 20810)
@@ -78,6 +78,7 @@
   (int)st.st_size, size);
return false;
}
+   unlink(TESTFILE);
printf(success: ftruncate\n);
return true;
 }



svn commit: samba r20811 - in branches/SAMBA_3_0/source: .

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 18:01:25 + (Mon, 15 Jan 2007)
New Revision: 20811

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20811

Log:
fix comment

metze
Modified:
   branches/SAMBA_3_0/source/configure.in


Changeset:
Modified: branches/SAMBA_3_0/source/configure.in
===
--- branches/SAMBA_3_0/source/configure.in  2007-01-15 17:55:26 UTC (rev 
20810)
+++ branches/SAMBA_3_0/source/configure.in  2007-01-15 18:01:25 UTC (rev 
20811)
@@ -983,7 +983,7 @@
 fi
 
 
-# check if the compiler can do immediate structures
+# check if the compiler will optimize out function calls
 AC_CACHE_CHECK([if the compiler will optimize out function 
calls],samba_cv_optimize_out_funcation_calls, [
 AC_TRY_LINK([
 #include stdio.h],



svn commit: samba r20812 - in branches/SAMBA_3_0_24/source: .

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 18:02:47 + (Mon, 15 Jan 2007)
New Revision: 20812

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20812

Log:
merge from SAMBA_3_0:

fix comment

metze
Modified:
   branches/SAMBA_3_0_24/source/configure.in


Changeset:
Modified: branches/SAMBA_3_0_24/source/configure.in
===
--- branches/SAMBA_3_0_24/source/configure.in   2007-01-15 18:01:25 UTC (rev 
20811)
+++ branches/SAMBA_3_0_24/source/configure.in   2007-01-15 18:02:47 UTC (rev 
20812)
@@ -979,7 +979,7 @@
 fi
 
 
-# check if the compiler can do immediate structures
+# check if the compiler will optimize out function calls
 AC_CACHE_CHECK([if the compiler will optimize out function 
calls],samba_cv_optimize_out_funcation_calls, [
 AC_TRY_LINK([
 #include stdio.h],



svn commit: samba r20813 - in branches/SAMBA_4_0/source/scripting/ejs/ejsnet: .

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 18:38:43 + (Mon, 15 Jan 2007)
New Revision: 20813

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20813

Log:
fix the build with autodependencies

metze
Modified:
   branches/SAMBA_4_0/source/scripting/ejs/ejsnet/net_user.c


Changeset:
Modified: branches/SAMBA_4_0/source/scripting/ejs/ejsnet/net_user.c
===
--- branches/SAMBA_4_0/source/scripting/ejs/ejsnet/net_user.c   2007-01-15 
18:02:47 UTC (rev 20812)
+++ branches/SAMBA_4_0/source/scripting/ejs/ejsnet/net_user.c   2007-01-15 
18:38:43 UTC (rev 20813)
@@ -23,7 +23,7 @@
 #include includes.h
 #include lib/appweb/ejs/ejs.h
 #include libnet/libnet.h
-#include proto.h
+#include scripting/ejs/ejsnet/proto.h
 #include scripting/ejs/smbcalls.h
 #include events/events.h
 #include auth/credentials/credentials.h



svn commit: samba r20814 - in branches/SAMBA_4_0/source/build/m4: .

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 18:44:06 + (Mon, 15 Jan 2007)
New Revision: 20814

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20814

Log:
always define SHLIBEXT, to fix the build on host with no support for shared 
libs,
there we just define it to an invalid value

metze
Modified:
   branches/SAMBA_4_0/source/build/m4/check_ld.m4


Changeset:
Modified: branches/SAMBA_4_0/source/build/m4/check_ld.m4
===
--- branches/SAMBA_4_0/source/build/m4/check_ld.m4  2007-01-15 18:38:43 UTC 
(rev 20813)
+++ branches/SAMBA_4_0/source/build/m4/check_ld.m4  2007-01-15 18:44:06 UTC 
(rev 20814)
@@ -154,34 +154,55 @@
 # test whether building a shared library actually works
 if test $BLDSHARED = true; then
 
-AC_MSG_CHECKING([SHLD])
-AC_MSG_RESULT([$SHLD])
-AC_MSG_CHECKING([SHLD_FLAGS])
-AC_MSG_RESULT([$SHLD_FLAGS])
+   AC_MSG_CHECKING([SHLD])
+   AC_MSG_RESULT([$SHLD])
+   AC_MSG_CHECKING([SHLD_FLAGS])
+   AC_MSG_RESULT([$SHLD_FLAGS])
 
-AC_DEFINE_UNQUOTED(SHLIBEXT, $SHLIBEXT, [Shared library extension])
-AC_MSG_CHECKING([SHLIBEXT])
-AC_MSG_RESULT([$SHLIBEXT])
-AC_MSG_CHECKING([SONAMEFLAG])
-AC_MSG_RESULT([$SONAMEFLAG])
+   AC_MSG_CHECKING([SHLIBEXT])
+   AC_MSG_RESULT([$SHLIBEXT])
+   AC_MSG_CHECKING([SONAMEFLAG])
+   AC_MSG_RESULT([$SONAMEFLAG])
 
-AC_MSG_CHECKING([PICFLAG])
-AC_MSG_RESULT([$PICFLAG])
+   AC_MSG_CHECKING([PICFLAG])
+   AC_MSG_RESULT([$PICFLAG])
 
-AC_CACHE_CHECK([whether building shared libraries actually works], 
-   [ac_cv_shlib_works],[
-   ac_cv_shlib_works=no
-   # try building a trivial shared library
-   ${CC} ${CFLAGS} ${PICFLAG} -c ${srcdir-.}/build/tests/shlib.c -o shlib.o 
-   ${SHLD} `eval echo ${SHLD_FLAGS} ` -o shlib.${SHLIBEXT} shlib.o 
-   ac_cv_shlib_works=yes
-   rm -f shlib.${SHLIBEXT} shlib.o
-])
-if test $ac_cv_shlib_works = no; then
-   BLDSHARED=false
+   AC_CACHE_CHECK([whether building shared libraries actually works], 
+  [ac_cv_shlib_works],[
+   ac_cv_shlib_works=no
+   # try building a trivial shared library
+   ${CC} ${CFLAGS} ${PICFLAG} -c 
${srcdir-.}/build/tests/shlib.c -o shlib.o 
+   ${SHLD} `eval echo ${SHLD_FLAGS} ` -o 
shlib.${SHLIBEXT} shlib.o  
+   ac_cv_shlib_works=yes
+   rm -f shlib.${SHLIBEXT} shlib.o
+   ])
+   if test $ac_cv_shlib_works = no; then
+   BLDSHARED=false
+   fi
 fi
+
+if test $BLDSHARED != true; then
+   SHLD=shared-libraries-disabled
+   SHLD_FLAGS=shared-libraries-disabled
+   SHLIBEXT=shared_libraries_disabled
+   SONAMEFLAG=shared-libraries-disabled
+   PICFLAG=
+   AC_MSG_CHECKING([SHLD])
+   AC_MSG_RESULT([$SHLD])
+   AC_MSG_CHECKING([SHLD_FLAGS])
+   AC_MSG_RESULT([$SHLD_FLAGS])
+
+   AC_MSG_CHECKING([SHLIBEXT])
+   AC_MSG_RESULT([$SHLIBEXT])
+   AC_MSG_CHECKING([SONAMEFLAG])
+   AC_MSG_RESULT([$SONAMEFLAG])
+
+   AC_MSG_CHECKING([PICFLAG])
+   AC_MSG_RESULT([$PICFLAG])
 fi
 
+AC_DEFINE_UNQUOTED(SHLIBEXT, $SHLIBEXT, [Shared library extension])
+
 AC_MSG_CHECKING([if we can link using the selected flags])
 AC_TRY_RUN([#include ${srcdir-.}/build/tests/trivial.c],
AC_MSG_RESULT(yes),



svn commit: samba r20815 - in branches/SAMBA_4_0/source/lib/replace/test: .

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 19:05:11 + (Mon, 15 Jan 2007)
New Revision: 20815

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20815

Log:
merge from samba3

metze
Modified:
   branches/SAMBA_4_0/source/lib/replace/test/testsuite.c


Changeset:
Modified: branches/SAMBA_4_0/source/lib/replace/test/testsuite.c
===
--- branches/SAMBA_4_0/source/lib/replace/test/testsuite.c  2007-01-15 
18:44:06 UTC (rev 20814)
+++ branches/SAMBA_4_0/source/lib/replace/test/testsuite.c  2007-01-15 
19:05:11 UTC (rev 20815)
@@ -469,7 +469,7 @@
return ret;
 }
 
-#ifndef _SAMBA_BUILD_
+#if _SAMBA_BUILD_4
 int main()
 {
bool ret = torture_local_replace(NULL);



svn commit: samba r20816 - in branches/SAMBA_4_0/source: . lib/replace lib/replace/system web_server

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 19:08:03 + (Mon, 15 Jan 2007)
New Revision: 20816

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20816

Log:
merge from samba3:

include setjmp.h via system/wait.h

metze
Removed:
   branches/SAMBA_4_0/source/web_server/config.m4
Modified:
   branches/SAMBA_4_0/source/configure.ac
   branches/SAMBA_4_0/source/lib/replace/libreplace.m4
   branches/SAMBA_4_0/source/lib/replace/system/wait.h
   branches/SAMBA_4_0/source/web_server/http.c


Changeset:
Modified: branches/SAMBA_4_0/source/configure.ac
===
--- branches/SAMBA_4_0/source/configure.ac  2007-01-15 19:05:11 UTC (rev 
20815)
+++ branches/SAMBA_4_0/source/configure.ac  2007-01-15 19:08:03 UTC (rev 
20816)
@@ -42,7 +42,6 @@
 m4_include(ntvfs/posix/config.m4)
 m4_include(ntvfs/unixuid/config.m4)
 m4_include(lib/socket_wrapper/config.m4)
-m4_include(web_server/config.m4)
 m4_include(auth/config.m4)
 m4_include(kdc/config.m4)
 m4_include(ntvfs/sysdep/config.m4)

Modified: branches/SAMBA_4_0/source/lib/replace/libreplace.m4
===
--- branches/SAMBA_4_0/source/lib/replace/libreplace.m4 2007-01-15 19:05:11 UTC 
(rev 20815)
+++ branches/SAMBA_4_0/source/lib/replace/libreplace.m4 2007-01-15 19:08:03 UTC 
(rev 20816)
@@ -62,6 +62,7 @@
 AC_CHECK_FUNCS(pipe strftime srandom random srand rand usleep setbuffer lstat 
getpgrp)
 
 AC_CHECK_HEADERS(stdbool.h sys/select.h)
+AC_CHECK_HEADERS(setjmp.h)
 
 AC_CHECK_TYPE(bool, 
 [AC_DEFINE(HAVE_BOOL, 1, [Whether the bool type is available])],,

Modified: branches/SAMBA_4_0/source/lib/replace/system/wait.h
===
--- branches/SAMBA_4_0/source/lib/replace/system/wait.h 2007-01-15 19:05:11 UTC 
(rev 20815)
+++ branches/SAMBA_4_0/source/lib/replace/system/wait.h 2007-01-15 19:08:03 UTC 
(rev 20816)
@@ -36,4 +36,8 @@
 #define SIGNAL_CAST (RETSIGTYPE (*)(int))
 #endif
 
+#ifdef HAVE_SETJMP_H
+#include setjmp.h
 #endif
+
+#endif

Deleted: branches/SAMBA_4_0/source/web_server/config.m4
===
--- branches/SAMBA_4_0/source/web_server/config.m4  2007-01-15 19:05:11 UTC 
(rev 20815)
+++ branches/SAMBA_4_0/source/web_server/config.m4  2007-01-15 19:08:03 UTC 
(rev 20816)
@@ -1,2 +0,0 @@
-AC_CHECK_HEADERS(setjmp.h)
-

Modified: branches/SAMBA_4_0/source/web_server/http.c
===
--- branches/SAMBA_4_0/source/web_server/http.c 2007-01-15 19:05:11 UTC (rev 
20815)
+++ branches/SAMBA_4_0/source/web_server/http.c 2007-01-15 19:08:03 UTC (rev 
20816)
@@ -27,6 +27,7 @@
 #include smbd/service.h
 #include lib/events/events.h
 #include system/time.h
+#include system/wait.h
 #include lib/appweb/esp/esp.h
 #include lib/appweb/ejs/ejsInternal.h
 #include lib/util/dlinklist.h
@@ -484,7 +485,6 @@
it hits a major error. We need to catch these and
report a internal server error via http
 */
-#include setjmp.h
 static jmp_buf ejs_exception_buf;
 static const char *exception_reason;
 



svn commit: samba r20818 - in branches/SAMBA_3_0_24/source/lib/replace: . system test

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 19:20:34 + (Mon, 15 Jan 2007)
New Revision: 20818

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20818

Log:
sync lib/replace with samba4

metze
Added:
   branches/SAMBA_3_0_24/source/lib/replace/.checker_innocent
   branches/SAMBA_3_0_24/source/lib/replace/system/aio.h
Modified:
   branches/SAMBA_3_0_24/source/lib/replace/README
   branches/SAMBA_3_0_24/source/lib/replace/libreplace.m4
   branches/SAMBA_3_0_24/source/lib/replace/libreplace_cc.m4
   branches/SAMBA_3_0_24/source/lib/replace/replace.c
   branches/SAMBA_3_0_24/source/lib/replace/replace.h
   branches/SAMBA_3_0_24/source/lib/replace/snprintf.c
   branches/SAMBA_3_0_24/source/lib/replace/system/kerberos.h
   branches/SAMBA_3_0_24/source/lib/replace/system/wait.h
   branches/SAMBA_3_0_24/source/lib/replace/test/os2_delete.c
   branches/SAMBA_3_0_24/source/lib/replace/test/testsuite.c


Changeset:
Added: branches/SAMBA_3_0_24/source/lib/replace/.checker_innocent
===
--- branches/SAMBA_3_0_24/source/lib/replace/.checker_innocent  2007-01-15 
19:10:54 UTC (rev 20817)
+++ branches/SAMBA_3_0_24/source/lib/replace/.checker_innocent  2007-01-15 
19:20:34 UTC (rev 20818)
@@ -0,0 +1,4 @@
+MISTAKE21_create_files_6a9e68ada99a97cb
+MISTAKE21_os2_delete_9b2bfa7f38711d09
+MISTAKE21_os2_delete_2fcc29aaa99a97cb
+SECURITY2_os2_delete_9b2bfa7f1c9396ca

Modified: branches/SAMBA_3_0_24/source/lib/replace/README
===
--- branches/SAMBA_3_0_24/source/lib/replace/README 2007-01-15 19:10:54 UTC 
(rev 20817)
+++ branches/SAMBA_3_0_24/source/lib/replace/README 2007-01-15 19:20:34 UTC 
(rev 20818)
@@ -52,6 +52,7 @@
 inet_ntoa
 strtoll
 strtoull
+socketpair
 
 Types:
 bool

Modified: branches/SAMBA_3_0_24/source/lib/replace/libreplace.m4
===
--- branches/SAMBA_3_0_24/source/lib/replace/libreplace.m4  2007-01-15 
19:10:54 UTC (rev 20817)
+++ branches/SAMBA_3_0_24/source/lib/replace/libreplace.m4  2007-01-15 
19:20:34 UTC (rev 20818)
@@ -62,6 +62,7 @@
 AC_CHECK_FUNCS(pipe strftime srandom random srand rand usleep setbuffer lstat 
getpgrp)
 
 AC_CHECK_HEADERS(stdbool.h sys/select.h)
+AC_CHECK_HEADERS(setjmp.h)
 
 AC_CHECK_TYPE(bool, 
 [AC_DEFINE(HAVE_BOOL, 1, [Whether the bool type is available])],,
@@ -147,7 +148,7 @@
 AC_CHECK_FUNCS(seteuid setresuid setegid setresgid chroot bzero strerror)
 AC_CHECK_FUNCS(vsyslog setlinebuf mktime ftruncate chsize rename)
 AC_CHECK_FUNCS(waitpid strlcpy strlcat innetgr initgroups memmove strdup)
-AC_CHECK_FUNCS(pread pwrite strndup strcasestr strtok_r mkdtemp)
+AC_CHECK_FUNCS(pread pwrite strndup strcasestr strtok_r mkdtemp socketpair)
 AC_HAVE_DECL(setresuid, [#include unistd.h])
 AC_HAVE_DECL(setresgid, [#include unistd.h])
 AC_HAVE_DECL(errno, [#include errno.h])

Modified: branches/SAMBA_3_0_24/source/lib/replace/libreplace_cc.m4
===
--- branches/SAMBA_3_0_24/source/lib/replace/libreplace_cc.m4   2007-01-15 
19:10:54 UTC (rev 20817)
+++ branches/SAMBA_3_0_24/source/lib/replace/libreplace_cc.m4   2007-01-15 
19:20:34 UTC (rev 20818)
@@ -140,23 +140,27 @@
 
 
 # check if the compiler can do immediate structures
-AC_CACHE_CHECK([for immediate structures],samba_cv_immediate_structures, [
-AC_TRY_COMPILE([
-#include stdio.h],
-[
-   typedef struct {unsigned x;} FOOBAR;
-   #define X_FOOBAR(x) ((FOOBAR) { x })
-   #define FOO_ONE X_FOOBAR(1)
-   FOOBAR f = FOO_ONE;   
-   static const struct {
-   FOOBAR y; 
-   } f2[] = {
-   {FOO_ONE}
-   };   
-],
-   samba_cv_immediate_structures=yes,samba_cv_immediate_structures=no)])
-if test x$samba_cv_immediate_structures = xyes; then
-   AC_DEFINE(HAVE_IMMEDIATE_STRUCTURES,1,[Whether the compiler supports 
immediate structures])
+AC_SUBST(libreplace_cv_immediate_structures)
+AC_CACHE_CHECK([for immediate structures],libreplace_cv_immediate_structures,[
+   AC_TRY_COMPILE([
+   #include stdio.h
+   ],[
+   typedef struct {unsigned x;} FOOBAR;
+   #define X_FOOBAR(x) ((FOOBAR) { x })
+   #define FOO_ONE X_FOOBAR(1)
+   FOOBAR f = FOO_ONE;   
+   static const struct {
+   FOOBAR y; 
+   } f2[] = {
+   {FOO_ONE}
+   };   
+   ],
+   libreplace_cv_immediate_structures=yes,
+   libreplace_cv_immediate_structures=no,
+   libreplace_cv_immediate_structures=cross)
+])
+if test x$libreplace_cv_immediate_structures = xyes; then
+   AC_DEFINE(HAVE_IMMEDIATE_STRUCTURES,1,[Whether the compiler supports 
immediate structures])
 fi
 
 AC__LIBREPLACE_ONLY_CC_CHECKS_END

Modified: branches/SAMBA_3_0_24/source/lib/replace/replace.c

svn commit: samba r20819 - in branches/SAMBA_4_0/source/lib/replace: system test

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 19:27:45 + (Mon, 15 Jan 2007)
New Revision: 20819

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20819

Log:
- include system/aio.h
- use full prototype for main
- use ifdef instead if

metze
Modified:
   branches/SAMBA_4_0/source/lib/replace/system/aio.h
   branches/SAMBA_4_0/source/lib/replace/test/testsuite.c


Changeset:
Modified: branches/SAMBA_4_0/source/lib/replace/system/aio.h
===
--- branches/SAMBA_4_0/source/lib/replace/system/aio.h  2007-01-15 19:20:34 UTC 
(rev 20818)
+++ branches/SAMBA_4_0/source/lib/replace/system/aio.h  2007-01-15 19:27:45 UTC 
(rev 20819)
@@ -22,7 +22,7 @@
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
 */
 
-#if HAVE_LIBAIO_H
+#ifdef HAVE_LIBAIO_H
 #include libaio.h
 #endif
 

Modified: branches/SAMBA_4_0/source/lib/replace/test/testsuite.c
===
--- branches/SAMBA_4_0/source/lib/replace/test/testsuite.c  2007-01-15 
19:20:34 UTC (rev 20818)
+++ branches/SAMBA_4_0/source/lib/replace/test/testsuite.c  2007-01-15 
19:27:45 UTC (rev 20819)
@@ -46,6 +46,7 @@
 #include system/terminal.h
 #include system/time.h
 #include system/wait.h
+#include system/aio.h
 
 #define TESTFILE testfile.dat
 
@@ -470,7 +471,7 @@
 }
 
 #if _SAMBA_BUILD_4
-int main()
+int main(void)
 {
bool ret = torture_local_replace(NULL);
if (ret) 



svn commit: samba r20820 - in branches/SAMBA_3_0/source/lib/replace: system test

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 19:28:02 + (Mon, 15 Jan 2007)
New Revision: 20820

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20820

Log:
merge from samba4:

- include system/aio.h
- use full prototype for main
- use ifdef instead if

metze
Modified:
   branches/SAMBA_3_0/source/lib/replace/system/aio.h
   branches/SAMBA_3_0/source/lib/replace/test/testsuite.c


Changeset:
Modified: branches/SAMBA_3_0/source/lib/replace/system/aio.h
===
--- branches/SAMBA_3_0/source/lib/replace/system/aio.h  2007-01-15 19:27:45 UTC 
(rev 20819)
+++ branches/SAMBA_3_0/source/lib/replace/system/aio.h  2007-01-15 19:28:02 UTC 
(rev 20820)
@@ -22,7 +22,7 @@
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
 */
 
-#if HAVE_LIBAIO_H
+#ifdef HAVE_LIBAIO_H
 #include libaio.h
 #endif
 

Modified: branches/SAMBA_3_0/source/lib/replace/test/testsuite.c
===
--- branches/SAMBA_3_0/source/lib/replace/test/testsuite.c  2007-01-15 
19:27:45 UTC (rev 20819)
+++ branches/SAMBA_3_0/source/lib/replace/test/testsuite.c  2007-01-15 
19:28:02 UTC (rev 20820)
@@ -46,6 +46,7 @@
 #include system/terminal.h
 #include system/time.h
 #include system/wait.h
+#include system/aio.h
 
 #define TESTFILE testfile.dat
 
@@ -470,7 +471,7 @@
 }
 
 #if _SAMBA_BUILD_4
-int main()
+int main(void)
 {
bool ret = torture_local_replace(NULL);
if (ret) 



svn commit: samba r20821 - in branches/SAMBA_3_0_24/source/lib/replace: system test

2007-01-15 Thread metze
Author: metze
Date: 2007-01-15 19:28:24 + (Mon, 15 Jan 2007)
New Revision: 20821

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20821

Log:
merge from samba4:

- include system/aio.h
- use full prototype for main
- use ifdef instead if

metze
Modified:
   branches/SAMBA_3_0_24/source/lib/replace/system/aio.h
   branches/SAMBA_3_0_24/source/lib/replace/test/testsuite.c


Changeset:
Modified: branches/SAMBA_3_0_24/source/lib/replace/system/aio.h
===
--- branches/SAMBA_3_0_24/source/lib/replace/system/aio.h   2007-01-15 
19:28:02 UTC (rev 20820)
+++ branches/SAMBA_3_0_24/source/lib/replace/system/aio.h   2007-01-15 
19:28:24 UTC (rev 20821)
@@ -22,7 +22,7 @@
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
 */
 
-#if HAVE_LIBAIO_H
+#ifdef HAVE_LIBAIO_H
 #include libaio.h
 #endif
 

Modified: branches/SAMBA_3_0_24/source/lib/replace/test/testsuite.c
===
--- branches/SAMBA_3_0_24/source/lib/replace/test/testsuite.c   2007-01-15 
19:28:02 UTC (rev 20820)
+++ branches/SAMBA_3_0_24/source/lib/replace/test/testsuite.c   2007-01-15 
19:28:24 UTC (rev 20821)
@@ -46,6 +46,7 @@
 #include system/terminal.h
 #include system/time.h
 #include system/wait.h
+#include system/aio.h
 
 #define TESTFILE testfile.dat
 
@@ -470,7 +471,7 @@
 }
 
 #if _SAMBA_BUILD_4
-int main()
+int main(void)
 {
bool ret = torture_local_replace(NULL);
if (ret) 



Re: svn commit: samba r20754 - in branches/SAMBA_4_0/source/script/tests: .

2007-01-15 Thread tridge
Jelmer,

  Log:
  Simplify code for calculating total number of failed tests.

I suspect this is wrong. We are now reporting zero failures in the
build farm for hosts that are failing quite a few tests. For example, 

 
http://build.samba.org/?function=View+Build;host=coreserverbuild;tree=samba4;compiler=gcc;revision=20819

if you expand the 'test' section, you'll see it failed 5 tests, but it
shows as green in the farm.

I'm not completely sure that it was r20754 that broke this, but it
seems a likely candidate.

Cheers, Tridge


svn commit: samba r20822 - in branches/SAMBA_4_0/source/script/tests: .

2007-01-15 Thread jelmer
Author: jelmer
Date: 2007-01-15 23:42:52 + (Mon, 15 Jan 2007)
New Revision: 20822

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20822

Log:
Fix total failure counting. 

Modified:
   branches/SAMBA_4_0/source/script/tests/selftest.sh


Changeset:
Modified: branches/SAMBA_4_0/source/script/tests/selftest.sh
===
--- branches/SAMBA_4_0/source/script/tests/selftest.sh  2007-01-15 19:28:24 UTC 
(rev 20821)
+++ branches/SAMBA_4_0/source/script/tests/selftest.sh  2007-01-15 23:42:52 UTC 
(rev 20822)
@@ -219,8 +219,6 @@
  bin/nmblookup $CONFIGURATION -U $SERVER $NETBIOSNAME
 
 # start off with 0 failures
-failed=0
-export failed
 totalfailed=0
 export totalfailed
 
@@ -238,12 +236,12 @@
else
echo $LINE
fi
- done
-)
-
- exit $totalfailed
+   done
+   exit $totalfailed
+)
+exit $?
 ) 9$SMBD_TEST_FIFO
-failed=$?
+totalfailed=$?
 
 kill `cat $PIDDIR/smbd.pid`
 
@@ -261,10 +259,10 @@
 for f in $PREFIX/valgrind.log*; do
if [ -s $f ]  grep -v DWARF2.CFI.reader $f  /dev/null; then
echo VALGRIND FAILURE;
-   failed=`expr $failed + 1`
+   totalfailed=`expr $totalfailed + 1`
cat $f
fi
 done
 fi
 
-teststatus $ARG0 $failed
+teststatus $ARG0 $totalfailed



Rev 11156: Fix lseek() argument order. in file:///home/jelmer/bzr.samba/4.0-regwrite/

2007-01-15 Thread Jelmer Vernooij

revno: 11156
revision-id: [EMAIL PROTECTED]
parent: [EMAIL PROTECTED]
committer: Jelmer Vernooij [EMAIL PROTECTED]
branch nick: 4.0-regwrite
timestamp: Tue 2007-01-16 00:54:10 +0100
message:
  Fix lseek() argument order.
modified:
  source/lib/registry/reg_backend_regf.c svn-v2:[EMAIL PROTECTED]
=== modified file 'source/lib/registry/reg_backend_regf.c'
--- a/source/lib/registry/reg_backend_regf.c2007-01-14 15:15:41 +
+++ b/source/lib/registry/reg_backend_regf.c2007-01-15 23:54:10 +
@@ -1011,7 +1011,7 @@
struct regf_data *regf = hive-backend_data;
int i;
 
-   if (lseek(regf-fd, SEEK_SET, 0) == -1) {
+   if (lseek(regf-fd, 0, SEEK_SET) == -1) {
DEBUG(0, (Error lseeking in regf file\n));
return WERR_GENERAL_FAILURE;
}
@@ -1021,7 +1021,7 @@
return WERR_GENERAL_FAILURE;
}
 
-   if (lseek(regf-fd, SEEK_SET, 0x1000) == -1) {
+   if (lseek(regf-fd, 0x1000, SEEK_SET) == -1) {
DEBUG(0, (Error lseeking to 0x1000 in regf file\n));
return WERR_GENERAL_FAILURE;
}



Build status as of Tue Jan 16 00:00:02 2007

2007-01-15 Thread build
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2007-01-15 
00:00:35.0 +
+++ /home/build/master/cache/broken_results.txt 2007-01-16 00:00:23.0 
+
@@ -1,22 +1,22 @@
-Build status as of Mon Jan 15 00:00:02 2007
+Build status as of Tue Jan 16 00:00:02 2007
 
 Build counts:
 Tree Total  Broken Panic 
 SOC  0  0  0 
 build_farm   0  0  0 
-ccache   35 7  0 
+ccache   36 7  0 
 ctdb 0  0  0 
-distcc   2  0  0 
-ldb  34 3  0 
+distcc   3  0  0 
+ldb  34 4  0 
 libreplace   32 2  0 
 lorikeet-heimdal 31 17 0 
 ppp  17 0  0 
-rsync35 3  0 
+rsync36 4  0 
 samba0  0  0 
 samba-docs   0  0  0 
-samba4   32 11 1 
-samba_3_035 12 0 
+samba4   33 6  1 
+samba_3_036 9  0 
 smb-build32 2  0 
-talloc   35 0  0 
-tdb  33 2  0 
+talloc   36 0  0 
+tdb  34 2  0 
 


svn commit: smb-build r69 - in trunk: .

2007-01-15 Thread jelmer
Author: jelmer
Date: 2007-01-16 01:13:13 + (Tue, 16 Jan 2007)
New Revision: 69

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=smb-buildrev=69

Log:
Check if the build breakage script still works.
Modified:
   trunk/foo.c


Changeset:
Modified: trunk/foo.c
===
--- trunk/foo.c 2006-10-11 12:08:17 UTC (rev 68)
+++ trunk/foo.c 2007-01-16 01:13:13 UTC (rev 69)
@@ -1,3 +1,4 @@
+#error Fails
 #include stdio.h
 
 #define eprintf(...) fprintf(stderr, __VA_ARGS__)



svn commit: samba r20823 - in branches/SAMBA_4_0/source/torture: basic local

2007-01-15 Thread jelmer
Author: jelmer
Date: 2007-01-16 01:36:15 + (Tue, 16 Jan 2007)
New Revision: 20823

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=20823

Log:
Remove newlines in calls to torture_fail().
Modified:
   branches/SAMBA_4_0/source/torture/basic/base.c
   branches/SAMBA_4_0/source/torture/local/dbspeed.c
   branches/SAMBA_4_0/source/torture/local/iconv.c


Changeset:
Modified: branches/SAMBA_4_0/source/torture/basic/base.c
===
--- branches/SAMBA_4_0/source/torture/basic/base.c  2007-01-15 23:42:52 UTC 
(rev 20822)
+++ branches/SAMBA_4_0/source/torture/basic/base.c  2007-01-16 01:36:15 UTC 
(rev 20823)
@@ -93,7 +93,7 @@
if (status) {
torture_fail(tctx, talloc_asprintf(tctx, 
   tconx to share %s with type %s 
-  should have failed but succeeded\n,
+  should have failed but succeeded,
   myshare, devtype));
} else {
if (NT_STATUS_EQUAL(smbcli_nt_error(cli-tree),
@@ -725,7 +725,7 @@
 NT_STATUS_INVALID_HANDLE)) {
torture_fail(tctx, talloc_asprintf(tctx, 
qfileinfo should have returned DOS error 
-  ERRSRV:ERRbaduid\n  but returned %s\n,
+  ERRSRV:ERRbaduid\n  but returned %s,
   smbcli_errstr(cli-tree)));
}
 

Modified: branches/SAMBA_4_0/source/torture/local/dbspeed.c
===
--- branches/SAMBA_4_0/source/torture/local/dbspeed.c   2007-01-15 23:42:52 UTC 
(rev 20822)
+++ branches/SAMBA_4_0/source/torture/local/dbspeed.c   2007-01-16 01:36:15 UTC 
(rev 20823)
@@ -63,7 +63,7 @@
tdbw = tdb_wrap_open(tmp_ctx, test.tdb, 
 1, 0, O_RDWR|O_CREAT|O_TRUNC, 0600);
if (!tdbw) {
-   torture_fail(torture, Failed to open test.tdb\n);
+   torture_fail(torture, Failed to open test.tdb);
goto failed;
}
 
@@ -171,7 +171,7 @@
ldb = ldb_wrap_connect(tmp_ctx, tdb://test.ldb, 
NULL, NULL, LDB_FLG_NOSYNC, NULL);
if (!ldb) {
-   torture_fail(torture, Failed to open test.ldb\n);
+   torture_fail(torture, Failed to open test.ldb);
goto failed;
}
 
@@ -207,20 +207,20 @@
i = random() % torture_entries;
dn = ldb_dn_new_fmt(tmp_ctx, ldb, 
SID=S-1-5-21-53173311-3623041448-2049097239-%u, i);
if (ldb_search(ldb, dn, LDB_SCOPE_BASE, NULL, NULL, res) != 
LDB_SUCCESS || res-count != 1) {
-   torture_fail(torture, talloc_asprintf(torture, Failed 
to find SID %d\n, i));
+   torture_fail(torture, talloc_asprintf(torture, Failed 
to find SID %d, i));
}
talloc_free(res);
talloc_free(dn);
expr = talloc_asprintf(tmp_ctx, (UID=%u), i);
if (ldb_search(ldb, NULL, LDB_SCOPE_SUBTREE, expr, NULL, res) 
!= LDB_SUCCESS || res-count != 1) {
-   torture_fail(torture, talloc_asprintf(torture, Failed 
to find UID %d\n, i));
+   torture_fail(torture, talloc_asprintf(torture, Failed 
to find UID %d, i));
}
talloc_free(res);
talloc_free(expr);
}
 
if (talloc_total_blocks(torture)  100) {
-   torture_fail(torture, memory leak in ldb search\n);
+   torture_fail(torture, memory leak in ldb search);
goto failed;
}
 

Modified: branches/SAMBA_4_0/source/torture/local/iconv.c
===
--- branches/SAMBA_4_0/source/torture/local/iconv.c 2007-01-15 23:42:52 UTC 
(rev 20822)
+++ branches/SAMBA_4_0/source/torture/local/iconv.c 2007-01-16 01:36:15 UTC 
(rev 20823)
@@ -133,7 +133,7 @@
if (cd == (iconv_t)-1) {
torture_fail(test, 
 talloc_asprintf(test, 
-failed to open %s to 
UTF-16LE\n,
+failed to open %s to 
UTF-16LE,
 charset));
cd = NULL;
return false;