[Samba] Failed to create Administrators, Failed to create Users

2007-10-04 Thread Jacek Kowalski

Hi,

Since I install Samba 3.0.23d on my Centos5 with kernel 2.6.18-8.1.10.el5 #1 SMP 
I've the following messages in my logfile:


Oct  3 16:45:22  smbd[6174]: [2007/10/03 16:45:22, 0] auth/auth_util.c:create_builtin_administrators(785) 
Oct  3 16:45:22  smbd[6174]:   create_builtin_administrators: Failed to create Administrators 
Oct  3 16:45:22  smbd[6174]: [2007/10/03 16:45:22, 0] auth/auth_util.c:create_builtin_users(751) 
Oct  3 16:45:22  smbd[6174]:   create_builtin_users: Failed to create Users 


Version of krb5 is 1.5-29
This is my smb.conf:

[global]
netbios name = SERVER
workgroup = DOMAIN
realm = DOMAIN.NET
security = ADS
password server = server.domain.net
winbind separator = +
allow trusted domains = No
idmap backend = idmap_rid:INFORNET=1000-65000
idmap uid = 1000-65000
idmap gid = 1000-65000
template shell = /bin/bash
winbind use default domain = Yes
winbind enum users = No
winbind enum groups = No
winbind nested groups = Yes
log file = /var/log/samba/%I.log
  log level = 3
max log size = 500
smb ports = 139
guest account = guest
encrypt passwords = yes
username map = /etc/samba/smbusers
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = no

[homes]
comment = Home Directories
browseable = no
writable = yes
create mask = 664
directory mask = 0775

[source1]
path = /home/source1
public = yes
valid users = @DOMAIN+group1
read list = @DOMAIN+group1
write list = @DOMAIN+group1
force group = group1
writable = yes
printable = no
browseable = yes
create mask = 0665
force directory mode = 0775
guest ok = yes


Anybody knows how to fix it?

Regards
Jaco



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] could not read attribute 'gidNumber'

2007-10-04 Thread Urs Golla
Hi

I am using samba 3.0.23c on RHEL5 with security = ads. If I use idmap
backend = ad i can see in the logfile that it gets my uidNumber:

ad_idmap_get_id_from_sid mapped SID [S-mysid] to POSIX UID myuid

but it is not able to get my gidNumber:

[2007/10/04 09:44:17, 1] sam/idmap_ad.c:ad_idmap_get_id_from_sid(309)
  ad_idmap_get_id_from_sid: ads_pull_uint32: could not read attribute
'gidNumber'

any idea?

thanks!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Several AD domain servers

2007-10-04 Thread Howard Wilkinson

Paulo Almeida wrote:

Hi,

It is possible to assing several AD domain servers on krb5.conf file?
The questions is if one of AD servers goes down, it is useful if samba can
get authentication through other AD server on domain.
Sorry if this question already answered previsously.

Domain Server: MS Windows 2003 SP2
Linux Box: SLES 10 SP1 (kernel 2.6.16)
Samba version: 3.0.24-2.28
Kerberos version: 1.4.3-19.25

Best regards,
Paulo Almeida

  

Paulo,

set the entries in the [libdefaults] section like this.

default_realm = FQDN of domain
dns_lookup_kdc=true
dns_lookup_realm=true

then add records to your DNS of the following form.

_kerberos.zone in txt FQDN of domain

The FQDN of the domain is the AD domain name e.g. domain.example.com. 
The zone is the local zone for the workstation/server running linux e.g. 
linuz.example.com.


The kerberos lookups will then get a list of kdc's from the domain 
servers (so long as they can find the zone data for the domain) by 
looking up the srv records for the kdc (and falling back to the A record 
lookup for the domain name). And will tie the local workstation to the 
domain via the TXT record.


If you have multiple zones in which your workstations/servers are 
installed you can also add the following to the domain_realm section of 
the krb5.conf file


zone = FQDN of domain
.zone = FQDN of domain

for each zone in your network(s). Note you should always do this for at 
least the zone that the local machine is within.


This will allow the machines to failover if the AD controller they try 
to contact is down. Be warned however that there is a large window when 
controllers are shutting down or starting up where they offer KDC 
services (i.e. respond to messages) but do not provide those services. 
This can result in logins timing out or being rejected because the KDC 
has started but the AD LDAP environment is not fully up etc. So this 
will cope with hard failures and machines being switched off but not 
with machines currently failing,shutting down or starting up.


If you are using Samba as the authentication route via pam_winbind you 
might also need to add the line


password server = FQDN of domain

into smb.conf to get this to work

Regards Howard.


--

Howard Wilkinson



Phone:



+44(20)76907075

Coherent Technology Limited



Fax:





23 Northampton Square,



Mobile:



+44(7980)639379

United Kingdom, EC1V 0HL



Email:



[EMAIL PROTECTED]



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Empty secrets.tdb.

2007-10-04 Thread Latrell Wang 王獻綱
Hi all:

 

I have a FTP server combined with samba server. Pam_smbpass.so is used to 
provide authentication. Everything works fine in the beginning. But after a 
period of heavy access from FTP, the login will fail. I found the problem is 
resulted from secrets.tdb. It became an empty file (I use tdbdump to check the 
content). Pam_smbpass.so rejected the authentication when it can’t check the 
SID in the secrets.tdb. My samba version is 3.0.25c. Previous version is 
3.0.21c, and it did not have the problem.

 

Thanks for all advice,

Latrell.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Setting up common drive w/letter?

2007-10-04 Thread Scott Ehrlich
I want to configure samba to produce a common area (i.e. /home/shared) as 
an assigned drive letter to all users.   Thus, in addition to users 
logging into the domain and having an H: drive for their personal account, 
they will also get an S: drive (for example) for a common area.


How do I configure this in smb.conf?

Thanks.

Scott
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Setting up common drive w/letter?

2007-10-04 Thread Mike Eggleston
On Thu, 04 Oct 2007, Scott Ehrlich might have said:

 I want to configure samba to produce a common area (i.e. /home/shared) as 
 an assigned drive letter to all users.   Thus, in addition to users 
 logging into the domain and having an H: drive for their personal account, 
 they will also get an S: drive (for example) for a common area.
 
 How do I configure this in smb.conf?
 
 Thanks.
 
 Scott
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba

I use the logon.bat script defined in smb.conf to configure the S:\, T:\,
and P:\ local drives (different drive letters for different functions). The
H:\ drive is configured as the 'logon home' directory from smb.conf.

Mike
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] group member cross domain

2007-10-04 Thread Lee Rocky
Hi all

I've 2 Domain and set trust.
Domain A has a group univeralg, all member from Domain B.

now I can get whole account/group list in these 2 DOMAINs by wbinfo -u/g,
getent passwd/group,
but member in group universalg always empty.

is it possible to get these member by getent group command?

Thanks for any advice.
Rocky
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Setting up common drive w/letter?

2007-10-04 Thread Francis Galiegue
Le jeudi 04 octobre 2007, Scott Ehrlich a écrit :
 I want to configure samba to produce a common area (i.e. /home/shared) as 
 an assigned drive letter to all users.   Thus, in addition to users 
 logging into the domain and having an H: drive for their personal account, 
 they will also get an S: drive (for example) for a common area.
 
 How do I configure this in smb.conf?
 

This is not in smb.conf per se. You will configure the share in smb.conf and 
setup a logon script with at least the line:

net use S: \\yourserver\theshare /persistent:no

(that's what I use and it works pretty well, but YMMV)

The script must be in the [netlogon] share. Also, it must be DOS formatted 
(use unix2dos if you create the file under Unix). Then, in smb.conf, add:

logon script = \path\to\yourscript.bat

in the global section where \path\to\yourscript.bat is the relative path of 
your script from the root of the netlogon share (just forget the \path\to\ if 
it's at the root).

-- 
Francis Galiegue, One2team - [EMAIL PROTECTED]
[ATTENTION : CHANGEMENT DE COORDONNÉES !]
+33178945570, +33683877875, http://www.one2team.com
40 avenue Raymond Poincaré - 75116 PARIS
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Setting up common drive w/letter?

2007-10-04 Thread Lukasz Szybalski
On 10/4/07, Scott Ehrlich [EMAIL PROTECTED] wrote:
 I want to configure samba to produce a common area (i.e. /home/shared) as
 an assigned drive letter to all users.   Thus, in addition to users
 logging into the domain and having an H: drive for their personal account,
 they will also get an S: drive (for example) for a common area.

 How do I configure this in smb.conf?

Create a share by adding in this:

[SHARED]
comment = PMS files
path = /home/lucas/Unique
browseable = yes
#printable = no
guest account = nobody
guest ok = yes
write ok = yes
force user = lucas
#force group = lucas

If all of them authenticate via samba you don't need guest accout=
nobody and you don't need force user = lucas. You might need force
group do to make sure all people are can read write to it.



On 10/4/07, Scott Ehrlich [EMAIL PROTECTED] wrote:
 I want to configure samba to produce a common area (i.e. /home/shared) as
 an assigned drive letter to all users.   Thus, in addition to users
 logging into the domain and having an H: drive for their personal account,
 they will also get an S: drive (for example) for a common area.

 How do I configure this in smb.conf?

Create a share by adding in this:

[SHARED]
comment = shared files
path = /home/shared
browseable = yes
#printable = no
#guest account = nobody
#guest ok = yes
write ok = yes
#force user = lucas
force group =users
write list = @users


Now in your startup script (netlogon) add :

net use s: \\YOURSERVENAME\SHARED

Then you can run a command
smbclient -L localhost
password: [hit Enter]  --password is empty

to see if it is shared.

Check out:
http://lucasmanual.com/mywiki/SambaDomainController
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] guest not permitted to access share

2007-10-04 Thread Jacek Kowalski

I`ve fix the problem! I`ve add to my smb.conf in the source section:

valid users = @DOMAIN+group1 DOMAIN+guest
read list = @DOMAIN+group1 DOMAIN+guest


and turn off

guest ok = yes



And everything work`s perfectly!

Thank you for all!

Jaco


P.S. My english is not quite well ;-)
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Strange profile behavior ...

2007-10-04 Thread Sébastien CRAMATTE
I've done the change in with gpedit.msc ...
But I still have the problem  ... Seems that load Default User profile ...




Dennis McLeod escribió:
 Assuming XP, you control roaming profiles on the XP machine, not the Samba
 Server.

 On XP:
 Start, Run, type gpedit.msc, hit enter.
 Expand Computer Configuration
 Expand Administrative Templates
 Expand System
 Highlight User Profiles
 Change Prevent Roaming Profiles from propagating to the server to Enabled.
 Change Allow only local profiles to Enabled.
 Logout and back in (or reboot.)

 http://lists.samba.org/archive/samba/2007-July/134073.html


 Hope this helps
 Dennis

  

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of
 Sébastien CRAMATTE
 Sent: Wednesday, October 03, 2007 3:20 PM
 To: samba@lists.samba.org
 Subject: [Samba] Strange profile behavior ...

 Hello,

 I've setup  a PDC  on Ubuntu Feisty with Samba 3 ...
 My users can join and use the domain but each time that open session the
 environment is reset to default parameters ...  !

 Note I don't want to use Roaming just local profiles !
 In my smb.conf  I've got these lines :


 ...

 logon path =
 logon drive = H:
 logon home = \\%N\%U
 logon script = logon.cmd
 ...

 [profiles]
comment = Users profiles
path = /home/samba/profiles
guest ok = no
browseable = no
create mask = 0600
directory mask = 0700
 ...


 Any ideas ?
 Regards
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba



   


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Strange profile behavior ...

2007-10-04 Thread Dennis McLeod
On the XP machine, is there a folder being created in c:\documents and
settings\ with the users account name?
Do they (the user logging on) have permission to write to that folder?
Is that user (or a group the user belongs to) a member of the local
administrators group on the XP machine they are logging onto?
I realize you may not want to run in that setup, but it would eliminate a
permissions issue for testing
Dennis


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Sébastien CRAMATTE
Sent: Thursday, October 04, 2007 7:03 AM
To: samba@lists.samba.org
Subject: Re: [Samba] Strange profile behavior ...

I've done the change in with gpedit.msc ...
But I still have the problem  ... Seems that load Default User profile ...




Dennis McLeod escribió:
 Assuming XP, you control roaming profiles on the XP machine, not the 
 Samba Server.

 On XP:
 Start, Run, type gpedit.msc, hit enter.
 Expand Computer Configuration
 Expand Administrative Templates
 Expand System
 Highlight User Profiles
 Change Prevent Roaming Profiles from propagating to the server to
Enabled.
 Change Allow only local profiles to Enabled.
 Logout and back in (or reboot.)

 http://lists.samba.org/archive/samba/2007-July/134073.html


 Hope this helps
 Dennis

  

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On 
 Behalf Of Sébastien CRAMATTE
 Sent: Wednesday, October 03, 2007 3:20 PM
 To: samba@lists.samba.org
 Subject: [Samba] Strange profile behavior ...

 Hello,

 I've setup  a PDC  on Ubuntu Feisty with Samba 3 ...
 My users can join and use the domain but each time that open session 
 the environment is reset to default parameters ...  !

 Note I don't want to use Roaming just local profiles !
 In my smb.conf  I've got these lines :


 ...

 logon path =
 logon drive = H:
 logon home = \\%N\%U
 logon script = logon.cmd
 ...

 [profiles]
comment = Users profiles
path = /home/samba/profiles
guest ok = no
browseable = no
create mask = 0600
directory mask = 0700
 ...


 Any ideas ?
 Regards
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba



   


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Strange profile behavior ...

2007-10-04 Thread Sébastien CRAMATTE
Yes ! A folder is created for each user and seems that he have got
correct permissions.

Dennis McLeod escribió:
 On the XP machine, is there a folder being created in c:\documents and
 settings\ with the users account name?
 Do they (the user logging on) have permission to write to that folder?
 Is that user (or a group the user belongs to) a member of the local
 administrators group on the XP machine they are logging onto?
 I realize you may not want to run in that setup, but it would eliminate a
 permissions issue for testing
 Dennis


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of
 Sébastien CRAMATTE
 Sent: Thursday, October 04, 2007 7:03 AM
 To: samba@lists.samba.org
 Subject: Re: [Samba] Strange profile behavior ...

 I've done the change in with gpedit.msc ...
 But I still have the problem  ... Seems that load Default User profile ...




 Dennis McLeod escribió:
   
 Assuming XP, you control roaming profiles on the XP machine, not the 
 Samba Server.

 On XP:
 Start, Run, type gpedit.msc, hit enter.
 Expand Computer Configuration
 Expand Administrative Templates
 Expand System
 Highlight User Profiles
 Change Prevent Roaming Profiles from propagating to the server to
 
 Enabled.
   
 Change Allow only local profiles to Enabled.
 Logout and back in (or reboot.)

 http://lists.samba.org/archive/samba/2007-July/134073.html


 Hope this helps
 Dennis

  

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On 
 Behalf Of Sébastien CRAMATTE
 Sent: Wednesday, October 03, 2007 3:20 PM
 To: samba@lists.samba.org
 Subject: [Samba] Strange profile behavior ...

 Hello,

 I've setup  a PDC  on Ubuntu Feisty with Samba 3 ...
 My users can join and use the domain but each time that open session 
 the environment is reset to default parameters ...  !

 Note I don't want to use Roaming just local profiles !
 In my smb.conf  I've got these lines :


 ...

 logon path =
 logon drive = H:
 logon home = \\%N\%U
 logon script = logon.cmd
 ...

 [profiles]
comment = Users profiles
path = /home/samba/profiles
guest ok = no
browseable = no
create mask = 0600
directory mask = 0700
 ...


 Any ideas ?
 Regards
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba



   
 


 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba

   

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] test

2007-10-04 Thread Darryl Tidd

Are my posts coming through?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Fwd: [Samba] test

2007-10-04 Thread John Drescher
-- Forwarded message --
From: John Drescher [EMAIL PROTECTED]
Date: Oct 4, 2007 1:10 PM
Subject: Re: [Samba] test
To: Darryl Tidd [EMAIL PROTECTED]


 Are my posts coming through?

Yes.

John


-- 
John M. Drescher
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Running multiple instances of Samba and LDAP question

2007-10-04 Thread Chris Osicki
On Wed, 03 Oct 2007 07:42:03 -0400
Adam Tauno Williams [EMAIL PROTECTED] wrote:

  I work for the small IT company and I would like to ask  the question
  concerning the project that I work on-Namely is it posible to run
  multiple instances of Samba and LDAP paralely on the one server --For
  example one cental server for Samba and LDAP and one instance running
 
 The only way to accomplish that is a nightmare of hackery.  Multiple
 instances of CIFS don't work very well.

Is for you a proper Samba configuration a hackery? ;-)
I run several of them (in cluster packages which moves between cluster nodes
and haven't seen any problems. Each one uses it's own smb.conf, private dir etc.

I don't see a reason for having multiple LDAP instances, though.
 
  for each separate client -and if it possible the suggestion how to
  best accomplish that ...
  I thank you in advance for your time and effort ..
 
 Create multiple virtual servers with vmware-server.
 
 -- 
 Adam Tauno Williams, Network  Systems Administrator
 Consultant - http://www.whitemiceconsulting.com
 Developer - http://www.opengroupware.org
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba
 

Regards,
Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Strange profile behavior ...

2007-10-04 Thread Sébastien CRAMATTE
Efectifvely seems to be permissions problems ...

With user that are  in Administrators group it works perfectly  for 
normal users  doesn't works
What should be the  correct permissions on  Documents And Settings
folder ?

What happens is when a normal user log in on the system  a folder with
his name is created inside
Documents And Settings ... But when logout  Windows XP delete always
delete this folder ...

WINXP1 is the local computer name our domain is ZEN ...

Currently we have :

Administradors/WINXP1  - all permissions
SYSTEM  -  all permissions
All  -  Read and Execute, Show folder content, Read
Users/WINXP1  -  Read and Execute, Show folder content, Read   
   
Advanced Users/WINXP1 -  Read and Execute, Show folder content, Read


Sébastien CRAMATTE escribió:
 Yes ! A folder is created for each user and seems that he have got
 correct permissions.

 Dennis McLeod escribió:
   
 On the XP machine, is there a folder being created in c:\documents and
 settings\ with the users account name?
 Do they (the user logging on) have permission to write to that folder?
 Is that user (or a group the user belongs to) a member of the local
 administrators group on the XP machine they are logging onto?
 I realize you may not want to run in that setup, but it would eliminate a
 permissions issue for testing
 Dennis


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of
 Sébastien CRAMATTE
 Sent: Thursday, October 04, 2007 7:03 AM
 To: samba@lists.samba.org
 Subject: Re: [Samba] Strange profile behavior ...

 I've done the change in with gpedit.msc ...
 But I still have the problem  ... Seems that load Default User profile ...




 Dennis McLeod escribió:
   
 
 Assuming XP, you control roaming profiles on the XP machine, not the 
 Samba Server.

 On XP:
 Start, Run, type gpedit.msc, hit enter.
 Expand Computer Configuration
 Expand Administrative Templates
 Expand System
 Highlight User Profiles
 Change Prevent Roaming Profiles from propagating to the server to
 
   
 Enabled.
   
 
 Change Allow only local profiles to Enabled.
 Logout and back in (or reboot.)

 http://lists.samba.org/archive/samba/2007-July/134073.html


 Hope this helps
 Dennis

  

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On 
 Behalf Of Sébastien CRAMATTE
 Sent: Wednesday, October 03, 2007 3:20 PM
 To: samba@lists.samba.org
 Subject: [Samba] Strange profile behavior ...

 Hello,

 I've setup  a PDC  on Ubuntu Feisty with Samba 3 ...
 My users can join and use the domain but each time that open session 
 the environment is reset to default parameters ...  !

 Note I don't want to use Roaming just local profiles !
 In my smb.conf  I've got these lines :


 ...

 logon path =
 logon drive = H:
 logon home = \\%N\%U
 logon script = logon.cmd
 ...

 [profiles]
comment = Users profiles
path = /home/samba/profiles
guest ok = no
browseable = no
create mask = 0600
directory mask = 0700
 ...


 Any ideas ?
 Regards
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba



   
 
   
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba

   
 

   

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Problem

2007-10-04 Thread Darryl Tidd

Frank Van Damme wrote:

On 9/28/07, Tomasz Chmielewski [EMAIL PROTECTED] wrote:
  

Darryl Tidd schrieb:


I am running Kubunt 7.04.  I downloaded the latest Samba release from
samba.org.  I configured and installed Samba.  However, after doing all
this, I can't seem to get Samba to run.  I have tried starting smbd,
winbindd, nmbd, sambaclient, samba, and swat.  I either get a message
that the program is not installed or the computer just does nothing.
Any help will be greatly appreciated.
  

Why don't you just get Kubuntu Samba packages?

Apparently, you don't really know what you are doing (I have tried
starting smbd, winbindd, nmbd, sambaclient, samba, and swat)



... and you (the OP) should have a clear idea of what you're trying to
achieve with Samba. Like: set up some simple shares, make home
directories available over the network, or the same but including
keeping your sister from overwriting your files,...


  


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Samba + Ldap: password sync

2007-10-04 Thread Fabiano Caixeta Duarte
Gentleman,

While using Openldap 2.2.x, password syncronization was working fine. It
means that when a user changed his password through MS Windows XP,
unixPassword, sambaNTPassword and sambaLMPassword were updated at the
same time.

Since I migrated Openldap to version 2.3.38 (same compilation options /
conf files untouched) it stopped working. Now only sambaXXPassword are
updated and unixPassword remain with the old value.

No errors are shown on ldap or samba logs.

How do I proceed now?

Fabiano.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Winbind problem

2007-10-04 Thread mail
Hello,

I have a Centos 4.4 Linux server that setup Winbind with windows 2003AD 
integration, the winbind suddenly can't receive AD accounts, I can use 
wbinfo -u to show AD user name and group etc, but getent passwd isn't 
pulling across all of the domain accounts.

Here is the winbind log:

[2007/10/04 23:31:08, 1] nsswitch/winbindd_user.c:winbindd_fill_pwent(50)
error getting user id for sid S-1-5-21-106390638-1002753184-2220938350-2439
[2007/10/04 23:31:08, 1] nsswitch/winbindd_user.c:winbindd_getpwent(566)
could not lookup domain user SFA07ITLC40$
[2007/10/04 23:31:08, 1] nsswitch/winbindd_user.c:winbindd_fill_pwent(50)
error getting user id for sid S-1-5-21-106390638-1002753184-2220938350-2438
[2007/10/04 23:31:08, 1] nsswitch/winbindd_user.c:winbindd_getpwent(566)
could not lookup domain user SFA07ITLC42$
[2007/10/04 23:31:08, 1] nsswitch/winbindd_user.c:winbindd_fill_pwent(50)
error getting user id for sid S-1-5-21-106390638-1002753184-2220938350-2437
[2007/10/04 23:31:08, 1] nsswitch/winbindd_user.c:winbindd_getpwent(566)
could not lookup domain user SFA07ITLC37$
[2007/10/04 23:31:08, 1] nsswitch/winbindd_user.c:winbindd_fill_pwent(50)
error getting user id for sid S-1-5-21-106390638-1002753184-2220938350-2436
[2007/10/04 23:31:08, 1] nsswitch/winbindd_user.c:winbindd_getpwent(566)
could not lookup domain user SFA07ITLC38$
[2007/10/04 23:31:08, 1] nsswitch/winbindd_user.c:winbindd_fill_pwent(50)
error getting user id for sid S-1-5-21-106390638-1002753184-2220938350-2435
[2007/10/04 23:31:08, 1] nsswitch/winbindd_user.c:winbindd_getpwent(566)
could not lookup domain user SFA07ITLC44$
[2007/10/04 23:31:08, 1] nsswitch/winbindd_user.c:winbindd_fill_pwent(50)
error getting user id for sid S-1-5-21-106390638-1002753184-2220938350-2434
[2007/10/04 23:31:08, 1] nsswitch/winbindd_user.c:winbindd_getpwent(566)



Thx !!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] group member across domain

2007-10-04 Thread Lee Rocky
Hi all

I've 2 Domain and set trust.
Domain A has a group univeralg, all member from Domain B.

now I can get whole account/group list in these 2 DOMAINs by wbinfo -u/g,
getent passwd/group,
but member in group universalg always empty.

is it possible to get these member by getent group command?

Thanks for any advice.
 Rocky
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Winbind problem

2007-10-04 Thread Wilkinson, Alex
0n Fri, Oct 05, 2007 at 06:45:21AM +0800, mail wrote: 

I have a Centos 4.4 Linux server that setup Winbind with windows 2003AD 
integration, the winbind suddenly can't receive AD accounts, I can use 
wbinfo -u to show AD user name and group etc, but getent passwd isn't 
pulling across all of the domain accounts.

Is your idmap range large enough ? Try increaing it. e.g.

idmap config dsto:range = 1-50

 -aW

IMPORTANT: This email remains the property of the Australian Defence 
Organisation and is subject to the jurisdiction of section 70 of the CRIMES ACT 
1914.  If you have received this email in error, you are requested to contact 
the sender and delete the email.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


svn commit: samba r25502 - in branches: SAMBA_3_2/source/smbd SAMBA_3_2_0/source/smbd

2007-10-04 Thread vlendec
Author: vlendec
Date: 2007-10-04 13:13:16 + (Thu, 04 Oct 2007)
New Revision: 25502

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=25502

Log:
Fix bug 5006

Thanks to Joerg.Bernau at web.de

Modified:
   branches/SAMBA_3_2/source/smbd/reply.c
   branches/SAMBA_3_2_0/source/smbd/reply.c


Changeset:
Modified: branches/SAMBA_3_2/source/smbd/reply.c
===
--- branches/SAMBA_3_2/source/smbd/reply.c  2007-10-04 00:29:29 UTC (rev 
25501)
+++ branches/SAMBA_3_2/source/smbd/reply.c  2007-10-04 13:13:16 UTC (rev 
25502)
@@ -3923,7 +3923,7 @@
if(IVAL(req-inbuf,smb_vwv12) != 0) {
DEBUG(0,(reply_write_and_X - large offset (%x  32) 
 used and we don't support 64 bit offsets.\n,
-(unsigned int)IVAL(inbuf,smb_vwv12) ));
+(unsigned int)IVAL(req-inbuf,smb_vwv12) ));
reply_doserror(req, ERRDOS, ERRbadaccess);
END_PROFILE(SMBwriteX);
return;

Modified: branches/SAMBA_3_2_0/source/smbd/reply.c
===
--- branches/SAMBA_3_2_0/source/smbd/reply.c2007-10-04 00:29:29 UTC (rev 
25501)
+++ branches/SAMBA_3_2_0/source/smbd/reply.c2007-10-04 13:13:16 UTC (rev 
25502)
@@ -3921,7 +3921,7 @@
if(IVAL(req-inbuf,smb_vwv12) != 0) {
DEBUG(0,(reply_write_and_X - large offset (%x  32) 
 used and we don't support 64 bit offsets.\n,
-(unsigned int)IVAL(inbuf,smb_vwv12) ));
+(unsigned int)IVAL(req-inbuf,smb_vwv12) ));
reply_doserror(req, ERRDOS, ERRbadaccess);
END_PROFILE(SMBwriteX);
return;



svn commit: samba r25504 - in branches/SAMBA_4_0/source: . selftest

2007-10-04 Thread metze
Author: metze
Date: 2007-10-04 14:51:11 + (Thu, 04 Oct 2007)
New Revision: 25504

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=25504

Log:
run WINBIND tests for samba3

metze
Added:
   branches/SAMBA_4_0/source/selftest/test_winbind.sh
Modified:
   branches/SAMBA_4_0/source/samba4-skip
   branches/SAMBA_4_0/source/selftest/tests_all.sh


Changeset:
Modified: branches/SAMBA_4_0/source/samba4-skip
===
--- branches/SAMBA_4_0/source/samba4-skip   2007-10-04 14:45:57 UTC (rev 
25503)
+++ branches/SAMBA_4_0/source/samba4-skip   2007-10-04 14:51:11 UTC (rev 
25504)
@@ -46,3 +46,4 @@
 .*SAMBA3.* # 
Samba3-specific test
 ^NET-DOMOPEN$  # Hangs for some reason
 ^NET-API-BECOME-DC$# Fails
+WINBIND# FIXME: This 
should not be skipped

Added: branches/SAMBA_4_0/source/selftest/test_winbind.sh
===
--- branches/SAMBA_4_0/source/selftest/test_winbind.sh  2007-10-04 14:45:57 UTC 
(rev 25503)
+++ branches/SAMBA_4_0/source/selftest/test_winbind.sh  2007-10-04 14:51:11 UTC 
(rev 25504)
@@ -0,0 +1,28 @@
+#!/bin/sh
+#
+
+incdir=`dirname $0`
+. $incdir/test_functions.sh
+
+ENVNAME=$1
+if test x$ENVNAME = x;then
+   ENVNAME=dc
+fi
+
+WB_OPTS=${TORTURE_OPTIONS}
+WB_OPTS=${WB_OPTS} --option=\torture:strict mode=yes\
+WB_OPTS=${WB_OPTS} --option=\torture:timelimit=1\
+WB_OPTS=${WB_OPTS} --option=\torture:winbindd separator=\
+WB_OPTS=${WB_OPTS} --option=\torture:winbindd private pipe 
dir=\$WINBINDD_PRIV_PIPE_DIR\
+WB_OPTS=${WB_OPTS} --option=\torture:winbindd netbios name=\$SERVER\
+WB_OPTS=${WB_OPTS} --option=\torture:winbindd netbios domain=\$DOMAIN\
+
+STRUCT_TESTS=`$samba4bindir/smbtorture --list | grep ^WINBIND-STRUCT | xargs`
+for t in $STRUCT_TESTS; do
+   plantest $ENVNAME:$t $ENVNAME $samba4bindir/smbtorture $WB_OPTS 
//_none_/_none_ $t
+done
+
+NDR_TESTS=`$samba4bindir/smbtorture --list | grep ^WINBIND-NDR | xargs`
+for t in $NDR_TESTS; do
+   plantest $ENVNAME:$t $ENVNAME $samba4bindir/smbtorture $WB_OPTS 
//_none_/_none_ $t
+done


Property changes on: branches/SAMBA_4_0/source/selftest/test_winbind.sh
___
Name: svn:executable
   + *


Modified: branches/SAMBA_4_0/source/selftest/tests_all.sh
===
--- branches/SAMBA_4_0/source/selftest/tests_all.sh 2007-10-04 14:45:57 UTC 
(rev 25503)
+++ branches/SAMBA_4_0/source/selftest/tests_all.sh 2007-10-04 14:51:11 UTC 
(rev 25504)
@@ -4,6 +4,7 @@
 $SRCDIR/selftest/test_ejs.sh $CONFIGURATION
 $SRCDIR/selftest/test_ldap.sh 
 $SRCDIR/selftest/test_nbt.sh dc
+$SRCDIR/selftest/test_winbind.sh dc
 $SRCDIR/selftest/test_rpc.sh
 $SRCDIR/selftest/test_net.sh
 $SRCDIR/selftest/test_session_key.sh
@@ -17,3 +18,4 @@
 $SRCDIR/selftest/test_s3upgrade.sh $PREFIX/upgrade
 $SRCDIR/selftest/test_member.sh
 $SRCDIR/selftest/test_nbt.sh member
+$SRCDIR/selftest/test_winbind.sh member



svn commit: samba r25503 - in branches/SAMBA_3_2/source: .

2007-10-04 Thread metze
Author: metze
Date: 2007-10-04 14:45:57 + (Thu, 04 Oct 2007)
New Revision: 25503

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=25503

Log:
ignore failing WINBIND tests

we should get the them going without ignoring error...

metze
Modified:
   branches/SAMBA_3_2/source/samba3-knownfail
   branches/SAMBA_3_2/source/samba3-skip


Changeset:
Modified: branches/SAMBA_3_2/source/samba3-knownfail
===
--- branches/SAMBA_3_2/source/samba3-knownfail  2007-10-04 13:13:16 UTC (rev 
25502)
+++ branches/SAMBA_3_2/source/samba3-knownfail  2007-10-04 14:45:57 UTC (rev 
25503)
@@ -23,3 +23,11 @@
 RAW-SEARCH.*/many files
 BASE-DELAYWRITE.*/finfo update on close
 blackbox.smbclient/List directory with LANMAN. # Samba 3 disables LANMAN 
authentication by default now
+dc:WINBIND-STRUCT/CHECK_MACHACC
+dc:WINBIND-STRUCT/GETDCNAME
+dc:WINBIND-STRUCT/DSGETDCNAME
+dc:WINBIND-STRUCT/LIST_USERS
+dc:WINBIND-STRUCT/LIST_GROUPS
+dc:WINBIND-STRUCT/SETPWENT
+dc:WINBIND-STRUCT/GETPWENT
+dc:WINBIND-STRUCT/LOOKUP_NAME_SID

Modified: branches/SAMBA_3_2/source/samba3-skip
===
--- branches/SAMBA_3_2/source/samba3-skip   2007-10-04 13:13:16 UTC (rev 
25502)
+++ branches/SAMBA_3_2/source/samba3-skip   2007-10-04 14:45:57 UTC (rev 
25503)
@@ -80,3 +80,4 @@
 BASE-SCAN-IOCTL
 ^ldb$
 ^samba3sam.js$
+member:WINBIND-.*  # Samba3 doesn't provide the member env yet



svn commit: samba r25505 - in branches: SAMBA_3_2/source SAMBA_3_2/source/lib SAMBA_3_2/source/lib/replace SAMBA_3_2/source/lib/replace/system SAMBA_3_2_0/source SAMBA_3_2_0/source/lib SAMBA_3_2_0/sou

2007-10-04 Thread jra
Author: jra
Date: 2007-10-04 17:20:49 + (Thu, 04 Oct 2007)
New Revision: 25505

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=25505

Log:
Add a replacement (IPv4 only) implementation of getaddrinfo/freeaddrinfo
under the 2 clause *BSD license for future use in IPv6 code. Original
code was from PostgreSQL and I've maintained their license even though
I've rewritten large parts of it (I probably should donate this back
to them).
Jeremy.

Added:
   branches/SAMBA_3_2/source/lib/replace/getaddrinfo.c
   branches/SAMBA_3_2/source/lib/replace/system/getaddrinfo.h
Modified:
   branches/SAMBA_3_2/source/configure.in
   branches/SAMBA_3_2/source/lib/replace/replace.h
   branches/SAMBA_3_2/source/lib/replace/system/network.h
   branches/SAMBA_3_2/source/lib/system.c
   branches/SAMBA_3_2/source/lib/util.c
   branches/SAMBA_3_2_0/source/configure.in
   branches/SAMBA_3_2_0/source/lib/replace/replace.h
   branches/SAMBA_3_2_0/source/lib/replace/system/network.h
   branches/SAMBA_3_2_0/source/lib/system.c
   branches/SAMBA_3_2_0/source/lib/util.c


Changeset:
Sorry, the patch is too large (1091 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=25505


svn commit: samba r25507 - in branches: SAMBA_3_2/source SAMBA_3_2/source/lib/replace/system SAMBA_3_2_0/source SAMBA_3_2_0/source/lib/replace/system

2007-10-04 Thread jra
Author: jra
Date: 2007-10-04 17:35:12 + (Thu, 04 Oct 2007)
New Revision: 25507

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=25507

Log:
Fix definition of struct sockaddr_storage if
struct sockaddr_in6 is defined.
Jeremy.

Modified:
   branches/SAMBA_3_2/source/configure.in
   branches/SAMBA_3_2/source/lib/replace/system/network.h
   branches/SAMBA_3_2_0/source/configure.in
   branches/SAMBA_3_2_0/source/lib/replace/system/network.h


Changeset:
Modified: branches/SAMBA_3_2/source/configure.in
===
--- branches/SAMBA_3_2/source/configure.in  2007-10-04 17:25:41 UTC (rev 
25506)
+++ branches/SAMBA_3_2/source/configure.in  2007-10-04 17:35:12 UTC (rev 
25507)
@@ -3195,7 +3195,7 @@
 fi
 
 dnl test for struct sockaddr_storage
-AC_CACHE_CHECK([for ipv6 support],samba_cv_HAVE_STRUCT_SOCKADDR_STORAGE,[
+AC_CACHE_CHECK([for struct 
sockaddr_storage],samba_cv_HAVE_STRUCT_SOCKADDR_STORAGE,[
 AC_TRY_COMPILE([
 #include sys/socket.h
 #include sys/types.h],
@@ -3207,6 +3207,19 @@
 AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE,1,[Whether the system has struct 
sockaddr_storage])
 fi
 
+dnl test for struct struct sockaddr_in6
+AC_CACHE_CHECK([for struct sockaddr_in6],samba_cv_HAVE_STRUCT_SOCKADDR_IN6,[
+AC_TRY_COMPILE([
+#include sys/socket.h
+#include sys/types.h],
+[
+struct sockaddr_in6 sa6;
+],
+samba_cv_HAVE_STRUCT_SOCKADDR_IN6=yes,samba_cv_HAVE_STRUCT_SOCKADDR_IN6=no)])
+if test x$samba_cv_HAVE_STRUCT_SOCKADDR_IN6 = xyes; then
+AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6,1,[Whether the system has struct 
sockaddr_in6])
+fi
+
 dnl test for struct addrinfo
 AC_CACHE_CHECK([for struct addrinfo],samba_cv_HAVE_STRUCT_ADDRINFO,[
 AC_TRY_COMPILE([

Modified: branches/SAMBA_3_2/source/lib/replace/system/network.h
===
--- branches/SAMBA_3_2/source/lib/replace/system/network.h  2007-10-04 
17:25:41 UTC (rev 25506)
+++ branches/SAMBA_3_2/source/lib/replace/system/network.h  2007-10-04 
17:35:12 UTC (rev 25507)
@@ -127,9 +127,14 @@
 #endif
 
 #ifndef HAVE_STRUCT_SOCKADDR_STORAGE
+#ifdef HAVE_STRUCT_SOCKADDR_IN6
+#define sockaddr_storage sockaddr_in6
+#define ss_family sin6_family
+#else
 #define sockaddr_storage sockaddr_in
 #define ss_family sin_family
 #endif
+#endif
 
 #ifndef HOST_NAME_MAX
 #define HOST_NAME_MAX 256

Modified: branches/SAMBA_3_2_0/source/configure.in
===
--- branches/SAMBA_3_2_0/source/configure.in2007-10-04 17:25:41 UTC (rev 
25506)
+++ branches/SAMBA_3_2_0/source/configure.in2007-10-04 17:35:12 UTC (rev 
25507)
@@ -3066,7 +3066,7 @@
 fi
 
 dnl test for struct sockaddr_storage
-AC_CACHE_CHECK([for ipv6 support],samba_cv_HAVE_STRUCT_SOCKADDR_STORAGE,[
+AC_CACHE_CHECK([for struct 
sockaddr_storage],samba_cv_HAVE_STRUCT_SOCKADDR_STORAGE,[
 AC_TRY_COMPILE([
 #include sys/socket.h
 #include sys/types.h],
@@ -3078,6 +3078,19 @@
 AC_DEFINE(HAVE_STRUCT_SOCKADDR_STORAGE,1,[Whether the system has struct 
sockaddr_storage])
 fi
 
+dnl test for struct struct sockaddr_in6
+AC_CACHE_CHECK([for struct sockaddr_in6],samba_cv_HAVE_STRUCT_SOCKADDR_IN6,[
+AC_TRY_COMPILE([
+#include sys/socket.h
+#include sys/types.h],
+[
+struct sockaddr_in6 sa6;
+],
+samba_cv_HAVE_STRUCT_SOCKADDR_IN6=yes,samba_cv_HAVE_STRUCT_SOCKADDR_IN6=no)])
+if test x$samba_cv_HAVE_STRUCT_SOCKADDR_IN6 = xyes; then
+AC_DEFINE(HAVE_STRUCT_SOCKADDR_IN6,1,[Whether the system has struct 
sockaddr_in6])
+fi
+
 dnl test for struct addrinfo
 AC_CACHE_CHECK([for struct addrinfo],samba_cv_HAVE_STRUCT_ADDRINFO,[
 AC_TRY_COMPILE([

Modified: branches/SAMBA_3_2_0/source/lib/replace/system/network.h
===
--- branches/SAMBA_3_2_0/source/lib/replace/system/network.h2007-10-04 
17:25:41 UTC (rev 25506)
+++ branches/SAMBA_3_2_0/source/lib/replace/system/network.h2007-10-04 
17:35:12 UTC (rev 25507)
@@ -127,9 +127,14 @@
 #endif
 
 #ifndef HAVE_STRUCT_SOCKADDR_STORAGE
+#ifdef HAVE_STRUCT_SOCKADDR_IN6
+#define sockaddr_storage sockaddr_in6
+#define ss_family sin6_family
+#else
 #define sockaddr_storage sockaddr_in
 #define ss_family sin_family
 #endif
+#endif
 
 #ifndef HOST_NAME_MAX
 #define HOST_NAME_MAX 256



svn commit: samba r25506 - in branches/SAMBA_3_2_0/source/lib/replace: . system

2007-10-04 Thread jra
Author: jra
Date: 2007-10-04 17:25:41 + (Thu, 04 Oct 2007)
New Revision: 25506

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=25506

Log:
Add files I forgot in last commit.
Jeremy.

Added:
   branches/SAMBA_3_2_0/source/lib/replace/getaddrinfo.c
   branches/SAMBA_3_2_0/source/lib/replace/system/getaddrinfo.h


Changeset:
Sorry, the patch is too large (671 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=25506


svn commit: samba r25508 - in branches: SAMBA_3_2/source/lib SAMBA_3_2_0/source/lib

2007-10-04 Thread jra
Author: jra
Date: 2007-10-04 18:23:22 + (Thu, 04 Oct 2007)
New Revision: 25508

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=25508

Log:
Reformatting.
Jeremy.

Modified:
   branches/SAMBA_3_2/source/lib/interface.c
   branches/SAMBA_3_2_0/source/lib/interface.c


Changeset:
Sorry, the patch is too large (631 lines) to include; please use WebSVN to see 
it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=25508


svn commit: samba r25509 - in branches/SAMBA_4_0/source/torture/winbind: .

2007-10-04 Thread obnox
Author: obnox
Date: 2007-10-04 23:20:30 + (Thu, 04 Oct 2007)
New Revision: 25509

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=25509

Log:
Extend the WINBIND-STRUCT-LOOKUP_NAME_SID test to also
verify failure of the lookup for an invalid SID and an
invalid name.

Michael


Modified:
   branches/SAMBA_4_0/source/torture/winbind/struct_based.c


Changeset:
Modified: branches/SAMBA_4_0/source/torture/winbind/struct_based.c
===
--- branches/SAMBA_4_0/source/torture/winbind/struct_based.c2007-10-04 
18:23:22 UTC (rev 25508)
+++ branches/SAMBA_4_0/source/torture/winbind/struct_based.c2007-10-04 
23:20:30 UTC (rev 25509)
@@ -937,8 +937,27 @@
return true;
 }
 
+static bool name_is_in_list(const char *name, const char **list)
+{
+   uint32_t count;
+
+   for (count = 0; list[count]; count++) {
+   if (strequal(name, list[count])) {
+   return true;
+   }
+   }
+   return false;
+}
+
 static bool torture_winbind_struct_lookup_name_sid(struct torture_context 
*torture)
 {
+   struct winbindd_request req;
+   struct winbindd_response rep;
+   const char *invalid_sid = S-0-0-7;
+   char *domain;
+   const char *invalid_user = noone;
+   char *invalid_name;
+   bool strict = torture_setting_bool(torture, strict mode, false);
char **users;
char **groups;
uint32_t count;
@@ -949,11 +968,55 @@
ok = get_user_list(torture, users);
torture_assert(torture, ok, failed to retrieve list of users);
lookup_name_sid_list(torture, users);
-   talloc_free(users);
 
ok = get_group_list(torture, groups);
torture_assert(torture, ok, failed to retrieve list of groups);
lookup_name_sid_list(torture, groups);
+
+   ZERO_STRUCT(req);
+   ZERO_STRUCT(rep);
+
+   fstrcpy(req.data.sid, invalid_sid);
+
+   ok = true;
+   DO_STRUCT_REQ_REP_EXT(WINBINDD_LOOKUPSID, req, rep,
+ NSS_STATUS_NOTFOUND,
+ strict,
+ ok=false,
+ talloc_asprintf(torture,
+ invalid sid %s was resolved,
+ invalid_sid));
+
+   ZERO_STRUCT(req);
+   ZERO_STRUCT(rep);
+
+   /* try to find an invalid name... */
+
+   count = 0;
+   get_winbind_domain(torture, domain);
+   do {
+   count++;
+   invalid_name = talloc_asprintf(torture, %s\\%s%u,
+  domain,
+  invalid_user, count);
+   } while(name_is_in_list(invalid_name, (const char **)users) ||
+   name_is_in_list(invalid_name, (const char **)groups));
+
+   fstrcpy(req.data.name.dom_name, domain);
+   fstrcpy(req.data.name.name,
+   talloc_asprintf(torture, %s%u, invalid_user,
+   count));
+
+   ok = true;
+   DO_STRUCT_REQ_REP_EXT(WINBINDD_LOOKUPNAME, req, rep,
+ NSS_STATUS_NOTFOUND,
+ strict,
+ ok=false,
+ talloc_asprintf(torture,
+ invalid name %s was resolved,
+ invalid_name));
+
+   talloc_free(users);
talloc_free(groups);
 
return true;



Build status as of Fri Oct 5 00:00:02 2007

2007-10-04 Thread build
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2007-10-04 
00:01:04.0 +
+++ /home/build/master/cache/broken_results.txt 2007-10-05 00:01:29.0 
+
@@ -1,24 +1,24 @@
-Build status as of Thu Oct  4 00:00:02 2007
+Build status as of Fri Oct  5 00:00:02 2007
 
 Build counts:
 Tree Total  Broken Panic 
 SOC  0  0  0 
 build_farm   0  0  0 
-ccache   28 10 0 
+ccache   30 10 0 
 ctdb 0  0  0 
 distcc   1  0  0 
-ldb  28 6  0 
-libreplace   26 10 0 
-lorikeet-heimdal 24 15 0 
-pidl 15 2  0 
+ldb  30 6  0 
+libreplace   28 11 0 
+lorikeet-heimdal 26 17 0 
+pidl 16 3  0 
 ppp  8  7  0 
 python   0  0  0 
-rsync28 11 0 
+rsync30 13 0 
 samba-docs   0  0  0 
 samba-gtk2  2  0 
-samba4   26 22 5 
-samba_3_227 25 9 
-smb-build26 26 0 
-talloc   28 1  0 
-tdb  28 3  0 
+samba4   28 24 5 
+samba_3_229 27 13
+smb-build28 28 0 
+talloc   30 1  0 
+tdb  30 3  0 
 


svn commit: samba r25510 - in branches: SAMBA_3_2/source/lib SAMBA_3_2/source/libsmb SAMBA_3_2_0/source/lib SAMBA_3_2_0/source/libsmb

2007-10-04 Thread jra
Author: jra
Date: 2007-10-05 01:11:33 + (Fri, 05 Oct 2007)
New Revision: 25510

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=25510

Log:
Now we're returning the port instead of using a global,
remember to use ntohs. Hopefully will fix the build farm.
Jeremy.

Modified:
   branches/SAMBA_3_2/source/lib/util_sock.c
   branches/SAMBA_3_2/source/libsmb/nmblib.c
   branches/SAMBA_3_2_0/source/lib/util_sock.c
   branches/SAMBA_3_2_0/source/libsmb/nmblib.c


Changeset:
Modified: branches/SAMBA_3_2/source/lib/util_sock.c
===
--- branches/SAMBA_3_2/source/lib/util_sock.c   2007-10-04 23:20:30 UTC (rev 
25509)
+++ branches/SAMBA_3_2/source/lib/util_sock.c   2007-10-05 01:11:33 UTC (rev 
25510)
@@ -319,12 +319,12 @@
}
 
if (psa-ss_family != AF_INET) {
-   DEBUG(2,(read_udp_v4_socket:: invalid address family %d 
+   DEBUG(2,(read_udp_v4_socket: invalid address family %d 
(not IPv4)\n, (int)psa-ss_family));
return 0;
}
 
-   DEBUG(10,(read_udp_socket: ip %s port %d read: %lu\n,
+   DEBUG(10,(read_udp_v4_socket: ip %s port %d read: %lu\n,
inet_ntoa(si-sin_addr),
si-sin_port,
(unsigned long)ret));

Modified: branches/SAMBA_3_2/source/libsmb/nmblib.c
===
--- branches/SAMBA_3_2/source/libsmb/nmblib.c   2007-10-04 23:20:30 UTC (rev 
25509)
+++ branches/SAMBA_3_2/source/libsmb/nmblib.c   2007-10-05 01:11:33 UTC (rev 
25510)
@@ -789,7 +789,7 @@
length,
packet_type,
si-sin_addr,
-   si-sin_port);
+   ntohs(si-sin_port));
if (!packet)
return NULL;
 

Modified: branches/SAMBA_3_2_0/source/lib/util_sock.c
===
--- branches/SAMBA_3_2_0/source/lib/util_sock.c 2007-10-04 23:20:30 UTC (rev 
25509)
+++ branches/SAMBA_3_2_0/source/lib/util_sock.c 2007-10-05 01:11:33 UTC (rev 
25510)
@@ -319,12 +319,12 @@
}
 
if (psa-ss_family != AF_INET) {
-   DEBUG(2,(read_udp_v4_socket:: invalid address family %d 
+   DEBUG(2,(read_udp_v4_socket: invalid address family %d 
(not IPv4)\n, (int)psa-ss_family));
return 0;
}
 
-   DEBUG(10,(read_udp_socket: ip %s port %d read: %lu\n,
+   DEBUG(10,(read_udp_v4_socket: ip %s port %d read: %lu\n,
inet_ntoa(si-sin_addr),
si-sin_port,
(unsigned long)ret));

Modified: branches/SAMBA_3_2_0/source/libsmb/nmblib.c
===
--- branches/SAMBA_3_2_0/source/libsmb/nmblib.c 2007-10-04 23:20:30 UTC (rev 
25509)
+++ branches/SAMBA_3_2_0/source/libsmb/nmblib.c 2007-10-05 01:11:33 UTC (rev 
25510)
@@ -789,7 +789,7 @@
length,
packet_type,
si-sin_addr,
-   si-sin_port);
+   ntohs(si-sin_port));
if (!packet)
return NULL;
 



svn commit: samba r25511 - in branches: SAMBA_3_2/source SAMBA_3_2_0/source

2007-10-04 Thread jra
Author: jra
Date: 2007-10-05 02:03:29 + (Fri, 05 Oct 2007)
New Revision: 25511

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=25511

Log:
Fix sockaddr_in6 detection.
Jeremy.

Modified:
   branches/SAMBA_3_2/source/configure.in
   branches/SAMBA_3_2_0/source/configure.in


Changeset:
Modified: branches/SAMBA_3_2/source/configure.in
===
--- branches/SAMBA_3_2/source/configure.in  2007-10-05 01:11:33 UTC (rev 
25510)
+++ branches/SAMBA_3_2/source/configure.in  2007-10-05 02:03:29 UTC (rev 
25511)
@@ -3198,7 +3198,8 @@
 AC_CACHE_CHECK([for struct 
sockaddr_storage],samba_cv_HAVE_STRUCT_SOCKADDR_STORAGE,[
 AC_TRY_COMPILE([
 #include sys/socket.h
-#include sys/types.h],
+#include sys/types.h
+#include netinet/in.h],
 [
 struct sockaddr_storage sa_store;
 ],
@@ -3211,7 +3212,8 @@
 AC_CACHE_CHECK([for struct sockaddr_in6],samba_cv_HAVE_STRUCT_SOCKADDR_IN6,[
 AC_TRY_COMPILE([
 #include sys/socket.h
-#include sys/types.h],
+#include sys/types.h
+#include netinet/in.h],
 [
 struct sockaddr_in6 sa6;
 ],

Modified: branches/SAMBA_3_2_0/source/configure.in
===
--- branches/SAMBA_3_2_0/source/configure.in2007-10-05 01:11:33 UTC (rev 
25510)
+++ branches/SAMBA_3_2_0/source/configure.in2007-10-05 02:03:29 UTC (rev 
25511)
@@ -3069,7 +3069,8 @@
 AC_CACHE_CHECK([for struct 
sockaddr_storage],samba_cv_HAVE_STRUCT_SOCKADDR_STORAGE,[
 AC_TRY_COMPILE([
 #include sys/socket.h
-#include sys/types.h],
+#include sys/types.h
+#include netinet/in.h],
 [
 struct sockaddr_storage sa_store;
 ],
@@ -3082,7 +3083,8 @@
 AC_CACHE_CHECK([for struct sockaddr_in6],samba_cv_HAVE_STRUCT_SOCKADDR_IN6,[
 AC_TRY_COMPILE([
 #include sys/socket.h
-#include sys/types.h],
+#include sys/types.h
+#include netinet/in.h],
 [
 struct sockaddr_in6 sa6;
 ],



Rev 636: we don't need to check the dmaster for ctdb fetch operations on persistent databases. This will make contented reads on secrets.tdb and idmap.tdb much more scalable in http://samba.org/~tridg

2007-10-04 Thread tridge

revno: 636
revision-id: [EMAIL PROTECTED]
parent: [EMAIL PROTECTED]
committer: Andrew Tridgell [EMAIL PROTECTED]
branch nick: s3-ctdb-tridge
timestamp: Fri 2007-10-05 11:48:34 +1000
message:
  we don't need to check the dmaster for ctdb fetch operations on persistent 
databases. This will make contented reads on secrets.tdb and idmap.tdb much 
more scalable
modified:
  source/lib/dbwrap_ctdb.c   dbwrap_ctdb.c-20070415131935-89u7zduywa3g216g-1
=== modified file 'source/lib/dbwrap_ctdb.c'
--- a/source/lib/dbwrap_ctdb.c  2007-09-24 03:53:40 +
+++ b/source/lib/dbwrap_ctdb.c  2007-10-05 01:48:34 +
@@ -260,10 +260,12 @@
/*
 * See if we have a valid record and we are the dmaster. If so, we can
 * take the shortcut and just return it.
+* we bypass the dmaster check for persistent databases
 */
if ((ctdb_data.dptr != NULL) 
(ctdb_data.dsize = sizeof(struct ctdb_ltdb_header)) 
-   ((struct ctdb_ltdb_header *)ctdb_data.dptr)-dmaster == 
get_my_vnn()) {
+   (db-persistent ||
+((struct ctdb_ltdb_header *)ctdb_data.dptr)-dmaster == 
get_my_vnn())) {
/* we are the dmaster - avoid the ctdb protocol op */
 
data-dsize = ctdb_data.dsize - sizeof(struct ctdb_ltdb_header);



Rev 644: we are the culprit if we can't get the reclock in http://samba.org/~tridge/ctdb

2007-10-04 Thread tridge

revno: 644
revision-id: [EMAIL PROTECTED]
parent: [EMAIL PROTECTED]
committer: Andrew Tridgell [EMAIL PROTECTED]
branch nick: tridge
timestamp: Fri 2007-10-05 12:01:40 +1000
message:
  we are the culprit if we can't get the reclock
modified:
  server/ctdb_recoverd.c recoverd.c-20070503213540-bvxuyd9jm1f7ig90-1
=== modified file 'server/ctdb_recoverd.c'
--- a/server/ctdb_recoverd.c2007-09-24 00:52:26 +
+++ b/server/ctdb_recoverd.c2007-10-05 02:01:40 +
@@ -724,6 +724,23 @@
 
return generation;
 }
+
+/*
+  remember the trouble maker
+ */
+static void ctdb_set_culprit(struct ctdb_recoverd *rec, uint32_t culprit)
+{
+   struct ctdb_context *ctdb = rec-ctdb;
+
+   if (rec-last_culprit != culprit ||
+   timeval_elapsed(rec-first_recover_time)  
ctdb-tunable.recovery_grace_period) {
+   /* either a new node is the culprit, or we've decide to forgive 
them */
+   rec-last_culprit = culprit;
+   rec-first_recover_time = timeval_current();
+   rec-culprit_counter = 0;
+   }
+   rec-culprit_counter++;
+}

 /*
   we are the recmaster, and recovery is needed - start a recovery run
@@ -741,14 +758,7 @@
/* if recovery fails, force it again */
rec-need_recovery = true;
 
-   if (rec-last_culprit != culprit ||
-   timeval_elapsed(rec-first_recover_time)  
ctdb-tunable.recovery_grace_period) {
-   /* either a new node is the culprit, or we've decide to forgive 
them */
-   rec-last_culprit = culprit;
-   rec-first_recover_time = timeval_current();
-   rec-culprit_counter = 0;
-   }
-   rec-culprit_counter++;
+   ctdb_set_culprit(rec, culprit);
 
if (rec-culprit_counter  2*nodemap-num) {
DEBUG(0,(Node %u has caused %u recoveries in %.0f seconds - 
banning it for %u seconds\n,
@@ -758,6 +768,7 @@
}
 
if (!ctdb_recovery_lock(ctdb, true)) {
+   ctdb_set_culprit(rec, pnn);
DEBUG(0,(Unable to get recovery lock - aborting recovery\n));
return -1;
}



Rev 646: fixed several places where we set the recovery culprit incorrectly in http://samba.org/~tridge/ctdb

2007-10-04 Thread tridge

revno: 646
revision-id: [EMAIL PROTECTED]
parent: [EMAIL PROTECTED]
committer: Andrew Tridgell [EMAIL PROTECTED]
branch nick: tridge
timestamp: Fri 2007-10-05 13:51:31 +1000
message:
  fixed several places where we set the recovery culprit incorrectly
modified:
  server/ctdb_recoverd.c recoverd.c-20070503213540-bvxuyd9jm1f7ig90-1
=== modified file 'server/ctdb_recoverd.c'
--- a/server/ctdb_recoverd.c2007-10-05 03:28:21 +
+++ b/server/ctdb_recoverd.c2007-10-05 03:51:31 +
@@ -735,6 +735,7 @@
 
if (rec-last_culprit != culprit ||
timeval_elapsed(rec-first_recover_time)  
ctdb-tunable.recovery_grace_period) {
+   DEBUG(0,(New recovery culprit %u\n, culprit));
/* either a new node is the culprit, or we've decide to forgive 
them */
rec-last_culprit = culprit;
rec-first_recover_time = timeval_current();
@@ -1679,7 +1680,7 @@
 
if (rec-need_recovery) {
/* a previous recovery didn't finish */
-   do_recovery(rec, mem_ctx, pnn, num_active, nodemap, vnnmap, 
nodemap-nodes[j].pnn);
+   do_recovery(rec, mem_ctx, pnn, num_active, nodemap, vnnmap, 
ctdb-pnn);
goto again; 
}
 
@@ -1688,7 +1689,7 @@
 */
switch (verify_recmode(ctdb, nodemap)) {
case MONITOR_RECOVERY_NEEDED:
-   do_recovery(rec, mem_ctx, pnn, num_active, nodemap, vnnmap, 
nodemap-nodes[j].pnn);
+   do_recovery(rec, mem_ctx, pnn, num_active, nodemap, vnnmap, 
ctdb-pnn);
goto again;
case MONITOR_FAILED:
goto again;
@@ -1702,7 +1703,7 @@
/* we should have the reclock - check its not stale */
if (ctdb-recovery_lock_fd == -1) {
DEBUG(0,(recovery master doesn't have the recovery lock\n));
-   do_recovery(rec, mem_ctx, pnn, num_active, nodemap, vnnmap, 
pnn);   
+   do_recovery(rec, mem_ctx, pnn, num_active, nodemap, vnnmap, 
ctdb-pnn);
goto again;
}
 
@@ -1710,7 +1711,7 @@
DEBUG(0,(failed read from recovery_lock_fd - %s\n, 
strerror(errno)));
close(ctdb-recovery_lock_fd);
ctdb-recovery_lock_fd = -1;
-   do_recovery(rec, mem_ctx, pnn, num_active, nodemap, vnnmap, 
pnn);
+   do_recovery(rec, mem_ctx, pnn, num_active, nodemap, vnnmap, 
ctdb-pnn);
goto again;
}
 
@@ -1867,7 +1868,7 @@
if (ret != 0) {
DEBUG(0, (__location__  Unable to setup public 
takeover addresses - starting recovery\n));
do_recovery(rec, mem_ctx, pnn, num_active, nodemap, 
-   vnnmap, nodemap-nodes[j].pnn);
+   vnnmap, ctdb-pnn);
}
}