Re: [Samba] replace winbind with ldap

2008-12-15 Thread Madars Vitolins

Hi Vishesh,

Why do you want to migrate to openLdap?
Just for interest.

One thing about your case I could say that openLdap won't support group 
policy.


Thanks,
Madars

vishesh kumar wrote:

dear all
   Currently i am using samba 3.0.28 with windbind on rhel5.2. Our
network consist almost 200 users and window 2003 active directory which
holds domain data. Now i want to replace active directory with openldap. I
want to know is there any tool that help to migrate Active Directory data to
openldap ?

thanks
  


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] mounted directory repeating unexpected files and directories

2008-12-15 Thread Noah

Hi Samba List,

I am finding a strange problem between a mount samba directory.  Any
clues why this is happening?

The server side is WD MyBook World Edition II and the export directory
is:  /shares/internal/Music/

on the client site I am mounting the directory to /mnt/mybook-music
the client is an ubuntu server

$ uname -a
Linux tsunami 2.6.24-22-generic #1 SMP Mon Nov 24 18:32:42 UTC 2008 i686
GNU/Linux
$ mount
/dev/sdb1 on / type ext3 (rw,errors=remount-ro)
proc on /proc type proc (rw,noexec,nosuid,nodev)
/sys on /sys type sysfs (rw,noexec,nosuid,nodev)
varrun on /var/run type tmpfs (rw,noexec,nosuid,nodev,mode=0755)
varlock on /var/lock type tmpfs (rw,noexec,nosuid,nodev,mode=1777)
udev on /dev type tmpfs (rw,mode=0755)
devshm on /dev/shm type tmpfs (rw)
devpts on /dev/pts type devpts (rw,gid=5,mode=620)
lrm on /lib/modules/2.6.24-22-generic/volatile type tmpfs (rw)
securityfs on /sys/kernel/security type securityfs (rw)
//192.168.1.20/Music on /mnt/mybook-music type cifs (rw,mand)
binfmt_misc on /proc/sys/fs/binfmt_misc type binfmt_misc
(rw,noexec,nosuid,nodev)


Now here is the issue.

The directory views for a particular directory are not the same on
server vs. the client side.

From the client side I do an 'ls -l /mnt/mybook-music/Madonna/Music |
wc -l' see that the output equals the line could of 'mnt/mybook-music'

$ ls -l /mnt/mybook-music/Madonna/Music | wc -l
2242
$ ls -l /mnt/mybook-music | wc -l
2242

now on the server side
# ls -l /shares/internal/Music/Madonna/Music | wc -l
4
[r...@mybookmusic Madonna]# ls -l /shares/internal/Music | wc -l
2242

The client sees all the files that are displayed from 'ls
/mnt/mybook-music' command and also displayed from an 'ls
/mnt/mybook-music/Madonna/Music' command.

where on the server side 'ls -l /shares/internal/Music/Madonna/Music'
does not show the contents of '/shares/internal/Music' and only show 3
files.

# ls -l /shares/internal/Music/Madonna/Music
total 11396
-rwxr-xr-x 1 noah noah 3345473 Apr 11  2006 Gone.mp3
-rwxr-xr-x 1 noah noah 3483214 May  3  2005 Impressive Instant.mp3
-rwxr-xr-x 1 noah noah 4814848 May  3  2005 Nobody's Perfect.mp3

server side version details:
[r...@mybookmusic Madonna]# ipkg list_installed | grep samba
samba - 3.2.4-1 - Samba suite provides file and print services to
SMB/CIFS clients.

client version details:
$ dpkg --list | grep samba
ii  samba  3.0.28a-1ubuntu4.7
a LanManager-like file and printer server
for Unix
ii  samba-common   3.0.28a-1ubuntu4.7
Samba common files used by both the server
and the clien


the client mounted //192.168.1.20/Music from the fstab.

$ cat /etc/fstab
# /etc/fstab: static file system information.
#
# file system mount point   type  options   dump  pass
proc/proc   procdefaults0   0
# /dev/hdb1
UUID=e0b6f66b-b3f6-44f4-b5b6-e2cfb6e32048 /   ext3
defaults,errors=remount-ro 0   1
# /dev/hdb5
UUID=e1d2239f-b911-4ee2-848e-6bcb3672104d noneswapsw
  0   0
/dev/hdd/media/cdrom0   udf,iso9660 user,noauto,exec 0
 0
/dev/hdc/media/cdrom1   udf,iso9660 user,noauto,exec 0
 0
//192.168.1.20/Music/mnt/mybook-music smbfs
userid=username,passwd=password,rw 0 0


and the server configuration is:

# cat /etc/smb.conf
[global]
server string=MyBookMusic
workgroup=workgroup
interfaces=192.168.1.20/24 127.0.0.1/8
security=user
smb passwd file=/var/private/smbpasswd
private dir=/var/private
guest account=www-data
dns proxy=No
lock directory=/var/locks
pid directory=/var/locks
use sendfile=Yes
map to guest = Bad User
create mask = 755
map hidden = Yes
veto files = /shares/internal/.senvidData/ /shares/internal/lost+found/
max log size = 1

[dummy-2]
include=/var/oxsemi/shares.inc

# cat /var/oxsemi/shares.inc
[PUBLIC]
path=/shares/internal/PUBLIC
force user=www-data
valid users=www-data noah
write list=www-data noah
guest ok=Yes

[Music]
path=/shares/internal/Music
force user=noah
valid users=www-data BACKUP noah
write list=www-data BACKUP noah
guest ok=Yes
browseable=yes
writable=yes
security mask=0700
create mask=0700


Cheers,
Noah



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba configuration for win98, win2k and winxp clients

2008-12-15 Thread 7willows

Hi

I have to configure Samba 3.0.28 on Solaris 10 update 6 to allow win98, 
win2k and winxp clients access to shared storage in a small office. All 
the clients can see the server but they are unable to authenticate to 
gain access to the shares.  I have been asked to configure Samba so that 
the users authenticate using their Solaris username and password. This 
involves modifying the pam.conf to get samba to use the unix 
authentication, I have tried various combinattions.

Can anyone give me any pointer?

TIA


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] pGINA and samba - authentication against LDAP userPassword field?

2008-12-15 Thread J Xu
Hi,

Back to a while ago, someone mentioned about taking pGINA code to samba, so 
samba can work against LDAP authentication, but instead of using the 
sambaNTPassword and sambaLMPassword, this way samba can use the userPassword 
field directly.

This sounds very promissing because we can then just use one set of passwords. 
It may be not usable in a domain enviroment where machine accounts and other 
complex stuff are difficult to hand. But it is perfectly okey for a single 
linux machine in a workgroup mode. It can even provides user authentication to 
other Windows box with pGINA installed and configured.

Here is the original thread discussed about this:
  http://lists.samba.org/archive/samba/2005-March/101660.html


I am wondering where the samba team currently stand for this issue? Or is there 
anyone else interterested in this?

Thanks,
JX




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba Logs

2008-12-15 Thread Calderon, Willy (NIH/NINDS) [C]
Is there any way to confirm through the log file that users are actually
copying data off the server to their local machine versus just viewing
it? I want to be able to track how we monitor user access to the server

 

-Original Message-
From: Harry Jede [mailto:walk2...@arcor.de] 
Sent: Friday, December 12, 2008 2:59 PM
To: Calderon, Willy (NIH/NINDS) [C]
Subject: Re: [Samba] Samba Logs

Am Freitag, 12. Dezember 2008 20:41 schrieben Sie:
 I've asked this question before but got no answer.  Can anyone
 confirm what these logs mean? Do they come up when someone is copying
 files off the server to their local machine? Or is the person
 simultaneously opening dozen of documents.





 snippet

 ...

   johnsonc opened file johnsonc/My Documents/Articles, SL, Ha/Diaz NP
 rojo/ongoing ischemia in setting of amyloid CK.doc read=Yes write=No
 (numopen=11)

 [2006/11/25 10:46:36, 0] smbd/nttrans.c:call_nt_transact_ioctl(2463)
 call_nt_transact_ioctl(0x9005c): Currently not implemented.
a typical Windows Indexer behaviour. You should reconfigure your 
clients, so that the indexing service is not allowed at all, or at a 
minimum, not trying to index network shares :-)

-- 

Gruss
Harry Jede
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] pGINA and samba - authentication against LDAP userPassword field?

2008-12-15 Thread Rubin Bennett
On Mon, 2008-12-15 at 14:23 +, J Xu wrote:
 Hi,
 
 Back to a while ago, someone mentioned about taking pGINA code to samba, so 
 samba can work against LDAP authentication, but instead of using the 
 sambaNTPassword and sambaLMPassword, this way samba can use the userPassword 
 field directly.
 
 This sounds very promissing because we can then just use one set of 
 passwords. It may be not usable in a domain enviroment where machine accounts 
 and other complex stuff are difficult to hand. But it is perfectly okey for a 
 single linux machine in a workgroup mode. It can even provides user 
 authentication to other Windows box with pGINA installed and configured.
 
 Here is the original thread discussed about this:
   http://lists.samba.org/archive/samba/2005-March/101660.html
 
 
 I am wondering where the samba team currently stand for this issue? Or is 
 there anyone else interterested in this?
 
There's a project that does something like this called smbk5pwd.

Background:  We've deployed LDAP as the authentication backend for a
mixed environment: Samba DC, Windows XP workstations and LTSP server.
The logon credentials are the same across environments (i.e. 'userx' can
log in to both Windows workstations and LTSP clients).
We wanted our users to be able to update their passwords from either
environment; the Samba password change (i.e. on a Windows workstation)
works fine - the ldap server updates both the md5 hash and the NTLM hash
in the LDAP directory for that user.
We wanted similar functionality in the LTSP environment.  We found and
tried for a time to deploy smbk5pwd but have so far been unsuccessful.
That project seems like the most reasonable way to get where you are
wanting to get however... dimming the security, or adding functionality
that will certainly and spectacularly break other components of Samba
seems like a bad idea.
I would recommend contacting the smbk5pwd folks and see what they have
to say.

Hope that helps,
Rubin

 Thanks,
 JX
 
 
 
 
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba
-- 
Rubin Bennett
rbTechnologies, LLC
80 Carleton Boulevard
East Montpelier, VT 05651

(802)223-4448
http://thatitguy.com

Think for yourselves and let others enjoy the privilege to do so too.
  Voltaire, Essay on Tolerance
  French author, humanist, rationalist,  satirist (1694 - 1778)

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] idmap init ignoring domain ....

2008-12-15 Thread Mailing List SVR
I have this error on my samba pdc, seems something related to winbind,
my pdc worked fine for some months and now this error make login very
slow and sometime the users are unable to load their roaming profile,

any hints?

regards
Nicola

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] idmap init ignoring domain ....

2008-12-15 Thread Mailing List SVR
Il giorno lun, 15/12/2008 alle 16.55 +0100, Mailing List SVR ha scritto:
 I have this error on my samba pdc, seems something related to winbind,
 my pdc worked fine for some months and now this error make login very
 slow and sometime the users are unable to load their roaming profile,
 
 any hints?
 
 regards
 Nicola
 

My setup is samba+ldap, if you need other details please ask,

thanks
Nicola

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] replace winbind with ldap

2008-12-15 Thread Andrew Masterson
Try this:

http://osr600doc.sco.com/en/INT_sambaDocGuide/migration.html

 -Original Message-
 From: samba-bounces+andrew.masterson=nuvistaenergy@lists.samba.org

[mailto:samba-bounces+andrew.masterson=nuvistaenergy@lists.samba.org
]
 On Behalf Of vishesh kumar
 Sent: Monday, December 15, 2008 3:32 AM
 To: Madars Vitolins
 Cc: Samba List
 Subject: Re: [Samba] replace winbind with ldap
 
 dear madars
 
I am not migrating for interest but want to free server running
windows
 active directory. Group Policy has not been implemented in our
enviroment.
 
 thanks
 
 On Mon, Dec 15, 2008 at 1:59 PM, Madars Vitolins m...@silodev.eu wrote:
 
  Hi Vishesh,
 
  Why do you want to migrate to openLdap?
  Just for interest.
 
  One thing about your case I could say that openLdap won't support
group
  policy.
 
  Thanks,
  Madars
 
 
  vishesh kumar wrote:
 
  dear all
Currently i am using samba 3.0.28 with windbind on
rhel5.2.
 Our
  network consist almost 200 users and window 2003 active directory
which
  holds domain data. Now i want to replace active directory with
 openldap. I
  want to know is there any tool that help to migrate Active
Directory
 data
  to
  openldap ?
 
  thanks
 
 
 
 
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] replace winbind with ldap

2008-12-15 Thread vishesh kumar
dear madars

   I am not migrating for interest but want to free server running windows
active directory. Group Policy has not been implemented in our enviroment.

thanks

On Mon, Dec 15, 2008 at 1:59 PM, Madars Vitolins m...@silodev.eu wrote:

 Hi Vishesh,

 Why do you want to migrate to openLdap?
 Just for interest.

 One thing about your case I could say that openLdap won't support group
 policy.

 Thanks,
 Madars


 vishesh kumar wrote:

 dear all
   Currently i am using samba 3.0.28 with windbind on rhel5.2. Our
 network consist almost 200 users and window 2003 active directory which
 holds domain data. Now i want to replace active directory with openldap. I
 want to know is there any tool that help to migrate Active Directory data
 to
 openldap ?

 thanks




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] [ANNOUNCE] Samba 3.3.0rc2 Available for Download

2008-12-15 Thread Karolin Seeger
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Release Announcements
=

This is the second release candidate of Samba 3.3.0.  This is *not*
intended for production environments and is designed for testing
purposes only.  Please report any defects via the Samba bug reporting
system at https://bugzilla.samba.org/.

Major enhancements in Samba 3.3.0 include:

 Configuration/installation:
 o Splitting of library directory into library directory and separate
   modules directory.

 File Serving:
 o Extended Cluster support.

 Winbind:
 o Simplified idmap configuration.
 o New idmap backends adex and hash.
 o Added new parameter winbind reconnect delay.
 o Added support for user and group aliasing.
 o Added support for multiple domains to idmap_ad.

 Administrative tools:
 o The destination all of smbcontrol does now affect all running
   daemons including nmbd and winbindd.
 o New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands.
 o The 'net' utility can now use kerberos for joining and authentication.
 o The 'wbinfo' utility can now add, modify and remove identity mapping entries.

 Libraries:
 o NetApi library implements various new calls for User- and Group
   Account Management.


Configure changes
=

The configure option --with-libdir has been removed. The library
directory can still be specified by using the existing --libdir option.
A new option --with-modulesdir has been added to allow the specification
of a separate directory for the shared modules.


Winbind idmap backend changes
=

The idmap configuration has changed with version 3.3 to something that
allows a smoother upgrade path from pre-3.0.25 configurations that use
idmap backend. The reason for this change is that to many, also to Samba
developers, the 3.0.25 style configuration with idmap config turned out
to be very complex. Version 3.3 no longer deprecates the idmap backend
parameter, instead with idmap backend the default idmap backend is
specified.

Accordingly, the idmap config domain : default = yes setting is no
longer being looked at.

The alloc backend defaults to the default backend, which should be able to
allocate IDs. In the default distribution the tdb and ldap backends can
allocate, the ad and rid backends can not. The idmap alloc range is now
being set with the old parameters idmap uid and idmap gid.

The idmap domains parameter has been removed.


winbind reconnect delay
===

This is a new parameter which specifies the number of seconds the Winbind
daemon will wait between attempts to contact a Domain controller for a domain
that is determined to be down or not contactable.


Winbind's Name Aliasing
===

Name aliasing in Winbind is a feature that allows an administrator to
map a fully qualified user or group name from a Windows domain to a
convenient short name for Unix access.  This is similar to the username
map functionality supported by smbd but is primary intended for
clients and servers making use of Winbind's PAM and NSS libraries.

For example, the user DOMAIN\fred has been mapped to the Unix name
freddie.

   $ getent passwd DOMAIN\fred
   freddie:x:1000:1001:Fred Jones:/home/freddie:/bin/bash

   $ getent passwd freddie
   freddie:x:1000:1001:Fred Jones:/home/freddie:/bin/bash

The name aliasing support is provided by individual nss_info plugins.
For example, the new adex plugin reads the uid attribute from Active
Directory to make a short login name to the fully qualified name.
While the new hash module utilizes a local file to map short_name
= QUALIFIED\name.  Both user and group name mapping is supported.
Please refer to the winbind nss info option in smb.conf(5) and
to individual plugin man pages for further details.


idmap_hash
==

The idmap_hash plugin provides similar support as the idmap_rid
module.  However, uids and gids are generated from the full domain
SID using a hashing algorithm that maps the lower 19 bits from the user
or group RID to bits 0 - 19 in the Unix id and hashes 96 bits from
the domain SID to bits 20 - 30 in the Unix id.  The result is a 31 bit
uid or gid that is consistent across machines and provides support for
trusted domains.

Please refer to the idmap_hash(8) man page for more details.


idmap_adex
==

The adex idmap/nss_info plugin is an adaptation of the Likewise
Enterprise plugin with support for OU based cells removed
(since the Windows pieces to manage the cells are not available).

This plugin supports

  * The RFC2307 schema for users and groups.
  * Connections to trusted domains
  * Global catalog searches
  * Cross forest trusts
  * User and group aliases

Prerequisite: Add the following attributes to the Partial Attribute
Set in global catalog:

  * uidNumber
  * uid
  * gidNumber

A basic config using the current trunk code would look like:

[global]
idmap backend = adex
idmap uid = 1 - 

[Samba] samba filesystem limits

2008-12-15 Thread mokhtar

Hi

Is there some limitations about filesystem shared by samba

1) Max size of directory name
2) Max size of filename
3) Max number of filesin a directory
4) max number of directories in a directory
5)  Authorised characters for filename
6) Authorised characters for directory name

Any comment is welcome
-- 
View this message in context: 
http://www.nabble.com/samba-filesystem-limits-tp21011622p21011622.html
Sent from the Samba - General mailing list archive at Nabble.com.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Failed to join domain: failed to set machine spn: Constraint violation

2008-12-15 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Alex Green wrote:
 Found the issue:
 
 Validate Write for DNS and SPN were not set.
 
 However it now fails on DNS Update; I'm presuming 
 this is because we're not using AD Integrated DNS (MS-DNS).
 Could this not be an option flag to disable DNS updates
 in this scenario?

Those attributes and perms have nothing to do with DNS.  You
need full access rights to the computer object to join a machine
with a DNS name outside of the AD realm name.  That's what the
validated write means.





cheers, jerry
- --
=
Samba--- http://www.samba.org
Likewise Software  -  http://www.likewisesoftware.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJRoS5IR7qMdg1EfYRAq/nAKDa3GwgMI1SzbyuU6UBAKR/r2X/7ACdFAaj
Y5yzmHfOBD89pu0YXA5Y3fg=
=J1Lb
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba filesystem limits

2008-12-15 Thread mokhtar

Hi

Is there some limitations about filesystem shared by samba

1) Max size of directory name
2) Max size of filename
3) Max number of filesin a directory
4) max number of directories in a directory
5)  Authorised characters for filename
6) Authorised characters for directory name

Any comment is welcome
-- 
View this message in context: 
http://www.nabble.com/samba-filesystem-limits-tp21011662p21011662.html
Sent from the Samba - General mailing list archive at Nabble.com.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba problem

2008-12-15 Thread heena kaushik
Hi
I tried your suggestion-
export LD_LIBRARY_PATH=directory-where-libtalloc-lives
But still things are not working. I have installed samba in
/tmp/samba/samba-3.2.5.
I have installed samba in Unix, AIX server 5.2
The following are the steps of my installation.
-Configure
./configure --with-smbwrapper --with-smbmount \
--with-msdfs --with-syslog --with-utmp 21 | tee config.my.log
-Compile
make 21 | tee make.log
-Install
make install 21 | tee make-install.log.

I don't know how to proceed. I am still not able to start to samba daemons.
Can anyone please help me out.

Thans and regards
Heena Kaushik



 Original message 
Date: Fri, 12 Dec 2008 12:53:50 +0100
From: Volker Lendecke Volker.Lendecke at 
SerNet.DEhttps://lists.samba.org/mailman/listinfo/samba
Subject: Re: [Samba] problem regarding samba
To: heena kaushik heenakaushik at 
bharatpetroleum.inhttps://lists.samba.org/mailman/listinfo/samba
Cc: samba at lists.samba.orghttps://lists.samba.org/mailman/listinfo/samba 
samba at lists.samba.orghttps://lists.samba.org/mailman/listinfo/samba

On Fri, Dec 12, 2008 at 04:39:04PM +0530, heena kaushik wrote:
 Hi all
 I have installed samba in my UNIX server 5.2.But I am
 facing problem both in running swat and starting the samba
 daemons.
 When I type http:/localhost:901 in IE it gives the
 following error
 exec(): 0509-036 Cannot load program swat because of the
 following errors: 0509-150 Dependent module libtalloc.so
 could not be loaded. 0509-022 Cannot load module
 libtalloc.so. 0509-026 System error: A file or directory
 in the path name does not exist.

You should do an

export LD_LIBRARY_PATH=directory-where-libtalloc-lives


Unless this is AIX, which it sounds like it is, and probably running the 
prebuilt pWare code. :-)

Is this the case, Heena?


Cheers,
Bill


Volker

application.pgp-signature (1k bytes)





Disclaimer***
The information contained in this message is BPCL's Confidential and 
Proprietary information and is intended only for the use of the recipient(s) 
named above.  If the reader of this message is not the intended recipient, 
he/she is hereby notified that any use, dissemination, distribution, or copying 
of this communication or any of its content is strictly prohibited. In such 
case, please advise the sender immediately and delete it from your system.  
Further acknowledge that any views expressed in this message are those of the 
individual sender and no binding nature of the message shall be implied or 
assumed unless the sender does so expressly with due authority of BPCL.
***
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] replace winbind with ldap

2008-12-15 Thread Madars Vitolins

Well,

I would like to know the actual reason :)
Is the licence price too high?
Stability of the Win2003 Server?
Or... virus posibilities?
Something else?

Well, I have similar situation, with not such count of client machines, 
but plan is to migrate to samba. I just wanted to know your reason.


Thanks,
Madars


vishesh kumar wrote:

dear madars

   I am not migrating for interest but want to free server running 
windows active directory. Group Policy has not been implemented in our 
enviroment.


thanks

On Mon, Dec 15, 2008 at 1:59 PM, Madars Vitolins m...@silodev.eu wrote:

Hi Vishesh,

Why do you want to migrate to openLdap?
Just for interest.

One thing about your case I could say that openLdap won't support
group policy.

Thanks,
Madars


vishesh kumar wrote:

dear all
  Currently i am using samba 3.0.28 with windbind on
rhel5.2. Our
network consist almost 200 users and window 2003 active
directory which
holds domain data. Now i want to replace active directory with
openldap. I
want to know is there any tool that help to migrate Active
Directory data to
openldap ?

thanks
 





--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba One Click Install

2008-12-15 Thread Jim McDonough
On Mon, Dec 15, 2008 at 12:43 AM, Mark Condic con...@comcast.net wrote:
 Given that samba is a pretty active development, any thoughts of a One Click
 Install (a YMP file) ?

 In openSUSE, the current kernel distribution usually freezes applications
 like samba at the current level.  Is there an easy way (besides using wget
 on each module, and rpm on each module to install later stable releases of
 samba?  Sure would make my job a little easier.
Mark, the openSUSE build service provides both of these...go to
http://software.opensuse.org/search, and type in samba, and select
your distro.  You should see the various trees we're building.




-- 
Jim McDonough
Samba Team
jmcd at samba dot org
jmcd at themcdonoughs dot org
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Failed to join domain: failed to set machine spn: Constraint violation

2008-12-15 Thread Alex Green
Hey Jerry,

I'm aware of that.  Due the restrictions placed within our AD environment, even 
users who have access to create computer objects don't have access to update 
the SPN or the host DNS name (AD record).

Additionally, my point was more; would it be possible to turn off the DNS 
update process by means of flag, rather than compile time option.

Regards,
Alex

-Original Message-
From: Gerald (Jerry) Carter [mailto:je...@samba.org]
Sent: 15 December 2008 16:50
To: Alex Green
Cc: Guenther Deschner; samba@lists.samba.org
Subject: Re: [Samba] Failed to join domain: failed to set machine spn: 
Constraint violation

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Alex Green wrote:
 Found the issue:

 Validate Write for DNS and SPN were not set.

 However it now fails on DNS Update; I'm presuming
 this is because we're not using AD Integrated DNS (MS-DNS).
 Could this not be an option flag to disable DNS updates
 in this scenario?

Those attributes and perms have nothing to do with DNS.  You
need full access rights to the computer object to join a machine
with a DNS name outside of the AD realm name.  That's what the
validated write means.





cheers, jerry
- --
=
Samba--- http://www.samba.org
Likewise Software  -  http://www.likewisesoftware.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJRoS5IR7qMdg1EfYRAq/nAKDa3GwgMI1SzbyuU6UBAKR/r2X/7ACdFAaj
Y5yzmHfOBD89pu0YXA5Y3fg=
=J1Lb
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba 3.2.6 link error

2008-12-15 Thread George Sherwood
No problems building samba 3.2.5, but having a link error with 3.2.6.
Haven't been able to find a solution.

Compiling nsswitch/wins.c
Linking nsswitch/libnss_wins.so
/tmp/ccvWgbGU.o: In function `main':
mount.cifs.c:(.text+0x1f29): undefined reference to `unlock_mtab'
mount.cifs.c:(.text+0x1f33): undefined reference to `lock_mtab'
mount.cifs.c:(.text+0x1f7a): undefined reference to `unlock_mtab'
mount.cifs.c:(.text+0x20c8): undefined reference to `unlock_mtab'
collect2: ld returned 1 exit status

Any ideas?

George 

-- 
George Sherwood
Source Mage GNU/Linux Lead Developer
http://www.sourcemage.org


signature.asc
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Failed to join domain: failed to set machine spn: Constraint violation

2008-12-15 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Alex Green wrote:
 Hey Jerry,
 
 I'm aware of that.  Due the restrictions placed within our AD 
 environment, even users who have access to create computer
 objects don't have access to update the SPN or the
 host DNS name (AD record).
 
 Additionally, my point was more; would it be possible to turn 
 off the DNS update process by means of flag, rather than
 compile time option.

Youu confused me by saying DNS update.  Assuming now you mean
just updating the dNSHostName and SPN attributes.  This is always
required in order to support Krb5 authentication.  This is exactly
what Windows XP does.

The DDNS update you are asking about (i.e. the--with-dnsupdate option)
has nothing to do with setting the attributes.  If the DDNS update fails,
it is not fatal.  You only get a warning.






cheers, jerry
- --
=
Samba--- http://www.samba.org
Likewise Software  -  http://www.likewisesoftware.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJRp7FIR7qMdg1EfYRAp/rAKC5IVsTNBNzIxE62FL5QaYfqMKzWQCfQxW8
GxpmNokZm3stFwqgHrFiC8g=
=SEGF
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Failed to join domain: failed to set machine spn: Constraint violation

2008-12-15 Thread Alex Green
:)... it's this non-fatal error that our uses are getting confused about and 
it's this that I was asking for the cli option for...


-Original Message-
From: Gerald (Jerry) Carter [mailto:je...@samba.org]
Sent: 15 December 2008 18:16
To: Alex Green
Cc: samba@lists.samba.org
Subject: Re: [Samba] Failed to join domain: failed to set machine spn: 
Constraint violation

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Alex Green wrote:
 Hey Jerry,

 I'm aware of that.  Due the restrictions placed within our AD
 environment, even users who have access to create computer
 objects don't have access to update the SPN or the
 host DNS name (AD record).

 Additionally, my point was more; would it be possible to turn
 off the DNS update process by means of flag, rather than
 compile time option.

Youu confused me by saying DNS update.  Assuming now you mean
just updating the dNSHostName and SPN attributes.  This is always
required in order to support Krb5 authentication.  This is exactly
what Windows XP does.

The DDNS update you are asking about (i.e. the--with-dnsupdate option)
has nothing to do with setting the attributes.  If the DDNS update fails,
it is not fatal.  You only get a warning.






cheers, jerry
- --
=
Samba--- http://www.samba.org
Likewise Software  -  http://www.likewisesoftware.com
What man is a man who does not make the world better?  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJRp7FIR7qMdg1EfYRAp/rAKC5IVsTNBNzIxE62FL5QaYfqMKzWQCfQxW8
GxpmNokZm3stFwqgHrFiC8g=
=SEGF
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba configuration for win98, win2k and winxp clients

2008-12-15 Thread Mark Condic

Dear TIA,

I also have tried to do this with Windows98  windowsXP.
see the thread [Samba] newbie question/authenticate from Nov. 30th.

I was looking for a simple way, so that students did not have to 
log-on to the computers.


Here is what I have found out so far, (and I would appreciate your 
follow up if you get this to work in windows98):


First,

I have only been very successful with Samba 3.2.6.
Windows98se does not have a /user: option, so this does not work with 
Win98se.  Help?
I have setup username/password accounts in Linux and also the same 
username/password using smbpasswd.
(can anyone tell me if webmin or swat can do this in one step, or do 
I need my own script to do this?)


If the users are log-in, with the same username and password, they 
can access the students directory without the need of my 
script.  If they are not log-into Windows XP, then I created a script 
(with help from others on the list,


[global]
workgroup = 
interfaces = 192.168.1.203/255.255.255.0
bind interfaces only = Yes
security = SHARE
map to guest = Bad User
log level = 2
smb ports = 139
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
printcap name = /etc/printcap
mangling method = hash
os level = 255
preferred master = Yes
case sensitive = No
mangled names = No

[students]
comment = Work area files
path = /students/%U
read only = No

[teacher]
comment = Master work area files
path = /students
valid users = teacher
read only = No

I then created three batch files,

netuser.bat
@echo off
set/p Username=Enter your Username:
rem disconnects s: incase a user forgot to logoff
net use s: /delete /y
rem the net use with a * password will prompt for a password
net use s: \\test203\students /USER:%Username% * /persistent:no
dir s:
rem the last pause will allow us to see any error messages incase of errors
Pause

This batch allows me the teacher to have access to all of the students work

teacher.bat
@echo off
set/p Username=Enter your Username:
rem disconnects s: incase a user forgot to logoff
net use s: /delete /y
rem the net use with a * password will prompt for a password
net use s: \\test203\teacher /USER:%Username% * /persistent:no
dir s:
rem the last pause will allow us to see any error messages incase of errors
Pause

netlogoff.bat
@echo off
rem disconnects s: incase a user forgot to logoff
net use s: /delete /y
dir s:
rem the last pause will allow us to see any error messages incase of errors
Pause

Now if there was a real easy way to get this to work with 
win98se.  Please let me know.

I have not tried this yet in the entire class.  Over break I will.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Failed to join domain: failed to set machine spn: Constraint violation

2008-12-15 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Alex Green wrote:
 :)... it's this non-fatal error that our uses are getting 
 confused about and it's this that I was asking for the cli
 option for...

For the DDNS update we can add a disable run time option.
For setting the attributes, failing is the right thing to do I believe.

What version of Samba are you running?




cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJRqXTIR7qMdg1EfYRAjlhAKDxjq2msUYQG6o4lKET78J55XpmpgCdFS9K
Ttlu3rVaEVLz4AYEO1nqltA=
=2cVK
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] idmap init ignoring domain ....

2008-12-15 Thread Mailing List SVR
Il giorno lun, 15/12/2008 alle 17.16 +0100, Mailing List SVR ha scritto:
 Il giorno lun, 15/12/2008 alle 16.55 +0100, Mailing List SVR ha scritto:
  I have this error on my samba pdc, seems something related to winbind,
  my pdc worked fine for some months and now this error make login very
  slow and sometime the users are unable to load their roaming profile,
  
  any hints?
  
  regards
  Nicola
  
 
 My setup is samba+ldap, if you need other details please ask,
 
 thanks
 Nicola
 

additionally 

net rpc join -S domainname -U root

return 

Unable to find a suitable server


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] replace winbind with ldap

2008-12-15 Thread Michael Heydon



   I am not migrating for interest but want to free server running windows
active directory. Group Policy has not been implemented in our enviroment.
  

Samba 3.x with LDAP is not active directory, it is simply an NT4 style 
domain controller which happens to store it's user information in LDAP.


I believe vampire is the tool you are after.

*Michael Heydon - IT Administrator *
micha...@jaswin.com.au mailto:micha...@jaswin.com.au

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Creating folders while preserving sharing group

2008-12-15 Thread Ooi Kwan Chen

Hi there,

I'm using Samba 3.0.24-6etch10 in Debian Etch 64bit with kernel Linux 
2.6.18-6-amd64.


Here is my case scenario.

I have created a folder to be shared with other group users. The 
ownership for the folders are showed as below:


Directory path:~/Share/

drwxr-x--- 25 admin data  4096 2008-05-05 13:42 file1107
drwxr-x--- 25 admin data  4096 2008-11-13 14:57 file1207

When the admin group users created a folder under the Share directory, 
it is showed as below:


drwxr-  2 admin admin 4096 2008-12-15 11:45 New Folder

I wanted the folder to have admin:data kind of ownership whenever the 
admin users created a file or a folder. Is it possible to do that?


Here's my smb.conf file

[Share]
  comment = Share
  path = /Share
  read only = No
  create mask = 0640
  directory mask = 0740

[global]
  workgroup = IT
  netbios name = ITSHARE
  server string = %h server
  security = USER
  encrypt passwords = No
  passwd program = /usr/bin/passwd %u
  passwd chat = *Enter\snew\sUNIX\spassword:* %n\n 
*Retype\snew\sUNIX\spassword:* %n\n *password\supdated\ssuccessfully* .

  syslog = 0
  log file = /var/log/samba/log.%m
  max log size = 1000
  os level = 64
  local master = No
  domain master = No
  dns proxy = No
  wins support = Yes
  panic action = /usr/share/samba/panic-action %d
  invalid users = root
  read list = data
  write list = admin
  hosts allow = 192.168.11.0/24 192.168.10.0/24

Appreciate your all kind suggestions. Thank you

--
Best regards,

Ooi Kwan Chen (John), System Support, Server Management Section,
Group IT Department, DXN Holdings Berhad
Office Phone : +604 771 6688 Ext 122 Fax : +604 772 4785
Website : www.dxn2u.com 


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] replace winbind with ldap

2008-12-15 Thread vishesh kumar
Dear madars




On Mon, Dec 15, 2008 at 4:44 PM, Madars Vitolins m...@silodev.eu wrote:

 Well,

 I would like to know the actual reason :)
 Is the licence price too high?
 Stability of the Win2003 Server?
 Or... virus posibilities?
 Something else?

 Well, I have similar situation, with not such count of client machines, but
 plan is to migrate to samba. I just wanted to know your reason.

 Thanks,
 Madars


 vishesh kumar wrote:

 dear madars

I am not migrating for interest but want to free server running windows
 active directory. Group Policy has not been implemented in our enviroment.

 thanks

 On Mon, Dec 15, 2008 at 1:59 PM, Madars Vitolins 
 m...@silodev.eum...@silodev.euwrote:

 Hi Vishesh,

 Why do you want to migrate to openLdap?
 Just for interest.

 One thing about your case I could say that openLdap won't support group
 policy.

 Thanks,
 Madars

 vishesh kumar wrote:

 dear all
   Currently i am using samba 3.0.28 with windbind on rhel5.2. Our
 network consist almost 200 users and window 2003 active directory which
 holds domain data. Now i want to replace active directory with openldap.
 I
 want to know is there any tool that help to migrate Active Directory data
 to
 openldap ?

 thanks





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] replace winbind with ldap

2008-12-15 Thread vishesh kumar
Dear madars

   since linux server is already running in our enviroment then
why waste money on windows license too. Another reason is maintaining
multiple server is just wastage of resources if all purpose all be solved by
one linux server only

thanks
On Mon, Dec 15, 2008 at 4:44 PM, Madars Vitolins m...@silodev.eu wrote:

 Well,

 I would like to know the actual reason :)
 Is the licence price too high?
 Stability of the Win2003 Server?
 Or... virus posibilities?
 Something else?

 Well, I have similar situation, with not such count of client machines, but
 plan is to migrate to samba. I just wanted to know your reason.

 Thanks,
 Madars


 vishesh kumar wrote:

 dear madars

I am not migrating for interest but want to free server running windows
 active directory. Group Policy has not been implemented in our enviroment.

 thanks

 On Mon, Dec 15, 2008 at 1:59 PM, Madars Vitolins 
 m...@silodev.eum...@silodev.euwrote:

 Hi Vishesh,

 Why do you want to migrate to openLdap?
 Just for interest.

 One thing about your case I could say that openLdap won't support group
 policy.

 Thanks,
 Madars

 vishesh kumar wrote:

 dear all
   Currently i am using samba 3.0.28 with windbind on rhel5.2. Our
 network consist almost 200 users and window 2003 active directory which
 holds domain data. Now i want to replace active directory with openldap.
 I
 want to know is there any tool that help to migrate Active Directory data
 to
 openldap ?

 thanks





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[ANNOUNCE] Samba 3.2.6 Available for Download

2008-12-15 Thread Karolin Seeger
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

===
Myths are public dreams,
 dreams are private myths.

Joseph Campbell
===

Release Announcements
=


This is a bug fix release of the Samba 3.2 series.

Major enhancements included in Samba 3.2.6 are:

  o Fix Winbind crash bugs.
  o Fix moving of readonly files.
  o Fix write list in setups using security = share.
  o Fix access to cups-printers with cups 1.3.4.
  o Fix timeouts in setups with large groups.
  o Fix several bugs concerning Alternate Data Streams.
  o Add new SMB traffic analyzer VFS module.


##
Changes
###

Changes since 3.2.5
- ---


o   Michael Adam ob...@samba.org
* BUG 5677: Fix test_{shlibs,nss_modules,pam_modules} on Solaris.
* BUG 5765: Fix installlibs on solaris by using portable test -r.
* Fix potential segfault in vfs_tsmsm.
* Don't list the domain twice when expanding internal aliases.
* Fix the output of getent group when winbind use default domain = yes
  with security = ads.
* Add domain prefix to username in lookup_groupmem().
* Prevent negative GM/ cache entries due to broken connections.
* Fix crash in sync_eventlog_params().
* Fix timeouts when calling 'getgrent'.
* Fix smbd hanging on Solaris when winbindd closes socket.


o   Jeremy Allison j...@samba.org
* BUG 1254: Fix write list in setups using security = share.
* BUG 5080: Fix access to cups-printers with cups 1.3.4.
* BUG 5737: Fix Winbind crash in an unusual failure mode.
* BUG 5783: Fix FindFirst where search pattern equals the mangled filename.
* BUG 5790: Fix returning of STATUS_OBJECT_NAME_NOT_FOUND on set file
  disposition.
* BUG 5797: Fix moving of readonly files.
* BUG 5814: Fix Winbind crash bug while doing rescan_trusted_domain.
* BUG 5818: Sort ACEs in smbcacl output properly and honor inheritance.
* BUG 5825: Fix account locking with LDAP backend.
* BUG 5826: Fix truncated filenames when accessing old servers.
* BUG 5889: Fix delete veto files = no.
* BUG 5891: Fix smbd crash when viewing the eventlog exported by eventlog
  list.
* BUG 5900: Fix vfs_readonly.
* BUG 5903: Fix vfs_streams_xattr breaking contents of files.
* BUG 5904: Fix libnss_wins causing SIGABRT while servicing getaddrinfo()
  request.
* BUG 5914: Fix build failure: redefinition of struct name_list.
* BUG 5937: Fix filenames with * char hiding other files.
* BUG 5953: Fix smbclient crashes.
* Fix rename_open_files.
* Restructure VFS SMB traffic analyzer VFS module.
* Correctly fix smbclient to terminate on eof from server.
* Unify access checks for lsa server functions.
* Remove the requirement for ldap call made as root.
* Cope with MAXIMUM_ALLOWED_ACCESS requests when opening handles.
* Fix net rpc vampire, based on an *amazing* piece of debugging work by
  Cooper S. Blake the_analog...@yahoo.com.
* Fix Coverity IDs 456, 574, 592, 606 and 607.
* Fix net rpc vampire.


o   Gerald (Jerry) Carter je...@samba.org
* Use the same prerequisite for DDNS update as Windows XP.
* Make lwinet ads dns register honor the interfaces parameter.


o   Steven Danneman steven.danne...@isilon.com
* Fix extended DN parse error when AD object does not have a SID.


o   Guenther Deschner g...@samba.org
* BUG 5888: Fix PNP_GetHwProfInfo().
* BUG 5957: Do not abort rename process on valid rename script.
* BUG 5898: Fix 'net rpc shutdown'.
* Fix duplicate installation of cifs.upcall.
* Fix _srvsvc_NetShareAdd segfault.
* Ensure consistency when reporting password complexity.
* Fix _lsa_GetUserName.
* Fix access check in _samr_QuerySecurity().
* _samr_DeleteUser needs to wipe out the user_handle on success.
* NetGroupEnum_r needs to handle servers with no groups.


o   Mathias Dietz mdi...@de.ibm.com
* Search for gpfs functions in both libgpfs_gpl.so an libgpfs.so.


o   Dina Fine d...@exanet.com
* BUG 5908: Fix internal change notify on shared directory.


o   Nils Goroll nils.gor...@hamburg.de
* BUG 5135 and 5446: Prevent calling POSIX ACL vfs methods on zfs share.


o   Henning Henkel henning.hen...@fh-furtwangen.de
* BUG 5929: Fix building of vfs_prealloc with option --with-cluster-support
  and GPFS.


o   Holger Hetterich hhet...@novell.com
* Add new VFS module to analyze SMB traffic


o   Tomasz Krasuski kr0...@poczta.onet.pl
* BUG 5928: Fix 'testparm --version'.


o   Jeff Layton jlay...@redhat.com
* Have uppercase_string return success on NULL pointer in mount.cifs.
* Make mount.cifs return codes match the 

[ANNOUNCE] Samba 3.3.0rc2 Available for Download

2008-12-15 Thread Karolin Seeger
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Release Announcements
=

This is the second release candidate of Samba 3.3.0.  This is *not*
intended for production environments and is designed for testing
purposes only.  Please report any defects via the Samba bug reporting
system at https://bugzilla.samba.org/.

Major enhancements in Samba 3.3.0 include:

 Configuration/installation:
 o Splitting of library directory into library directory and separate
   modules directory.

 File Serving:
 o Extended Cluster support.

 Winbind:
 o Simplified idmap configuration.
 o New idmap backends adex and hash.
 o Added new parameter winbind reconnect delay.
 o Added support for user and group aliasing.
 o Added support for multiple domains to idmap_ad.

 Administrative tools:
 o The destination all of smbcontrol does now affect all running
   daemons including nmbd and winbindd.
 o New 'net rpc vampire keytab' and 'net rpc vampire ldif' commands.
 o The 'net' utility can now use kerberos for joining and authentication.
 o The 'wbinfo' utility can now add, modify and remove identity mapping entries.

 Libraries:
 o NetApi library implements various new calls for User- and Group
   Account Management.


Configure changes
=

The configure option --with-libdir has been removed. The library
directory can still be specified by using the existing --libdir option.
A new option --with-modulesdir has been added to allow the specification
of a separate directory for the shared modules.


Winbind idmap backend changes
=

The idmap configuration has changed with version 3.3 to something that
allows a smoother upgrade path from pre-3.0.25 configurations that use
idmap backend. The reason for this change is that to many, also to Samba
developers, the 3.0.25 style configuration with idmap config turned out
to be very complex. Version 3.3 no longer deprecates the idmap backend
parameter, instead with idmap backend the default idmap backend is
specified.

Accordingly, the idmap config domain : default = yes setting is no
longer being looked at.

The alloc backend defaults to the default backend, which should be able to
allocate IDs. In the default distribution the tdb and ldap backends can
allocate, the ad and rid backends can not. The idmap alloc range is now
being set with the old parameters idmap uid and idmap gid.

The idmap domains parameter has been removed.


winbind reconnect delay
===

This is a new parameter which specifies the number of seconds the Winbind
daemon will wait between attempts to contact a Domain controller for a domain
that is determined to be down or not contactable.


Winbind's Name Aliasing
===

Name aliasing in Winbind is a feature that allows an administrator to
map a fully qualified user or group name from a Windows domain to a
convenient short name for Unix access.  This is similar to the username
map functionality supported by smbd but is primary intended for
clients and servers making use of Winbind's PAM and NSS libraries.

For example, the user DOMAIN\fred has been mapped to the Unix name
freddie.

   $ getent passwd DOMAIN\fred
   freddie:x:1000:1001:Fred Jones:/home/freddie:/bin/bash

   $ getent passwd freddie
   freddie:x:1000:1001:Fred Jones:/home/freddie:/bin/bash

The name aliasing support is provided by individual nss_info plugins.
For example, the new adex plugin reads the uid attribute from Active
Directory to make a short login name to the fully qualified name.
While the new hash module utilizes a local file to map short_name
= QUALIFIED\name.  Both user and group name mapping is supported.
Please refer to the winbind nss info option in smb.conf(5) and
to individual plugin man pages for further details.


idmap_hash
==

The idmap_hash plugin provides similar support as the idmap_rid
module.  However, uids and gids are generated from the full domain
SID using a hashing algorithm that maps the lower 19 bits from the user
or group RID to bits 0 - 19 in the Unix id and hashes 96 bits from
the domain SID to bits 20 - 30 in the Unix id.  The result is a 31 bit
uid or gid that is consistent across machines and provides support for
trusted domains.

Please refer to the idmap_hash(8) man page for more details.


idmap_adex
==

The adex idmap/nss_info plugin is an adaptation of the Likewise
Enterprise plugin with support for OU based cells removed
(since the Windows pieces to manage the cells are not available).

This plugin supports

  * The RFC2307 schema for users and groups.
  * Connections to trusted domains
  * Global catalog searches
  * Cross forest trusts
  * User and group aliases

Prerequisite: Add the following attributes to the Partial Attribute
Set in global catalog:

  * uidNumber
  * uid
  * gidNumber

A basic config using the current trunk code would look like:

[global]
idmap backend = adex
idmap uid = 1 - 

[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-4691-g34f96b0

2008-12-15 Thread Karolin Seeger
The branch, v3-3-test has been updated
   via  34f96b0cdcee3a8ab6612313e70b682f2aa29538 (commit)
  from  79d68083411e9119933dbf5c850cb78f47e6f553 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test


- Log -
commit 34f96b0cdcee3a8ab6612313e70b682f2aa29538
Author: Karolin Seeger ksee...@samba.org
Date:   Mon Dec 15 09:10:11 2008 +0100

WHATSNEW: Update changes since 3.3.0rc1.

Karolin

---

Summary of changes:
 WHATSNEW.txt |4 
 1 files changed, 4 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 50d62da..b5aac3f 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -201,6 +201,7 @@ o   Steve French ste...@smf-t60p.smfdom
 
 o   SATOH Fumiyasu fumi...@osstech.co.jp
 * BUG 5688: LPQ process is orphaned if socket address parameter is invalid.
+* Vars for signals must be volatile sig_atomic_t.
 
 
 o   Henning Henkel henning.hen...@fh-furtwangen.de
@@ -219,6 +220,8 @@ o   Jeff Layton jlay...@redhat.com
 o   Volker Lendecke v...@samba.org
 * Fix crash bug when freeing a non-malloc'ed buffer if the client sends a
   non-encrypted packet with the crypto state set.
+* Fix error code when smbclient puts a file over an existing directory.
+* Pass the get_real_filename operation through the VFS.
 
 
 o   Stefan Metzmacher me...@samba.org
@@ -226,6 +229,7 @@ o   Stefan Metzmacher me...@samba.org
 * Fix several issues concerning Alternate Data Streams.
 * Fix valgrind bug lp_parm_const_string().
 * Fix setting of trust passwords using 'net rpc trustdom add'.
+* Correctly detect if the current dc is the closest one.
 
 
 o   Tim Prouty tpro...@samba.org


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-3-stable updated - release-3-3-0rc1-157-g6dc46a0

2008-12-15 Thread Karolin Seeger
The branch, v3-3-stable has been updated
   via  6dc46a003865d7f59a32de2c470ad3c21f8ae86c (commit)
   via  2b5958164134bffa74d835b884b8a2e9309e1ae9 (commit)
   via  ce7d58a8a8626300b4b6861e54cf23db526b0e8b (commit)
   via  83961fe48051d1c70c62a6eb72cd048305710cfb (commit)
   via  9725ffc9e60bb598f6d544ebd166ea29d528f5fa (commit)
   via  a27fb2d8d66883762e8e85e573eefbb155ddccd7 (commit)
   via  dca9cd5e06dc3dc3109671f99b22862f4aaa3dad (commit)
   via  45de61f9b3a2713e2e27178cc336e25c1fc1b15a (commit)
   via  91cf9a3cb068b9ccc31e7e7ea659e0d467277398 (commit)
   via  be06858f9174c0b97506ee85c40848a57aeaaca7 (commit)
   via  ca86e6ae361434e9ecc8bff76cf670806886beac (commit)
   via  e0983f0d93b0a6f5c2588609ebfa2e981dce0cfc (commit)
   via  8df2422c7a1654db44c33bd871d13da1a531079d (commit)
  from  807365d2cb15ea468e53449023299d17914b68dc (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-stable


- Log -
commit 6dc46a003865d7f59a32de2c470ad3c21f8ae86c
Author: Karolin Seeger ksee...@samba.org
Date:   Mon Dec 15 09:10:11 2008 +0100

WHATSNEW: Update changes since 3.3.0rc1.

Karolin
(cherry picked from commit 34f96b0cdcee3a8ab6612313e70b682f2aa29538)

commit 2b5958164134bffa74d835b884b8a2e9309e1ae9
Author: Karolin Seeger ksee...@samba.org
Date:   Mon Dec 15 08:59:11 2008 +0100

VERSION: Change version to 3.3.0rc2.

Karolin

commit ce7d58a8a8626300b4b6861e54cf23db526b0e8b
Author: Herb Lewis h...@samba.org
Date:   Sat Dec 13 12:18:15 2008 -0800

don't return 0 on error - bad for scripts
(cherry picked from commit 79d68083411e9119933dbf5c850cb78f47e6f553)

commit 83961fe48051d1c70c62a6eb72cd048305710cfb
Author: Stefan Metzmacher me...@samba.org
Date:   Fri Nov 21 08:28:13 2008 +0100

s3:dsgetdcname: retry with the clients site

metze
(cherry picked from commit 1b7b0e924f3064a9774fd5d46bedc3d342b39ddb)
(cherry picked from commit f7a811f2ae3572791035014b6e20410b07ea011e)

commit 9725ffc9e60bb598f6d544ebd166ea29d528f5fa
Author: Stefan Metzmacher me...@samba.org
Date:   Fri Nov 21 08:22:38 2008 +0100

s3:libnet_join: use DS_FORCE_REDISCOVERY

metze
(cherry picked from commit 2bb91392b46e347fe3b6803d10b10d8b40e4a4a6)
(cherry picked from commit 134893ef2b12b4b039c717588a8172613f6d1955)

commit a27fb2d8d66883762e8e85e573eefbb155ddccd7
Author: Stefan Metzmacher me...@samba.org
Date:   Mon Oct 27 19:40:23 2008 +0100

s3:libnet_join: call saf_join_store() after a the join.

metze

Signed-off-by: Stefan Metzmacher me...@samba.org
Signed-off-by: Günther Deschner g...@samba.org
(similar to commit feef594d275881466e2c3f59c0ff54609a9cc53b)
(cherry picked from commit 6a993cb333675f4079d439fa334edee2df604933)
(cherry picked from commit 8314ce63ff77f0472d4249adcea87123b3b3f5c2)

commit dca9cd5e06dc3dc3109671f99b22862f4aaa3dad
Author: Stefan Metzmacher me...@samba.org
Date:   Mon Oct 27 19:39:30 2008 +0100

s3:libads/ldap.c: store the dc name in the saf cache as in all other places

metze

Signed-off-by: Stefan Metzmacher me...@samba.org
Signed-off-by: Günther Deschner g...@samba.org
(cherry picked from commit 543fa85a711337e979c7b631bda5db95d109ef59)
(cherry picked from commit 17efebde11eafd065c2cac39cdbe55b8d40d40be)
(cherry picked from commit 9e78bfdbe107519f2ddfa4d532771945a7691b46)

commit 45de61f9b3a2713e2e27178cc336e25c1fc1b15a
Author: Stefan Metzmacher me...@samba.org
Date:   Mon Oct 27 19:38:15 2008 +0100

s3:libads/ldap.c: if the client belongs to no site at all any dc is the 
closest

metze

Signed-off-by: Stefan Metzmacher me...@samba.org
Signed-off-by: Günther Deschner g...@samba.org
(cherry picked from commit f86ef9b53a903485deba94febf90dd4e657cc02b)
(cherry picked from commit a8040d59659e58c5cb92c1107a7ff012eff12729)
(cherry picked from commit 7baceea20252dec6b64e86ec8b5a73b62b373758)

commit 91cf9a3cb068b9ccc31e7e7ea659e0d467277398
Author: Stefan Metzmacher me...@samba.org
Date:   Mon Oct 27 19:36:25 2008 +0100

s3:libads/ldap.c: pass the real workgroup name to get_dc_name()

metze

Signed-off-by: Stefan Metzmacher me...@samba.org
Signed-off-by: Günther Deschner g...@samba.org
(cherry picked from commit c2d4a84abe1b6cbf68d6e9f1bb1f8974d0b628fc)
(cherry picked from commit 2f27ffc4a2ba745341a5961b8f04e62da3fb089a)
(cherry picked from commit 132911954715bfa6df8566c0fb382ef07a7da96e)

commit be06858f9174c0b97506ee85c40848a57aeaaca7
Author: Stefan Metzmacher me...@samba.org
Date:   Mon Oct 27 19:31:30 2008 +0100

s3:libsmb/namequery.c: add saf_join_store() function

saf_join_store() should be called after a successful
domain join, the affinity to the dc used at join time
has a larger ttl, to avoid problems with delayed replication.

metze

   

[SCM] Samba Shared Repository - annotated tag release-3-3-0rc2 created - release-3-3-0rc2

2008-12-15 Thread Karolin Seeger
The annotated tag, release-3-3-0rc2 has been created
at  87c835f86e9c2b7caad5eb688ec71e7fdce5c139 (tag)
   tagging  6dc46a003865d7f59a32de2c470ad3c21f8ae86c (commit)
  replaces  release-3-3-0rc1
 tagged by  Karolin Seeger
on  Mon Dec 15 10:00:39 2008 +0100

- Log -
tag release-3-3-0rc2
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.4-svn0 (GNU/Linux)

iD8DBQBJRhzUbzORW2Vot+oRAv88AJ9Ypj3bR+ju8pifctjFX1SQ5ZlPVACeNqbe
yCf6nns2tIRQagXN0WSuPg8=
=kSuy
-END PGP SIGNATURE-

Bo Yang (1):
  Fix script installmo.sh when no .po file exists

Dan Sledz (2):
  Fix logging to syslog
  Use strtoul since id types are unsigned

Günther Deschner (49):
  samr: fix samr_UserInfo24 and samr_UserInfo26.
  s3-build: re-run make samba3-idl.
  s3-samr: fix init_samr_user_info{23,24} callers.
  s3-samr: add init_samr_user_info25 and init_samr_user_info26.
  s3-libnetjoin: remove unused md4_trust_password, found by metze.
  s3-libnetjoin: Fix bug #5749. Re-set acctflags while joining. fix from 
metze.
  s3-net: allow to list a keytab generated using net rpc vampire.
  s3-samr: never allow to alter pwdlastset directly.
  s3-samr: fix return code for invalid password sets in SetUserInfo.
  s3-samr: fix various potential memleaks in samr_SetUserInfo.
  s3-ldapsam: Fix Bug 5957: do not abort rename process on valid rename 
script.
  s3: merge german pam_winbind message translations from master.
  s3-samr: add init_samr_user_info5.
  s3-samr: add support for _samr_QueryUserInfo level 5.
  s3-samr: support samr_QueryUserInfo2 as well.
  s3-samr: support samr_CreateUser as well.
  s3-samr: avoid enumeration and user creation on builtin domain handle.
  s3-samr: fix return code for invalid name in _samr_LookupDomain.
  s3-samr: _samr_EnumDomainUsers always returns a sam array (even w/o 
users).
  s3-samr: fix samr_SetUserInfo{2} level 23.
  s3-samr: simplify _samr_QueryUserInfo a lot and fix some few potential 
memleaks.
  s3-samr: refuse do process UserSetInfo with 0 fields_present.
  samr: fix samr_UserInfo18. It also contains password_expired, thanks 
metze.
  samr: fix samr_UserInfo18, lm/nt pwd mixup.
  s3-build: re-run make samba3-idl.
  s3-samr: fix samr callers of samr_UserInfo18.
  s3-samr: fix init_samr_user_info2{1,3,5} callers.
  samr: fill in two unknowns in samr_DomInfo13.
  samr: fill in two unknowns in samr_UserInfo21.
  samr: make more explicit what SAMR_FIELD_PASSWORD{2} means.
  s3-samr: fix SAMR_FIELD_PASSWORD callers.
  s3-samr: fix samr_SetUserInfo level 18 server-side.
  s3-samr: a level 18 password set needs to set the pwdlastset as well.
  s3-samr: modify logging in _samr_Connect2 so that it can be called from 
other calls as well.
  s3-samr: fix rpcclient after idl change.
  s3-samr: avoid code duplication for identical code in _samr_Connect2, 4 
and 5.
  s3-libnet_samsync: print new line in display output.
  s3-libnet: fix build warning (missing prototype).
  s3-libnet: fix DEBUG statement in libnet_keytab.
  messaging: move types to IDL.
  s3-samr-idl: fix samr_QueryUserInfo2.
  s3-samr-idl: fix samr_ValidatePassword.
  s3-build: re-run make samba3-idl.
  samr: fix samr_UserInfo21 (order of lm_password_set and nt_password_set).
  make installmo.sh executeable.
  s3-passdb: remove unused (now samr.idl) ACCT_NT/LM_PWD_SET flags.
  s3-netlogon: kill an fstring in rpc_server.
  s3-samr-server: remove unused historic code.
  netapi: fix access bits in netapi.

Henning Henkel (1):
  Fix bug #5929 - vfs_prealloc does not build with option 
--with-cluster-support and GPFS

Herb Lewis (1):
  don't return 0 on error - bad for scripts

Jeff Layton (1):
  mount.cifs: allow mounts to ipv6 capable servers

Jeremy Allison (7):
  Fix bug #1254 - write list not working under share-level security
  Remove unused var.
  Fix bug #5937 - filenames with * char hide other files
  Fix lp_socket_address() prototype.
  Fix bug #5953 - smbclient crashes: cli_list_new segmentation fault.
  Fix usrmgr opening a user object as non-root.
  Make the LookupRid access check match LookupName until

Kai Blin (1):
  configure.in: Fix smbtorture_s3 tests.

Karolin Seeger (8):
  docs: Add default value for writeable to man smb.conf.
  build-docs: Change to the right directory before calling 'make clean'.
  VERSION: Raise version number.
  Samba3-HOWTO: Fix usage of 'net idmap restore'.
  docs: Add hint that socket address usually don't need to be set.
  WHATSNEW: Prepare WHATSNEW for 3.3.0rc2.
  VERSION: Change version to 3.3.0rc2.
  WHATSNEW: Update changes since 3.3.0rc1.

Michael Adam (30):
  winbindd/nss_info: change nss_map_{to|from}_alias to take nss_domain_entry
  

[SCM] Samba Shared Repository - branch master updated - 51118b1974fd91d7f60ed1a68e1eb5717690362b

2008-12-15 Thread Michael Adam
The branch, master has been updated
   via  51118b1974fd91d7f60ed1a68e1eb5717690362b (commit)
   via  c2bd88f145d73e9a8613d32d313954e3ecdcacd2 (commit)
   via  03f19dad795c247878918de95a8c1f63ec259d13 (commit)
   via  0b0dc506d4b709b6373a19795276351285679eb3 (commit)
   via  6244194265f7f1027c16664b2701ce114435a59b (commit)
   via  91c543f0b5a539da4194f14dee8cad0f980a117e (commit)
   via  606abdceacfcad19735cd80f59aad975a9e97b7c (commit)
  from  07a21dbfa5b9dc3cc6fa7417b64e4963f111fe1a (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 51118b1974fd91d7f60ed1a68e1eb5717690362b
Author: Michael Adam ob...@samba.org
Date:   Mon Dec 15 14:42:13 2008 +0100

s3:loadparm: fix copy service error (canonicalize_servicename: NULL source 
name)

this was introduced by commit 3358a139d2dc77eb4c842d41722b1acc24bd2cb2.

Michael

commit c2bd88f145d73e9a8613d32d313954e3ecdcacd2
Author: Michael Adam ob...@samba.org
Date:   Mon Dec 15 14:38:51 2008 +0100

s3:loadparm: add service-struct based variants of the free-parameter 
routines

and use the abstracted free_one_parameter_common() in old
free_one_parameter_by_snum() as well as in new free_one_parameter()

Michael

commit 03f19dad795c247878918de95a8c1f63ec259d13
Author: Michael Adam ob...@samba.org
Date:   Mon Dec 15 14:29:34 2008 +0100

s3:loadparm: rename free_parameters() to free_parameters_by_snum()

Michael

commit 0b0dc506d4b709b6373a19795276351285679eb3
Author: Michael Adam ob...@samba.org
Date:   Mon Dec 15 14:28:03 2008 +0100

s3:loadparm: rename free_parameter() to free_one_parameter_by_snum()

Michael

commit 6244194265f7f1027c16664b2701ce114435a59b
Author: Michael Adam ob...@samba.org
Date:   Mon Dec 15 14:20:16 2008 +0100

s3:loadparm: add lp_local_ptr() that operates on a service struct

and use this in lp_local_ptr_by_snum().

Michael

commit 91c543f0b5a539da4194f14dee8cad0f980a117e
Author: Michael Adam ob...@samba.org
Date:   Mon Dec 15 14:16:06 2008 +0100

s3:loadparm: rename lp_local_ptr() to lp_local_ptr_by_snum()

Michael

commit 606abdceacfcad19735cd80f59aad975a9e97b7c
Author: Michael Adam ob...@samba.org
Date:   Mon Dec 15 13:33:24 2008 +0100

s3:loadparm: fix newly introduced leading whitespaces to tabs

Michael

---

Summary of changes:
 source3/include/proto.h  |2 +-
 source3/param/loadparm.c |   94 --
 source3/web/swat.c   |4 +-
 3 files changed, 77 insertions(+), 23 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/include/proto.h b/source3/include/proto.h
index 2a8f838..9d86f16 100644
--- a/source3/include/proto.h
+++ b/source3/include/proto.h
@@ -4260,7 +4260,7 @@ const char *lp_ldap_machine_suffix(void);
 const char *lp_ldap_user_suffix(void);
 const char *lp_ldap_group_suffix(void);
 const char *lp_ldap_idmap_suffix(void);
-void *lp_local_ptr(int snum, void *ptr);
+void *lp_local_ptr_by_snum(int snum, void *ptr);
 bool lp_do_parameter(int snum, const char *pszParmName, const char 
*pszParmValue);
 void init_locals(void);
 bool lp_is_default(int snum, struct parm_struct *parm);
diff --git a/source3/param/loadparm.c b/source3/param/loadparm.c
index 7e7a1e5..9a55067 100644
--- a/source3/param/loadparm.c
+++ b/source3/param/loadparm.c
@@ -425,7 +425,7 @@ struct service {
bool bHideUnReadable;
bool bHideUnWriteableFiles;
bool bBrowseable;
-   bool bAccessBasedShareEnum;
+   bool bAccessBasedShareEnum;
bool bAvailable;
bool bRead_only;
bool bNo_set_dir;
@@ -569,7 +569,7 @@ static struct service sDefault = {
False,  /* bHideUnReadable */
False,  /* bHideUnWriteableFiles */
True,   /* bBrowseable */
-   False,  /* bAccessBasedShareEnum */
+   False,  /* bAccessBasedShareEnum */
True,   /* bAvailable */
True,   /* bRead_only */
True,   /* bNo_set_dir */
@@ -671,6 +671,8 @@ static void set_server_role(void);
 static void set_default_server_announce_type(void);
 static void set_allowed_client_auth(void);
 
+static void *lp_local_ptr(struct service *service, void *ptr);
+
 static const struct enum_list enum_protocol[] = {
{PROTOCOL_NT1, NT1},
{PROTOCOL_LANMAN2, LANMAN2},
@@ -4584,9 +4586,56 @@ static void init_printer_values(struct service *pService)
 }
 
 /**
- * Free the allocated data for one parameter for a given share.
+ * Common part of freeing allocated data for one parameter.
+ */
+static void free_one_parameter_common(void *parm_ptr,
+ struct parm_struct parm)
+{
+   if 

[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-4692-gd217acb

2008-12-15 Thread Michael Adam
The branch, v3-3-test has been updated
   via  d217acb9066b9a6282be3ff737d78e5d9c985ae1 (commit)
  from  34f96b0cdcee3a8ab6612313e70b682f2aa29538 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test


- Log -
commit d217acb9066b9a6282be3ff737d78e5d9c985ae1
Author: Michael Adam ob...@samba.org
Date:   Mon Dec 15 11:38:32 2008 +0100

fix build of pam_winbind.so on older Linux systems.

Older pam implementations on Linux define PAM_AUTHTOK_RECOVER_ERR
instead of PAM_AUTHTOK_RECOVERY_ERR. We have always defined and
are using PAM_AUTHTOK_RECOVER_ERR in all other places.

Michael

---

Summary of changes:
 source/nsswitch/pam_winbind.c |4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/nsswitch/pam_winbind.c b/source/nsswitch/pam_winbind.c
index 95c78cf..338d538 100644
--- a/source/nsswitch/pam_winbind.c
+++ b/source/nsswitch/pam_winbind.c
@@ -93,8 +93,8 @@ static const char *_pam_error_code_str(int err)
return PAM_CONV_ERR;
case PAM_AUTHTOK_ERR:
return PAM_AUTHTOK_ERR;
-   case PAM_AUTHTOK_RECOVERY_ERR:
-   return PAM_AUTHTOK_RECOVERY_ERR;
+   case PAM_AUTHTOK_RECOVER_ERR:
+   return PAM_AUTHTOK_RECOVER_ERR;
case PAM_AUTHTOK_LOCK_BUSY:
return PAM_AUTHTOK_LOCK_BUSY;
case PAM_AUTHTOK_DISABLE_AGING:


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-4693-g91ecce4

2008-12-15 Thread Volker Lendecke
The branch, v3-3-test has been updated
   via  91ecce438f0fd38ac933ba9bc493e79f8eb5a63a (commit)
  from  d217acb9066b9a6282be3ff737d78e5d9c985ae1 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test


- Log -
commit 91ecce438f0fd38ac933ba9bc493e79f8eb5a63a
Author: Volker Lendecke v...@samba.org
Date:   Mon Dec 15 12:46:04 2008 +0100

Fix bug 5969: Optimize smbclient put command

This used to be checkin 3f0406f6 to master

---

Summary of changes:
 source/lib/xfile.c |   25 -
 1 files changed, 20 insertions(+), 5 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/lib/xfile.c b/source/lib/xfile.c
index e44a92d..aba49b6 100644
--- a/source/lib/xfile.c
+++ b/source/lib/xfile.c
@@ -354,12 +354,27 @@ int x_fgetc(XFILE *f)
 /* simulate fread */
 size_t x_fread(void *p, size_t size, size_t nmemb, XFILE *f)
 {
+   size_t remaining = size * nmemb;
size_t total = 0;
-   while (total  size*nmemb) {
-   int c = x_fgetc(f);
-   if (c == EOF) break;
-   (total+(char *)p)[0] = (char)c;
-   total++;
+
+   while (remaining  0) {
+   size_t thistime;
+
+   x_fillbuf(f);
+
+   if (f-bufused == 0) {
+   f-flags |= X_FLAG_EOF;
+   break;
+   }
+
+   thistime = MIN(f-bufused, remaining);
+
+   memcpy((char *)p+total, f-next, thistime);
+
+   f-next += thistime;
+   f-bufused -= thistime;
+   remaining -= thistime;
+   total += thistime;
}
return total/size;
 }


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated - 07a21dbfa5b9dc3cc6fa7417b64e4963f111fe1a

2008-12-15 Thread Michael Adam
The branch, master has been updated
   via  07a21dbfa5b9dc3cc6fa7417b64e4963f111fe1a (commit)
  from  daeb3a190d16a5bc05be63b2b136ebe65d6f6cf7 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 07a21dbfa5b9dc3cc6fa7417b64e4963f111fe1a
Author: Michael Adam ob...@samba.org
Date:   Mon Dec 15 11:32:45 2008 +0100

s3:fix build of pam_winbind.so on older Linux systems.

Older pam implementations on Linux define PAM_AUTHTOK_RECOVER_ERR
instead of PAM_AUTHTOK_RECOVERY_ERR. We have always defined and
are using PAM_AUTHTOK_RECOVER_ERR in all other places.

Michael

---

Summary of changes:
 source3/nsswitch/pam_winbind.c |4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/nsswitch/pam_winbind.c b/source3/nsswitch/pam_winbind.c
index be22ff3..d049bdb 100644
--- a/source3/nsswitch/pam_winbind.c
+++ b/source3/nsswitch/pam_winbind.c
@@ -93,8 +93,8 @@ static const char *_pam_error_code_str(int err)
return PAM_CONV_ERR;
case PAM_AUTHTOK_ERR:
return PAM_AUTHTOK_ERR;
-   case PAM_AUTHTOK_RECOVERY_ERR:
-   return PAM_AUTHTOK_RECOVERY_ERR;
+   case PAM_AUTHTOK_RECOVER_ERR:
+   return PAM_AUTHTOK_RECOVER_ERR;
case PAM_AUTHTOK_LOCK_BUSY:
return PAM_AUTHTOK_LOCK_BUSY;
case PAM_AUTHTOK_DISABLE_AGING:


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-3277-ge504256

2008-12-15 Thread Volker Lendecke
The branch, v3-2-test has been updated
   via  e504256f84927c9b22df3945a3e95baaa9bf7063 (commit)
  from  73039cd49521e724a8351a353e9ae1d342be1352 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test


- Log -
commit e504256f84927c9b22df3945a3e95baaa9bf7063
Author: Volker Lendecke v...@samba.org
Date:   Mon Dec 15 12:46:04 2008 +0100

Fix bug 5969: Optimize smbclient put command

This used to be checkin 3f0406f6 to master

---

Summary of changes:
 source/lib/xfile.c |   25 -
 1 files changed, 20 insertions(+), 5 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/lib/xfile.c b/source/lib/xfile.c
index e44a92d..aba49b6 100644
--- a/source/lib/xfile.c
+++ b/source/lib/xfile.c
@@ -354,12 +354,27 @@ int x_fgetc(XFILE *f)
 /* simulate fread */
 size_t x_fread(void *p, size_t size, size_t nmemb, XFILE *f)
 {
+   size_t remaining = size * nmemb;
size_t total = 0;
-   while (total  size*nmemb) {
-   int c = x_fgetc(f);
-   if (c == EOF) break;
-   (total+(char *)p)[0] = (char)c;
-   total++;
+
+   while (remaining  0) {
+   size_t thistime;
+
+   x_fillbuf(f);
+
+   if (f-bufused == 0) {
+   f-flags |= X_FLAG_EOF;
+   break;
+   }
+
+   thistime = MIN(f-bufused, remaining);
+
+   memcpy((char *)p+total, f-next, thistime);
+
+   f-next += thistime;
+   f-bufused -= thistime;
+   remaining -= thistime;
+   total += thistime;
}
return total/size;
 }


-- 
Samba Shared Repository


svn commit: samba-web r1253 - in trunk: .

2008-12-15 Thread kseeger
Author: kseeger
Date: 2008-12-15 10:58:29 + (Mon, 15 Dec 2008)
New Revision: 1253

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=1253

Log:
Announce Samba 3.3.0rc2
Karolin
Modified:
   trunk/index.html


Changeset:
Modified: trunk/index.html
===
--- trunk/index.html2008-12-10 12:50:11 UTC (rev 1252)
+++ trunk/index.html2008-12-15 10:58:29 UTC (rev 1253)
@@ -19,6 +19,33 @@
 
 h2Current Release/h2
 
+h415 December 2008/h4
+p class=headlineSamba 3.3.0rc2 Available for Download/p
+
+pSamba 3.3.0rc2 is now available for download.  This the second
+release candidate of the next upgrade production release version of Samba.
+It is intended for testing purposes only.  Please test and
+a href=https://bugzilla.samba.org/;report any bugs that you
+find/a.  The final 3.3.0 release is planned for January 6, 2009.
+Please read the changes in the
+a href=/samba/ftp/rc/WHATSNEW-3-3-0rc2.txtRelease Notes/a
+for details on new features and difference in behavior from
+previous releases./p
+
+pThe a href=/samba/ftp/rc/samba-3.3.0rc2.tar.gzSamba 3.3.0rc2
+source code/a can be downloaded now.  The a
+href=/samba/ftp/rc/samba-3.3.0rc2.tar.ascGnuPG
+signature is for the for the emun/emcompressed tarball/a.
+If you prefer, the a
+href=/samba/ftp/rc/patch-3.3.0rc1-3.3.0rc2.diffs.gzpatch
+file against Samba 3.3.0rc1/a
+(a href=/samba/ftp/rc/patch-3.3.0rc1-3.3.0rc2.diffs.ascGnuPG
+signature/a) is also available for download.
+Please read these a href=/samba/download/instructions on
+how to verify the gpg signature/a.  Precompiled packages will
+be made available on a volunteer basis and can be found in the
+a href=/samba/ftp/Binary_Packages/Binary_Packages download 
area/a./p
+
 h4a name=latest10 December 2008/a/h4
 p class=headlineSamba 3.2.6 Available for Download/p
 
@@ -45,6 +72,7 @@
 a href=/samba/ftp/pre/WHATSNEW-3-3-0pre1.txtRelease Notes/a
 for details on new features and difference in behavior from
 previous releases./p
+
 h427 November 2008/h4
 p class=headlineSamba 3.3.0rc1 Available for Download/p
 



[SCM] CTDB repository - branch master updated - ctdb-1.0.68-7-g023d6c2

2008-12-15 Thread Ronnie Sahlberg
The branch, master has been updated
   via  023d6c2e3017d323b5a70f987f3b4e0b8b8f0f7b (commit)
   via  a1a0fa6eb37b5432cc2b176e252856d37fcc4fc8 (commit)
   via  0f7444966d8147cf5a742320f51fbb9909d6d42d (commit)
   via  fac9ad26b2239818e6fc371fbfaa894fa64045be (commit)
   via  f3cb1386e7ea99adba78350bb50bf34d6bdcfe1d (commit)
   via  7834d9b79bf4e4d3c6ce63dd4c3a1e40b9d909e4 (commit)
   via  140768ce79d8ea3af2adb3ac011b58a29a09b50e (commit)
  from  e50c9667b86160eb5dfb9868aff420b72f799a5f (commit)

http://gitweb.samba.org/?p=sahlberg/ctdb.git;a=shortlog;h=master


- Log -
commit 023d6c2e3017d323b5a70f987f3b4e0b8b8f0f7b
Author: Michael Adam ob...@samba.org
Date:   Mon Dec 15 18:21:37 2008 +0100

skip directories containing macros (%) in ctdb_check_directories_probe

This prevents the monitor action of 50.samba from failing
on e.g. a typical [homes] service with path = /home/%S .

Michael

commit a1a0fa6eb37b5432cc2b176e252856d37fcc4fc8
Author: Michael Adam ob...@samba.org
Date:   Sat Jul 5 14:28:27 2008 +0200

ctdb.init: add Default-Start to init script to enable autostart.

Michael

commit 0f7444966d8147cf5a742320f51fbb9909d6d42d
Author: Michael Adam ob...@samba.org
Date:   Fri Dec 12 16:57:58 2008 +0100

ctdb.init: check availability of ctdb (with ping) before calling ctdb status

Michael

commit fac9ad26b2239818e6fc371fbfaa894fa64045be
Author: Michael Adam ob...@samba.org
Date:   Fri Dec 12 16:00:07 2008 +0100

ctdb.init: behave correctly when calling service ctdb stop on stopped 
service

When service ctdb stop is called and the ctdbd is not running,
don't print the Failed to connect to daemon error messages.
But print a warning and exit with status success instead.

Michael

commit f3cb1386e7ea99adba78350bb50bf34d6bdcfe1d
Author: Michael Adam ob...@samba.org
Date:   Fri Dec 12 16:05:04 2008 +0100

ctdb.init: fix return code of service ctdb stop on non-redhat systems

Michael

commit 7834d9b79bf4e4d3c6ce63dd4c3a1e40b9d909e4
Author: Michael Adam ob...@samba.org
Date:   Fri Dec 12 16:04:29 2008 +0100

ctdb.init: fix status message of service ctdb stop on suse systems

Michael

commit 140768ce79d8ea3af2adb3ac011b58a29a09b50e
Author: Michael Adam ob...@samba.org
Date:   Sat Jul 5 14:42:46 2008 +0200

packaging: set docdir in calls to make (to get it right on e.g. SuSE 
systems).

Currently docdir = /usr/share/doc is hardcoded in the Makefile.in.
Some systems use a different doc dir (SuSE uses /usr/share/doc/packages).

And not all versions of autoconf provide the --docdir parameter
(2.61 does, while 2.59 does not). So we use the quick solution
to specify docdir=%{_docdir} in the make calls in the spec file.

Michael

---

Summary of changes:
 config/ctdb.init|   38 +-
 config/functions|1 +
 packaging/RPM/ctdb.spec |6 +++---
 3 files changed, 41 insertions(+), 4 deletions(-)


Changeset truncated at 500 lines:

diff --git a/config/ctdb.init b/config/ctdb.init
index 9e06c24..0d0053e 100755
--- a/config/ctdb.init
+++ b/config/ctdb.init
@@ -14,6 +14,7 @@
 # Required-Start:  $network
 # Required-Stop:
 # Default-Stop:
+# Default-Start:   3 5
 # Short-Description:   start and stop ctdb service
 # Description: initscript for the ctdb service
 ### END INIT INFO
@@ -91,6 +92,10 @@ else if [ -x /sbin/start-stop-daemon ]; then
 fi
 fi
 
+reset_retval() {
+   return $1
+}
+
 start() {
 killall -q ctdbd
echo -n $Starting ctdbd service: 
@@ -144,6 +149,18 @@ start() {
 
 stop() {
echo -n $Shutting down ctdbd service: 
+   ctdb ping  /dev/null || {
+   echo -n   Warning: ctdbd not running ! 
+   case $init_style in
+   suse)
+   rc_status -v
+   ;;
+   redhat)
+   echo 
+   ;;
+   esac
+   return 0
+   }
ctdb shutdown
RETVAL=$?
count=0
@@ -163,15 +180,18 @@ stop() {
done
case $init_style in
suse)
+   # re-set the return code to the recorded RETVAL
+   # in order to print the correct status message
+   set_retval $RETVAL
rc_status -v
;;
redhat)
echo
[ $RETVAL -eq 0 ]  rm -f /var/lock/subsys/ctdb
echo 
-   return $RETVAL
;;
esac
+   return $RETVAL
 }  
 
 restart() {
@@ -180,6 +200,22 @@ restart() {
 }  
 
 status() {
+   echo -n $Checking for ctdbd service: 
+   ctdb ping  /dev/null || {
+   RETVAL=$?
+   echo -n   ctdbd not running. 
+   case 

[SCM] CTDB repository - branch origin updated - ctdb-1.0.65-8-g6579a6a

2008-12-15 Thread Ronnie Sahlberg
The branch, origin has been updated
   via  6579a6a2a7161214adedf0f67dce62f4a4ad1afe (commit)
   via  fe6ddf7992ca3e72a26dbace0f6270da611f (commit)
   via  0a6f9326cb99f14b5c9edd0d8854d8229df49910 (commit)
   via  7a18f33ec7512100dd067c65f0470889ff8fd591 (commit)
   via  a9a1156ea4e10483a4bf4265b8e9203f0af033aa (commit)
   via  1f25958dc739677a487fa496fbeffcda7a0f2204 (commit)
   via  b75e2263c565c21ecbbd98fbd2c10787e467bf5c (commit)
   via  aba984f1b85f5a2d370b093061cf15843ee53758 (commit)
   via  8c6a02fb423a8cbcbfc706767e3d353cd48073c3 (commit)
   via  1d581dcd507e8e13d7ae085ff4d6a9f3e2aaeba5 (commit)
   via  1a7ff4577d33f0dd470f7465c7d0e875c962f54e (commit)
   via  403c68f96e1380dd07217c688de2730464f77ea0 (commit)
   via  59a879626a6a55fb6a43cadf5338c1aa6afe96d1 (commit)
   via  e25ea88ea4f270ba65ed5fdacd693f1248f343c0 (commit)
   via  4b0f32047e8bece0a052bdbe2209afe91b7e8ce3 (commit)
   via  82fd2b6b5cd8e988c38fa6b74121a048757bdeef (commit)
   via  06097b88709ced09d1f9f869eed9a54e6d2fedbf (commit)
   via  cdc79d4f22f1a6aec5c34115969421f93663932a (commit)
   via  49431e799ba7f7c78f596fdf896316a2e22c745e (commit)
   via  8313dfb6fc5404cd2d065af6620412f8664ada11 (commit)
   via  5403ed6dcfdfc101b05b43f83002e720d81b4e38 (commit)
   via  0098efd4443038f2d902e3a7c3640e63f06be7d1 (commit)
   via  3b8d49bf58f4145cdca08565f06cd43fd36991e1 (commit)
   via  f9779d3a237db59d7fdad92185ac7e42715466e6 (commit)
   via  6fb2f8a36239e5902e27cf10213f85faf216d6f1 (commit)
   via  9b1d089c99413f3681440f3cf33c293d118c9108 (commit)
   via  c0b3bd8a3fa580dca5afa97c8012fccb25231373 (commit)
   via  77ed0d71b1fb8d06d70d01a8e8f9eb04ffe7f02f (commit)
   via  5747dd2d80af29d6252afb6aeb3e66328ee20de5 (commit)
   via  d13da2e8fe2fab619540525d98a5502a23ab7d20 (commit)
   via  8e912abc2c68f5fe7b06c600ba6fec1a6900127c (commit)
   via  6b76c520f97127099bd9fbaa0fa7af1c61947fb7 (commit)
   via  dc9cd4779db4a89697731e4cf415be51067a07c1 (commit)
   via  07dd4c7d2e8ba10f53d4cf2644fc4b7b8647e286 (commit)
   via  a5d5aa455c7f7eb93d3fa6f403d5b8e0b795109d (commit)
   via  dc108adada33bb713f71a2859eda3b439ed0cd1a (commit)
   via  5f96b33a379c80ed8a39de1ee41f254cf48733f9 (commit)
   via  8e504fc8c01f750d1cb5d2289ef12c423daf1ad4 (commit)
   via  4237bd3753dcb024c17461e974414bef1b609416 (commit)
   via  e701a531868149f16561011e65794a4a46ee6596 (commit)
   via  d9779c310e98c9d4eab71a8d1705849ac90deb10 (commit)
   via  18f2f4fb9f2452f56731b027dd6a7beda111 (commit)
   via  85f6032cbdb197f3a003d86f086afa2cee898a4d (commit)
   via  647003da975d4823abe8ed2bfb46153d68ea0fb0 (commit)
   via  a06abf6bff6c4d379453e5063d8de1a6542c982a (commit)
   via  475cfada33b4c13aaaca773d5485bbe26bffbf46 (commit)
   via  196968c552e6ebcb57389d769a4b25f42fa8bc5d (commit)
   via  5e641ef9d6cca286061138a9680dcf2495736e8b (commit)
   via  95bf36559d62f29e6f538f3a173b504ef3258341 (commit)
   via  0aca4daf908b76d6013ff3dfad41beb9114fc1a3 (commit)
   via  a120c734c5425ebb2e09c2009374aa0bc5a432e8 (commit)
   via  2583d0c8f9932e023b7377582f62c840e264be80 (commit)
   via  1d5d13345086201fe55517aea5f8674ff3db1090 (commit)
   via  2b70953cd51e879dc1fa113d68c6614051da5260 (commit)
   via  3ff0711fd3b288c153218ad33e8462a94b8d3275 (commit)
   via  d1aa7953450de6ae215589404fb19e05edd3906f (commit)
   via  666c3835376cd6b66aeaa110c76ecf052cd71a0a (commit)
   via  616b71fef54a3d1ea2638602099722a19ef6f41d (commit)
   via  a72f5b7d1560e427e18b1c55a2932a7fb037f4c7 (commit)
   via  a89977f8cb2463a87147dcc0ad936cb5d4131670 (commit)
   via  cd69d292292eaab3aac0e9d9fc57cb621597c63c (commit)
   via  e26ce5140ed005725f8b7ac8ba23a180fd7d5337 (commit)
   via  8060e591b0eb2d184b5a787477225d2e1dbf (commit)
   via  c4bc4317df4106e81b238dbfaf861ca6104304c1 (commit)
   via  4d1c0418cfe6170bc081684dbe45908a5d285f0b (commit)
   via  f84d0a9a8c7e9589e8833f21e1f977a0adab356b (commit)
   via  2a8bf5e7dc7364a8280d96db0f9579d2582a8524 (commit)
   via  0709093af11e0735ed1e13b06ac073990631e692 (commit)
   via  7da0c65c8526d66d4f2a788bd646d39237befa54 (commit)
   via  12bc85c90a640a72ff538c003eb81da9dd1f2e3f (commit)
   via  4dfbfb4618433d9ed79ca1bdb1e2e51d96d4ee62 (commit)
   via  293d12a40501320a21efaf592b8f20e8590a5197 (commit)
   via  2f8b33948e395228cbac3450c0c684e49069abf0 (commit)
   via  1157d61a0bc557d8ffc453c518dfc48473492bfd (commit)
   via  b0fe4c45fc5ba1ecf62ebb921092c8a34e28a2bd (commit)
   via  6da7b36b7ccc4ee9b809867ea32036f09a801bb3 (commit)
   via  83735951352a243da185031e4853e7e40c43a0fb (commit)
   via  0a38ea11af9237501f2951fee698a59b46f8750d (commit)
   via  bf6effef0cc9e5f2eeeb38fce855a90624a76239 (commit)
   via  1f131f21386f428b29098d56c2f64596583b (commit)
   

[SCM] Samba Shared Repository - branch master updated - 530758dc2a6dd6dce083789b328e16e51ba6573d

2008-12-15 Thread Jelmer Vernooij
The branch, master has been updated
   via  530758dc2a6dd6dce083789b328e16e51ba6573d (commit)
   via  2be233ebe39d6ce584848a7e6bbd68b011dd6930 (commit)
   via  1e419cd31bea64c664c36dee10fa9e843b6f76d6 (commit)
   via  573441ff9b63fed9ab0b7eaf52df337ccd5592be (commit)
   via  cd25b6245f8185e36a365dcf4c28e7df13090d3e (commit)
   via  c4fc0b49f05f56174dc904a19d9e4dfc6d3ef523 (commit)
   via  0727fbe87d0016a3b18dbdfedcd417126e1aa514 (commit)
   via  3e2c070395d2fef232ab60d075194091f7b46b35 (commit)
   via  850abaffbe057f504d47ae91ea6f3ad544d39ebe (commit)
  from  51118b1974fd91d7f60ed1a68e1eb5717690362b (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 530758dc2a6dd6dce083789b328e16e51ba6573d
Author: Jelmer Vernooij jel...@samba.org
Date:   Tue Dec 16 00:16:02 2008 +0100

Add python extensions for dom_sid.

commit 2be233ebe39d6ce584848a7e6bbd68b011dd6930
Merge: 1e419cd31bea64c664c36dee10fa9e843b6f76d6 
51118b1974fd91d7f60ed1a68e1eb5717690362b
Author: Jelmer Vernooij jel...@samba.org
Date:   Mon Dec 15 23:19:49 2008 +0100

Merge branch 'master' of ssh://git.samba.org/data/git/samba

commit 1e419cd31bea64c664c36dee10fa9e843b6f76d6
Author: Jelmer Vernooij jel...@samba.org
Date:   Sun Dec 14 19:08:22 2008 +0100

Rename ldap.h to ldap-util.h to avoid clashing with the system ldap.h

commit 573441ff9b63fed9ab0b7eaf52df337ccd5592be
Merge: cd25b6245f8185e36a365dcf4c28e7df13090d3e 
daeb3a190d16a5bc05be63b2b136ebe65d6f6cf7
Author: Jelmer Vernooij jel...@samba.org
Date:   Sun Dec 14 17:17:55 2008 +0100

Merge branch 'master' of ssh://git.samba.org/data/git/samba

commit cd25b6245f8185e36a365dcf4c28e7df13090d3e
Author: Jelmer Vernooij jel...@samba.org
Date:   Fri Dec 12 20:20:01 2008 +0100

Move dom_sid to the Samba 3 IDL file, remove the old definition.

commit c4fc0b49f05f56174dc904a19d9e4dfc6d3ef523
Author: Jelmer Vernooij jel...@samba.org
Date:   Fri Dec 12 19:52:06 2008 +0100

Manually marshall dom_sid, so we can use a fixed size array for
dom_sid.sub_auths rather than a dynamically allocated one.

This makes it possible to use the same DCE/RPC object code for Samba 3
and Samba 4's DCE/RPC parsers and allows copying sids more easily
(since they no longer contain any pointers). The cost of having additional
manual marshalling code is limited (~35 additional lines of C code).

commit 0727fbe87d0016a3b18dbdfedcd417126e1aa514
Author: Jelmer Vernooij jel...@samba.org
Date:   Fri Dec 12 19:01:40 2008 +0100

Don't allow specifying arguments to pidl object constructors, as they'll
be ignored anyway atm.

commit 3e2c070395d2fef232ab60d075194091f7b46b35
Author: Jelmer Vernooij jel...@samba.org
Date:   Fri Dec 12 13:31:42 2008 +0100

Allow overriding repr function for pidl-defined types.

commit 850abaffbe057f504d47ae91ea6f3ad544d39ebe
Author: Jelmer Vernooij jel...@samba.org
Date:   Fri Dec 12 12:40:11 2008 +0100

Support pyhelper property to allow additional methods to be tucked onto a
pidl-generated type.

---

Summary of changes:
 librpc/idl/security.idl   |   28 +++
 librpc/ndr/ndr_sec_helper.c   |  224 +
 pidl/lib/Parse/Pidl/NDR.pm|1 +
 pidl/lib/Parse/Pidl/Samba4/Python.pm  |   18 ++-
 source3/include/proto.h   |8 -
 source3/include/smb.h |   13 +--
 source3/librpc/gen_ndr/lsa.h  |2 +-
 source3/librpc/gen_ndr/misc.h |2 +-
 source3/librpc/gen_ndr/ndr_drsblobs.c |   10 +-
 source3/librpc/gen_ndr/ndr_security.c |   21 +--
 source3/librpc/gen_ndr/ndr_security.h |4 +
 source3/librpc/gen_ndr/ndr_srvsvc.c   |8 +-
 source3/librpc/gen_ndr/ndr_srvsvc.h   |4 +
 source3/librpc/gen_ndr/security.h |   10 +
 source3/librpc/gen_ndr/srvsvc.h   |4 +-
 source3/librpc/gen_ndr/winreg.h   |2 +-
 source3/librpc/ndr/sid.c  |  224 -
 source4/headermap.txt |2 +-
 source4/libcli/security/dom_sid.c |   17 +--
 source4/libcli/security/sddl.c|1 -
 source4/libcli/security/security_descriptor.c |   20 ---
 source4/librpc/config.mk  |   13 +-
 source4/librpc/idl/dom_sid.idl|   30 
 source4/librpc/ndr/ndr_dom_sid.c  |  217 
 source4/librpc/ndr/py_security.c  |   58 +++
 source4/torture/unix/whoami.c |5 -
 26 files changed, 373 insertions(+), 573 deletions(-)
 delete mode 100644 source4/librpc/ndr/ndr_dom_sid.c
 create mode 100644 source4/librpc/ndr/py_security.c


Changeset truncated at 500 lines:

diff 

Build status as of Tue Dec 16 00:00:02 2008

2008-12-15 Thread build
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2008-12-15 
00:00:29.0 +
+++ /home/build/master/cache/broken_results.txt 2008-12-16 00:00:23.0 
+
@@ -1,4 +1,4 @@
-Build status as of Mon Dec 15 00:00:02 2008
+Build status as of Tue Dec 16 00:00:02 2008
 
 Build counts:
 Tree Total  Broken Panic 
@@ -6,17 +6,17 @@
 ccache   30 7  0 
 ctdb 0  0  0 
 distcc   1  0  0 
-ldb  29 30 0 
-libreplace   28 12 0 
+ldb  30 30 0 
+libreplace   29 12 0 
 lorikeet-heimdal 27 19 0 
 pidl 17 2  0 
 ppp  11 0  0 
 rsync30 12 0 
 samba-docs   0  0  0 
 samba-gtk5  5  0 
-samba_3_X_devel 26 21 0 
-samba_3_X_test 24 21 0 
-samba_4_0_test 27 28 1 
+samba_3_X_devel 26 22 1 
+samba_3_X_test 26 21 0 
+samba_4_0_test 29 28 1 
 smb-build28 6  0 
 talloc   30 30 0 
 tdb  28 11 0 


[SCM] Samba Shared Repository - branch master updated - 4380a374c1dec46ad77939604e548f0c79d9e2ec

2008-12-15 Thread Andrew Tridgell
The branch, master has been updated
   via  4380a374c1dec46ad77939604e548f0c79d9e2ec (commit)
   via  f320e3a659d2ef701e3770071375ca9781d98325 (commit)
   via  936d76802f98d04d9743b2ca8eeeaadd4362db51 (commit)
   via  2e4247782bd5812bc8e7ea24194c8436748bb2fa (commit)
   via  f448fde4e35e56508ad93be8de9f60d88e8b8dcd (commit)
   via  a226d86dcec393b2cd657d5441c3041dfdf5cd8f (commit)
   via  30eff4f31b497ac94d8ee02ee2ec24bc8865ce0d (commit)
   via  41a1c882d4adec957a1ed180b53fd6874d9524f2 (commit)
   via  ae795a09796b35c464c2cc89c53776e63e608686 (commit)
  from  530758dc2a6dd6dce083789b328e16e51ba6573d (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 4380a374c1dec46ad77939604e548f0c79d9e2ec
Author: Andrew Tridgell tri...@samba.org
Date:   Tue Dec 16 14:41:21 2008 +1100

repack the ldb after re-indexing

re-indexing in ldb is triggered on any modification to the @ATTRIBUTES
or @INDEXLIST records. This happens to produce a worst-case
fragmentation of the database, as all @INDEX records are deleted then
re-created. By repacking after re-indexing we ensure that the database
ends up without extreme fragmentation.

commit f320e3a659d2ef701e3770071375ca9781d98325
Author: Andrew Tridgell tri...@samba.org
Date:   Tue Dec 16 14:39:42 2008 +1100

use transactions in ldbadd, ldbmodify and ldbedit

The command line tools ldbadd, ldbmodify and ldbedit should operate
within a transaction to make them more efficient. The ldbadd tool in
particular is much faster when adding a large number of records if all
the adds happen within a transaction. Previously there was a
transaction per record.

commit 936d76802f98d04d9743b2ca8eeeaadd4362db51
Author: Andrew Tridgell tri...@samba.org
Date:   Tue Dec 16 14:38:17 2008 +1100

imported the tdb_repack() code from CTDB

The tdb_repack() function repacks a TDB so that it has a single
freelist entry. The file doesn't shrink, but it does remove all
freelist fragmentation. This code originated in the CTDB vacuuming
code, but will now be used in ldb to cope with fragmentation from
re-indexing

commit 2e4247782bd5812bc8e7ea24194c8436748bb2fa
Author: Andrew Tridgell tri...@samba.org
Date:   Tue Dec 16 14:36:56 2008 +1100

make tdbbackup use transactions

tdbbackup was originally written before we had transactions, and it
attempted to use its own fsync() calls to make it safe. Now that we
have transactions we can do it in a much safer (and faster!) fashion

commit f448fde4e35e56508ad93be8de9f60d88e8b8dcd
Merge: a226d86dcec393b2cd657d5441c3041dfdf5cd8f 
530758dc2a6dd6dce083789b328e16e51ba6573d
Author: Andrew Tridgell tri...@samba.org
Date:   Tue Dec 16 11:41:20 2008 +1100

Merge branch 'master' of ssh://git.samba.org/data/git/samba

commit a226d86dcec393b2cd657d5441c3041dfdf5cd8f
Merge: 30eff4f31b497ac94d8ee02ee2ec24bc8865ce0d 
85b8cccab072bab263061654b677bc84826646c9
Author: Andrew Tridgell tri...@samba.org
Date:   Wed Dec 3 17:47:39 2008 +1100

Merge branch 'master' of ssh://git.samba.org/data/git/samba

commit 30eff4f31b497ac94d8ee02ee2ec24bc8865ce0d
Author: Andrew Tridgell tri...@samba.org
Date:   Thu Nov 6 14:02:40 2008 +1100

fixed options argument to ldb connect in python

The options argument to ldb connect() needs to be marked for the same
special handling as attrs in search

commit 41a1c882d4adec957a1ed180b53fd6874d9524f2
Author: Andrew Tridgell tri...@samba.org
Date:   Thu Nov 6 11:13:37 2008 +1100

don't give errors when an empty modules list is given to ldb

commit ae795a09796b35c464c2cc89c53776e63e608686
Author: Andrew Tridgell tri...@samba.org
Date:   Thu Nov 6 11:02:20 2008 +1100

we need to remove the pidl Makefile on make clean to handle upgrades
to perl versions

---

Summary of changes:
 lib/tdb/common/tdb.c  |   89 +
 lib/tdb/include/tdb.h |5 ++-
 lib/tdb/tools/tdbbackup.c |   25 +++--
 pidl/config.mk|3 +
 source4/lib/ldb/common/ldb_modules.c  |   11 +++-
 source4/lib/ldb/include/ldb_private.h |3 -
 source4/lib/ldb/ldb.i |4 +-
 source4/lib/ldb/ldb_tdb/ldb_index.c   |4 ++
 source4/lib/ldb/ldb_wrap.c|   24 ++---
 source4/lib/ldb/tools/ldbadd.c|   10 
 source4/lib/ldb/tools/ldbedit.c   |   10 
 source4/lib/ldb/tools/ldbmodify.c |   10 
 12 files changed, 176 insertions(+), 22 deletions(-)


Changeset truncated at 500 lines:

diff --git a/lib/tdb/common/tdb.c b/lib/tdb/common/tdb.c
index c7cec29..8c61ec1 100644
--- a/lib/tdb/common/tdb.c
+++ b/lib/tdb/common/tdb.c
@@ -800,3 +800,92 @@ failed:
tdb_unlockall(tdb);
return -1;
 }
+
+struct 

[SCM] Samba Shared Repository - branch master updated - 5f20d219c39311126108ba74d8072814ecabc8fe

2008-12-15 Thread Andrew Bartlett
The branch, master has been updated
   via  5f20d219c39311126108ba74d8072814ecabc8fe (commit)
   via  9057c2522adf8d17a07fd3c747d7fed06a523af6 (commit)
  from  4380a374c1dec46ad77939604e548f0c79d9e2ec (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 5f20d219c39311126108ba74d8072814ecabc8fe
Merge: 9057c2522adf8d17a07fd3c747d7fed06a523af6 
4380a374c1dec46ad77939604e548f0c79d9e2ec
Author: Andrew Bartlett abart...@samba.org
Date:   Tue Dec 16 16:23:10 2008 +1100

Merge branch 'master' of ssh://git.samba.org/data/git/samba into 
abartlet-devel

commit 9057c2522adf8d17a07fd3c747d7fed06a523af6
Author: Andrew Bartlett abart...@samba.org
Date:   Tue Dec 16 11:25:29 2008 +1100

A more-commented version of rpc_server crash fix, matching closer the
previous behaviour for the 'bad bind' case.

(It is only close, not matching - Windows 2008 sends a different,
non-zero, assoc_group_id each time)

Andrew Bartlett

---

Summary of changes:
 source4/rpc_server/dcerpc_server.c |   15 ++-
 1 files changed, 14 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/rpc_server/dcerpc_server.c 
b/source4/rpc_server/dcerpc_server.c
index 5f055ae..d27a8b9 100644
--- a/source4/rpc_server/dcerpc_server.c
+++ b/source4/rpc_server/dcerpc_server.c
@@ -648,7 +648,20 @@ static NTSTATUS dcesrv_bind(struct dcesrv_call_state *call)
pkt.pfc_flags = DCERPC_PFC_FLAG_FIRST | DCERPC_PFC_FLAG_LAST | 
extra_flags;
pkt.u.bind_ack.max_xmit_frag = 0x2000;
pkt.u.bind_ack.max_recv_frag = 0x2000;
-   pkt.u.bind_ack.assoc_group_id = iface?call-context-assoc_group_id:0;
+
+   /*
+ make it possible for iface-bind() to specify the assoc_group_id
+ This helps the openchange mapiproxy plugin to work correctly.
+ 
+ metze
+   */
+   if (call-context) {
+   pkt.u.bind_ack.assoc_group_id = call-context-assoc_group_id;
+   } else {
+   /* we better pick something - this chosen so as to send a non 
zero assoc_group_id (matching windows), it also matches samba3 */
+   pkt.u.bind_ack.assoc_group_id = SAMBA_ASSOC_GROUP;
+   }
+
if (iface) {
/* FIXME: Use pipe name as specified by endpoint instead of 
interface name */
pkt.u.bind_ack.secondary_address = talloc_asprintf(call, 
\\PIPE\\%s, iface-name);


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated - 2f17be1f57b895b0e37e0a3d77d2ffea4d34d340

2008-12-15 Thread Tim Prouty
The branch, master has been updated
   via  2f17be1f57b895b0e37e0a3d77d2ffea4d34d340 (commit)
   via  70874ceed92c60a2c016ea05507b0fa273f1d853 (commit)
   via  8e1db7eab17ea0dcb052bc330ab31636906a59fe (commit)
  from  5f20d219c39311126108ba74d8072814ecabc8fe (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 2f17be1f57b895b0e37e0a3d77d2ffea4d34d340
Author: Dan Sledz dsl...@isilon.com
Date:   Mon Dec 15 17:12:49 2008 -0800

s3: Use DEBUGADD instead of DEBUG to avoid printing the header

commit 70874ceed92c60a2c016ea05507b0fa273f1d853
Author: Tim Prouty tpro...@samba.org
Date:   Mon Dec 15 23:13:26 2008 -0800

s3: Fix differing signedness build warnings

commit 8e1db7eab17ea0dcb052bc330ab31636906a59fe
Author: Tim Prouty tpro...@samba.org
Date:   Mon Dec 15 22:34:07 2008 -0800

s3: Fix a few build warnings

---

Summary of changes:
 source3/lib/util_sock.c|5 +-
 source3/modules/getdate.c  | 1397 +---
 source3/modules/getdate.y  |   18 +-
 source3/rpc_parse/parse_misc.c |2 +-
 source3/rpc_parse/parse_prs.c  |   52 +-
 5 files changed, 921 insertions(+), 553 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/lib/util_sock.c b/source3/lib/util_sock.c
index 605bbf1..7fe8ed8 100644
--- a/source3/lib/util_sock.c
+++ b/source3/lib/util_sock.c
@@ -368,13 +368,14 @@ static void print_socket_options(int s)
 * leak in SCO Openserver 5.0 */
/* reported on samba-technical  --jerry */
if ( DEBUGLEVEL = 5 ) {
+   DEBUG(5,(Socket options:\n));
for (; p-name != NULL; p++) {
if (getsockopt(s, p-level, p-option,
(void *)value, vlen) == -1) {
-   DEBUG(5,(Could not test socket option %s.\n,
+   DEBUGADD(5,(\tCould not test socket option 
%s.\n,
p-name));
} else {
-   DEBUG(5,(socket option %s = %d\n,
+   DEBUGADD(5,(\t%s = %d\n,
p-name,value));
}
}
diff --git a/source3/modules/getdate.c b/source3/modules/getdate.c
index 149a3e1..a27b75f 100644
--- a/source3/modules/getdate.c
+++ b/source3/modules/getdate.c
@@ -1,7 +1,9 @@
-/* A Bison parser, made by GNU Bison 1.875a.  */
+/* A Bison parser, made by GNU Bison 2.3.  */
 
-/* Skeleton parser for Yacc-like parsing with Bison,
-   Copyright (C) 1984, 1989, 1990, 2000, 2001, 2002, 2003 Free Software 
Foundation, Inc.
+/* Skeleton implementation for Bison's Yacc-like parsers in C
+
+   Copyright (C) 1984, 1989, 1990, 2000, 2001, 2002, 2003, 2004, 2005, 2006
+   Free Software Foundation, Inc.
 
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
@@ -14,15 +16,25 @@
GNU General Public License for more details.
 
You should have received a copy of the GNU General Public License
-   along with this program; if not, see http://www.gnu.org/licenses/.  */
-
-/* As a special exception, when this file is copied by Bison into a
-   Bison output file, you may use that output file without restriction.
-   This special exception was added by the Free Software Foundation
-   in version 1.24 of Bison.  */
-
-/* Written by Richard Stallman by simplifying the original so called
-   ``semantic'' parser.  */
+   along with this program; if not, write to the Free Software
+   Foundation, Inc., 51 Franklin Street, Fifth Floor,
+   Boston, MA 02110-1301, USA.  */
+
+/* As a special exception, you may create a larger work that contains
+   part or all of the Bison parser skeleton and distribute that work
+   under terms of your choice, so long as that work isn't itself a
+   parser generator using the skeleton or a modified version thereof
+   as a parser skeleton.  Alternatively, if you modify or redistribute
+   the parser skeleton itself, you may (at your option) remove this
+   special exception, which will cause the skeleton and the resulting
+   Bison output files to be licensed under the GNU General Public
+   License without this special exception.
+
+   This special exception was added by the Free Software Foundation in
+   version 2.2 of Bison.  */
+
+/* C LALR(1) parser skeleton written by Richard Stallman, by
+   simplifying the original so-called semantic parser.  */
 
 /* All symbols defined below should begin with yy or YY, to avoid
infringing on user name space.  This should be done even for local
@@ -34,6 +46,9 @@
 /* Identify Bison output.  */
 #define YYBISON 1
 
+/* Bison version.  */
+#define YYBISON_VERSION