[Samba] Re: smbclient with Kerberos works, smbclient with NTLM does not?
It turned out that my problem was caused by LMCompatibilityLevel on Windows being set to 5. I have set this to 3 and now smbclient NTLM authentication works. Setting client ntlmv2 auth = yes also allowed smbclient NTLM authentication to work while LMCompatibilityLevel was still set to 5. My question is: shouldn't Samba have negotiated a working protocol regardless of the client ntlmv2 auth setting in smb.conf? The windows server in question is Windows 2003 R2. 2009/3/20 Peter Rosenthal voipers...@gmail.com If someone could at least give me an idea of how to go about debugging this problem (relevant log files/debug levels/errors on windows itself) I would be very grateful. 2009/3/16 Peter Rosenthal voipers...@gmail.com Hello, I am investigating some strange authentication problems with our network. I am attempting to access a share on a DC with smbclient. If I authenticate with kerberos (kinit, then smbclient -k) then everything works fine. If, instead I use -U administrator -W DOMAIN, or just -U administrator, I get session setup failed: NT_STATUS_LOGON_FAILURE This is samba 3.3.2. Here is the d5 output from smbclient: INFO: Current debug levels: all: True/5 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: False/0 locking: False/0 msdfs: False/0 dmapi: False/0 registry: False/0 lp_load_ex: refreshing parameters Initialising global parameters params.c:pm_process() - Processing configuration file /etc/samba/smb.conf Processing section [global] doing parameter workgroup = TESTDOMAIN doing parameter server string = Samba Server Version %v doing parameter log file = /var/log/samba/log.%m doing parameter max log size = 50 doing parameter security = ads doing parameter realm = TESTDOMAIN.COM doing parameter encrypt passwords = yes doing parameter winbind enum users = yes doing parameter winbind enum groups = yes doing parameter winbind use default domain = yes doing parameter winbind separator = / doing parameter winbind nested groups = yes doing parameter winbind refresh tickets = true doing parameter winbind nss info = rfc2307 doing parameter use kerberos keytab = yes doing parameter idmap config TESTDOMAIN : backend = ad doing parameter idmap config TESTDOMAIN : range = 1-99 doing parameter idmap config TESTDOMAIN : schema_mode = rfc2307 doing parameter winbind offline logon = yes doing parameter template homedir = /home/%U pm_process() returned Yes Attempting to register new charset UCS-2LE Registered charset UCS-2LE Attempting to register new charset UTF-16LE Registered charset UTF-16LE Attempting to register new charset UCS-2BE Registered charset UCS-2BE Attempting to register new charset UTF-16BE Registered charset UTF-16BE Attempting to register new charset UTF8 Registered charset UTF8 Attempting to register new charset UTF-8 Registered charset UTF-8 Attempting to register new charset ASCII Registered charset ASCII Attempting to register new charset 646 Registered charset 646 Attempting to register new charset ISO-8859-1 Registered charset ISO-8859-1 Attempting to register new charset UCS2-HEX Registered charset UCS2-HEX Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE added interface eth0 ip=X bcast=X:::: netmask=::::: added interface eth0 ip=X bcast=fe80:::::%eth0 netmask=::::: added interface eth0 ip=192.168.0.7 bcast=192.168.0.255 netmask=255.255.255.0 Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Netbios name list:- my_netbios_names[0]=EL5 Client started (version 3.3.2). Opening cache file at /var/lib/samba/gencache.tdb tdb(unnamed): tdb_open_ex: could not open file /var/lib/samba/gencache.tdb: Permission denied gencache_init: Opening cache file /var/lib/samba/gencache.tdb read-only. sitename_fetch: Returning sitename for TESTDOMAIN.COM:
[Samba] Re: Short delay when logging in an XP client to a Samba PDC
Volker Lendecke Volker.Lendecke at SerNet.DE writes: On Fri, Mar 20, 2009 at 06:54:08PM +, Eric Woltermann wrote: [2009/03/20 18:43:45, 3] smbd/open.c:open_file(240) Tester opened file Tester/ntuser.ini read=Yes write=No (numopen=2) [2009/03/20 18:43:49, 3] smbd/close.c:close_normal_file(228) Tester closed file Tester/ntuser.dat (numopen=1) To really figure out what's wrong, we need a debug level 10 log with debug hires timestamp = yes being set. Volker Hello Volker, thanks for the quick reply. Just took the log you requested; it's available at http://speedshare.org/download.php?id=DFF4FCB13 (~63 kB gzipped). The log starts at the first line after pressing the OK button in XP's login dialog. I have inserted a comment at the position of the delay; it's at line 1797. Then I cut off the rest starting at the point when the profile is loaded (after ntuser.*). Perhaps this delay is a very normal thing in Samba/NT4-style domains. I can only compare it with my university's Win2k3 domain where there is no delay at all between pressing OK and the loading your personal settings box. Eric -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Re: Short delay when logging in an XP client to a Samba PDC
On Sat, Mar 21, 2009 at 11:07:42AM +, Eric Woltermann wrote: thanks for the quick reply. Just took the log you requested; it's available at http://speedshare.org/download.php?id=DFF4FCB13 (~63 kB gzipped). The log starts at the first line after pressing This spam thing just says Bitte warten Sie. Apparently it wants me to sign up for the premium account anything. Sorry, but I will not pay for getting that log file. Volker pgpxcXafrV0s8.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Re: Short delay when logging in an XP client to a Samba PDC
Volker Lendecke Volker.Lendecke at SerNet.DE writes: This spam thing just says Bitte warten Sie. Apparently it wants me to sign up for the premium account anything. Sorry, but I will not pay for getting that log file. Volker Sorry, should have taken more time for that step. :) http://www.tf.uni-kiel.de/~ew/samba.log.gz -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Can join ADS domain, all accounts/auth work fine, but leaving domain fails
Rob LaRose wrote: Hi Mark, Mind if I ask how you're doing ssh against your Windows AD? I'm trying to do this now. I've got a script that joins me to the domain and makes SSH work but not samba. Then I can do net ads join and samba works but not ssh. Gotta find the happy medium! Are you somehow using samba to auth ssh too? --Rob LaRose Imaginary Forces On Mar 19, 2009, at 3:19 PM, Mark Casey wrote: Hello all, As the subject says, as far as I can tell everything works on my ads integrated samba server. Domain accounts can be used for ssh, and accessing shares, I just can't leave the domain. Here is a successful join command followed by an unsuccessful leave command at debug level 4. Any ideas? TIA, Mark u...@dordal:~$ sudo net ads join -U administra...@mydomain.com -d 4 [2009/03/19 14:00:07, 3] param/loadparm.c:lp_load(5063) lp_load: refreshing parameters [2009/03/19 14:00:07, 3] param/loadparm.c:init_globals(1448) Initialising global parameters [2009/03/19 14:00:07, 3] param/params.c:pm_process(572) params.c:pm_process() - Processing configuration file /etc/samba/smb.conf [2009/03/19 14:00:07, 3] param/loadparm.c:do_section(3802) Processing section [global] doing parameter workgroup = MYDOMAIN doing parameter realm = MYDOMAIN.COM doing parameter security = ADS doing parameter password server = dal-dc1.mydomain.com, den-dc1.mydomain.com doing parameter client schannel = Yes doing parameter server schannel = Yes doing parameter username map = /etc/samba/smbusers doing parameter obey pam restrictions = Yes doing parameter enable privileges = Yes doing parameter restrict anonymous = 2 doing parameter allow trusted domains = No doing parameter lanman auth = No doing parameter ntlm auth = No doing parameter client NTLMv2 auth = Yes doing parameter log level = 1 doing parameter syslog = 0 doing parameter min protocol = NT1 doing parameter client signing = Yes doing parameter server signing = Yes doing parameter load printers = No doing parameter preferred master = No doing parameter local master = No doing parameter domain master = No doing parameter dns proxy = No doing parameter ldap ssl = no doing parameter host msdfs = No doing parameter idmap domains = MYDOMAIN doing parameter idmap alloc backend = ldap doing parameter template shell = /bin/false doing parameter winbind enum users = Yes doing parameter winbind enum groups = Yes doing parameter winbind use default domain = Yes doing parameter winbind refresh tickets = Yes doing parameter idmap alloc config:range = 10 - 50 doing parameter idmap alloc config:ldap_url = ldap://dal-dc1.mydomain.com ldap://den-dc1.mydomain.com doing parameter idmap alloc config:ldap_user_dn = cn=idmapmgr,cn=users,dc=mydomain,dc=com doing parameter idmap alloc config:ldap_base_dn = ou=idmap,dc=sambaidmap,dc=mydomain,dc=com doing parameter idmap config MYDOMAIN:range = 10 - 50 doing parameter idmap config MYDOMAIN:ldap_url = ldap://dal-dc1.mydomain.com ldap://den-dc1.mydomain.com doing parameter idmap config MYDOMAIN:ldap_user_dn = cn=idmapmgr,cn=users,dc=mydomain,dc=com doing parameter idmap config MYDOMAIN:ldap_base_dn = ou=idmap,dc=sambaidmap,dc=mydomain,dc=com doing parameter idmap config MYDOMAIN:backend = ldap doing parameter idmap config MYDOMAIN:default = yes doing parameter hosts allow = 10.0.0.0/255.255.254.0 10.1.0.0/255.255.254.0 doing parameter map acl inherit = No doing parameter hide special files = Yes doing parameter map archive = No doing parameter map readonly = No doing parameter map system = No doing parameter map hidden = No doing parameter ea support = No doing parameter store dos attributes = No doing parameter wide links = No doing parameter follow symlinks = No doing parameter dos filemode = No doing parameter add share command = /etc/samba/command.pl doing parameter delete share command = /etc/samba/command.pl doing parameter change share command = /etc/samba/command.pl [2009/03/19 14:00:07, 4] param/loadparm.c:lp_load(5094) pm_process() returned Yes [2009/03/19 14:00:07, 2] lib/interface.c:add_interface(81) added interface ip=10.0.1.35 bcast=10.0.1.255 nmask=255.255.254.0 [2009/03/19 14:00:07, 4] libsmb/namequery_dc.c:ads_dc_name(73) ads_dc_name: domain=MYDOMAIN [2009/03/19 14:00:07, 3] libsmb/namequery.c:get_dc_list(1489) get_dc_list: preferred server list: 10.0.1.30, dal-dc1.mydomain.com, den-dc1.mydomain.com [2009/03/19 14:00:07, 4] libsmb/namequery.c:get_dc_list(1599) get_dc_list: returning 2 ip addresses in an ordered list [2009/03/19 14:00:07, 4] libsmb/namequery.c:get_dc_list(1600) get_dc_list: 10.0.1.30:389 10.1.1.30:389 [2009/03/19 14:00:07, 3] libads/ldap.c:ads_connect(394) Connected to LDAP server 10.0.1.30 [2009/03/19 14:00:07, 3] libsmb/namequery.c:get_dc_list(1489) get_dc_list: preferred server list: 10.0.1.30, dal-dc1.mydomain.com, den-dc1.mydomain.com [2009/03/19 14:00:07, 4] libsmb/namequery.c:get_dc_list(1599) get_dc_list: returning 2 ip addresses in an ordered list
[Samba] trouble with winbind on Centos 5.2
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, currently I'm testing samba authenticating against ADS. Samba is joined to that domain, getent passwd and wbinfo -u works as expected, but when I try to ssh to the samba server with an account in AD it failes. I've turned debug on for pam_winbind.so in /etc/pam.d/system-auth. When I try to connect I get the following in /var/log/secure Mar 21 16:10:35 samba-ads sshd[20542]: PAM unable to dlopen(/lib64/security/pam_winbind.so) Mar 21 16:10:35 samba-ads sshd[20542]: PAM [error: /lib64/security/pam_winbind.so: undefined symbol: talloc_asprintf] Mar 21 16:10:35 samba-ads sshd[20542]: PAM adding faulty module: /lib64/security/pam_winbind.so Mar 21 16:10:37 samba-ads sshd[20542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mgr2.nic.isb.d e.renzel.net user=mgr1 Mar 21 16:10:39 samba-ads sshd[20542]: Failed password for mgr1 from 10.2.0.5 port 55762 ssh2 I've installed the recent sernet-samba (samba3-3.3.2-38 ff) packages from repo. User's homedir is created manually with the right UID:GID from getent passwd, changing 'winbind use default domain' doesn't change anything. Cheers Matthias -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAknFCFYACgkQf3LySRiTg2xl0wCgjVTF3cgfEt5bGA2cuPZh0/p6 3vQAnR/1h58J0SkhJ3x1cNLVg/xLpSof =4iIR -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Re: Short delay when logging in an XP client to a Samba PDC
On Sat, Mar 21, 2009 at 12:19:04PM +0100, LiPi - wrote: There is a button that says: Download It does not require any registration... Tried it, did nothing for me. Volker pgpj6zGrt4flj.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] trouble with winbind on Centos 5.2
I'm might be wrong but it looks like the rpm binary you have is not compatible. I built my own from source easily enough. Grab the tarball from samba.org and extract: samba-3.3.2/packaging/RHEL ./makerpms.sh You'll obviously need compiler, rpm-build package and any dependencies the rpm build process complains about. 2009/3/21 Matthias Grimm eiso...@eisofen.de -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, currently I'm testing samba authenticating against ADS. Samba is joined to that domain, getent passwd and wbinfo -u works as expected, but when I try to ssh to the samba server with an account in AD it failes. I've turned debug on for pam_winbind.so in /etc/pam.d/system-auth. When I try to connect I get the following in /var/log/secure Mar 21 16:10:35 samba-ads sshd[20542]: PAM unable to dlopen(/lib64/security/pam_winbind.so) Mar 21 16:10:35 samba-ads sshd[20542]: PAM [error: /lib64/security/pam_winbind.so: undefined symbol: talloc_asprintf] Mar 21 16:10:35 samba-ads sshd[20542]: PAM adding faulty module: /lib64/security/pam_winbind.so Mar 21 16:10:37 samba-ads sshd[20542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mgr2.nic.isb.d e.renzel.net user=mgr1 Mar 21 16:10:39 samba-ads sshd[20542]: Failed password for mgr1 from 10.2.0.5 port 55762 ssh2 I've installed the recent sernet-samba (samba3-3.3.2-38 ff) packages from repo. User's homedir is created manually with the right UID:GID from getent passwd, changing 'winbind use default domain' doesn't change anything. Cheers Matthias -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAknFCFYACgkQf3LySRiTg2xl0wCgjVTF3cgfEt5bGA2cuPZh0/p6 3vQAnR/1h58J0SkhJ3x1cNLVg/xLpSof =4iIR -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: SV: Re[2]: [Samba] net use /home ?
Anders Norrbring skrev: On Fri, 13 Feb 2009 08:44:07 -0500 John Drescher dresche...@gmail.com wrote: JD It works alright, and all users have full access to their own home JD directories. Also, say user elsa logs in. She won't get a mapping to JD \\server\elsa via the 'net use j: /home' command, but she will get full JD access with 'net use j: \\server\elsa' JD JD Go figure.. Also, nothing really changed on the system apart from upgrading JD the samba package from 2 to 3.2.8, that's the strange thing.. JD JD I am sorry.. I see now. JD I have always used the UNC path. Samba 3.2.4 on Vista SP1 C:\Users\jjnet use g: /home Drive g: is now connected to \\PDC\jj. Your home directory is g:\. If it´s a samba issue (which I doubt) it have to be between 3.2.4 and 3.2.8 What's the result of set home on your windows machines? C:\Users\jjset home HOMEDRIVE=h: HOMEPATH=\ HOMESHARE=\\PDC\jj I suppose the command: net use drive /home uses the value of HOMESHARE -- Jean-Jacques Moulis Tel: (013) 281684 ISYFax: (013) 139282 Linköping UniversityE-mail: j...@isy.liu.se 581 83 Linköping Well.. Since I can't connect to the '/home' share, I don't get much out of it all.. Vista Business SP1: C:\Users\andersnet use * /home Det går inte att identifiera användarens arbetskatalog. Du kan få mer hjälp genom att skriva NET HELPMSG 3915. C:\Users\andersset home HOMEDRIVE=C: HOMEPATH=\Users\anders And on one of the WinXP machines: J:\net use * /home Det går inte att identifiera användarens arbetskatalog. Du kan få mer hjälp genom att skriva NET HELPMSG 3915. J:\set home HOMEDRIVE=J: HOMEPATH=\ HOMESHARE=\\beata\anders I still haven't found the cause of this problem, so I'm turning to you fellows on the list again... Anders. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] trouble with winbind on Centos 5.2
I'll give it a try, since I'll need samba with ctdb-support for further cluster testing anyways :) But maybe there was something missing or went wrong without notice when sernet (no offence) built the packages for CentOS 5. May the fault is on my side, since I use packages from -plus. ;) Matthias Peter Rosenthal schrieb: I'm might be wrong but it looks like the rpm binary you have is not compatible. I built my own from source easily enough. Grab the tarball from samba.org and extract: samba-3.3.2/packaging/RHEL ./makerpms.sh You'll obviously need compiler, rpm-build package and any dependencies the rpm build process complains about. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Windows server 2003 SP2, SFU 3.5 and Samba 3.0.28
Hello list users, I have been struggling with this combination in the subject field couple of days now, so I decided to ask for some advice here. Hopefully someone can point me to a right direction. The ultimate goal for me is to authenticate users using AD, so that the UID/GID values configured for users with SFU would also be in use in all our Linux machines. My understanding is that using correctly configured winbind + pam + nsswitch should produce the desired result. I have been able to join a Linux box to our Windows server 2003 hosted domain, but getting user/group info out of AD seems to cause some trouble. I have been mostly experimenting with wbinfo tool. Running wbinfo -i someuser results in Could not get info for user someuser, with logs as below. One specific question which has been troubling me is that what should be the value in for winbind nss info? Googling has revealed that the two possibilities are sfu and rfc2307. But I haven't been able to find any decent documentation about when sfu should be used and when rfc2307. Are these somehow related to what SFU version is in use at the AD side? - Regards, Petteri Heinonen log.winbindd: [2009/03/21 22:59:04, 6] nsswitch/winbindd.c:new_connection(628) accepted socket 18 [2009/03/21 22:59:04, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(491) [ 1876]: request interface version [2009/03/21 22:59:04, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(524) [ 1876]: request location of privileged pipe [2009/03/21 22:59:04, 6] nsswitch/winbindd.c:new_connection(628) accepted socket 19 [2009/03/21 22:59:04, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(346) [ 1876]: getpwnam someuser [2009/03/21 22:59:05, 5] nsswitch/winbindd_async.c:winbindd_sid2uid_recv(347) sid2uid returned an error [2009/03/21 22:59:05, 5] nsswitch/winbindd_user.c:getpwsid_sid2uid_recv(266) Could not query uid for user DOMAIN\someuser log.winbindd-idmap: [2009/03/21 22:59:04, 4] nsswitch/winbindd_dual.c:fork_domain_child(1065) child daemon request 48 [2009/03/21 22:59:04, 3] nsswitch/winbindd_async.c:winbindd_dual_sid2uid(374) [ 1862]: sid to uid S-1-5-21-2285760618-154678-830142390-7708 [2009/03/21 22:59:04, 7] nsswitch/idmap_ad.c:ad_idmap_cached_connection_internal(77) Current tickets expire in 35425 seconds (at 1237704569, time is now 1237669144) [2009/03/21 22:59:05, 5] libads/ldap_utils.c:ads_do_search_retry_internal(64) Search for (|(attributeId=1.3.6.1.1.1.1.0)(attributeId=1.3.6.1.1.1.1.1)(attributeId =1.3.6.1.1.1.1.3)(attributeId=1.3.6.1.1.1.1.4)(attributeId=1.3.6.1.1.1.1 .2)) in CN=Schema,CN=Configuration,DC=bothi,DC=fi gave 0 replies [2009/03/21 22:59:05, 3] libads/ldap_schema.c:ads_check_posix_schema_mapping(243) ads_check_posix_schema_mapping: failed NT_STATUS_NONE_MAPPED [2009/03/21 22:59:05, 2] nsswitch/idmap_ad.c:ad_idmap_cached_connection(152) ad_idmap_cached_connection: Failed to obtain schema details! [2009/03/21 22:59:05, 1] nsswitch/idmap_ad.c:idmap_ad_sids_to_unixids(514) ADS uninitialized [2009/03/21 22:59:05, 2] nsswitch/idmap.c:idmap_backends_sids_to_unixids(1163) ERROR: NTSTATUS = 0xc001 smb.conf: [global] # general part security = ADS interfaces = eth0 realm = DOMAIN.FI workgroup = DOMAIN netbios name = LUPUS domain master = no local master = no preferred master = no server string = %h encrypt passwords = yes wins support = no wins server = ad1.domain.fi use kerberos keytab = yes password server = ad1.domain.fi # logging log level = 8 log file = /var/log/samba/log.%m max log size = 1000 syslog = 0 # disable printing load printers = no printing = bsd printcap name = /dev/null show add printer wizard = no disable spoolss = yes #winbind winbind enum users = no winbind enum groups = no winbind use default domain = yes winbind nested groups = yes winbind separator = + winbind nss info = rfc2307 winbind cache time = 120 idmap backend = ad idmap uid = 2000-2 idmap gid = 2000-2 template shell = /bin/bash template homedir = /home/%D/%U client use spnego = yes SASKEN BUSINESS DISCLAIMER - This message may contain confidential, proprietary or legally privileged information. In case you are not the original intended Recipient of the message, you must not, directly or indirectly, use, Disclose, distribute, print, or copy any part of this message and you are requested to delete it and inform the sender. Any views expressed in this message are those of the individual sender unless otherwise stated. Nothing contained in this message shall be construed as an offer or acceptance of any offer by Sasken Communication Technologies Limited (Sasken) unless sent with that express intent and with due authority of Sasken. Sasken has taken enough precautions to prevent the spread of viruses. However the company accepts no liability for any damage caused by
[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha7-632-g3b73cdb
The branch, master has been updated
via 3b73cdb41201dd545e019e8e8313f6b8c51c7226 (commit)
via 431fc718c13d259748ac20019997241981639c95 (commit)
via 593ab6ac00c217f6d661b4babface40a0b0dd4ce (commit)
via 6ef1442360a35284e498eea701fc2eab43c5 (commit)
via 66dc53ee017d74a6f610bbe04337f064901fe2a1 (commit)
from 62ab39dde37f5570b336b9db5b4e3c2e4640e877 (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit 3b73cdb41201dd545e019e8e8313f6b8c51c7226
Author: Stefan Metzmacher me...@samba.org
Date: Wed Jan 28 10:10:12 2009 +0100
s3:nmbd: implement a MAILSLOT = CLDAP proxy for NETLOGON_SAMLOGON requests
This will be used as part a the franky setup, where nmbd will forward
the MAILSLOT requests to the local samba4 CLDAP server.
nmbd_proxy_logon:cldap_server = 127.0.0.1 would configure
and activate this feature.
metze
commit 431fc718c13d259748ac20019997241981639c95
Author: Stefan Metzmacher me...@samba.org
Date: Fri Mar 20 16:18:47 2009 +0100
selftest/Samba3: always use the same timeout for all servers
metze
commit 593ab6ac00c217f6d661b4babface40a0b0dd4ce
Author: Stefan Metzmacher me...@samba.org
Date: Fri Mar 20 16:11:14 2009 +0100
s4:selftest: rename SMBD_VALGRIND = SAMBA_VALGRIND
metze
commit 6ef1442360a35284e498eea701fc2eab43c5
Author: Stefan Metzmacher me...@samba.org
Date: Fri Mar 20 15:13:39 2009 +0100
s4:smbd: the name of the binary is samba now
metze
commit 66dc53ee017d74a6f610bbe04337f064901fe2a1
Author: Stefan Metzmacher me...@samba.org
Date: Fri Mar 20 16:27:17 2009 +0100
socket_wrapper: fix connect() for dgram sockets, if the destination isn't
there yet
metze
---
Summary of changes:
lib/socket_wrapper/socket_wrapper.c | 10 +-
selftest/target/Samba3.pm | 32 +++---
selftest/target/Samba4.pm |8 +-
source3/include/proto.h |2 +
source3/nmbd/nmbd.c |6 +
source3/nmbd/nmbd_processlogon.c| 238 +++
source3/samba4.mk | 12 +-
source4/selftest/config.mk | 12 +-
source4/smbd/server.c |2 +-
9 files changed, 285 insertions(+), 37 deletions(-)
Changeset truncated at 500 lines:
diff --git a/lib/socket_wrapper/socket_wrapper.c
b/lib/socket_wrapper/socket_wrapper.c
index 44082e7..1d35c8d 100644
--- a/lib/socket_wrapper/socket_wrapper.c
+++ b/lib/socket_wrapper/socket_wrapper.c
@@ -1686,10 +1686,14 @@ _PUBLIC_ int swrap_connect(int s, const struct sockaddr
*serv_addr, socklen_t ad
ret = sockaddr_convert_to_un(si, (const struct sockaddr *)serv_addr,
addrlen, un_addr, 0, NULL);
if (ret == -1) return -1;
- swrap_dump_packet(si, serv_addr, SWRAP_CONNECT_SEND, NULL, 0);
+ if (si-type == SOCK_DGRAM) {
+ ret = 0;
+ } else {
+ swrap_dump_packet(si, serv_addr, SWRAP_CONNECT_SEND, NULL, 0);
- ret = real_connect(s, (struct sockaddr *)un_addr,
- sizeof(struct sockaddr_un));
+ ret = real_connect(s, (struct sockaddr *)un_addr,
+ sizeof(struct sockaddr_un));
+ }
/* to give better errors */
if (ret == -1 errno == ENOENT) {
diff --git a/selftest/target/Samba3.pm b/selftest/target/Samba3.pm
index 2b96226..78aafa7 100644
--- a/selftest/target/Samba3.pm
+++ b/selftest/target/Samba3.pm
@@ -126,9 +126,8 @@ sub setup_dc($$)
$dc_options);
$self-check_or_start($vars,
- ($ENV{NMBD_MAXTIME} or 2700),
- ($ENV{WINBINDD_MAXTIME} or 2700),
- ($ENV{SMBD_MAXTIME} or 2700));
+ ($ENV{SMBD_MAXTIME} or 2700),
+ yes, yes, yes);
$self-wait_for_start($vars);
@@ -163,9 +162,8 @@ sub setup_member($$$)
system($cmd) == 0 or die(Join failed\n$cmd);
$self-check_or_start($ret,
- ($ENV{NMBD_MAXTIME} or 2700),
- ($ENV{WINBINDD_MAXTIME} or 2700),
- ($ENV{SMBD_MAXTIME} or 2700));
+ ($ENV{SMBD_MAXTIME} or 2700),
+ yes, yes, yes);
$self-wait_for_start($ret);
@@ -212,8 +210,8 @@ sub read_pid($$)
return $pid;
}
-sub check_or_start() {
- my ($self, $env_vars, $nmbd_maxtime, $winbindd_maxtime, $smbd_maxtime)
= @_;
+sub check_or_start($) {
+ my ($self, $env_vars, $maxtime, $nmbd, $winbindd, $smbd) = @_;
unlink($env_vars-{NMBD_TEST_LOG});
print STARTING NMBD...;
@@ -229,13 +227,13 @@ sub check_or_start() {
[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha7-638-gdb447d0
The branch, master has been updated via db447d0c476699dbf7fa0567c67f5938674ec811 (commit) via cfce2d3611f225244fadf3d27d76371827fd6422 (commit) via ba42320c7e9f5ccbd32eccbfb1f2d77e13b3a318 (commit) via 3f9c30022a53a37ad829f8882a9a5161fcadda8b (commit) via d21212c9192b41a3fdc7e96cb9bf0125a1dc6c2d (commit) via f55e84e904173bed8dc9099ad523ca1e7be12355 (commit) from 3b73cdb41201dd545e019e8e8313f6b8c51c7226 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit db447d0c476699dbf7fa0567c67f5938674ec811 Author: Volker Lendecke v...@samba.org Date: Sat Mar 21 16:58:54 2009 +0100 Reformatting commit cfce2d3611f225244fadf3d27d76371827fd6422 Author: Volker Lendecke v...@samba.org Date: Sat Mar 21 16:52:13 2009 +0100 Add some initial hook to the front page commit ba42320c7e9f5ccbd32eccbfb1f2d77e13b3a318 Author: Volker Lendecke v...@samba.org Date: Sat Mar 21 16:50:58 2009 +0100 Add a default undocumented module commit 3f9c30022a53a37ad829f8882a9a5161fcadda8b Author: Volker Lendecke v...@samba.org Date: Sat Mar 21 16:40:33 2009 +0100 Delete talloc_guide.txt commit d21212c9192b41a3fdc7e96cb9bf0125a1dc6c2d Author: Volker Lendecke v...@samba.org Date: Sat Mar 21 12:43:08 2009 +0100 Convert the contents of talloc_guide.txt to doxygen-style talloc.h comments talloc_guide.txt was partly outdated, and as going through talloc.h now shows it was incomplete. commit f55e84e904173bed8dc9099ad523ca1e7be12355 Author: Volker Lendecke v...@samba.org Date: Sat Mar 21 10:17:24 2009 +0100 Add a basic Doxyfile for talloc --- Summary of changes: lib/talloc/Doxyfile |8 + lib/talloc/talloc.h | 1041 ++- lib/talloc/talloc_guide.txt | 694 3 files changed, 1048 insertions(+), 695 deletions(-) create mode 100644 lib/talloc/Doxyfile delete mode 100644 lib/talloc/talloc_guide.txt Changeset truncated at 500 lines: diff --git a/lib/talloc/Doxyfile b/lib/talloc/Doxyfile new file mode 100644 index 000..0ccf563 --- /dev/null +++ b/lib/talloc/Doxyfile @@ -0,0 +1,8 @@ +OUTPUT_DIRECTORY = doc +PROJECT_NAME = Talloc +OPTIMIZE_OUTPUT_FOR_C = YES +GENERATE_LATEX = NO +GENERATE_MAN = YES +MACRO_EXPANSION= YES +EXPAND_ONLY_PREDEF = YES +PREDEFINED = PRINTF_ATTRIBUTE(x,y)= diff --git a/lib/talloc/talloc.h b/lib/talloc/talloc.h index 5c8d5c5..4adc67b 100644 --- a/lib/talloc/talloc.h +++ b/lib/talloc/talloc.h @@ -29,7 +29,134 @@ #include stdio.h #include stdarg.h -/* this is only needed for compatibility with the old talloc */ +/** \mainpage + * + * \section intro_sec Introduction + * + * Talloc is a hierarchical, reference counted memory pool system with + * destructors. Quite a mouthful really, but not too bad once you get used to + * it. + * + * Perhaps the biggest difference from other memory pool systems is that there + * is no distinction between a talloc context and a talloc pointer. Any + * pointer returned from talloc() is itself a valid talloc context. This means + * you can do this: + * + * \code + * struct foo *X = talloc(mem_ctx, struct foo); + * X-name = talloc_strdup(X, foo); + * \endcode + * + * and the pointer X-name would be a child of the talloc context X which + * is itself a child of mem_ctx. So if you do talloc_free(mem_ctx) then it is + * all destroyed, whereas if you do talloc_free(X) then just X and X-name are + * destroyed, and if you do talloc_free(X-name) then just the name element of + * X is destroyed. + * + * If you think about this, then what this effectively gives you is an n-ary + * tree, where you can free any part of the tree with talloc_free(). + * + * To start, you should probably first look at the definitions of + * ::TALLOC_CTX, talloc_init(), talloc() and talloc_free(). + * + * \section named_blocks Named blocks + * + * Every talloc chunk has a name that can be used as a dynamic type-checking + * system. If for some reason like a callback function you had to cast a + * struct foo * to a void * variable, later you can safely reassign the + * void * pointer to a struct foo * by using the talloc_get_type() or + * talloc_get_type_abort() macros. + * + * \code + * struct foo *X = talloc_get_type_abort(ptr, struct foo); + * \endcode + * + * This will abort if ptr does not contain a pointer that has been created + * with talloc(mem_ctx, struct foo). + * + * \section multi_threading Multi-Threading + * + * talloc itself does not deal with threads. It is thread-safe (assuming the + * underlying malloc is), as long as each thread uses different memory + * contexts. + * + * If two threads uses the same context then they need to synchronize in order + * to be safe. In particular: + * + * + * - when
[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha7-639-g27944ed
The branch, master has been updated via 27944ed7452207ef3c686ff6bcd9c4e1cb7f36d8 (commit) from db447d0c476699dbf7fa0567c67f5938674ec811 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 27944ed7452207ef3c686ff6bcd9c4e1cb7f36d8 Author: Volker Lendecke v...@samba.org Date: Sat Mar 21 19:48:54 2009 +0100 Document talloc_pool() --- Summary of changes: lib/talloc/talloc.h | 35 +++ 1 files changed, 35 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/lib/talloc/talloc.h b/lib/talloc/talloc.h index 4adc67b..e44d924 100644 --- a/lib/talloc/talloc.h +++ b/lib/talloc/talloc.h @@ -628,6 +628,41 @@ typedef void TALLOC_CTX; /* The following definitions come from talloc.c */ void *_talloc(const void *context, size_t size); + +/** + * \brief Allocate a talloc pool + * \param context The talloc context to hang the result off + * \param size Size of the talloc pool + * \result The talloc pool + * \ingroup talloc_basic + * + * A talloc pool is a pure optimization for specific situations. In the + * release process for Samba 3.2 we found out that we had become considerably + * slower than Samba 3.0 was. Profiling showed that malloc(3) was a large CPU + * consumer in benchmarks. For Samba 3.2 we have internally converted many + * static buffers to dynamically allocated ones, so malloc(3) being beaten + * more was no surprise. But it made us slower. + * + * talloc_pool() is an optimization to call malloc(3) a lot less for the use + * pattern Samba has: The SMB protocol is mainly a request/response protocol + * where we have to allocate a certain amount of memory per request and free + * that after the SMB reply is sent to the client. + * + * talloc_pool() creates a talloc chunk that you can use as a talloc parent + * exactly as you would use any other ::TALLOC_CTX. The difference is that + * when you talloc a child of this pool, no malloc(3) is done. Instead, talloc + * just increments a pointer inside the talloc_pool. This also works + * recursively. If you use the child of the talloc pool as a parent for + * grand-children, their memory is also taken from the talloc pool. + * + * If you talloc_free() children of a talloc pool, the memory is not given + * back to the system. Instead, free(3) is only called if the talloc_pool() + * itself is released with talloc_free(). + * + * The downside of a talloc pool is that if you talloc_move() a child of a + * talloc pool to a talloc parent outside the pool, the whole pool memory is + * not free(3)'ed until that moved chunk is also talloc_free()ed. + */ void *talloc_pool(const void *context, size_t size); void _talloc_set_destructor(const void *ptr, int (*destructor)(void *)); -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha7-642-g3f81649
The branch, master has been updated
via 3f81649b8dcadb3bd424f41d803dbd59f770b9ba (commit)
via 2ce70d4f5a30973b4cc083dbbb38b519007a31bd (commit)
via 02662d56c64f367bffa2febba9a396c15454cfdb (commit)
from 27944ed7452207ef3c686ff6bcd9c4e1cb7f36d8 (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit 3f81649b8dcadb3bd424f41d803dbd59f770b9ba
Author: Volker Lendecke v...@samba.org
Date: Sat Mar 21 20:02:50 2009 +0100
Document TALLOC_FREE()
commit 2ce70d4f5a30973b4cc083dbbb38b519007a31bd
Author: Volker Lendecke v...@samba.org
Date: Sat Mar 21 20:02:42 2009 +0100
Document _talloc
commit 02662d56c64f367bffa2febba9a396c15454cfdb
Author: Volker Lendecke v...@samba.org
Date: Sat Mar 21 20:02:19 2009 +0100
Add a talloc_internal module
---
Summary of changes:
lib/talloc/talloc.h | 30 +-
1 files changed, 29 insertions(+), 1 deletions(-)
Changeset truncated at 500 lines:
diff --git a/lib/talloc/talloc.h b/lib/talloc/talloc.h
index e44d924..d103d6f 100644
--- a/lib/talloc/talloc.h
+++ b/lib/talloc/talloc.h
@@ -125,6 +125,15 @@
*/
/**
+ * \defgroup talloc_internal Internal routines
+ *
+ * To achieve type-safety, talloc.h defines a lot of macros with type
+ * casts. These macros define the user interface to the internal routines you
+ * find here. You should not really use these routines directly but go through
+ * the external API.
+ */
+
+/**
* \defgroup talloc_undoc Default group of undocumented stuff
*
* This should be empty...
@@ -624,9 +633,28 @@ typedef void TALLOC_CTX;
#define talloc_append_string(c, s, a)
(s?talloc_strdup_append(s,a):talloc_strdup(c, a))
#endif
+/**
+ * \def TALLOC_FREE(ctx)
+ * \brief talloc_free a chunk and NULL out the pointer
+ * \param ctx The chunk to be freed
+ * \ingroup talloc_basic
+ *
+ * TALLOC_FREE() frees a pointer and sets it to NULL. Use this if you want
+ * immediate feedback (i.e. crash) if you use a pointer after having free'ed
+ * it.
+ */
#define TALLOC_FREE(ctx) do { talloc_free(ctx); ctx=NULL; } while(0)
-/* The following definitions come from talloc.c */
+/**
+ * \brief Allocate untyped, unnamed memory
+ * \param context The talloc context to hang the result off
+ * \param size Number of char's that you want to allocate
+ * \return The allocated memory chunk
+ * \ingroup talloc_internal
+ *
+ * Essentially the same as talloc_size() without setting the chunk name to the
+ * current file/line number.
+ */
void *_talloc(const void *context, size_t size);
/**
--
Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha7-643-g986c2e0
The branch, master has been updated via 986c2e01cca0be993f1e52d3a27819f4044bfe4b (commit) from 3f81649b8dcadb3bd424f41d803dbd59f770b9ba (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 986c2e01cca0be993f1e52d3a27819f4044bfe4b Author: Volker Lendecke v...@samba.org Date: Sat Mar 21 23:49:30 2009 +0100 Document talloc_parent, talloc_parent_name and talloc_is_parent --- Summary of changes: lib/talloc/talloc.h | 29 + 1 files changed, 29 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/lib/talloc/talloc.h b/lib/talloc/talloc.h index d103d6f..9806bdd 100644 --- a/lib/talloc/talloc.h +++ b/lib/talloc/talloc.h @@ -849,7 +849,25 @@ const char *talloc_get_name(const void *ptr); void *talloc_check_name(const void *ptr, const char *name); void *_talloc_get_type_abort(const void *ptr, const char *name, const char *location); + +/** + * \brief Return the parent chunk of a pointer + * \param ptr The talloc pointer to inspect + * \return The talloc parent of ptr + * \ingroup talloc_basic + * + * Return the parent chunk of a pointer + */ void *talloc_parent(const void *ptr); + +/** + * \brief Return a talloc chunk's parent name + * \param ptr The talloc pointer to inspect + * \return The name of ptr's parent chunk + * \ingroup talloc_basic + * + * Return a talloc chunk's parent name + */ const char *talloc_parent_name(const void *ptr); /** @@ -1149,6 +1167,17 @@ size_t talloc_get_size(const void *ctx); */ void *talloc_find_parent_byname(const void *ctx, const char *name); void talloc_show_parents(const void *context, FILE *file); + +/** + * \brief Check if a context is parent of a talloc chunk + * \param context The assumed talloc context + * \param ptr The talloc chunk to check + * \return Is context an anchestor of ptr + * \ingroup talloc_basic + * + * talloc_is_parent() checks if context is referenced in the talloc + * hierarchy above ptr. Return 1 if this is the case, 0 if not. + */ int talloc_is_parent(const void *context, const void *ptr); /** -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha7-644-g59dff57
The branch, master has been updated via 59dff5745528a3efe585cdeb03e2bedd6b2e404a (commit) from 986c2e01cca0be993f1e52d3a27819f4044bfe4b (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 59dff5745528a3efe585cdeb03e2bedd6b2e404a Author: Volker Lendecke v...@samba.org Date: Sat Mar 21 23:57:14 2009 +0100 Document talloc_zero_array() --- Summary of changes: lib/talloc/talloc.h | 16 1 files changed, 16 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/lib/talloc/talloc.h b/lib/talloc/talloc.h index 9806bdd..ae488ba 100644 --- a/lib/talloc/talloc.h +++ b/lib/talloc/talloc.h @@ -426,6 +426,22 @@ typedef void TALLOC_CTX; #define talloc_zero_size(ctx, size) _talloc_zero(ctx, size, __location__) +/** + * \def talloc_zero_array(ctx, type, count) + * \brief Allocate a 0-initialized array + * \param ctx The talloc context to hang the result off + * \param type The type that we want to allocate + * \param count The number of type elements you want to allocate + * \return The allocated result, properly cast to type * + * \ingroup talloc_array + * + * The talloc_zero_array() macro is equivalent to: + * + * \code + * ptr = talloc_array(ctx, type, count); + * if (ptr) memset(ptr, sizeof(type) * count); + * \endcode + */ #define talloc_zero_array(ctx, type, count) (type *)_talloc_zero_array(ctx, sizeof(type), count, #type) /** -- Samba Shared Repository
Build status as of Sun Mar 22 00:00:02 2009
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2009-03-21 00:00:30.0 + +++ /home/build/master/cache/broken_results.txt 2009-03-22 00:00:17.0 + @@ -1,4 +1,4 @@ -Build status as of Sat Mar 21 00:00:02 2009 +Build status as of Sun Mar 22 00:00:02 2009 Build counts: Tree Total Broken Panic @@ -6,16 +6,16 @@ ccache 30 5 0 ctdb 0 0 0 distcc 0 0 0 -ldb 29 30 0 -libreplace 28 11 0 +ldb 30 30 0 +libreplace 30 11 0 lorikeet-heimdal 27 14 0 pidl 21 3 0 ppp 13 0 0 -rsync30 10 0 +rsync29 10 0 samba-docs 0 0 0 samba-gtk5 5 0 samba_3_X_devel 29 28 0 -samba_3_X_test 27 25 1 +samba_3_X_test 28 25 1 samba_4_0_test 30 29 1 smb-build29 6 0 talloc 30 30 0
