Re: [Samba] Re: samba Digest, Vol 76, Issue 10

2009-04-11 Thread Volker Lendecke
On Sat, Apr 11, 2009 at 08:44:01AM +0200, Alex Thurley wrote:
 I wonder if somebody has a correctly working SMB service in Mac OS X  
 Server 10.5.x. I've got here lots of This process has forked.. and  
 Broken Pipe errors as described in this post: 
 http://www.afp548.com/forum/viewtopic.php?showtopic=22295
 
 Would be nice if a Samba-guru could point us to the right direction.

This seems to come from a samba module called odsam that is
not part of upstream Samba. The corresponding patch is
available from

http://www.opensource.apple.com/darwinsource/10.5.6/samba-187.8/patches/auth-module-open-directory

but has not been submitted by Apple for upstream Samba. In
fact, it carries a

   Copyright (C) 2003-2007 Apple Inc. All Rights Reserved.

which to me seems quite interesting for GPL code :-)

Please contact your Apple support for help with this issue.

Thanks,

Volker


pgp2FgRzCQyQi.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Re: samba Digest, Vol 76, Issue 10

2009-04-11 Thread Alex Thurley

Dear List,

I wonder if somebody has a correctly working SMB service in Mac OS X  
Server 10.5.x. I've got here lots of This process has forked.. and  
Broken Pipe errors as described in this post: http://www.afp548.com/forum/viewtopic.php?showtopic=22295


Would be nice if a Samba-guru could point us to the right direction.

Thanks,

Alex

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Re: Some questions about Samba and LDAP

2009-04-11 Thread jamrock

Olivier Nicole o...@cs.ait.ac.th wrote in message
news:200904101109.n3ab9lai026...@banyan.cs.ait.ac.th...
 - in slapd configuration, what are the minimum accesses (ACL) that
   should be granted to the various attributes of samba schema? By
   default my LDAP server is quite protected and allows no access to
   any attribute, unless specified otherwise.

   I could find:

   ## allow the ldap admin dn access, but deny everyone else
   access to attrs=SambaLMPassword,SambaNTPassword
  by dn=cn=Samba Admin,ou=People,dc=quenya,dc=org write
  by * none

You may want to add the following:

by self write
by * auth

This should allow the user to change his password and authenticate against
his password.


   But what about the other attributes?

From what I have seen the users do not need access to the other attributes.
Samba checks them but not the user.

 - I have my users database existing in LDAP, how can I add Samba
   support?

I don't know of any easy way.  I would do it the other way around.  I would
create a new Samba ldap directory using the standard approach.  I would then
add the Samba accounts.  I would dump out the existing ldap directory to a
ldif file and then use ldapmodify to add the other attributes to the samba
accounts.

I have never tested this but this is the approach I would try.

I understand that I should modify the objectClass of each
 user to include sambaSamAccount, but then each user must also have
   an attribute sambaSID. How can I generate that attribute?

The smb-ldap tools are the best way to create the initial ldap entries for
Samba.  They create the standard Windows groups such as domain
administrators, guests, domain users, etc.  In addition, they allow you to
manage the addition and deletion of Samba accounts via ldap.

The SID is created the first time you start Samba.  The scripts add the
SID to each ldap account.

See chapter 5 Making Happy Users of Samba by Example.  The book is
available on www.samba.org.

 - Is there a way to implement filter on the list of users? Nss_ldap,
   pam_ldap for example allow to configure an optional filter, so only
   the users with the correct attribute will have access to a specific
   service (I separate the users that can log to their Unix account
   onto the machine from the suers that can use a specific service on
   that machine). Is there a similar filter with Samba or should I
   differenciate with the use/unuse of objectClass sambaSamAccount?

AFAIK, accounts that do not have the Samba specific attributes will not be
recognized by Samba.

 - All what I read so far mention updating the sambaLMPassword and
   sambaNTPassword with the command smbpasswd. I already have a set of
   tools that I use to manage the users account (and that synchronize
   account/password on many systems (database, radius, etc)), what can
   I use to manage sambaLM/NTPassword within my local tools?

I use the Windows NT tools User Manager for Domains and Server Manager.
They should be located on a Samba share and accessed from a Windows
workstation.

I manage user passwords differently from you.  I put the following line in
my smb.conf file

ldap passwd sync = yes

When a user changes his Windows password, it changes the standard passwd
value in ldap.



 Best regards,

 Olivier
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Some questions about Samba and LDAP

2009-04-11 Thread miguelmedalha

- I have my users database existing in LDAP, how can I add Samba
  support? I understand that I should modify the objectClass of each
  user to include sambaSamAccount, but then each user must also have
  an attribute sambaSID. How can I generate that attribute?


You can try LAM, LDAP Account Manager, a web interface to LDAP directories.
It has a samba-specific section that lets you create and administer  
samba accounts.


It resides here:

http://lam.sourceforge.net/

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] stale timestamp hell

2009-04-11 Thread Chuck T .

I've been using a Windoze based programming editor (Slickedit) across
samba shares for years without any problems (most recently with FC5).  I've
just started using Ubuntu and I'm now having a problem with timestamps
lagging file writes.  The net result is my editor almost always
thinks another program has modified the file.

Today I built and installed samba 3.3.3. from sources and it shows
the same problem.

The problem is easy to demonstrate with a batch file:

---
Z:\home\skiptype test.bat
dir e
touch e
dir e

Z:\home\skiptest

Z:\home\skipdir e
 Volume in drive Z is root
 Volume Serial Number is 0BF5-02B0

 Directory of Z:\home\skip

03/25/2009  05:00 PM 2,878 e
   1 File(s)  2,878 bytes
   0 Dir(s)  60,616,773,632 bytes free

Z:\home\skiptouch e

Z:\home\skipdir e
 Volume in drive Z is root
 Volume Serial Number is 0BF5-02B0

 Directory of Z:\home\skip

03/25/2009  05:00 PM 2,878 e
   1 File(s)  2,878 bytes
   0 Dir(s)  60,616,773,632 bytes free

Z:\home\skipdir e
 Volume in drive Z is root
 Volume Serial Number is 0BF5-02B0

 Directory of Z:\home\skip

04/11/2009  01:11 PM 2,878 e
   1 File(s)  2,878 bytes
   0 Dir(s)  60,616,773,632 bytes free
---

As you can see running touch and then an immediate directory
listing shows the old timestamp for the file.  When I do a
directory manually a second later the timestamp has been
updated.

This problem does not occur if the file is overwritten
instead of being updated.

z: is a samba share defined as follows:

[root]
path = /
valid users = root
writeable = yes
create mask = 0765
public = no
dos filetimes = yes
fake directory create times = yes
dos filetime resolution = yes
delete readonly = yes

I added all of the filetime stuff while trying to fix the problem, nothing
has helped.  

The Windoze box is XP pro with sp2.  Both boxes have gigibit
Ethernet and there's very little traffic on the network. Both boxes are
time synced to the same ntp server.

If anyone has any ideas of what's happening and how to fix it I would
be most appreciative. I've gotten into the habit of blowing off the
editor's warning that the file has been modified, which is unfortunate
since that has been the case and I've lost changes!

Skip

_
Rediscover Hotmail®: Get e-mail storage that grows with you. 
http://windowslive.com/RediscoverHotmail?ocid=TXT_TAGLM_WL_HM_Rediscover_Storage1_042009--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Re: samba Digest, Vol 76, Issue 10

2009-04-11 Thread Jeremy Allison
On Sat, Apr 11, 2009 at 10:06:21AM +0200, Volker Lendecke wrote:
 On Sat, Apr 11, 2009 at 08:44:01AM +0200, Alex Thurley wrote:
  I wonder if somebody has a correctly working SMB service in Mac OS X  
  Server 10.5.x. I've got here lots of This process has forked.. and  
  Broken Pipe errors as described in this post: 
  http://www.afp548.com/forum/viewtopic.php?showtopic=22295
  
  Would be nice if a Samba-guru could point us to the right direction.
 
 This seems to come from a samba module called odsam that is
 not part of upstream Samba. The corresponding patch is
 available from
 
 http://www.opensource.apple.com/darwinsource/10.5.6/samba-187.8/patches/auth-module-open-directory
 
 but has not been submitted by Apple for upstream Samba. In
 fact, it carries a
 
Copyright (C) 2003-2007 Apple Inc. All Rights Reserved.
 
 which to me seems quite interesting for GPL code :-)

The All Rights Reserved bit is rather silly, being
as it's GPL code :-). Can't go upstream with that (C)
I'm afraid.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] stale timestamp hell

2009-04-11 Thread Jeremy Allison
On Sat, Apr 11, 2009 at 01:26:43PM -0700, Chuck T. wrote:
 
 I've been using a Windoze based programming editor (Slickedit) across
 samba shares for years without any problems (most recently with FC5).  I've
 just started using Ubuntu and I'm now having a problem with timestamps
 lagging file writes.  The net result is my editor almost always
 thinks another program has modified the file.
 
 Today I built and installed samba 3.3.3. from sources and it shows
 the same problem.
 
 The problem is easy to demonstrate with a batch file:
 
 ---
 Z:\home\skiptype test.bat
 dir e
 touch e
 dir e
 
 Z:\home\skiptest
 
 Z:\home\skipdir e
  Volume in drive Z is root
  Volume Serial Number is 0BF5-02B0
 
  Directory of Z:\home\skip
 
 03/25/2009  05:00 PM 2,878 e
1 File(s)  2,878 bytes
0 Dir(s)  60,616,773,632 bytes free
 
 Z:\home\skiptouch e
 
 Z:\home\skipdir e
  Volume in drive Z is root
  Volume Serial Number is 0BF5-02B0
 
  Directory of Z:\home\skip
 
 03/25/2009  05:00 PM 2,878 e
1 File(s)  2,878 bytes
0 Dir(s)  60,616,773,632 bytes free
 
 Z:\home\skipdir e
  Volume in drive Z is root
  Volume Serial Number is 0BF5-02B0
 
  Directory of Z:\home\skip
 
 04/11/2009  01:11 PM 2,878 e
1 File(s)  2,878 bytes
0 Dir(s)  60,616,773,632 bytes free
 ---
 
 As you can see running touch and then an immediate directory
 listing shows the old timestamp for the file.  When I do a
 directory manually a second later the timestamp has been
 updated.

The delayed timestamp on write is correct, it's what Windows
does (tm). Took us a long time to emulate that correctly :-).

To nail this we'd need a comparitive sniff against the same
save being done on a Windows server, with a note as to when
the file was changed dialog would have appeared against Samba.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Some questions about Samba and LDAP

2009-04-11 Thread John Drescher
On Sat, Apr 11, 2009 at 3:34 PM,  miguelmeda...@sapo.pt wrote:
 - I have my users database existing in LDAP, how can I add Samba
  support? I understand that I should modify the objectClass of each
  user to include sambaSamAccount, but then each user must also have
  an attribute sambaSID. How can I generate that attribute?

 You can try LAM, LDAP Account Manager, a web interface to LDAP directories.
 It has a samba-specific section that lets you create and administer samba
 accounts.

 It resides here:

 http://lam.sourceforge.net/


That is a great tool and I use it as my main administration tool for
my samba accounts, however  this usage would depend on how many users
are in the ldap. I mean don't you have to add the samba accounts one
by one for each user? If there are more than 20 users in the ldap this
will be a lot of work.. I could be wrong about that I have already had
my samba accounts in my ldap before I started using lam. I do use it
to add new users, but that is one at a time anyways and also for me
new users are generally less than 1 per month on average...

John
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Re: samba Digest, Vol 76, Issue 10

2009-04-11 Thread James Peach
2009/4/10 Alex Thurley alex.thur...@bonn-is.de:
 Dear List,

 I wonder if somebody has a correctly working SMB service in Mac OS X Server
 10.5.x. I've got here lots of This process has forked..

This is because a call to the Security framework touches a part of
CoreFoundation that is unhappy that Samba forks without a subsequent
exec. It's annoying but harmless.

 and Broken Pipe
 errors as described in this post:
 http://www.afp548.com/forum/viewtopic.php?showtopic=22295

Not really enough info to say what is happening here. the broken pipe
means that the client disconnected unexpectedly, but it's not clear
why. As some of the posters in that thread note, there is a bug in the
streams module where we return an error for reads after the
end-of-file (we ought to succeed but return no data).


 Would be nice if a Samba-guru could point us to the right direction.

Volker's suggestion to file a Radar with Apple is spot on.

-- 
James Peach | jor...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha7-1005-ge9569ae

2009-04-11 Thread Volker Lendecke
The branch, master has been updated
   via  e9569ae9250ac571c63fbb450709778a247e9ca3 (commit)
   via  5fc9ca93f3f7f00198478b333d8e4ee036165121 (commit)
   via  ea6094d2cbb6d96baa5db0a1cb3fdbc7f58d73e2 (commit)
  from  2ff80f0d761680f3732a46c2672bcef041a7c367 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit e9569ae9250ac571c63fbb450709778a247e9ca3
Author: Volker Lendecke v...@samba.org
Date:   Thu Apr 9 15:51:35 2009 +0200

Fix some nonempty blank lines

commit 5fc9ca93f3f7f00198478b333d8e4ee036165121
Author: Volker Lendecke v...@samba.org
Date:   Thu Apr 9 11:40:08 2009 +0200

Fix a memleak in an unlikely error path in change_notify_create()

commit ea6094d2cbb6d96baa5db0a1cb3fdbc7f58d73e2
Author: Volker Lendecke v...@samba.org
Date:   Thu Apr 9 11:36:45 2009 +0200

Use talloc_tos() for a temp convert_string_allocate()

---

Summary of changes:
 source3/smbd/notify.c  |7 ---
 source3/smbd/notify_internal.c |8 
 2 files changed, 8 insertions(+), 7 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/smbd/notify.c b/source3/smbd/notify.c
index fdab2ca..a17afc7 100644
--- a/source3/smbd/notify.c
+++ b/source3/smbd/notify.c
@@ -81,7 +81,7 @@ static bool notify_marshall_changes(int num_changes,
 
c = changes[i];
 
-   if (!convert_string_allocate(NULL, CH_UNIX, CH_UTF16LE,
+   if (!convert_string_allocate(talloc_tos(), CH_UNIX, CH_UTF16LE,
c-name, strlen(c-name)+1, uni_name.buffer,
namelen, True) || (uni_name.buffer == NULL)) {
goto fail;
@@ -109,7 +109,7 @@ static bool notify_marshall_changes(int num_changes,
 */
prs_set_offset(ps, prs_offset(ps)-2);
 
-   SAFE_FREE(uni_name.buffer);
+   TALLOC_FREE(uni_name.buffer);
 
if (prs_offset(ps)  max_offset) {
/* Too much data for client. */
@@ -123,7 +123,7 @@ static bool notify_marshall_changes(int num_changes,
return True;
 
  fail:
-   SAFE_FREE(uni_name.buffer);
+   TALLOC_FREE(uni_name.buffer);
return False;
 }
 
@@ -211,6 +211,7 @@ NTSTATUS change_notify_create(struct files_struct *fsp, 
uint32 filter,
if (asprintf(fullpath, %s/%s, fsp-conn-connectpath,
 fsp-fsp_name) == -1) {
DEBUG(0, (asprintf failed\n));
+   TALLOC_FREE(fsp-notify);
return NT_STATUS_NO_MEMORY;
}
 
diff --git a/source3/smbd/notify_internal.c b/source3/smbd/notify_internal.c
index 06da717..1e45c54 100644
--- a/source3/smbd/notify_internal.c
+++ b/source3/smbd/notify_internal.c
@@ -2,17 +2,17 @@
Unix SMB/CIFS implementation.
 
Copyright (C) Andrew Tridgell 2006
-   
+
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
-   
+
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.
-   
+
You should have received a copy of the GNU General Public License
along with this program.  If not, see http://www.gnu.org/licenses/.
 */
@@ -614,7 +614,7 @@ void notify_trigger(struct notify_context *notify,
 
/* see if there are any entries at this depth */
if (d-num_entries == 0) continue;
-   
+
/* try to skip based on the maximum mask. If next_p is
 NULL then we know it will be a 'this directory'
 match, otherwise it must be a subdir match */


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-4-test updated - release-4-0-0alpha7-726-gfb8707e

2009-04-11 Thread Jeremy Allison
The branch, v3-4-test has been updated
   via  fb8707e2c2d1657294b0660064e1b16590d1ca6c (commit)
  from  44576254f8c0d35327cfe8f9928f0efc987b5822 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-4-test


- Log -
commit fb8707e2c2d1657294b0660064e1b16590d1ca6c
Author: Volker Lendecke v...@samba.org
Date:   Thu Apr 9 11:40:08 2009 +0200

Fix a memleak in an unlikely error path in change_notify_create()

---

Summary of changes:
 source3/smbd/notify.c |1 +
 1 files changed, 1 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/smbd/notify.c b/source3/smbd/notify.c
index 8ceeaf5..059101c 100644
--- a/source3/smbd/notify.c
+++ b/source3/smbd/notify.c
@@ -209,6 +209,7 @@ NTSTATUS change_notify_create(struct files_struct *fsp, 
uint32 filter,
if (asprintf(fullpath, %s/%s, fsp-conn-connectpath,
 fsp-fsp_name) == -1) {
DEBUG(0, (asprintf failed\n));
+   TALLOC_FREE(fsp-notify);
return NT_STATUS_NO_MEMORY;
}
 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-5208-g42a2678

2009-04-11 Thread Jeremy Allison
The branch, v3-3-test has been updated
   via  42a2678c2f78b3c9ff59c57eb8132fd3698b5710 (commit)
  from  f63751ad272b9caade7855665b8a3352cefe2ae7 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test


- Log -
commit 42a2678c2f78b3c9ff59c57eb8132fd3698b5710
Author: Volker Lendecke v...@samba.org
Date:   Sat Apr 11 13:54:06 2009 -0700

Fix a memleak in an unlikely error path in change_notify_create()

---

Summary of changes:
 source/smbd/notify.c |1 +
 1 files changed, 1 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/smbd/notify.c b/source/smbd/notify.c
index e79cf56..5aa85b4 100644
--- a/source/smbd/notify.c
+++ b/source/smbd/notify.c
@@ -234,6 +234,7 @@ NTSTATUS change_notify_create(struct files_struct *fsp, 
uint32 filter,
if (asprintf(fullpath, %s/%s, fsp-conn-connectpath,
 fsp-fsp_name) == -1) {
DEBUG(0, (asprintf failed\n));
+   TALLOC_FREE(fsp-notify);
return NT_STATUS_NO_MEMORY;
}
 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-3548-g7284b7b

2009-04-11 Thread Jeremy Allison
The branch, v3-2-test has been updated
   via  7284b7bb226990abce91d40782bf4e592e2f7b4d (commit)
  from  eb29aa406f14397e3c55e559e2c02da6eb6c4cbd (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test


- Log -
commit 7284b7bb226990abce91d40782bf4e592e2f7b4d
Author: Volker Lendecke v...@samba.org
Date:   Sat Apr 11 13:54:06 2009 -0700

Fix a memleak in an unlikely error path in change_notify_create()

---

Summary of changes:
 source/smbd/notify.c |1 +
 1 files changed, 1 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/smbd/notify.c b/source/smbd/notify.c
index 55a5e69..d1cd8df 100644
--- a/source/smbd/notify.c
+++ b/source/smbd/notify.c
@@ -231,6 +231,7 @@ NTSTATUS change_notify_create(struct files_struct *fsp, 
uint32 filter,
if (asprintf(fullpath, %s/%s, fsp-conn-connectpath,
 fsp-fsp_name) == -1) {
DEBUG(0, (asprintf failed\n));
+   TALLOC_FREE(fsp-notify);
return NT_STATUS_NO_MEMORY;
}
 


-- 
Samba Shared Repository


Build status as of Sun Apr 12 00:00:02 2009

2009-04-11 Thread build
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2009-04-11 
00:00:26.0 +
+++ /home/build/master/cache/broken_results.txt 2009-04-12 00:00:24.0 
+
@@ -1,9 +1,9 @@
-Build status as of Sat Apr 11 00:00:02 2009
+Build status as of Sun Apr 12 00:00:02 2009
 
 Build counts:
 Tree Total  Broken Panic 
 build_farm   0  0  0 
-ccache   29 6  0 
+ccache   28 6  0 
 distcc   0  0  0 
 ldb  30 30 0 
 libreplace   30 12 0 
@@ -13,9 +13,9 @@
 rsync30 11 0 
 samba-docs   0  0  0 
 samba-web0  0  0 
-samba_3_current 28 19 0 
-samba_3_master 29 26 0 
-samba_4_0_test 29 29 5 
-talloc   29 30 0 
+samba_3_current 28 20 0 
+samba_3_master 28 22 0 
+samba_4_0_test 30 29 5 
+talloc   30 30 0 
 tdb  28 10 0