Re: [Samba] Re: samba Digest, Vol 76, Issue 10
On Sat, Apr 11, 2009 at 08:44:01AM +0200, Alex Thurley wrote: I wonder if somebody has a correctly working SMB service in Mac OS X Server 10.5.x. I've got here lots of This process has forked.. and Broken Pipe errors as described in this post: http://www.afp548.com/forum/viewtopic.php?showtopic=22295 Would be nice if a Samba-guru could point us to the right direction. This seems to come from a samba module called odsam that is not part of upstream Samba. The corresponding patch is available from http://www.opensource.apple.com/darwinsource/10.5.6/samba-187.8/patches/auth-module-open-directory but has not been submitted by Apple for upstream Samba. In fact, it carries a Copyright (C) 2003-2007 Apple Inc. All Rights Reserved. which to me seems quite interesting for GPL code :-) Please contact your Apple support for help with this issue. Thanks, Volker pgp2FgRzCQyQi.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Re: samba Digest, Vol 76, Issue 10
Dear List, I wonder if somebody has a correctly working SMB service in Mac OS X Server 10.5.x. I've got here lots of This process has forked.. and Broken Pipe errors as described in this post: http://www.afp548.com/forum/viewtopic.php?showtopic=22295 Would be nice if a Samba-guru could point us to the right direction. Thanks, Alex -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Re: Some questions about Samba and LDAP
Olivier Nicole o...@cs.ait.ac.th wrote in message news:200904101109.n3ab9lai026...@banyan.cs.ait.ac.th... - in slapd configuration, what are the minimum accesses (ACL) that should be granted to the various attributes of samba schema? By default my LDAP server is quite protected and allows no access to any attribute, unless specified otherwise. I could find: ## allow the ldap admin dn access, but deny everyone else access to attrs=SambaLMPassword,SambaNTPassword by dn=cn=Samba Admin,ou=People,dc=quenya,dc=org write by * none You may want to add the following: by self write by * auth This should allow the user to change his password and authenticate against his password. But what about the other attributes? From what I have seen the users do not need access to the other attributes. Samba checks them but not the user. - I have my users database existing in LDAP, how can I add Samba support? I don't know of any easy way. I would do it the other way around. I would create a new Samba ldap directory using the standard approach. I would then add the Samba accounts. I would dump out the existing ldap directory to a ldif file and then use ldapmodify to add the other attributes to the samba accounts. I have never tested this but this is the approach I would try. I understand that I should modify the objectClass of each user to include sambaSamAccount, but then each user must also have an attribute sambaSID. How can I generate that attribute? The smb-ldap tools are the best way to create the initial ldap entries for Samba. They create the standard Windows groups such as domain administrators, guests, domain users, etc. In addition, they allow you to manage the addition and deletion of Samba accounts via ldap. The SID is created the first time you start Samba. The scripts add the SID to each ldap account. See chapter 5 Making Happy Users of Samba by Example. The book is available on www.samba.org. - Is there a way to implement filter on the list of users? Nss_ldap, pam_ldap for example allow to configure an optional filter, so only the users with the correct attribute will have access to a specific service (I separate the users that can log to their Unix account onto the machine from the suers that can use a specific service on that machine). Is there a similar filter with Samba or should I differenciate with the use/unuse of objectClass sambaSamAccount? AFAIK, accounts that do not have the Samba specific attributes will not be recognized by Samba. - All what I read so far mention updating the sambaLMPassword and sambaNTPassword with the command smbpasswd. I already have a set of tools that I use to manage the users account (and that synchronize account/password on many systems (database, radius, etc)), what can I use to manage sambaLM/NTPassword within my local tools? I use the Windows NT tools User Manager for Domains and Server Manager. They should be located on a Samba share and accessed from a Windows workstation. I manage user passwords differently from you. I put the following line in my smb.conf file ldap passwd sync = yes When a user changes his Windows password, it changes the standard passwd value in ldap. Best regards, Olivier -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Some questions about Samba and LDAP
- I have my users database existing in LDAP, how can I add Samba support? I understand that I should modify the objectClass of each user to include sambaSamAccount, but then each user must also have an attribute sambaSID. How can I generate that attribute? You can try LAM, LDAP Account Manager, a web interface to LDAP directories. It has a samba-specific section that lets you create and administer samba accounts. It resides here: http://lam.sourceforge.net/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] stale timestamp hell
I've been using a Windoze based programming editor (Slickedit) across samba shares for years without any problems (most recently with FC5). I've just started using Ubuntu and I'm now having a problem with timestamps lagging file writes. The net result is my editor almost always thinks another program has modified the file. Today I built and installed samba 3.3.3. from sources and it shows the same problem. The problem is easy to demonstrate with a batch file: --- Z:\home\skiptype test.bat dir e touch e dir e Z:\home\skiptest Z:\home\skipdir e Volume in drive Z is root Volume Serial Number is 0BF5-02B0 Directory of Z:\home\skip 03/25/2009 05:00 PM 2,878 e 1 File(s) 2,878 bytes 0 Dir(s) 60,616,773,632 bytes free Z:\home\skiptouch e Z:\home\skipdir e Volume in drive Z is root Volume Serial Number is 0BF5-02B0 Directory of Z:\home\skip 03/25/2009 05:00 PM 2,878 e 1 File(s) 2,878 bytes 0 Dir(s) 60,616,773,632 bytes free Z:\home\skipdir e Volume in drive Z is root Volume Serial Number is 0BF5-02B0 Directory of Z:\home\skip 04/11/2009 01:11 PM 2,878 e 1 File(s) 2,878 bytes 0 Dir(s) 60,616,773,632 bytes free --- As you can see running touch and then an immediate directory listing shows the old timestamp for the file. When I do a directory manually a second later the timestamp has been updated. This problem does not occur if the file is overwritten instead of being updated. z: is a samba share defined as follows: [root] path = / valid users = root writeable = yes create mask = 0765 public = no dos filetimes = yes fake directory create times = yes dos filetime resolution = yes delete readonly = yes I added all of the filetime stuff while trying to fix the problem, nothing has helped. The Windoze box is XP pro with sp2. Both boxes have gigibit Ethernet and there's very little traffic on the network. Both boxes are time synced to the same ntp server. If anyone has any ideas of what's happening and how to fix it I would be most appreciative. I've gotten into the habit of blowing off the editor's warning that the file has been modified, which is unfortunate since that has been the case and I've lost changes! Skip _ Rediscover Hotmail®: Get e-mail storage that grows with you. http://windowslive.com/RediscoverHotmail?ocid=TXT_TAGLM_WL_HM_Rediscover_Storage1_042009-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Re: samba Digest, Vol 76, Issue 10
On Sat, Apr 11, 2009 at 10:06:21AM +0200, Volker Lendecke wrote: On Sat, Apr 11, 2009 at 08:44:01AM +0200, Alex Thurley wrote: I wonder if somebody has a correctly working SMB service in Mac OS X Server 10.5.x. I've got here lots of This process has forked.. and Broken Pipe errors as described in this post: http://www.afp548.com/forum/viewtopic.php?showtopic=22295 Would be nice if a Samba-guru could point us to the right direction. This seems to come from a samba module called odsam that is not part of upstream Samba. The corresponding patch is available from http://www.opensource.apple.com/darwinsource/10.5.6/samba-187.8/patches/auth-module-open-directory but has not been submitted by Apple for upstream Samba. In fact, it carries a Copyright (C) 2003-2007 Apple Inc. All Rights Reserved. which to me seems quite interesting for GPL code :-) The All Rights Reserved bit is rather silly, being as it's GPL code :-). Can't go upstream with that (C) I'm afraid. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] stale timestamp hell
On Sat, Apr 11, 2009 at 01:26:43PM -0700, Chuck T. wrote: I've been using a Windoze based programming editor (Slickedit) across samba shares for years without any problems (most recently with FC5). I've just started using Ubuntu and I'm now having a problem with timestamps lagging file writes. The net result is my editor almost always thinks another program has modified the file. Today I built and installed samba 3.3.3. from sources and it shows the same problem. The problem is easy to demonstrate with a batch file: --- Z:\home\skiptype test.bat dir e touch e dir e Z:\home\skiptest Z:\home\skipdir e Volume in drive Z is root Volume Serial Number is 0BF5-02B0 Directory of Z:\home\skip 03/25/2009 05:00 PM 2,878 e 1 File(s) 2,878 bytes 0 Dir(s) 60,616,773,632 bytes free Z:\home\skiptouch e Z:\home\skipdir e Volume in drive Z is root Volume Serial Number is 0BF5-02B0 Directory of Z:\home\skip 03/25/2009 05:00 PM 2,878 e 1 File(s) 2,878 bytes 0 Dir(s) 60,616,773,632 bytes free Z:\home\skipdir e Volume in drive Z is root Volume Serial Number is 0BF5-02B0 Directory of Z:\home\skip 04/11/2009 01:11 PM 2,878 e 1 File(s) 2,878 bytes 0 Dir(s) 60,616,773,632 bytes free --- As you can see running touch and then an immediate directory listing shows the old timestamp for the file. When I do a directory manually a second later the timestamp has been updated. The delayed timestamp on write is correct, it's what Windows does (tm). Took us a long time to emulate that correctly :-). To nail this we'd need a comparitive sniff against the same save being done on a Windows server, with a note as to when the file was changed dialog would have appeared against Samba. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Some questions about Samba and LDAP
On Sat, Apr 11, 2009 at 3:34 PM, miguelmeda...@sapo.pt wrote: - I have my users database existing in LDAP, how can I add Samba support? I understand that I should modify the objectClass of each user to include sambaSamAccount, but then each user must also have an attribute sambaSID. How can I generate that attribute? You can try LAM, LDAP Account Manager, a web interface to LDAP directories. It has a samba-specific section that lets you create and administer samba accounts. It resides here: http://lam.sourceforge.net/ That is a great tool and I use it as my main administration tool for my samba accounts, however this usage would depend on how many users are in the ldap. I mean don't you have to add the samba accounts one by one for each user? If there are more than 20 users in the ldap this will be a lot of work.. I could be wrong about that I have already had my samba accounts in my ldap before I started using lam. I do use it to add new users, but that is one at a time anyways and also for me new users are generally less than 1 per month on average... John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Re: samba Digest, Vol 76, Issue 10
2009/4/10 Alex Thurley alex.thur...@bonn-is.de: Dear List, I wonder if somebody has a correctly working SMB service in Mac OS X Server 10.5.x. I've got here lots of This process has forked.. This is because a call to the Security framework touches a part of CoreFoundation that is unhappy that Samba forks without a subsequent exec. It's annoying but harmless. and Broken Pipe errors as described in this post: http://www.afp548.com/forum/viewtopic.php?showtopic=22295 Not really enough info to say what is happening here. the broken pipe means that the client disconnected unexpectedly, but it's not clear why. As some of the posters in that thread note, there is a bug in the streams module where we return an error for reads after the end-of-file (we ought to succeed but return no data). Would be nice if a Samba-guru could point us to the right direction. Volker's suggestion to file a Radar with Apple is spot on. -- James Peach | jor...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha7-1005-ge9569ae
The branch, master has been updated via e9569ae9250ac571c63fbb450709778a247e9ca3 (commit) via 5fc9ca93f3f7f00198478b333d8e4ee036165121 (commit) via ea6094d2cbb6d96baa5db0a1cb3fdbc7f58d73e2 (commit) from 2ff80f0d761680f3732a46c2672bcef041a7c367 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit e9569ae9250ac571c63fbb450709778a247e9ca3 Author: Volker Lendecke v...@samba.org Date: Thu Apr 9 15:51:35 2009 +0200 Fix some nonempty blank lines commit 5fc9ca93f3f7f00198478b333d8e4ee036165121 Author: Volker Lendecke v...@samba.org Date: Thu Apr 9 11:40:08 2009 +0200 Fix a memleak in an unlikely error path in change_notify_create() commit ea6094d2cbb6d96baa5db0a1cb3fdbc7f58d73e2 Author: Volker Lendecke v...@samba.org Date: Thu Apr 9 11:36:45 2009 +0200 Use talloc_tos() for a temp convert_string_allocate() --- Summary of changes: source3/smbd/notify.c |7 --- source3/smbd/notify_internal.c |8 2 files changed, 8 insertions(+), 7 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/smbd/notify.c b/source3/smbd/notify.c index fdab2ca..a17afc7 100644 --- a/source3/smbd/notify.c +++ b/source3/smbd/notify.c @@ -81,7 +81,7 @@ static bool notify_marshall_changes(int num_changes, c = changes[i]; - if (!convert_string_allocate(NULL, CH_UNIX, CH_UTF16LE, + if (!convert_string_allocate(talloc_tos(), CH_UNIX, CH_UTF16LE, c-name, strlen(c-name)+1, uni_name.buffer, namelen, True) || (uni_name.buffer == NULL)) { goto fail; @@ -109,7 +109,7 @@ static bool notify_marshall_changes(int num_changes, */ prs_set_offset(ps, prs_offset(ps)-2); - SAFE_FREE(uni_name.buffer); + TALLOC_FREE(uni_name.buffer); if (prs_offset(ps) max_offset) { /* Too much data for client. */ @@ -123,7 +123,7 @@ static bool notify_marshall_changes(int num_changes, return True; fail: - SAFE_FREE(uni_name.buffer); + TALLOC_FREE(uni_name.buffer); return False; } @@ -211,6 +211,7 @@ NTSTATUS change_notify_create(struct files_struct *fsp, uint32 filter, if (asprintf(fullpath, %s/%s, fsp-conn-connectpath, fsp-fsp_name) == -1) { DEBUG(0, (asprintf failed\n)); + TALLOC_FREE(fsp-notify); return NT_STATUS_NO_MEMORY; } diff --git a/source3/smbd/notify_internal.c b/source3/smbd/notify_internal.c index 06da717..1e45c54 100644 --- a/source3/smbd/notify_internal.c +++ b/source3/smbd/notify_internal.c @@ -2,17 +2,17 @@ Unix SMB/CIFS implementation. Copyright (C) Andrew Tridgell 2006 - + This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. - + This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. - + You should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/. */ @@ -614,7 +614,7 @@ void notify_trigger(struct notify_context *notify, /* see if there are any entries at this depth */ if (d-num_entries == 0) continue; - + /* try to skip based on the maximum mask. If next_p is NULL then we know it will be a 'this directory' match, otherwise it must be a subdir match */ -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-4-test updated - release-4-0-0alpha7-726-gfb8707e
The branch, v3-4-test has been updated via fb8707e2c2d1657294b0660064e1b16590d1ca6c (commit) from 44576254f8c0d35327cfe8f9928f0efc987b5822 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-4-test - Log - commit fb8707e2c2d1657294b0660064e1b16590d1ca6c Author: Volker Lendecke v...@samba.org Date: Thu Apr 9 11:40:08 2009 +0200 Fix a memleak in an unlikely error path in change_notify_create() --- Summary of changes: source3/smbd/notify.c |1 + 1 files changed, 1 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/smbd/notify.c b/source3/smbd/notify.c index 8ceeaf5..059101c 100644 --- a/source3/smbd/notify.c +++ b/source3/smbd/notify.c @@ -209,6 +209,7 @@ NTSTATUS change_notify_create(struct files_struct *fsp, uint32 filter, if (asprintf(fullpath, %s/%s, fsp-conn-connectpath, fsp-fsp_name) == -1) { DEBUG(0, (asprintf failed\n)); + TALLOC_FREE(fsp-notify); return NT_STATUS_NO_MEMORY; } -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-5208-g42a2678
The branch, v3-3-test has been updated via 42a2678c2f78b3c9ff59c57eb8132fd3698b5710 (commit) from f63751ad272b9caade7855665b8a3352cefe2ae7 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test - Log - commit 42a2678c2f78b3c9ff59c57eb8132fd3698b5710 Author: Volker Lendecke v...@samba.org Date: Sat Apr 11 13:54:06 2009 -0700 Fix a memleak in an unlikely error path in change_notify_create() --- Summary of changes: source/smbd/notify.c |1 + 1 files changed, 1 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/source/smbd/notify.c b/source/smbd/notify.c index e79cf56..5aa85b4 100644 --- a/source/smbd/notify.c +++ b/source/smbd/notify.c @@ -234,6 +234,7 @@ NTSTATUS change_notify_create(struct files_struct *fsp, uint32 filter, if (asprintf(fullpath, %s/%s, fsp-conn-connectpath, fsp-fsp_name) == -1) { DEBUG(0, (asprintf failed\n)); + TALLOC_FREE(fsp-notify); return NT_STATUS_NO_MEMORY; } -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-3548-g7284b7b
The branch, v3-2-test has been updated via 7284b7bb226990abce91d40782bf4e592e2f7b4d (commit) from eb29aa406f14397e3c55e559e2c02da6eb6c4cbd (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 7284b7bb226990abce91d40782bf4e592e2f7b4d Author: Volker Lendecke v...@samba.org Date: Sat Apr 11 13:54:06 2009 -0700 Fix a memleak in an unlikely error path in change_notify_create() --- Summary of changes: source/smbd/notify.c |1 + 1 files changed, 1 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/source/smbd/notify.c b/source/smbd/notify.c index 55a5e69..d1cd8df 100644 --- a/source/smbd/notify.c +++ b/source/smbd/notify.c @@ -231,6 +231,7 @@ NTSTATUS change_notify_create(struct files_struct *fsp, uint32 filter, if (asprintf(fullpath, %s/%s, fsp-conn-connectpath, fsp-fsp_name) == -1) { DEBUG(0, (asprintf failed\n)); + TALLOC_FREE(fsp-notify); return NT_STATUS_NO_MEMORY; } -- Samba Shared Repository
Build status as of Sun Apr 12 00:00:02 2009
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2009-04-11 00:00:26.0 + +++ /home/build/master/cache/broken_results.txt 2009-04-12 00:00:24.0 + @@ -1,9 +1,9 @@ -Build status as of Sat Apr 11 00:00:02 2009 +Build status as of Sun Apr 12 00:00:02 2009 Build counts: Tree Total Broken Panic build_farm 0 0 0 -ccache 29 6 0 +ccache 28 6 0 distcc 0 0 0 ldb 30 30 0 libreplace 30 12 0 @@ -13,9 +13,9 @@ rsync30 11 0 samba-docs 0 0 0 samba-web0 0 0 -samba_3_current 28 19 0 -samba_3_master 29 26 0 -samba_4_0_test 29 29 5 -talloc 29 30 0 +samba_3_current 28 20 0 +samba_3_master 28 22 0 +samba_4_0_test 30 29 5 +talloc 30 30 0 tdb 28 10 0