Re: [Samba] samba4 HEAD: unable to provision
targetdir was None when that part of the code ran and os.path.join() didn't like that. I think you might be able to use --targetdir=... on the command line, but the help text (Set target directory) is as helpful as a comment like: x++; /* increment x */ Thank you! It fixed it, well, actually it fixed that issue. Now I'm stuck with samba.provisionexceptions.ProvisioningError: slapd died before we could make a connection to it because slapd_provision_command: /usr/local/libexec/slapd -F/opt/src/samba-master/source4/setup/private/ldap/slapd.d -h ldapi://%2Fopt%2Fsrc%2Fsamba-master%2Fsource4%2Fsetup%2Fprivate%2Fldap%2Fldapi -d-1 fails in locating ldif_read_file: no entry file /opt/src/samba-master/source4/setup/private/ldap/slapd.d/cn=config.ldif I should investigate more, but again thank you for your help. Francesco -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
Hi! I have a lot of those log line : smbd[3604]: [2010/01/27 13:22:32, 1, effective(0, 0), real(0, 0)] smbd/service.c:make_connection_snum(744) smbd[3604]: create_connection_server_info failed: NT_STATUS_ACCESS_DENIED smbd[3604]: [2010/01/27 13:22:32, 1, effective(0, 0), real(0, 0)] smbd/service.c:make_connection_snum(744) smbd[3604]: create_connection_server_info failed: NT_STATUS_ACCESS_DENIED smbd[3604]: [2010/01/27 13:22:32, 1, effective(0, 0), real(0, 0)] smbd/service.c:make_connection_snum(744) it occur when i write in a samba user directory through a redirection from a windows XP client. thus for instance when i download a file from internet and copy it from a windows client in the u:\My documents which is a redirection to samba home directory a have a lot of those l logs. i don't why. An idea ? thanks. Y. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba4 AD joining
Hello Im trying to join my own samba4 (latest installed from rsync) Ad from a ubuntu client with domainjoin, and the client complains about the following udp ports being closed: 88, 389, 464 and 123. _ Hotmail: Powerful Free email with security by Microsoft. https://signup.live.com/signup.aspx?id=60969 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] user passwords expired every domain-login from xp-workstation
Hi, I migrated from sles 10 sp2 samba 3.0.24 to ubuntu 9.10 server samba 3.4.3 (pdc). The user-account were moved following this instruction: http://www.cyberciti.biz/faq/howto-move-migrate-user-accounts-old-to-new-server/ http://www.cyberciti.biz/faq/howto-move-migrate-user-accounts-old-to-new-server/ . When user now login to the domain from a xp-workstation following message appears at every login: Windows password expired and has to be changed. You have to change your password now! The user can change the password and everything works fine. At next login the same story. This happens only to some of the old users and to all users created after migration. Any idea what could be the reason for this? I already searched a lot but didn't find something like this. Regards, maddin911 Here my http://old.nabble.com/file/p27324591/smb.conf smb.conf -- View this message in context: http://old.nabble.com/user-passwords-expired-every-domain-login-from-xp-workstation-tp27324591p27324591.html Sent from the Samba - General mailing list archive at Nabble.com. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] samba veto files: underscore
Hello all, I'm trying to hide files beginning with a underscore ( _ ) and hidden files from my samba share's so i added this to my smb.conf: veto files = /_*/.*/ The section with the dot works, but the one with the underscore doesn't. I also tried /\_*/.*/ but this has the same result. Any ideas how to hide the files beginning with a underscore? Thanks, Evas Hofmans -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.4 Panic in Debian
OK. Can someone on the Samba side confirm that the Linux kernel only supports DES for some Samba related Kerberos operation? Specific details on what is going on would be useful. --Sam -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.4 Panic in Debian
On Tue, Jan 26, 2010 at 01:29:08PM -0500, Sam Hartman wrote: OK. Can someone on the Samba side confirm that the Linux kernel only supports DES for some Samba related Kerberos operation? Specific details on what is going on would be useful. The kernel is only involved when one is using CIFS mounts, which aren't relevant to winbind and domain joining; so this shouldn't be a kernel issue. -- Steve Langasek Give me a lever long enough and a Free OS Debian Developer to set it on, and I can move the world. Ubuntu Developerhttp://www.debian.org/ slanga...@ubuntu.com vor...@debian.org signature.asc Description: Digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.4 Panic in Debian
Steve == Steve Langasek vor...@debian.org writes: Steve On Tue, Jan 26, 2010 at 01:29:08PM -0500, Sam Hartman wrote: OK. Can someone on the Samba side confirm that the Linux kernel only supports DES for some Samba related Kerberos operation? Specific details on what is going on would be useful. Steve The kernel is only involved when one is using CIFS mounts, Steve which aren't relevant to winbind and domain joining; so this Steve shouldn't be a kernel issue. OK. Then I currently have no idea why allow_weak_crypto would be desirable for Samba. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.4 Panic in Debian
On Tue, Jan 26, 2010 at 05:03:51PM -0500, Sam Hartman wrote: Steve == Steve Langasek vor...@debian.org writes: Steve On Tue, Jan 26, 2010 at 01:29:08PM -0500, Sam Hartman wrote: OK. Can someone on the Samba side confirm that the Linux kernel only supports DES for some Samba related Kerberos operation? Specific details on what is going on would be useful. Steve The kernel is only involved when one is using CIFS mounts, Steve which aren't relevant to winbind and domain joining; so this Steve shouldn't be a kernel issue. OK. Then I currently have no idea why allow_weak_crypto would be desirable for Samba. In the case of AD realms that were continuously upgraded from NT4 domains, you may have accounts only using RC4 as an enctype for backwards-compatibility with pre-AD systems. I don't know if this is the reason these users are seeing problems, but it's the only case I can think of why allow_weak_crypto should be needed. -- Steve Langasek Give me a lever long enough and a Free OS Debian Developer to set it on, and I can move the world. Ubuntu Developerhttp://www.debian.org/ slanga...@ubuntu.com vor...@debian.org signature.asc Description: Digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.4 Panic in Debian
On Tue, Jan 26, 2010 at 02:22:36PM -0800, Steve Langasek wrote: On Tue, Jan 26, 2010 at 05:03:51PM -0500, Sam Hartman wrote: Steve == Steve Langasek vor...@debian.org writes: Steve On Tue, Jan 26, 2010 at 01:29:08PM -0500, Sam Hartman wrote: OK. Can someone on the Samba side confirm that the Linux kernel only supports DES for some Samba related Kerberos operation? Specific details on what is going on would be useful. Steve The kernel is only involved when one is using CIFS mounts, Steve which aren't relevant to winbind and domain joining; so this Steve shouldn't be a kernel issue. OK. Then I currently have no idea why allow_weak_crypto would be desirable for Samba. In the case of AD realms that were continuously upgraded from NT4 domains, you may have accounts only using RC4 as an enctype for backwards-compatibility with pre-AD systems. I don't know if this is the reason these users are seeing problems, but it's the only case I can think of why allow_weak_crypto should be needed. Sorry, having looked at the source now, I see that the weak crypto handling is specific to DES, not RC4; and if Samba were *only* using RC4, this error would not happen. However, Samba requests both RC4 and DES, a historical remnant of the time when DES was the only enctype in common between all Kerberos implementations. -- Steve Langasek Give me a lever long enough and a Free OS Debian Developer to set it on, and I can move the world. Ubuntu Developerhttp://www.debian.org/ slanga...@ubuntu.com vor...@debian.org signature.asc Description: Digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.4 Panic in Debian
On Wed, Jan 27, 2010 at 04:05:46AM -0800, Steve Langasek wrote: On Tue, Jan 26, 2010 at 02:22:36PM -0800, Steve Langasek wrote: On Tue, Jan 26, 2010 at 05:03:51PM -0500, Sam Hartman wrote: Steve == Steve Langasek vor...@debian.org writes: Steve On Tue, Jan 26, 2010 at 01:29:08PM -0500, Sam Hartman wrote: OK. Can someone on the Samba side confirm that the Linux kernel only supports DES for some Samba related Kerberos operation? Specific details on what is going on would be useful. Steve The kernel is only involved when one is using CIFS mounts, Steve which aren't relevant to winbind and domain joining; so this Steve shouldn't be a kernel issue. OK. Then I currently have no idea why allow_weak_crypto would be desirable for Samba. In the case of AD realms that were continuously upgraded from NT4 domains, you may have accounts only using RC4 as an enctype for backwards-compatibility with pre-AD systems. I don't know if this is the reason these users are seeing problems, but it's the only case I can think of why allow_weak_crypto should be needed. Sorry, having looked at the source now, I see that the weak crypto handling is specific to DES, not RC4; and if Samba were *only* using RC4, this error would not happen. However, Samba requests both RC4 and DES, a historical remnant of the time when DES was the only enctype in common between all Kerberos implementations. Referring to the SUBJECT: Where is this leading to a panic in Samba 3.4, I got lost in the meantime. Volker signature.asc Description: Digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] winbind failure with libkrb5-3 1.8 in Debian *RENAMED*
I have renamed this thread as the panics stopped when libkrb5-3, et.al. were upgraded to 1.8. However, bigger problems are now occurring. See below. On 01/27/2010 10:13 AM, Volker Lendecke wrote: On Wed, Jan 27, 2010 at 04:05:46AM -0800, Steve Langasek wrote: On Tue, Jan 26, 2010 at 02:22:36PM -0800, Steve Langasek wrote: On Tue, Jan 26, 2010 at 05:03:51PM -0500, Sam Hartman wrote: Steve == Steve Langasekvor...@debian.org writes: Steve On Tue, Jan 26, 2010 at 01:29:08PM -0500, Sam Hartman wrote: OK. Can someone on the Samba side confirm that the Linux kernel only supports DES for some Samba related Kerberos operation? Specific details on what is going on would be useful. Steve The kernel is only involved when one is using CIFS mounts, Steve which aren't relevant to winbind and domain joining; so this Steve shouldn't be a kernel issue. OK. Then I currently have no idea why allow_weak_crypto would be desirable for Samba. In the case of AD realms that were continuously upgraded from NT4 domains, you may have accounts only using RC4 as an enctype for backwards-compatibility with pre-AD systems. I don't know if this is the reason these users are seeing problems, but it's the only case I can think of why allow_weak_crypto should be needed. Sorry, having looked at the source now, I see that the weak crypto handling is specific to DES, not RC4; and if Samba were *only* using RC4, this error would not happen. However, Samba requests both RC4 and DES, a historical remnant of the time when DES was the only enctype in common between all Kerberos implementations. Referring to the SUBJECT: Where is this leading to a panic in Samba 3.4, I got lost in the meantime. Volker Now, winbind simply doesn't work in 3.4.3 nor in 3.4.5, the latter which I tested this morning. The 3.4.5 testing was done with libkrb5-3 1.8+dsfg~alpha1-5, upgraded from alpha1-4. This also includes setting allow_weak_crypto=true in krb5.conf; however, the encryption error message returns when testing the join or doing kinit. [date time, 0] libads/sasl.c:819(ads_sasl_spnego_bind) kinit succeeded but ads_sasl_spnego_krb5_bind failed: Program lacks support for encryption type. [repeat above two lines] Join to domain is not valid: Undetermined error I guess I should retest stable to see what that yields. Dale -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba write bits being set incorrectly on FreeBSD 7.2
I've found that read-only files become writable when copied from Windows XP to my Samba 3.3.3 mount on FreeBSD 7.2. I have the map archive = no option. If I change this option to yes then the write bits are cleared (and execute bits set), as expected. Shouldn't the read-only permissions be maintained regardless of the map archive option? I've never seen this on Linux version of Samba. Could it be ext3 vs. ufs? Thanks, Mark Lokowich Compellent Technologies -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11
Dos the PDC have to join the domain also? When I try to join my PDC to its domain with net join I get the following error. Enter root's password: Could not connect to server PDC The username or password was not correct. Connection failed: NT_STATUS_LOGON_FAILURE The netbios name for my PDC is pdc.semarktest.dk I guess that way it tells my that is can't connect to server PDC I have checked that pdc is in the name server (nameserver is on 127.0.0.1) # host pdc pdc.semarktest.dk has address 192.168.1.182 Is there something I'm missing? Log dump from net join command: # tail -200 /var/log/syslog | grep slapd Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_get(22): got connid=15 Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_read(22): checking for input on id=15 Jan 27 20:21:53 hds-debian-virt slapd[1868]: conn=15 op=2 do_search Jan 27 20:21:53 hds-debian-virt slapd[1868]: dnPrettyNormal: sambaDomainName=SEMARKTEST,sambaDomainName=semarktest,dc=semark-testing,dc=dk Jan 27 20:21:53 hds-debian-virt slapd[1868]: dnPrettyNormal: sambaDomainName=SEMARKTEST,sambaDomainName=semarktest,dc=semark-testing,dc=dk, sambaDomainName=semarktest,sambaDomainName=semarktest,dc=semark-testing,dc=dk Jan 27 20:21:53 hds-debian-virt slapd[1868]: SRCH sambaDomainName=SEMARKTEST,sambaDomainName=semarktest,dc=semark-testing,dc=dk 2 0 Jan 27 20:21:53 hds-debian-virt slapd[1868]: 0 15 0 Jan 27 20:21:53 hds-debian-virt slapd[1868]: filter: ((objectClass=sambaTrustedDomainPassword)(sambaDomainName=semarktest)) Jan 27 20:21:53 hds-debian-virt slapd[1868]: attrs: Jan 27 20:21:53 hds-debian-virt slapd[1868]: Jan 27 20:21:53 hds-debian-virt slapd[1868]: = hdb_search Jan 27 20:21:53 hds-debian-virt slapd[1868]: bdb_dn2entry(sambaDomainName=semarktest,sambaDomainName=semarktest,dc=semark-testing,dc=dk) Jan 27 20:21:53 hds-debian-virt slapd[1868]: = hdb_dn2id(sambaDomainName=semarktest,sambaDomainName=semarktest,dc=semark-testing,dc=dk) Jan 27 20:21:53 hds-debian-virt slapd[1868]: = hdb_dn2id: get failed: DB_NOTFOUND: No matching key/data pair found (-30990) Jan 27 20:21:53 hds-debian-virt slapd[1868]: send_ldap_result: conn=15 op=2 p=3 Jan 27 20:21:53 hds-debian-virt slapd[1868]: send_ldap_result: err=10 matched=sambaDomainName=semarktest,dc=semark-testing,dc=dk text= Jan 27 20:21:53 hds-debian-virt slapd[1868]: send_ldap_response: msgid=3 tag=101 err=32 Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_get(22) Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_get(22): got connid=15 Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_read(22): checking for input on id=15 Jan 27 20:21:53 hds-debian-virt slapd[1868]: conn=15 op=3 do_search Jan 27 20:21:53 hds-debian-virt slapd[1868]: dnPrettyNormal: dc=semark-testing,dc=dk Jan 27 20:21:53 hds-debian-virt slapd[1868]: dnPrettyNormal: dc=semark-testing,dc=dk, dc=semark-testing,dc=dk Jan 27 20:21:53 hds-debian-virt slapd[1868]: SRCH dc=semark-testing,dc=dk 2 0 Jan 27 20:21:53 hds-debian-virt slapd[1868]: 0 15 0 Jan 27 20:21:53 hds-debian-virt slapd[1868]: filter: ((uid=root)(objectClass=sambaSamAccount)) Jan 27 20:21:53 hds-debian-virt slapd[1868]: attrs: Jan 27 20:21:53 hds-debian-virt slapd[1868]: uid Jan 27 20:21:53 hds-debian-virt slapd[1868]: uidNumber Jan 27 20:21:53 hds-debian-virt slapd[1868]: gidNumber Jan 27 20:21:53 hds-debian-virt slapd[1868]: homeDirectory Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaPwdLastSet Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaPwdCanChange Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaPwdMustChange Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaLogonTime Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaLogoffTime Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaKickoffTime Jan 27 20:21:53 hds-debian-virt slapd[1868]: cn Jan 27 20:21:53 hds-debian-virt slapd[1868]: sn Jan 27 20:21:53 hds-debian-virt slapd[1868]: displayName Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaHomeDrive Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaHomePath Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaLogonScript Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaProfilePath Jan 27 20:21:53 hds-debian-virt slapd[1868]: description Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaUserWorkstations Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaSID Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaPrimaryGroupSID Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaLMPassword Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaNTPassword Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaDomainName Jan 27 20:21:53 hds-debian-virt slapd[1868]: objectClass Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaAcctFlags Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaMungedDial Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaBadPasswordCount Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaBadPasswordTime Jan 27 20:21:53 hds-debian-virt
[Samba] Compiling zfsacl support
For 3.4.5 how do you get zfsacl support compiled in? I do not see any flags in configure for this. -- C. J. Keist Email: cj.ke...@colostate.edu UNIX/Network ManagerPhone: 970-491-0630 Engineering Network ServicesFax: 970-491-5569 College of Engineering, CSU Ft. Collins, CO 80523-1301 All I want is a chance to prove 'Money can't buy happiness' -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11
Try using net ... -U Administrator instead, since root is not by default a member of the domain admin group. This presumes you have created the Administrator account in samba, created the domain admins group and setup the approp group mapping for key groups (domain admins, domain users etc.) On 01/27/10 14:23, Henrik Dige Semark wrote: Dos the PDC have to join the domain also? When I try to join my PDC to its domain with net join I get the following error. Enter root's password: Could not connect to server PDC The username or password was not correct. Connection failed: NT_STATUS_LOGON_FAILURE The netbios name for my PDC is pdc.semarktest.dk I guess that way it tells my that is can't connect to server PDC I have checked that pdc is in the name server (nameserver is on 127.0.0.1) # host pdc pdc.semarktest.dk has address 192.168.1.182 Is there something I'm missing? Log dump from net join command: # tail -200 /var/log/syslog | grep slapd Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_get(22): got connid=15 Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_read(22): checking for input on id=15 Jan 27 20:21:53 hds-debian-virt slapd[1868]: conn=15 op=2 do_search Jan 27 20:21:53 hds-debian-virt slapd[1868]: dnPrettyNormal:sambaDomainName=SEMARKTEST,sambaDomainName=semarktest,dc=semark-testing,dc=dk Jan 27 20:21:53 hds-debian-virt slapd[1868]: dnPrettyNormal:sambaDomainName=SEMARKTEST,sambaDomainName=semarktest,dc=semark-testing,dc=dk,sambaDomainName=semarktest,sambaDomainName=semarktest,dc=semark-testing,dc=dk Jan 27 20:21:53 hds-debian-virt slapd[1868]: SRCH sambaDomainName=SEMARKTEST,sambaDomainName=semarktest,dc=semark-testing,dc=dk 2 0 Jan 27 20:21:53 hds-debian-virt slapd[1868]: 0 15 0 Jan 27 20:21:53 hds-debian-virt slapd[1868]: filter: ((objectClass=sambaTrustedDomainPassword)(sambaDomainName=semarktest)) Jan 27 20:21:53 hds-debian-virt slapd[1868]: attrs: Jan 27 20:21:53 hds-debian-virt slapd[1868]: Jan 27 20:21:53 hds-debian-virt slapd[1868]: = hdb_search Jan 27 20:21:53 hds-debian-virt slapd[1868]: bdb_dn2entry(sambaDomainName=semarktest,sambaDomainName=semarktest,dc=semark-testing,dc=dk) Jan 27 20:21:53 hds-debian-virt slapd[1868]: = hdb_dn2id(sambaDomainName=semarktest,sambaDomainName=semarktest,dc=semark-testing,dc=dk) Jan 27 20:21:53 hds-debian-virt slapd[1868]:= hdb_dn2id: get failed: DB_NOTFOUND: No matching key/data pair found (-30990) Jan 27 20:21:53 hds-debian-virt slapd[1868]: send_ldap_result: conn=15 op=2 p=3 Jan 27 20:21:53 hds-debian-virt slapd[1868]: send_ldap_result: err=10 matched=sambaDomainName=semarktest,dc=semark-testing,dc=dk text= Jan 27 20:21:53 hds-debian-virt slapd[1868]: send_ldap_response: msgid=3 tag=101 err=32 Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_get(22) Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_get(22): got connid=15 Jan 27 20:21:53 hds-debian-virt slapd[1868]: connection_read(22): checking for input on id=15 Jan 27 20:21:53 hds-debian-virt slapd[1868]: conn=15 op=3 do_search Jan 27 20:21:53 hds-debian-virt slapd[1868]: dnPrettyNormal:dc=semark-testing,dc=dk Jan 27 20:21:53 hds-debian-virt slapd[1868]: dnPrettyNormal:dc=semark-testing,dc=dk,dc=semark-testing,dc=dk Jan 27 20:21:53 hds-debian-virt slapd[1868]: SRCH dc=semark-testing,dc=dk 2 0 Jan 27 20:21:53 hds-debian-virt slapd[1868]: 0 15 0 Jan 27 20:21:53 hds-debian-virt slapd[1868]: filter: ((uid=root)(objectClass=sambaSamAccount)) Jan 27 20:21:53 hds-debian-virt slapd[1868]: attrs: Jan 27 20:21:53 hds-debian-virt slapd[1868]: uid Jan 27 20:21:53 hds-debian-virt slapd[1868]: uidNumber Jan 27 20:21:53 hds-debian-virt slapd[1868]: gidNumber Jan 27 20:21:53 hds-debian-virt slapd[1868]: homeDirectory Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaPwdLastSet Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaPwdCanChange Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaPwdMustChange Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaLogonTime Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaLogoffTime Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaKickoffTime Jan 27 20:21:53 hds-debian-virt slapd[1868]: cn Jan 27 20:21:53 hds-debian-virt slapd[1868]: sn Jan 27 20:21:53 hds-debian-virt slapd[1868]: displayName Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaHomeDrive Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaHomePath Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaLogonScript Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaProfilePath Jan 27 20:21:53 hds-debian-virt slapd[1868]: description Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaUserWorkstations Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaSID Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaPrimaryGroupSID Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaLMPassword Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaNTPassword Jan 27 20:21:53 hds-debian-virt slapd[1868]: sambaDomainName Jan 27
Re: [Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11
I have just tried with net join -U Admin and I get the same error as before. # net join -U Admin Enter admin's password: Could not connect to server PDC The username or password was not correct. Connection failed: NT_STATUS_LOGON_FAILURE Ldap search for Admin: # ldapsearch -x -h 127.0.0.1 -p 389 # Admin, Users, semark-testing.dk dn: uid=Admin,ou=Users,dc=semark-testing,dc=dk cn: Admin sn: Admin objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: sambaSamAccount objectClass: posixAccount objectClass: shadowAccount gidNumber: 0 uid: Admin uidNumber: 0 homeDirectory: /home/Admin sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaPwdCanChange: 0 sambaHomePath: \\192.168.1.182\Admin sambaHomeDrive: H: sambaProfilePath: \\192.168.1.182\profiles\Admin sambaPrimaryGroupSID: S-1-5-21-860714184-2299130787-2886737959-512 sambaSID: S-1-5-21-860714184-2299130787-2886737959-500 loginShell: /bin/false gecos: Netbios Domain Administrator sambaLMPassword: my-pass sambaAcctFlags: [U] sambaNTPassword: my-pass sambaPwdLastSet: 1264374249 sambaPwdMustChange: 1268262249 shadowMax: 45 Log dump from net join command: Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_get(22) Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_get(22): got connid=22 Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_read(22): checking for input on id=22 Jan 27 21:31:11 hds-debian-virt slapd[1868]: conn=22 op=3 do_search Jan 27 21:31:11 hds-debian-virt slapd[1868]: dnPrettyNormal: dc=semark-testing,dc=dk Jan 27 21:31:11 hds-debian-virt slapd[1868]: dnPrettyNormal: dc=semark-testing,dc=dk, dc=semark-testing,dc=dk Jan 27 21:31:11 hds-debian-virt slapd[1868]: SRCH dc=semark-testing,dc=dk 2 0 Jan 27 21:31:11 hds-debian-virt slapd[1868]: 0 15 0 Jan 27 21:31:11 hds-debian-virt slapd[1868]: filter: ((uid=admin)(objectClass=sambaSamAccount)) Jan 27 21:31:11 hds-debian-virt slapd[1868]: attrs: Jan 27 21:31:11 hds-debian-virt slapd[1868]: uid Jan 27 21:31:11 hds-debian-virt slapd[1868]: uidNumber Jan 27 21:31:11 hds-debian-virt slapd[1868]: gidNumber Jan 27 21:31:11 hds-debian-virt slapd[1868]: homeDirectory Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPwdLastSet Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPwdCanChange Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPwdMustChange Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogonTime Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogoffTime Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaKickoffTime Jan 27 21:31:11 hds-debian-virt slapd[1868]: cn Jan 27 21:31:11 hds-debian-virt slapd[1868]: sn Jan 27 21:31:11 hds-debian-virt slapd[1868]: displayName Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaHomeDrive Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaHomePath Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogonScript Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaProfilePath Jan 27 21:31:11 hds-debian-virt slapd[1868]: description Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaUserWorkstations Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaSID Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPrimaryGroupSID Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLMPassword Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaNTPassword Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaDomainName Jan 27 21:31:11 hds-debian-virt slapd[1868]: objectClass Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaAcctFlags Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaMungedDial Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaBadPasswordCount Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaBadPasswordTime Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPasswordHistory Jan 27 21:31:11 hds-debian-virt slapd[1868]: modifyTimestamp Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogonHours Jan 27 21:31:11 hds-debian-virt slapd[1868]: modifyTimestamp Jan 27 21:31:11 hds-debian-virt slapd[1868]: uidNumber Jan 27 21:31:11 hds-debian-virt slapd[1868]: Jan 27 21:31:11 hds-debian-virt slapd[1868]: = hdb_search Jan 27 21:31:11 hds-debian-virt slapd[1868]: bdb_dn2entry(dc=semark-testing,dc=dk) Jan 27 21:31:11 hds-debian-virt slapd[1868]: search_candidates: base=dc=semark-testing,dc=dk (0x0001) scope=2 Jan 27 21:31:11 hds-debian-virt slapd[1868]: = hdb_dn2idl(dc=semark-testing,dc=dk) Jan 27 21:31:11 hds-debian-virt slapd[1868]: = bdb_equality_candidates (objectClass) Jan 27 21:31:11 hds-debian-virt slapd[1868]: = key_read Jan 27 21:31:11 hds-debian-virt slapd[1868]: bdb_idl_fetch_key: [b49d1940] Jan 27 21:31:11 hds-debian-virt slapd[1868]: = bdb_index_read: failed (-30990) Jan 27 21:31:11 hds-debian-virt slapd[1868]: = bdb_equality_candidates: id=0, first=0, last=0 Jan 27 21:31:11 hds-debian-virt slapd[1868]: = bdb_equality_candidates (uid) Jan 27 21:31:11 hds-debian-virt slapd[1868]: = key_read Jan 27 21:31:11
Re: [Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11
Did you remember to run smbpasswd -W? Sometimes you have to add the -S switch for the join to work. net rpc join -S pdc -U root Dale On 01/27/2010 2:33 PM, Henrik Dige Semark wrote: I have just tried with net join -U Admin and I get the same error as before. # net join -U Admin Enter admin's password: Could not connect to server PDC The username or password was not correct. Connection failed: NT_STATUS_LOGON_FAILURE Ldap search for Admin: # ldapsearch -x -h 127.0.0.1 -p 389 # Admin, Users, semark-testing.dk dn: uid=Admin,ou=Users,dc=semark-testing,dc=dk cn: Admin sn: Admin objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: sambaSamAccount objectClass: posixAccount objectClass: shadowAccount gidNumber: 0 uid: Admin uidNumber: 0 homeDirectory: /home/Admin sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaPwdCanChange: 0 sambaHomePath: \\192.168.1.182\Admin sambaHomeDrive: H: sambaProfilePath: \\192.168.1.182\profiles\Admin sambaPrimaryGroupSID: S-1-5-21-860714184-2299130787-2886737959-512 sambaSID: S-1-5-21-860714184-2299130787-2886737959-500 loginShell: /bin/false gecos: Netbios Domain Administrator sambaLMPassword: my-pass sambaAcctFlags: [U] sambaNTPassword: my-pass sambaPwdLastSet: 1264374249 sambaPwdMustChange: 1268262249 shadowMax: 45 Log dump from net join command: Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_get(22) Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_get(22): got connid=22 Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_read(22): checking for input on id=22 Jan 27 21:31:11 hds-debian-virt slapd[1868]: conn=22 op=3 do_search Jan 27 21:31:11 hds-debian-virt slapd[1868]: dnPrettyNormal:dc=semark-testing,dc=dk Jan 27 21:31:11 hds-debian-virt slapd[1868]: dnPrettyNormal:dc=semark-testing,dc=dk,dc=semark-testing,dc=dk Jan 27 21:31:11 hds-debian-virt slapd[1868]: SRCH dc=semark-testing,dc=dk 2 0 Jan 27 21:31:11 hds-debian-virt slapd[1868]: 0 15 0 Jan 27 21:31:11 hds-debian-virt slapd[1868]: filter: ((uid=admin)(objectClass=sambaSamAccount)) Jan 27 21:31:11 hds-debian-virt slapd[1868]: attrs: Jan 27 21:31:11 hds-debian-virt slapd[1868]: uid Jan 27 21:31:11 hds-debian-virt slapd[1868]: uidNumber Jan 27 21:31:11 hds-debian-virt slapd[1868]: gidNumber Jan 27 21:31:11 hds-debian-virt slapd[1868]: homeDirectory Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPwdLastSet Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPwdCanChange Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPwdMustChange Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogonTime Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogoffTime Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaKickoffTime Jan 27 21:31:11 hds-debian-virt slapd[1868]: cn Jan 27 21:31:11 hds-debian-virt slapd[1868]: sn Jan 27 21:31:11 hds-debian-virt slapd[1868]: displayName Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaHomeDrive Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaHomePath Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogonScript Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaProfilePath Jan 27 21:31:11 hds-debian-virt slapd[1868]: description Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaUserWorkstations Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaSID Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPrimaryGroupSID Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLMPassword Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaNTPassword Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaDomainName Jan 27 21:31:11 hds-debian-virt slapd[1868]: objectClass Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaAcctFlags Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaMungedDial Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaBadPasswordCount Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaBadPasswordTime Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPasswordHistory Jan 27 21:31:11 hds-debian-virt slapd[1868]: modifyTimestamp Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogonHours Jan 27 21:31:11 hds-debian-virt slapd[1868]: modifyTimestamp Jan 27 21:31:11 hds-debian-virt slapd[1868]: uidNumber Jan 27 21:31:11 hds-debian-virt slapd[1868]: Jan 27 21:31:11 hds-debian-virt slapd[1868]: = hdb_search Jan 27 21:31:11 hds-debian-virt slapd[1868]: bdb_dn2entry(dc=semark-testing,dc=dk) Jan 27 21:31:11 hds-debian-virt slapd[1868]: search_candidates: base=dc=semark-testing,dc=dk (0x0001) scope=2 Jan 27 21:31:11 hds-debian-virt slapd[1868]: = hdb_dn2idl(dc=semark-testing,dc=dk) Jan 27 21:31:11 hds-debian-virt slapd[1868]: = bdb_equality_candidates (objectClass) Jan 27 21:31:11 hds-debian-virt slapd[1868]: = key_read Jan 27 21:31:11 hds-debian-virt slapd[1868]: bdb_idl_fetch_key: [b49d1940] Jan 27 21:31:11 hds-debian-virt slapd[1868]:= bdb_index_read: failed (-30990) Jan 27 21:31:11 hds-debian-virt slapd[1868]:=
[Samba] Problem installing print driver to Samba print$ share
Hello! I'm trying to install (using the Add printer wizard on a client) a Postscript driver for a Sharp MX-5001N multifunction copier/printer/etc machine to a Samba print$ share. The installation seems go ok but when I try to access the printer properties I get a dialog box stating that ... printer driver is not installed on this computer... Do You want to install the driver now? The same thing happens when I try to install the drivers from the server on another client. I do NOT want to install the drivers locally on all the clients... Is there a way around this problem? We are using Samba 3.4.4 on Sun Solaris 10. We are not using Cups. I have tried to install the driver from Win 2003 server and Win XP. Thank You! --- Åke Holmlund Umeå University Dept of Informatics Umeå SWEDEN -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11
I have remembered to run smbpassd -W, and I still get the same error when I try with -S pdc on net join command. I can see that LDAP is activated, and that samba is doing something, but it seams like the answer is disappear on the way back. Samba have initialised my LDAP with its SID and RID's, when it can do this way is it not possible to lookup users? Is it necessary to join my PDC to its own domain btw.? cause the new server here is going to be PDC and replace my old Win2k DC (its not a member it a separate test-domain) --- Med Venlig Hilsen / Best regards Henrik Dige Semark On 27-01-2010 21:56, Dale Schroeder wrote: Did you remember to run smbpasswd -W? Sometimes you have to add the -S switch for the join to work. net rpc join -S pdc -U root Dale On 01/27/2010 2:33 PM, Henrik Dige Semark wrote: I have just tried with net join -U Admin and I get the same error as before. # net join -U Admin Enter admin's password: Could not connect to server PDC The username or password was not correct. Connection failed: NT_STATUS_LOGON_FAILURE Ldap search for Admin: # ldapsearch -x -h 127.0.0.1 -p 389 # Admin, Users, semark-testing.dk dn: uid=Admin,ou=Users,dc=semark-testing,dc=dk cn: Admin sn: Admin objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: sambaSamAccount objectClass: posixAccount objectClass: shadowAccount gidNumber: 0 uid: Admin uidNumber: 0 homeDirectory: /home/Admin sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaPwdCanChange: 0 sambaHomePath: \\192.168.1.182\Admin sambaHomeDrive: H: sambaProfilePath: \\192.168.1.182\profiles\Admin sambaPrimaryGroupSID: S-1-5-21-860714184-2299130787-2886737959-512 sambaSID: S-1-5-21-860714184-2299130787-2886737959-500 loginShell: /bin/false gecos: Netbios Domain Administrator sambaLMPassword: my-pass sambaAcctFlags: [U] sambaNTPassword: my-pass sambaPwdLastSet: 1264374249 sambaPwdMustChange: 1268262249 shadowMax: 45 Log dump from net join command: Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_get(22) Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_get(22): got connid=22 Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_read(22): checking for input on id=22 Jan 27 21:31:11 hds-debian-virt slapd[1868]: conn=22 op=3 do_search Jan 27 21:31:11 hds-debian-virt slapd[1868]: dnPrettyNormal:dc=semark-testing,dc=dk Jan 27 21:31:11 hds-debian-virt slapd[1868]: dnPrettyNormal:dc=semark-testing,dc=dk,dc=semark-testing,dc=dk Jan 27 21:31:11 hds-debian-virt slapd[1868]: SRCH dc=semark-testing,dc=dk 2 0 Jan 27 21:31:11 hds-debian-virt slapd[1868]: 0 15 0 Jan 27 21:31:11 hds-debian-virt slapd[1868]: filter: ((uid=admin)(objectClass=sambaSamAccount)) Jan 27 21:31:11 hds-debian-virt slapd[1868]: attrs: Jan 27 21:31:11 hds-debian-virt slapd[1868]: uid Jan 27 21:31:11 hds-debian-virt slapd[1868]: uidNumber Jan 27 21:31:11 hds-debian-virt slapd[1868]: gidNumber Jan 27 21:31:11 hds-debian-virt slapd[1868]: homeDirectory Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPwdLastSet Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPwdCanChange Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPwdMustChange Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogonTime Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogoffTime Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaKickoffTime Jan 27 21:31:11 hds-debian-virt slapd[1868]: cn Jan 27 21:31:11 hds-debian-virt slapd[1868]: sn Jan 27 21:31:11 hds-debian-virt slapd[1868]: displayName Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaHomeDrive Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaHomePath Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogonScript Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaProfilePath Jan 27 21:31:11 hds-debian-virt slapd[1868]: description Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaUserWorkstations Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaSID Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPrimaryGroupSID Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLMPassword Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaNTPassword Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaDomainName Jan 27 21:31:11 hds-debian-virt slapd[1868]: objectClass Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaAcctFlags Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaMungedDial Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaBadPasswordCount Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaBadPasswordTime Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPasswordHistory Jan 27 21:31:11 hds-debian-virt slapd[1868]: modifyTimestamp Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogonHours Jan 27 21:31:11 hds-debian-virt slapd[1868]: modifyTimestamp Jan 27 21:31:11 hds-debian-virt slapd[1868]: uidNumber Jan 27 21:31:11
Re: [Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11
Sorry, should be Administrator Verify the user exists in samba with pdbedit -Lv Administrator and that group mapping is setup. # net groupmap list | grep Domain Admins Domain Admins (S-1-5-21-x-512) - Domain Admins # The unix group name (on the right side of the mapping) may not exactly match the windows name. You might have # net groupmap list | grep Domain Admins Domain Admins (S-1-5-21-x-512) - Samba_Domain_Admins # Also verify that the Administrator is the correct groups #groups Administrator Domain Admins Domain Users I also had mappings for Domain Users Domain Computers Domain Guests Domain Controllers On 01/27/10 15:33, Henrik Dige Semark wrote: I have just tried with net join -U Admin and I get the same error as before. # net join -U Admin Enter admin's password: Could not connect to server PDC The username or password was not correct. Connection failed: NT_STATUS_LOGON_FAILURE Ldap search for Admin: # ldapsearch -x -h 127.0.0.1 -p 389 # Admin, Users, semark-testing.dk dn: uid=Admin,ou=Users,dc=semark-testing,dc=dk cn: Admin sn: Admin objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: sambaSamAccount objectClass: posixAccount objectClass: shadowAccount gidNumber: 0 uid: Admin uidNumber: 0 homeDirectory: /home/Admin sambaLogonTime: 0 sambaLogoffTime: 2147483647 sambaKickoffTime: 2147483647 sambaPwdCanChange: 0 sambaHomePath: \\192.168.1.182\Admin sambaHomeDrive: H: sambaProfilePath: \\192.168.1.182\profiles\Admin sambaPrimaryGroupSID: S-1-5-21-860714184-2299130787-2886737959-512 sambaSID: S-1-5-21-860714184-2299130787-2886737959-500 loginShell: /bin/false gecos: Netbios Domain Administrator sambaLMPassword: my-pass sambaAcctFlags: [U] sambaNTPassword: my-pass sambaPwdLastSet: 1264374249 sambaPwdMustChange: 1268262249 shadowMax: 45 Log dump from net join command: Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_get(22) Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_get(22): got connid=22 Jan 27 21:31:11 hds-debian-virt slapd[1868]: connection_read(22): checking for input on id=22 Jan 27 21:31:11 hds-debian-virt slapd[1868]: conn=22 op=3 do_search Jan 27 21:31:11 hds-debian-virt slapd[1868]: dnPrettyNormal:dc=semark-testing,dc=dk Jan 27 21:31:11 hds-debian-virt slapd[1868]: dnPrettyNormal:dc=semark-testing,dc=dk,dc=semark-testing,dc=dk Jan 27 21:31:11 hds-debian-virt slapd[1868]: SRCH dc=semark-testing,dc=dk 2 0 Jan 27 21:31:11 hds-debian-virt slapd[1868]: 0 15 0 Jan 27 21:31:11 hds-debian-virt slapd[1868]: filter: ((uid=admin)(objectClass=sambaSamAccount)) Jan 27 21:31:11 hds-debian-virt slapd[1868]: attrs: Jan 27 21:31:11 hds-debian-virt slapd[1868]: uid Jan 27 21:31:11 hds-debian-virt slapd[1868]: uidNumber Jan 27 21:31:11 hds-debian-virt slapd[1868]: gidNumber Jan 27 21:31:11 hds-debian-virt slapd[1868]: homeDirectory Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPwdLastSet Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPwdCanChange Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPwdMustChange Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogonTime Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogoffTime Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaKickoffTime Jan 27 21:31:11 hds-debian-virt slapd[1868]: cn Jan 27 21:31:11 hds-debian-virt slapd[1868]: sn Jan 27 21:31:11 hds-debian-virt slapd[1868]: displayName Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaHomeDrive Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaHomePath Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogonScript Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaProfilePath Jan 27 21:31:11 hds-debian-virt slapd[1868]: description Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaUserWorkstations Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaSID Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPrimaryGroupSID Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLMPassword Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaNTPassword Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaDomainName Jan 27 21:31:11 hds-debian-virt slapd[1868]: objectClass Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaAcctFlags Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaMungedDial Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaBadPasswordCount Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaBadPasswordTime Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaPasswordHistory Jan 27 21:31:11 hds-debian-virt slapd[1868]: modifyTimestamp Jan 27 21:31:11 hds-debian-virt slapd[1868]: sambaLogonHours Jan 27 21:31:11 hds-debian-virt slapd[1868]: modifyTimestamp Jan 27 21:31:11 hds-debian-virt slapd[1868]: uidNumber Jan 27 21:31:11 hds-debian-virt slapd[1868]: Jan 27 21:31:11 hds-debian-virt slapd[1868]: = hdb_search Jan 27 21:31:11 hds-debian-virt slapd[1868]: bdb_dn2entry(dc=semark-testing,dc=dk) Jan 27 21:31:11 hds-debian-virt
Re: [Samba] Help with samba implementation
If you are doing anything samba related on AIX, I highly suggest that you look at the pware site. http://pware.hvcc.edu/ there are some docs on setting up Bill's pWare compile of samba on AIX here: http://pware.hvcc.edu/documentation.html And you can join the pWare mailing list here: http://lists.hvcc.edu/mailman/listinfo/pware Bill is usually very helpful in getting people's difficulties ironed out, and has the most current, stable versions of samba compiled and working for 6.1. -=Andrew -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.4 Panic in Debian
On Wed, Jan 27, 2010 at 05:13:37PM +0100, Volker Lendecke wrote: OK. Then I currently have no idea why allow_weak_crypto would be desirable for Samba. In the case of AD realms that were continuously upgraded from NT4 domains, you may have accounts only using RC4 as an enctype for backwards-compatibility with pre-AD systems. I don't know if this is the reason these users are seeing problems, but it's the only case I can think of why allow_weak_crypto should be needed. Sorry, having looked at the source now, I see that the weak crypto handling is specific to DES, not RC4; and if Samba were *only* using RC4, this error would not happen. However, Samba requests both RC4 and DES, a historical remnant of the time when DES was the only enctype in common between all Kerberos implementations. Referring to the SUBJECT: Where is this leading to a panic in Samba 3.4, I got lost in the meantime. I'm afraid I don't know. I was cc:ed on this somewhat mid-thread, and haven't seen any panics; what I know about is http://bugs.debian.org/566977, which reports that after upgrade to MIT Kerberos 1.8alpha1, samba domain joins are failing because of the need for allow_weak_crypto to be set before setting DES tgs enctypes is permitted. -- Steve Langasek Give me a lever long enough and a Free OS Debian Developer to set it on, and I can move the world. Ubuntu Developerhttp://www.debian.org/ slanga...@ubuntu.com vor...@debian.org signature.asc Description: Digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11
My admin account is called Admin: # pdbedit -Lv Admin INFO: Current debug levels: all: True/256 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: False/0 locking: False/0 msdfs: False/0 dmapi: False/0 registry: False/0 doing parameter log file = /var/log/samba/%m.log doing parameter panic action = /usr/share/samba/panic-action %d doing parameter security = user doing parameter encrypt passwords = true doing parameter unix password sync = yes doing parameter pam password change = yes doing parameter obey pam restrictions = no doing parameter passwd program = /usr/sbin/smbldap-passwd %u doing parameter passwd chat = *Nyt kodeord* \n *Det nye kodeord skal være minimum 6 karaktere lange, og kan indeholde [0-9], [a-z] og [A-Z]* \n *Ny kode* %n\n *Tast koden igen* %n\n * Koden skiftet korrekt* doing parameter printing = cups doing parameter load printers = Yes doing parameter printcap name = cups doing parameter socket options = TCP_NODELAY pm_process() returned Yes lp_servicenumber: couldn't find homes set_server_role: role = ROLE_DOMAIN_PDC Attempting to register new charset UCS-2LE Registered charset UCS-2LE Attempting to register new charset UTF-16LE Registered charset UTF-16LE Attempting to register new charset UCS-2BE Registered charset UCS-2BE Attempting to register new charset UTF-16BE Registered charset UTF-16BE Attempting to register new charset UTF8 Registered charset UTF8 Attempting to register new charset UTF-8 Registered charset UTF-8 Attempting to register new charset ASCII Registered charset ASCII Attempting to register new charset 646 Registered charset 646 Attempting to register new charset ISO-8859-1 Registered charset ISO-8859-1 Attempting to register new charset UCS2-HEX Registered charset UCS2-HEX Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Attempting to register passdb backend ldapsam Successfully added passdb backend 'ldapsam' Attempting to register passdb backend ldapsam_compat Successfully added passdb backend 'ldapsam_compat' Attempting to register passdb backend NDS_ldapsam Successfully added passdb backend 'NDS_ldapsam' Attempting to register passdb backend NDS_ldapsam_compat Successfully added passdb backend 'NDS_ldapsam_compat' Attempting to register passdb backend smbpasswd Successfully added passdb backend 'smbpasswd' Attempting to register passdb backend tdbsam Successfully added passdb backend 'tdbsam' Attempting to find an passdb backend to match ldapsam:ldap://127.0.0.1 (ldapsam) Found pdb backend ldapsam smbldap_search_domain_info: Searching for:[((objectClass=sambaDomain)(sambaDomainName=SEMARKTEST))] smbldap_search_ext: base = [dc=semark-testing,dc=dk], filter = [((objectClass=sambaDomain)(sambaDomainName=SEMARKTEST))], scope = [2] Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE Substituting charset 'UTF-8' for LOCALE The connection to the LDAP server was closed smb_ldap_setup_connection: ldap://127.0.0.1 smbldap_open_connection: connection opened ldap_connect_system: Binding to ldap server ldap://127.0.0.1 as cn=admin,dc=semark-testing,dc=dk ldap_connect_system: successful connection to the LDAP server ldap_connect_system: LDAP server does support paged results The LDAP server is successfully connected attribute sambaAlgorithmicRidBase does not exist pdb backend ldapsam:ldap://127.0.0.1 has a valid init Netbios name list:- my_netbios_names[0]=PDC Attempting to find an passdb backend to match ldapsam:ldap://127.0.0.1 (ldapsam) Found pdb backend ldapsam smbldap_search_domain_info: Searching for:[((objectClass=sambaDomain)(sambaDomainName=SEMARKTEST))] smbldap_search_ext: base = [dc=semark-testing,dc=dk], filter = [((objectClass=sambaDomain)(sambaDomainName=SEMARKTEST))], scope = [2] The connection to the LDAP server was closed smb_ldap_setup_connection: ldap://127.0.0.1 smbldap_open_connection: connection opened ldap_connect_system: Binding to ldap server ldap://127.0.0.1 as cn=admin,dc=semark-testing,dc=dk ldap_connect_system: successful
[Samba] Does samba-common-3.0.10-1.4E.12.2 support NTLM?
I would like to know if NTLM is supported in samba version 3.0.10-1.4E.12.2. Thanks Cheers, Keith -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] single stream performance issue, Win2K, WinXP, Samba 3.2.5-4lenny7 (Debian Lenny)
Stan Hoeppner put forth on 1/25/2010 5:30 PM: Volker Lendecke put forth on 1/25/2010 1:28 AM: The dual-stream one is kindof limited help. The interesting piece is how Win-Win does its thing faster, so we need to see that one. I've been busting my but trying to get you something meaningful. This dump is less than optimal for two reasons, but it's the best I can get you thus far. 1. Running tshark on Win2K creates a huge network performance hit and thus b/w numbers for small file (250MB) transfers don't come close to accurately describing the real world. With tshark running the b/w is less than half of normal with small files. 2. Because of this I had to do a huge file copy to allow time for the client to level off at peak performance, which is still ~500KB/s lower than normal due to tshark overhead. Anyway, the file is over 400MB. It'll take quite a while to grab off my server. http://www.hardwarefreak.com/smb-winwin-single-stream Hope you are able to glean something meaningful from it. Were you able to grab this trace file yet Volker? If so, have you found anything interesting yet when comparing it to the previous Samba-Win2K trace file? Any clues yet as to why the win-win throughput is almost 3MB/s better than Samba-Win? If you haven't dug into it yet, as a reminder, this last trace capture was done with tshark on windows. The previous trace file was captured on the Linux machine with tcpdump. -- Stan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] max smbd processes
Samba 3.2.5 on Debian Lenny From: http://www.samba.org/samba/docs/server_security.html Samba is able to limit the number of concurrent connections when smbd is launched as a daemon (not from inetd). The 'max smbd processes' smb.conf option allows Administrators to define the maximum number of smbd processes running at any given point in time. Any further attempts from clients to connect to the server will be rejected. I'm using max smbd processes for another reason. I'm trying to optimize memory usage on this box, which really only ever has one samba client machine connecting. I'm trying to get the number of smbd processes down to 1 but to this point have failed. I have in /etc/samba/smb.conf: max smbd processes = 1 Yet once restarting samba and connecting to a share, I get this: [04:41:16][r...@greer]/$ ps -ef|grep smbd root 8586 1 0 00:12 ?00:00:00 /usr/sbin/smbd -D root 8591 8586 0 00:12 ?00:00:00 /usr/sbin/smbd -D stan 8596 8586 0 00:13 ?00:00:56 /usr/sbin/smbd -D top: 8586 root 20 0 12368 2828 2168 S0 0.7 0:00.12 smbd 8591 root 20 0 12368 984 340 S0 0.3 0:00.00 smbd 8596 stan 20 0 12912 3972 2896 S0 1.0 0:56.46 smbd I've set max smbd processes to 1, yet I see 3 smbd processes. Is something broken? Is max smbd processes not an accurate description? Would it better be described as max smbd concurrent clients or max smbd user processes? I can understand the need for a master daemon process that spawns children for each connection, but at most that should require 2 smbd processes, not 3. As you can see from the top output, only one smbd process is actually servicing a client. One is completely idle, sucking up resources. The other appears to be the master which spawns the children. I know I'm in a fringe scenario here, as most people aren't going to try to limit smbd processes to 1. I'm just wondering why the documentation is so exactly specific as to the nature of this config option, but why the option doesn't work the way it is described. Is this a truth in advertising issue, or am I missing something else in my config to make this config directive work as advertised? Thanks. -- Stan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] max smbd processes
On Wed, Jan 27, 2010 at 05:03:37PM -0600, Stan Hoeppner wrote: Samba 3.2.5 on Debian Lenny From: http://www.samba.org/samba/docs/server_security.html Samba is able to limit the number of concurrent connections when smbd is launched as a daemon (not from inetd). The 'max smbd processes' smb.conf option allows Administrators to define the maximum number of smbd processes running at any given point in time. Any further attempts from clients to connect to the server will be rejected. I'm using max smbd processes for another reason. I'm trying to optimize memory usage on this box, which really only ever has one samba client machine connecting. I'm trying to get the number of smbd processes down to 1 but to this point have failed. I have in /etc/samba/smb.conf: max smbd processes = 1 Yet once restarting samba and connecting to a share, I get this: [04:41:16][r...@greer]/$ ps -ef|grep smbd root 8586 1 0 00:12 ?00:00:00 /usr/sbin/smbd -D root 8591 8586 0 00:12 ?00:00:00 /usr/sbin/smbd -D stan 8596 8586 0 00:13 ?00:00:56 /usr/sbin/smbd -D top: 8586 root 20 0 12368 2828 2168 S0 0.7 0:00.12 smbd 8591 root 20 0 12368 984 340 S0 0.3 0:00.00 smbd 8596 stan 20 0 12912 3972 2896 S0 1.0 0:56.46 smbd I've set max smbd processes to 1, yet I see 3 smbd processes. Is something broken? No. Is max smbd processes not an accurate description? Would it better be described as max smbd concurrent clients or max smbd user processes? Yes, that's a better description. I can understand the need for a master daemon process that spawns children for each connection, but at most that should require 2 smbd processes, not 3. As you can see from the top output, only one smbd process is actually servicing a client. One is completely idle, sucking up resources. The other appears to be the master which spawns the children. There's also the printer background lpq updater process, that's the third one. We should probably update the description to make this clear. It's all working as designed. You can always comment out the code for this (it's in printing/printing.c:start_background_queue()) if you are resource constrained. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] max smbd processes
Jeremy Allison put forth on 1/27/2010 5:18 PM: Is max smbd processes not an accurate description? Would it better be described as max smbd concurrent clients or max smbd user processes? Yes, that's a better description. Understood. There's also the printer background lpq updater process, that's the third one. We should probably update the description to make this clear. It's all working as designed. You can always comment out the code for this (it's in printing/printing.c:start_background_queue()) if you are resource constrained. Aha, so that's what the third one is. As I don't do printer sharing this possibility slipped my mind. I'm not so resource constrained as to start hacking source. I always stick with my distro's packages unless extreme circumstances require going to source, and this really isn't one of them. Maybe there could be a future smb.conf option to completely disable printer sharing and the launch of the deamon process? I noticed in the documentation I quoted earlier something about running Samba from inetd. Is this (easily) doable? Would running from inetd be advantageous in my low resource consumption scenario, processes exiting after a period of inactivity? Or would this cause more problems than it would solve? Thanks Jeremy. -- Stan P.S. We briefly met once a few years ago when you were in St. Louis. You stopped by Whitfield School to troubleshoot an issue with the AD code. I was the sysadmin there at the time. You were working for Novell at that time. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] max smbd processes
On Wed, Jan 27, 2010 at 06:21:36PM -0600, Stan Hoeppner wrote: Aha, so that's what the third one is. As I don't do printer sharing this possibility slipped my mind. I'm not so resource constrained as to start hacking source. I always stick with my distro's packages unless extreme circumstances require going to source, and this really isn't one of them. Maybe there could be a future smb.conf option to completely disable printer sharing and the launch of the deamon process? Good point, I'll think about this. I noticed in the documentation I quoted earlier something about running Samba from inetd. Is this (easily) doable? Would running from inetd be advantageous in my low resource consumption scenario, processes exiting after a period of inactivity? Or would this cause more problems than it would solve? Should work. Log a bug if it doesn't. It will also prevent the backend printer smbd from running as well. P.S. We briefly met once a few years ago when you were in St. Louis. You stopped by Whitfield School to troubleshoot an issue with the AD code. I was the sysadmin there at the time. You were working for Novell at that time. Oh that's great ! I am actually wearing my green Whitfield School fleese right now ! It's one of my favourite items of clothing :-). Thanks, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] roaming profiles and Documents and setting with non-standard Windows 2k3 administrator RID.....
Because of the extremely restrictive security environment we work under, our Windows Admins have disabled the administrator account on our Domain and created a new account with administrator rights. The result is that the common RID of 500 which maps to the Linux UID and GID of 500 is no longer valid. This means that when the Windows Domain controller, via the Domain Administrator (which has another name and RID) tries to make an account on the samba share where the profiles are intended for, it fails because Samba expects this to come from the well known RID of 500. Is there any way to specify in Samba what RID number to expect and use for Domain Administration management? Thanks. Dan _ This email has been ClamScanned ! www.clamav.net -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] roaming profiles and Documents and setting with non-standard Windows 2k3 administrator RID.....
On 01/27/2010 08:29 PM, Daniel R. Gore wrote: Because of the extremely restrictive security environment we work under, our Windows Admins have disabled the administrator account on our Domain and created a new account with administrator rights. The result is that the common RID of 500 which maps to the Linux UID and GID of 500 is no longer valid. This means that when the Windows Domain controller, via the Domain Administrator (which has another name and RID) tries to make an account on the samba share where the profiles are intended for, it fails because Samba expects this to come from the well known RID of 500. Is there any way to specify in Samba what RID number to expect and use for Domain Administration management? Thanks. Dan Dan, You can assign suitable rights and privileges using the net utility as follows: net rpc grant rights DOMAIN\Group Name SeMachineAccountPrivilege SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege -Uadministrator%password When correctly processed for domain group Whatchamacallit you will get something that looks like this: net rpc rights list accounts -Uwinadmin%n3v3rgessit BUILTIN\Print Operators No privileges assigned BUILTIN\Account Operators No privileges assigned BUILTIN\Backup Operators No privileges assigned BUILTIN\Server Operators No privileges assigned BUILTIN\Administrators SeMachineAccountPrivilege SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege Everyone No privileges assigned URDOMAIN\Whatchamacallit SeMachineAccountPrivilege SeTakeOwnershipPrivilege SeBackupPrivilege SeRestorePrivilege SeRemoteShutdownPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege Yell if you need more help. Cheers, John T. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] max smbd processes
Jeremy Allison put forth on 1/27/2010 7:20 PM: On Wed, Jan 27, 2010 at 06:21:36PM -0600, Stan Hoeppner wrote: I noticed in the documentation I quoted earlier something about running Samba from inetd. Is this (easily) doable? Would running from inetd be advantageous in my low resource consumption scenario, processes exiting after a period of inactivity? Or would this cause more problems than it would solve? Should work. Log a bug if it doesn't. It will also prevent the backend printer smbd from running as well. I'd never dug into inetd.conf before today. Luckily I've got smbd working via inetd now. I didn't configure nmbd in inetd as I don't really need browsing. I have netbios disabled everywhere anyway so it's of little use. So, this is great, exactly what I was looking for. When I click my mapped drive(s) in Windows, a single smbd process fires on the Debian host, and it works, just as it should. I've not rebooted the system since making the inetd changes, merely killing inetd with -HUP to reload its config. The Samba init script is still going to be run during the next boot as I haven't monkeyed with the rcX.d directories or anything. I set RUN_MODE=inetd in the /etc/init.d/samba script. Will that change by itself keep the script from launching the normal set of daemon processes or is there something else I need to do to prevent this and have inetd handle it all? P.S. We briefly met once a few years ago when you were in St. Louis. You stopped by Whitfield School to troubleshoot an issue with the AD code. I was the sysadmin there at the time. You were working for Novell at that time. Oh that's great ! I am actually wearing my green Whitfield School fleese right now ! It's one of my favourite items of clothing :-). I guess that clothing is better than the name it bears. Do you wear any of your Novell clothing? If not, you'll understand why I no longer wear any of my Whitfield clothing. ;) However, I'm glad I was working there at that time, as it offered me the rare opportunity to meet one of the great wizards in the FOSS realm. ;) I must admit I haven't kept tabs on you since you left Novell and landed at Google. I just recently joined the samba list (should have long ago). I noticed the listserv seems to be hosted in Utah. Are you still living in the mountains or did you migrate to the Bay Area? Novell has its problems, but one has to admit they picked a spot with one heck of view for their HQ. I was there for Brainshare '07. The view of those mountains almost made me want to move there. Then I came to my senses when taking the local religion factor into account. ;) Sorry I'm getting OT. I guess we could pick up the reminiscing off list. -- Stan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.4 Panic in Debian
Quoting Steve Langasek (vor...@debian.org): Referring to the SUBJECT: Where is this leading to a panic in Samba 3.4, I got lost in the meantime. I'm afraid I don't know. I was cc:ed on this somewhat mid-thread, and haven't seen any panics; what I know about is http://bugs.debian.org/566977, which reports that after upgrade to MIT Kerberos 1.8alpha1, samba domain joins are failing because of the need for allow_weak_crypto to be set before setting DES tgs enctypes is permitted. Our user reported that panic stopped when he updated MIT Kerberos to 1.8then, of course, he jumped into problems related to the use of weak encryption (at least this is my understanding of all this...). signature.asc Description: Digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[SCM] Samba Shared Repository - branch v3-5-test updated
The branch, v3-5-test has been updated via 06dfc7f... VERSION: Raise version number up to 3.5.0. from 048adb5... WHATSNEW: Update changes. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-test - Log - commit 06dfc7f2d63491b80497813c70311fefcdf2ec49 Author: Karolin Seeger ksee...@samba.org Date: Tue Jan 26 19:37:12 2010 +0100 VERSION: Raise version number up to 3.5.0. Karolin --- Summary of changes: source3/VERSION |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/VERSION b/source3/VERSION index 325c814..dbf57df 100644 --- a/source3/VERSION +++ b/source3/VERSION @@ -56,7 +56,7 @@ SAMBA_VERSION_PRE_RELEASE= # e.g. SAMBA_VERSION_RC_RELEASE=1 # # - 3.0.0rc1 # -SAMBA_VERSION_RC_RELEASE=2 +SAMBA_VERSION_RC_RELEASE= # To mark SVN snapshots this should be set to 'yes'# -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-4-test updated
The branch, v3-4-test has been updated via 135b67a... Do not segfault in pdb_search_destructor if no real search was started (cherry picked from commit d07464b21fe652e205f5eb2c74d12495bab100ce) from 69100db... s3-docs: Adapt version in man ldbrename. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-4-test - Log - commit 135b67a627fd1e98b4211fe3ac738ae2fec10145 Author: Volker Lendecke v...@samba.org Date: Wed May 27 18:40:13 2009 +0200 Do not segfault in pdb_search_destructor if no real search was started (cherry picked from commit d07464b21fe652e205f5eb2c74d12495bab100ce) Fix bug #7068 (pdb_search api may crash as non-root user). --- Summary of changes: source3/passdb/pdb_interface.c |3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/passdb/pdb_interface.c b/source3/passdb/pdb_interface.c index 8c00329..01815c6 100644 --- a/source3/passdb/pdb_interface.c +++ b/source3/passdb/pdb_interface.c @@ -1711,7 +1711,7 @@ static NTSTATUS pdb_default_lookup_names(struct pdb_methods *methods, static int pdb_search_destructor(struct pdb_search *search) { - if (!search-search_ended) { + if ((!search-search_ended) (search-search_end != NULL)) { search-search_end(search); } return 0; @@ -1733,6 +1733,7 @@ struct pdb_search *pdb_search_init(TALLOC_CTX *mem_ctx, result-num_entries = 0; result-cache_size = 0; result-search_ended = False; + result-search_end = NULL; /* Segfault appropriately if not initialized */ result-next_entry = NULL; -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via dffb5ad... Implemented net fsmo command for transferring fsmo roles from 0e2d1cf... s4-smbtorture: pick correct last packet while checking backchannel replies in RPC-SPOOLSS-NOTIFY. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit dffb5ad2bf75fc0bcb69dce5cde52c8a1ea9c4f9 Author: Nadezhda Ivanova nadezhda.ivan...@postpath.com Date: Wed Jan 27 17:57:37 2010 +0200 Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions. --- Summary of changes: source4/scripting/python/samba/netcmd/__init__.py |2 + source4/scripting/python/samba/netcmd/fsmo.py | 202 + 2 files changed, 204 insertions(+), 0 deletions(-) create mode 100644 source4/scripting/python/samba/netcmd/fsmo.py Changeset truncated at 500 lines: diff --git a/source4/scripting/python/samba/netcmd/__init__.py b/source4/scripting/python/samba/netcmd/__init__.py index d6a130c..09c8cc3 100644 --- a/source4/scripting/python/samba/netcmd/__init__.py +++ b/source4/scripting/python/samba/netcmd/__init__.py @@ -145,3 +145,5 @@ from samba.netcmd.newuser import cmd_newuser commands[newuser] = cmd_newuser() from samba.netcmd.ntacl import cmd_acl commands[acl] = cmd_acl() +from samba.netcmd.fsmo import cmd_fsmo +commands[fsmo] = cmd_fsmo() diff --git a/source4/scripting/python/samba/netcmd/fsmo.py b/source4/scripting/python/samba/netcmd/fsmo.py new file mode 100644 index 000..6bfc2ef --- /dev/null +++ b/source4/scripting/python/samba/netcmd/fsmo.py @@ -0,0 +1,202 @@ +#!/usr/bin/python +# +# Changes a FSMO role owner +# +# Copyright Nadezhda Ivanova 2009 +# Copyright Jelmer Vernooij 2009 +# +# This program is free software; you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation; either version 3 of the License, or +# (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program. If not, see http://www.gnu.org/licenses/. +# + +import samba.getopt as options +import ldb +from ldb import LdbError + +from samba.auth import system_session +from samba.netcmd import ( +Command, +CommandError, +Option, +) +from samba.samdb import SamDB + +class cmd_fsmo(Command): +Makes the targer DC transfer or seize a fsmo role + +synopsis = (show | transfer options | seize options) + +takes_optiongroups = { +sambaopts: options.SambaOptions, +credopts: options.CredentialsOptions, +versionopts: options.VersionOptions, +} + +takes_options = [ +Option(--host, help=LDB URL for database or target server, type=str), +Option(--force, help=Force seizing of the role without attempting to transfer first., action=store_true), +Option(--role, type=choice, choices=[rid, pdc, infrastructure,schema,naming,all], + help=The FSMO role to seize or transfer.\n +rid=RidAllocationMasterRole\n +schema=SchemaMasterRole\n +pdc=PdcEmulationMasterRole\n +naming=DomainNamingMasterRole\n +infrastructure=InfrastructureMasterRole\n +all=all of the above), +] + +takes_args = [subcommand] + +def transfer_role(self, role, samdb): +m = ldb.Message() +m.dn = ldb.Dn(samdb, ) +if role == rid: +m[becomeRidMaster]= ldb.MessageElement( +1, ldb.FLAG_MOD_REPLACE, +becomeRidMaster) +elif role == pdc: +domain_dn = SamDB.domain_dn(samdb) +res = samdb.search(domain_dn, + scope=ldb.SCOPE_BASE, attrs=[objectSid]) +assert(len(res) == 1) +sid = res[0][objectSid][0] +m[becomePdc]= ldb.MessageElement( +sid, ldb.FLAG_MOD_REPLACE, +becomePdc) +elif
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via b63b9bc... s4:windc move windc plugin in its own file via 1f2e9e9... s4:PAC make common functions public via 82a80b7... s4:PAC Streamline pac-glue step 2 via 85e3561... s4:PAC Streamline pac-glue from 6bade10... s3: get pthread detection also on HP-UX right http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit b63b9bcd42e864d4b7024944c9d0b467487348f0 Author: Simo Sorce i...@samba.org Date: Tue Jan 26 11:56:16 2010 -0500 s4:windc move windc plugin in its own file Keep all heimdal related plugin code within wdc-samba4.c Leave only interfaces common to multiple plugins in pac-glue.c commit 1f2e9e90bdbd609dc6316c6dd71faa25a0138915 Author: Simo Sorce i...@samba.org Date: Tue Jan 26 11:43:54 2010 -0500 s4:PAC make common functions public commit 82a80b7f71d549e93995603a20ba119003c923fa Author: Simo Sorce i...@samba.org Date: Tue Jan 26 11:09:32 2010 -0500 s4:PAC Streamline pac-glue step 2 Split functions so that no assumption is made about which plugin is using them commit 85e3561dc9883aa957de85ad2ff82e0cc13c81b4 Author: Simo Sorce i...@samba.org Date: Tue Jan 26 11:06:00 2010 -0500 s4:PAC Streamline pac-glue First step, preparing to share the code between multiple plugins. --- Summary of changes: source4/kdc/config.mk| 18 +++- source4/kdc/kdc.c|1 + source4/kdc/kdc.h|2 - source4/kdc/pac-glue.c | 274 ++ source4/kdc/pac-glue.h | 46 source4/kdc/wdc-samba4.c | 212 +++ 6 files changed, 357 insertions(+), 196 deletions(-) create mode 100644 source4/kdc/pac-glue.h create mode 100644 source4/kdc/wdc-samba4.c Changeset truncated at 500 lines: diff --git a/source4/kdc/config.mk b/source4/kdc/config.mk index 1659941..c3fc550 100644 --- a/source4/kdc/config.mk +++ b/source4/kdc/config.mk @@ -6,7 +6,7 @@ INIT_FUNCTION = server_service_kdc_init SUBSYSTEM = service PRIVATE_DEPENDENCIES = \ - HEIMDAL_KDC HDB_SAMBA4 PAC_GLUE LIBSAMBA-HOSTCONFIG \ + HEIMDAL_KDC HDB_SAMBA4 WDC_SAMBA4 LIBSAMBA-HOSTCONFIG \ LIBTSOCKET LIBSAMBA_TSOCKET # End SUBSYSTEM KDC ### @@ -14,18 +14,30 @@ PRIVATE_DEPENDENCIES = \ KDC_OBJ_FILES = $(addprefix $(kdcsrcdir)/, kdc.o kpasswdd.o) ### -# Start SUBSYSTEM KDC +# Start SUBSYSTEM HDB [SUBSYSTEM::HDB_SAMBA4] CFLAGS = -Iheimdal/kdc -Iheimdal/lib/hdb PRIVATE_DEPENDENCIES = \ LIBLDB auth_sam auth_sam_reply CREDENTIALS \ HEIMDAL_HDB LIBSAMBA-HOSTCONFIG -# End SUBSYSTEM KDC +# End SUBSYSTEM HDB ### HDB_SAMBA4_OBJ_FILES = $(addprefix $(kdcsrcdir)/, hdb-samba4.o) ### +# Start SUBSYSTEM WDC +[SUBSYSTEM::WDC_SAMBA4] +CFLAGS = -Iheimdal/kdc -Iheimdal/lib/hdb +PRIVATE_DEPENDENCIES = \ + LIBLDB auth_sam auth_sam_reply CREDENTIALS \ + HEIMDAL_HDB PAC_GLUE LIBSAMBA-HOSTCONFIG +# End SUBSYSTEM WDC +### + +WDC_SAMBA4_OBJ_FILES = $(addprefix $(kdcsrcdir)/, wdc-samba4.o) + +### # Start SUBSYSTEM KDC [SUBSYSTEM::PAC_GLUE] CFLAGS = -Iheimdal/kdc -Iheimdal/lib/hdb diff --git a/source4/kdc/kdc.c b/source4/kdc/kdc.c index 026eaf4..86d0382 100644 --- a/source4/kdc/kdc.c +++ b/source4/kdc/kdc.c @@ -48,6 +48,7 @@ TALLOC_CTX *hdb_samba4_mem_ctx; struct tevent_context *hdb_samba4_ev_ctx; struct loadparm_context *hdb_samba4_lp_ctx; +extern struct krb5plugin_windc_ftable windc_plugin_table; typedef bool (*kdc_process_fn_t)(struct kdc_server *kdc, TALLOC_CTX *mem_ctx, diff --git a/source4/kdc/kdc.h b/source4/kdc/kdc.h index becef93..57f05e8 100644 --- a/source4/kdc/kdc.h +++ b/source4/kdc/kdc.h @@ -30,8 +30,6 @@ struct kdc_server; struct tsocket_address; -extern struct krb5plugin_windc_ftable windc_plugin_table; - bool kpasswdd_process(struct kdc_server *kdc, TALLOC_CTX *mem_ctx, DATA_BLOB *input, diff --git a/source4/kdc/pac-glue.c b/source4/kdc/pac-glue.c index d921899..3c6b10e 100644 --- a/source4/kdc/pac-glue.c +++ b/source4/kdc/pac-glue.c @@ -4,6 +4,7 @@ PAC Glue between Samba and the KDC Copyright (C) Andrew Bartlett abart...@samba.org 2005-2009 + Copyright (C) Simo Sorce i...@samba.org 2010 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by @@ -31,59 +32,53 @@ #include kdc/kdc.h #include param/param.h -struct krb5_dh_moduli; -struct _krb5_krb_auth_data; - -static krb5_error_code samba_kdc_plugin_init(krb5_context context, void **ptr) -{ - *ptr = NULL; -
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 627fb85... Fix bug #7072 - Accounts can't be unlocked from ldap. from 8e26aa3... testsuite/libsmbclient use source3 in the path of the C and LFLAGS http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 627fb85092f728065b6d772c41aeb75018154e86 Author: Jeremy Allison j...@samba.org Date: Wed Jan 27 16:42:06 2010 -0800 Fix bug #7072 - Accounts can't be unlocked from ldap. Fix suggested by Andy Hanton andyhan...@gmail.com. The LOGIN_CACHE struct contains two time_t entries, but was being written to and read from via tdb_pack/tdb_unpack functions using explicit 32-bit int specifiers. This would break on machines with a 64-bit time_t. Use correct int sizes for tdb_pack/tdb_unpack. We have to fix this properly before 2037 :-). Jeremy. --- Summary of changes: source3/passdb/login_cache.c | 22 +++--- 1 files changed, 15 insertions(+), 7 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/passdb/login_cache.c b/source3/passdb/login_cache.c index 2a63500..5e1c977 100644 --- a/source3/passdb/login_cache.c +++ b/source3/passdb/login_cache.c @@ -68,6 +68,7 @@ LOGIN_CACHE * login_cache_read(struct samu *sampass) char *keystr; TDB_DATA databuf; LOGIN_CACHE *entry; + uint32_t entry_timestamp = 0, bad_password_time = 0; if (!login_cache_init()) return NULL; @@ -92,17 +93,22 @@ LOGIN_CACHE * login_cache_read(struct samu *sampass) SAFE_FREE(databuf.dptr); return NULL; } + ZERO_STRUCTP(entry); if (tdb_unpack (databuf.dptr, databuf.dsize, SAM_CACHE_FORMAT, entry-entry_timestamp, entry-acct_ctrl, - entry-bad_password_count, - entry-bad_password_time) == -1) { + entry-bad_password_count, + bad_password_time) == -1) { DEBUG(7, (No cache entry found\n)); SAFE_FREE(entry); SAFE_FREE(databuf.dptr); return NULL; } + /* Deal with possible 64-bit time_t. */ + entry-entry_timestamp = (time_t)entry_timestamp; + entry-bad_password_time = (time_t)bad_password_time; + SAFE_FREE(databuf.dptr); DEBUG(5, (Found login cache entry: timestamp %12u, flags 0x%x, count %d, time %12u\n, @@ -116,6 +122,8 @@ bool login_cache_write(const struct samu *sampass, LOGIN_CACHE entry) char *keystr; TDB_DATA databuf; bool ret; + uint32_t entry_timestamp; + uint32_t bad_password_time = (uint32_t)entry.bad_password_time; if (!login_cache_init()) return False; @@ -130,14 +138,14 @@ bool login_cache_write(const struct samu *sampass, LOGIN_CACHE entry) return False; } - entry.entry_timestamp = time(NULL); + entry_timestamp = (uint32_t)time(NULL); databuf.dsize = tdb_pack(NULL, 0, SAM_CACHE_FORMAT, -entry.entry_timestamp, +entry_timestamp, entry.acct_ctrl, entry.bad_password_count, -entry.bad_password_time); +bad_password_time); databuf.dptr = SMB_MALLOC_ARRAY(uint8, databuf.dsize); if (!databuf.dptr) { SAFE_FREE(keystr); @@ -145,10 +153,10 @@ bool login_cache_write(const struct samu *sampass, LOGIN_CACHE entry) } if (tdb_pack(databuf.dptr, databuf.dsize, SAM_CACHE_FORMAT, -entry.entry_timestamp, +entry_timestamp, entry.acct_ctrl, entry.bad_password_count, -entry.bad_password_time) +bad_password_time) != databuf.dsize) { SAFE_FREE(keystr); SAFE_FREE(databuf.dptr); -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 69fd846... Second part of fix for bug #7072 - Accounts can't be unlocked from ldap. from 627fb85... Fix bug #7072 - Accounts can't be unlocked from ldap. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 69fd8461b8792f4fee1b61db03953044565492c6 Author: Jeremy Allison j...@samba.org Date: Wed Jan 27 16:52:40 2010 -0800 Second part of fix for bug #7072 - Accounts can't be unlocked from ldap. Missed read of entry_timestamp (was entry-entry_timestamp). Jeremy. --- Summary of changes: source3/passdb/login_cache.c |3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/passdb/login_cache.c b/source3/passdb/login_cache.c index 5e1c977..5630372 100644 --- a/source3/passdb/login_cache.c +++ b/source3/passdb/login_cache.c @@ -96,7 +96,8 @@ LOGIN_CACHE * login_cache_read(struct samu *sampass) ZERO_STRUCTP(entry); if (tdb_unpack (databuf.dptr, databuf.dsize, SAM_CACHE_FORMAT, - entry-entry_timestamp, entry-acct_ctrl, + entry_timestamp, + entry-acct_ctrl, entry-bad_password_count, bad_password_time) == -1) { DEBUG(7, (No cache entry found\n)); -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 8e26aa3... testsuite/libsmbclient use source3 in the path of the C and LFLAGS via 97c4c63... Link testsuite/libsmbclient against required libtdb and libwbclient from 1f7e97a... s3: syntax fix http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 8e26aa3d7cec968584283634fe3dce5553387c8c Author: Lars Müller l...@samba.org Date: Thu Jan 28 00:40:39 2010 +0100 testsuite/libsmbclient use source3 in the path of the C and LFLAGS commit 97c4c63990fceb01fd1110d4fcc97b70f623b201 Author: Lars Müller l...@samba.org Date: Thu Jan 28 00:38:04 2010 +0100 Link testsuite/libsmbclient against required libtdb and libwbclient --- Summary of changes: testsuite/libsmbclient/src/Makefile |6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/testsuite/libsmbclient/src/Makefile b/testsuite/libsmbclient/src/Makefile index c8c0b67..1f640ca 100644 --- a/testsuite/libsmbclient/src/Makefile +++ b/testsuite/libsmbclient/src/Makefile @@ -1,8 +1,8 @@ CC = gcc -CFLAGS = -Wall -W -O2 -g -I../../../source/include -LFLAGS = -L../../../source/bin +CFLAGS = -Wall -W -O2 -g -I../../../source3/include +LFLAGS = -L../../../source3/bin -LIBS= -L/usr/lib -lsmbclient -ltalloc +LIBS= -L/usr/lib -lsmbclient -ltalloc -ltdb -lwbclient INCPATH= -I. -I/usr/include -I./include BIN_DIR=bin -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 0e2d1cf... s4-smbtorture: pick correct last packet while checking backchannel replies in RPC-SPOOLSS-NOTIFY. from 1ead839... s3-selftest: try to get RPC-SPOOLSS-NOTIFY running during make test on the buildfarm. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 0e2d1cf9c4067dfce80a21ebf735d7d6a823d55e Author: Günther Deschner g...@samba.org Date: Wed Jan 27 15:04:00 2010 +0100 s4-smbtorture: pick correct last packet while checking backchannel replies in RPC-SPOOLSS-NOTIFY. Guenther --- Summary of changes: source4/torture/rpc/spoolss_notify.c | 12 ++-- 1 files changed, 10 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/source4/torture/rpc/spoolss_notify.c b/source4/torture/rpc/spoolss_notify.c index e5e52d6..dac8950 100644 --- a/source4/torture/rpc/spoolss_notify.c +++ b/source4/torture/rpc/spoolss_notify.c @@ -354,12 +354,20 @@ static bool test_start_dcerpc_server(struct torture_context *tctx, return true; } +static struct received_packet *last_packet(struct received_packet *p) +{ + struct received_packet *tmp; + for (tmp = p; tmp-next; tmp = tmp-next) ;; + return tmp; +} + static bool test_RFFPCNEx(struct torture_context *tctx, struct dcerpc_pipe *p) { struct dcesrv_context *dce_ctx; struct policy_handle handle; const char *address; + struct received_packet *tmp; received_packets = NULL; @@ -372,8 +380,8 @@ static bool test_RFFPCNEx(struct torture_context *tctx, torture_assert_int_equal(tctx, received_packets-opnum, NDR_SPOOLSS_REPLYOPENPRINTER, no ReplyOpenPrinter packet after RemoteFindFirstPrinterChangeNotifyEx); torture_assert(tctx, test_ClosePrinter(tctx, p, handle), ); - torture_assert(tctx, received_packets, no packets received); - torture_assert_int_equal(tctx, received_packets-opnum, NDR_SPOOLSS_REPLYCLOSEPRINTER, + tmp = last_packet(received_packets); + torture_assert_int_equal(tctx, tmp-opnum, NDR_SPOOLSS_REPLYCLOSEPRINTER, no ReplyClosePrinter packet after ClosePrinter); /* Shut down DCE/RPC server */ -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 5439e1a... s3: fix detection and flags for using pthread via 60a3086... s3: remove unused variable via 38be40f... s3:async_smb: remove unused variable via b6839e1... libreplace: fix unused varibale warning on IRIX via 9536d94... s3: remove unused Variable via 55d4482... s3:netapi: remove unused variable from 463aa06... lib/popt: Fix typo in README. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 5439e1a03f66ff9722987f908babfd71ebd698f1 Author: Björn Jacke b...@sernet.de Date: Tue Jan 26 00:17:10 2010 +0100 s3: fix detection and flags for using pthread I hope this fixes the build on Tru64, IRIX and maybe bug #6983 commit 60a3086d78d9cf445034172f594325cb7b929d24 Author: Björn Jacke b...@sernet.de Date: Mon Jan 25 23:24:35 2010 +0100 s3: remove unused variable commit 38be40f63c9fd2eecb840badaff23b915bc20fee Author: Björn Jacke b...@sernet.de Date: Mon Jan 25 23:23:49 2010 +0100 s3:async_smb: remove unused variable commit b6839e1bfd10d28046f75f9f9c25f8af2665eda3 Author: Björn Jacke b...@sernet.de Date: Mon Jan 25 23:07:24 2010 +0100 libreplace: fix unused varibale warning on IRIX commit 9536d94d5478b63fc05047964b40d8786a7246c4 Author: Björn Jacke b...@sernet.de Date: Mon Jan 25 23:00:14 2010 +0100 s3: remove unused Variable Jeremy, please check! commit 55d448254a9994ecace63c077dc7768675ea3c98 Author: Björn Jacke b...@sernet.de Date: Mon Jan 25 22:57:36 2010 +0100 s3:netapi: remove unused variable --- Summary of changes: lib/replace/strptime.c |4 +- source3/Makefile.in |4 +- source3/configure.in | 64 -- source3/lib/netapi/group.c |2 - source3/libsmb/async_smb.c |2 - source3/libsmb/clireadwrite.c|2 - source3/libsmb/libsmb_thread_posix.c |4 ++ source3/smbd/dosmode.c |4 -- 8 files changed, 61 insertions(+), 25 deletions(-) Changeset truncated at 500 lines: diff --git a/lib/replace/strptime.c b/lib/replace/strptime.c index 0e40f75..568823f 100644 --- a/lib/replace/strptime.c +++ b/lib/replace/strptime.c @@ -251,7 +251,6 @@ strptime_internal (rp, fmt, tm, decided, era_cnt) enum locale_status *decided; int era_cnt; { - const char *rp_backup; int cnt; size_t val; int have_I, is_pm; @@ -261,6 +260,7 @@ strptime_internal (rp, fmt, tm, decided, era_cnt) int have_yday; int have_mon, have_mday; #ifdef _NL_CURRENT + const char *rp_backup; size_t num_eras; #endif struct era_entry *era; @@ -297,10 +297,10 @@ strptime_internal (rp, fmt, tm, decided, era_cnt) #ifndef _NL_CURRENT /* We need this for handling the `E' modifier. */ start_over: -#endif /* Make back up of current processing pointer. */ rp_backup = rp; +#endif switch (*fmt++) { diff --git a/source3/Makefile.in b/source3/Makefile.in index 9d67b44..d75420e 100644 --- a/source3/Makefile.in +++ b/source3/Makefile.in @@ -72,7 +72,7 @@ nscd_li...@nscd_libs@ uuid_li...@uuid_libs@ libwbclie...@libwbclient_static@ @LIBWBCLIENT_SHARED@ libwbclient_li...@libwbclient_libs@ -winbind_nss_pthre...@winbind_nss_pthread@ +winbind_nss_pthread_ldfla...@pthread_ldflags@ dnssd_li...@dnssd_libs@ avahi_li...@avahi_libs@ popt_li...@poptlibs@ @@ -2527,7 +2527,7 @@ bin/v...@exeext@: $(BINARY_PREREQS) $(VLP_OBJ) $(LIBTDB) @WINBIND_NSS@: $(BINARY_PREREQS) $(WINBIND_NSS_OBJ) @echo Linking $@ @$(SHLD) $(WINBIND_NSS_LDSHFLAGS) -o $@ $(WINBIND_NSS_OBJ) \ - $(LIBREPLACE_LIBS) $(WINBIND_NSS_PTHREAD) \ + $(LIBREPLACE_LIBS) $(WINBIND_NSS_PTHREAD_LDFLAGS) \ @sonamef...@`basename $...@`@NSSSONAMEVERSIONSUFFIX@ @WINBIND_WINS_NSS@: $(BINARY_PREREQS) $(WINBIND_WINS_NSS_OBJ) $(LIBTALLOC) $(LIBTDB) diff --git a/source3/configure.in b/source3/configure.in index 82664d6..a5d0b06 100644 --- a/source3/configure.in +++ b/source3/configure.in @@ -709,7 +709,7 @@ AUTH_LIBS=${AUTH_LIBS} ${CRYPT_LIBS} AC_CHECK_HEADERS(aio.h sys/fcntl.h sys/select.h fcntl.h sys/time.h sys/unistd.h rpc/nettype.h) AC_CHECK_HEADERS(unistd.h grp.h sys/id.h memory.h alloca.h) -AC_CHECK_HEADERS(limits.h float.h pthread.h libintl.h) +AC_CHECK_HEADERS(limits.h float.h libintl.h) AC_CHECK_HEADERS(rpc/rpc.h rpcsvc/nis.h rpcsvc/ypclnt.h) AC_CHECK_HEADERS(sys/param.h ctype.h sys/wait.h sys/resource.h sys/ioctl.h sys/ipc.h sys/prctl.h sys/sysctl.h) AC_CHECK_HEADERS(sys/mman.h sys/filio.h sys/priv.h sys/shm.h string.h strings.h stdlib.h) @@ -6032,7 +6032,6 @@ WINBIND_NSS=../nsswitch/libnss_winbind.$SHLIBEXT WINBIND_WINS_NSS=../nsswitch/libnss_wins.$SHLIBEXT WINBIND_NSS_LDSHFLAGS=$LDSHFLAGS
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 098fc8c... s4:torture: refactor querying of domain info out into test_QueryDomainInfo2_level() via 0a33b20... s4:torture: create new test_SetDomainInfo_ntstatus() via c1d157a... s4:torture: refactor setting of domain inf out into test_SetDomainInfo() via 50a46cf... s4:torture: refactor setting account flags out into test_SetUserInfo_acct_flags() from 899bd00... Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail to respond to a read or write. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 098fc8c09c64c9fa37ae70638e3b30340a7ae183 Author: Michael Adam ob...@samba.org Date: Fri Jan 22 00:47:42 2010 +0100 s4:torture: refactor querying of domain info out into test_QueryDomainInfo2_level() Used in several places. (Note: The _level suffix in the function name is just because test_QueryDomainInfo2() already exists as an overall test for all levels.) Michael Signed-off-by: Günther Deschner g...@samba.org commit 0a33b20f70506d0a01b4c543ab57ca2488187ee9 Author: Michael Adam ob...@samba.org Date: Fri Jan 22 00:46:19 2010 +0100 s4:torture: create new test_SetDomainInfo_ntstatus() for checking for SetDomainInfo giving a desired return code. Michael Signed-off-by: Günther Deschner g...@samba.org commit c1d157a48102c50c72a85b60fba5237436377ffd Author: Michael Adam ob...@samba.org Date: Fri Jan 22 00:21:29 2010 +0100 s4:torture: refactor setting of domain inf out into test_SetDomainInfo() and use it in several places. Michael Signed-off-by: Günther Deschner g...@samba.org commit 50a46cff76e33dc8828c49bf0665afeeb2b7c1eb Author: Michael Adam ob...@samba.org Date: Thu Jan 21 23:55:51 2010 +0100 s4:torture: refactor setting account flags out into test_SetUserInfo_acct_flags() and use this in four places (enabling/disabling accounts). Michael Signed-off-by: Günther Deschner g...@samba.org --- Summary of changes: source4/torture/rpc/samr.c | 383 +++- 1 files changed, 168 insertions(+), 215 deletions(-) Changeset truncated at 500 lines: diff --git a/source4/torture/rpc/samr.c b/source4/torture/rpc/samr.c index c2b973e..4ab4a2c 100644 --- a/source4/torture/rpc/samr.c +++ b/source4/torture/rpc/samr.c @@ -3403,33 +3403,106 @@ static bool test_QueryUserInfo_badpwdcount(struct dcerpc_pipe *p, return true; } -static bool test_reset_badpwdcount(struct dcerpc_pipe *p, - struct torture_context *tctx, - struct policy_handle *user_handle, - uint32_t acct_flags, - char **password) +static bool test_SetUserInfo_acct_flags(struct dcerpc_pipe *p, + struct torture_context *tctx, + struct policy_handle *user_handle, + uint32_t acct_flags) { struct samr_SetUserInfo r; union samr_UserInfo user_info; - torture_assert(tctx, test_SetUserPass(p, tctx, user_handle, password), - failed to set password); - - torture_comment(tctx, Testing SetUserInfo level 16 (enable account)\n); + torture_comment(tctx, Testing SetUserInfo level 16\n); user_info.info16.acct_flags = acct_flags; - user_info.info16.acct_flags = ~ACB_DISABLED; r.in.user_handle = user_handle; r.in.level = 16; r.in.info = user_info; torture_assert_ntstatus_ok(tctx, dcerpc_samr_SetUserInfo(p, tctx, r), - failed to enable user); + failed to set account flags); + return true; +} + +static bool test_reset_badpwdcount(struct dcerpc_pipe *p, + struct torture_context *tctx, + struct policy_handle *user_handle, + uint32_t acct_flags, + char **password) +{ torture_assert(tctx, test_SetUserPass(p, tctx, user_handle, password), failed to set password); + torture_comment(tctx, Testing SetUserInfo level 16 (enable account)\n); + + torture_assert(tctx, + test_SetUserInfo_acct_flags(p, tctx, user_handle, + acct_flags ~ACB_DISABLED), + failed to enable user); + + torture_assert(tctx, test_SetUserPass(p, tctx, user_handle, password), + failed to set password); + + return true; +} + +static bool test_SetDomainInfo(struct dcerpc_pipe *p, + struct
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 2f9eb6b... s3: Install and uninstall the static version of libwbclient from b63b9bc... s4:windc move windc plugin in its own file http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 2f9eb6bff5faa2c00c901fdf7b7c3489b473a1d3 Author: Lars Müller l...@samba.org Date: Wed Jan 27 22:40:19 2010 +0100 s3: Install and uninstall the static version of libwbclient This requires to call configure with --enable-static which isn't the case by default. --- Summary of changes: source3/Makefile.in |2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/Makefile.in b/source3/Makefile.in index 2b315c7..873b46a 100644 --- a/source3/Makefile.in +++ b/source3/Makefile.in @@ -2052,12 +2052,14 @@ installlibwbclient:: installdirs libwbclient ln -f -s `basename $(LIBWBCLIENT_SHARED_TARGET_SONAME)` \ $(DESTDIR)$(LIBDIR)/`basename $(LIBWBCLIENT_SHARED_TARGET)` ; \ fi + -$(INSTALLLIBCMD_A) bin/libwbclient.a $(DESTDIR)$(LIBDIR) @$(SHELL) $(srcdir)/script/installdirs.sh $(INSTALLPERMS_BIN) $(DESTDIR) ${prefix}/include -$(INSTALLCMD) -m $(INSTALLPERMS_DATA) $(LIBWBCLIENT_HEADERS) $(DESTDIR)${prefix}/include uninstalllibwbclient:: -rm -f $(DESTDIR)$(LIBDIR)/`basename $(LIBWBCLIENT_SHARED_TARGET)` -$(UNINSTALLLIBCMD_SH) $(DESTDIR)$(LIBDIR)/`basename $(LIBWBCLIENT_SHARED_TARGET_SONAME)` + -$(UNINSTALLLIBCMD_A) $(DESTDIR)$(LIBDIR)/`basename $(LIBWBCLIENT_STATIC_TARGET)` -rm -f $(DESTDIR)${prefix}/include/wbclient.h libs:: libwbclient -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 7148eff... s4-smbtorture: also test smbc_getOptionUseCCache from 08fa573... s3: Enable use of ccache by default for libsmbclient http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 7148eff0b7f3a58be2d2c47516a8b9e3bc3d3c64 Author: Günther Deschner g...@samba.org Date: Tue Jan 26 12:10:17 2010 +0100 s4-smbtorture: also test smbc_getOptionUseCCache --- Summary of changes: source4/torture/libsmbclient/config.m4 |3 ++- source4/torture/libsmbclient/libsmbclient.c |1 + 2 files changed, 3 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source4/torture/libsmbclient/config.m4 b/source4/torture/libsmbclient/config.m4 index 39b3360..481e2fa 100644 --- a/source4/torture/libsmbclient/config.m4 +++ b/source4/torture/libsmbclient/config.m4 @@ -22,7 +22,8 @@ if test x$use_libsmbclient != xno; then AC_CHECK_LIB_EXT(smbclient, SMBCLIENT_LIBS, smbc_new_context) AC_CHECK_LIB_EXT(smbclient, SMBCLIENT_LIBS, smbc_getOptionNoAutoAnonymousLogin) AC_CHECK_LIB_EXT(smbclient, SMBCLIENT_LIBS, smbc_setOptionCaseSensitive) - if test x$ac_cv_header_libsmbclient_h = xyes -a x$ac_cv_lib_ext_smbclient_smbc_new_context = xyes -a x$ac_cv_lib_ext_smbclient_smbc_getOptionNoAutoAnonymousLogin = xyes -a x$ac_cv_lib_ext_smbclient_smbc_setOptionCaseSensitive = xyes; then + AC_CHECK_LIB_EXT(smbclient, SMBCLIENT_LIBS, smbc_setOptionUseCCache) + if test x$ac_cv_header_libsmbclient_h = xyes -a x$ac_cv_lib_ext_smbclient_smbc_new_context = xyes -a x$ac_cv_lib_ext_smbclient_smbc_getOptionNoAutoAnonymousLogin = xyes -a x$ac_cv_lib_ext_smbclient_smbc_setOptionCaseSensitive = xyes -a x$ac_cv_lib_ext_smbclient_smbc_setOptionUseCCache = xyes; then AC_DEFINE(ENABLE_LIBSMBCLIENT,1,[Whether we have libsmbclient on the host system]) SMB_ENABLE(SMBCLIENT,YES) SMB_ENABLE(TORTURE_LIBSMBCLIENT,YES) diff --git a/source4/torture/libsmbclient/libsmbclient.c b/source4/torture/libsmbclient/libsmbclient.c index 2f146c9..9822539 100644 --- a/source4/torture/libsmbclient/libsmbclient.c +++ b/source4/torture/libsmbclient/libsmbclient.c @@ -194,6 +194,7 @@ bool torture_libsmbclient_options(struct torture_context *tctx) TEST_OPTION_INT(OptionUseKerberos, false); TEST_OPTION_INT(OptionFallbackAfterKerberos, false); TEST_OPTION_INT(OptionNoAutoAnonymousLogin, true); + TEST_OPTION_INT(OptionUseCCache, true); smbc_free_context(ctx, 1); -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 6bade10... s3: get pthread detection also on HP-UX right from dffb5ad... Implemented net fsmo command for transferring fsmo roles http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 6bade10a1eb21689613770f9a54e0a080663029c Author: Björn Jacke b...@sernet.de Date: Wed Jan 27 18:54:55 2010 +0100 s3: get pthread detection also on HP-UX right --- Summary of changes: source3/configure.in | 13 - 1 files changed, 12 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/configure.in b/source3/configure.in index a5d0b06..2766d07 100644 --- a/source3/configure.in +++ b/source3/configure.in @@ -6361,17 +6361,28 @@ if test x$PTHREAD_LDFLAGS = xerror; then PTHREAD_LDFLAGS=-lpthread ]) fi +# especially for HP-UX, where the AC_CHECK_FUNC macro fails to test for +# pthread_attr_init. On pthread_mutex_lock it works there... +if test x$PTHREAD_LDFLAGS = xerror; then + AC_CHECK_LIB(pthread, pthread_mutex_lock, [ + PTHREAD_CFLAGS==-D_REENTRANT + PTHREAD_LDFLAGS=-lpthread ]) +fi + AC_SUBST(PTHREAD_CFLAGS) AC_SUBST(PTHREAD_LDFLAGS) samba_cv_HAVE_PTHREAD=no if test x$PTHREAD_CFLAGS != xerror -a x$PTHREAD_LDFLAGS != xerror; then samba_cv_HAVE_PTHREAD=yes - # now check for pthread.h with pthread-correct CFLAGS: + # now check for pthread.h with pthread-correct CFLAGS and LDFLAGS: ac_save_CFLAGS=$CFLAGS CFLAGS=$CFLAGS $PTHREAD_CFLAGS + ac_save_LDFLAGS=$LDFLAGS + LDFLAGS=$LDFLAGS $PTHREAD_LDFLAGS AC_CHECK_HEADERS(pthread.h) CFLAGS=$ac_save_CFLAGS + LDFLAGS=$ac_save_LDFLAGS fi # -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 1ead839... s3-selftest: try to get RPC-SPOOLSS-NOTIFY running during make test on the buildfarm. from 098fc8c... s4:torture: refactor querying of domain info out into test_QueryDomainInfo2_level() http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 1ead83947fce60a74ca88460c2453d8e7e0f58c4 Author: Günther Deschner g...@samba.org Date: Wed Jan 27 13:39:24 2010 +0100 s3-selftest: try to get RPC-SPOOLSS-NOTIFY running during make test on the buildfarm. Guenther --- Summary of changes: source3/script/tests/selftest.sh |4 +++- 1 files changed, 3 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/script/tests/selftest.sh b/source3/script/tests/selftest.sh index 8565185..b9c11b8 100755 --- a/source3/script/tests/selftest.sh +++ b/source3/script/tests/selftest.sh @@ -80,6 +80,7 @@ SAMBA4CONFFILE=$LIBDIR/samba4client.conf SERVERCONFFILE=$LIBDIR/server.conf COMMONCONFFILE=$LIBDIR/common.conf PRIVATEDIR=$PREFIX_ABS/private +NCALRPCDIR=$PREFIX_ABS/ncalrpc LOCKDIR=$PREFIX_ABS/lockdir LOGDIR=$PREFIX_ABS/logs SOCKET_WRAPPER_DIR=$PREFIX_ABS/sw @@ -149,7 +150,7 @@ fi ## printf %s CREATE TEST ENVIRONMENT IN '$PREFIX'... /bin/rm -rf $PREFIX/* -mkdir -p $PRIVATEDIR $LIBDIR $PIDDIR $LOCKDIR $LOGDIR +mkdir -p $PRIVATEDIR $NCALRPCDIR $LIBDIR $PIDDIR $LOCKDIR $LOGDIR mkdir -p $SOCKET_WRAPPER_DIR mkdir -p $WINBINDD_SOCKET_DIR chmod 755 $WINBINDD_SOCKET_DIR @@ -206,6 +207,7 @@ cat $SAMBA4CONFFILEEOF panic action = $SCRIPTDIR/gdb_backtrace %PID% %PROG% include = $COMMONCONFFILE modules dir = $SRCDIR/bin/modules + ncalrpc dir = $NCALRPCDIR EOF cat $SERVERCONFFILEEOF -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 2dd301e... Add dependency of bin/smbfilter to libwbclient. from dee1b41... s4-libcli: Fixed a talloc_reference error. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 2dd301e5cd6ff97943c4bf9c7cd9b820d6193b45 Author: Lars Müller l...@samba.org Date: Tue Jan 26 22:54:15 2010 +0100 Add dependency of bin/smbfilter to libwbclient. --- Summary of changes: source3/Makefile.in |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/Makefile.in b/source3/Makefile.in index d75420e..2b315c7 100644 --- a/source3/Makefile.in +++ b/source3/Makefile.in @@ -1771,7 +1771,7 @@ bin/debug2h...@exeext@: $(BINARY_PREREQS) $(DEBUG2HTML_OBJ) @BUILD_POPT@ $(LIBTA @$(CC) -o $@ $(DEBUG2HTML_OBJ) $(LDFLAGS) $(DYNEXP) \ $(LIBS) $(LIBTALLOC_LIBS) -bin/smbfil...@exeext@: $(BINARY_PREREQS) $(SMBFILTER_OBJ) @BUILD_POPT@ $(LIBTALLOC) $(LIBTDB) +bin/smbfil...@exeext@: $(BINARY_PREREQS) $(SMBFILTER_OBJ) @BUILD_POPT@ $(LIBTALLOC) $(LIBTDB) $(LIBWBCLIENT) @echo Linking $@ @$(CC) -o $@ $(SMBFILTER_OBJ) $(LDFLAGS) $(LIBS) \ $(KRB5LIBS) $(LDAP_LIBS) $(POPT_LIBS) \ -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via e87adf5... Revert libreplace: fix unused varibale warning on IRIX from 5439e1a... s3: fix detection and flags for using pthread http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit e87adf523bcf7521e643bc99003d5d35242b7abf Author: Björn Jacke b...@sernet.de Date: Tue Jan 26 01:16:37 2010 +0100 Revert libreplace: fix unused varibale warning on IRIX this one was broken --- Summary of changes: lib/replace/strptime.c |4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/lib/replace/strptime.c b/lib/replace/strptime.c index 568823f..0e40f75 100644 --- a/lib/replace/strptime.c +++ b/lib/replace/strptime.c @@ -251,6 +251,7 @@ strptime_internal (rp, fmt, tm, decided, era_cnt) enum locale_status *decided; int era_cnt; { + const char *rp_backup; int cnt; size_t val; int have_I, is_pm; @@ -260,7 +261,6 @@ strptime_internal (rp, fmt, tm, decided, era_cnt) int have_yday; int have_mon, have_mday; #ifdef _NL_CURRENT - const char *rp_backup; size_t num_eras; #endif struct era_entry *era; @@ -297,10 +297,10 @@ strptime_internal (rp, fmt, tm, decided, era_cnt) #ifndef _NL_CURRENT /* We need this for handling the `E' modifier. */ start_over: +#endif /* Make back up of current processing pointer. */ rp_backup = rp; -#endif switch (*fmt++) { -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 1f7e97a... s3: syntax fix from 2f9eb6b... s3: Install and uninstall the static version of libwbclient http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 1f7e97a8a257b3280ca14168adf2d59ca9e1074c Author: Björn Jacke b...@sernet.de Date: Wed Jan 27 23:43:23 2010 +0100 s3: syntax fix --- Summary of changes: source3/configure.in |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/configure.in b/source3/configure.in index 2766d07..3c21bd6 100644 --- a/source3/configure.in +++ b/source3/configure.in @@ -6365,7 +6365,7 @@ fi # pthread_attr_init. On pthread_mutex_lock it works there... if test x$PTHREAD_LDFLAGS = xerror; then AC_CHECK_LIB(pthread, pthread_mutex_lock, [ - PTHREAD_CFLAGS==-D_REENTRANT + PTHREAD_CFLAGS=-D_REENTRANT PTHREAD_LDFLAGS=-lpthread ]) fi -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via dee1b41... s4-libcli: Fixed a talloc_reference error. from 137fd79... s4:winsrepl.idl: add random interface uuid http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit dee1b41ae7e3531f508a7a79adb3118a3af78da5 Author: Andreas Schneider a...@redhat.com Date: Tue Jan 26 14:57:15 2010 +0100 s4-libcli: Fixed a talloc_reference error. Signed-off-by: Andreas Schneider a...@redhat.com Signed-off-by: Matthias Dieter Wallnöfer mwallnoe...@yahoo.de --- Summary of changes: source4/libcli/raw/rawnotify.c |1 + 1 files changed, 1 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/source4/libcli/raw/rawnotify.c b/source4/libcli/raw/rawnotify.c index 28ab3eb..b277a2c 100644 --- a/source4/libcli/raw/rawnotify.c +++ b/source4/libcli/raw/rawnotify.c @@ -159,6 +159,7 @@ NTSTATUS smb_raw_ntcancel(struct smbcli_request *oldreq) talloc_free(req); return NT_STATUS_NO_MEMORY; } + req-do_not_free = true; smbcli_request_send(req); -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via b5d4726... s4-smbtorture: test wbcResolveWinsByName/wbcResolveWinsByIP in WINBIND-WBCLIENT testsuite. via e16e75a... s4-smbtorture: add test for wbcPingDc to WINBIND-WBCLIENT testsuite. via 5dfec4f... s4-smbtorture: split spoolss_RemoteFindFirstPrinterChangeNotifyEx test into smaller parts. via 818fb00... testprogs: print all driver info levels in spoolss testsuite. from 4eb1523... s3-libsmbclient: Add smbc_setOptionUseCCache() http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit b5d47263162856c423f484df44914271b76b1e53 Author: Günther Deschner g...@samba.org Date: Fri Jan 22 16:27:39 2010 +0100 s4-smbtorture: test wbcResolveWinsByName/wbcResolveWinsByIP in WINBIND-WBCLIENT testsuite. Guenther commit e16e75a4f0e8887b1cce35384d1157743270439e Author: Günther Deschner g...@samba.org Date: Fri Jan 22 15:06:50 2010 +0100 s4-smbtorture: add test for wbcPingDc to WINBIND-WBCLIENT testsuite. Volker, please check, you know best how this interface is designed :-) Guenther commit 5dfec4f36b90f0343e6ef4d457f67dccbfee8480 Author: Günther Deschner g...@samba.org Date: Tue Jan 19 22:18:24 2010 +0100 s4-smbtorture: split spoolss_RemoteFindFirstPrinterChangeNotifyEx test into smaller parts. Guenther commit 818fb00381c4f89d4375f2f41f6fcbb42999d871 Author: Günther Deschner g...@samba.org Date: Wed Jan 20 00:44:16 2010 +0100 testprogs: print all driver info levels in spoolss testsuite. Guenther --- Summary of changes: nsswitch/libwbclient/tests/wbclient.c| 48 - source4/torture/rpc/spoolss_notify.c | 181 ++ testprogs/win32/spoolss/printlib.c | 161 ++ testprogs/win32/spoolss/printlib_proto.h |3 + testprogs/win32/spoolss/spoolss.c|8 ++ 5 files changed, 327 insertions(+), 74 deletions(-) Changeset truncated at 500 lines: diff --git a/nsswitch/libwbclient/tests/wbclient.c b/nsswitch/libwbclient/tests/wbclient.c index 23fad63..9e4c348 100644 --- a/nsswitch/libwbclient/tests/wbclient.c +++ b/nsswitch/libwbclient/tests/wbclient.c @@ -1,7 +1,7 @@ /* Unix SMB/CIFS implementation. SMB torture tester - Copyright (C) Guenther Deschner 2009 + Copyright (C) Guenther Deschner 2009-2010 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by @@ -43,6 +43,16 @@ static bool test_wbc_ping(struct torture_context *tctx) return true; } +static bool test_wbc_pingdc(struct torture_context *tctx) +{ + torture_assert_wbc_equal(tctx, wbcPingDc(random_string, NULL), WBC_ERR_NOT_IMPLEMENTED, + wbcPingDc failed); + torture_assert_wbc_ok(tctx, wbcPingDc(NULL, NULL), + wbcPingDc failed); + + return true; +} + static bool test_wbc_library_details(struct torture_context *tctx) { struct wbcLibraryDetails *details; @@ -304,12 +314,46 @@ static bool test_wbc_lookupdcex(struct torture_context *tctx) return true; } +static bool test_wbc_resolve_winsbyname(struct torture_context *tctx) +{ + const char *name; + char *ip; + wbcErr ret; + + name = torture_setting_string(tctx, host, NULL); + + ret = wbcResolveWinsByName(name, ip); + + if (is_ipaddress(name)) { + torture_assert_wbc_equal(tctx, ret, WBC_ERR_DOMAIN_NOT_FOUND, wbcResolveWinsByName failed); + } else { + torture_assert_wbc_ok(tctx, ret, wbcResolveWinsByName failed); + } + + return true; +} + +static bool test_wbc_resolve_winsbyip(struct torture_context *tctx) +{ + const char *ip; + char *name; + wbcErr ret; + + ip = torture_setting_string(tctx, host, NULL); + + ret = wbcResolveWinsByIP(ip, name); + + torture_assert_wbc_ok(tctx, ret, wbcResolveWinsByIP failed); + + return true; +} struct torture_suite *torture_wbclient(void) { struct torture_suite *suite = torture_suite_create(talloc_autofree_context(), WBCLIENT); torture_suite_add_simple_test(suite, wbcPing, test_wbc_ping); + torture_suite_add_simple_test(suite, wbcPingDc, test_wbc_pingdc); torture_suite_add_simple_test(suite, wbcLibraryDetails, test_wbc_library_details); torture_suite_add_simple_test(suite, wbcInterfaceDetails, test_wbc_interface_details); torture_suite_add_simple_test(suite, wbcSidTypeString, test_wbc_sidtypestring); @@ -321,6 +365,8 @@ struct torture_suite *torture_wbclient(void) torture_suite_add_simple_test(suite, wbcListTrusts, test_wbc_trusts); torture_suite_add_simple_test(suite, wbcLookupDomainController, test_wbc_lookupdc);
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via d69d07c... s4-provision: Added msDS-NcType into samba4Top object class via 5cdd300... s4-provision: Fixed typos and redundant code via ce70938... s4-provision: Disable populating FDS during instance creation. from 7564445... nsswitch: Move nss_err_str to its only caller http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit d69d07ce62f2cb9468caf8d1a1dddc8082e0d492 Author: Endi S. Dewata edew...@redhat.com Date: Mon Jan 18 21:47:24 2010 -0600 s4-provision: Added msDS-NcType into samba4Top object class Signed-off-by: Matthias Dieter Wallnöfer mwallnoe...@yahoo.de commit 5cdd30011c5b09fd9aac669047e0c2f60f558feb Author: Endi S. Dewata edew...@redhat.com Date: Mon Jan 18 21:01:08 2010 -0600 s4-provision: Fixed typos and redundant code Signed-off-by: Matthias Dieter Wallnöfer mwallnoe...@yahoo.de commit ce709389e61cdc538f9c071ece37ce97abad9292 Author: Endi S. Dewata edew...@redhat.com Date: Tue Jan 19 23:10:19 2010 -0600 s4-provision: Disable populating FDS during instance creation. Signed-off-by: Matthias Dieter Wallnöfer mwallnoe...@yahoo.de --- Summary of changes: source4/scripting/python/samba/provisionbackend.py | 20 ++-- source4/setup/fedorads.inf |1 + source4/setup/schema_samba4.ldif |1 + 3 files changed, 12 insertions(+), 10 deletions(-) Changeset truncated at 500 lines: diff --git a/source4/scripting/python/samba/provisionbackend.py b/source4/scripting/python/samba/provisionbackend.py index ae58a16..8241ed6 100644 --- a/source4/scripting/python/samba/provisionbackend.py +++ b/source4/scripting/python/samba/provisionbackend.py @@ -704,7 +704,7 @@ class FDSBackend(LDAPBackend): os.path.join(self.paths.ldapdir, slapd-samba4, ldif2db), -s, self.sambadn, -i, self.samba_ldif], close_fds=True, shell=False) if retcode != 0: -raise(ldif2db failed) +raise ProvisioningError(ldif2db failed) def post_setup(self): ldapi_db = Ldb(self.ldapi_uri, credentials=self.credentials) @@ -717,16 +717,16 @@ class FDSBackend(LDAPBackend): dn = str(res[i][dn]) ldapi_db.delete(dn) -aci = (targetattr = *) (version 3.0;acl full access to all by samba-admin;allow (all)(userdn = ldap:///CN=samba-admin,%s;);) % self.sambadn +aci = (targetattr = *) (version 3.0;acl full access to all by samba-admin;allow (all)(userdn = ldap:///CN=samba-admin,%s;);) % self.sambadn -m = ldb.Message() -m[aci] = ldb.MessageElement([aci], ldb.FLAG_MOD_REPLACE, aci) +m = ldb.Message() +m[aci] = ldb.MessageElement([aci], ldb.FLAG_MOD_REPLACE, aci) -m.dn = ldb.Dn(1, self.names.domaindn) -ldapi_db.modify(m) +m.dn = ldb.Dn(ldapi_db, self.names.domaindn) +ldapi_db.modify(m) -m.dn = ldb.Dn(1, self.names.configdn) -ldapi_db.modify(m) +m.dn = ldb.Dn(ldapi_db, self.names.configdn) +ldapi_db.modify(m) -m.dn = ldb.Dn(1, self.names.schemadn) -ldapi_db.modify(m) +m.dn = ldb.Dn(ldapi_db, self.names.schemadn) +ldapi_db.modify(m) diff --git a/source4/setup/fedorads.inf b/source4/setup/fedorads.inf index 2dda1bc..f4f92a0 100644 --- a/source4/setup/fedorads.inf +++ b/source4/setup/fedorads.inf @@ -25,6 +25,7 @@ cert_dir= ${LDAPDIR}/slapd-samba4 start_server= 0 install_full_schema= 0 +InstallLdifFile= none SchemaFile=${LDAPDIR}/99_ad.ldif ConfigFile = ${LDAPDIR}/fedorads-partitions.ldif ConfigFile = ${LDAPDIR}/fedorads-sasl.ldif diff --git a/source4/setup/schema_samba4.ldif b/source4/setup/schema_samba4.ldif index e28aa0e..401af16 100644 --- a/source4/setup/schema_samba4.ldif +++ b/source4/setup/schema_samba4.ldif @@ -277,6 +277,7 @@ systemMayContain: netbootSCPBL systemMayContain: ownerBL systemMayContain: msDS-ReplValueMetaData systemMayContain: msDS-ReplAttributeMetaData +systemMayContain: msDS-NcType systemMayContain: msDS-NonMembersBL systemMayContain: msDS-NCReplOutboundNeighbors systemMayContain: msDS-NCReplInboundNeighbors -- Samba Shared Repository
Build status as of Thu Jan 28 07:00:04 2010
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2010-01-27 00:00:05.0 -0700 +++ /home/build/master/cache/broken_results.txt 2010-01-28 00:00:06.0 -0700 @@ -1,22 +1,21 @@ -Build status as of Wed Jan 27 07:00:05 2010 +Build status as of Thu Jan 28 07:00:04 2010 Build counts: Tree Total Broken Panic build_farm 0 0 0 -ccache 19 13 0 -distcc 0 0 0 -ldb 28 28 0 +ccache 29 5 0 +ldb 29 29 0 libreplace 29 12 0 lorikeet 0 0 0 pidl 0 0 0 -ppp 1 0 0 +ppp 13 0 0 rsync0 0 0 samba-docs 0 0 0 samba-web0 0 0 -samba_3_current 27 26 0 +samba_3_current 27 27 0 samba_3_master 27 26 3 -samba_3_next 27 25 3 -samba_4_0_test 28 27 0 +samba_3_next 27 26 3 +samba_4_0_test 29 28 0 talloc 29 10 0 -tdb 26 17 0 +tdb 27 17 0
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 28420fe... s4-drs: Reads uSNUrgent and sets Urgent Replication Bit for DS_ReplicaSync when necessary from 69fd846... Second part of fix for bug #7072 - Accounts can't be unlocked from ldap. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 28420fe68aee1e7b70192573ff88a03e44ded563 Author: Fernando J V da Silva fernandojvsi...@yahoo.com.br Date: Thu Jan 21 09:20:44 2010 -0200 s4-drs: Reads uSNUrgent and sets Urgent Replication Bit for DS_ReplicaSync when necessary If an urgent replication is necessary, so the uSNUrgent stored is equal to the uSNHighest stored, then when sending the DS_ReplicaSync message it sets the DRSUAPI_DRS_SYNC_URGENT bit on DRS_OPTIONS. Signed-off-by: Fernando J V da Silva fernandojvsi...@yahoo.com.br Signed-off-by: Andrew Tridgell tri...@samba.org --- Summary of changes: source4/dsdb/repl/drepl_notify.c | 30 +++--- source4/dsdb/repl/drepl_service.h |1 + 2 files changed, 24 insertions(+), 7 deletions(-) Changeset truncated at 500 lines: diff --git a/source4/dsdb/repl/drepl_notify.c b/source4/dsdb/repl/drepl_notify.c index 4681d5a..dd4c554 100644 --- a/source4/dsdb/repl/drepl_notify.c +++ b/source4/dsdb/repl/drepl_notify.c @@ -114,6 +114,10 @@ static void dreplsrv_op_notify_replica_sync_trigger(struct tevent_req *req) DRSUAPI_DRS_UPDATE_NOTIFICATION | DRSUAPI_DRS_WRIT_REP; + if (state-op-is_urgent) { + r-in.req.req1.options |= DRSUAPI_DRS_SYNC_URGENT; + } + rreq = dcerpc_drsuapi_DsReplicaSync_send(drsuapi-pipe, r, r); if (tevent_req_nomem(rreq, req)) { return; @@ -269,7 +273,8 @@ static WERROR dreplsrv_schedule_notify_sync(struct dreplsrv_service *service, struct dreplsrv_partition *p, struct repsFromToBlob *reps, TALLOC_CTX *mem_ctx, - uint64_t uSN) + uint64_t uSN, + bool is_urgent) { struct dreplsrv_notify_operation *op; struct dreplsrv_partition_source_dsa *s; @@ -287,6 +292,7 @@ static WERROR dreplsrv_schedule_notify_sync(struct dreplsrv_service *service, op-service = service; op-source_dsa = s; op-uSN = uSN; + op-is_urgent = is_urgent; DLIST_ADD_END(service-ops.notifies, op, struct dreplsrv_notify_operation *); talloc_steal(service, op); @@ -304,7 +310,8 @@ static WERROR dreplsrv_notify_check(struct dreplsrv_service *s, uint32_t count=0; struct repsFromToBlob *reps; WERROR werr; - uint64_t uSN; + uint64_t uSNHighest; + uint64_t uSNUrgent; int ret, i; werr = dsdb_loadreps(s-samdb, mem_ctx, p-dn, repsTo, reps, count); @@ -317,9 +324,9 @@ static WERROR dreplsrv_notify_check(struct dreplsrv_service *s, return werr; } - /* loads the partition uSNHighest */ - ret = dsdb_load_partition_usn(s-samdb, p-dn, uSN, NULL); - if (ret != LDB_SUCCESS || uSN == 0) { + /* loads the partition uSNHighest and uSNUrgent */ + ret = dsdb_load_partition_usn(s-samdb, p-dn, uSNHighest, uSNUrgent); + if (ret != LDB_SUCCESS || uSNHighest == 0) { /* nothing to do */ return WERR_OK; } @@ -329,10 +336,19 @@ static WERROR dreplsrv_notify_check(struct dreplsrv_service *s, struct dreplsrv_partition_source_dsa *sdsa; sdsa = dreplsrv_find_source_dsa(p, reps[i].ctr.ctr1.source_dsa_obj_guid); if (sdsa == NULL) continue; - if (sdsa-notify_uSN uSN) { + if (sdsa-notify_uSN uSNHighest) { /* we need to tell this partner to replicate with us */ - werr = dreplsrv_schedule_notify_sync(s, p, reps[i], mem_ctx, uSN); + + /* check if urgent replication is needed */ + if (sdsa-notify_uSN uSNUrgent) { + werr = dreplsrv_schedule_notify_sync(s, p, reps[i], mem_ctx, + uSNHighest, true); + } else { + werr = dreplsrv_schedule_notify_sync(s, p, reps[i], mem_ctx, + uSNHighest, false); + } + if (!W_ERROR_IS_OK(werr)) { DEBUG(0,(__location__ : Failed to setup notify to %s for
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 61a4ab3... cleanup: remove trailing spaces and tabs from 28420fe... s4-drs: Reads uSNUrgent and sets Urgent Replication Bit for DS_ReplicaSync when necessary http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 61a4ab36d9b453f597ed61117c63491e676f3d16 Author: Simo Sorce i...@samba.org Date: Thu Jan 28 02:05:05 2010 -0500 cleanup: remove trailing spaces and tabs --- Summary of changes: source4/auth/kerberos/krb5_init_context.c | 74 ++-- 1 files changed, 37 insertions(+), 37 deletions(-) Changeset truncated at 500 lines: diff --git a/source4/auth/kerberos/krb5_init_context.c b/source4/auth/kerberos/krb5_init_context.c index 2ca3640..7e75029 100644 --- a/source4/auth/kerberos/krb5_init_context.c +++ b/source4/auth/kerberos/krb5_init_context.c @@ -1,4 +1,4 @@ -/* +/* Unix SMB/CIFS implementation. Wrapper for krb5_init_context @@ -10,12 +10,12 @@ it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. - + This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. - + You should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/. */ @@ -41,7 +41,7 @@ struct smb_krb5_socket { NTSTATUS status; DATA_BLOB request, reply; - + struct packet_context *packet; size_t partial_read; @@ -51,7 +51,7 @@ struct smb_krb5_socket { static krb5_error_code smb_krb5_context_destroy_1(struct smb_krb5_context *ctx) { - krb5_free_context(ctx-krb5_context); + krb5_free_context(ctx-krb5_context); return 0; } @@ -88,30 +88,30 @@ static void smb_krb5_socket_recv(struct smb_krb5_socket *smb_krb5) talloc_free(tmp_ctx); return; } - + blob = data_blob_talloc(tmp_ctx, NULL, dsize); if (blob.data == NULL dsize != 0) { smb_krb5-status = NT_STATUS_NO_MEMORY; talloc_free(tmp_ctx); return; } - + smb_krb5-status = socket_recv(smb_krb5-sock, blob.data, blob.length, nread); if (!NT_STATUS_IS_OK(smb_krb5-status)) { talloc_free(tmp_ctx); return; } blob.length = nread; - + if (nread == 0) { smb_krb5-status = NT_STATUS_UNEXPECTED_NETWORK_ERROR; talloc_free(tmp_ctx); return; } - - DEBUG(2,(Received smb_krb5 packet of length %d\n, + + DEBUG(2,(Received smb_krb5 packet of length %d\n, (int)blob.length)); - + talloc_steal(smb_krb5, blob.data); smb_krb5-reply = blob; talloc_free(tmp_ctx); @@ -130,7 +130,7 @@ static NTSTATUS smb_krb5_full_packet(void *private_data, DATA_BLOB data) /* handle request timeouts */ -static void smb_krb5_request_timeout(struct tevent_context *event_ctx, +static void smb_krb5_request_timeout(struct tevent_context *event_ctx, struct tevent_timer *te, struct timeval t, void *private_data) { @@ -153,12 +153,12 @@ static void smb_krb5_socket_send(struct smb_krb5_socket *smb_krb5) NTSTATUS status; size_t len; - + len = smb_krb5-request.length; status = socket_send(smb_krb5-sock, smb_krb5-request, len); if (!NT_STATUS_IS_OK(status)) return; - + TEVENT_FD_READABLE(smb_krb5-fde); TEVENT_FD_NOT_WRITEABLE(smb_krb5-fde); @@ -232,7 +232,7 @@ krb5_error_code smb_krb5_send_and_recv_func(krb5_context context, return ENOMEM; } smb_krb5-hi = hi; - + switch (a-ai_family) { case PF_INET: name = ipv4; @@ -246,7 +246,7 @@ krb5_error_code smb_krb5_send_and_recv_func(krb5_context context, talloc_free(smb_krb5); return EINVAL; } - + status = NT_STATUS_INVALID_PARAMETER; switch (hi-proto) { case KRB5_KRBHST_UDP: @@ -265,8 +265,8 @@ krb5_error_code smb_krb5_send_and_recv_func(krb5_context context, } talloc_steal(smb_krb5, smb_krb5-sock); - - remote_addr = socket_address_from_sockaddr(smb_krb5, a-ai_addr, a-ai_addrlen); + +
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 2fdff7f... s4-ldbtest: fixed python import via 882feb3... s4-drs: implementation of some delete test cases from 61a4ab3... cleanup: remove trailing spaces and tabs http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 2fdff7f596268b53084f3fc15102c9e000966f02 Author: Andrew Tridgell tri...@samba.org Date: Thu Jan 28 18:02:39 2010 +1100 s4-ldbtest: fixed python import commit 882feb39a28c1a130a38c5406bdebd3eaff0d06c Author: Eduardo Lima eduard...@gmail.com Date: Mon Jan 18 15:03:48 2010 -0200 s4-drs: implementation of some delete test cases Signed-off-by: Andrew Tridgell tri...@samba.org --- Summary of changes: source4/lib/ldb/tests/python/deletetest.py | 200 source4/selftest/tests.sh |1 + 2 files changed, 201 insertions(+), 0 deletions(-) create mode 100755 source4/lib/ldb/tests/python/deletetest.py Changeset truncated at 500 lines: diff --git a/source4/lib/ldb/tests/python/deletetest.py b/source4/lib/ldb/tests/python/deletetest.py new file mode 100755 index 000..3fe28a3 --- /dev/null +++ b/source4/lib/ldb/tests/python/deletetest.py @@ -0,0 +1,200 @@ +#!/usr/bin/python +# -*- coding: utf-8 -*- + +import getopt +import optparse +import sys +import os + +sys.path.append(bin/python) +sys.path.append(../lib/subunit/python) + +import samba.getopt as options + +from samba.auth import system_session +from ldb import SCOPE_BASE, LdbError +from ldb import ERR_NO_SUCH_OBJECT +from samba import Ldb + +from subunit.run import SubunitTestRunner +import unittest + +parser = optparse.OptionParser(deletetest.py [options] host|file) +sambaopts = options.SambaOptions(parser) +parser.add_option_group(sambaopts) +parser.add_option_group(options.VersionOptions(parser)) +# use command line creds if available +credopts = options.CredentialsOptions(parser) +parser.add_option_group(credopts) +opts, args = parser.parse_args() + +if len(args) 1: +parser.print_usage() +sys.exit(1) + +host = args[0] + +lp = sambaopts.get_loadparm() +creds = credopts.get_credentials(lp) + +class BasicDeleteTests(unittest.TestCase): + +def delete_force(self, ldb, dn): +try: +ldb.delete(dn) +except LdbError, (num, _): +self.assertEquals(num, ERR_NO_SUCH_OBJECT) + +def GUID_string(self, guid): +return self.ldb.schema_format_value(objectGUID, guid) + +def find_basedn(self, ldb): +res = ldb.search(base=, expression=, scope=SCOPE_BASE, + attrs=[defaultNamingContext]) +self.assertEquals(len(res), 1) +return res[0][defaultNamingContext][0] + +def setUp(self): +self.ldb = ldb +self.base_dn = self.find_basedn(ldb) + +def search_guid(self,guid): +print SEARCH by GUID %s % self.GUID_string(guid) + +expression = (objectGUID=%s) % self.GUID_string(guid) +res = ldb.search(expression=expression, + controls=[show_deleted:1]) +self.assertEquals(len(res), 1) +return res[0] + +def search_dn(self,dn): +print SEARCH by DN %s % dn + +res = ldb.search(expression=(objectClass=*), + base=dn, + scope=SCOPE_BASE, + controls=[show_deleted:1]) +self.assertEquals(len(res), 1) +return res[0] + +def del_attr_values(self, delObj): +print Checking attributes for %s % delObj[dn] + +self.assertEquals(delObj[isDeleted][0],TRUE) +self.assertTrue(not(objectCategory in delObj)) +self.assertTrue(not(sAMAccountType in delObj)) + +def preserved_attributes_list(self, liveObj, delObj): +print Checking for preserved attributes list + +preserved_list = [nTSecurityDescriptor, attributeID, attributeSyntax, dNReferenceUpdate, dNSHostName, +flatName, governsID, groupType, instanceType, lDAPDisplayName, legacyExchangeDN, +isDeleted, isRecycled, lastKnownParent, msDS-LastKnownRDN, mS-DS-CreatorSID, +mSMQOwnerID, nCName, objectClass, distinguishedName, objectGUID, objectSid, +oMSyntax, proxiedObjectName, name, replPropertyMetaData, sAMAccountName, +securityIdentifier, sIDHistory, subClassOf, systemFlags, trustPartner, trustDirection, +trustType, trustAttributes, userAccountControl, uSNChanged, uSNCreated, whenCreated] + +for a in liveObj: +if a in preserved_list: +self.assertTrue(a in delObj) + +def check_rdn(self, liveObj, delObj, rdnName): +print Checking for correct rDN +rdn=liveObj[rdnName][0] +rdn2=delObj[rdnName][0] +name2=delObj[rdnName][0] +guid=liveObj[objectGUID][0] +self.assertEquals(rdn2, rdn +