[Samba] Invitation to connect on LinkedIn

2010-03-24 Thread Luis Zarrabeitia
LinkedIn
Luis Zarrabeitia requested to add you as a connection on LinkedIn:
--

Serge,

I'd like to add you to my professional network on LinkedIn.

- Luis

Accept invitation from Luis Zarrabeitia
http://www.linkedin.com/e/vTWyDe4yCEPPQyWVLZMh1H4yCEPPQGFCi7/blk/I603591099_3/pmpxnSRJrSdvj4R5fnhv9ClRsDgZp6lQs6lzoQ5AomZIpn8_cRYVej0NejkPc3p9bSZRpTFJoAwJbP0OdPwTejcTcj4LrCBxbOYWrSlI/EML_comm_afe/

View invitation from Luis Zarrabeitia
http://www.linkedin.com/e/vTWyDe4yCEPPQyWVLZMh1H4yCEPPQGFCi7/blk/I603591099_3/0PnPAVc34VdjcMdAALqnpPbOYWrSlI/svi/
--

DID YOU KNOW you can be the first to know when a trusted member of your network 
changes jobs? With Network Updates on your LinkedIn home page, you'll be 
notified as members of your network change their current position. Be the first 
to know and reach out!
http://www.linkedin.com/

 
--
(c) 2010, LinkedIn Corporation
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] 3.5 in Debian Squeeze?

2010-03-24 Thread grant little
On Wed, Mar 24, 2010 at 7:25 AM, Robert LeBlanc wrote:

> On Wed, Mar 24, 2010 at 12:21 AM, Christian PERRIER  >wrote:
>
> > Quoting Robert LeBlanc (rob...@leblancnet.us):
> > > What is the milestone that will get 3.5 into Debian Squeeze?
> >
> >
> > We're still in the process of deciding whether we'll go for 3.4.* or
> > 3.5 for squeeze.
> >
> > There are arguments for both:
> >
> > - 3.4.* releases are now rock solid and the risk of "important" issues
> > to be discovered that would make these versions unsuitable for
> > production servers is not very high while 3.5.* are fairly young as of
> > now.
> >
> > - Strong support by the Samba Team for 3.4.* releases will be
> > decreasing rapidly in the upcoming months and it might become hard to
> > make this release alive for the planned two years of lifetime (at
> > minimum) that squeeze will have after it's released. There are also
> > several improvements bringed by 3.5 which our users would benefit from.
> >
> >
> > My own stance is to go for 3.5 and, as one of the maintainers, I'll
> > push for it. However, I want to ask to the Debian release team about
> > their feeling for pushing point releases (3.5.2, 3.5.3, etc.) in
> > squeeze during the time squeeze is frozenIt would help a lot if
> > they agree that we can do this even late in the release process but
> > you can imagine that they can't say "yes" to all such
> > requests...otherwise the freeze is no longer a freeze.
> >
> > A key point is having my co-maintainer (Steve Langasek) advice about
> > this. Other co-maintainers have agreed for having 3.5 in squeeze
> > (particularly Matthieu Parent, who maintains ctdb)
> >
> >
> Thank you for taking the time, this is very helpful. I fully understand
> both
> sides of the argument as I take both positions on a regular basis. I do
> like
> 3.4 as it has worked quite well for us, as we move to Windows 7, we have
> uncovered problems which we hope 3.5 will resolve. Winbind has also given
> us
> problems in 3.4, and with the large rework in 3.5 we hope it's solved a lot
> of those pain points. I haven't heard when the freeze will be for Squeeze,
> but if it would be helpful, I can try to carve out some time to pull 3.5
> from experimental on a test box and try it in our environment for feedback.
>
> Thanks,
>
> Robert LeBlanc
> Life Sciences & Undergraduate Education Computer Support
> Brigham Young University
> --
>
> On Ubuntu 9.10 which currently uses 3.4.0 there are, for me,  many problems
solved by moving to 3.5 not the least of which are windows 7, the ability to
login from OS X when using AD/LDAP/Kerberos and better support for ACLs  so
I'm hoping that Debian will move quickly to 3.5 and that it will feed
downstream to Ubuntu 9.10  within my lifetime. It seems that Lucid is still
at 3.4.7 tantalizingly close to 3.5   For ubuntu  9.10 samba 3.4.0 is not up
to much since it cannot do the mac OS X login described or windows 7.
My vote is for 3.5 on both debian squeeze and ubuntu lucid. Faint hope...

Grant.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Can't access opaque symlinks pointing to another Samba mount

2010-03-24 Thread Guillaume Boudreau
Computer A runs my samba server. Has unix extensions = off, wide links
= on (don't think this one matters with unix extensions off...)
This way, if I have a symlink on my shares, clients see it as a normal
file, not as a symlink.
This works fine, even for symlinks to files outside the shares paths.
Except when the symlink points to a file that is on a CIFS mount.

So say I have computer B (running Mac OS X) that shares something
using Samba. I mount such share on computer A, in /mnt/hdd-air.
Then, on a share of computer A, I create a symlink to a file in /mnt/hdd-air:
ln -s /mnt/hdd-air/gh/TimeMachine/file2 /mnt/hdd0/shares/TimeMachine/file2

If I mount my TimeMachine share (on computer A or any other computer),
file2 is listed, but I can't access it.

That is, it can't be accessed UNLESS the file was accessed
successfully in the last second!

Here's a test case I created on computer A:

# This is my /mnt/hdd-air share; I tried various mount options, and I
always have the problem.
[...@hda TimeMachine]$ grep hdd-air /etc/fstab
//192.168.155.5/gb  /mnt/hdd-aircifs
credentials=/home/gb/.smb_credentials,uid=500,gid=100,file_mode=0666,dir_mode=0777,hard,_netdev
 0
0

# Now I created 3 symlinks to various targets on my TimeMachine share.
[...@hda TimeMachine]$ ls -l
lrwxrwxrwx 1 gb users   30 2010-03-24 17:04 file1 ->
/mnt/hdd0/gh/TimeMachine/file1
lrwxrwxrwx 1 gb users   33 2010-03-24 17:05 file2 ->
/mnt/hdd-air/gh/TimeMachine/file2
lrwxrwxrwx 1 gb users   30 2010-03-24 17:08 file3 ->
/mnt/hdd1/gh/TimeMachine/file3

# We can see here that I can access all 3 files here, as expected.
[...@hda TimeMachine]$ cat file*
1
2
3

# Here's the targets of my symlinks
[...@hda TimeMachine]$ mount | grep -E "/mnt/hdd0|/mnt/hdd1|/mnt/hdd-air"
/dev/sda6 on /mnt/hdd0 type ext3 (rw)
/dev/sdf1 on /mnt/hdd1 type ext3 (rw)
//192.168.155.5/gb on /mnt/hdd-air type cifs (rw,mand)

# Now, I mounted my TimeMachine share locally to ease testing...
[...@hda TimeMachine]$ cd /mnt/samba/TimeMachine/

# file2 looks fine
[...@hda TimeMachine]$ ls -l
-rw-rw 1 gb   users2 2010-03-24 17:05 file1
-rw-rw 0 gb   users2 2010-03-24 17:05 file2
-rw-rw 1 gb   users2 2010-03-24 17:08 file3

# But can't be accessed
[...@hda TimeMachine]$ cat file*
1
cat: file2: No such file or directory
3

# But there is no problem if the file was successfully accessed in the
last second!
[...@hda TimeMachine]$ date; cat /mnt/hdd0/shares/TimeMachine/file*;
date; cat /mnt/samba/TimeMachine/file*; date; cat
/mnt/samba/TimeMachine/file*; sleep 1; cat
/mnt/samba/TimeMachine/file*
Wed Mar 24 18:24:45 EDT 2010
1
2
3
Wed Mar 24 18:24:45 EDT 2010
1
2
3
Wed Mar 24 18:24:45 EDT 2010
1
2
3
Wed Mar 24 18:24:46 EDT 2010
1
cat: /mnt/samba/TimeMachine/file2: No such file or directory
3

As you can see, file2 works fine through my share until I wait 1
second after the last successful access, at which point the file
becomes unaccessible.

I also tried to access /mnt/samba/TimeMachine/file2 in an infinite
loop after accessing /mnt/hdd0/shares/TimeMachine/file2 once, and it
works fine.
file2 accessed through the share will work fine until I stop the loop,
wait 1 second, and then try to access it again!

I've set log level = 3 and traced what happens when I can and can't
access the file. I attached both files.

Any pointer as to what is happening, why, or how I could work around
this issue would be welcome!

Thanks,

- Guillaume Boudreau
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] [linux-cifs-client] ANNOUNCE: cifs-utils release 4.1 available for download

2010-03-24 Thread Jeff Layton
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 24 Mar 2010 20:26:37 -0400
Jeff Layton  wrote:

> On Wed, 24 Mar 2010 20:24:17 -0400
> Jeff Layton  wrote:
> 
> > On Wed, 24 Mar 2010 07:55:09 -0400
> > Jeff Layton  wrote:
> > 
> > > On Tue, 23 Mar 2010 23:11:17 -0700
> > > Steve Langasek  wrote:
> > > 
> > > > Hi Jeff,
> > > > 
> > > > On Tue, Mar 23, 2010 at 10:10:44AM -0400, Jeff Layton wrote:
> > > > > This release is primarily a number of small bugfixes and cleanups. I
> > > > > wanted to do a release with those prior to the coming overhaul of
> > > > > mount.cifs to allow it to more safely be installed setuid root.
> > > > 
> > > > Could you please provide detached GPG signatures for cifs-utils on the
> > > > download site, so we have some cryptographic assurance of the integrity 
> > > > of
> > > > the tarballs as we do for the samba tarballs?
> > > > 
> > > > Cheers,
> > > 
> > > Good point. I'm working now on getting a "cifs-utils" mail alias set up
> > > that I can stuff into the key. Once I do so, I'll go back and sign all
> > > of the tarballs and make sure they're signed on release in the future.
> > > 
> > > Thanks,
> > 
> > Done. A new cifs-utils signing key has been generated and the existing
> > tarballs are now signed with it. The public key and signatures are
> > available at the ftp location.
> > 
> > ftp://ftp.samba.org/pub/linux-cifs/cifs-utils/
> > 
> > I'll update the webpage with that info soon.
> 
> ...and in hindsight I should have probably signed that email.
> 

Apologies for the spam, this one should be signed :)

- -- 
Jeff Layton 
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.14 (GNU/Linux)

iEYEARECAAYFAkuqr+IACgkQyP0gxQMdzICKOACgj77famnypt2J7F2/zhCg8VUO
kGoAn0D7EFDvZW9xKcZabdygM55P5D7H
=F9SW
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] [linux-cifs-client] ANNOUNCE: cifs-utils release 4.1 available for download

2010-03-24 Thread Jeff Layton
On Wed, 24 Mar 2010 20:24:17 -0400
Jeff Layton  wrote:

> On Wed, 24 Mar 2010 07:55:09 -0400
> Jeff Layton  wrote:
> 
> > On Tue, 23 Mar 2010 23:11:17 -0700
> > Steve Langasek  wrote:
> > 
> > > Hi Jeff,
> > > 
> > > On Tue, Mar 23, 2010 at 10:10:44AM -0400, Jeff Layton wrote:
> > > > This release is primarily a number of small bugfixes and cleanups. I
> > > > wanted to do a release with those prior to the coming overhaul of
> > > > mount.cifs to allow it to more safely be installed setuid root.
> > > 
> > > Could you please provide detached GPG signatures for cifs-utils on the
> > > download site, so we have some cryptographic assurance of the integrity of
> > > the tarballs as we do for the samba tarballs?
> > > 
> > > Cheers,
> > 
> > Good point. I'm working now on getting a "cifs-utils" mail alias set up
> > that I can stuff into the key. Once I do so, I'll go back and sign all
> > of the tarballs and make sure they're signed on release in the future.
> > 
> > Thanks,
> 
> Done. A new cifs-utils signing key has been generated and the existing
> tarballs are now signed with it. The public key and signatures are
> available at the ftp location.
> 
> ftp://ftp.samba.org/pub/linux-cifs/cifs-utils/
> 
> I'll update the webpage with that info soon.

...and in hindsight I should have probably signed that email.

-- 
Jeff Layton 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] [linux-cifs-client] ANNOUNCE: cifs-utils release 4.1 available for download

2010-03-24 Thread Jeff Layton
On Wed, 24 Mar 2010 07:55:09 -0400
Jeff Layton  wrote:

> On Tue, 23 Mar 2010 23:11:17 -0700
> Steve Langasek  wrote:
> 
> > Hi Jeff,
> > 
> > On Tue, Mar 23, 2010 at 10:10:44AM -0400, Jeff Layton wrote:
> > > This release is primarily a number of small bugfixes and cleanups. I
> > > wanted to do a release with those prior to the coming overhaul of
> > > mount.cifs to allow it to more safely be installed setuid root.
> > 
> > Could you please provide detached GPG signatures for cifs-utils on the
> > download site, so we have some cryptographic assurance of the integrity of
> > the tarballs as we do for the samba tarballs?
> > 
> > Cheers,
> 
> Good point. I'm working now on getting a "cifs-utils" mail alias set up
> that I can stuff into the key. Once I do so, I'll go back and sign all
> of the tarballs and make sure they're signed on release in the future.
> 
> Thanks,

Done. A new cifs-utils signing key has been generated and the existing
tarballs are now signed with it. The public key and signatures are
available at the ftp location.

ftp://ftp.samba.org/pub/linux-cifs/cifs-utils/

I'll update the webpage with that info soon.
-- 
Jeff Layton 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] PDC migration from suse 8.2 - samba 2.2.7 ldap - to latest versions on ubuntu 8.04

2010-03-24 Thread GG
Hello Vladimir and hi all,

Thanks very much for replying!

Any suggested os? I'd go for debian or what advised, I just happen to
know ubuntu more...


Any strategy or hint on migrating from ancient ldap + samba to a new server?
Already tried rsyncing (using all options to keep perms and attributes
grp  own mod etc) on a twin v-machine but server starts and the ldap
auth fails to work :-(

I'm a bit stuck at the moment :-( and I have posponed the problem for
too long grrr

Giorgio

On Wed, Mar 24, 2010 at 9:20 AM, Vladimir Psenicka
 wrote:
> Dne 23.3.2010 15:48, Giorgio napsal(a):
>> Hello,
>> Hopefully I'm in the right place asking for help :-)
>>
>> I need to move from an old physical Suse 8.2 - samba 2.2.7 + ldap - to
>> latest samba versions, I would like to use an ubuntu 8.04 virtual machine.
>>
>> The domain is in production on the physical server, to be dismissed after
>> migration. It is also the file server!!! so /DATA/ has all shared and
>> permission driven file access..
>>
>> I was following https://help.ubuntu.com/8.10/serverguide/C/samba-dc.html but
>> I realize I am in a different scenario...
>>
>> Production so no errors are admitted :-(, migration to new os and versions..
>> all at once?
>>
>> I have a dump of the physical server (dd sda mbr and single partitions :)
>> plus an rsync with all permissions daily backup, just to be safe ;)
>>
>>
>> What would you guru's suggest as a strategy?
>>
>> Can I create a new server and add it as secondary domain controller and then
>> once the replica is up? I'd feel quite comfortable with this method.
>>
>> BTW I need a new version of samba as they have already bought Windows 7
>> boxes (without asking if they were supported arrgh).
>>
>> Thanks to all of you who read or answered :-)
>>
>> Gio
>
> Hi.
>
> Ubuntu 8.10 is bad idea if you will be connecting Windows 7 into domain,
> because of old Samba version. Samba 3.4.x or 3.5.x is recommended for
> Win7. Wait for Ubuntu 10.04 LTS (next month) if you want Ubuntu.
>
> --
> Vladimir Psenicka
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] LDAP Account Manager 3.0.0 released

2010-03-24 Thread Miguel Medalha



LDAP Account Manager (LAM) 3.0.0 - March 24th, 2010
===

LAM is a web frontend for managing accounts stored in an LDAP directory.
   


I just installed this new version on a CentOS machine and I immediately 
got the following error:


Your PCRE library has no complete Unicode support. Please upgrade 
libpcre or compile with "--enable-unicode-properties".


I suppose it comes from the use of Unicode for multilingual support.

Under Red Hat/CentOS, PCRE needs to be recompiled with Unicode support 
for this to work.


Instructions on how to recompile are here:

http://gaarai.com/2009/01/31/unicode-support-on-centos-52-with-php-and-pcre/

Compiled versions are here:

64bit - http://gaarai.com/wp-content/uploads/2009/01/pcre-66-27x86_64.rpm
32bit - http://gaarai.com/wp-content/uploads/2009/01/pcre-6.6-2.7.i386.rpm

Thank you to all!

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] IDMAP_RID with Winbind works for groups but not users

2010-03-24 Thread Andrew Lyon
I've also tried storing the gid and uid in active directory by
installing the nisprop dll and exposing the unix attributes in aduac,
again it works for groups but not for users, users still have
sequential uid and it differs between samba servers.

Am I missing something? Could somebody post a example working config
for consistent mapping of uid and gid to thise held in ad or using
idmap_rid.

Thanks
Andy

On 3/22/10, Andrew Lyon  wrote:
> Hi,
>
> I've setup samba 3.4.7 to use idmap_rid as per the documentation:
>
> idmap backend = rid:DOMAIN=500-1
> idmap gid = 500-1
> imap uid = 500-1
>
> It seems to work for groups:
>
> wbinfo  --group-info="domain admins"
> domain admins:x:100512
>
> PsGetSid v1.43 - Translates SIDs to names and vice versa
> Copyright (C) 1999-2006 Mark Russinovich
> Sysinternals - www.sysinternals.com
>
> SID for DOMAIN\domain admins:
> S-1-5-21-xx--xx-512
>
> But not for users:
>
> wbinfo  --user-info=administrator
> administrator:*:10027:10005:Administrator:/home/DOMAIN/administrator:/bin/zsh
>
> SID for DOMAIN\administrator:
> S-1-5-21-xx-x-xx-500
>
> wbinfo  --user-info="Test User"
> test user:*:10048:10005:Test User:/home/DOMAIN/test user:/bin/zsh
>
> SID for DOMAIN\test user:
> S-1-5-21-x-x-xx-1758
>
> Have I made a mistake in the configuration?
>
> Andy
>

-- 
Sent from my mobile device
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] LDAP Account Manager 3.0.0 released

2010-03-24 Thread Roland Gruber
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


LDAP Account Manager (LAM) 3.0.0 - March 24th, 2010
===

LAM is a web frontend for managing accounts stored in an LDAP directory.


Announcement:
- -

The file upload was improved and LAM Pro now supports OpenLDAP password
policies and IP addresses for hosts. This release also fixes some problems.


Full changelog:

http://www.ldap-account-manager.org/lamcms/changelog


Features:
- -

* management of various account types
 * Unix
 * Samba 3
 * Kolab 2
 * Asterisk
 * phpGroupwWare
 * DHCP
 * SSH keys
* profiles for account creation
* account creation via file upload
* automatic creation/deletion of home directories
* setting quotas
* PDF output for all accounts
* editor for organizational units
* schema browser
* tree view
* multiple configuration files
* multi-language support: Catalan, Chinese (Traditional + Simplified),
  Czech, Dutch, English, French, German, Hungarian, Italian, Japanese,
  Polish, Portuguese, Russian and Spanish
* support for LDAP+SSL/TLS


Availability:
- -

This software is available under the GNU General Public License V2.0.

You can get the newest version at http://www.ldap-account-manager.org.

File formats: DEB, RPM, tar.gz

There is also a FreeBSD port.

Debian users may use the packages in unstable.


Demo installation:
- --

You can try our demo installation online.

http://www.ldap-account-manager.org/lamcms/liveDemo


Support:
- 

If you find a bug please file a bug report. For questions or
implementing new features please use the mailinglist and feature request
tracker at our homepage http://www.ldap-account-manager.org.



Authors & Copyright:
- 

Copyright (C) 2003 - 2010:
Michael Duergner 
Roland Gruber 
Tilo Lutz 


LAM is published under the GNU General Public License.
The complete list of licenses can be found in the copyright file.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkuqa90ACgkQq/ywNCsrGZ7/5QCeJbuR9oFnOXvX0Jo0LxmyVqXo
fwMAn0Zpf756gwiswmqa2r8HjTKWXE7x
=SFqD
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Migration from 3.0.23d to 3.4.5 failed

2010-03-24 Thread Jeremy Allison
On Wed, Mar 24, 2010 at 04:10:51PM -0300, Leonardo Carneiro - Veltrac wrote:
> After a migration from 3.2.5 to 3.4.7 i'm still having issues. My  
> windows XP users randomly loses their access to the server and cannot  
> open the share list. =S

More info please. This isn't useful as a bug report.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Migration from 3.0.23d to 3.4.5 failed

2010-03-24 Thread Leonardo Carneiro - Veltrac
After a migration from 3.2.5 to 3.4.7 i'm still having issues. My 
windows XP users randomly loses their access to the server and cannot 
open the share list. =S




Volker Lendecke wrote:

On Wed, Mar 24, 2010 at 05:39:15PM +0100, Bastien Semene wrote:
  

Yes I'm using this one.

Actually the module has been upgraded for 3.4 (and 3.5) in February 2010  
: http://sourceforge.net/projects/pdbsql/files/
I plan to switch to another backend at short term, but I can't do it now  
as all my services uses this backend currently, and I need to upgrade  
Samba service to integrate Windows 7 workstations.


Anyway I don't think that it is the source of the problem according to  
the tests I made with pdbedit in my previous mail (but I'm a newbie in  
Samba services).
If you can point me a test to confirm (or unconfirm) that this module is  
the problem, I'll be glad.



Ok, what we need then is a debug level 10 log of smbd that
you can't connect to.

Volker
  

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] smbstatus shows no hostnames (3.5.1)

2010-03-24 Thread Volker Lendecke
On Wed, Mar 24, 2010 at 02:51:50PM +0100, christoph.be...@desy.de wrote:
> while debugging I observed something 'new' the name resolution works fine 
> on the samba server as long as I browse the server 'directly' on the  
> windows host (\\printserver)
>
> It is not working when I look into a printerqueue etc on the windows 
> host, this goes along whith what I see in my working environment, a 
> couple of hostnames get resolved but very few.
>
> So you can find to debug logfiles here, one with working name resolution  
> and one without working name resolution:
>
> https://www.desy.de/~chbeyer/public/smbd_log_d10_working.tar
>
> https://www.desy.de/~chbeyer/public/smbd_log_d10.tar
>
> Thansk for the support !

Compared the logs, I don't see any difference in the
relevant pieces of them. I'm lost at this point.  Someone
with Samba knowledge needs to look at the box itself.

Sorry,

Volker


signature.asc
Description: Digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Migration from 3.0.23d to 3.4.5 failed

2010-03-24 Thread Volker Lendecke
On Wed, Mar 24, 2010 at 05:39:15PM +0100, Bastien Semene wrote:
> Yes I'm using this one.
>
> Actually the module has been upgraded for 3.4 (and 3.5) in February 2010  
> : http://sourceforge.net/projects/pdbsql/files/
> I plan to switch to another backend at short term, but I can't do it now  
> as all my services uses this backend currently, and I need to upgrade  
> Samba service to integrate Windows 7 workstations.
>
> Anyway I don't think that it is the source of the problem according to  
> the tests I made with pdbedit in my previous mail (but I'm a newbie in  
> Samba services).
> If you can point me a test to confirm (or unconfirm) that this module is  
> the problem, I'll be glad.

Ok, what we need then is a debug level 10 log of smbd that
you can't connect to.

Volker


signature.asc
Description: Digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] call trace when using acl_tdb module

2010-03-24 Thread Jeremy Allison
On Wed, Mar 24, 2010 at 09:46:55AM -0700, Jeremy Allison wrote:
> On Wed, Mar 24, 2010 at 01:58:45PM +0100, Adrian Berlin wrote:
> > Hello,
> > 
> > When I am using module acl_tdb and I am trying to get access to directory I 
> > am getting call trace in log.ip
> 
> Known bug :
> 
> https://bugzilla.samba.org/show_bug.cgi?id=7283
> 
> I'm testing my patch for this as we email

Works. Here is the fix:

Jeremy.
diff --git a/source3/modules/vfs_acl_tdb.c b/source3/modules/vfs_acl_tdb.c
index bfed0eb..8da0d1e 100644
--- a/source3/modules/vfs_acl_tdb.c
+++ b/source3/modules/vfs_acl_tdb.c
@@ -37,12 +37,11 @@ static struct db_context *acl_db;
  Open acl_db if not already open, increment ref count.
 ***/
 
-static bool acl_tdb_init(struct db_context **pp_db)
+static bool acl_tdb_init(void)
 {
char *dbname;
 
if (acl_db) {
-   *pp_db = acl_db;
ref_count++;
return true;
}
@@ -55,10 +54,10 @@ static bool acl_tdb_init(struct db_context **pp_db)
}
 
become_root();
-   *pp_db = db_open(NULL, dbname, 0, TDB_DEFAULT, O_RDWR|O_CREAT, 0600);
+   acl_db = db_open(NULL, dbname, 0, TDB_DEFAULT, O_RDWR|O_CREAT, 0600);
unbecome_root();
 
-   if (*pp_db == NULL) {
+   if (acl_db == NULL) {
 #if defined(ENOTSUP)
errno = ENOTSUP;
 #else
@@ -77,14 +76,12 @@ static bool acl_tdb_init(struct db_context **pp_db)
  Lower ref count and close acl_db if zero.
 ***/
 
-static void free_acl_tdb_data(void **pptr)
+static void disconnect_acl_tdb(struct vfs_handle_struct *handle)
 {
-   struct db_context **pp_db = (struct db_context **)pptr;
-
+   SMB_VFS_NEXT_DISCONNECT(handle);
ref_count--;
if (ref_count == 0) {
-   TALLOC_FREE(*pp_db);
-   acl_db = NULL;
+   TALLOC_FREE(acl_db);
}
 }
 
@@ -146,13 +143,10 @@ static NTSTATUS get_acl_blob(TALLOC_CTX *ctx,
uint8 id_buf[16];
TDB_DATA data;
struct file_id id;
-   struct db_context *db;
+   struct db_context *db = acl_db;
NTSTATUS status = NT_STATUS_OK;
SMB_STRUCT_STAT sbuf;
 
-   SMB_VFS_HANDLE_GET_DATA(handle, db, struct db_context,
-   return NT_STATUS_INTERNAL_DB_CORRUPTION);
-
ZERO_STRUCT(sbuf);
 
if (fsp) {
@@ -204,16 +198,13 @@ static NTSTATUS store_acl_blob_fsp(vfs_handle_struct 
*handle,
uint8 id_buf[16];
struct file_id id;
TDB_DATA data;
-   struct db_context *db;
+   struct db_context *db = acl_db;
struct db_record *rec;
NTSTATUS status;
 
DEBUG(10,("store_acl_blob_fsp: storing blob length %u on file %s\n",
  (unsigned int)pblob->length, fsp_str_dbg(fsp)));
 
-   SMB_VFS_HANDLE_GET_DATA(handle, db, struct db_context,
-   return NT_STATUS_INTERNAL_DB_CORRUPTION);
-
status = vfs_stat_fsp(fsp);
if (!NT_STATUS_IS_OK(status)) {
return status;
@@ -243,12 +234,10 @@ static int unlink_acl_tdb(vfs_handle_struct *handle,
  const struct smb_filename *smb_fname)
 {
struct smb_filename *smb_fname_tmp = NULL;
-   struct db_context *db;
+   struct db_context *db = acl_db;
NTSTATUS status;
int ret = -1;
 
-   SMB_VFS_HANDLE_GET_DATA(handle, db, struct db_context, return -1);
-
status = copy_smb_filename(talloc_tos(), smb_fname, &smb_fname_tmp);
if (!NT_STATUS_IS_OK(status)) {
errno = map_errno_from_nt_status(status);
@@ -284,11 +273,9 @@ static int rmdir_acl_tdb(vfs_handle_struct *handle, const 
char *path)
 {
 
SMB_STRUCT_STAT sbuf;
-   struct db_context *db;
+   struct db_context *db = acl_db;
int ret = -1;
 
-   SMB_VFS_HANDLE_GET_DATA(handle, db, struct db_context, return -1);
-
if (lp_posix_pathnames()) {
ret = vfs_lstat_smb_fname(handle->conn, path, &sbuf);
} else {
@@ -316,21 +303,17 @@ static int connect_acl_tdb(struct vfs_handle_struct 
*handle,
const char *service,
const char *user)
 {
-   struct db_context *db;
int ret = SMB_VFS_NEXT_CONNECT(handle, service, user);
 
if (ret < 0) {
return ret;
}
 
-   if (!acl_tdb_init(&db)) {
+   if (!acl_tdb_init()) {
SMB_VFS_NEXT_DISCONNECT(handle);
return -1;
}
 
-   SMB_VFS_HANDLE_SET_DATA(handle, db, free_acl_tdb_data,
-   struct db_context, return -1);
-
/* Ensure we have "inherit acls = yes" if we're
 * using this module. */
DEBUG(2,("connect_acl_tdb: setting 'inherit acls = true' "
@@ -352,11 +335,9 @@ static int sys_acl_set_file_tdb(vfs_handle_struct *handle,

Re: [Samba] Migration from 3.0.23d to 3.4.5 failed

2010-03-24 Thread Bastien Semene

Sorry for the double mail.

I forgot to say that I watched the code, as I thought the module can be 
the problem.

But everything seems to be done properly.
In log level 5, the pdbedit tool displays the queries and they seems fine.

Le 24/03/2010 17:39, Bastien Semene a écrit :

Yes I'm using this one.

Actually the module has been upgraded for 3.4 (and 3.5) in February 
2010 : http://sourceforge.net/projects/pdbsql/files/
I plan to switch to another backend at short term, but I can't do it 
now as all my services uses this backend currently, and I need to 
upgrade Samba service to integrate Windows 7 workstations.


Anyway I don't think that it is the source of the problem according to 
the tests I made with pdbedit in my previous mail (but I'm a newbie in 
Samba services).
If you can point me a test to confirm (or unconfirm) that this module 
is the problem, I'll be glad.


Le 24/03/2010 17:21, Volker Lendecke a écrit :

On Wed, Mar 24, 2010 at 04:07:52PM +0100, Bastien Semene wrote:

The two servers uses the same backend DB (a MySQL service).
Smbd logs confirms it can connect correctly to the DB.

You're using the mysql passdb backend with 3.4.5? Support
for that has been dropped from official Samba a while ago.
You're using a specially crafted module from

http://pdbsql.sourceforge.net/pdb_mysql.html ?

Volker




--
Bastien Semene
Administrateur Réseau&  Système

Cyanide Studio - FRANCE

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] call trace when using acl_tdb module

2010-03-24 Thread Jeremy Allison
On Wed, Mar 24, 2010 at 01:58:45PM +0100, Adrian Berlin wrote:
> Hello,
> 
> When I am using module acl_tdb and I am trying to get access to directory I 
> am getting call trace in log.ip

Known bug :

https://bugzilla.samba.org/show_bug.cgi?id=7283

I'm testing my patch for this as we email

:-).

Jeremy
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Migration from 3.0.23d to 3.4.5 failed

2010-03-24 Thread Bastien Semene

Yes I'm using this one.

Actually the module has been upgraded for 3.4 (and 3.5) in February 2010 
: http://sourceforge.net/projects/pdbsql/files/
I plan to switch to another backend at short term, but I can't do it now 
as all my services uses this backend currently, and I need to upgrade 
Samba service to integrate Windows 7 workstations.


Anyway I don't think that it is the source of the problem according to 
the tests I made with pdbedit in my previous mail (but I'm a newbie in 
Samba services).
If you can point me a test to confirm (or unconfirm) that this module is 
the problem, I'll be glad.


Le 24/03/2010 17:21, Volker Lendecke a écrit :

On Wed, Mar 24, 2010 at 04:07:52PM +0100, Bastien Semene wrote:
   

The two servers uses the same backend DB (a MySQL service).
Smbd logs confirms it can connect correctly to the DB.
 

You're using the mysql passdb backend with 3.4.5? Support
for that has been dropped from official Samba a while ago.
You're using a specially crafted module from

http://pdbsql.sourceforge.net/pdb_mysql.html ?

Volker
   


--
Bastien Semene
Administrateur Réseau&  Système

Cyanide Studio - FRANCE

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Migration from 3.0.23d to 3.4.5 failed

2010-03-24 Thread Volker Lendecke
On Wed, Mar 24, 2010 at 04:07:52PM +0100, Bastien Semene wrote:
> The two servers uses the same backend DB (a MySQL service).
> Smbd logs confirms it can connect correctly to the DB.

You're using the mysql passdb backend with 3.4.5? Support
for that has been dropped from official Samba a while ago.
You're using a specially crafted module from

http://pdbsql.sourceforge.net/pdb_mysql.html ?

Volker


signature.asc
Description: Digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Winbind home directory not resolving properly

2010-03-24 Thread Jim Kusznir
Hi all:

I've got an issue on one of my winbind-configured systems.  I've got
it configured per instructions found on one of ubuntu's forum sites.
I've configured two 9.10 systems, one works perfectly.  I've copied
most of the files over to the non-working system; they are configured
identically as far as I can tell.

On both systems, wbinfo -u/-g, getent passwd, and ssh login work fine.
 On the working one, I can also log in via gdm/gnome and use
~adusername in paths in the terminal.  In the non-working one, the
~adusername is "unknown" (although ~localuser works fine), and gnome
sessions blow up in a big way (dbus errors, which I think are related
to the first problem).

I'm relatively familiar with the system authentication and account
system, and as getent passwd shows the full, proper password file
(compete with valid user homedirectories that I can cut and paste and
have work fine), I don't understand why the ~aduser expansions are not
working

This problem has now been kicking my butt for over a week now, and I'm
starting to catch some serious flack for it.  Any help would be
appreciated!

Any ideas?

--Jim
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] user with privileges to add machines in domain

2010-03-24 Thread Dale Schroeder

Rafael,

SeMachineAccountPrivilege:
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/rights.html#id2608460

Dale

On 03/24/2010 6:41 AM, Rafael de Oliveira Costa wrote:

Hi,

Here i have a PDC with LDAP running on SuSe Linux Enterprise Server 11 and i
want to create an user with privileges just to add windows machines in the
domain. any ideas ?

Atenciosamente,
Rafael de Oliveira Costa

"The first step to getting the things you want out of life is this : decide
what you want"
Ben Stein
   

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] symlinks and Samba 3.4.7

2010-03-24 Thread Preller, Markus
>> Hi,
>> 
>> we upgraded one of our Solaris 10 (SPARC) machines from Samba 3.0.28 
>> to 3.4.7. Symlinks are used within some shares that point to data 
>> outside the original share path.
>> 
>> While this was no problem with Samba 3.0.28 access is denied with 3.4.7.
>> I thought that 'wide links = Yes' and 'follow symlinks = Yes' in 
>> smb.conf should fix that but samba still gives me no access to the symlinked 
>> data.
>
>https://bugzilla.samba.org/show_bug.cgi?id=7104


Thanks for the link. I solved my problem using lofs mounts within /etc/vfstab,
which give me a simple way to represent different fileystems within a single 
share path.

best regards 
Markus

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Migration from 3.0.23d to 3.4.5 failed

2010-03-24 Thread Bastien Semene

Hi,

I have a problem migrating Samba,  users can't be authenticated. It 
always says "user unknown or incorrect password".
I have low skills on Samba so I followed the official HOW-TO install 
step-by-step, but now I'm stucked.


Everything works well on the (old) 3.0.23d Samba server.
I can't add a machine to the workgroup using the admin account 
(administrator).


I migrated the smb.conf file and the persistent *.tdb files.
When I do a "tdbedit -Lv administrateur" (the administrator), I can see 
the details of the user on both servers.


The two servers uses the same backend DB (a MySQL service).
Smbd logs confirms it can connect correctly to the DB.

testparm runs are successfull.

When I try to connect to Samba with "smbclient -U administrateur -L PDC" 
: setup session failed: NT_STATUS_LOGON_FAILURE

As I saw while searching the source problem on the web, root account exists.
I thought this was a problem in the authentication mechanism. So I tried 
using "encrypt passwords = Yes" unsuccessfully.


If anyone can point me a direction, this can be helpfull,
Thanks

Here is a dump of testparm :
[global]
dos charset = 850
unix charset = ISO8859-1
workgroup = CYANIDE
netbios name = PDC
server string = New Primary Domain Controller
interfaces = 10.1.5.11
passdb backend = mysql:foo
passwd program = /usr/local/bin/php -q 
/root/CyaManager/samba/update_mysql_password.php %u

passwd chat = "password:" %n\n "ok\n"
passwd chat debug = Yes
unix password sync = Yes
log level = 3
log file = /var/log/samba34/log.%m
load printers = No
domain logons = Yes
os level = 255
preferred master = Yes
domain master = Yes
dns proxy = No
wins support = Yes
foo:unknown 6 column = nt_unknown_6
foo:logon count column = nt_logon_count
foo:bad password count column = nt_bad_password_count
foo:logon hours column = nt_logon_hours
foo:hours len column = nt_hours_len
foo:logon divs column = nt_logon_divs
foo:acct ctrl column = nt_acct_ctrl
foo:plain pass column = NULL
foo:nt pass column = nt_pw
foo:lanman pass column = nt_lm_pw
foo:group sid column = nt_group_sid
foo:user sid column = nt_user_sid
foo:munged dial column = nt_munged_dial
foo:unknown string column = nt_unknown_str
foo:workstations column = nt_workstations
foo:acct desc column = nt_acct_desc
foo:profile path column = nt_profile_path
foo:logon script column = nt_logon_script
foo:dir drive column = nt_dir_drive
foo:home dir column = nt_homedir
foo:fullname column = gecos
foo:nt username column = nt_username
foo:domain column = nt_domain
foo:username column = username
foo:pass history = NULL
foo:pass must change time column = nt_pass_must_change_time
foo:pass can change time column = nt_pass_can_change_time
foo:pass last set time column = nt_pass_last_set_time
foo:kickoff time column = nt_kickoff_time
foo:logoff time column = nt_logoff_time
foo:logon time column = nt_logon_time
foo:table = user
foo:mysql database = cyanide
foo:mysql password = *
foo:mysql user = *
foo:mysql host = 10.1.5.12
foo:host = 10.1.5.12
admin users = administrateur

[test]
comment = Test Directory
path = /var/samba
read only = No
force create mode = 0770
force directory mode = 0770
guest ok = Yes

[netlogon]
path = /var/samba/netlogon
browseable = No
browsable = No

Here is a dump of pdbedit -Lv administrateur :
No builtin backend found, trying to load plugin
Module '/usr/local/lib/samba34/pdb/mysql.so' loaded
Connecting to database server, host: 10.1.5.12, user: root, database: 
cyanide, port: 3306

Unix username:administrateur
NT username:  administrateur
Account Flags:[U  ]
User SID: S-1-5-21-720590779-4203916125-4014520812-2419
Primary Group SID:S-1-5-21-720590779-4203916125-4014520812-513
Full Name:Administrateur
Home Directory:   \\pdb\administrateur
HomeDir Drive:
Logon Script: netlogon.bat
Profile Path:
Domain:   CYANIDE
Account desc:
Workstations:
Munged dial:
Logon time:   0
Logoff time:  0
Kickoff time: 0
Password last set:Mon, 22 Mar 2010 16:43:36 CET
Password can change:  Mon, 22 Mar 2010 16:43:36 CET
Password must change: never
Last bad password   : 0
Bad password count  : 0
Logon hours : FF


--
Bastien Semene
Administrateur Réseau&  Système

Cyanide Studio - FRANCE

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] call trace when using acl_tdb module

2010-03-24 Thread Karolin Seeger
Hi Adrian,

On Wed, Mar 24, 2010 at 01:58:45PM +0100, Adrian Berlin wrote:
> When I am using module acl_tdb and I am trying to get access to directory I 
> am getting call trace in log.ip

might be related to
https://bugzilla.samba.org/show_bug.cgi?id=7283.

Cheers,
Karolin

-- 
Samba   http://www.samba.org
SerNet  http://www.sernet.de
sambaXP http://www.sambaxp.org



pgpfiyWPl9cpJ.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] 3.5 in Debian Squeeze?

2010-03-24 Thread Robert LeBlanc
On Wed, Mar 24, 2010 at 12:21 AM, Christian PERRIER wrote:

> Quoting Robert LeBlanc (rob...@leblancnet.us):
> > What is the milestone that will get 3.5 into Debian Squeeze?
>
>
> We're still in the process of deciding whether we'll go for 3.4.* or
> 3.5 for squeeze.
>
> There are arguments for both:
>
> - 3.4.* releases are now rock solid and the risk of "important" issues
> to be discovered that would make these versions unsuitable for
> production servers is not very high while 3.5.* are fairly young as of
> now.
>
> - Strong support by the Samba Team for 3.4.* releases will be
> decreasing rapidly in the upcoming months and it might become hard to
> make this release alive for the planned two years of lifetime (at
> minimum) that squeeze will have after it's released. There are also
> several improvements bringed by 3.5 which our users would benefit from.
>
>
> My own stance is to go for 3.5 and, as one of the maintainers, I'll
> push for it. However, I want to ask to the Debian release team about
> their feeling for pushing point releases (3.5.2, 3.5.3, etc.) in
> squeeze during the time squeeze is frozenIt would help a lot if
> they agree that we can do this even late in the release process but
> you can imagine that they can't say "yes" to all such
> requests...otherwise the freeze is no longer a freeze.
>
> A key point is having my co-maintainer (Steve Langasek) advice about
> this. Other co-maintainers have agreed for having 3.5 in squeeze
> (particularly Matthieu Parent, who maintains ctdb)
>
>
Thank you for taking the time, this is very helpful. I fully understand both
sides of the argument as I take both positions on a regular basis. I do like
3.4 as it has worked quite well for us, as we move to Windows 7, we have
uncovered problems which we hope 3.5 will resolve. Winbind has also given us
problems in 3.4, and with the large rework in 3.5 we hope it's solved a lot
of those pain points. I haven't heard when the freeze will be for Squeeze,
but if it would be helpful, I can try to carve out some time to pull 3.5
from experimental on a test box and try it in our environment for feedback.

Thanks,

Robert LeBlanc
Life Sciences & Undergraduate Education Computer Support
Brigham Young University
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] ?: winbind dont start

2010-03-24 Thread Robert LeBlanc
On Wed, Mar 24, 2010 at 4:12 AM, Mistofeles  wrote:

> I have two similar PC with similar Ubuntu 9.10 srv installation.
> In the beginning both authenticated fine against our AD with Samba.
> I changed the NIC to another PC and moved it to another subdomain.
> Old IP changed from XXX.XXX.104.187 to XXX.XXX.41.32.
> The other PC works OK.
> SSH works in both. So the network is up.
>
> kinit myn...@mydomain
> - OK
> klist
> - OK
> /etc/init.d/samba restart
> - OK
> net ads join -U myname
> - OK
>
> STEP 1:
>
> /etc/init.d/winbind start
> - The system stops here.
> If I open another SSH window, this is the last lines in
> /var/log/samba/log.winbind:
>
> [2010/03/23 15:57:18,  2] param/loadparm.c:7736(do_section)
>  Processing section "[WWW_BCK_oldest]"
> [2010/03/23 15:57:18,  3] param/loadparm.c:6190(lp_add_ipc)
>  adding IPC service
>
> STEP 2:
>
> I apt-get purge all of these:
> samba, samba-common, samba-common-bin, smbfs, winbind
> - OK
>
> Then I apt-get install samba
> - OK
>
> apt-get install winbind
> - Everything freezes in the middle of the installation, while restarting
> winbind.
>
> Please tell me where I can find help. Google, RTFM and FAQ have not given
> any help so far.
>
>
You didn't mention if you updated your smb.conf and krb5.conf file (if
necessary) to reflect the new subdomain (unless by subdomain you don't mean
an Active directory subdomain and you are talking about a subnet). If you
have, then I would try a net ads leave and then a net ads join again.

Robert LeBlanc
Life Sciences & Undergraduate Education Computer Support
Brigham Young University
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] smbstatus shows no hostnames (3.5.1)

2010-03-24 Thread christoph . beyer

Hi Volker,

while debugging I observed something 'new' the name resolution works fine 
on the samba server as long as I browse the server 'directly' on the 
windows host (\\printserver)


It is not working when I look into a printerqueue etc on the windows host, 
this goes along whith what I see in my working environment, a couple of 
hostnames get resolved but very few.


So you can find to debug logfiles here, one with working name resolution 
and one without working name resolution:


https://www.desy.de/~chbeyer/public/smbd_log_d10_working.tar

https://www.desy.de/~chbeyer/public/smbd_log_d10.tar

Thansk for the support !

cheers
christoph



On Wed, 24 Mar 2010, Volker Lendecke wrote:


On Wed, Mar 24, 2010 at 12:16:27PM +0100, christoph.be...@desy.de wrote:

oc course I have I even did put thte one in question in '/etc/hosts' but
with no result :(


Please send a debug level 10 log of smbd when such a client
connects.

Volker



best regards
~christoph


--
/*   Christoph Beyer |   Office: Building 2b / 23 *\
 *   DESY|Phone: 040-8998-2317*
 *   - IT -  |  Fax: 040-8998-4060*
\*   22603 Hamburg   | http://www.desy.de */


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] call trace when using acl_tdb module

2010-03-24 Thread Adrian Berlin
Hello,

When I am using module acl_tdb and I am trying to get access to directory I am 
getting call trace in log.ip

Best regards!
/Adrian Berlin

===
[2010/03/24 13:54:05.295901,  0] lib/fault.c:47(fault_report)
  INTERNAL ERROR: Signal 11 in pid 15556 (3.5.1)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2010/03/24 13:54:05.295940,  0] lib/fault.c:49(fault_report)

  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2010/03/24 13:54:05.295978,  0] lib/fault.c:50(fault_report)
  ===
[2010/03/24 13:54:05.296013,  0] lib/util.c:1465(smb_panic)
  PANIC (pid 15556): internal error
[2010/03/24 13:54:05.297321,  0] lib/util.c:1569(log_stack_trace)
  BACKTRACE: 25 stack frames:
   #0 /usr/sbin/smbd(log_stack_trace+0x2d) [0xf72133a0]
   #1 /usr/sbin/smbd(smb_panic+0x78) [0xf72134cc]
   #2 /usr/sbin/smbd [0xf7202bcc]
   #3 [0xe400]
   #4 /usr/local/samba/lib/vfs/acl_tdb.so [0xf67cdc4d]
   #5 /usr/local/samba/lib/vfs/acl_tdb.so [0xf67cf085]
   #6 /usr/local/samba/lib/vfs/acl_tdb.so [0xf67cf801]
   #7 /usr/sbin/smbd(smb_vfs_call_opendir+0x39) [0xf6fc1ef5]
   #8 /usr/sbin/smbd(OpenDir+0xce) [0xf6f69fb5]
   #9 /usr/sbin/smbd(dptr_create+0x14b) [0xf6f6bd03]
   #10 /usr/sbin/smbd [0xf6faa2ed]
   #11 /usr/sbin/smbd [0xf6fadbe6]
   #12 /usr/sbin/smbd(reply_trans2+0x683) [0xf6fafa72]
   #13 /usr/sbin/smbd [0xf6fd3e32]
   #14 /usr/sbin/smbd [0xf6fd6c4e]
   #15 /usr/sbin/smbd [0xf6fd7501]
   #16 /usr/sbin/smbd(run_events+0x16f) [0xf722302a]
   #17 /usr/sbin/smbd(smbd_process+0xa01) [0xf6fd64c3]
   #18 /usr/sbin/smbd [0xf759dbcb]
   #19 /usr/sbin/smbd(run_events+0x16f) [0xf722302a]
   #20 /usr/sbin/smbd [0xf72232b8]
   #21 /usr/sbin/smbd(_tevent_loop_once+0x9b) [0xf7223808]
   #22 /usr/sbin/smbd(main+0x114a) [0xf759d8d2]
   #23 /lib/tls/libc.so.6(__libc_start_main+0xc8) [0xf6c1aea8]
   #24 /usr/sbin/smbd [0xf6f545f1]
[2010/03/24 13:54:05.297596,  0] lib/fault.c:326(dump_core)
  dumping core in /usr/local/samba/var/cores/smbd
[2010/03/24 13:54:05.325161,  1] smbd/service.c:1069(make_connection_snum)
  192.168.248.171 (192.168.248.171) connect to service ceneo initially as user 
RESEARCH2+user1 (uid=104, gid=112) (pid 15557)
[2010/03/24 13:54:07.045131,  1] smbd/service.c:1069(make_connection_snum)
  192.168.248.171 (192.168.248.171) connect to service ceneo2 initially as user 
RESEARCH2+user1 (uid=104, gid=112) (pid 15557)
[2010/03/24 13:54:22.667651,  1] smbd/service.c:1250(close_cnum)
  192.168.248.171 (192.168.248.171) closed connection to service ceneo2
bash-3.1#


-- 
You Rock! Your E-Mail Should Too! Signup Now at Rock.com and get 250MB of 
Storage!

http://webmail.rock.com/signup/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] ANNOUNCE: cifs-utils release 4.1 available for download

2010-03-24 Thread Jeff Layton
On Tue, 23 Mar 2010 23:11:17 -0700
Steve Langasek  wrote:

> Hi Jeff,
> 
> On Tue, Mar 23, 2010 at 10:10:44AM -0400, Jeff Layton wrote:
> > This release is primarily a number of small bugfixes and cleanups. I
> > wanted to do a release with those prior to the coming overhaul of
> > mount.cifs to allow it to more safely be installed setuid root.
> 
> Could you please provide detached GPG signatures for cifs-utils on the
> download site, so we have some cryptographic assurance of the integrity of
> the tarballs as we do for the samba tarballs?
> 
> Cheers,

Good point. I'm working now on getting a "cifs-utils" mail alias set up
that I can stuff into the key. Once I do so, I'll go back and sign all
of the tarballs and make sure they're signed on release in the future.

Thanks,
-- 
Jeff Layton 


signature.asc
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] user with privileges to add machines in domain

2010-03-24 Thread Rafael de Oliveira Costa
Hi,

Here i have a PDC with LDAP running on SuSe Linux Enterprise Server 11 and i
want to create an user with privileges just to add windows machines in the
domain. any ideas ?

Atenciosamente,
Rafael de Oliveira Costa

"The first step to getting the things you want out of life is this : decide
what you want"
Ben Stein
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.4 Windows 95/98 logon problem

2010-03-24 Thread Selcuk Ozturk
Anybody  else having the same problem? Better yet any solution? I know Windows 
95 clients are not that common anymore and that what we will try to do as well. 
But, it is sometimes hard because of some legacy hardware requirements.





From: Selcuk Ozturk 
To: samba@lists.samba.org
Sent: Mon, March 22, 2010 7:05:57 AM
Subject: Re: [Samba] Samba 3.4 Windows 95/98 logon problem


The domain controller is an old NT4, not the samba server. The password there 
works fine because the machines can connect to the PDC's shares no problem. The 
key here is the "security = domain" setting. When I change it to "security = 
server" it works fine. Both settings should be essentially same except "domain" 
is less demanding on the PDC and more fault tolerant. Under both settings, the 
NT4 PDC is asked to validate the password. But, the first one does not work 
while the second does.

Selcuk





From: Pascal Valois 
To: samba@lists.samba.org
Sent: Sun, March 21, 2010 1:37:10 PM
Subject: Re: [Samba] Samba 3.4 Windows 95/98 logon problem

try to reset the password for the users using w95/98. it usually works.

Le 21/03/2010 13:42, selcuko a écrit :
> Hi,
>
> we have just upgraded one of our very old Linux/Samba servers to version
> 3.4.2. After the upgrade, the Windows 95/98 clients cannot login to the
> server anymore. In the log I see 'NT_STATUS_ACCESS_DENIED' messages for
> these clients.
>
> The samba server is setup to use an NT4 PDC as the password server. The
> security = domain. The Windows 2000 and up clients don't have any problems.
> But, the Win 9x cannot login.
>
> We also have other older samba servers. Various versions up till 3.0.20. The
> win 9x machines don't have any problems logging into those servers.
>


-- 
Pascal Valois
Service Informatique
Pole Universitaire Léonard de Vinci

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] smbstatus shows no hostnames (3.5.1)

2010-03-24 Thread Volker Lendecke
On Wed, Mar 24, 2010 at 12:16:27PM +0100, christoph.be...@desy.de wrote:
> oc course I have I even did put thte one in question in '/etc/hosts' but 
> with no result :(

Please send a debug level 10 log of smbd when such a client
connects.

Volker
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] smbstatus shows no hostnames (3.5.1)

2010-03-24 Thread christoph . beyer

Hi,

oc course I have I even did put thte one in question in '/etc/hosts' but 
with no result :(


[printserver] # grep 131.169.214.117 /etc/hosts
131.169.214.117 zitpcx16179.desy.de zitpcx16179
[printserver] # nslookup zitpcx16179
Server: 131.169.40.200
Address:131.169.40.200#53

Name:   zitpcx16179.desy.de
Address: 131.169.214.117

[printserver] # nslookup 131.169.214.117
Server: 131.169.40.200
Address:131.169.40.200#53

117.214.169.131.in-addr.arpaname = zitpcx16179.desy.de.

[printserver] /global/spool/samba_logs # grep -i dns /etc/nsswitch.conf
hosts:  cluster files dns


cheers
christoph



On Wed, 24 Mar 2010, Volker Lendecke wrote:


On Wed, Mar 24, 2010 at 12:02:47PM +0100, Christoph Beyer wrote:

by the way nmblookup looks fine, at the same time:

[printserver] /global/spool/samba_logs # nmblookup -T 131.169.214.117
querying 131.169.214.117 on 131.169.56.255
zitpcx16179.desy.de, 131.169.214.117 131.169.214.117<00>




You don't have those hosts in DNS?

Volker



best regards
~christoph


--
/*   Christoph Beyer |   Office: Building 2b / 23 *\
 *   DESY|Phone: 040-8998-2317*
 *   - IT -  |  Fax: 040-8998-4060*
\*   22603 Hamburg   | http://www.desy.de */


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] smbstatus shows no hostnames (3.5.1)

2010-03-24 Thread Volker Lendecke
On Wed, Mar 24, 2010 at 12:02:47PM +0100, Christoph Beyer wrote:
> by the way nmblookup looks fine, at the same time:
> 
> [printserver] /global/spool/samba_logs # nmblookup -T 131.169.214.117
> querying 131.169.214.117 on 131.169.56.255
> zitpcx16179.desy.de, 131.169.214.117 131.169.214.117<00>
> 
> 

You don't have those hosts in DNS?

Volker
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] smbstatus shows no hostnames (3.5.1)

2010-03-24 Thread Christoph Beyer

Oh,

by the way nmblookup looks fine, at the same time:

[printserver] /global/spool/samba_logs # nmblookup -T 131.169.214.117
querying 131.169.214.117 on 131.169.56.255
zitpcx16179.desy.de, 131.169.214.117 131.169.214.117<00>



Come on someone must have an opinion on this ?

cheers
christoph



On Mon, 22 Mar 2010, christoph.be...@desy.de wrote:


Hi,

I changed the samba version from 3.0.x to 3.5.1 and from that moment 
something has changed with the nameresolving. The smbstatus mainly sjopws IP 
adresses now:


[printserver] # smbstatus

Samba version 3.5.1
PID Username  Group Machine
---
14944it131.169.214.117 (131.169.214.117)
14944it131.169.214.117 (131.169.214.117)

Service  pid machine   Connected at
---
IPC$ 14944   131.169.214.117  Mon Mar 22 11:43:05 2010
IPC$ 14944   131.169.214.117  Mon Mar 22 11:41:45 2010

I fiddled around with all the usual options with no success, DNS reverse 
lookup works fine:


[printserver] # nslookup 131.169.214.117
Server: 131.169.40.200
Address:131.169.40.200#53

117.214.169.131.in-addr.arpaname = zitpcx16179.desy.de.

When I go back to the 3.0.x version name resolution works fine again, what am 
I missing ???


Any hints someone ?

cheers
~ christoph


--
/*   Christoph Beyer |   Office: Building 2b / 23 *\
 *   DESY|Phone: 040-8998-2317*
 *   - IT -  |  Fax: 040-8998-4060*
\*   22603 Hamburg   | http://www.desy.de */


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba



best regards
~christoph


--
/*   Christoph Beyer |   Office: Building 2b / 23 *\
 *   DESY|Phone: 040-8998-2317*
 *   - IT -  |  Fax: 040-8998-4060*
\*   22603 Hamburg   | http://www.desy.de */


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] ?: winbind dont start

2010-03-24 Thread Mistofeles

I have two similar PC with similar Ubuntu 9.10 srv installation.
In the beginning both authenticated fine against our AD with Samba.
I changed the NIC to another PC and moved it to another subdomain.
Old IP changed from XXX.XXX.104.187 to XXX.XXX.41.32.
The other PC works OK.
SSH works in both. So the network is up.

kinit myn...@mydomain
- OK
klist
- OK
/etc/init.d/samba restart
- OK
net ads join -U myname
- OK

STEP 1:

/etc/init.d/winbind start
- The system stops here.
If I open another SSH window, this is the last lines in 
/var/log/samba/log.winbind:


[2010/03/23 15:57:18,  2] param/loadparm.c:7736(do_section)
  Processing section "[WWW_BCK_oldest]"
[2010/03/23 15:57:18,  3] param/loadparm.c:6190(lp_add_ipc)
  adding IPC service

STEP 2:

I apt-get purge all of these:
samba, samba-common, samba-common-bin, smbfs, winbind
- OK

Then I apt-get install samba
- OK

apt-get install winbind
- Everything freezes in the middle of the installation, while restarting 
winbind.


Please tell me where I can find help. Google, RTFM and FAQ have not 
given any help so far.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Security Releases for Samba 3.2

2010-03-24 Thread Karolin Seeger
Hi Alex,

On Tue, Mar 23, 2010 at 05:57:48PM -0600, Alex wrote:
> On the Samba3 Release Planning wiki page, Samba 3.2 is designated as 
> "discontinued".  There is a statement: "As this strategy is quite new, we are 
> currently still providing security releases for 3.2"
> Anyone know how long 3.2 will continue to receive security releases?
> Thank you.Alex
> http://wiki.samba.org/index.php/Samba3_Release_Planning   
>   

Samba 3.2 is discontinued and there won't be any security releases for
this series. I removed the statement you mentioned. This was just an
oversight. Sorry!

Cheers,
Karolin

-- 
Samba   http://www.samba.org
SerNet  http://www.sernet.de
sambaXP http://www.sambaxp.org



pgp3nBLiY3eje.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] PDC migration from suse 8.2 - samba 2.2.7 ldap - to latest versions on ubuntu 8.04

2010-03-24 Thread Vladimir Psenicka
Dne 23.3.2010 15:48, Giorgio napsal(a):
> Hello,
> Hopefully I'm in the right place asking for help :-)
> 
> I need to move from an old physical Suse 8.2 - samba 2.2.7 + ldap - to
> latest samba versions, I would like to use an ubuntu 8.04 virtual machine.
> 
> The domain is in production on the physical server, to be dismissed after
> migration. It is also the file server!!! so /DATA/ has all shared and
> permission driven file access..
> 
> I was following https://help.ubuntu.com/8.10/serverguide/C/samba-dc.html but
> I realize I am in a different scenario...
> 
> Production so no errors are admitted :-(, migration to new os and versions..
> all at once?
> 
> I have a dump of the physical server (dd sda mbr and single partitions :)
> plus an rsync with all permissions daily backup, just to be safe ;)
> 
> 
> What would you guru's suggest as a strategy?
> 
> Can I create a new server and add it as secondary domain controller and then
> once the replica is up? I'd feel quite comfortable with this method.
> 
> BTW I need a new version of samba as they have already bought Windows 7
> boxes (without asking if they were supported arrgh).
> 
> Thanks to all of you who read or answered :-)
> 
> Gio

Hi.

Ubuntu 8.10 is bad idea if you will be connecting Windows 7 into domain,
because of old Samba version. Samba 3.4.x or 3.5.x is recommended for
Win7. Wait for Ubuntu 10.04 LTS (next month) if you want Ubuntu.

-- 
Vladimir Psenicka
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] ham,Re: Fix bugs with the full Windows ACL support

2010-03-24 Thread Adrian Berlin
Hi! :)

Thank You for your answer.

testparm -sv | grep inherit

inherit permissions = Yes
inherit acls = Yes
inherit owner = No
map acl inherit = Yes

Best regards!

> 
> 
> On 03/23/2010 3:52 AM, Adrian Berlin wrote:
> > Sounds good :-)
> >
> > Ok, I think there is a bug in inheritance. If I create directory 
> > with two users (first with full acls, second user with reading 
> > privileges only) and I turn on inheritance in first subdirectory 
> > everything is working but in next subdirectory2 
> > (/directory/subdirectory1/subdirectory2) each user have full 
> > access. I think that subdirectory2 should inherit privileges from 
> > upper dir.
> >
> > Could you help me? :-)
> > Best regards
> > /Adrian Berlin
> >
> Have you looked into the inherit permissions/inherit acls parameters?
> testparm -sv | grep inherit
> 
> Dale

>


-- 
You Rock! Your E-Mail Should Too! Signup Now at Rock.com and get 250MB of 
Storage!

http://webmail.rock.com/signup/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] 3.5 in Debian Squeeze?

2010-03-24 Thread Christian PERRIER
Quoting Robert LeBlanc (rob...@leblancnet.us):
> What is the milestone that will get 3.5 into Debian Squeeze?


We're still in the process of deciding whether we'll go for 3.4.* or
3.5 for squeeze.

There are arguments for both:

- 3.4.* releases are now rock solid and the risk of "important" issues
to be discovered that would make these versions unsuitable for
production servers is not very high while 3.5.* are fairly young as of
now.

- Strong support by the Samba Team for 3.4.* releases will be
decreasing rapidly in the upcoming months and it might become hard to
make this release alive for the planned two years of lifetime (at
minimum) that squeeze will have after it's released. There are also
several improvements bringed by 3.5 which our users would benefit from.


My own stance is to go for 3.5 and, as one of the maintainers, I'll
push for it. However, I want to ask to the Debian release team about
their feeling for pushing point releases (3.5.2, 3.5.3, etc.) in
squeeze during the time squeeze is frozenIt would help a lot if
they agree that we can do this even late in the release process but
you can imagine that they can't say "yes" to all such
requests...otherwise the freeze is no longer a freeze.

A key point is having my co-maintainer (Steve Langasek) advice about
this. Other co-maintainers have agreed for having 3.5 in squeeze
(particularly Matthieu Parent, who maintains ctdb)


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba