[Samba] Invitation to connect on LinkedIn
LinkedIn Luis Zarrabeitia requested to add you as a connection on LinkedIn: -- Serge, I'd like to add you to my professional network on LinkedIn. - Luis Accept invitation from Luis Zarrabeitia http://www.linkedin.com/e/vTWyDe4yCEPPQyWVLZMh1H4yCEPPQGFCi7/blk/I603591099_3/pmpxnSRJrSdvj4R5fnhv9ClRsDgZp6lQs6lzoQ5AomZIpn8_cRYVej0NejkPc3p9bSZRpTFJoAwJbP0OdPwTejcTcj4LrCBxbOYWrSlI/EML_comm_afe/ View invitation from Luis Zarrabeitia http://www.linkedin.com/e/vTWyDe4yCEPPQyWVLZMh1H4yCEPPQGFCi7/blk/I603591099_3/0PnPAVc34VdjcMdAALqnpPbOYWrSlI/svi/ -- DID YOU KNOW you can be the first to know when a trusted member of your network changes jobs? With Network Updates on your LinkedIn home page, you'll be notified as members of your network change their current position. Be the first to know and reach out! http://www.linkedin.com/ -- (c) 2010, LinkedIn Corporation -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] 3.5 in Debian Squeeze?
On Wed, Mar 24, 2010 at 7:25 AM, Robert LeBlanc wrote: > On Wed, Mar 24, 2010 at 12:21 AM, Christian PERRIER >wrote: > > > Quoting Robert LeBlanc (rob...@leblancnet.us): > > > What is the milestone that will get 3.5 into Debian Squeeze? > > > > > > We're still in the process of deciding whether we'll go for 3.4.* or > > 3.5 for squeeze. > > > > There are arguments for both: > > > > - 3.4.* releases are now rock solid and the risk of "important" issues > > to be discovered that would make these versions unsuitable for > > production servers is not very high while 3.5.* are fairly young as of > > now. > > > > - Strong support by the Samba Team for 3.4.* releases will be > > decreasing rapidly in the upcoming months and it might become hard to > > make this release alive for the planned two years of lifetime (at > > minimum) that squeeze will have after it's released. There are also > > several improvements bringed by 3.5 which our users would benefit from. > > > > > > My own stance is to go for 3.5 and, as one of the maintainers, I'll > > push for it. However, I want to ask to the Debian release team about > > their feeling for pushing point releases (3.5.2, 3.5.3, etc.) in > > squeeze during the time squeeze is frozenIt would help a lot if > > they agree that we can do this even late in the release process but > > you can imagine that they can't say "yes" to all such > > requests...otherwise the freeze is no longer a freeze. > > > > A key point is having my co-maintainer (Steve Langasek) advice about > > this. Other co-maintainers have agreed for having 3.5 in squeeze > > (particularly Matthieu Parent, who maintains ctdb) > > > > > Thank you for taking the time, this is very helpful. I fully understand > both > sides of the argument as I take both positions on a regular basis. I do > like > 3.4 as it has worked quite well for us, as we move to Windows 7, we have > uncovered problems which we hope 3.5 will resolve. Winbind has also given > us > problems in 3.4, and with the large rework in 3.5 we hope it's solved a lot > of those pain points. I haven't heard when the freeze will be for Squeeze, > but if it would be helpful, I can try to carve out some time to pull 3.5 > from experimental on a test box and try it in our environment for feedback. > > Thanks, > > Robert LeBlanc > Life Sciences & Undergraduate Education Computer Support > Brigham Young University > -- > > On Ubuntu 9.10 which currently uses 3.4.0 there are, for me, many problems solved by moving to 3.5 not the least of which are windows 7, the ability to login from OS X when using AD/LDAP/Kerberos and better support for ACLs so I'm hoping that Debian will move quickly to 3.5 and that it will feed downstream to Ubuntu 9.10 within my lifetime. It seems that Lucid is still at 3.4.7 tantalizingly close to 3.5 For ubuntu 9.10 samba 3.4.0 is not up to much since it cannot do the mac OS X login described or windows 7. My vote is for 3.5 on both debian squeeze and ubuntu lucid. Faint hope... Grant. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Can't access opaque symlinks pointing to another Samba mount
Computer A runs my samba server. Has unix extensions = off, wide links = on (don't think this one matters with unix extensions off...) This way, if I have a symlink on my shares, clients see it as a normal file, not as a symlink. This works fine, even for symlinks to files outside the shares paths. Except when the symlink points to a file that is on a CIFS mount. So say I have computer B (running Mac OS X) that shares something using Samba. I mount such share on computer A, in /mnt/hdd-air. Then, on a share of computer A, I create a symlink to a file in /mnt/hdd-air: ln -s /mnt/hdd-air/gh/TimeMachine/file2 /mnt/hdd0/shares/TimeMachine/file2 If I mount my TimeMachine share (on computer A or any other computer), file2 is listed, but I can't access it. That is, it can't be accessed UNLESS the file was accessed successfully in the last second! Here's a test case I created on computer A: # This is my /mnt/hdd-air share; I tried various mount options, and I always have the problem. [...@hda TimeMachine]$ grep hdd-air /etc/fstab //192.168.155.5/gb /mnt/hdd-aircifs credentials=/home/gb/.smb_credentials,uid=500,gid=100,file_mode=0666,dir_mode=0777,hard,_netdev 0 0 # Now I created 3 symlinks to various targets on my TimeMachine share. [...@hda TimeMachine]$ ls -l lrwxrwxrwx 1 gb users 30 2010-03-24 17:04 file1 -> /mnt/hdd0/gh/TimeMachine/file1 lrwxrwxrwx 1 gb users 33 2010-03-24 17:05 file2 -> /mnt/hdd-air/gh/TimeMachine/file2 lrwxrwxrwx 1 gb users 30 2010-03-24 17:08 file3 -> /mnt/hdd1/gh/TimeMachine/file3 # We can see here that I can access all 3 files here, as expected. [...@hda TimeMachine]$ cat file* 1 2 3 # Here's the targets of my symlinks [...@hda TimeMachine]$ mount | grep -E "/mnt/hdd0|/mnt/hdd1|/mnt/hdd-air" /dev/sda6 on /mnt/hdd0 type ext3 (rw) /dev/sdf1 on /mnt/hdd1 type ext3 (rw) //192.168.155.5/gb on /mnt/hdd-air type cifs (rw,mand) # Now, I mounted my TimeMachine share locally to ease testing... [...@hda TimeMachine]$ cd /mnt/samba/TimeMachine/ # file2 looks fine [...@hda TimeMachine]$ ls -l -rw-rw 1 gb users2 2010-03-24 17:05 file1 -rw-rw 0 gb users2 2010-03-24 17:05 file2 -rw-rw 1 gb users2 2010-03-24 17:08 file3 # But can't be accessed [...@hda TimeMachine]$ cat file* 1 cat: file2: No such file or directory 3 # But there is no problem if the file was successfully accessed in the last second! [...@hda TimeMachine]$ date; cat /mnt/hdd0/shares/TimeMachine/file*; date; cat /mnt/samba/TimeMachine/file*; date; cat /mnt/samba/TimeMachine/file*; sleep 1; cat /mnt/samba/TimeMachine/file* Wed Mar 24 18:24:45 EDT 2010 1 2 3 Wed Mar 24 18:24:45 EDT 2010 1 2 3 Wed Mar 24 18:24:45 EDT 2010 1 2 3 Wed Mar 24 18:24:46 EDT 2010 1 cat: /mnt/samba/TimeMachine/file2: No such file or directory 3 As you can see, file2 works fine through my share until I wait 1 second after the last successful access, at which point the file becomes unaccessible. I also tried to access /mnt/samba/TimeMachine/file2 in an infinite loop after accessing /mnt/hdd0/shares/TimeMachine/file2 once, and it works fine. file2 accessed through the share will work fine until I stop the loop, wait 1 second, and then try to access it again! I've set log level = 3 and traced what happens when I can and can't access the file. I attached both files. Any pointer as to what is happening, why, or how I could work around this issue would be welcome! Thanks, - Guillaume Boudreau -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] [linux-cifs-client] ANNOUNCE: cifs-utils release 4.1 available for download
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 24 Mar 2010 20:26:37 -0400 Jeff Layton wrote: > On Wed, 24 Mar 2010 20:24:17 -0400 > Jeff Layton wrote: > > > On Wed, 24 Mar 2010 07:55:09 -0400 > > Jeff Layton wrote: > > > > > On Tue, 23 Mar 2010 23:11:17 -0700 > > > Steve Langasek wrote: > > > > > > > Hi Jeff, > > > > > > > > On Tue, Mar 23, 2010 at 10:10:44AM -0400, Jeff Layton wrote: > > > > > This release is primarily a number of small bugfixes and cleanups. I > > > > > wanted to do a release with those prior to the coming overhaul of > > > > > mount.cifs to allow it to more safely be installed setuid root. > > > > > > > > Could you please provide detached GPG signatures for cifs-utils on the > > > > download site, so we have some cryptographic assurance of the integrity > > > > of > > > > the tarballs as we do for the samba tarballs? > > > > > > > > Cheers, > > > > > > Good point. I'm working now on getting a "cifs-utils" mail alias set up > > > that I can stuff into the key. Once I do so, I'll go back and sign all > > > of the tarballs and make sure they're signed on release in the future. > > > > > > Thanks, > > > > Done. A new cifs-utils signing key has been generated and the existing > > tarballs are now signed with it. The public key and signatures are > > available at the ftp location. > > > > ftp://ftp.samba.org/pub/linux-cifs/cifs-utils/ > > > > I'll update the webpage with that info soon. > > ...and in hindsight I should have probably signed that email. > Apologies for the spam, this one should be signed :) - -- Jeff Layton -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.14 (GNU/Linux) iEYEARECAAYFAkuqr+IACgkQyP0gxQMdzICKOACgj77famnypt2J7F2/zhCg8VUO kGoAn0D7EFDvZW9xKcZabdygM55P5D7H =F9SW -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] [linux-cifs-client] ANNOUNCE: cifs-utils release 4.1 available for download
On Wed, 24 Mar 2010 20:24:17 -0400 Jeff Layton wrote: > On Wed, 24 Mar 2010 07:55:09 -0400 > Jeff Layton wrote: > > > On Tue, 23 Mar 2010 23:11:17 -0700 > > Steve Langasek wrote: > > > > > Hi Jeff, > > > > > > On Tue, Mar 23, 2010 at 10:10:44AM -0400, Jeff Layton wrote: > > > > This release is primarily a number of small bugfixes and cleanups. I > > > > wanted to do a release with those prior to the coming overhaul of > > > > mount.cifs to allow it to more safely be installed setuid root. > > > > > > Could you please provide detached GPG signatures for cifs-utils on the > > > download site, so we have some cryptographic assurance of the integrity of > > > the tarballs as we do for the samba tarballs? > > > > > > Cheers, > > > > Good point. I'm working now on getting a "cifs-utils" mail alias set up > > that I can stuff into the key. Once I do so, I'll go back and sign all > > of the tarballs and make sure they're signed on release in the future. > > > > Thanks, > > Done. A new cifs-utils signing key has been generated and the existing > tarballs are now signed with it. The public key and signatures are > available at the ftp location. > > ftp://ftp.samba.org/pub/linux-cifs/cifs-utils/ > > I'll update the webpage with that info soon. ...and in hindsight I should have probably signed that email. -- Jeff Layton -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] [linux-cifs-client] ANNOUNCE: cifs-utils release 4.1 available for download
On Wed, 24 Mar 2010 07:55:09 -0400 Jeff Layton wrote: > On Tue, 23 Mar 2010 23:11:17 -0700 > Steve Langasek wrote: > > > Hi Jeff, > > > > On Tue, Mar 23, 2010 at 10:10:44AM -0400, Jeff Layton wrote: > > > This release is primarily a number of small bugfixes and cleanups. I > > > wanted to do a release with those prior to the coming overhaul of > > > mount.cifs to allow it to more safely be installed setuid root. > > > > Could you please provide detached GPG signatures for cifs-utils on the > > download site, so we have some cryptographic assurance of the integrity of > > the tarballs as we do for the samba tarballs? > > > > Cheers, > > Good point. I'm working now on getting a "cifs-utils" mail alias set up > that I can stuff into the key. Once I do so, I'll go back and sign all > of the tarballs and make sure they're signed on release in the future. > > Thanks, Done. A new cifs-utils signing key has been generated and the existing tarballs are now signed with it. The public key and signatures are available at the ftp location. ftp://ftp.samba.org/pub/linux-cifs/cifs-utils/ I'll update the webpage with that info soon. -- Jeff Layton -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] PDC migration from suse 8.2 - samba 2.2.7 ldap - to latest versions on ubuntu 8.04
Hello Vladimir and hi all, Thanks very much for replying! Any suggested os? I'd go for debian or what advised, I just happen to know ubuntu more... Any strategy or hint on migrating from ancient ldap + samba to a new server? Already tried rsyncing (using all options to keep perms and attributes grp own mod etc) on a twin v-machine but server starts and the ldap auth fails to work :-( I'm a bit stuck at the moment :-( and I have posponed the problem for too long grrr Giorgio On Wed, Mar 24, 2010 at 9:20 AM, Vladimir Psenicka wrote: > Dne 23.3.2010 15:48, Giorgio napsal(a): >> Hello, >> Hopefully I'm in the right place asking for help :-) >> >> I need to move from an old physical Suse 8.2 - samba 2.2.7 + ldap - to >> latest samba versions, I would like to use an ubuntu 8.04 virtual machine. >> >> The domain is in production on the physical server, to be dismissed after >> migration. It is also the file server!!! so /DATA/ has all shared and >> permission driven file access.. >> >> I was following https://help.ubuntu.com/8.10/serverguide/C/samba-dc.html but >> I realize I am in a different scenario... >> >> Production so no errors are admitted :-(, migration to new os and versions.. >> all at once? >> >> I have a dump of the physical server (dd sda mbr and single partitions :) >> plus an rsync with all permissions daily backup, just to be safe ;) >> >> >> What would you guru's suggest as a strategy? >> >> Can I create a new server and add it as secondary domain controller and then >> once the replica is up? I'd feel quite comfortable with this method. >> >> BTW I need a new version of samba as they have already bought Windows 7 >> boxes (without asking if they were supported arrgh). >> >> Thanks to all of you who read or answered :-) >> >> Gio > > Hi. > > Ubuntu 8.10 is bad idea if you will be connecting Windows 7 into domain, > because of old Samba version. Samba 3.4.x or 3.5.x is recommended for > Win7. Wait for Ubuntu 10.04 LTS (next month) if you want Ubuntu. > > -- > Vladimir Psenicka > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] LDAP Account Manager 3.0.0 released
LDAP Account Manager (LAM) 3.0.0 - March 24th, 2010 === LAM is a web frontend for managing accounts stored in an LDAP directory. I just installed this new version on a CentOS machine and I immediately got the following error: Your PCRE library has no complete Unicode support. Please upgrade libpcre or compile with "--enable-unicode-properties". I suppose it comes from the use of Unicode for multilingual support. Under Red Hat/CentOS, PCRE needs to be recompiled with Unicode support for this to work. Instructions on how to recompile are here: http://gaarai.com/2009/01/31/unicode-support-on-centos-52-with-php-and-pcre/ Compiled versions are here: 64bit - http://gaarai.com/wp-content/uploads/2009/01/pcre-66-27x86_64.rpm 32bit - http://gaarai.com/wp-content/uploads/2009/01/pcre-6.6-2.7.i386.rpm Thank you to all! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] IDMAP_RID with Winbind works for groups but not users
I've also tried storing the gid and uid in active directory by installing the nisprop dll and exposing the unix attributes in aduac, again it works for groups but not for users, users still have sequential uid and it differs between samba servers. Am I missing something? Could somebody post a example working config for consistent mapping of uid and gid to thise held in ad or using idmap_rid. Thanks Andy On 3/22/10, Andrew Lyon wrote: > Hi, > > I've setup samba 3.4.7 to use idmap_rid as per the documentation: > > idmap backend = rid:DOMAIN=500-1 > idmap gid = 500-1 > imap uid = 500-1 > > It seems to work for groups: > > wbinfo --group-info="domain admins" > domain admins:x:100512 > > PsGetSid v1.43 - Translates SIDs to names and vice versa > Copyright (C) 1999-2006 Mark Russinovich > Sysinternals - www.sysinternals.com > > SID for DOMAIN\domain admins: > S-1-5-21-xx--xx-512 > > But not for users: > > wbinfo --user-info=administrator > administrator:*:10027:10005:Administrator:/home/DOMAIN/administrator:/bin/zsh > > SID for DOMAIN\administrator: > S-1-5-21-xx-x-xx-500 > > wbinfo --user-info="Test User" > test user:*:10048:10005:Test User:/home/DOMAIN/test user:/bin/zsh > > SID for DOMAIN\test user: > S-1-5-21-x-x-xx-1758 > > Have I made a mistake in the configuration? > > Andy > -- Sent from my mobile device -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] LDAP Account Manager 3.0.0 released
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 LDAP Account Manager (LAM) 3.0.0 - March 24th, 2010 === LAM is a web frontend for managing accounts stored in an LDAP directory. Announcement: - - The file upload was improved and LAM Pro now supports OpenLDAP password policies and IP addresses for hosts. This release also fixes some problems. Full changelog: http://www.ldap-account-manager.org/lamcms/changelog Features: - - * management of various account types * Unix * Samba 3 * Kolab 2 * Asterisk * phpGroupwWare * DHCP * SSH keys * profiles for account creation * account creation via file upload * automatic creation/deletion of home directories * setting quotas * PDF output for all accounts * editor for organizational units * schema browser * tree view * multiple configuration files * multi-language support: Catalan, Chinese (Traditional + Simplified), Czech, Dutch, English, French, German, Hungarian, Italian, Japanese, Polish, Portuguese, Russian and Spanish * support for LDAP+SSL/TLS Availability: - - This software is available under the GNU General Public License V2.0. You can get the newest version at http://www.ldap-account-manager.org. File formats: DEB, RPM, tar.gz There is also a FreeBSD port. Debian users may use the packages in unstable. Demo installation: - -- You can try our demo installation online. http://www.ldap-account-manager.org/lamcms/liveDemo Support: - If you find a bug please file a bug report. For questions or implementing new features please use the mailinglist and feature request tracker at our homepage http://www.ldap-account-manager.org. Authors & Copyright: - Copyright (C) 2003 - 2010: Michael Duergner Roland Gruber Tilo Lutz LAM is published under the GNU General Public License. The complete list of licenses can be found in the copyright file. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkuqa90ACgkQq/ywNCsrGZ7/5QCeJbuR9oFnOXvX0Jo0LxmyVqXo fwMAn0Zpf756gwiswmqa2r8HjTKWXE7x =SFqD -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Migration from 3.0.23d to 3.4.5 failed
On Wed, Mar 24, 2010 at 04:10:51PM -0300, Leonardo Carneiro - Veltrac wrote: > After a migration from 3.2.5 to 3.4.7 i'm still having issues. My > windows XP users randomly loses their access to the server and cannot > open the share list. =S More info please. This isn't useful as a bug report. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Migration from 3.0.23d to 3.4.5 failed
After a migration from 3.2.5 to 3.4.7 i'm still having issues. My windows XP users randomly loses their access to the server and cannot open the share list. =S Volker Lendecke wrote: On Wed, Mar 24, 2010 at 05:39:15PM +0100, Bastien Semene wrote: Yes I'm using this one. Actually the module has been upgraded for 3.4 (and 3.5) in February 2010 : http://sourceforge.net/projects/pdbsql/files/ I plan to switch to another backend at short term, but I can't do it now as all my services uses this backend currently, and I need to upgrade Samba service to integrate Windows 7 workstations. Anyway I don't think that it is the source of the problem according to the tests I made with pdbedit in my previous mail (but I'm a newbie in Samba services). If you can point me a test to confirm (or unconfirm) that this module is the problem, I'll be glad. Ok, what we need then is a debug level 10 log of smbd that you can't connect to. Volker -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] smbstatus shows no hostnames (3.5.1)
On Wed, Mar 24, 2010 at 02:51:50PM +0100, christoph.be...@desy.de wrote: > while debugging I observed something 'new' the name resolution works fine > on the samba server as long as I browse the server 'directly' on the > windows host (\\printserver) > > It is not working when I look into a printerqueue etc on the windows > host, this goes along whith what I see in my working environment, a > couple of hostnames get resolved but very few. > > So you can find to debug logfiles here, one with working name resolution > and one without working name resolution: > > https://www.desy.de/~chbeyer/public/smbd_log_d10_working.tar > > https://www.desy.de/~chbeyer/public/smbd_log_d10.tar > > Thansk for the support ! Compared the logs, I don't see any difference in the relevant pieces of them. I'm lost at this point. Someone with Samba knowledge needs to look at the box itself. Sorry, Volker signature.asc Description: Digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Migration from 3.0.23d to 3.4.5 failed
On Wed, Mar 24, 2010 at 05:39:15PM +0100, Bastien Semene wrote: > Yes I'm using this one. > > Actually the module has been upgraded for 3.4 (and 3.5) in February 2010 > : http://sourceforge.net/projects/pdbsql/files/ > I plan to switch to another backend at short term, but I can't do it now > as all my services uses this backend currently, and I need to upgrade > Samba service to integrate Windows 7 workstations. > > Anyway I don't think that it is the source of the problem according to > the tests I made with pdbedit in my previous mail (but I'm a newbie in > Samba services). > If you can point me a test to confirm (or unconfirm) that this module is > the problem, I'll be glad. Ok, what we need then is a debug level 10 log of smbd that you can't connect to. Volker signature.asc Description: Digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] call trace when using acl_tdb module
On Wed, Mar 24, 2010 at 09:46:55AM -0700, Jeremy Allison wrote: > On Wed, Mar 24, 2010 at 01:58:45PM +0100, Adrian Berlin wrote: > > Hello, > > > > When I am using module acl_tdb and I am trying to get access to directory I > > am getting call trace in log.ip > > Known bug : > > https://bugzilla.samba.org/show_bug.cgi?id=7283 > > I'm testing my patch for this as we email Works. Here is the fix: Jeremy. diff --git a/source3/modules/vfs_acl_tdb.c b/source3/modules/vfs_acl_tdb.c index bfed0eb..8da0d1e 100644 --- a/source3/modules/vfs_acl_tdb.c +++ b/source3/modules/vfs_acl_tdb.c @@ -37,12 +37,11 @@ static struct db_context *acl_db; Open acl_db if not already open, increment ref count. ***/ -static bool acl_tdb_init(struct db_context **pp_db) +static bool acl_tdb_init(void) { char *dbname; if (acl_db) { - *pp_db = acl_db; ref_count++; return true; } @@ -55,10 +54,10 @@ static bool acl_tdb_init(struct db_context **pp_db) } become_root(); - *pp_db = db_open(NULL, dbname, 0, TDB_DEFAULT, O_RDWR|O_CREAT, 0600); + acl_db = db_open(NULL, dbname, 0, TDB_DEFAULT, O_RDWR|O_CREAT, 0600); unbecome_root(); - if (*pp_db == NULL) { + if (acl_db == NULL) { #if defined(ENOTSUP) errno = ENOTSUP; #else @@ -77,14 +76,12 @@ static bool acl_tdb_init(struct db_context **pp_db) Lower ref count and close acl_db if zero. ***/ -static void free_acl_tdb_data(void **pptr) +static void disconnect_acl_tdb(struct vfs_handle_struct *handle) { - struct db_context **pp_db = (struct db_context **)pptr; - + SMB_VFS_NEXT_DISCONNECT(handle); ref_count--; if (ref_count == 0) { - TALLOC_FREE(*pp_db); - acl_db = NULL; + TALLOC_FREE(acl_db); } } @@ -146,13 +143,10 @@ static NTSTATUS get_acl_blob(TALLOC_CTX *ctx, uint8 id_buf[16]; TDB_DATA data; struct file_id id; - struct db_context *db; + struct db_context *db = acl_db; NTSTATUS status = NT_STATUS_OK; SMB_STRUCT_STAT sbuf; - SMB_VFS_HANDLE_GET_DATA(handle, db, struct db_context, - return NT_STATUS_INTERNAL_DB_CORRUPTION); - ZERO_STRUCT(sbuf); if (fsp) { @@ -204,16 +198,13 @@ static NTSTATUS store_acl_blob_fsp(vfs_handle_struct *handle, uint8 id_buf[16]; struct file_id id; TDB_DATA data; - struct db_context *db; + struct db_context *db = acl_db; struct db_record *rec; NTSTATUS status; DEBUG(10,("store_acl_blob_fsp: storing blob length %u on file %s\n", (unsigned int)pblob->length, fsp_str_dbg(fsp))); - SMB_VFS_HANDLE_GET_DATA(handle, db, struct db_context, - return NT_STATUS_INTERNAL_DB_CORRUPTION); - status = vfs_stat_fsp(fsp); if (!NT_STATUS_IS_OK(status)) { return status; @@ -243,12 +234,10 @@ static int unlink_acl_tdb(vfs_handle_struct *handle, const struct smb_filename *smb_fname) { struct smb_filename *smb_fname_tmp = NULL; - struct db_context *db; + struct db_context *db = acl_db; NTSTATUS status; int ret = -1; - SMB_VFS_HANDLE_GET_DATA(handle, db, struct db_context, return -1); - status = copy_smb_filename(talloc_tos(), smb_fname, &smb_fname_tmp); if (!NT_STATUS_IS_OK(status)) { errno = map_errno_from_nt_status(status); @@ -284,11 +273,9 @@ static int rmdir_acl_tdb(vfs_handle_struct *handle, const char *path) { SMB_STRUCT_STAT sbuf; - struct db_context *db; + struct db_context *db = acl_db; int ret = -1; - SMB_VFS_HANDLE_GET_DATA(handle, db, struct db_context, return -1); - if (lp_posix_pathnames()) { ret = vfs_lstat_smb_fname(handle->conn, path, &sbuf); } else { @@ -316,21 +303,17 @@ static int connect_acl_tdb(struct vfs_handle_struct *handle, const char *service, const char *user) { - struct db_context *db; int ret = SMB_VFS_NEXT_CONNECT(handle, service, user); if (ret < 0) { return ret; } - if (!acl_tdb_init(&db)) { + if (!acl_tdb_init()) { SMB_VFS_NEXT_DISCONNECT(handle); return -1; } - SMB_VFS_HANDLE_SET_DATA(handle, db, free_acl_tdb_data, - struct db_context, return -1); - /* Ensure we have "inherit acls = yes" if we're * using this module. */ DEBUG(2,("connect_acl_tdb: setting 'inherit acls = true' " @@ -352,11 +335,9 @@ static int sys_acl_set_file_tdb(vfs_handle_struct *handle,
Re: [Samba] Migration from 3.0.23d to 3.4.5 failed
Sorry for the double mail. I forgot to say that I watched the code, as I thought the module can be the problem. But everything seems to be done properly. In log level 5, the pdbedit tool displays the queries and they seems fine. Le 24/03/2010 17:39, Bastien Semene a écrit : Yes I'm using this one. Actually the module has been upgraded for 3.4 (and 3.5) in February 2010 : http://sourceforge.net/projects/pdbsql/files/ I plan to switch to another backend at short term, but I can't do it now as all my services uses this backend currently, and I need to upgrade Samba service to integrate Windows 7 workstations. Anyway I don't think that it is the source of the problem according to the tests I made with pdbedit in my previous mail (but I'm a newbie in Samba services). If you can point me a test to confirm (or unconfirm) that this module is the problem, I'll be glad. Le 24/03/2010 17:21, Volker Lendecke a écrit : On Wed, Mar 24, 2010 at 04:07:52PM +0100, Bastien Semene wrote: The two servers uses the same backend DB (a MySQL service). Smbd logs confirms it can connect correctly to the DB. You're using the mysql passdb backend with 3.4.5? Support for that has been dropped from official Samba a while ago. You're using a specially crafted module from http://pdbsql.sourceforge.net/pdb_mysql.html ? Volker -- Bastien Semene Administrateur Réseau& Système Cyanide Studio - FRANCE -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] call trace when using acl_tdb module
On Wed, Mar 24, 2010 at 01:58:45PM +0100, Adrian Berlin wrote: > Hello, > > When I am using module acl_tdb and I am trying to get access to directory I > am getting call trace in log.ip Known bug : https://bugzilla.samba.org/show_bug.cgi?id=7283 I'm testing my patch for this as we email :-). Jeremy -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Migration from 3.0.23d to 3.4.5 failed
Yes I'm using this one. Actually the module has been upgraded for 3.4 (and 3.5) in February 2010 : http://sourceforge.net/projects/pdbsql/files/ I plan to switch to another backend at short term, but I can't do it now as all my services uses this backend currently, and I need to upgrade Samba service to integrate Windows 7 workstations. Anyway I don't think that it is the source of the problem according to the tests I made with pdbedit in my previous mail (but I'm a newbie in Samba services). If you can point me a test to confirm (or unconfirm) that this module is the problem, I'll be glad. Le 24/03/2010 17:21, Volker Lendecke a écrit : On Wed, Mar 24, 2010 at 04:07:52PM +0100, Bastien Semene wrote: The two servers uses the same backend DB (a MySQL service). Smbd logs confirms it can connect correctly to the DB. You're using the mysql passdb backend with 3.4.5? Support for that has been dropped from official Samba a while ago. You're using a specially crafted module from http://pdbsql.sourceforge.net/pdb_mysql.html ? Volker -- Bastien Semene Administrateur Réseau& Système Cyanide Studio - FRANCE -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Migration from 3.0.23d to 3.4.5 failed
On Wed, Mar 24, 2010 at 04:07:52PM +0100, Bastien Semene wrote: > The two servers uses the same backend DB (a MySQL service). > Smbd logs confirms it can connect correctly to the DB. You're using the mysql passdb backend with 3.4.5? Support for that has been dropped from official Samba a while ago. You're using a specially crafted module from http://pdbsql.sourceforge.net/pdb_mysql.html ? Volker signature.asc Description: Digital signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Winbind home directory not resolving properly
Hi all: I've got an issue on one of my winbind-configured systems. I've got it configured per instructions found on one of ubuntu's forum sites. I've configured two 9.10 systems, one works perfectly. I've copied most of the files over to the non-working system; they are configured identically as far as I can tell. On both systems, wbinfo -u/-g, getent passwd, and ssh login work fine. On the working one, I can also log in via gdm/gnome and use ~adusername in paths in the terminal. In the non-working one, the ~adusername is "unknown" (although ~localuser works fine), and gnome sessions blow up in a big way (dbus errors, which I think are related to the first problem). I'm relatively familiar with the system authentication and account system, and as getent passwd shows the full, proper password file (compete with valid user homedirectories that I can cut and paste and have work fine), I don't understand why the ~aduser expansions are not working This problem has now been kicking my butt for over a week now, and I'm starting to catch some serious flack for it. Any help would be appreciated! Any ideas? --Jim -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] user with privileges to add machines in domain
Rafael, SeMachineAccountPrivilege: http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/rights.html#id2608460 Dale On 03/24/2010 6:41 AM, Rafael de Oliveira Costa wrote: Hi, Here i have a PDC with LDAP running on SuSe Linux Enterprise Server 11 and i want to create an user with privileges just to add windows machines in the domain. any ideas ? Atenciosamente, Rafael de Oliveira Costa "The first step to getting the things you want out of life is this : decide what you want" Ben Stein -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] symlinks and Samba 3.4.7
>> Hi, >> >> we upgraded one of our Solaris 10 (SPARC) machines from Samba 3.0.28 >> to 3.4.7. Symlinks are used within some shares that point to data >> outside the original share path. >> >> While this was no problem with Samba 3.0.28 access is denied with 3.4.7. >> I thought that 'wide links = Yes' and 'follow symlinks = Yes' in >> smb.conf should fix that but samba still gives me no access to the symlinked >> data. > >https://bugzilla.samba.org/show_bug.cgi?id=7104 Thanks for the link. I solved my problem using lofs mounts within /etc/vfstab, which give me a simple way to represent different fileystems within a single share path. best regards Markus -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Migration from 3.0.23d to 3.4.5 failed
Hi, I have a problem migrating Samba, users can't be authenticated. It always says "user unknown or incorrect password". I have low skills on Samba so I followed the official HOW-TO install step-by-step, but now I'm stucked. Everything works well on the (old) 3.0.23d Samba server. I can't add a machine to the workgroup using the admin account (administrator). I migrated the smb.conf file and the persistent *.tdb files. When I do a "tdbedit -Lv administrateur" (the administrator), I can see the details of the user on both servers. The two servers uses the same backend DB (a MySQL service). Smbd logs confirms it can connect correctly to the DB. testparm runs are successfull. When I try to connect to Samba with "smbclient -U administrateur -L PDC" : setup session failed: NT_STATUS_LOGON_FAILURE As I saw while searching the source problem on the web, root account exists. I thought this was a problem in the authentication mechanism. So I tried using "encrypt passwords = Yes" unsuccessfully. If anyone can point me a direction, this can be helpfull, Thanks Here is a dump of testparm : [global] dos charset = 850 unix charset = ISO8859-1 workgroup = CYANIDE netbios name = PDC server string = New Primary Domain Controller interfaces = 10.1.5.11 passdb backend = mysql:foo passwd program = /usr/local/bin/php -q /root/CyaManager/samba/update_mysql_password.php %u passwd chat = "password:" %n\n "ok\n" passwd chat debug = Yes unix password sync = Yes log level = 3 log file = /var/log/samba34/log.%m load printers = No domain logons = Yes os level = 255 preferred master = Yes domain master = Yes dns proxy = No wins support = Yes foo:unknown 6 column = nt_unknown_6 foo:logon count column = nt_logon_count foo:bad password count column = nt_bad_password_count foo:logon hours column = nt_logon_hours foo:hours len column = nt_hours_len foo:logon divs column = nt_logon_divs foo:acct ctrl column = nt_acct_ctrl foo:plain pass column = NULL foo:nt pass column = nt_pw foo:lanman pass column = nt_lm_pw foo:group sid column = nt_group_sid foo:user sid column = nt_user_sid foo:munged dial column = nt_munged_dial foo:unknown string column = nt_unknown_str foo:workstations column = nt_workstations foo:acct desc column = nt_acct_desc foo:profile path column = nt_profile_path foo:logon script column = nt_logon_script foo:dir drive column = nt_dir_drive foo:home dir column = nt_homedir foo:fullname column = gecos foo:nt username column = nt_username foo:domain column = nt_domain foo:username column = username foo:pass history = NULL foo:pass must change time column = nt_pass_must_change_time foo:pass can change time column = nt_pass_can_change_time foo:pass last set time column = nt_pass_last_set_time foo:kickoff time column = nt_kickoff_time foo:logoff time column = nt_logoff_time foo:logon time column = nt_logon_time foo:table = user foo:mysql database = cyanide foo:mysql password = * foo:mysql user = * foo:mysql host = 10.1.5.12 foo:host = 10.1.5.12 admin users = administrateur [test] comment = Test Directory path = /var/samba read only = No force create mode = 0770 force directory mode = 0770 guest ok = Yes [netlogon] path = /var/samba/netlogon browseable = No browsable = No Here is a dump of pdbedit -Lv administrateur : No builtin backend found, trying to load plugin Module '/usr/local/lib/samba34/pdb/mysql.so' loaded Connecting to database server, host: 10.1.5.12, user: root, database: cyanide, port: 3306 Unix username:administrateur NT username: administrateur Account Flags:[U ] User SID: S-1-5-21-720590779-4203916125-4014520812-2419 Primary Group SID:S-1-5-21-720590779-4203916125-4014520812-513 Full Name:Administrateur Home Directory: \\pdb\administrateur HomeDir Drive: Logon Script: netlogon.bat Profile Path: Domain: CYANIDE Account desc: Workstations: Munged dial: Logon time: 0 Logoff time: 0 Kickoff time: 0 Password last set:Mon, 22 Mar 2010 16:43:36 CET Password can change: Mon, 22 Mar 2010 16:43:36 CET Password must change: never Last bad password : 0 Bad password count : 0 Logon hours : FF -- Bastien Semene Administrateur Réseau& Système Cyanide Studio - FRANCE -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] call trace when using acl_tdb module
Hi Adrian, On Wed, Mar 24, 2010 at 01:58:45PM +0100, Adrian Berlin wrote: > When I am using module acl_tdb and I am trying to get access to directory I > am getting call trace in log.ip might be related to https://bugzilla.samba.org/show_bug.cgi?id=7283. Cheers, Karolin -- Samba http://www.samba.org SerNet http://www.sernet.de sambaXP http://www.sambaxp.org pgpfiyWPl9cpJ.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] 3.5 in Debian Squeeze?
On Wed, Mar 24, 2010 at 12:21 AM, Christian PERRIER wrote: > Quoting Robert LeBlanc (rob...@leblancnet.us): > > What is the milestone that will get 3.5 into Debian Squeeze? > > > We're still in the process of deciding whether we'll go for 3.4.* or > 3.5 for squeeze. > > There are arguments for both: > > - 3.4.* releases are now rock solid and the risk of "important" issues > to be discovered that would make these versions unsuitable for > production servers is not very high while 3.5.* are fairly young as of > now. > > - Strong support by the Samba Team for 3.4.* releases will be > decreasing rapidly in the upcoming months and it might become hard to > make this release alive for the planned two years of lifetime (at > minimum) that squeeze will have after it's released. There are also > several improvements bringed by 3.5 which our users would benefit from. > > > My own stance is to go for 3.5 and, as one of the maintainers, I'll > push for it. However, I want to ask to the Debian release team about > their feeling for pushing point releases (3.5.2, 3.5.3, etc.) in > squeeze during the time squeeze is frozenIt would help a lot if > they agree that we can do this even late in the release process but > you can imagine that they can't say "yes" to all such > requests...otherwise the freeze is no longer a freeze. > > A key point is having my co-maintainer (Steve Langasek) advice about > this. Other co-maintainers have agreed for having 3.5 in squeeze > (particularly Matthieu Parent, who maintains ctdb) > > Thank you for taking the time, this is very helpful. I fully understand both sides of the argument as I take both positions on a regular basis. I do like 3.4 as it has worked quite well for us, as we move to Windows 7, we have uncovered problems which we hope 3.5 will resolve. Winbind has also given us problems in 3.4, and with the large rework in 3.5 we hope it's solved a lot of those pain points. I haven't heard when the freeze will be for Squeeze, but if it would be helpful, I can try to carve out some time to pull 3.5 from experimental on a test box and try it in our environment for feedback. Thanks, Robert LeBlanc Life Sciences & Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] ?: winbind dont start
On Wed, Mar 24, 2010 at 4:12 AM, Mistofeles wrote: > I have two similar PC with similar Ubuntu 9.10 srv installation. > In the beginning both authenticated fine against our AD with Samba. > I changed the NIC to another PC and moved it to another subdomain. > Old IP changed from XXX.XXX.104.187 to XXX.XXX.41.32. > The other PC works OK. > SSH works in both. So the network is up. > > kinit myn...@mydomain > - OK > klist > - OK > /etc/init.d/samba restart > - OK > net ads join -U myname > - OK > > STEP 1: > > /etc/init.d/winbind start > - The system stops here. > If I open another SSH window, this is the last lines in > /var/log/samba/log.winbind: > > [2010/03/23 15:57:18, 2] param/loadparm.c:7736(do_section) > Processing section "[WWW_BCK_oldest]" > [2010/03/23 15:57:18, 3] param/loadparm.c:6190(lp_add_ipc) > adding IPC service > > STEP 2: > > I apt-get purge all of these: > samba, samba-common, samba-common-bin, smbfs, winbind > - OK > > Then I apt-get install samba > - OK > > apt-get install winbind > - Everything freezes in the middle of the installation, while restarting > winbind. > > Please tell me where I can find help. Google, RTFM and FAQ have not given > any help so far. > > You didn't mention if you updated your smb.conf and krb5.conf file (if necessary) to reflect the new subdomain (unless by subdomain you don't mean an Active directory subdomain and you are talking about a subnet). If you have, then I would try a net ads leave and then a net ads join again. Robert LeBlanc Life Sciences & Undergraduate Education Computer Support Brigham Young University -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] smbstatus shows no hostnames (3.5.1)
Hi Volker, while debugging I observed something 'new' the name resolution works fine on the samba server as long as I browse the server 'directly' on the windows host (\\printserver) It is not working when I look into a printerqueue etc on the windows host, this goes along whith what I see in my working environment, a couple of hostnames get resolved but very few. So you can find to debug logfiles here, one with working name resolution and one without working name resolution: https://www.desy.de/~chbeyer/public/smbd_log_d10_working.tar https://www.desy.de/~chbeyer/public/smbd_log_d10.tar Thansk for the support ! cheers christoph On Wed, 24 Mar 2010, Volker Lendecke wrote: On Wed, Mar 24, 2010 at 12:16:27PM +0100, christoph.be...@desy.de wrote: oc course I have I even did put thte one in question in '/etc/hosts' but with no result :( Please send a debug level 10 log of smbd when such a client connects. Volker best regards ~christoph -- /* Christoph Beyer | Office: Building 2b / 23 *\ * DESY|Phone: 040-8998-2317* * - IT - | Fax: 040-8998-4060* \* 22603 Hamburg | http://www.desy.de */ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] call trace when using acl_tdb module
Hello, When I am using module acl_tdb and I am trying to get access to directory I am getting call trace in log.ip Best regards! /Adrian Berlin === [2010/03/24 13:54:05.295901, 0] lib/fault.c:47(fault_report) INTERNAL ERROR: Signal 11 in pid 15556 (3.5.1) Please read the Trouble-Shooting section of the Samba3-HOWTO [2010/03/24 13:54:05.295940, 0] lib/fault.c:49(fault_report) From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf [2010/03/24 13:54:05.295978, 0] lib/fault.c:50(fault_report) === [2010/03/24 13:54:05.296013, 0] lib/util.c:1465(smb_panic) PANIC (pid 15556): internal error [2010/03/24 13:54:05.297321, 0] lib/util.c:1569(log_stack_trace) BACKTRACE: 25 stack frames: #0 /usr/sbin/smbd(log_stack_trace+0x2d) [0xf72133a0] #1 /usr/sbin/smbd(smb_panic+0x78) [0xf72134cc] #2 /usr/sbin/smbd [0xf7202bcc] #3 [0xe400] #4 /usr/local/samba/lib/vfs/acl_tdb.so [0xf67cdc4d] #5 /usr/local/samba/lib/vfs/acl_tdb.so [0xf67cf085] #6 /usr/local/samba/lib/vfs/acl_tdb.so [0xf67cf801] #7 /usr/sbin/smbd(smb_vfs_call_opendir+0x39) [0xf6fc1ef5] #8 /usr/sbin/smbd(OpenDir+0xce) [0xf6f69fb5] #9 /usr/sbin/smbd(dptr_create+0x14b) [0xf6f6bd03] #10 /usr/sbin/smbd [0xf6faa2ed] #11 /usr/sbin/smbd [0xf6fadbe6] #12 /usr/sbin/smbd(reply_trans2+0x683) [0xf6fafa72] #13 /usr/sbin/smbd [0xf6fd3e32] #14 /usr/sbin/smbd [0xf6fd6c4e] #15 /usr/sbin/smbd [0xf6fd7501] #16 /usr/sbin/smbd(run_events+0x16f) [0xf722302a] #17 /usr/sbin/smbd(smbd_process+0xa01) [0xf6fd64c3] #18 /usr/sbin/smbd [0xf759dbcb] #19 /usr/sbin/smbd(run_events+0x16f) [0xf722302a] #20 /usr/sbin/smbd [0xf72232b8] #21 /usr/sbin/smbd(_tevent_loop_once+0x9b) [0xf7223808] #22 /usr/sbin/smbd(main+0x114a) [0xf759d8d2] #23 /lib/tls/libc.so.6(__libc_start_main+0xc8) [0xf6c1aea8] #24 /usr/sbin/smbd [0xf6f545f1] [2010/03/24 13:54:05.297596, 0] lib/fault.c:326(dump_core) dumping core in /usr/local/samba/var/cores/smbd [2010/03/24 13:54:05.325161, 1] smbd/service.c:1069(make_connection_snum) 192.168.248.171 (192.168.248.171) connect to service ceneo initially as user RESEARCH2+user1 (uid=104, gid=112) (pid 15557) [2010/03/24 13:54:07.045131, 1] smbd/service.c:1069(make_connection_snum) 192.168.248.171 (192.168.248.171) connect to service ceneo2 initially as user RESEARCH2+user1 (uid=104, gid=112) (pid 15557) [2010/03/24 13:54:22.667651, 1] smbd/service.c:1250(close_cnum) 192.168.248.171 (192.168.248.171) closed connection to service ceneo2 bash-3.1# -- You Rock! Your E-Mail Should Too! Signup Now at Rock.com and get 250MB of Storage! http://webmail.rock.com/signup/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] ANNOUNCE: cifs-utils release 4.1 available for download
On Tue, 23 Mar 2010 23:11:17 -0700 Steve Langasek wrote: > Hi Jeff, > > On Tue, Mar 23, 2010 at 10:10:44AM -0400, Jeff Layton wrote: > > This release is primarily a number of small bugfixes and cleanups. I > > wanted to do a release with those prior to the coming overhaul of > > mount.cifs to allow it to more safely be installed setuid root. > > Could you please provide detached GPG signatures for cifs-utils on the > download site, so we have some cryptographic assurance of the integrity of > the tarballs as we do for the samba tarballs? > > Cheers, Good point. I'm working now on getting a "cifs-utils" mail alias set up that I can stuff into the key. Once I do so, I'll go back and sign all of the tarballs and make sure they're signed on release in the future. Thanks, -- Jeff Layton signature.asc Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] user with privileges to add machines in domain
Hi, Here i have a PDC with LDAP running on SuSe Linux Enterprise Server 11 and i want to create an user with privileges just to add windows machines in the domain. any ideas ? Atenciosamente, Rafael de Oliveira Costa "The first step to getting the things you want out of life is this : decide what you want" Ben Stein -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.4 Windows 95/98 logon problem
Anybody else having the same problem? Better yet any solution? I know Windows 95 clients are not that common anymore and that what we will try to do as well. But, it is sometimes hard because of some legacy hardware requirements. From: Selcuk Ozturk To: samba@lists.samba.org Sent: Mon, March 22, 2010 7:05:57 AM Subject: Re: [Samba] Samba 3.4 Windows 95/98 logon problem The domain controller is an old NT4, not the samba server. The password there works fine because the machines can connect to the PDC's shares no problem. The key here is the "security = domain" setting. When I change it to "security = server" it works fine. Both settings should be essentially same except "domain" is less demanding on the PDC and more fault tolerant. Under both settings, the NT4 PDC is asked to validate the password. But, the first one does not work while the second does. Selcuk From: Pascal Valois To: samba@lists.samba.org Sent: Sun, March 21, 2010 1:37:10 PM Subject: Re: [Samba] Samba 3.4 Windows 95/98 logon problem try to reset the password for the users using w95/98. it usually works. Le 21/03/2010 13:42, selcuko a écrit : > Hi, > > we have just upgraded one of our very old Linux/Samba servers to version > 3.4.2. After the upgrade, the Windows 95/98 clients cannot login to the > server anymore. In the log I see 'NT_STATUS_ACCESS_DENIED' messages for > these clients. > > The samba server is setup to use an NT4 PDC as the password server. The > security = domain. The Windows 2000 and up clients don't have any problems. > But, the Win 9x cannot login. > > We also have other older samba servers. Various versions up till 3.0.20. The > win 9x machines don't have any problems logging into those servers. > -- Pascal Valois Service Informatique Pole Universitaire Léonard de Vinci -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] smbstatus shows no hostnames (3.5.1)
On Wed, Mar 24, 2010 at 12:16:27PM +0100, christoph.be...@desy.de wrote: > oc course I have I even did put thte one in question in '/etc/hosts' but > with no result :( Please send a debug level 10 log of smbd when such a client connects. Volker -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] smbstatus shows no hostnames (3.5.1)
Hi, oc course I have I even did put thte one in question in '/etc/hosts' but with no result :( [printserver] # grep 131.169.214.117 /etc/hosts 131.169.214.117 zitpcx16179.desy.de zitpcx16179 [printserver] # nslookup zitpcx16179 Server: 131.169.40.200 Address:131.169.40.200#53 Name: zitpcx16179.desy.de Address: 131.169.214.117 [printserver] # nslookup 131.169.214.117 Server: 131.169.40.200 Address:131.169.40.200#53 117.214.169.131.in-addr.arpaname = zitpcx16179.desy.de. [printserver] /global/spool/samba_logs # grep -i dns /etc/nsswitch.conf hosts: cluster files dns cheers christoph On Wed, 24 Mar 2010, Volker Lendecke wrote: On Wed, Mar 24, 2010 at 12:02:47PM +0100, Christoph Beyer wrote: by the way nmblookup looks fine, at the same time: [printserver] /global/spool/samba_logs # nmblookup -T 131.169.214.117 querying 131.169.214.117 on 131.169.56.255 zitpcx16179.desy.de, 131.169.214.117 131.169.214.117<00> You don't have those hosts in DNS? Volker best regards ~christoph -- /* Christoph Beyer | Office: Building 2b / 23 *\ * DESY|Phone: 040-8998-2317* * - IT - | Fax: 040-8998-4060* \* 22603 Hamburg | http://www.desy.de */ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] smbstatus shows no hostnames (3.5.1)
On Wed, Mar 24, 2010 at 12:02:47PM +0100, Christoph Beyer wrote: > by the way nmblookup looks fine, at the same time: > > [printserver] /global/spool/samba_logs # nmblookup -T 131.169.214.117 > querying 131.169.214.117 on 131.169.56.255 > zitpcx16179.desy.de, 131.169.214.117 131.169.214.117<00> > > You don't have those hosts in DNS? Volker -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] smbstatus shows no hostnames (3.5.1)
Oh, by the way nmblookup looks fine, at the same time: [printserver] /global/spool/samba_logs # nmblookup -T 131.169.214.117 querying 131.169.214.117 on 131.169.56.255 zitpcx16179.desy.de, 131.169.214.117 131.169.214.117<00> Come on someone must have an opinion on this ? cheers christoph On Mon, 22 Mar 2010, christoph.be...@desy.de wrote: Hi, I changed the samba version from 3.0.x to 3.5.1 and from that moment something has changed with the nameresolving. The smbstatus mainly sjopws IP adresses now: [printserver] # smbstatus Samba version 3.5.1 PID Username Group Machine --- 14944it131.169.214.117 (131.169.214.117) 14944it131.169.214.117 (131.169.214.117) Service pid machine Connected at --- IPC$ 14944 131.169.214.117 Mon Mar 22 11:43:05 2010 IPC$ 14944 131.169.214.117 Mon Mar 22 11:41:45 2010 I fiddled around with all the usual options with no success, DNS reverse lookup works fine: [printserver] # nslookup 131.169.214.117 Server: 131.169.40.200 Address:131.169.40.200#53 117.214.169.131.in-addr.arpaname = zitpcx16179.desy.de. When I go back to the 3.0.x version name resolution works fine again, what am I missing ??? Any hints someone ? cheers ~ christoph -- /* Christoph Beyer | Office: Building 2b / 23 *\ * DESY|Phone: 040-8998-2317* * - IT - | Fax: 040-8998-4060* \* 22603 Hamburg | http://www.desy.de */ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba best regards ~christoph -- /* Christoph Beyer | Office: Building 2b / 23 *\ * DESY|Phone: 040-8998-2317* * - IT - | Fax: 040-8998-4060* \* 22603 Hamburg | http://www.desy.de */ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] ?: winbind dont start
I have two similar PC with similar Ubuntu 9.10 srv installation. In the beginning both authenticated fine against our AD with Samba. I changed the NIC to another PC and moved it to another subdomain. Old IP changed from XXX.XXX.104.187 to XXX.XXX.41.32. The other PC works OK. SSH works in both. So the network is up. kinit myn...@mydomain - OK klist - OK /etc/init.d/samba restart - OK net ads join -U myname - OK STEP 1: /etc/init.d/winbind start - The system stops here. If I open another SSH window, this is the last lines in /var/log/samba/log.winbind: [2010/03/23 15:57:18, 2] param/loadparm.c:7736(do_section) Processing section "[WWW_BCK_oldest]" [2010/03/23 15:57:18, 3] param/loadparm.c:6190(lp_add_ipc) adding IPC service STEP 2: I apt-get purge all of these: samba, samba-common, samba-common-bin, smbfs, winbind - OK Then I apt-get install samba - OK apt-get install winbind - Everything freezes in the middle of the installation, while restarting winbind. Please tell me where I can find help. Google, RTFM and FAQ have not given any help so far. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Security Releases for Samba 3.2
Hi Alex, On Tue, Mar 23, 2010 at 05:57:48PM -0600, Alex wrote: > On the Samba3 Release Planning wiki page, Samba 3.2 is designated as > "discontinued". There is a statement: "As this strategy is quite new, we are > currently still providing security releases for 3.2" > Anyone know how long 3.2 will continue to receive security releases? > Thank you.Alex > http://wiki.samba.org/index.php/Samba3_Release_Planning > Samba 3.2 is discontinued and there won't be any security releases for this series. I removed the statement you mentioned. This was just an oversight. Sorry! Cheers, Karolin -- Samba http://www.samba.org SerNet http://www.sernet.de sambaXP http://www.sambaxp.org pgp3nBLiY3eje.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] PDC migration from suse 8.2 - samba 2.2.7 ldap - to latest versions on ubuntu 8.04
Dne 23.3.2010 15:48, Giorgio napsal(a): > Hello, > Hopefully I'm in the right place asking for help :-) > > I need to move from an old physical Suse 8.2 - samba 2.2.7 + ldap - to > latest samba versions, I would like to use an ubuntu 8.04 virtual machine. > > The domain is in production on the physical server, to be dismissed after > migration. It is also the file server!!! so /DATA/ has all shared and > permission driven file access.. > > I was following https://help.ubuntu.com/8.10/serverguide/C/samba-dc.html but > I realize I am in a different scenario... > > Production so no errors are admitted :-(, migration to new os and versions.. > all at once? > > I have a dump of the physical server (dd sda mbr and single partitions :) > plus an rsync with all permissions daily backup, just to be safe ;) > > > What would you guru's suggest as a strategy? > > Can I create a new server and add it as secondary domain controller and then > once the replica is up? I'd feel quite comfortable with this method. > > BTW I need a new version of samba as they have already bought Windows 7 > boxes (without asking if they were supported arrgh). > > Thanks to all of you who read or answered :-) > > Gio Hi. Ubuntu 8.10 is bad idea if you will be connecting Windows 7 into domain, because of old Samba version. Samba 3.4.x or 3.5.x is recommended for Win7. Wait for Ubuntu 10.04 LTS (next month) if you want Ubuntu. -- Vladimir Psenicka -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] ham,Re: Fix bugs with the full Windows ACL support
Hi! :) Thank You for your answer. testparm -sv | grep inherit inherit permissions = Yes inherit acls = Yes inherit owner = No map acl inherit = Yes Best regards! > > > On 03/23/2010 3:52 AM, Adrian Berlin wrote: > > Sounds good :-) > > > > Ok, I think there is a bug in inheritance. If I create directory > > with two users (first with full acls, second user with reading > > privileges only) and I turn on inheritance in first subdirectory > > everything is working but in next subdirectory2 > > (/directory/subdirectory1/subdirectory2) each user have full > > access. I think that subdirectory2 should inherit privileges from > > upper dir. > > > > Could you help me? :-) > > Best regards > > /Adrian Berlin > > > Have you looked into the inherit permissions/inherit acls parameters? > testparm -sv | grep inherit > > Dale > -- You Rock! Your E-Mail Should Too! Signup Now at Rock.com and get 250MB of Storage! http://webmail.rock.com/signup/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] 3.5 in Debian Squeeze?
Quoting Robert LeBlanc (rob...@leblancnet.us): > What is the milestone that will get 3.5 into Debian Squeeze? We're still in the process of deciding whether we'll go for 3.4.* or 3.5 for squeeze. There are arguments for both: - 3.4.* releases are now rock solid and the risk of "important" issues to be discovered that would make these versions unsuitable for production servers is not very high while 3.5.* are fairly young as of now. - Strong support by the Samba Team for 3.4.* releases will be decreasing rapidly in the upcoming months and it might become hard to make this release alive for the planned two years of lifetime (at minimum) that squeeze will have after it's released. There are also several improvements bringed by 3.5 which our users would benefit from. My own stance is to go for 3.5 and, as one of the maintainers, I'll push for it. However, I want to ask to the Debian release team about their feeling for pushing point releases (3.5.2, 3.5.3, etc.) in squeeze during the time squeeze is frozenIt would help a lot if they agree that we can do this even late in the release process but you can imagine that they can't say "yes" to all such requests...otherwise the freeze is no longer a freeze. A key point is having my co-maintainer (Steve Langasek) advice about this. Other co-maintainers have agreed for having 3.5 in squeeze (particularly Matthieu Parent, who maintains ctdb) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba