Re: [Samba] [samba] DNS update failed!

2010-07-28 Thread k.maksimov

Anton wrote:

On 28 July 2010 01:45, k.maksimov k.maksi...@butb.by wrote:
  

I have two networks: 192.168.1.0 with netmask 255.255.255.0 and 172.16.0.0
with netmask 255.255.254.0, when I join in domain in first network hostname
registered successfully, but in second network:

sudo net ads join -U admin
Enter admin's password:
Using short domain name -- BUTB
Joined 'TH-2-011' to realm 'butb.by'
DNS update failed!



As far as I can tell (I'm not entirely certain though)  this is an
Active Directory / Windows Server configuration issue around loosening
permissions enough for the DHCP service to update the DNS records.

I don't know exactly what settings need to be configured though, as I
didn't manage to get it working either. In the end I decided to keep
the standard security and just use static IPs and DNS records for
winbind machines.

  
I'm use static IP and I haven't DHCP. and this problem not an AD: 
Windows machines successfully update DNS.


also I have ~200 machines and I can't add every DNS record manually.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Multiple Workgroups and Subnets

2010-07-28 Thread Daniel Müller
Example
On Server1

[global]
workgroup = GROUP1
netbios name = GROUP1_SRV
domain master = yes
local master = yes
preferred master = yes
os level = 65
smb ports = 139
dns proxy = no
socket options = TCP_NODELAY SO_RCVBUF=8192 
 SO_SNDBUF=8192
wins support = yes
name resolve order = wins lmhosts bcast host
interfaces = lo eth0 192.168.10.254/24 127.0.0.1/8
bind interfaces only = yes
remote announce = 192.168.20.254/GROUP1
remote browse sync = 192.168.20.254
hosts allow = 127. 192.168.10. 192.168.20.


On Server 2


[global]
workgroup = GROUP2
netbios name = GROUP2_SRV
domain master = yes
local master = yes
preferred master = yes
os level = 65
smb ports = 139
dns proxy = no
socket options = TCP_NODELAY SO_RCVBUF=8192 
 SO_SNDBUF=8192
wins support = no
-   Wins server= IPOFTHESERVER1   --- 
name resolve order = wins lmhosts bcast host
interfaces = lo eth0 192.168.10.254/24 127.0.0.1/8
bind interfaces only = yes
remote announce = 192.168.10.254/GROUP2
remote browse sync = 192.168.10.254
hosts allow = 127. 192.168.10. 192.168.20.


---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---
-Ursprüngliche Nachricht-
Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im
Auftrag von t...@tms3.com
Gesendet: Dienstag, 27. Juli 2010 23:27
An: Tawanda Kavayi
Cc: samba@lists.samba.org
Betreff: Re: [Samba] Multiple Workgroups and Subnets

Short answer:  Use 1 WINS server.




 --- Original message ---
 Subject: [Samba] Multiple Workgroups and Subnets
 From: Tawanda Kavayi tawa...@earth.co.zw
 To: samba@lists.samba.org
 Date: Tuesday, 27/07/2010  2:01 PM

 Hi,

 I am configuring a network with two subnets with a different workgroup
 in each subnet. My aim is to have users being able to view and access
 shares on both workgroups. I have a Samba server in each
 subnet/workgroup, configured as both the domain and local master for
 each workgroup. Each server is also the WINS server for its subnet. 
 The
 setup is like this:

 Subnet1:
 network - 192.168.10.0/24
 server IP - 192.168.10.254
 workgroup - Group1

 Subnet2:
 network - 192.168.20.0/24
 server IP - 192.168.20.254
 workgroup - Group2

 The two servers are configured identically, except for the information
 above, so the smb.conf for the Group1 server looks like this:

 [global]
workgroup = GROUP1
netbios name = GROUP1_SRV
domain master = yes
local master = yes
preferred master = yes
os level = 65
smb ports = 139
dns proxy = no
socket options = TCP_NODELAY SO_RCVBUF=8192 
 SO_SNDBUF=8192
wins support = yes
name resolve order = wins lmhosts bcast host
interfaces = lo eth0 192.168.10.254/24 127.0.0.1/8
bind interfaces only = yes
remote announce = 192.168.20.254/GROUP1
remote browse sync = 192.168.20.254
hosts allow = 127. 192.168.10. 192.168.20.

 The problem is that a machine in Group1 can see all the machines in 
 it's
 workgoup, plus the network for Group2 appears in network neighborhood,
 but the machines and shares in Group2 do not.

 To troubleshoot, I ran smbtree with debug level 5. What I picked out
 from all the output was:

 Cannot find master browser for workgroup GROUP2

 How can I resolve this?


 Tawanda


 --
 To unsubscribe from this list go to the following URL and read the
 instructions: https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Multiple Workgroups and Subnets

2010-07-28 Thread Tawanda Kavayi
OK, but what of the client PC's in Group2. Do I assign them the Group1 
server as their WINS server, or do they now operate without WINS?



Tawanda

Daniel Müller wrote:

Example
On Server1

[global]
  

   workgroup = GROUP1
   netbios name = GROUP1_SRV
   domain master = yes
   local master = yes
   preferred master = yes
   os level = 65
   smb ports = 139
   dns proxy = no
   socket options = TCP_NODELAY SO_RCVBUF=8192 
SO_SNDBUF=8192

   wins support = yes
   name resolve order = wins lmhosts bcast host
   interfaces = lo eth0 192.168.10.254/24 127.0.0.1/8
   bind interfaces only = yes
   remote announce = 192.168.20.254/GROUP1
   remote browse sync = 192.168.20.254
   hosts allow = 127. 192.168.10. 192.168.20.




On Server 2


[global]
  

   workgroup = GROUP2
   netbios name = GROUP2_SRV
   domain master = yes
   local master = yes
   preferred master = yes
   os level = 65
   smb ports = 139
   dns proxy = no
   socket options = TCP_NODELAY SO_RCVBUF=8192 
SO_SNDBUF=8192

   wins support = no


-Wins server= IPOFTHESERVER1   ---  
  

   name resolve order = wins lmhosts bcast host
   interfaces = lo eth0 192.168.10.254/24 127.0.0.1/8
   bind interfaces only = yes
   remote announce = 192.168.10.254/GROUP2
   remote browse sync = 192.168.10.254
   hosts allow = 127. 192.168.10. 192.168.20.




---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---
-Ursprüngliche Nachricht-
Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im
Auftrag von t...@tms3.com
Gesendet: Dienstag, 27. Juli 2010 23:27
An: Tawanda Kavayi
Cc: samba@lists.samba.org
Betreff: Re: [Samba] Multiple Workgroups and Subnets

Short answer:  Use 1 WINS server.



  

--- Original message ---
Subject: [Samba] Multiple Workgroups and Subnets
From: Tawanda Kavayi tawa...@earth.co.zw
To: samba@lists.samba.org
Date: Tuesday, 27/07/2010  2:01 PM

Hi,

I am configuring a network with two subnets with a different workgroup
in each subnet. My aim is to have users being able to view and access
shares on both workgroups. I have a Samba server in each
subnet/workgroup, configured as both the domain and local master for
each workgroup. Each server is also the WINS server for its subnet. 
The

setup is like this:

Subnet1:
network - 192.168.10.0/24
server IP - 192.168.10.254
workgroup - Group1

Subnet2:
network - 192.168.20.0/24
server IP - 192.168.20.254
workgroup - Group2

The two servers are configured identically, except for the information
above, so the smb.conf for the Group1 server looks like this:

[global]
   workgroup = GROUP1
   netbios name = GROUP1_SRV
   domain master = yes
   local master = yes
   preferred master = yes
   os level = 65
   smb ports = 139
   dns proxy = no
   socket options = TCP_NODELAY SO_RCVBUF=8192 
SO_SNDBUF=8192

   wins support = yes
   name resolve order = wins lmhosts bcast host
   interfaces = lo eth0 192.168.10.254/24 127.0.0.1/8
   bind interfaces only = yes
   remote announce = 192.168.20.254/GROUP1
   remote browse sync = 192.168.20.254
   hosts allow = 127. 192.168.10. 192.168.20.

The problem is that a machine in Group1 can see all the machines in 
it's

workgoup, plus the network for Group2 appears in network neighborhood,
but the machines and shares in Group2 do not.

To troubleshoot, I ran smbtree with debug level 5. What I picked out
from all the output was:

Cannot find master browser for workgroup GROUP2

How can I resolve this?


Tawanda


--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba



  


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Multiple Workgroups and Subnets

2010-07-28 Thread Daniel Müller
Yes Group1 Server ist the wins for all

---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---

-Ursprüngliche Nachricht-
Von: Tawanda Kavayi [mailto:tawa...@earth.co.zw] 
Gesendet: Mittwoch, 28. Juli 2010 10:15
An: muel...@tropenklinik.de
Cc: t...@tms3.com; samba@lists.samba.org
Betreff: Re: AW: [Samba] Multiple Workgroups and Subnets

OK, but what of the client PC's in Group2. Do I assign them the Group1 
server as their WINS server, or do they now operate without WINS?


Tawanda

Daniel Müller wrote:
 Example
 On Server1

 [global]
   
workgroup = GROUP1
netbios name = GROUP1_SRV
domain master = yes
local master = yes
preferred master = yes
os level = 65
smb ports = 139
dns proxy = no
socket options = TCP_NODELAY SO_RCVBUF=8192 
 SO_SNDBUF=8192
wins support = yes
name resolve order = wins lmhosts bcast host
interfaces = lo eth0 192.168.10.254/24 127.0.0.1/8
bind interfaces only = yes
remote announce = 192.168.20.254/GROUP1
remote browse sync = 192.168.20.254
hosts allow = 127. 192.168.10. 192.168.20.
 


 On Server 2


 [global]
   
workgroup = GROUP2
netbios name = GROUP2_SRV
domain master = yes
local master = yes
preferred master = yes
os level = 65
smb ports = 139
dns proxy = no
socket options = TCP_NODELAY SO_RCVBUF=8192 
 SO_SNDBUF=8192
wins support = no
 
 - Wins server= IPOFTHESERVER1   --- 
   
name resolve order = wins lmhosts bcast host
interfaces = lo eth0 192.168.10.254/24 127.0.0.1/8
bind interfaces only = yes
remote announce = 192.168.10.254/GROUP2
remote browse sync = 192.168.10.254
hosts allow = 127. 192.168.10. 192.168.20.
 


 ---
 EDV Daniel Müller

 Leitung EDV
 Tropenklinik Paul-Lechler-Krankenhaus
 Paul-Lechler-Str. 24
 72076 Tübingen

 Tel.: 07071/206-463, Fax: 07071/206-499
 eMail: muel...@tropenklinik.de
 Internet: www.tropenklinik.de
 ---
 -Ursprüngliche Nachricht-
 Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
Im
 Auftrag von t...@tms3.com
 Gesendet: Dienstag, 27. Juli 2010 23:27
 An: Tawanda Kavayi
 Cc: samba@lists.samba.org
 Betreff: Re: [Samba] Multiple Workgroups and Subnets

 Short answer:  Use 1 WINS server.



   
 --- Original message ---
 Subject: [Samba] Multiple Workgroups and Subnets
 From: Tawanda Kavayi tawa...@earth.co.zw
 To: samba@lists.samba.org
 Date: Tuesday, 27/07/2010  2:01 PM

 Hi,

 I am configuring a network with two subnets with a different workgroup
 in each subnet. My aim is to have users being able to view and access
 shares on both workgroups. I have a Samba server in each
 subnet/workgroup, configured as both the domain and local master for
 each workgroup. Each server is also the WINS server for its subnet. 
 The
 setup is like this:

 Subnet1:
 network - 192.168.10.0/24
 server IP - 192.168.10.254
 workgroup - Group1

 Subnet2:
 network - 192.168.20.0/24
 server IP - 192.168.20.254
 workgroup - Group2

 The two servers are configured identically, except for the information
 above, so the smb.conf for the Group1 server looks like this:

 [global]
workgroup = GROUP1
netbios name = GROUP1_SRV
domain master = yes
local master = yes
preferred master = yes
os level = 65
smb ports = 139
dns proxy = no
socket options = TCP_NODELAY SO_RCVBUF=8192 
 SO_SNDBUF=8192
wins support = yes
name resolve order = wins lmhosts bcast host
interfaces = lo eth0 192.168.10.254/24 127.0.0.1/8
bind interfaces only = yes
remote announce = 192.168.20.254/GROUP1
remote browse sync = 192.168.20.254
hosts allow = 127. 192.168.10. 192.168.20.

 The problem is that a machine in Group1 can see all the machines in 
 it's
 workgoup, plus the network for Group2 appears in network neighborhood,
 but the machines and shares in Group2 do not.

 To troubleshoot, I ran smbtree with debug level 5. What I picked out
 from all the output was:

 Cannot find master browser for workgroup GROUP2

 How can I resolve this?


 Tawanda

Re: [Samba] Oplocks

2010-07-28 Thread Lukas Hejtmanek
On Mon, Jul 19, 2010 at 05:20:50PM +0200, Volker Lendecke wrote:
 Right. Then it's a bug. You might contact your RPM provider
 for support of this old Samba version.

Is Samba 3.3.8 also too old? It suffers from the same problem.

-- 
Lukáš Hejtmánek
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] create_builtin_administrators: Failed to create Administrators

2010-07-28 Thread Frédéric SOSSON
Hello,

I am running Samba 3.0.33-3.28.el5 configured like this:

[global]
workgroup  = mywrk
realm  = myrealm
security   = ads
name resolve order = lmhosts host bcast
allow trusted domains  = no
socket options = TCP_NODELAY IPTOS_LOWDELAY
SO_RCVBUF=8576 SO_SNDBUF=8576
template shell = /bin/bash
template homedir   = /home/%D/%U
restrict anonymous = 2
use kerberos keytab= yes

winbind use default domain = yes
winbind enum users = no
winbind enum groups= no
winbind nested groups  = yes
winbind cache time = 172800
winbind refresh tickets= yes
winbind offline logon  = yes

idmap domains  = mydomain
idmap config mydomain:default= yes
idmap config mydomain:backend= rid
idmap config mydomain:base_rid   = 0
idmap config mydomain:range  = 5000-1000
idmap config mydomain:readonly   = yes
idmap uid  = 5000-1000
idmap gid  = 5000-1000
idmap negative cache time  = 5
idmap cache time   = 172800

printing   = cups
printcap name  = cups
load printers  = yes
printer admin  = root
log level  = 2

[printers]
comment = All Printers
path = /var/spool/samba
guest ok = yes
public = yes
read only = yes
printable = yes

[print$]
comment = Printer Driver Download Area
path = /etc/samba/drivers
browseable = yes
guest ok = yes
read only = yes
write list = fsosson, root

When I try to upload windows printer driver using the Add a printer'
wizard, I connect with my domaine user I got this message Operation
could not be completed.  Access denied.  Samba log file output:

[2010/07/28 11:54:58, 2] auth/auth_util.c:create_builtin_administrators(844)
  create_builtin_administrators: Failed to create Administrators
[2010/07/28 11:54:58, 2] auth/auth_util.c:create_local_nt_token(966)
  create_local_nt_token: Failed to create BUILTIN\Administrators group!
[2010/07/28 11:54:58, 2] auth/auth_util.c:create_builtin_users(810)
  create_builtin_users: Failed to create Users
[2010/07/28 11:54:58, 2] auth/auth_util.c:create_local_nt_token(993)
  create_local_nt_token: Failed to create BUILTIN\Users group!

Any idea?


Frédéric
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] [Announce] Samba 3.6.0pre1 Available for Download

2010-07-28 Thread Karolin Seeger
Release Announcements
-

This is the first preview release of Samba 3.6.  This is *not*
intended for production environments and is designed for testing
purposes only.  Please report any defects via the Samba bug reporting
system at https://bugzilla.samba.org/.


Major enhancements in Samba 3.6.0 include:


SMB2 support


SMB2 support in 3.6.0 is fully functional (with one ommission),
and can be enabled by setting:

max protocol = SMB2

in the [global] section of your smb.conf and re-starting
Samba. All features should work over SMB2 except the modification
of user quotas using the Windows quota management tools.

As this is the first release containing what we consider
to be a fully featured SMB2 protocol, we are not enabling
this by default, but encourage users to enable SMB2 and
test it. Once we have enough confirmation from Samba
users and OEMs that SMB2 support is stable in wide user
testing we will enable SMB2 by default in a future Samba
release.


Internal Winbind passdb changes
---

Winbind has been changed to use the internal samr and lsa rpc pipe to get
local user and group information instead of calling passdb functions. The
reason is to use more of our infrastructure and test this infrastructure by
using it. With this approach more code in Winbind is shared.


New Spoolss code


The spoolss and the old RAP printing code have been completely
overhauled and refactored.

All calls from lanman/printing code has been changed to go through the
spoolss RPC interfaces, this allows us to keep all checks in one place
and avoid special cases in the main printing code.
Printing code has been therefore confined within the spoolss code.

All the printing code, including the spoolss RPC interfaces has been
changed to use the winreg RPC interfaces to store all data.
All data has been migrated from custom, arbitrary TDB files to the
registry interface. This transition allow us to present correct data to
windows client accessing the server registry through the winreg RPC
interfaces to query for printer data. Data is served out from a real
registry implementation and therefore arguably 100% forward compatible.

Migration code from the previous TDB files formats is provided. This
code is automatically invoked the first time the new code is run on the
server. Although manual migration is also available using the 'net
printer migrate' command.

These changes not only make all the spoolss code much more closer to
the spec, it also greatly improves our internal testing of both
spoolss and winreg interfaces, and reduces overall code duplication.

As part of this work, new tests have been also added to increase
coverage.

This code will also allow, in future, an easy transition to split out
the spooling functions into a separate daemon for those OEMs that do not
need printing functionality in their appliances, reducing the code
footprint.


SMB Traffic Analyzer


Added the new SMB Traffic Analyzer (SMBTA) VFS module protocol 2
featuring encryption, multiple arguments, and easier parseability. A new
tool 'smbta-util' has been created to control the encryption behaviour
of SMBTA. For compatibility, SMBTA by default operates on version 1.
There are programs consuming the data that the module sends.

More information can be found on
http://holger123.wordpress.com/smb-traffic-analyzer/


##
Changes
###

smb.conf changes


   Parameter Name  Description Default
   --  --- ---

   log writeable files on exit New No
   ctdb locktime warn thresholdNew 0
   smb2 max read   New 1048576
   smb2 max write  New 1048576
   smb2 max trans  New 1048576
   username map cache time New 0
   async smb echo handler  New No


##
Reporting bugs  Development Discussion
###

Please discuss this release on the samba-technical mailing list or by
joining the #samba-technical IRC channel on irc.freenode.net.

If you do report problems then please try to send high quality
feedback. If you don't provide vital information to help us track down
the problem then you will probably be ignored.  All bug reports should
be filed under the Samba 3.6 product in the project's Bugzilla
database (https://bugzilla.samba.org/).


==
== Our Code, Our Bugs, Our Responsibility.
== The Samba Team
==



Download Details


The uncompressed tarballs and patch files have 

[Samba] [Ubuntu 10.04] Share not visible from XP?

2010-07-28 Thread Gilles
Hello

I waited 15mn in case it was due to some browsing issue, but the
directory I shared on a Ubuntu server still doesn't show up in the XP
Net'hood, with no error when starting smbd or in
/var/log/samba/log.smbd.

Here's the smb.conf I wrote:

===
# cat /etc/samba/smb.conf
[global]
;Checked: Same wg on XP
workgroup = WORKGROUP
server string = Samba Server %v
;Checked: nobody.nogroup exists
guest account = nobody

[share]
comment = Ubuntu File Server Share
path = /srv/samba
browsable = yes
guest ok = yes ;access will be permitted as the default guest user 
read only = no
create mask = 0755
===

Any idea what I did wrong?

Thank you for any hint.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] [Ubuntu 10.04] Share not visible from XP?

2010-07-28 Thread Chris Gonnerman

On 07/28/2010 07:28 AM, Gilles wrote:

I waited 15mn in case it was due to some browsing issue, but the
directory I shared on a Ubuntu server still doesn't show up in the XP
Net'hood, with no error when starting smbd or in
/var/log/samba/log.smbd.
   
Are you expecting it to appear in the My Network Places list?  Windows 
has an eccentric, unpredictable schedule for adding items there.


Go to Start, Run, and enter

\\name-of-server\share

then hit OK.  Of course, you should substitute the actual name of the 
server.  If it opens a window (with whatever is in /srv/samba visible in 
it), you're good.


If that doesn't work, try

\\name-of-server

and let us know what you see.

-- Chris.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] [Ubuntu 10.04] Share not visible from XP?

2010-07-28 Thread Gilles
On Wed, 28 Jul 2010 14:28:57 +0200, Gilles gilles.gana...@free.fr
wrote:
Here's the smb.conf I wrote:

Also tried this, running restart smbd after each addition, to no
avail:
===
# cat /etc/samba/smb.conf
[global]
workgroup = WORKGROUP
server string = Samba Server %v
guest account = nobody
dns proxy = no

wins support = yes
remote announce = 192.168.0.255
security = user

[share]
comment = Ubuntu File Server Share
path = /srv/samba
browsable = yes
guest ok = yes ;access will be permitted as the default guest user 
read only = no
create mask = 0755
===

I don't have a firewall installed, and can succesfully connect to the
server through SSH and HTTP. Could it be some other security issue?

FWIW, I originally didn't run  smbpasswd -a nobody, but running it
makes no difference.

BTW, how can I check that Samba does use /etc/samba/smb.conf as its
configuration file?

Thank you.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] [Ubuntu 10.04] Share not visible from XP?

2010-07-28 Thread Gilles
On Wed, 28 Jul 2010 07:42:34 -0500, Chris Gonnerman
ch...@newcenturycomputers.net wrote:
Go to Start, Run, and enter

\\name-of-server\share

then hit OK.  Of course, you should substitute the actual name of the 
server.  If it opens a window (with whatever is in /srv/samba visible in 
it), you're good.

If that doesn't work, try

\\name-of-server

and let us know what you see.

Thanks Chris. Both return The network path was not found.

Fact is, XP can't PING ubuntu and C:\net view doesn't list the
Ubuntu host, although Samba is running WINS:

===
# cat smb.conf
[global]
workgroup = WORKGROUP
server string = Samba Server %v
guest account = nobody
dns proxy = no

netbios name = UBUNTU
wins support = yes
remote announce = 192.168.0.255
security = user
;encrypt passwords = yes
;smb passwd file = /etc/samba/smbpasswd

[share]
comment = Ubuntu File Server Share
path = /srv/samba
browsable = yes
guest ok = yes ;access will be permitted as the default guest user 
read only = no
create mask = 0755
===

Am I correct in understanding that as long as ...
1. /etc/passd contains nobody, /etc/group contains nogroup
2. /srv/samba/ is owned by nobody.nogroup

... the above smb.conf should display this share in Network
Neighborhood and let any user read/write to the directory by using
nobody.nogroup as user?

How does a Samba host advertise its NetBIOS name to the LAN?

Thank you.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] how many samba daemons should be ?

2010-07-28 Thread Konstantin Pobudzey

I installed samba4 alfa10.

have 84 users connected:
[r...@dc1 ~]# netstat -na | grep -c 445
84

And +10 samba daemons running
[r...@dc1 ~]# ps -A | grep -c samba
94

Question  : Is this OK? Is this normal behavior ?
Is it 10 with no users , and then 1 daemon per user connected ?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] wbinfo -u and -g work, wbinfo -s works only for some users

2010-07-28 Thread Jason Gerfen

My apologies...

Here is a working copy as an attachment. I will also fix the blog post I 
have up about it.


Keep in mind it does require a couple of tools installed to function 
properly.

i.e.
wbinfo
ldapsearch
ldapmodify

Also a note on how it works. It uses wbinfo to detect any account in 
active directory which does not have the unix extension properties for 
the uid,gid,default shell, homedir, as well as any DN attribute which 
uses first name last name, (DN=first last,CN=Users) which seems to cause 
problems with the UID 2 SID verification process, and modifies only 
those accounts.


Using 'wizard' mode will allow you to test it on one account and once 
that works you can specify a OU within Active Directory and this will 
perform the operations on any account which fails the UID 2 SID 
verification.


Let me know if you experience any problems with it.

On 07/27/10 02:29, Danilo Godec wrote:

While my situation is a bit different (no AD server, Samba is PDC for
the domain, using OpenLDAP for users, groups, ...), I tried running your
Perl script in 'Wizard' mode, but it fails (using perl 5.8.3):

# ./UID2SID.pl
syntax error at ./UID2SID.pl line 204, near = ;
syntax error at ./UID2SID.pl line 239, near = ;
syntax error at ./UID2SID.pl line 380, near = ;
syntax error at ./UID2SID.pl line 404, near =  ) 
syntax error at ./UID2SID.pl line 410, near }
Execution of ./UID2SID.pl aborted due to compilation errors.

   Regards, Danilo




On 26. 07. 2010 15:54, Jason Gerfen wrote:
   

Here is a document and perl script I developed to resolve UID to SID
mappings in Samba Active Directory authentication.

http://zerointeger.tumblr.com/post/589762841/samba-and-active-directory

Let me know if that helps any.

On 07/26/10 07:01, Danilo Godec wrote:
 

Got a problem after upgrading Samba from 3.0 to 3.5 - have a bunch of
users and groups in LDAP and things work for the most part.

However, when people try to change permissions from within Windows, some
usernames or groupnames are shown properly, but other are not - they see
the SID.

Following up I noticed, that I can get a list of all users with 'wbinfo
-u' and that I can get a SID for every user with 'wbinfo -n $USER'.

However, for about 70% of all SIDs listed a 'reverse lookup' with 'wbinf
-s $SID' doesn't work:


   

S-1-5-21-239950015-4237961228-1280988766-3060 Could not lookup sid
S-1-5-21-239950015-4237961228-1280988766-3060

 

It works for some and it turns out that this relates to what usernames
are visible in Windows...

I checked my LDAP and compared some of the users that work to some of
those that don't, but there are no apparent differences.

Any ideas?

Regards, Danilo




   
 


   


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Samba4 net vampire

2010-07-28 Thread tms3

Can't even figure this one out.
zaphod# ./net vampire tms3.com -Uadministrator --realm=tms3.com
dos charset 'CP850' unavailable - using ASCII
Password for [TMS3.COM\administrator]:
Traceback (most recent call last):
 File 
/usr/local/samba/lib/python2.6/site-packages/samba/netcmd/__init__.py, 
line 99, in _run

   return self.run(*args, **kwargs)
 File 
/usr/local/samba/lib/python2.6/site-packages/samba/netcmd/vampire.py, 
line 51, in run
   (domain_name, domain_sid) = net.vampire(domain=domain, 
target_dir=target_dir)
RuntimeError: samr_OpenDomain for 
[S-1-5-21-1524245422-3281793581-2119328624] failed: 
NT_STATUS_NO_SUCH_DOMAIN


Everything in DNS, WINS, etc is functional.  W2K3, W2K8, 
Ubuntu10.4Server Samba4 latest GIT, FreeBSD 8.1x64Release latest Git 
all joined and functional.  Anyone got a guess?


Cheers,



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] [Ubuntu 10.04] Share not visible from XP?

2010-07-28 Thread Marcello Romani

Gilles ha scritto:

On Wed, 28 Jul 2010 07:42:34 -0500, Chris Gonnerman
ch...@newcenturycomputers.net wrote:

Go to Start, Run, and enter

\\name-of-server\share

then hit OK.  Of course, you should substitute the actual name of the 
server.  If it opens a window (with whatever is in /srv/samba visible in 
it), you're good.


If that doesn't work, try

\\name-of-server

and let us know what you see.


Thanks Chris. Both return The network path was not found.

Fact is, XP can't PING ubuntu and C:\net view doesn't list the


Try pinging the ubuntu server via ip address. If that works, then try to 
connect to the share by using the ip address instead of the hostname, e.g.:


\\ip-addr-of-server\share

If the ping from xp to the ubuntu server doesn't work either way (by 
specifying the server hosntname or its ip address) then I think you 
should check your network before struggling with samba config.


Just my 2 cents, HTH.

--
Marcello Romani
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] how many samba daemons should be ?

2010-07-28 Thread John Drescher
On Wed, Jul 28, 2010 at 8:25 AM, Konstantin Pobudzey 5836...@gmail.com wrote:
 I installed samba4 alfa10.

 have 84 users connected:
 [r...@dc1 ~]# netstat -na | grep -c 445
 84

 And +10 samba daemons running
 [r...@dc1 ~]# ps -A | grep -c samba
 94

 Question  : Is this OK? Is this normal behavior ?
 Is it 10 with no users , and then 1 daemon per user connected ?

There should be at least 1 daemon per user. So yes this is normal.

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] [samba] DNS update failed!

2010-07-28 Thread Alexander R. Fahrutdinov
В сообщении от 28 июля 2010 10:15:25 автор k.maksimov написал:
 Anton wrote:
  On 28 July 2010 01:45, k.maksimov k.maksi...@butb.by wrote:
  I have two networks: 192.168.1.0 with netmask 255.255.255.0 and
  172.16.0.0 with netmask 255.255.254.0, when I join in domain in first
  network hostname registered successfully, but in second network:
  
  sudo net ads join -U admin
  Enter admin's password:
  Using short domain name -- BUTB
  Joined 'TH-2-011' to realm 'butb.by'
  DNS update failed!
  
  As far as I can tell (I'm not entirely certain though)  this is an
  Active Directory / Windows Server configuration issue around loosening
  permissions enough for the DHCP service to update the DNS records.
  
  I don't know exactly what settings need to be configured though, as I
  didn't manage to get it working either. In the end I decided to keep
  the standard security and just use static IPs and DNS records for
  winbind machines.
 
 I'm use static IP and I haven't DHCP. and this problem not an AD:
 Windows machines successfully update DNS.
 
 also I have ~200 machines and I can't add every DNS record manually.
Please show output for command net ads dns register -P -d 4. PC must be 
already added to domain
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Changing password on unix client joined to AD

2010-07-28 Thread Lorenzo Milesi
- Messaggio originale -
 GDM not support this feature:
 https://bugs.launchpad.net/ubuntu/+source/gdm/+bug/114620
 
 if you want, you can hack gdm)

This sounds strange, because Googling around I found some infos about GDM 
allowing password change...

I don't know if this could be a problem of the new GDM or what...
-- 
Lorenzo Milesi - lorenzo.mil...@yetopen.it

YetOpen S.r.l. - http://www.yetopen.it/
Via Torri Tarelli 19 - 23900 Lecco - ITALY -
Tel 0341 220 205 - Fax 178 6070 222

GPG/PGP Key-Id: 0xE704E230 - http://keyserver.linux.it

 D.Lgs. 196/2003 

Si avverte che tutte le informazioni contenute in questo messaggio sono
riservate ed a uso esclusivo del destinatario. Nel caso in cui questo
messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo
senza copiarlo, a non inoltrarlo a terzi e ad avvertirci non appena
possibile.
Grazie.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] [samba] DNS update failed!

2010-07-28 Thread k.maksimov

Alexander R. Fahrutdinov wrote:

В сообщении от 28 июля 2010 10:15:25 автор k.maksimov написал:
  

Anton wrote:


On 28 July 2010 01:45, k.maksimov k.maksi...@butb.by wrote:
  

I have two networks: 192.168.1.0 with netmask 255.255.255.0 and
172.16.0.0 with netmask 255.255.254.0, when I join in domain in first
network hostname registered successfully, but in second network:

sudo net ads join -U admin
Enter admin's password:
Using short domain name -- BUTB
Joined 'TH-2-011' to realm 'butb.by'
DNS update failed!


As far as I can tell (I'm not entirely certain though)  this is an
Active Directory / Windows Server configuration issue around loosening
permissions enough for the DHCP service to update the DNS records.

I don't know exactly what settings need to be configured though, as I
didn't manage to get it working either. In the end I decided to keep
the standard security and just use static IPs and DNS records for
winbind machines.
  

I'm use static IP and I haven't DHCP. and this problem not an AD:
Windows machines successfully update DNS.

also I have ~200 machines and I can't add every DNS record manually.

Please show output for command net ads dns register -P -d 4. PC must be 
already added to domain
  

sudo net ads dns register -P -d 4
[2010/07/28 14:21:32,  3] param/loadparm.c:9039(lp_load_ex)
lp_load_ex: refreshing parameters
[2010/07/28 14:21:32,  3] param/loadparm.c:4848(init_globals)
Initialising global parameters
[2010/07/28 14:21:32,  2] param/loadparm.c:4707(max_open_files)
rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
[2010/07/28 14:21:32,  3] ../lib/util/params.c:550(pm_process)
params.c:pm_process() - Processing configuration file 
/etc/samba/smb.conf

[2010/07/28 14:21:32,  3] param/loadparm.c:7726(do_section)
Processing section [global]
doing parameter workgroup = BUTB
doing parameter netbios name = %h
[2010/07/28 14:21:32,  4] param/loadparm.c:7088(handle_netbios_name)
handle_netbios_name: set global_myname to: TH-3-059
doing parameter dos charset = cp866
doing parameter unix charset = UTF8
doing parameter server string = %h server (Samba, Linux)
doing parameter dns proxy = no
doing parameter name resolve order = lmhosts wins bcast host
doing parameter log file = /var/log/samba/log.%m
doing parameter max log size = 1000
doing parameter syslog = 0
doing parameter panic action = /usr/share/samba/panic-action %d
doing parameter security = ADS
doing parameter encrypt passwords = true
doing parameter passdb backend = tdbsam
doing parameter obey pam restrictions = yes
doing parameter unix password sync = yes
doing parameter password server = ad, ad2
doing parameter passwd program = /usr/bin/passwd %u
doing parameter passwd chat = *Enter\snew\s*\spassword:* %n\n 
*Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .

doing parameter pam password change = yes
doing parameter map to guest = bad user
doing parameter idmap uid = 1-2
doing parameter idmap gid = 1-2
doing parameter winbind uid = 1-2
doing parameter winbind gid = 1-2
doing parameter template shell = /bin/bash
doing parameter template homedir = /home/%U
doing parameter winbind separator = /
doing parameter winbind offline logon = true
doing parameter winbind cache time = 86400
doing parameter passdb backend = tdbsam
doing parameter realm = butb.by
doing parameter winbind use default domain = yes
doing parameter usershare allow guests = yes
[2010/07/28 14:21:32,  4] param/loadparm.c:9074(lp_load_ex)
pm_process() returned Yes
[2010/07/28 14:21:32,  2] lib/interface.c:340(add_interface)
added interface eth0 ip=fe80::201:2eff:fe2b:3ff6%eth0 
bcast=fe80:::::%eth0 netmask=:::::

[2010/07/28 14:21:32,  2] lib/interface.c:340(add_interface)
added interface eth0 ip=172.16.0.101 bcast=172.16.1.255 
netmask=255.255.254.0

[2010/07/28 14:21:32,  4] libsmb/namequery_dc.c:73(ads_dc_name)
ads_dc_name: domain=BUTB
[2010/07/28 14:21:32,  3] libsmb/namequery.c:1972(get_dc_list)
get_dc_list: preferred server list: ad.butb.by, ad, ad2
[2010/07/28 14:21:32,  4] libsmb/namequery.c:2105(get_dc_list)
get_dc_list: returning 2 ip addresses in an ordered list
[2010/07/28 14:21:32,  4] libsmb/namequery.c:2106(get_dc_list)
get_dc_list: 192.168.1.2:389 192.168.1.5:389
[2010/07/28 14:21:32,  3] libads/ldap.c:621(ads_connect)
Successfully contacted LDAP server 192.168.1.2
[2010/07/28 14:21:32,  3] libsmb/namequery.c:1972(get_dc_list)
get_dc_list: preferred server list: ad.butb.by, ad, ad2
[2010/07/28 14:21:32,  4] libsmb/namequery.c:2105(get_dc_list)
get_dc_list: returning 2 ip addresses in an ordered list
[2010/07/28 14:21:32,  4] libsmb/namequery.c:2106(get_dc_list)
get_dc_list: 192.168.1.2:389 192.168.1.5:389
[2010/07/28 14:21:32,  3] libsmb/namequery.c:1972(get_dc_list)
get_dc_list: preferred server list: ad.butb.by, ad, ad2
[2010/07/28 14:21:32,  4] libsmb/namequery.c:2105(get_dc_list)
get_dc_list: returning 2 ip addresses in an 

Re: [Samba] [Ubuntu 10.04] Share not visible from XP?

2010-07-28 Thread Marcello Romani

Gilles Ganault ha scritto:

At 15:16 28/07/2010, you wrote:
Try pinging the ubuntu server via ip address. If that works, then try 
to connect to the share by using the ip address instead of the 
hostname, e.g.:


\\ip-addr-of-server\share


Thanks for the help. I can connect through its IP address (I could 
already work with SSH and HTTP), but it doesn't work with the NetBIOS name:


\\ubuntu\share - The network path was not found.

If you know Ubuntu 10.04, could there be some security that prevents 
Samba from working?




My servers are pure debian, so no I don't know of Ubuntu specific tweaks.
I'd try to enable wins in samba and raise its os level (though it should 
already be higher than xp), but it could also be that xp refuses to 
revert to netbios name resolution (i.e. broadcast). I've seen this 
behaviour once, but can't remember right now what it was exactly...


HTH

P.S.: try to respond to the list, or you'll lose potential help :)

--
Marcello Romani
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Does anybody use idmap_adex?

2010-07-28 Thread Nico De Ranter

Actually I was just about to start using it. Guess I shouldn't?

I'm looking for a solution to integrate an existing linux environment
into a Windows AD environment.  I already added all rc2307 info on the
AD server.  Now I need a way for the linux systems to fetch the
username, uid, gif, shell and homedir from AD.  Using LDAP directly is
not an option as I can't do anonymous binds so that would require a
hardcoded AD user and password on all systems (correct me if I'm wrong)
According to the man pages it looks like idmap_adex will do exactly what
I want. However I haven't been able to get it to work.

Will idmap_adex disappear (if so, I won't invest anymore time in it)?
Is there another way I can do this?

Nico


On Mon, 2010-06-28 at 20:31 +0200, Volker Lendecke wrote:
 On Mon, Jun 28, 2010 at 11:00:49AM -0500, Gerald Carter wrote:
  Correct.  I just reused a lot of the Likewise code here.
  My intent was originally to minimize change between the
  version that we shipped in Likewise Identity 4.x and what
  was in Samba and to leverage the Likewise QA team on both
  fronts.
 
 Ok, the question still remains:
 
 Anybody actually using the module?
 
 How many people do we offend if we remove it?
 
 Volker
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba


-- 
With kind regards

Nico De Ranter
Senior System Administrator
Techsoft Centre

Technology and Software Centre Europe
The Corporate Village - Da Vincilaan 7-D1 - B-1935 Zaventem - Belgium

Phone:+32 (0)2 700 8641
Fax:  +32 (0)2 700 8622
E-mail:nico.deran...@eu.sony.com

A division of Sony Europe (Belgium) N.V.
VAT BE 0413.825.160 - RPR Brussels
Fortis - BIC GEBABEBB - IBAN BE41293037680010




The information contained in this message or any of its attachments may be 
confidential and is intended for the exclusive use of the addressee(s).  Any 
disclosure, reproduction, distribution or other dissemination or use of this 
communication is strictly prohibited without the express permission of the 
sender.  The views expressed in this email are those of the individual and not 
necessarily those of Sony or Sony affiliated companies.  Sony email is for 
business use only.

This email and any response may be monitored by Sony to be in compliance with 
Sony's global policies and standards


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Does anybody use idmap_adex?

2010-07-28 Thread simo
On Wed, 2010-07-28 at 17:18 +0200, Nico De Ranter wrote:
 Actually I was just about to start using it. Guess I shouldn't?
 
 I'm looking for a solution to integrate an existing linux environment
 into a Windows AD environment.  I already added all rc2307 info on the
 AD server.  Now I need a way for the linux systems to fetch the
 username, uid, gif, shell and homedir from AD.  Using LDAP directly is
 not an option as I can't do anonymous binds so that would require a
 hardcoded AD user and password on all systems (correct me if I'm wrong)
 According to the man pages it looks like idmap_adex will do exactly what
 I want. However I haven't been able to get it to work.
 
 Will idmap_adex disappear (if so, I won't invest anymore time in it)?
 Is there another way I can do this?

No it will not disappear at least until we merge the useful features in
the idmap_ad module. We just want to consolidate different modules into
1 supportable module, but not at the expense of cutting features users
depend on.

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer s...@samba.org
Principal Software Engineer at Red Hat, Inc. s...@redhat.com

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] [Ubuntu 10.04] Share not visible from XP?

2010-07-28 Thread Gilles
On Wed, 28 Jul 2010 17:03:43 +0200, Marcello Romani
mrom...@ottotecnica.com wrote:
My servers are pure debian, so no I don't know of Ubuntu specific tweaks.
I'd try to enable wins in samba and raise its os level (though it should 
already be higher than xp), but it could also be that xp refuses to 
revert to netbios name resolution (i.e. broadcast). I've seen this 
behaviour once, but can't remember right now what it was exactly...

Thanks everyone for the help, in the mailing list and through e-mail, 

To make sure I get the basic covered... is there a reason why
testparm -s skips some lines from smb.conf?

==
# cat /etc/samba/smb.conf
[global]
workgroup = WORKGROUP

[homes]
guest ok = no
read only = no
==
# testparm -s
Load smb config files from /etc/samba/smb.conf
rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
Processing section [homes]
Loaded services file OK.
Server role: ROLE_STANDALONE
[global]

[homes]
read only = No
==

P.S.: try to respond to the list, or you'll lose potential help :)

It's because e-mail is immediate, while posts show in Gmane's NTTP
servers after a good 15mn wait :-)

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Does anybody use idmap_adex?

2010-07-28 Thread Michael Adam
Hi Nico,

Nico De Ranter wrote:
 
 Actually I was just about to start using it. Guess I shouldn't?
 
 I'm looking for a solution to integrate an existing linux environment
 into a Windows AD environment.  I already added all rc2307 info on the
 AD server.  Now I need a way for the linux systems to fetch the
 username, uid, gif, shell and homedir from AD.  Using LDAP directly is
 not an option as I can't do anonymous binds so that would require a
 hardcoded AD user and password on all systems (correct me if I'm wrong)
 According to the man pages it looks like idmap_adex will do exactly what
 I want. However I haven't been able to get it to work.
 
 Will idmap_adex disappear (if so, I won't invest anymore time in it)?
 Is there another way I can do this?

The older ad idmap and nss backend is there.
(man idmap_ad)
This is also maintained.
I guess this would also suit your needs.

Cheers - Michael

 Nico
 
 
 On Mon, 2010-06-28 at 20:31 +0200, Volker Lendecke wrote:
  On Mon, Jun 28, 2010 at 11:00:49AM -0500, Gerald Carter wrote:
   Correct.  I just reused a lot of the Likewise code here.
   My intent was originally to minimize change between the
   version that we shipped in Likewise Identity 4.x and what
   was in Samba and to leverage the Likewise QA team on both
   fronts.
  
  Ok, the question still remains:
  
  Anybody actually using the module?
  
  How many people do we offend if we remove it?
  
  Volker
  -- 
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/options/samba
 
 
 -- 
 With kind regards
 
 Nico De Ranter
 Senior System Administrator
 Techsoft Centre
 
 Technology and Software Centre Europe
 The Corporate Village - Da Vincilaan 7-D1 - B-1935 Zaventem - Belgium
 
 Phone:+32 (0)2 700 8641
 Fax:  +32 (0)2 700 8622
 E-mail:nico.deran...@eu.sony.com
 
 A division of Sony Europe (Belgium) N.V.
 VAT BE 0413.825.160 - RPR Brussels
 Fortis - BIC GEBABEBB - IBAN BE41293037680010
 
 
 
 
 The information contained in this message or any of its attachments may be 
 confidential and is intended for the exclusive use of the addressee(s).  Any 
 disclosure, reproduction, distribution or other dissemination or use of this 
 communication is strictly prohibited without the express permission of the 
 sender.  The views expressed in this email are those of the individual and 
 not necessarily those of Sony or Sony affiliated companies.  Sony email is 
 for business use only.
 
 This email and any response may be monitored by Sony to be in compliance with 
 Sony's global policies and standards
 
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba


pgp82IczKP8Ne.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] [Ubuntu 10.04] Share not visible from XP?

2010-07-28 Thread Nico De Ranter

I believe testparm will skip any attribute with default values.

Nico

On Wed, 2010-07-28 at 17:38 +0200, Gilles wrote:
 On Wed, 28 Jul 2010 17:03:43 +0200, Marcello Romani
 mrom...@ottotecnica.com wrote:
 My servers are pure debian, so no I don't know of Ubuntu specific tweaks.
 I'd try to enable wins in samba and raise its os level (though it should 
 already be higher than xp), but it could also be that xp refuses to 
 revert to netbios name resolution (i.e. broadcast). I've seen this 
 behaviour once, but can't remember right now what it was exactly...
 
 Thanks everyone for the help, in the mailing list and through e-mail, 
 
 To make sure I get the basic covered... is there a reason why
 testparm -s skips some lines from smb.conf?
 
 ==
 # cat /etc/samba/smb.conf
 [global]
 workgroup = WORKGROUP
 
 [homes]
 guest ok = no
 read only = no
 ==
 # testparm -s
 Load smb config files from /etc/samba/smb.conf
 rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
 Processing section [homes]
 Loaded services file OK.
 Server role: ROLE_STANDALONE
 [global]
 
 [homes]
 read only = No
 ==
 
 P.S.: try to respond to the list, or you'll lose potential help :)
 
 It's because e-mail is immediate, while posts show in Gmane's NTTP
 servers after a good 15mn wait :-)
 


-- 
With kind regards

Nico De Ranter
Senior System Administrator
Techsoft Centre

Technology and Software Centre Europe
The Corporate Village - Da Vincilaan 7-D1 - B-1935 Zaventem - Belgium

Phone:+32 (0)2 700 8641
Fax:  +32 (0)2 700 8622
E-mail:nico.deran...@eu.sony.com

A division of Sony Europe (Belgium) N.V.
VAT BE 0413.825.160 - RPR Brussels
Fortis - BIC GEBABEBB - IBAN BE41293037680010




The information contained in this message or any of its attachments may be 
confidential and is intended for the exclusive use of the addressee(s).  Any 
disclosure, reproduction, distribution or other dissemination or use of this 
communication is strictly prohibited without the express permission of the 
sender.  The views expressed in this email are those of the individual and not 
necessarily those of Sony or Sony affiliated companies.  Sony email is for 
business use only.

This email and any response may be monitored by Sony to be in compliance with 
Sony's global policies and standards


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] 2008 R2 Failover Clustering using Samba 4 AD

2010-07-28 Thread Aggarwal, Ajay
I am  trying to see if Hyper-V 2008 R2 Failover Clustering will work
with Samba 4 as the Active Directory server. Have installed  Samba 4
(version alpha12) on CentOS 5.4.

 

Anybody else tried this before? Please share your experiences here.

 

Thanks,

Ajay

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] [Ubuntu 10.04] Share not visible from XP?

2010-07-28 Thread Gilles
On Wed, 28 Jul 2010 17:44:49 +0200, Nico De Ranter n...@sonycom.com
wrote:
I believe testparm will skip any attribute with default values.

Thanks for the tip. That's not the cause of the issue then :-/

At this point, I can finally get XP to show shared folders if I first
try to connect to them blindly through Run  \\srv\share.

There were a few things I noticed along the way:

- restart smbd works, but restart nmbd doesn't. OTOH,
/etc/init.d/smbd restart works... and /etc/init.d/nmbd restart as
well. Go figure

- apparently, we must remove package libpam-smbpass, and install
smbfs and winbind

- /etc/nsswitch.conf requires adding wins to hosts

- I added the following to a share, with no idea if they're really
needed:
[share]
[...]
available = yes
public = yes
writable = yes

Thank you.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] getent doesn't list my users when using idmap_adex

2010-07-28 Thread Nico De Ranter

Hi,

I'm trying to integrate an existing linux environment with a Windows AD
environment.  All my users are already in AD with valid rfc2307
attributes defined so I need a way to authenticate my users using
username, uid, gid, shell and homedirectory from AD.  I've been using
Kerberos+LDAPs before but that requires a dummy AD user hardcoded with
username and password in /etc/ldap.conf which is making me icky.

According to the man pages it looks like idmap_adex should do the trick
for me, however I can't get things to work.  (see config files below)

Running 'wbinfo -u' does give me a the list of valid users, however
'getent passwd' waits a second after displaying the local users and then
just gives me back the command-line prompt.  

In /var/log/samba/log.winbindd-idmap I see:


==
...
[2010/07/28 18:10:01,  0] winbindd/idmap.c:201(smb_register_idmap_alloc)
  idmap_alloc module tdb already registered!
[2010/07/28 18:10:01,  0] winbindd/idmap.c:149(smb_register_idmap)
  Idmap module passdb already registered!
[2010/07/28 18:10:01,  0] winbindd/idmap.c:149(smb_register_idmap)
  Idmap module nss already registered!
[2010/07/28 18:10:01,  1] winbindd/idmap.c:580(idmap_alloc_init)
  could not find idmap alloc module adex
[2010/07/28 18:10:01,  1] 
winbindd/idmap_adex/likewise_cell.c:346(cell_connect_dn)
  LWI: Failled to connect to cell dc=MY,dc=DOMAIN,dc=COM 
(NT_STATUS_NO_LOGON_SERVERS)
==


Note that the adex module is available on the filesystem:


==
r...@ubuntu:/var/log/samba# locate *adex*
/usr/lib/samba/idmap/adex.so
/usr/share/man/man8/idmap_adex.8.gz
==



What am I doing wrong?

Thanks in advance,

Nico

==

Environment:
server: Windows 2008R2
client: Ubuntu 10.04 64-bit running samba 3.4.7 (I can't find any 3.5
packages for Ubuntu unfortunately)


 /etc/samba/smb.conf
[global]

domain master = no
local master = no
prefered master = no
server signing = mandatory
wide links = yes
unix extensions = no
server string = Samba Server ubuntu
realm = MY.DOMAIN.COM
workgroup = MY
security = ADS
password server = my ad servers
encrypt passwords = yes
guest account = nobody
log file = /var/log/samba/samba.log
username map = /etc/samba/user.map
socket options = TCP_noDELAY SO_RCVBUF=8192 SO_SNDBUF=8192
wins support = yes
disable netbios = Yes
dns proxy = yes
obey pam restrictions = yes
pam password change = yes
winbind separator = /
winbind use default domain = yes 
winbind enum users = yes
winbind enum groups = yes
winbind nested groups = yes
idmap backend = adex
idmap uid = 1000-99
idmap gid = 999-99
winbind normalize names = yes
winbind nss info = adex
allow trusted domains = Yes
default service = homes
preload = global homes
valid users = @MY/Domain Users
admin users = MY/administrator


 /etc/nsswitch.conf
passwd: compat winbind
group:  compat winbind
shadow: compat winbind

 /etc/pam.d/common-account
account [success=3 new_authtok_reqd=done default=ignore]pam_unix.so 
account [success=2 new_authtok_reqd=done default=ignore]pam_winbind.so 
account [success=1 default=ignore]  pam_ldap.so 
account requisite   pam_deny.so
account requiredpam_permit.so
account requiredpam_krb5.so minimum_uid=1000

 /etc/pam.d/common-auth

auth[success=4 default=ignore]  pam_krb5.so minimum_uid=1000
auth[success=3 default=ignore]  pam_unix.so nullok_secure try_first_pass
auth[success=2 default=ignore]  pam_winbind.so krb5_auth 
krb5_ccache_type=FILE cached_login try_first_pass
auth[success=1 default=ignore]  pam_ldap.so use_first_pass
authrequisite   pam_deny.so
authrequiredpam_permit.so
authoptionalpam_cap.so 





-- 
With kind regards

Nico De Ranter
Senior System Administrator
Techsoft Centre

Technology and Software Centre Europe
The Corporate Village - Da Vincilaan 7-D1 - B-1935 Zaventem - Belgium

Phone:+32 (0)2 700 8641
Fax:  +32 (0)2 700 8622
E-mail:nico.deran...@eu.sony.com

A division of Sony Europe (Belgium) N.V.
VAT BE 0413.825.160 - RPR Brussels
Fortis - BIC GEBABEBB - IBAN BE41293037680010




The information contained in this message or any of its attachments may be 
confidential and is intended for the exclusive use of the addressee(s).  Any 
disclosure, reproduction, distribution or other dissemination or use of this 
communication is strictly prohibited without the express permission of the 
sender.  The views 

[Samba] Freak date/time format

2010-07-28 Thread alexander

Hi again.

I've realized exactly now that my whole system has freak date/time
information on my shares:

For example: 01/03/ 

In Linux the date/times are ok, but in the Windows point of view all the
files are wrong.

I'm using Samba 3.0.37 with OpenLDAP as my PDC.

The date/time of the server is ok, I've checked now and I've run again
ntpdate.

I've changed permissions and owner/group to force a change in the
informations of the file.

The dates still freak...

Any idea?

Is there any configuration or it's something about my server (yep, it's a
new server installation, running Gentoo) configuration?

[]s
Alexander
Brazil




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] mounting as cifs not working in Debian, works in Windows though

2010-07-28 Thread H.S.


I have a Debian machine running Unstable acting as a samba server. The 
server was installed a few days ago after a reinstall of the OS. The 
older installation's samba configs were backed up and restored after 
installation.


The Samba shares are accessible if I access them from a Windows 7 
client. The shares, however, cannot be accessed from a Debian client 
(newly installed amd64 Testing). The error I get from the Debian client 
is the following:

~$ sudo mount -v -t cifs -o user=username //sambaserver/Share ~/mnt/Share
Password:  username's password here 
mount.cifs kernel mount options: 
ip=192.168.0.8,unc=//sambaserver/Share,,ver=1,user=username,pass=

mount error(13): Permission denied
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)


I looked at the man page for mount.cifs and I have also tried the 
following with the same results:
$ sudo mount -v -t cifs -o user=SMBWG/username //sambaserver/Share 
~/mnt/Share

(SMBWG is the workgroup)
$ sudo mount -v -t cifs -o user=home.pvt/username //sambaserver/Share 
~/mnt/Share


What am I missing here?

Thanks.
--

Please reply to this list only. I read this list on its corresponding
newsgroup on gmane.org. Replies sent to my email address are just
filtered to a folder in my mailbox and get periodically deleted without
ever having been read.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Multiple Workgroups and Subnets

2010-07-28 Thread Tawanda Kavayi

Thanks. It worked.


Tawanda

Daniel Müller wrote:

Yes Group1 Server ist the wins for all

---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---

-Ursprüngliche Nachricht-
Von: Tawanda Kavayi [mailto:tawa...@earth.co.zw] 
Gesendet: Mittwoch, 28. Juli 2010 10:15

An: muel...@tropenklinik.de
Cc: t...@tms3.com; samba@lists.samba.org
Betreff: Re: AW: [Samba] Multiple Workgroups and Subnets

OK, but what of the client PC's in Group2. Do I assign them the Group1 
server as their WINS server, or do they now operate without WINS?



Tawanda

Daniel Müller wrote:
  

Example
On Server1

[global]
  


   workgroup = GROUP1
   netbios name = GROUP1_SRV
   domain master = yes
   local master = yes
   preferred master = yes
   os level = 65
   smb ports = 139
   dns proxy = no
   socket options = TCP_NODELAY SO_RCVBUF=8192 
SO_SNDBUF=8192

   wins support = yes
   name resolve order = wins lmhosts bcast host
   interfaces = lo eth0 192.168.10.254/24 127.0.0.1/8
   bind interfaces only = yes
   remote announce = 192.168.20.254/GROUP1
   remote browse sync = 192.168.20.254
   hosts allow = 127. 192.168.10. 192.168.20.

  

On Server 2


[global]
  


   workgroup = GROUP2
   netbios name = GROUP2_SRV
   domain master = yes
   local master = yes
   preferred master = yes
   os level = 65
   smb ports = 139
   dns proxy = no
   socket options = TCP_NODELAY SO_RCVBUF=8192 
SO_SNDBUF=8192

   wins support = no

  

-Wins server= IPOFTHESERVER1   ---  
  


   name resolve order = wins lmhosts bcast host
   interfaces = lo eth0 192.168.10.254/24 127.0.0.1/8
   bind interfaces only = yes
   remote announce = 192.168.10.254/GROUP2
   remote browse sync = 192.168.10.254
   hosts allow = 127. 192.168.10. 192.168.20.

  

---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---
-Ursprüngliche Nachricht-
Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]


Im
  

Auftrag von t...@tms3.com
Gesendet: Dienstag, 27. Juli 2010 23:27
An: Tawanda Kavayi
Cc: samba@lists.samba.org
Betreff: Re: [Samba] Multiple Workgroups and Subnets

Short answer:  Use 1 WINS server.



  


--- Original message ---
Subject: [Samba] Multiple Workgroups and Subnets
From: Tawanda Kavayi tawa...@earth.co.zw
To: samba@lists.samba.org
Date: Tuesday, 27/07/2010  2:01 PM

Hi,

I am configuring a network with two subnets with a different workgroup
in each subnet. My aim is to have users being able to view and access
shares on both workgroups. I have a Samba server in each
subnet/workgroup, configured as both the domain and local master for
each workgroup. Each server is also the WINS server for its subnet. 
The

setup is like this:

Subnet1:
network - 192.168.10.0/24
server IP - 192.168.10.254
workgroup - Group1

Subnet2:
network - 192.168.20.0/24
server IP - 192.168.20.254
workgroup - Group2

The two servers are configured identically, except for the information
above, so the smb.conf for the Group1 server looks like this:

[global]
   workgroup = GROUP1
   netbios name = GROUP1_SRV
   domain master = yes
   local master = yes
   preferred master = yes
   os level = 65
   smb ports = 139
   dns proxy = no
   socket options = TCP_NODELAY SO_RCVBUF=8192 
SO_SNDBUF=8192

   wins support = yes
   name resolve order = wins lmhosts bcast host
   interfaces = lo eth0 192.168.10.254/24 127.0.0.1/8
   bind interfaces only = yes
   remote announce = 192.168.20.254/GROUP1
   remote browse sync = 192.168.20.254
   hosts allow = 127. 192.168.10. 192.168.20.

The problem is that a machine in Group1 can see all the machines in 
it's

workgoup, plus the network for Group2 appears in network neighborhood,
but the machines and shares in Group2 do not.

To troubleshoot, I ran smbtree with debug level 5. What I picked out
from all the output was:

Cannot find master browser for workgroup GROUP2

How can I resolve this?



Re: [Samba] SAMBA4 Kerberos exchange question

2010-07-28 Thread Mark Pilant
 Can you be more specific in what it did not do?

It isn't so much what it did not do, but what it was able to do; it worked.

RFC 4757 specifies a message type (key usage) number of 8 should be used
for a TGS-REP response with an authenticator subkey.  However, SAMBA and
Windows use 9.  I would like to understand why.

 Have you read [MS-KILE]: Kerberos Protocol Extensions:

Yes, and [MS-PAC].

- Mark
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Does anybody use idmap_adex?

2010-07-28 Thread Mucke, Tobias, FCI4
Hi,

Actually I am using the Backend Idmap_AD. I thought Idmap_adex is still under 
heavy development.

Tobias


Mit freundlichen Grüßen

Tobias Mucke



LFK-Lenkflugkörpersysteme GmbH
Serverpool, FCI4
Landshuter Straße 26, 85716 Unterschleißheim, GERMANY
Phone: +49 89 3179 8438
Fax: +49 89 3179 8927
Mobile: +49 170 635 3830
E-Mail: tobias.mu...@mbda-systems.de

http://www.mbda.net

Chairman of the Supervisory Board: Antoine Bouvier
Managing Director: Werner Kaltenegger
Registered Office: Schrobenhausen
Commercial Register: Amtsgericht Ingolstadt, HRB 4365

Message sent from handheld via BlackBerry Server.

- Originalnachricht -
Von: samba-boun...@lists.samba.org samba-boun...@lists.samba.org
An: Nico De Ranter n...@sonycom.com
Cc: simo i...@samba.org; sa...@samba.org sa...@samba.org; 
samba-techni...@samba.org samba-techni...@samba.org
Gesendet: Wed Jul 28 17:48:37 2010
Betreff: Re: [Samba] Does anybody use idmap_adex?

Hi Nico,

Nico De Ranter wrote:
 
 Actually I was just about to start using it. Guess I shouldn't?
 
 I'm looking for a solution to integrate an existing linux environment
 into a Windows AD environment.  I already added all rc2307 info on the
 AD server.  Now I need a way for the linux systems to fetch the
 username, uid, gif, shell and homedir from AD.  Using LDAP directly is
 not an option as I can't do anonymous binds so that would require a
 hardcoded AD user and password on all systems (correct me if I'm wrong)
 According to the man pages it looks like idmap_adex will do exactly what
 I want. However I haven't been able to get it to work.
 
 Will idmap_adex disappear (if so, I won't invest anymore time in it)?
 Is there another way I can do this?

The older ad idmap and nss backend is there.
(man idmap_ad)
This is also maintained.
I guess this would also suit your needs.

Cheers - Michael

 Nico
 
 
 On Mon, 2010-06-28 at 20:31 +0200, Volker Lendecke wrote:
  On Mon, Jun 28, 2010 at 11:00:49AM -0500, Gerald Carter wrote:
   Correct.  I just reused a lot of the Likewise code here.
   My intent was originally to minimize change between the
   version that we shipped in Likewise Identity 4.x and what
   was in Samba and to leverage the Likewise QA team on both
   fronts.
  
  Ok, the question still remains:
  
  Anybody actually using the module?
  
  How many people do we offend if we remove it?
  
  Volker
  -- 
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/options/samba
 
 
 -- 
 With kind regards
 
 Nico De Ranter
 Senior System Administrator
 Techsoft Centre
 
 Technology and Software Centre Europe
 The Corporate Village - Da Vincilaan 7-D1 - B-1935 Zaventem - Belgium
 
 Phone:+32 (0)2 700 8641
 Fax:  +32 (0)2 700 8622
 E-mail:nico.deran...@eu.sony.com
 
 A division of Sony Europe (Belgium) N.V.
 VAT BE 0413.825.160 - RPR Brussels
 Fortis - BIC GEBABEBB - IBAN BE41293037680010
 
 
 
 
 The information contained in this message or any of its attachments may be 
 confidential and is intended for the exclusive use of the addressee(s).  Any 
 disclosure, reproduction, distribution or other dissemination or use of this 
 communication is strictly prohibited without the express permission of the 
 sender.  The views expressed in this email are those of the individual and 
 not necessarily those of Sony or Sony affiliated companies.  Sony email is 
 for business use only.
 
 This email and any response may be monitored by Sony to be in compliance with 
 Sony's global policies and standards
 
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] [Ubuntu 10.04] Share not visible from XP?

2010-07-28 Thread Christian PERRIER
Quoting Gilles (gilles.gana...@free.fr):
 Also tried this, running restart smbd after each addition, to no
 avail:

You apparently have a *browsing* problem, so it's likely that nmbd is
more the problem.

 ===
 # cat /etc/samba/smb.conf
 [global]
 workgroup = WORKGROUP
 server string = Samba Server %v
 guest account = nobody
 dns proxy = no
 
 wins support = yes
 remote announce = 192.168.0.255

I advice against messing up with browsing parameters without knwoing
exactly what you're doing...

Better increase the log level (try log level = 3) and log at
/var/log/samba/log.nmbd

 BTW, how can I check that Samba does use /etc/samba/smb.conf as its
 configuration file?


It is. This is the Ubuntu package and It Works(tm)..:-)

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] [samba] DNS update failed!

2010-07-28 Thread Alexander R. Fahrutdinov
В сообщении от 28 июля 2010 18:10:29 автор k.maksimov написал:
 Alexander R. Fahrutdinov wrote:
  В сообщении от 28 июля 2010 10:15:25 автор k.maksimov написал:
  Anton wrote:
  On 28 July 2010 01:45, k.maksimov k.maksi...@butb.by wrote:
  I have two networks: 192.168.1.0 with netmask 255.255.255.0 and
  172.16.0.0 with netmask 255.255.254.0, when I join in domain in first
  network hostname registered successfully, but in second network:
  
  sudo net ads join -U admin
  Enter admin's password:
  Using short domain name -- BUTB
  Joined 'TH-2-011' to realm 'butb.by'
  DNS update failed!
  
  As far as I can tell (I'm not entirely certain though)  this is an
  Active Directory / Windows Server configuration issue around loosening
  permissions enough for the DHCP service to update the DNS records.
  
  I don't know exactly what settings need to be configured though, as I
  didn't manage to get it working either. In the end I decided to keep
  the standard security and just use static IPs and DNS records for
  winbind machines.
  
  I'm use static IP and I haven't DHCP. and this problem not an AD:
  Windows machines successfully update DNS.
  
  also I have ~200 machines and I can't add every DNS record manually.
  

It seems, secure DNS update has broken in samba. I tried to use different 
versions of samba (3.2.4, 3.4.4, 3.5.4, etc), but always got an error during 
DNS update, in spite of wbinfo -t and net ads info commands output was OK.

Secure DNS update via nss-update script has sucssefully completed, but it 
requires a domain admin creditionals.
Guys from http://rc.quest.com/topics/ddns/old.php create a patch for nss-
update and GSSAPI library to use machine account instead admin one, but I 
don't try this.

So, I don't promise to disable the secure DNS update, because it decrease AD 
security.

Perghaps, somebody tell us, what we doing wrong?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Samba server running in AD domain, local users can still access share

2010-07-28 Thread David Roid
Hello all,

I have a Samba 3.5 server running in an AD domain and domain users can
access nonpublic shares with their credentials. Good since this is what I
want.

However accidentally I found that local users (of the server itself) could
also access nonpublic shares with their credentials. Is this a bug or Samba
works this way, accepting both local and domain users? Is there anyway I can
make the server just dedicates to AD domain users?

Thanks and Regards
David
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Build status as of Wed Jul 28 06:00:02 2010

2010-07-28 Thread build
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2010-07-27 
00:00:02.0 -0600
+++ /home/build/master/cache/broken_results.txt 2010-07-28 00:00:03.0 
-0600
@@ -1,9 +1,9 @@
-Build status as of Tue Jul 27 06:00:01 2010
+Build status as of Wed Jul 28 06:00:02 2010
 
 Build counts:
 Tree Total  Broken Panic 
 build_farm   0  0  0 
-ccache   32 1  0 
+ccache   32 2  0 
 ldb  32 9  0 
 libreplace   32 11 0 
 lorikeet 0  0  0 
@@ -13,8 +13,8 @@
 samba-docs   0  0  0 
 samba-web0  0  0 
 samba_3_current 32 32 4 
-samba_3_master 32 32 1 
-samba_3_next 32 32 6 
+samba_3_master 32 32 4 
+samba_3_next 32 31 6 
 samba_4_0_test 32 32 0 
 samba_4_0_waf 36 35 1 
 talloc   32 7  0 


[SCM] Samba Shared Repository - branch master updated

2010-07-28 Thread Karolin Seeger
The branch, master has been updated
   via  a20ee81... WHATSNEW: Update changes.
  from  dace013... s3: Remove a typedef (struct file_info)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit a20ee817b269f575e1c38a7d48d7d0a81ef108b4
Author: Karolin Seeger ksee...@samba.org
Date:   Wed Jul 28 09:27:43 2010 +0200

WHATSNEW: Update changes.

Thanks to Simo for providing the summary!

Karolin

---

Summary of changes:
 WHATSNEW.txt |   37 +
 1 files changed, 37 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 512bddd..5668564 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -43,6 +43,43 @@ reason is to use more of our infrastructure and test this 
infrastructure by
 using it. With this approach more code in Winbind is shared.
 
 
+New Spoolss code
+
+
+The spoolss and the old RAP printing code have been completely
+overhauled and refactored.
+
+All calls from lanman/printing code has been changed to go through the
+spoolss RPC interfaces, this allows us to keep all checks in one place
+and avoid special cases in the main printing code.
+Printing code has been therefore confined within the spoolss code.
+
+All the printing code, including the spoolss RPC interfaces has been
+changed to use the winreg RPC interfaces to store all data.
+All data has been migrated from custom, arbitrary TDB files to the
+registry interface. This transition allow us to present correct data to
+windows client accessing the server registry through the winreg RPC
+interfaces to query for printer data. Data is served out from a real
+registry implementation and therefore arguably 100% forward compatible.
+
+Migration code from the previous TDB files formats is provided. This
+code is automatically invoked the first time the new code is run on the
+server. Although manual migration is also available using the 'net
+printer migrate' command.
+
+These changes not only make all the spoolss code much more closer to
+the spec, it also greatly improves our internal testing of both
+spoolss and winreg interfaces, and reduces overall code duplication.
+
+As part of this work, new tests have been also added to increase
+coverage.
+
+This code will also allow, in future, an easy transition to split out
+the spooling functions into a separate daemon for those OEMs that do not
+need printing functionality in their appliances, reducing the code
+footprint.
+
+
 SMB Traffic Analyzer
 
 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-6-test updated

2010-07-28 Thread Karolin Seeger
The branch, v3-6-test has been updated
   via  8c0c394... VERSION: Bump version to 3.6.0pre1.
   via  e3f8e0d... VERSION: Adapt version string.
  from  a20ee81... WHATSNEW: Update changes.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test


- Log -
commit 8c0c3940986945406ca9f35112498eacddaed5c9
Author: Karolin Seeger ksee...@samba.org
Date:   Wed Jul 28 09:47:55 2010 +0200

VERSION: Bump version to 3.6.0pre1.

Karolin

commit e3f8e0d14c109c987aac2cbf8c55eda25ab5d427
Author: Karolin Seeger ksee...@samba.org
Date:   Wed Jul 28 09:46:51 2010 +0200

VERSION: Adapt version string.

Karolin

---

Summary of changes:
 source3/VERSION |4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/VERSION b/source3/VERSION
index fcab12a..c6eac76 100644
--- a/source3/VERSION
+++ b/source3/VERSION
@@ -46,7 +46,7 @@ SAMBA_VERSION_REVISION=
 # e.g. SAMBA_VERSION_PRE_RELEASE=1 #
 #  -  2.2.9pre1 #
 
-SAMBA_VERSION_PRE_RELEASE=
+SAMBA_VERSION_PRE_RELEASE=1
 
 
 # For 'rc' releases the version will be#
@@ -84,7 +84,7 @@ SAMBA_VERSION_IS_GIT_SNAPSHOT=yes
 #   SAMBA_VERSION_VENDOR_FUNCTION  #
 #  #
 
-SAMBA_VERSION_VENDOR_SUFFIX=devel
+SAMBA_VERSION_VENDOR_SUFFIX=test
 SAMBA_VERSION_VENDOR_PATCH=
 
 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-6-stable updated

2010-07-28 Thread Karolin Seeger
The branch, v3-6-stable has been updated
   via  9ffcc43... VERSION: Bump version to 3.6.0pre1.
   via  a82835a... VERSION: Adapt version string.
  from  a20ee81... WHATSNEW: Update changes.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-stable


- Log -
commit 9ffcc437a17a673ec8c75e94f16345f2a9a4ab7b
Author: Karolin Seeger ksee...@samba.org
Date:   Wed Jul 28 09:47:55 2010 +0200

VERSION: Bump version to 3.6.0pre1.

Karolin
(cherry picked from commit 8c0c3940986945406ca9f35112498eacddaed5c9)

commit a82835a5fdd85c53191fd145dca32a9feb800175
Author: Karolin Seeger ksee...@samba.org
Date:   Wed Jul 28 09:45:39 2010 +0200

VERSION: Adapt version string.

Karolin

---

Summary of changes:
 source3/VERSION |6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/VERSION b/source3/VERSION
index fcab12a..e984ecc 100644
--- a/source3/VERSION
+++ b/source3/VERSION
@@ -46,7 +46,7 @@ SAMBA_VERSION_REVISION=
 # e.g. SAMBA_VERSION_PRE_RELEASE=1 #
 #  -  2.2.9pre1 #
 
-SAMBA_VERSION_PRE_RELEASE=
+SAMBA_VERSION_PRE_RELEASE=1
 
 
 # For 'rc' releases the version will be#
@@ -68,7 +68,7 @@ SAMBA_VERSION_RC_RELEASE=
 # e.g. SAMBA_VERSION_IS_SVN_SNAPSHOT=yes   #
 #  -  3.0.0-SVN-build-199   #
 
-SAMBA_VERSION_IS_GIT_SNAPSHOT=yes
+SAMBA_VERSION_IS_GIT_SNAPSHOT=no
 
 
 # This can be set by vendors if they want...   #
@@ -84,7 +84,7 @@ SAMBA_VERSION_IS_GIT_SNAPSHOT=yes
 #   SAMBA_VERSION_VENDOR_FUNCTION  #
 #  #
 
-SAMBA_VERSION_VENDOR_SUFFIX=devel
+SAMBA_VERSION_VENDOR_SUFFIX=
 SAMBA_VERSION_VENDOR_PATCH=
 
 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-6-test updated

2010-07-28 Thread Karolin Seeger
The branch, v3-6-test has been updated
   via  27833f5... s3/configure: Disable the automatic merged build.
  from  8c0c394... VERSION: Bump version to 3.6.0pre1.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test


- Log -
commit 27833f5ec12944ac3e521ee62856654c8cca9eba
Author: Karolin Seeger ksee...@samba.org
Date:   Wed Apr 15 09:52:23 2009 +0200

s3/configure: Disable the automatic merged build.

Karolin

---

Summary of changes:
 source3/configure.in |7 ---
 1 files changed, 4 insertions(+), 3 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/configure.in b/source3/configure.in
index 905ad23..4c479ce 100644
--- a/source3/configure.in
+++ b/source3/configure.in
@@ -6816,9 +6816,10 @@ if test x$enable_merged_build = xauto; then
AC_MSG_RESULT([$merged_build_possible])
 
# Enable merged build automatically if possible, when in developer mode
-   if test x$developer = xyes; then
-   enable_merged_build=$merged_build_possible
-   fi
+   # Don't enable merged build automatically in 3.6.0.
+   #if test x$developer = xyes; then
+   #   enable_merged_build=$merged_build_possible
+   #fi
 fi
 
 if test x$enable_merged_build = xyes; then


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-6-stable updated

2010-07-28 Thread Karolin Seeger
The branch, v3-6-stable has been updated
   via  295b30f... s3/configure: Disable the automatic merged build.
  from  9ffcc43... VERSION: Bump version to 3.6.0pre1.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-stable


- Log -
commit 295b30fbeb80f1c818a5b813caae3d0e231dc537
Author: Karolin Seeger ksee...@samba.org
Date:   Wed Apr 15 09:52:23 2009 +0200

s3/configure: Disable the automatic merged build.

Karolin
(cherry picked from commit 27833f5ec12944ac3e521ee62856654c8cca9eba)

---

Summary of changes:
 source3/configure.in |7 ---
 1 files changed, 4 insertions(+), 3 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/configure.in b/source3/configure.in
index 905ad23..4c479ce 100644
--- a/source3/configure.in
+++ b/source3/configure.in
@@ -6816,9 +6816,10 @@ if test x$enable_merged_build = xauto; then
AC_MSG_RESULT([$merged_build_possible])
 
# Enable merged build automatically if possible, when in developer mode
-   if test x$developer = xyes; then
-   enable_merged_build=$merged_build_possible
-   fi
+   # Don't enable merged build automatically in 3.6.0.
+   #if test x$developer = xyes; then
+   #   enable_merged_build=$merged_build_possible
+   #fi
 fi
 
 if test x$enable_merged_build = xyes; then


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-07-28 Thread Andreas Schneider
The branch, master has been updated
   via  f7a1453... s3-include: Use struct pipes struct and get rid of the 
typedef.
   via  97dba0c... s3-winbind: Use struct pipes_struct.
   via  6457f81... s3-uid: Use struct pipes_struct.
   via  d34fc3d... s3-wkssvc: Use struct pipes_struct.
   via  31a4240... s3-winreg: Use struct pipes_struct.
   via  ce59e69... s3-svcctl: Use struct pipes_struct.
   via  0fee377... s3-srvsvc: Use struct pipes_struct.
   via  64fbaad... s3-spoolss: Use struct pipes_struct.
   via  c3817fe... s3-samr: Use struct pipes_struct.
   via  667d43d... s3-rpc_pipe: Use struct pipes_struct.
   via  33d3092... s3-ntsvcs: Use struct pipes_struct.
   via  3fd138f... s3-netlogon: Use struct pipes_struct.
   via  872f965... s3-lsa: Use struct pipes_struct.
   via  35d629d... s3-initshutdown: Use struct pipes_struct.
   via  ba023ae... s3-eventlog: Use struct pipes_struct.
   via  c9e3737... s3-echo: Use struct pipes_struct.
   via  96786a7... s3-dssetup: Use struct pipes_struct.
   via  2956bc9... s3-dfs: Use struct pipes_struct.
   via  46397f7... s3-rpc_server: Use struct pipes_struct.
   via  c1e8168... pidl: Use struct pipes_struct.
   via  dc87fbc... s3-lib: Remove redefinition of RL_COMPLETION_CAST.
  from  a20ee81... WHATSNEW: Update changes.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit f7a1453957223ead6ca2297dc57ce8c353f7fe5d
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:28:57 2010 +0200

s3-include: Use struct pipes struct and get rid of the typedef.

commit 97dba0c0d957e17ac89e3c78eb5749621eab2a43
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:28:36 2010 +0200

s3-winbind: Use struct pipes_struct.

commit 6457f814f50a00496384aad1712aba53d2609f63
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:28:18 2010 +0200

s3-uid: Use struct pipes_struct.

commit d34fc3d1682c85c7d36fab168bc75bbb61b2931b
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:27:55 2010 +0200

s3-wkssvc: Use struct pipes_struct.

commit 31a4240b8dd4d3f6b7f181b4d70284833589f696
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:20:10 2010 +0200

s3-winreg: Use struct pipes_struct.

commit ce59e69bcab308c998d8a54a68c805444d6e93ee
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:19:26 2010 +0200

s3-svcctl: Use struct pipes_struct.

commit 0fee377a52762a36a435e3fe2ffe0853cdac0bef
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:19:05 2010 +0200

s3-srvsvc: Use struct pipes_struct.

commit 64fbaad942d12b343badaf8e45115a5b5ce5ea0f
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:18:08 2010 +0200

s3-spoolss: Use struct pipes_struct.

commit c3817fe9d220a3cee3d651db2808212de2b7f2cb
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:17:21 2010 +0200

s3-samr: Use struct pipes_struct.

commit 667d43d4c8916043e6474418a57aaa0d03aee078
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:16:34 2010 +0200

s3-rpc_pipe: Use struct pipes_struct.

commit 33d30926d1a9c2f077bdbc186c34ee01d9d2e74b
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:15:45 2010 +0200

s3-ntsvcs: Use struct pipes_struct.

commit 3fd138fae33529fbba2da4853c10f026a6b11fb4
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 09:49:07 2010 +0200

s3-netlogon: Use struct pipes_struct.

commit 872f9655587a0bb314172797c799cd5d2a0b4e8f
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 09:48:42 2010 +0200

s3-lsa: Use struct pipes_struct.

commit 35d629d54ce30a4dbf6a53f4616ed77dd0033a1b
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 09:48:25 2010 +0200

s3-initshutdown: Use struct pipes_struct.

commit ba023aeaa95161029a0bec7dd79116a0c9db22f7
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 09:48:08 2010 +0200

s3-eventlog: Use struct pipes_struct.

commit c9e37375361714dce009c5305e185e73a483a7eb
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 09:47:40 2010 +0200

s3-echo: Use struct pipes_struct.

commit 96786a7df036d095649de300be4f37f8bcb70a6c
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 09:47:25 2010 +0200

s3-dssetup: Use struct pipes_struct.

commit 2956bc986f319f29bce3262ae52dd990d938146c
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 09:47:04 2010 +0200

s3-dfs: Use struct pipes_struct.

commit 46397f788bf283f7eb0f26e6eeb6a2926d2769bc
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 09:46:43 2010 +0200

s3-rpc_server: Use struct pipes_struct.

commit c1e81686af605bf0dafb45c316bfca3cd1a2cf9a
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 09:23:25 2010 +0200

pidl: Use struct pipes_struct.

commit dc87fbcb0f9a6ce1d722c62dafee540e75ba310e
Author: Andreas 

[SCM] Samba Shared Repository - branch v3-5-test updated

2010-07-28 Thread Karolin Seeger
The branch, v3-5-test has been updated
   via  de7cb26... s3: Fix bug 7578
  from  97e0238... s3-libsmb: Fix bug #7577.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-test


- Log -
commit de7cb260e2145674bd5428c3e08b885fb0450659
Author: Jeremy Allison j...@samba.org
Date:   Tue Jul 27 10:05:16 2010 +0200

s3: Fix bug 7578

'net idmap restore' fails to set HWM, causing duplicates

---

Summary of changes:
 source3/winbindd/winbindd_dual_srv.c |4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/winbindd/winbindd_dual_srv.c 
b/source3/winbindd/winbindd_dual_srv.c
index b247d5a..9fef780 100644
--- a/source3/winbindd/winbindd_dual_srv.c
+++ b/source3/winbindd/winbindd_dual_srv.c
@@ -610,12 +610,12 @@ NTSTATUS _wbint_SetHWM(pipes_struct *p, struct 
wbint_SetHWM *r)
 
id.id = r-in.id;
 
-   switch (id.type) {
+   switch (r-in.type) {
case WBINT_ID_TYPE_UID:
id.type = ID_TYPE_UID;
status = idmap_set_uid_hwm(id);
break;
-   case ID_TYPE_GID:
+   case WBINT_ID_TYPE_GID:
id.type = ID_TYPE_GID;
status = idmap_set_gid_hwm(id);
break;


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-07-28 Thread Andreas Schneider
The branch, master has been updated
   via  6ffd7dc... s3-rpc: Use struct pipes_struct.
  from  f7a1453... s3-include: Use struct pipes struct and get rid of the 
typedef.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 6ffd7dc7805f572bcedf0693514f6aeb7be861f9
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 11:06:36 2010 +0200

s3-rpc: Use struct pipes_struct.

---

Summary of changes:
 source3/rpc_server/rpc_ncacn_np_internal.c |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/rpc_server/rpc_ncacn_np_internal.c 
b/source3/rpc_server/rpc_ncacn_np_internal.c
index a826335..9bb5428 100644
--- a/source3/rpc_server/rpc_ncacn_np_internal.c
+++ b/source3/rpc_server/rpc_ncacn_np_internal.c
@@ -27,7 +27,7 @@
 
 static int pipes_open;
 
-static pipes_struct *InternalPipes;
+static struct pipes_struct *InternalPipes;
 
 /* TODO
  * the following prototypes are declared here to avoid


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-6-test updated

2010-07-28 Thread Karolin Seeger
The branch, v3-6-test has been updated
   via  e4b3309... s3-include: Use struct pipes struct and get rid of the 
typedef. (cherry picked from commit f7a1453957223ead6ca2297dc57ce8c353f7fe5d)
   via  bc3e728... s3-winbind: Use struct pipes_struct. (cherry picked from 
commit 97dba0c0d957e17ac89e3c78eb5749621eab2a43)
   via  df3d8dd... s3-uid: Use struct pipes_struct. (cherry picked from 
commit 6457f814f50a00496384aad1712aba53d2609f63)
   via  131db03... s3-wkssvc: Use struct pipes_struct. (cherry picked from 
commit d34fc3d1682c85c7d36fab168bc75bbb61b2931b)
   via  f2f2e36... s3-winreg: Use struct pipes_struct. (cherry picked from 
commit 31a4240b8dd4d3f6b7f181b4d70284833589f696)
   via  5d50028... s3-svcctl: Use struct pipes_struct. (cherry picked from 
commit ce59e69bcab308c998d8a54a68c805444d6e93ee)
   via  01ca496... s3-srvsvc: Use struct pipes_struct. (cherry picked from 
commit 0fee377a52762a36a435e3fe2ffe0853cdac0bef)
   via  aa83c86... s3-spoolss: Use struct pipes_struct. (cherry picked from 
commit 64fbaad942d12b343badaf8e45115a5b5ce5ea0f)
   via  190baa7... s3-samr: Use struct pipes_struct. (cherry picked from 
commit c3817fe9d220a3cee3d651db2808212de2b7f2cb)
   via  47b14fc... s3-rpc_pipe: Use struct pipes_struct. (cherry picked 
from commit 667d43d4c8916043e6474418a57aaa0d03aee078)
   via  00578f4... s3-ntsvcs: Use struct pipes_struct. (cherry picked from 
commit 33d30926d1a9c2f077bdbc186c34ee01d9d2e74b)
   via  5b68707... s3-netlogon: Use struct pipes_struct. (cherry picked 
from commit 3fd138fae33529fbba2da4853c10f026a6b11fb4)
   via  d1c7e52... s3-lsa: Use struct pipes_struct. (cherry picked from 
commit 872f9655587a0bb314172797c799cd5d2a0b4e8f)
   via  30ed816... s3-initshutdown: Use struct pipes_struct. (cherry picked 
from commit 35d629d54ce30a4dbf6a53f4616ed77dd0033a1b)
   via  11d086b... s3-eventlog: Use struct pipes_struct. (cherry picked 
from commit ba023aeaa95161029a0bec7dd79116a0c9db22f7)
   via  fd9d124... s3-echo: Use struct pipes_struct. (cherry picked from 
commit c9e37375361714dce009c5305e185e73a483a7eb)
   via  ce1b9cf... s3-dssetup: Use struct pipes_struct. (cherry picked from 
commit 96786a7df036d095649de300be4f37f8bcb70a6c)
   via  6575dee... s3-dfs: Use struct pipes_struct. (cherry picked from 
commit 2956bc986f319f29bce3262ae52dd990d938146c)
   via  cb5bdb3... s3-rpc_server: Use struct pipes_struct. (cherry picked 
from commit 46397f788bf283f7eb0f26e6eeb6a2926d2769bc)
   via  78590fa... pidl: Use struct pipes_struct. (cherry picked from 
commit c1e81686af605bf0dafb45c316bfca3cd1a2cf9a)
   via  cc54f68... s3-lib: Remove redefinition of RL_COMPLETION_CAST.
  from  27833f5... s3/configure: Disable the automatic merged build.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test


- Log -
commit e4b330917aa6003de007631d7406e62b281fc9fa
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:28:57 2010 +0200

s3-include: Use struct pipes struct and get rid of the typedef.
(cherry picked from commit f7a1453957223ead6ca2297dc57ce8c353f7fe5d)

commit bc3e7284c292907db0854b83cee12b4b3ff257a4
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:28:36 2010 +0200

s3-winbind: Use struct pipes_struct.
(cherry picked from commit 97dba0c0d957e17ac89e3c78eb5749621eab2a43)

commit df3d8dd2864cd9f42ad2ff6605c8250367ed12b2
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:28:18 2010 +0200

s3-uid: Use struct pipes_struct.
(cherry picked from commit 6457f814f50a00496384aad1712aba53d2609f63)

commit 131db0326031eacf9cf9a773785828fd1f0dfbdc
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:27:55 2010 +0200

s3-wkssvc: Use struct pipes_struct.
(cherry picked from commit d34fc3d1682c85c7d36fab168bc75bbb61b2931b)

commit f2f2e36dcd2d1cf67e70ea7c81aac4e0879d2f2f
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:20:10 2010 +0200

s3-winreg: Use struct pipes_struct.
(cherry picked from commit 31a4240b8dd4d3f6b7f181b4d70284833589f696)

commit 5d500282df204828519ef070d07f4393e95b7c39
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:19:26 2010 +0200

s3-svcctl: Use struct pipes_struct.
(cherry picked from commit ce59e69bcab308c998d8a54a68c805444d6e93ee)

commit 01ca496b5db2f8b4fd7082f9d1882af9fd391e4e
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:19:05 2010 +0200

s3-srvsvc: Use struct pipes_struct.
(cherry picked from commit 0fee377a52762a36a435e3fe2ffe0853cdac0bef)

commit aa83c863c706dd2fea4e7ae1398d47376e0ac857
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:18:08 2010 +0200

s3-spoolss: Use struct pipes_struct.
(cherry picked from commit 64fbaad942d12b343badaf8e45115a5b5ce5ea0f)

commit 190baa7cf01099cc550a6d719f30d986e6dd5fcb
Author: Andreas Schneider a...@samba.org
Date:   

[SCM] Samba Shared Repository - branch v3-6-test updated

2010-07-28 Thread Karolin Seeger
The branch, v3-6-test has been updated
   via  f8cd951... s3-rpc: Use struct pipes_struct. (cherry picked from 
commit 6ffd7dc7805f572bcedf0693514f6aeb7be861f9)
  from  e4b3309... s3-include: Use struct pipes struct and get rid of the 
typedef. (cherry picked from commit f7a1453957223ead6ca2297dc57ce8c353f7fe5d)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test


- Log -
commit f8cd9511b101a563d786e778369daa4877d0955f
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 11:06:36 2010 +0200

s3-rpc: Use struct pipes_struct.
(cherry picked from commit 6ffd7dc7805f572bcedf0693514f6aeb7be861f9)

---

Summary of changes:
 source3/rpc_server/rpc_ncacn_np_internal.c |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/rpc_server/rpc_ncacn_np_internal.c 
b/source3/rpc_server/rpc_ncacn_np_internal.c
index a826335..9bb5428 100644
--- a/source3/rpc_server/rpc_ncacn_np_internal.c
+++ b/source3/rpc_server/rpc_ncacn_np_internal.c
@@ -27,7 +27,7 @@
 
 static int pipes_open;
 
-static pipes_struct *InternalPipes;
+static struct pipes_struct *InternalPipes;
 
 /* TODO
  * the following prototypes are declared here to avoid


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-6-stable updated

2010-07-28 Thread Karolin Seeger
The branch, v3-6-stable has been updated
   via  d5e4d87... s3-rpc: Use struct pipes_struct. (cherry picked from 
commit 6ffd7dc7805f572bcedf0693514f6aeb7be861f9) (cherry picked from commit 
f8cd9511b101a563d786e778369daa4877d0955f)
   via  099289e4.. s3-include: Use struct pipes struct and get rid of the 
typedef. (cherry picked from commit f7a1453957223ead6ca2297dc57ce8c353f7fe5d) 
(cherry picked from commit e4b330917aa6003de007631d7406e62b281fc9fa)
   via  d650ef1... s3-winbind: Use struct pipes_struct. (cherry picked from 
commit 97dba0c0d957e17ac89e3c78eb5749621eab2a43) (cherry picked from commit 
bc3e7284c292907db0854b83cee12b4b3ff257a4)
   via  f800a37... s3-uid: Use struct pipes_struct. (cherry picked from 
commit 6457f814f50a00496384aad1712aba53d2609f63) (cherry picked from commit 
df3d8dd2864cd9f42ad2ff6605c8250367ed12b2)
   via  e2972a5... s3-wkssvc: Use struct pipes_struct. (cherry picked from 
commit d34fc3d1682c85c7d36fab168bc75bbb61b2931b) (cherry picked from commit 
131db0326031eacf9cf9a773785828fd1f0dfbdc)
   via  717b468... s3-winreg: Use struct pipes_struct. (cherry picked from 
commit 31a4240b8dd4d3f6b7f181b4d70284833589f696) (cherry picked from commit 
f2f2e36dcd2d1cf67e70ea7c81aac4e0879d2f2f)
   via  5c35d54... s3-svcctl: Use struct pipes_struct. (cherry picked from 
commit ce59e69bcab308c998d8a54a68c805444d6e93ee) (cherry picked from commit 
5d500282df204828519ef070d07f4393e95b7c39)
   via  dfe2e03... s3-srvsvc: Use struct pipes_struct. (cherry picked from 
commit 0fee377a52762a36a435e3fe2ffe0853cdac0bef) (cherry picked from commit 
01ca496b5db2f8b4fd7082f9d1882af9fd391e4e)
   via  c44a241... s3-spoolss: Use struct pipes_struct. (cherry picked from 
commit 64fbaad942d12b343badaf8e45115a5b5ce5ea0f) (cherry picked from commit 
aa83c863c706dd2fea4e7ae1398d47376e0ac857)
   via  07f5433... s3-samr: Use struct pipes_struct. (cherry picked from 
commit c3817fe9d220a3cee3d651db2808212de2b7f2cb) (cherry picked from commit 
190baa7cf01099cc550a6d719f30d986e6dd5fcb)
   via  5961f17... s3-rpc_pipe: Use struct pipes_struct. (cherry picked 
from commit 667d43d4c8916043e6474418a57aaa0d03aee078) (cherry picked from 
commit 47b14fcf690f01867fcfb935a798ff04ede9b791)
   via  21a7ed8... s3-ntsvcs: Use struct pipes_struct. (cherry picked from 
commit 33d30926d1a9c2f077bdbc186c34ee01d9d2e74b) (cherry picked from commit 
00578f40119167c1381c2c1f5e45c60cec2b0fad)
   via  3ecb593... s3-netlogon: Use struct pipes_struct. (cherry picked 
from commit 3fd138fae33529fbba2da4853c10f026a6b11fb4) (cherry picked from 
commit 5b68707c918016c402ab2c4851a73c859c2ef5fc)
   via  909d2d5... s3-lsa: Use struct pipes_struct. (cherry picked from 
commit 872f9655587a0bb314172797c799cd5d2a0b4e8f) (cherry picked from commit 
d1c7e525ca523fad41e7a8b01f2f3dbeec08ecfc)
   via  44d876ea.. s3-initshutdown: Use struct pipes_struct. (cherry picked 
from commit 35d629d54ce30a4dbf6a53f4616ed77dd0033a1b) (cherry picked from 
commit 30ed816d6571906b02f380e64daa197fc0814678)
   via  27c53d6... s3-eventlog: Use struct pipes_struct. (cherry picked 
from commit ba023aeaa95161029a0bec7dd79116a0c9db22f7) (cherry picked from 
commit 11d086bc79ec98d0905afb6f07c8648237d7aa3a)
   via  19dba23... s3-echo: Use struct pipes_struct. (cherry picked from 
commit c9e37375361714dce009c5305e185e73a483a7eb) (cherry picked from commit 
fd9d1240864f6d8d15cd80d069960428b522bb1f)
   via  1289baf... s3-dssetup: Use struct pipes_struct. (cherry picked from 
commit 96786a7df036d095649de300be4f37f8bcb70a6c) (cherry picked from commit 
ce1b9cf7b0f2da4c8104eab4dddca393b7ef832a)
   via  429abf8... s3-dfs: Use struct pipes_struct. (cherry picked from 
commit 2956bc986f319f29bce3262ae52dd990d938146c) (cherry picked from commit 
6575deed99341fe0390ba362fea9a6659cc195d5)
   via  4502957... s3-rpc_server: Use struct pipes_struct. (cherry picked 
from commit 46397f788bf283f7eb0f26e6eeb6a2926d2769bc) (cherry picked from 
commit cb5bdb37a0ee693eff4491e90e60b9d1d5c127d9)
   via  a8f24a3... pidl: Use struct pipes_struct. (cherry picked from 
commit c1e81686af605bf0dafb45c316bfca3cd1a2cf9a) (cherry picked from commit 
78590fa79a7ebf418adda410435cf2cb026a24f2)
   via  e23b761... s3-lib: Remove redefinition of RL_COMPLETION_CAST.
  from  295b30f... s3/configure: Disable the automatic merged build.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-stable


- Log -
commit d5e4d87767cfc9e8f92fd99222c1e3af3de59d75
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 11:06:36 2010 +0200

s3-rpc: Use struct pipes_struct.
(cherry picked from commit 6ffd7dc7805f572bcedf0693514f6aeb7be861f9)
(cherry picked from commit f8cd9511b101a563d786e778369daa4877d0955f)

commit 099289e4f78605affa4ef3c29d6fc10f2a14c2ba
Author: Andreas Schneider a...@samba.org
Date:   Wed Jul 28 10:28:57 2010 +0200

s3-include: Use struct 

[SCM] Samba Website Repository - branch master updated

2010-07-28 Thread Karolin Seeger
The branch, master has been updated
   via  11608c9... samba-web: Announce Samba 3.6.0pre1.
  from  d6710ff... Added ICE Systems at request of Neil Smith 
neil.sm...@icesystems.com.au..

http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master


- Log -
commit 11608c99ec3eb28cf67199a89b53a80bb33f9bbc
Author: Karolin Seeger ksee...@samba.org
Date:   Wed Jul 28 12:57:19 2010 +0200

samba-web: Announce Samba 3.6.0pre1.

Karolin

---

Summary of changes:
 devel/index.html|8 +++
 generated_news/latest_10_bodies.html|   32 ++---
 generated_news/latest_10_headlines.html |4 +-
 generated_news/latest_2_bodies.html |   33 ++
 4 files changed, 50 insertions(+), 27 deletions(-)


Changeset truncated at 500 lines:

diff --git a/devel/index.html b/devel/index.html
index 6837f3f..d3e36c9 100755
--- a/devel/index.html
+++ b/devel/index.html
@@ -91,6 +91,14 @@ Git for Samba Development/a./p
   pThis is the current branch for 3.5.x production releases./p
 /li
 li
+  h4emv3-6-test/em/h4
+  pThis is the current branch for 3.6.x development./p
+/li
+li
+  h4emv3-6-stable/em/h4
+  pThis is the current branch for 3.6.x production releases./p
+/li
+li
   h4emv4-0-stable/em/h4
   pThis is the current branch for 4.x.x Alpha releases./p
 /li
diff --git a/generated_news/latest_10_bodies.html 
b/generated_news/latest_10_bodies.html
index 78cbcfd..f6ca6cf 100644
--- a/generated_news/latest_10_bodies.html
+++ b/generated_news/latest_10_bodies.html
@@ -1,4 +1,24 @@
  
+   h5a name=3.6.0pre128 July 2010/a/h5
+   p class=headlineSamba 3.6.0pre1 Available for Download/p
+   pSamba 3.6.0pre1 is available for download.  This is a
+ preview of the next upgrade production release version of Samba.
+ It is intended for btesting purposes only/b.  Please test and 
+ a href=https://bugzilla.samba.org/;report any bugs that you
+ find/a.  Please read the changes in the 
+ a href=http://samba.org/samba/ftp/pre/WHATSNEW-3-6-0pre1.txt;Release 
Notes/a
+ for details on new features and difference in behavior from
+ previous releases./p
+
+ pThe a href=http://samba.org/samba/ftp/pre/samba-3.6.0pre1.tar.gz;Samba 
3.6.0pre1
+ source code/a can be downloaded now.  The a
+ href=http://samba.org/samba/ftp/pre/samba-3.6.0pre1.tar.asc;GnuPG
+ signature is for the emun/emcompressed tarball/a.
+ Precompiled packages will
+ be made available on a volunteer basis and can be found in the 
+ a href=http://samba.org/samba/ftp/Binary_Packages/;Binary_Packages 
download area/a./p
+
+ 
h5a name=3.5.423 June 2010/a/h5
p class=headlineSamba 3.5.4 Available for Download/p
pThis is the latest stable release of the Samba 3.5 series./p
@@ -154,16 +174,4 @@ using GnuPG (ID 6568B7EA).  The source code can be
 See a href=http://www.samba.org/samba/history/samba-3.3.12.html;the release 
notes for more
 info/a./p
 
- 
-   h5a name=3.5.0 1 March 2010/a/h5
-   p class=headlineSamba 3.5.0 Available for Download/p
-   pThis is the first stable release of the Samba 3.5 series./p
-
-pThe uncompressed tarballs and patch files have been signed
-using GnuPG (ID 6568B7EA).  The source code can be  
-a href=http://samba.org/samba/ftp/stable/samba-3.5.0.tar.gz;downloaded
-now/a.  See a href=http://samba.org/samba/history/samba-3.5.0.html;the
-release notes for more info/a./p
-
-
 
diff --git a/generated_news/latest_10_headlines.html 
b/generated_news/latest_10_headlines.html
index 48bf7bf..4a1c23d 100644
--- a/generated_news/latest_10_headlines.html
+++ b/generated_news/latest_10_headlines.html
@@ -1,4 +1,6 @@
 ul
+   li28 July 2010 a href=#3.6.0pre1Samba 3.6.0pre1 Available for 
Download/a/li
+
li23 June 2010 a href=#3.5.4Samba 3.5.4 Available for 
Download/a/li
 
li16 June 2010 a href=#3.3.13Samba 3.3.13 Security Release 
Available/a/li
@@ -16,6 +18,4 @@
li 8 March 2010 a href=#3.4.7Samba 3.4.7 Security Release 
Available/a/li
 
li 8 March 2010 a href=#3.3.12Samba 3.3.12 Security Release 
Available/a/li
-
-   li 1 March 2010 a href=#3.5.0Samba 3.5.0 Available for 
Download/a/li
 /ul
diff --git a/generated_news/latest_2_bodies.html 
b/generated_news/latest_2_bodies.html
index 9929fc5..28b66c1 100644
--- a/generated_news/latest_2_bodies.html
+++ b/generated_news/latest_2_bodies.html
@@ -1,4 +1,24 @@
  
+   h5a name=3.6.0pre128 July 2010/a/h5
+   p class=headlineSamba 3.6.0pre1 Available for Download/p
+   pSamba 3.6.0pre1 is available for download.  This is a
+ preview of the next upgrade production release version of Samba.
+ It is intended for btesting purposes only/b.  Please test and 
+ a href=https://bugzilla.samba.org/;report any bugs that you
+ find/a.  Please read the changes in the 
+ 

[SCM] Samba Shared Repository - branch master updated

2010-07-28 Thread Simo Sorce
The branch, master has been updated
   via  7208809... rpcclient: Use DCERPC_AUTH_LEVEL_CONNECT if no sign/seal 
is set for krb5 auth
   via  183e0a0... s3-dcerpc: Refactor calculate_data_len_tosend()
   via  c08d684... s3-dcerpc: Add auth trailer only when appropriate.
   via  866f85e... s3-dcerpc: consolidate unmarshalling of dcerpc_auth
   via  146af48... s3-dcerpc: revive cli_rpc_pipe_open_krb5()
   via  250e341... misc: Remove unused structure elements
   via  b00f9a0... s3-rpcclient: Allow choosing spnego mech: (ntlm/krb5)
   via  2463a87... s3-dcerpc: Use dcerpc_AuthType in pipe_auth_data
   via  1e915d2... s3-dcerpc: Cleanup and refactor create_rpc_bind_req()
   via  3c3237d... s3-auth: Remove unimplemented functions
   via  bfe53d4... s3-dcerpc: Set flags directly instead of calling 
unimplemented functions.
   via  7407c97... s3-dcerpc: Use dcerpc_check_auth in client code too
   via  9565e3f... s3-dcerpc: Make dcerpc_check_auth() common code
   via  5f2cca6... s3-dcerpc: Add the same paranoia checks we have in the 
client code
   via  49a8c29... s3-dcerpc: Split auth checking into a generic function.
   via  1fc71c9... s3-dcerpc do not pass pipes_struct to 
dcesrv_auth_request()
   via  2ce169c... s3-dcerpc: Make dcesrv_auth_request() return NTSTATUS 
codes
   via  aa4c5a2... s3-dcerpc: Use the common dcerpc_add_auth_footer() in 
the server code
   via  3139333... s3-dcerpc: Move dcerpc_add_auth_footer() to the common 
helpers file
   via  6f5cdf9... s3-dcerpc: Introduce generic helper function to add auth 
trailer
   via  1b57249... s3-dcerpc: Pass explicit arguments so that this is not 
client specific
   via  e2b0e43... s3-dcerpc: Move marshalling of dcerpc_auth_header in the 
callers
  from  6ffd7dc... s3-rpc: Use struct pipes_struct.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 72088096af8dbf57cbc85c71cd0eef4447e7560d
Author: Simo Sorce i...@samba.org
Date:   Wed Jul 21 12:11:37 2010 -0400

rpcclient: Use DCERPC_AUTH_LEVEL_CONNECT if no sign/seal is set for krb5 
auth

commit 183e0a0d9f87bc619cd832decf5745be1d28f598
Author: Simo Sorce i...@samba.org
Date:   Thu Jul 22 16:14:16 2010 -0400

s3-dcerpc: Refactor calculate_data_len_tosend()

commit c08d684f4ef679831e8fed69cd87e4d9b06cb3e0
Author: Simo Sorce i...@samba.org
Date:   Wed Jul 21 13:33:09 2010 -0400

s3-dcerpc: Add auth trailer only when appropriate.

commit 866f85e31973de356c3843836d5cacdbdf245e32
Author: Simo Sorce i...@samba.org
Date:   Wed Jul 21 12:12:58 2010 -0400

s3-dcerpc: consolidate unmarshalling of dcerpc_auth

commit 146af48d4887e8fa0c66bf53aa5f204366648478
Author: Simo Sorce i...@samba.org
Date:   Tue Jul 20 18:43:37 2010 -0400

s3-dcerpc: revive cli_rpc_pipe_open_krb5()

commit 250e341e0aad67c2f70fea597f34deadea1d2ccc
Author: Simo Sorce i...@samba.org
Date:   Tue Jul 20 18:39:46 2010 -0400

misc: Remove unused structure elements

commit b00f9a0a2d3b692dd12e182a2a4a7979c626dec7
Author: Simo Sorce i...@samba.org
Date:   Tue Jul 20 17:26:32 2010 -0400

s3-rpcclient: Allow choosing spnego mech: (ntlm/krb5)

commit 2463a871776bb4de8653d6a44469d2adb3ec9418
Author: Simo Sorce i...@samba.org
Date:   Tue Jul 20 13:26:36 2010 -0400

s3-dcerpc: Use dcerpc_AuthType in pipe_auth_data

commit 1e915d231d4191bf3a0bb54ba99a31ad6b2afd3b
Author: Simo Sorce i...@samba.org
Date:   Tue Jul 20 11:49:23 2010 -0400

s3-dcerpc: Cleanup and refactor create_rpc_bind_req()

commit 3c3237dd0afa37ba0e545424f5008973b645cf96
Author: Simo Sorce i...@samba.org
Date:   Tue Jul 20 11:23:11 2010 -0400

s3-auth: Remove unimplemented functions

commit bfe53d414548cd8a0226136b73cf2b766b6a61ef
Author: Simo Sorce i...@samba.org
Date:   Tue Jul 20 11:22:50 2010 -0400

s3-dcerpc: Set flags directly instead of calling unimplemented functions.

commit 7407c979a1469997c9277c501787b5f16aac
Author: Simo Sorce i...@samba.org
Date:   Mon Jul 19 20:03:08 2010 -0400

s3-dcerpc: Use dcerpc_check_auth in client code too

commit 9565e3f6a7ef2fb590558eb7b29c6c2fc657fca9
Author: Simo Sorce i...@samba.org
Date:   Mon Jul 19 19:49:35 2010 -0400

s3-dcerpc: Make dcerpc_check_auth() common code

commit 5f2cca6b2a7b8b7bad4a47a2bd31174c45fa2611
Author: Simo Sorce i...@samba.org
Date:   Mon Jul 19 19:42:12 2010 -0400

s3-dcerpc: Add the same paranoia checks we have in the client code

commit 49a8c2965d2982e6510609fa9772a56597494641
Author: Simo Sorce i...@samba.org
Date:   Mon Jul 19 19:34:34 2010 -0400

s3-dcerpc: Split auth checking into a generic function.

commit 1fc71c9c6ff26f2d49f314b8425c6cd4c91683f3
Author: Simo Sorce i...@samba.org
Date:   Mon Jul 19 17:51:18 2010 -0400

s3-dcerpc do not pass pipes_struct to dcesrv_auth_request()

commit 2ce169ce187cc7229aecdc3e5cd889c5194956aa
Author: Simo Sorce i...@samba.org
Date:   Mon 

[SCM] Samba Shared Repository - branch master updated

2010-07-28 Thread Simo Sorce
The branch, master has been updated
   via  7eaa15a... s3-dcerpc: Add sign/seal with gssapi
   via  1abcbd7... s3-dcerpc: Add next authentication step with gssapi
   via  135a82e... s3-decrpc: Introduce gssapi support for dcerpc krb5 auth
  from  7208809... rpcclient: Use DCERPC_AUTH_LEVEL_CONNECT if no sign/seal 
is set for krb5 auth

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 7eaa15af2c5b544946bfb2b8c522ba9677527972
Author: Simo Sorce i...@samba.org
Date:   Sat Jul 24 13:02:57 2010 -0400

s3-dcerpc: Add sign/seal with gssapi

commit 1abcbd70aed327ae5233423ce74662241fa9d21a
Author: Simo Sorce i...@samba.org
Date:   Sat Jul 24 10:35:25 2010 -0400

s3-dcerpc: Add next authentication step with gssapi

commit 135a82e78f9537fb7b7f4b82fb7cba065737675f
Author: Simo Sorce i...@samba.org
Date:   Fri Jul 23 14:47:36 2010 -0400

s3-decrpc: Introduce gssapi support for dcerpc krb5 auth

---

Summary of changes:
 source3/Makefile.in |4 +-
 source3/configure.in|3 +-
 source3/include/ntdomain.h  |8 +-
 source3/librpc/rpc/dcerpc_gssapi.c  |  637 +++
 source3/librpc/rpc/dcerpc_gssapi.h  |   58 
 source3/librpc/rpc/dcerpc_helpers.c |   86 +
 source3/rpc_client/cli_pipe.c   |  263 +++
 7 files changed, 919 insertions(+), 140 deletions(-)
 create mode 100644 source3/librpc/rpc/dcerpc_gssapi.c
 create mode 100644 source3/librpc/rpc/dcerpc_gssapi.h


Changeset truncated at 500 lines:

diff --git a/source3/Makefile.in b/source3/Makefile.in
index 1b641a4..91856c2 100644
--- a/source3/Makefile.in
+++ b/source3/Makefile.in
@@ -676,7 +676,8 @@ RPC_SERVER_OBJ = @RPC_STATIC@ $(RPC_PIPE_OBJ) 
$(NPA_TSTREAM_OBJ)
 
 RPC_PARSE_OBJ = $(RPC_PARSE_OBJ2)
 
-RPC_CLIENT_OBJ = rpc_client/cli_pipe.o librpc/rpc/rpc_common.o \
+RPC_CLIENT_OBJ = rpc_client/cli_pipe.o librpc/rpc/dcerpc_gssapi.o \
+librpc/rpc/rpc_common.o \
 rpc_client/rpc_transport_np.o \
 rpc_client/rpc_transport_sock.o \
 rpc_client/rpc_transport_smbd.o
@@ -1353,6 +1354,7 @@ RPC_OPEN_TCP_OBJ = torture/rpc_open_tcp.o \
   $(RPC_CLIENT_OBJ1) \
   librpc/rpc/rpc_common.o \
   rpc_client/cli_pipe.o \
+  librpc/rpc/dcerpc_gssapi.o \
   ../librpc/rpc/binding.o \
   $(LIBMSRPC_GEN_OBJ)
 
diff --git a/source3/configure.in b/source3/configure.in
index 905ad23..4b92cd6 100644
--- a/source3/configure.in
+++ b/source3/configure.in
@@ -3749,7 +3749,7 @@ if test x$with_ads_support != xno; then
 
   # now check for gssapi headers.  This is also done here to allow for
   # different kerberos include paths
-  AC_CHECK_HEADERS(gssapi.h gssapi/gssapi_generic.h gssapi/gssapi.h com_err.h)
+  AC_CHECK_HEADERS(gssapi.h gssapi/gssapi_generic.h gssapi/gssapi.h 
gssapi/gssapi_ext.h com_err.h)
 
   ##
   # we might need the k5crypto and com_err libraries on some systems
@@ -3774,6 +3774,7 @@ if test x$with_ads_support != xno; then
   # now see if we can find the gssapi libs in standard paths
   if test x$have_gssapi != xyes; then
  AC_CHECK_LIB_EXT(gssapi_krb5, 
KRB5_LIBS,gss_display_status,[],[],have_gssapi=yes)
+ AC_CHECK_FUNC_EXT(gss_wrap_iov, $KRB5_LIBS)
   fi
 
   AC_CHECK_FUNC_EXT(krb5_set_real_time, $KRB5_LIBS)
diff --git a/source3/include/ntdomain.h b/source3/include/ntdomain.h
index c843bc9..0651381 100644
--- a/source3/include/ntdomain.h
+++ b/source3/include/ntdomain.h
@@ -99,11 +99,7 @@ enum pipe_auth_type_spnego {
PIPE_AUTH_TYPE_SPNEGO_KRB5
 };
 
-/* auth state for krb5. */
-struct kerberos_auth_struct {
-   const char *service_principal;
-   DATA_BLOB session_key;
-};
+struct gse_context;
 
 /* auth state for all bind types. */
 
@@ -115,7 +111,7 @@ struct pipe_auth_data {
union {
struct schannel_state *schannel_auth;
struct auth_ntlmssp_state *auth_ntlmssp_state;
-   struct kerberos_auth_struct *kerberos_auth; /* Client only for 
now */
+   struct gse_context *gssapi_state; /* Client only for now */
} a_u;
 
/* Only the client code uses these 3 for now */
diff --git a/source3/librpc/rpc/dcerpc_gssapi.c 
b/source3/librpc/rpc/dcerpc_gssapi.c
new file mode 100644
index 000..8c0ad6a
--- /dev/null
+++ b/source3/librpc/rpc/dcerpc_gssapi.c
@@ -0,0 +1,637 @@
+/*
+ *  GSSAPI Security Extensions
+ *  RPC Pipe client routines
+ *  Copyright (C) Simo Sorce 2010.
+ *
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 3 of the License, or
+ * 

[SCM] Samba Shared Repository - branch master updated

2010-07-28 Thread Simo Sorce
The branch, master has been updated
   via  c4b3c9e... smbd: Fix build warning
  from  7eaa15a... s3-dcerpc: Add sign/seal with gssapi

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit c4b3c9ec0f2efa937529160999f7e44bcad3591f
Author: Simo Sorce i...@samba.org
Date:   Wed Jul 28 12:44:37 2010 -0400

smbd: Fix build warning

---

Summary of changes:
 source3/smbd/process.c |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/smbd/process.c b/source3/smbd/process.c
index d91c07e..b867ba1 100644
--- a/source3/smbd/process.c
+++ b/source3/smbd/process.c
@@ -2857,7 +2857,7 @@ fail:
return false;
 }
 
-static bool spoolss_init_cb(void)
+static bool spoolss_init_cb(void *ptr)
 {
return nt_printing_tdb_migrate();
 }


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-07-28 Thread Volker Lendecke
The branch, master has been updated
   via  44add99... s3: Fix cli_qpathinfo2
  from  c4b3c9e... smbd: Fix build warning

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 44add9952e5375f2858b26a2f676be49b70d839a
Author: Volker Lendecke v...@samba.org
Date:   Wed Jul 28 20:09:48 2010 +0200

s3: Fix cli_qpathinfo2

Does not fix the DIR_CREATETIME test, but it is definitely an error.

---

Summary of changes:
 source3/libsmb/clirap.c |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/libsmb/clirap.c b/source3/libsmb/clirap.c
index 56d6375..df37894 100644
--- a/source3/libsmb/clirap.c
+++ b/source3/libsmb/clirap.c
@@ -886,7 +886,7 @@ NTSTATUS cli_qpathinfo2(struct cli_state *cli, const char 
*fname,
if (!tevent_req_poll_ntstatus(req, ev, status)) {
goto fail;
}
-   status = cli_qpathinfo2_recv(req, change_time, access_time,
+   status = cli_qpathinfo2_recv(req, create_time, access_time,
 write_time, change_time, size, mode, ino);
  fail:
TALLOC_FREE(frame);


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-07-28 Thread Simo Sorce
The branch, master has been updated
   via  d17abc6... s3-dcerpc: Avoid ifdef, it is handled within 
dcerpc_gssapi.c already
  from  44add99... s3: Fix cli_qpathinfo2

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit d17abc69f690ccc845a0a1d6d291b6e21ce86b3d
Author: Simo Sorce i...@samba.org
Date:   Wed Jul 28 15:35:02 2010 -0400

s3-dcerpc: Avoid ifdef, it is handled within dcerpc_gssapi.c already

---

Summary of changes:
 source3/rpc_client/cli_pipe.c |9 ++---
 1 files changed, 2 insertions(+), 7 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/rpc_client/cli_pipe.c b/source3/rpc_client/cli_pipe.c
index 8588875..bbd869e 100644
--- a/source3/rpc_client/cli_pipe.c
+++ b/source3/rpc_client/cli_pipe.c
@@ -3344,7 +3344,6 @@ NTSTATUS cli_rpc_pipe_open_krb5(struct cli_state *cli,
const char *password,
struct rpc_pipe_client **presult)
 {
-#ifdef HAVE_GSSAPI_H
struct rpc_pipe_client *result;
struct pipe_auth_data *auth;
NTSTATUS status;
@@ -3367,18 +3366,14 @@ NTSTATUS cli_rpc_pipe_open_krb5(struct cli_state *cli,
 
status = rpc_pipe_bind(result, auth);
if (!NT_STATUS_IS_OK(status)) {
-   DEBUG(0, (cli_rpc_pipe_open_krb5: cli_rpc_pipe_bind failed 
- with error %s\n, nt_errstr(status)));
+   DEBUG(0, (cli_rpc_pipe_bind failed with error %s\n,
+ nt_errstr(status)));
TALLOC_FREE(result);
return status;
}
 
*presult = result;
return NT_STATUS_OK;
-#else
-   DEBUG(0,(cli_rpc_pipe_open_krb5: kerberos not found at compile 
time.\n));
-   return NT_STATUS_NOT_IMPLEMENTED;
-#endif
 }
 
 NTSTATUS cli_get_session_key(TALLOC_CTX *mem_ctx,


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-07-28 Thread Simo Sorce
The branch, master has been updated
   via  7c9c075... Do not refernece pipe_auth_data directly in 
dcerpc_gssapi.c
  from  d17abc6... s3-dcerpc: Avoid ifdef, it is handled within 
dcerpc_gssapi.c already

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 7c9c075987e7cdb2d5cb6311876f088f907e46f2
Author: Simo Sorce i...@samba.org
Date:   Wed Jul 28 15:53:56 2010 -0400

Do not refernece pipe_auth_data directly in dcerpc_gssapi.c

---

Summary of changes:
 source3/librpc/rpc/dcerpc_gssapi.c |   48 +++---
 source3/librpc/rpc/dcerpc_gssapi.h |2 +-
 source3/rpc_client/cli_pipe.c  |   50 +++
 3 files changed, 55 insertions(+), 45 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/librpc/rpc/dcerpc_gssapi.c 
b/source3/librpc/rpc/dcerpc_gssapi.c
index 8c0ad6a..56f2a53 100644
--- a/source3/librpc/rpc/dcerpc_gssapi.c
+++ b/source3/librpc/rpc/dcerpc_gssapi.c
@@ -169,9 +169,8 @@ NTSTATUS gse_init_client(TALLOC_CTX *mem_ctx,
  const char *username,
  const char *password,
  uint32_t add_gss_c_flags,
- struct pipe_auth_data **_auth)
+ struct gse_context **_gse_ctx)
 {
-   struct pipe_auth_data *auth;
struct gse_context *gse_ctx;
OM_uint32 gss_maj, gss_min;
gss_buffer_desc name_buffer = {0, NULL};
@@ -182,42 +181,15 @@ NTSTATUS gse_init_client(TALLOC_CTX *mem_ctx,
return NT_STATUS_INVALID_PARAMETER;
}
 
-   auth = talloc(mem_ctx, struct pipe_auth_data);
-   if (auth == NULL) {
-   return NT_STATUS_NO_MEMORY;
-   }
-
-   auth-auth_type = auth_type;
-   if (auth_type == DCERPC_AUTH_TYPE_SPNEGO) {
-   auth-spnego_type = PIPE_AUTH_TYPE_SPNEGO_KRB5;
-   }
-   auth-auth_level = auth_level;
-
-   if (!username) {
-   username = ;
-   }
-
-   auth-user_name = talloc_strdup(auth, username);
-   if (!auth-user_name) {
-   status = NT_STATUS_NO_MEMORY;
-   goto err_out;
-   }
-
-   /* Fixme, should we fetch/set the Realm ? */
-   auth-domain = talloc_strdup(auth, );
-   if (!auth-domain) {
-   status = NT_STATUS_NO_MEMORY;
-   goto err_out;
-   }
-
-   status = gse_context_init(auth, auth_type, auth_level,
+   status = gse_context_init(mem_ctx, auth_type, auth_level,
  ccache_name, add_gss_c_flags,
  gse_ctx);
if (!NT_STATUS_IS_OK(status)) {
-   goto err_out;
+   return NT_STATUS_NO_MEMORY;
}
 
-   name_buffer.value = talloc_asprintf(auth, %...@%s, service, server);
+   name_buffer.value = talloc_asprintf(gse_ctx,
+   %...@%s, service, server);
if (!name_buffer.value) {
status = NT_STATUS_NO_MEMORY;
goto err_out;
@@ -229,7 +201,7 @@ NTSTATUS gse_init_client(TALLOC_CTX *mem_ctx,
if (gss_maj) {
DEBUG(0, (gss_import_name failed for %s, with [%s]\n,
  (char *)name_buffer.value,
- gse_errstr(auth, gss_maj, gss_min)));
+ gse_errstr(gse_ctx, gss_maj, gss_min)));
status = NT_STATUS_INTERNAL_ERROR;
goto err_out;
}
@@ -250,18 +222,18 @@ NTSTATUS gse_init_client(TALLOC_CTX *mem_ctx,
if (gss_maj) {
DEBUG(0, (gss_acquire_creds failed for %s, with [%s]\n,
  (char *)name_buffer.value,
- gse_errstr(auth, gss_maj, gss_min)));
+ gse_errstr(gse_ctx, gss_maj, gss_min)));
status = NT_STATUS_INTERNAL_ERROR;
goto err_out;
}
 
-   auth-a_u.gssapi_state = gse_ctx;
-   *_auth = auth;
+   *_gse_ctx = gse_ctx;
TALLOC_FREE(name_buffer.value);
return NT_STATUS_OK;
 
 err_out:
-   TALLOC_FREE(auth);
+   TALLOC_FREE(name_buffer.value);
+   TALLOC_FREE(gse_ctx);
return status;
 }
 
diff --git a/source3/librpc/rpc/dcerpc_gssapi.h 
b/source3/librpc/rpc/dcerpc_gssapi.h
index 6367990..3152033 100644
--- a/source3/librpc/rpc/dcerpc_gssapi.h
+++ b/source3/librpc/rpc/dcerpc_gssapi.h
@@ -35,7 +35,7 @@ NTSTATUS gse_init_client(TALLOC_CTX *mem_ctx,
  const char *username,
  const char *password,
  uint32_t add_gss_c_flags,
- struct pipe_auth_data **_auth);
+ struct gse_context **_gse_ctx);
 
 NTSTATUS gse_get_client_auth_token(TALLOC_CTX *mem_ctx,
   

[SCM] Samba Shared Repository - branch v3-6-test updated

2010-07-28 Thread Jeremy Allison
The branch, v3-6-test has been updated
   via  a2e20cf... s3: Fix cli_qpathinfo2
  from  f8cd951... s3-rpc: Use struct pipes_struct. (cherry picked from 
commit 6ffd7dc7805f572bcedf0693514f6aeb7be861f9)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test


- Log -
commit a2e20cf768d2d9a1f3783b7b6578935af772b6d8
Author: Volker Lendecke v...@samba.org
Date:   Wed Jul 28 20:09:48 2010 +0200

s3: Fix cli_qpathinfo2

Does not fix the DIR_CREATETIME test, but it is definitely an error.

---

Summary of changes:
 source3/libsmb/clirap.c |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/libsmb/clirap.c b/source3/libsmb/clirap.c
index 56d6375..df37894 100644
--- a/source3/libsmb/clirap.c
+++ b/source3/libsmb/clirap.c
@@ -886,7 +886,7 @@ NTSTATUS cli_qpathinfo2(struct cli_state *cli, const char 
*fname,
if (!tevent_req_poll_ntstatus(req, ev, status)) {
goto fail;
}
-   status = cli_qpathinfo2_recv(req, change_time, access_time,
+   status = cli_qpathinfo2_recv(req, create_time, access_time,
 write_time, change_time, size, mode, ino);
  fail:
TALLOC_FREE(frame);


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-07-28 Thread Simo Sorce
The branch, master has been updated
   via  e8ac4a8... s3-dcerpc: Try to fix build when gssapi_ext.h is not 
available
  from  7c9c075... Do not refernece pipe_auth_data directly in 
dcerpc_gssapi.c

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit e8ac4a8b82798ef0691d384f59d880dc38b56592
Author: Simo Sorce i...@samba.org
Date:   Wed Jul 28 17:06:14 2010 -0400

s3-dcerpc: Try to fix build when gssapi_ext.h is not available

---

Summary of changes:
 source3/librpc/rpc/dcerpc_gssapi.c |   82 +---
 1 files changed, 39 insertions(+), 43 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/librpc/rpc/dcerpc_gssapi.c 
b/source3/librpc/rpc/dcerpc_gssapi.c
index 56f2a53..c9496ab 100644
--- a/source3/librpc/rpc/dcerpc_gssapi.c
+++ b/source3/librpc/rpc/dcerpc_gssapi.c
@@ -20,12 +20,13 @@
 /* We support only GSSAPI/KRB5 here */
 
 #include includes.h
+#include dcerpc_gssapi.h
+
+#if defined(HAVE_GSSAPI_GSSAPI_EXT_H)  defined(HAVE_GSS_WRAP_IOV)
+
 #include gssapi/gssapi.h
 #include gssapi/gssapi_krb5.h
 #include gssapi/gssapi_ext.h
-#include dcerpc_gssapi.h
-
-#ifdef HAVE_GSSAPI_H
 
 static char *gse_errstr(TALLOC_CTX *mem_ctx, OM_uint32 maj, OM_uint32 min);
 
@@ -352,43 +353,6 @@ DATA_BLOB gse_get_session_key(struct gse_context *gse_ctx)
return gse_ctx-session_key;
 }
 
-#else /* HAVE_GSSAPI_H */
-
-NTSTATUS gse_init_client(TALLOC_CTX *mem_ctx,
- enum dcerpc_AuthType auth_type,
- enum dcerpc_AuthLevel auth_level,
- const char *ccache_name,
- const char *server,
- const char *service,
- const char *username,
- const char *password,
- uint32_t add_gss_c_flags,
- struct pipe_auth_data **_auth)
-{
-   return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-NTSTATUS gse_gen_client_auth_token(TALLOC_CTX *mem_ctx,
-  struct gse_context *gse_ctx,
-  DATA_BLOB *auth_blob)
-{
-   return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-bool gse_require_more_processing(struct gse_context *gse_ctx)
-{
-   return NT_STATUS_NOT_IMPLEMENTED;
-}
-
-DATA_BLOB gse_get_session_key(struct gse_context *gse_ctx)
-{
-   return data_blob_null;
-}
-
-#endif /* HAVE_GSSAPI_H */
-
-#ifdef HAVE_GSS_WRAP_IOV
-
 size_t gse_get_signature_length(struct gse_context *gse_ctx,
int seal, size_t payload_size)
 {
@@ -574,12 +538,44 @@ done:
return status;
 }
 
-#else /* HAVE_GSS_WRAP_IOV */
+#else
+
+NTSTATUS gse_init_client(TALLOC_CTX *mem_ctx,
+ enum dcerpc_AuthType auth_type,
+ enum dcerpc_AuthLevel auth_level,
+ const char *ccache_name,
+ const char *server,
+ const char *service,
+ const char *username,
+ const char *password,
+ uint32_t add_gss_c_flags,
+ struct gse_context **_gse_ctx)
+{
+   return NT_STATUS_NOT_IMPLEMENTED;
+}
+
+NTSTATUS gse_get_client_auth_token(TALLOC_CTX *mem_ctx,
+  struct gse_context *gse_ctx,
+  DATA_BLOB *token_in,
+  DATA_BLOB *token_out)
+{
+   return NT_STATUS_NOT_IMPLEMENTED;
+}
+
+bool gse_require_more_processing(struct gse_context *gse_ctx)
+{
+   return false;
+}
+
+DATA_BLOB gse_get_session_key(struct gse_context *gse_ctx)
+{
+   return data_blob_null;
+}
 
 size_t gse_get_signature_length(struct gse_context *gse_ctx,
int seal, size_t payload_size)
 {
-   return NT_STATUS_NOT_IMPLEMENTED;
+   return 0;
 }
 
 NTSTATUS gse_seal(TALLOC_CTX *mem_ctx, struct gse_context *gse_ctx,
@@ -606,4 +602,4 @@ NTSTATUS gse_sigcheck(TALLOC_CTX *mem_ctx, struct 
gse_context *gse_ctx,
return NT_STATUS_NOT_IMPLEMENTED;
 }
 
-#endif /* HAVE_GSS_WRAP_IOV */
+#endif /* HAVE_GSSAPI_EXT_H  HAVE_GSS_WRAP_IOV */


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-07-28 Thread Kamen Mazdrashki
The branch, master has been updated
   via  39d287e... s4-test: Expand DSSYNC test to be executed against all 
partitions
   via  bd6f77e... s4-test-dssync: Issue warning in case we have diffrences 
in link attributes
   via  5bf54f1... s4-test: Simplify test_GetInfo() - we have what we need 
through LDB connection
   via  88f1798... s4-ldb: use TALLOC_CTX type instead of 'void'
  from  e8ac4a8... s3-dcerpc: Try to fix build when gssapi_ext.h is not 
available

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 39d287ec67d9c33b17c8809ac34d3c09f72f689d
Author: Kamen Mazdrashki kame...@samba.org
Date:   Fri Jul 16 22:52:45 2010 +0300

s4-test: Expand DSSYNC test to be executed against all partitions

It is still possible to supply specific partition
to test with on command line using
--option=dssync:partition={PARTITION_DN}

commit bd6f77ee0bb5f73ade9e7a20eef650f9be98096d
Author: Kamen Mazdrashki kame...@samba.org
Date:   Wed Jul 14 05:10:34 2010 +0300

s4-test-dssync: Issue warning in case we have diffrences in link attributes

In case differences in messages are:
 1. Attributes with different values, i.e. 'replace'
 2. Those attributes are back-link attributes
then we just warn about those differences.

It turns out windows doesn't send all values for back-link
attributes in replicated_object but in linked_attributes.

I consider this as workaround for the problem.
A better solution might be to merge linked_attribute values
into replacted_objects before comparing those with LDB result
(although this will work for Win2k8 and latter)

commit 5bf54f17bd1c9067437088456f16b6dd504efc14
Author: Kamen Mazdrashki kame...@samba.org
Date:   Wed Jul 14 03:42:56 2010 +0300

s4-test: Simplify test_GetInfo() - we have what we need through LDB 
connection

we have already opened.

Added 'config_dn' and 'schema_dn' members which are to be used
later for extending the test_FetchData() to be executed
against every partition in case partition is not specified explicitly.

DsSyncText.site_name was removed also as it is not used anymore

commit 88f17981001c509c4844304b5a120540ae2963f6
Author: Kamen Mazdrashki kame...@samba.org
Date:   Tue Jul 13 02:37:58 2010 +0300

s4-ldb: use TALLOC_CTX type instead of 'void'

---

Summary of changes:
 source4/lib/ldb/common/ldb.c  |   14 +-
 source4/lib/ldb/common/ldb_controls.c |2 +-
 source4/lib/ldb/common/ldb_dn.c   |   28 +++---
 source4/lib/ldb/common/ldb_ldif.c |6 +-
 source4/lib/ldb/common/ldb_msg.c  |6 +-
 source4/lib/ldb/common/ldb_parse.c|   26 ++--
 source4/lib/ldb/common/ldb_utf8.c |6 +-
 source4/lib/ldb/include/ldb.h |6 +-
 source4/lib/ldb/include/ldb_private.h |4 +-
 source4/torture/rpc/dssync.c  |  194 -
 10 files changed, 143 insertions(+), 149 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/lib/ldb/common/ldb.c b/source4/lib/ldb/common/ldb.c
index 3a0ca46..2642b33 100644
--- a/source4/lib/ldb/common/ldb.c
+++ b/source4/lib/ldb/common/ldb.c
@@ -995,7 +995,7 @@ int ldb_op_default_callback(struct ldb_request *req, struct 
ldb_reply *ares)
 
 int ldb_build_search_req_ex(struct ldb_request **ret_req,
struct ldb_context *ldb,
-   void *mem_ctx,
+   TALLOC_CTX *mem_ctx,
struct ldb_dn *base,
enum ldb_scope scope,
struct ldb_parse_tree *tree,
@@ -1053,7 +1053,7 @@ int ldb_build_search_req_ex(struct ldb_request **ret_req,
 
 int ldb_build_search_req(struct ldb_request **ret_req,
struct ldb_context *ldb,
-   void *mem_ctx,
+   TALLOC_CTX *mem_ctx,
struct ldb_dn *base,
enum ldb_scope scope,
const char *expression,
@@ -1083,7 +1083,7 @@ int ldb_build_search_req(struct ldb_request **ret_req,
 
 int ldb_build_add_req(struct ldb_request **ret_req,
struct ldb_context *ldb,
-   void *mem_ctx,
+   TALLOC_CTX *mem_ctx,
const struct ldb_message *message,
struct ldb_control **controls,
void *context,
@@ -1125,7 +1125,7 @@ int ldb_build_add_req(struct ldb_request **ret_req,
 
 int ldb_build_mod_req(struct ldb_request **ret_req,
struct ldb_context *ldb,
-   void *mem_ctx,
+   TALLOC_CTX *mem_ctx,
const struct ldb_message *message,
struct ldb_control **controls,
 

[SCM] Samba Shared Repository - branch master updated

2010-07-28 Thread Rusty Russell
The branch, master has been updated
   via  bc1c82e... Fix tdb_check() to work with read-only tdb databases. 
The function tdb_lockall() uses F_WRLCK internally, which doesn't work on a fd 
opened with O_RDONLY. Use tdb_lockall_read() instead.
  from  39d287e... s4-test: Expand DSSYNC test to be executed against all 
partitions

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit bc1c82ea137e1bf6cb55139a666c56ebb2226b23
Author: Jeremy Allison j...@samba.org
Date:   Wed Jul 28 05:15:40 2010 -0700

Fix tdb_check() to work with read-only tdb databases. The function 
tdb_lockall() uses F_WRLCK internally, which doesn't work on a fd opened with 
O_RDONLY. Use tdb_lockall_read() instead.

Jeremy.

---

Summary of changes:
 lib/tdb/common/check.c |6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)


Changeset truncated at 500 lines:

diff --git a/lib/tdb/common/check.c b/lib/tdb/common/check.c
index 6bbfd7d..2c64043 100644
--- a/lib/tdb/common/check.c
+++ b/lib/tdb/common/check.c
@@ -311,7 +311,7 @@ int tdb_check(struct tdb_context *tdb,
struct tdb_record rec;
bool found_recovery = false;
 
-   if (tdb_lockall(tdb) == -1)
+   if (tdb_lockall_read(tdb) == -1)
return -1;
 
/* Make sure we know true size of the underlying file. */
@@ -412,12 +412,12 @@ int tdb_check(struct tdb_context *tdb,
}
 
free(hashes);
-   tdb_unlockall(tdb);
+   tdb_unlockall_read(tdb);
return 0;
 
 free:
free(hashes);
 unlock:
-   tdb_unlockall(tdb);
+   tdb_unlockall_read(tdb);
return -1;
 }


-- 
Samba Shared Repository