Re: [Samba] samba4 eventually stops working

2010-09-03 Thread Michael Wood
On 2 September 2010 19:22, Aaron Solochek aarons-sa...@aberrant.org wrote:
 I'm running samba4 from git (latest as of sep 1) on ubuntu 10.4.  It's
 operating as a PDC, as well as hosting a shared drive.

 The last couple days I've noticed that my shared drives will appear as
 disconnected, and indeed trying to connect to the server times out.  If
 I look on the server, there are many (50ish) samba processes all sitting
 there sleeping.  If I use the init script to shutdown samba, one of
 those processes will remain.  I need to kill -9 it to make it go away.

 Then I can restart samba and everything is happy again.

 I'm not sure what exactly causes it, but I suspect it has to do with my
 profile that syncs for a while, then starts giving errors in the event
 log of the network resource going away.  So perhaps under the load of my
 profile sync something fails, hanging all the samba processes.

 My samba was configured with configure.developer, so I assume I have a
 lot of debugging available somehow, but I'm not even sure where to start.

Try samba-technical, which I have CCed.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Strange provisioning error - I really expect an answer

2010-09-03 Thread Michael Wood
Hi

On 2 September 2010 22:58, David Gonzalez i...@dghvoip.com wrote:
 Hello All,

 I'm trying to contribute with my tests and continuous attempts to install
 and stress-test samba, but it gets really sad and frustrating finding out
 that no one answers.

Yes, it can be frustrating, but I doubt anyone is deliberately
ignoring your messages.

I suspect the people who can answer your questions have not seen them.
 This could be because you're asking in the wrong place or because
they have very little time and the subject of your e-mail didn't catch
their eye etc.

Since the Samba4 HOWTO says to report your experiences on the
samba-technical list, I suggest you send your questions about samba4
there.  There's also a #samba-technical channel on irc.freenode.org.
The topic is:

08:31 -!- #samba-technical 66 logs on  http://samba.sernet.de/irclog/ - Ask
  non-development questions in #samba (all samba4 questions welcome
  however) | CIA commit notifications in #samba-commits

I have copied my reply to the samba-technical list.

 I know a lot of we do this for free, we do this in our free time, wait
 longer for an answer and that will come, save some typing and please, do
 not reply with that.

 I've contributed videos to the comunity and material so that it gets tested
 more, but I have many unanswered questions. Like whe I tried dynamic
 updates, and tried to join a W2k8 server to samba4 domain, as Tridge, showed
 on his video he never got that cannot  determine if DNS server supports
 dynamic updates, it remains unsolved for me and unanswered. It'dbe nice to
 see how Tridge had his DNS setup?, did he run dhcpd on that same machine?,
 did he create dns zones manually?.

 I hope this time I get a chance.

 I installed samab 4 from git, and compiled it with no errors, provisioned
 and it worked, then I deleted the whole /usr/local/samab dir because I
 screwed it up with a failed attempt of joining a w2k8 R2 machine to the
 domain, decided to re-provision and I'm getting this error:

 [r...@gateway source4]# ./setup/provision
 --realm=samba.dghvoip.com--domain=DGHVOIP
 --adminpass=dgh2...@dm--server-role='domain controller'
 --host-name=gateway
 --host-ip=192.168.254.254
 Traceback (most recent call last):
  File ./setup/provision, line 253, in ?
    useeadb=eadb, next_rid=opts.next_rid)
  File bin/python/samba/provision.py, line 1350, in provision
    users_gid = findnss_gid([users or users, 'users', 'other', 'staff'])
  File bin/python/samba/provision.py, line 333, in lambda
    findnss_gid = lambda names: findnss(grp.getgrnam, names)[2]
  File bin/python/samba/provision.py, line 329, in findnss
    raise KeyError(Unable to find user/group in %r % names)
 KeyError: Unable to find user/group in ['users', 'users', 'other',
 'staff']

 Also when I issue make quicktest,  before installing this shows

 Waf: Leaving directory `/data/samba-master/source4/bin'
 'build' finished successfully (29.068s)
 test: running (/usr/bin/perl ../selftest/selftest.pl --prefix=./st
 --builddir=. --srcdir=. --exclude=./selftest/skip
 --testlist=./selftest/tests.sh|  --exclude=./selftest/slow --quick
 --include=./selftest/quick --socket-wrapper   touch ./st/st_done) |
 /usr/bin/python -u ../selftest/filter-subunit
 --expected-failures=./selftest/knownfail | tee ./st/subunit |
 /usr/bin/python -u ../selftest/format-subunit --prefix=./st --immediate
 tee: ./st/subunit: No such file or directory
 SOCKET_WRAPPER_DIR=/data/samba-master/source4/st/w
 Version 4.0.0alpha12-GIT-4ca9683
 OPTIONS  --configfile=$SMB_CONF_PATH --maximum-runtime=1200 --target=samba4
 --basedir=/data/samba-master/source4/st/s4client
 --option=torture:progress=no --format=subunit --option=torture:quick=yes
 Traceback (most recent call last):
  File ./setup/provision, line 253, in ?
    useeadb=eadb, next_rid=opts.next_rid)
  File bin/python/samba/provision.py, line 1350, in provision
    users_gid = findnss_gid([users or users, 'users', 'other', 'staff'])
  File bin/python/samba/provision.py, line 333, in lambda
    findnss_gid = lambda names: findnss(grp.getgrnam, names)[2]
  File bin/python/samba/provision.py, line 329, in findnss
    raise KeyError(Unable to find user/group in %r % names)
 KeyError: Unable to find user/group in ['users', 'users', 'other',
 'staff']
 Unable to provision:
 NSS_WRAPPER_PASSWD=/data/samba-master/source4/st/dc/etc/passwd
 NSS_WRAPPER_GROUP=/data/samba-master/source4/st/dc/etc/group
 ./setup/provision --configfile=/data/samba-master/source4/st/dc/etc/smb.conf
 --host-name=localdc --host-ip=127.0.0.1 --quiet --domain=SAMBADOMAIN
 --realm=SAMBA.EXAMPLE.COM --adminpass=locDCpass1
 --krbtgtpass=krbtgtlocDCpass1 --machinepass=machinelocDCpass1 --root=root
 --server-role=domain controller --function-level=2008
 PROVISIONING DC...
 A summary with detailed information can be found in:
  ./st/summary

 ALL OK (0 tests in 0 testsuites)
 ERROR: test command failed to complete
 make: *** [quicktest] Error 1

 If you could please, 

[Samba] provision unable to guess 'domian users' group (was Re: Strange provisioning error)

2010-09-03 Thread Andrew Bartlett
On Fri, 2010-09-03 at 08:34 +0200, Michael Wood wrote:
 Hi
 
 On 2 September 2010 22:58, David Gonzalez i...@dghvoip.com wrote:
  Hello All,
 
  I'm trying to contribute with my tests and continuous attempts to install
  and stress-test samba, but it gets really sad and frustrating finding out
  that no one answers.
 
 Yes, it can be frustrating, but I doubt anyone is deliberately
 ignoring your messages.
 
 I suspect the people who can answer your questions have not seen them.
  This could be because you're asking in the wrong place or because
 they have very little time and the subject of your e-mail didn't catch
 their eye etc.
 
 Since the Samba4 HOWTO says to report your experiences on the
 samba-technical list, I suggest you send your questions about samba4
 there.  There's also a #samba-technical channel on irc.freenode.org.
 The topic is:
 
 08:31 -!- #samba-technical 66 logs on  http://samba.sernet.de/irclog/ - Ask
   non-development questions in #samba (all samba4 questions welcome
   however) | CIA commit notifications in #samba-commits
 
 I have copied my reply to the samba-technical list.

Thanks Michael.  I really do appreciate your efforts watching out for
questions such as these - it shows the signs of a maturing community
that we have folks such as yourself able to continue the
users-helping-users philosophy. 

  I installed samab 4 from git, and compiled it with no errors, provisioned
  and it worked, then I deleted the whole /usr/local/samab dir because I
  screwed it up with a failed attempt of joining a w2k8 R2 machine to the
  domain, decided to re-provision and I'm getting this error:
 
  [r...@gateway source4]# ./setup/provision
  --realm=samba.dghvoip.com--domain=DGHVOIP
  --adminpass=dgh2...@dm--server-role='domain controller'
  --host-name=gateway
  --host-ip=192.168.254.254
  Traceback (most recent call last):
   File ./setup/provision, line 253, in ?
 useeadb=eadb, next_rid=opts.next_rid)
   File bin/python/samba/provision.py, line 1350, in provision
 users_gid = findnss_gid([users or users, 'users', 'other', 'staff'])
   File bin/python/samba/provision.py, line 333, in lambda
 findnss_gid = lambda names: findnss(grp.getgrnam, names)[2]
   File bin/python/samba/provision.py, line 329, in findnss
 raise KeyError(Unable to find user/group in %r % names)
  KeyError: Unable to find user/group in ['users', 'users', 'other',
  'staff']

As the message suggests, we could not find a group called 'users',
'other' or 'staff' in /etc/passwd.  What OS is this?  

You can override this with --users= option (see the provision --help for
other options for the other groups we try and lookup)

I'll add an exception handler here that explains the situation in better
detail. 

  Also when I issue make quicktest,  before installing this shows

If a quicktest fails, then you shouldn't waste your time on anything
else - it should always pass.  Try again with a later build if you think
we just stuffed up for a short time, or ask on this list if it seems to
be just your particular platform. 

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org
Samba Developer, Cisco Inc.


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] samba-3.5.4: compilation fails on RHAS5U5

2010-09-03 Thread Werner Maes
Hello

The link you provided is completely outdated ! There are no new samba packages 
available there !

kind regards

werner

 -Original Message-
 From: Nico Kadel-Garcia [mailto:nka...@gmail.com]
 Sent: donderdag 2 september 2010 23:50
 To: Werner Maes
 Cc: sa...@samba.org
 Subject: Re: [Samba] samba-3.5.4: compilation fails on RHAS5U5
 
 Grab and review the RPM's from
 http://download.samba.org/samba/ftp/Binary_Packages/RedHat/.
 
 On Wed, Sep 1, 2010 at 8:37 AM, Werner Maes
 werner.m...@icts.kuleuven.be wrote:
  hello
 
  I tried to compile samba on Redhat AS5U5 but it fails with this
 message: Install: cannot stat `source3/bin/umount.cifs': No such file
 or directory.
 
  Any solution?
 
  kind regards
 
  werner maes
 
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/options/samba
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba Time Server Problem

2010-09-03 Thread Ian Stirling
I recently reinstalled a system running Samba as a WINS/Time server and I can 
no longer get Windows systems to access it correctly.   

I see the following now

[D:\Temp]net time \\timeserver
System error 5 has occurred.

Access is denied.

I am an administrator on this system and it works OK if I point it at another 
server I know is running Samba

[D:\Temp]net time \\othersystem
Current time at \\othersystem is 9/3/2010 11:42 AM

The command completed successfully.
 
What have I missed in the Samba config on my server that is causing this 
problem.   Here is my smb.conf

# testparm -s
Load smb config files from /etc/samba/smb.conf
Processing section [homes]
Processing section [printers]
Processing section [print$]
Loaded services file OK.
Server role: ROLE_STANDALONE
[global]
server string = Samba Server
obey pam restrictions = Yes
passdb backend = tdbsam
pam password change = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n 
*Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
unix password sync = Yes
syslog = 0
log file = /var/log/samba/log.%m
max log size = 50
smb ports = 139
name resolve order = host
time server = Yes
dns proxy = No
wins support = Yes
ldap ssl = no
panic action = /usr/share/samba/panic-action %d
invalid users = root, daemon, bin, sys, adm, uucp, nuucp, lpd, imnadm, 
ipsec, lp, snapp, invscout

[homes]
comment = Home Directories
valid users = %S
create mask = 0700
directory mask = 0700
browseable = No

[printers]
comment = All Printers
path = /var/spool/samba
create mask = 0700
printable = Yes
browseable = No

[print$]
comment = Printer Drivers
path = /var/lib/samba/printers

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Windows7 and wide links

2010-09-03 Thread Josef Uher
Hi All,

I am using samba 3.5 on Synology NAS and I have just found out that I cannot 
copy from Windows7 large files (~100MB+) into a folder which is under a 
symbolic link on the samba server. The folder is on another volume than the 
original shared folder, therefore I am using wide links=yes in the settings.
There is no problem when copying files from Linux or Mac machine. Only Win7 is 
causing this trouble.

Thanks for any ideas,
Josef

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] samba in large domain

2010-09-03 Thread Dmitry Tikhomirov
Hi all.

In my company we have domains like   country.global.network.local
My country is russia so domain is russia.global.network.local.

I have problem with winbind, its take too much time to get groups list(wbinfo 
-g) or login to share.
in log.winbind i see: 

[2010/09/03 16:35:38,  2] winbindd/winbindd.c:remove_client(744)
  final write to client failed: Broken pipe

and:


[2010/09/03 16:31:59,  3] libads/ldap.c:ads_try_connect(218)
  ads_try_connect: CLDAP request 13.121.34.25 failed.
[2010/09/03 16:32:06,  1] libads/cldap.c:recv_cldap_netlogon(157)
  no reply received to cldap netlogon
[2010/09/03 16:32:06,  3] libads/ldap.c:ads_try_connect(218)
  ads_try_connect: CLDAP request 11.151.28.15 failed.
[


11.151.28.15 and 13.121.34.25 is a kdc of Norway  and finland and we have 
trusts between our domain
But we(from russia ) have no connection atm to this kdc.

Question:  How do i can to set winbind to use only mine kdc and dont trying to 
connect to other kdc ?


cat /etc/krb5.conf :


[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]

 default_tgs_enctypes = DES-CBC-CRC DES-CBC-MD5 RC4-HMAC
 default_tkt_enctypes = DES-CBC-CRC DES-CBC-MD5 RC4-HMAC
 preferred_enctypes = DES-CBC-CRC DES-CBC-MD5 RC4-HMAC

 default_realm = RUSSIA.GLOBAL.NETWORK.LOCAL
 dns_lookup_realm = false
 dns_lookup_kdc = false
 ticket_lifetime = 24h
 forwardable = yes

[realms]

 RUSSIA.GLOBAL.NETWORK.LOCAL = {
  kdc = 101.17.120.23:88
  admin_server = 101.17.120.23:749
  kpasswd_server = 101.17.120.23:749
  default_domain = RUSSIA.GLOBAL.NETWORK.LOCAL
}

[domain_realm]
 .russia.global.network.localtwork = RUSSIA.GLOBAL.NETWORK.LOCAL
 russia.global.network.local = RUSSIA.GLOBAL.NETWORK.LOCAL 

[appdefaults]
 pam = {
   debug = false
   ticket_lifetime = 36000
   renew_lifetime = 36000
   forwardable = true
   krb4_convert = false
 }

testparm:

[global]
workgroup = RUSSIA
realm = RUSSIA.GLOBAL.NETWORK.LOCAL
server string = File Server
interfaces = lo, eth0, 101.17.120.23/24
security = ADS
password server = 101.17.120.23
passdb backend = tdbsam
log level = 3
os level = 0
local master = No
domain master = No
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
winbind separator = +
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
winbind refresh tickets = Yes
hosts allow = 127., 101.17.
cups options = cups


uname -a
Linux mskshare 2.6.18-194.8.1.el5 #1 SMP Thu Jul 1 19:04:48 EDT 2010 x86_64 
x86_64 x86_64 GNU/Linux

Name   : samba3x
Arch   : x86_64
Version: 3.3.8
Release: 0.52.el5_5




Thanks for any help!
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba-3.5.4: compilation fails on RHAS5U5

2010-09-03 Thread Nico Kadel-Garcia
On Fri, Sep 3, 2010 at 3:36 AM, Werner Maes
werner.m...@icts.kuleuven.be wrote:
 Hello

 The link you provided is completely outdated ! There are no new samba 
 packages available there !

 kind regards

 werner

Oh, sorry, there is a README.RHEL there at points to the new location.

http://ftp.sernet.de/pub/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba-3.5.4: compilation fails on RHAS5U5

2010-09-03 Thread Werner Maes
thank you but apparently these rpms are not based on the spec file given by 
samba for rhel (but on same spec file from suse).
e.g.: there is a rpm called samba-cifsmount which is not part of the spec file.

my question remains: why does the spec file provided does not compile?

kind regards

werner

 -Original Message-
 From: Nico Kadel-Garcia [mailto:nka...@gmail.com]
 Sent: vrijdag 3 september 2010 14:46
 To: Werner Maes
 Cc: sa...@samba.org
 Subject: Re: [Samba] samba-3.5.4: compilation fails on RHAS5U5
 
 On Fri, Sep 3, 2010 at 3:36 AM, Werner Maes
 werner.m...@icts.kuleuven.be wrote:
  Hello
 
  The link you provided is completely outdated ! There are no new samba
 packages available there !
 
  kind regards
 
  werner
 
 Oh, sorry, there is a README.RHEL there at points to the new location.
 
 http://ftp.sernet.de/pub/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Multiple Samba PDCs doubt

2010-09-03 Thread Marc Franquesa
First, excuse me because I don't speak english very well (perhaps this
is the reason that I mess up something when reading the documentation).
I have read the Howto, some Examples and the book and I have some doubts
which I like to solve. Excuse me for the big post, too ;)

My starting point:
- 3 Debian Linux Samba Servers
- 1 Windows XP SP3 Professional
- 1 OpenLDAP Server (on another Debian Linux Server)
- All hosts in the same network

Software that I'm using:
- Debian Stable (Lenny) 5.0 
- Samba 3.2.5
- OpenLDAP 2.4
- Samba LDAP tools from IDEALX
- PAM-LDAP
- NSS-LDAP

I verfied it all and with a simple configuration for Samba (Simple
Workgroup), the LDAP backend works well for all uses (authentication,
authorization, NSS resolving, etc.) meaning that all LDAP packages are
well configured. (But this question is more about Samba than Samba
+LDAP).

WHAT I AM TRYING TO DO:

- Configure *ALL* 3 Linux Samba Servers as PDC for a NT4 Domain (for
redundancy/fault tolerance).
- Use the same LDAP backend for all Samba servers (centralized authn
+authz)
- Include the Windows XP SP3 as a Domain Member.

I want that if one of the Samba Servers goes down (any of them) the
Domain will not be affected.

MY DOUBTS:

- Following the documentation I must configure all Samba Servers with at
least:

[global]
workgroup = MYWORKGROUP
passdb backend = ldapsam:ldap://my.ldap.server
os level = 33
preferred master = yes
domain master = yes
local master = yes
security = user
domain logons = yes

My big doubts appear when I read 'Security Mode and Master Browsers'
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-pdc.html#id2564901

 Configuring a Samba box as a domain controller for a domain that
already by definition has
 a PDC is asking for trouble.

I understand that probably the problem gets fixed by the fact that all
PDCs will use the same backend (LDAP), but I want to be sure that I
don't have problems in the network nor broadcasts storms.

If the problem is related to the Master Browser election can I solve it
simply configuring different values for os level en each server?

Please, if I don't explain well are do you have any question don't
hesitate to ask me again.


Thanks for the help and for this killapp


-- 
--
Marc Franquesa
Lady 3Jane http://www.l3jane.net/
Nexus



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Multiple Samba PDCs doubt

2010-09-03 Thread Gaiseric Vandal
You should only have one PDC for a domain.  You can have multiple 
Domain Controllers.  But you can have only one Primary Domain 
Controller.  Any other domain controllers must be Backup Domain 
Controllers.


All domain controllers provide logon functionality to clients.  All DC's 
use the same account backend.  Only a PDC can change the account 
database (e.g. when accounts are added, or password are changed.)


With true Windows NT4 domain controllers, a readonly copy of account 
database is replicated to the BDC's from PDC's.


With Samba DC's, you have a common LDAP backend (this can be a single 
LDAP server or multiple LDAP servers configured for replication.)


The samba BDC should have domain logons=yes  but other masters should 
be no.


In terms of master browsers etc, the PDC should be the master browser.  
I would also configure the PDC as a WINS server-  that makes a lot of 
those issues go away.


By default, XP clients will prefer to logon to a BDC over a PDC.In 
most cases this is fine.






On 09/03/2010 09:20 AM, Marc Franquesa wrote:

First, excuse me because I don't speak english very well (perhaps this
is the reason that I mess up something when reading the documentation).
I have read the Howto, some Examples and the book and I have some doubts
which I like to solve. Excuse me for the big post, too ;)

My starting point:
- 3 Debian Linux Samba Servers
- 1 Windows XP SP3 Professional
- 1 OpenLDAP Server (on another Debian Linux Server)
- All hosts in the same network

Software that I'm using:
- Debian Stable (Lenny) 5.0
- Samba 3.2.5
- OpenLDAP 2.4
- Samba LDAP tools from IDEALX
- PAM-LDAP
- NSS-LDAP

I verfied it all and with a simple configuration for Samba (Simple
Workgroup), the LDAP backend works well for all uses (authentication,
authorization, NSS resolving, etc.) meaning that all LDAP packages are
well configured. (But this question is more about Samba than Samba
+LDAP).

WHAT I AM TRYING TO DO:

- Configure *ALL* 3 Linux Samba Servers as PDC for a NT4 Domain (for
redundancy/fault tolerance).
- Use the same LDAP backend for all Samba servers (centralized authn
+authz)
- Include the Windows XP SP3 as a Domain Member.

I want that if one of the Samba Servers goes down (any of them) the
Domain will not be affected.

MY DOUBTS:

- Following the documentation I must configure all Samba Servers with at
least:

[global]
workgroup = MYWORKGROUP
passdb backend = ldapsam:ldap://my.ldap.server
os level = 33
preferred master = yes
domain master = yes
local master = yes
security = user
domain logons = yes

My big doubts appear when I read 'Security Mode and Master Browsers'
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-pdc.html#id2564901

   

Configuring a Samba box as a domain controller for a domain that
 

already by definition has
   

a PDC is asking for trouble.
 

I understand that probably the problem gets fixed by the fact that all
PDCs will use the same backend (LDAP), but I want to be sure that I
don't have problems in the network nor broadcasts storms.

If the problem is related to the Master Browser election can I solve it
simply configuring different values for os level en each server?

Please, if I don't explain well are do you have any question don't
hesitate to ask me again.


Thanks for the help and for this killapp


   


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Using samba4 to escalate privs.

2010-09-03 Thread Johan Akerstrom
Ye ol' sidHistory edit attack in new disguise using samba4. I don't think
you can consider it to be a hack but I had a lot of fun playing about with
ldbedit. Samba4 is wikked, it really opens up AD, I had a lot of fun setting
it up. Check my blogg for my little sidHistory priv escalation tutorial
(domain admin to enterprise admin).

http://cosmoskey.blogspot.com/2010/08/online-sidhistory-edit-sid-injection.html
http://cosmoskey.blogspot.com/2010/08/online-sidhistory-edit-sid-injection.html
Enjoy! :)

Regards,

Johan Akerstrom
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba in large domain

2010-09-03 Thread Lennart Sorensen
On Fri, Sep 03, 2010 at 04:45:15PM +0400, Dmitry Tikhomirov wrote:
 In my company we have domains like   country.global.network.local
 My country is russia so domain is russia.global.network.local.

Remember .local is reserved for multicast DNS.  It is NOT to be used for
other purposes.  Yes Microsoft mistakenly used it in their documentation
as an example, but it is still not to be used.  You will have problems.
Microsoft has even released domain rename tools because of their mistake.

-- 
Len Sorensen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] valid users option

2010-09-03 Thread grant little
 On Thu, Sep 2, 2010 at 2:08 AM, DUPEYRAT, PIERRE (PIERRE)** CTR ** 
 pierre.dupey...@alcatel-lucent.com wrote:

 Hello,

 I am using samba server as members of windows AD domain , with security =
 ADS, the logins unix and windows are aligned.
 Since the version 3.0.34 , I have strange behaviour  on shares where we use
 valid users with unix groups it does'nt work.

 Nok:
 Valid users = @group1
 Valid users = +group1

 Still work :
 Valid users = Domain\user
 Valid users = user

 The bad workaround found , is to use a file users.map and add the entry
 below:
 user = domaine\user

 could you help me ?
 Regards.
 _
 Pierre DUPEYRAT


 --

*De :* grant little [mailto:grantlid...@gmail.com]
*Envoyé :* jeudi 2 septembre 2010 19:38
*À :* DUPEYRAT, PIERRE (PIERRE)** CTR **
*Objet :* Re: [Samba] valid users option




  That drove me crazy figuriung it out for my local system but I finally
 found it, YMMV
 this works for me
   valid users = @ad\groupname
   write list = @ad\groupname
 where 'ad' is the domain of my local active directory.


 On Fri, Sep 3, 2010 at 12:26 AM, DUPEYRAT, PIERRE (PIERRE)** CTR ** 
pierre.dupey...@alcatel-lucent.com wrote:

Hello,



The problem is when i want to use unix groups  (locals or NIS).



Regards.


Allô Pierre,


maybe the problem lies in your nsswitch.conf
quote src='nsswitch.conf man page'The sources  for  the  databases  and
their lookup order are specified in the /etc/nsswitch.conf file./quote

I'm using ldap so I have this as part of that file:
passwd: files ldap
group:  files ldap
shadow: files ldap

which says it looks first in passwd (etc) files and then ldap

you never described your setup so you might be using something different
like
passwd:  files nis

or

passwd: files winbind

But then maybe I'm way off base.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba in large domain

2010-09-03 Thread Dmitry Tikhomirov
Yeah, i know it, but domain is exist and i have what i have :-)



03.09.2010, в 18:44, Lennart Sorensen написал(а):

 Microsoft has even released domain rename tools because of their mistake.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba Time Server Problem

2010-09-03 Thread grant little
On Fri, Sep 3, 2010 at 4:32 AM, Ian Stirling stirl...@uk.ibm.com wrote:

 I recently reinstalled a system running Samba as a WINS/Time server and I
 can no longer get Windows systems to access it correctly.

 I see the following now

 [D:\Temp]net time \\timeserver
 System error 5 has occurred.

 Access is denied.

 I am an administrator on this system and it works OK if I point it at
 another server I know is running Samba

 [D:\Temp]net time \\othersystem
 Current time at \\othersystem is 9/3/2010 11:42 AM

 The command completed successfully.

 What have I missed in the Samba config on my server that is causing this
 problem.   Here is my smb.conf
 snip/



Is this any help?
http://www.mail-archive.com/samba@lists.samba.org/msg89260.html
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Access Samba from Windows 3.1

2010-09-03 Thread Public Mailing Lists

On 09/02/2010 04:00 PM, Chris Smith wrote:

On Thu, Sep 2, 2010 at 8:04 AM, Public Mailing Lists
li...@lists.cichon.com  wrote:
   

How do I need to configure Samba in order to connect to the latest Samba
server again? Unfortunately, I can't change the configuration of these old
Windows installations. Hopefully, there are some options that I can write
into smb.conf in order to re-enable old style Windows networking.
 

Interesting. Windows 3.1 with the workgroup add-on package (I used
this with DOS) or WFWG 3.11?
   


It is Windows for Workgroups 3.11.


Always best to read the Changelog for all of the versions between the
one you were at to the one you're moving to. As you don't mention
versions I can only guess that there was a change in the default
setting of some of these: lanman auth, client lanman auth,
encrypt passwords, client plaintext auth. There may be others
changes you want/need to be aware of as well.
   

Yes, there are so many options, it is confusing to me.

It is a trusted network without internet access, so it's OK if it hasn't 
got the latest password encryption and authentication methods out there.


Would it be possible to put something into the FAQ or Readme file of Samba?
Something, like
if you want to access that server from Windows for Workgroups 3.11,
put the following lines [...] into your smb.conf
That would be greatly helpful for anyone else who needs to maintain a 
legacy installation of Windows.


Thank you so much for your help!

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Set ACLs on Samba share from Windows

2010-09-03 Thread Jeremy Allison
On Thu, Sep 02, 2010 at 12:16:00AM +, Dadoo wrote:
 
 On Wed, 01 Sep 2010 23:19:25 +, Dadoo wrote:
 
  On Wed, 01 Sep 2010 20:24:47 +, Dadoo wrote:
  I've also dug into some of the Samba source and discovered the error is
  coming from a function named acl_valid, which is called from
  smb_acl_to_posix, in the file vfs_posixacl.c. I'll admit I'm no
  expert on POSIX ACLs, but I have to wonder if there's a bug in the
  Linux ACL functions, since smb_acl_to_posix uses *only* ACL functions
  to manipulate the ACL, and someone else in this group said that very
  same function works on Solaris. Does this work for anyone out there,
  using a Linux system?
  
  Okay, now I'm getting somewhere. I finally got my source-compiled
  version of Samba (mostly) working, and put in a DEBUG statement that
  calls acl_to_text, right before the call to acl_valid. This is what
  I got:
  
  user::rwx
  user::rwx
  user:2001:rwx
  user:2003:rwx
  user:2004:rwx
  user:2005:rwx
  user:2006:rwx
  group::---
  mask::rwx
  other::---
  
  Again, I'm not an ACL expert. Can anyone verify whether or not this is a
  valid ACL?
  
  Thanks
 
 Well, it's not a bug in the Linux POSIX ACL libraries. According to the 
 man page, it's the occurrence of two user::rwx (ACL_USER_OBJ) strings. 
 In my log output, taken from the for loop in smb_acl_to_posix, you 
 can see that Samba attaches two ACL_USER_OBJ entries to the ACL, even 
 though the POSIX rules require exactly one.
 
 Where do I go from here?

Oh that's very interesting. It shouldn't do that.

Can you log a bug on bugzilla.samba.org and attach
a debug level 10 log of smbd when you're doing this.

I'd like to fix this asap.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Set ACLs on Samba share from Windows

2010-09-03 Thread Dadoo

On Fri, 03 Sep 2010 08:58:10 -0700, Jeremy Allison wrote:

 Can you log a bug on bugzilla.samba.org and attach a debug level 10 log
 of smbd when you're doing this.

Done.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Set ACLs on Samba share from Windows

2010-09-03 Thread Dadoo

On Fri, 03 Sep 2010 08:58:10 -0700, Jeremy Allison wrote:
 
 Well, it's not a bug in the Linux POSIX ACL libraries. According to the
 man page, it's the occurrence of two user::rwx (ACL_USER_OBJ)
 strings. In my log output, taken from the for loop in
 smb_acl_to_posix, you can see that Samba attaches two ACL_USER_OBJ
 entries to the ACL, even though the POSIX rules require exactly one.
 
 Where do I go from here?
 
 Oh that's very interesting. It shouldn't do that.

Well, sadly, that may not be the whole story. As a temporary fix, I just 
put some code into smb_acl_to_posix to check for duplicate USER_OBJs, 
and skip adding them to the ACL when it finds any. Windows gives me the 
same error, when I try to set an ACL.

Interestingly (to me), smb_acl_to_posix seems to be called twice, when 
attempting to set an ACL. The first time it's called, I get this ACL:

user::rwx
user:2001:rwx
user:2004:rwx
user:2005:rwx
user:2006:rwx
group::rwx
group:2033:rwx
mask::rwx
other::rwx

which passes the acl_valid check. The second time through, I get this:

user::rwx
user:2001:rwx
user:2003:rwx
user:2004:rwx
user:2005:rwx
user:2006:rwx
group::---
mask::rwx
other::---

which fails the acl_valid check. To me, that ACL looks fine (though I 
do find it odd that Samba removed my group permissions, when I was adding 
access for a user), but as I've said before, I'm no expert on ACLs.

Should I add this to my bug report, or create a new bug report, or is 
this an unrelated issue?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] New PDC

2010-09-03 Thread Michael Lueck

Gregory A. Cain wrote:

The new PDC will be Samba 3.4.0 running on Ubuntu 9.10.


Odd you would choose to land at 9.10 as 10.04 is a LTS release.

I recently upgraded one server from 9.04 to 10.04, with the minor issue that 
during the 9.10 to 10.04 upgrade winbind ended up getting added.

Sincerely,

--
Michael Lueck
Lueck Data Systems
http://www.lueckdatasystems.com/

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Transparent File Caching

2010-09-03 Thread Jeremy Allison
On Wed, Sep 01, 2010 at 01:43:51PM -0400, Ryan Whelan wrote:
 This is not really a samba question, but if anyone would know that answer,
 it would be this group. :)  Are there any Open Source projects that offer
 network file caching for SMB/CIFS? Something like what Squid does for HTTP.
 
 If not, do you think it would be difficult to position Samba into such a
 role?  We are going to use Cisco WAAS for branch locations, but I think the
 cache in the devices may not be enough for some locations.
 
 Food for thought if nothing else :)

Samba code could be repurposed for that role, but it
would require quite a bit of thought. I think it's a
good idea, but don't have the bandwidth to do it.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Build status as of Fri Sep 3 06:00:02 2010

2010-09-03 Thread build
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2010-09-02 
00:01:04.0 -0600
+++ /home/build/master/cache/broken_results.txt 2010-09-03 00:00:52.0 
-0600
@@ -1,4 +1,4 @@
-Build status as of Thu Sep  2 06:00:01 2010
+Build status as of Fri Sep  3 06:00:02 2010
 
 Build counts:
 Tree Total  Broken Panic 
@@ -14,7 +14,7 @@
 samba-docs   0  0  0 
 samba-web0  0  0 
 samba_3_current 32 32 4 
-samba_3_master 32 31 1 
+samba_3_master 32 31 0 
 samba_3_next 32 32 5 
 samba_4_0_waf 36 32 0 
 talloc   32 6  0 


[SCM] Samba Shared Repository - branch master updated

2010-09-03 Thread Michael Adam
The branch, master has been updated
   via  4208d40 docs:vfs_gpfs: improve the CAVEAT section on run and build 
time dependencies
  from  0bc53f7 pidl: Keep only a single copy of 
samba.dcerpc.base.ClientConnection.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 4208d40a74cdf01cf404b6378f8b8b00715c3e63
Author: Michael Adam ob...@samba.org
Date:   Mon Aug 30 14:49:16 2010 +0200

docs:vfs_gpfs: improve the CAVEAT section on run and build time dependencies

---

Summary of changes:
 docs-xml/manpages-3/vfs_gpfs.8.xml |   17 ++---
 1 files changed, 14 insertions(+), 3 deletions(-)


Changeset truncated at 500 lines:

diff --git a/docs-xml/manpages-3/vfs_gpfs.8.xml 
b/docs-xml/manpages-3/vfs_gpfs.8.xml
index 6421fc6..3372a95 100644
--- a/docs-xml/manpages-3/vfs_gpfs.8.xml
+++ b/docs-xml/manpages-3/vfs_gpfs.8.xml
@@ -274,9 +274,20 @@
 
 refsect1
titleCAVEATS/title
-   paraThe gpfs gpl libraries are required by commandgpfs/command VFS
-   module during both compilation and runtime.
-   Also this VFS module is tested to work on SLES 9/10 and RHEL 4.4
+   para
+   Depending on the version of gpfs, the commandlibgpfs_gpl/command
+   library or the commandlibgpfs/command library is needed at
+   runtime by the commandgpfs/command VFS module:
+   Starting with gpfs 3.2.1 PTF8, the complete commandlibgpfs/command
+   is available as open source and commandlibgpfs_gpl/command does no
+   longer exist. With earlier versions of gpfs, only the
+   commandlibgpfs_gpl/command library was open source and could be
+   used at run time.
+   /para
+   para
+   At build time, only the header file commandgpfs_gpl.h/command
+   is required , which is a symlink to commandgpfs.h/command in
+   gpfs versions newer than 3.2.1 PTF8.
/para
 /refsect1
 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-09-03 Thread Günther Deschner
The branch, master has been updated
   via  cf728f8 s3-spoolss: fix some debug statements.
  from  4208d40 docs:vfs_gpfs: improve the CAVEAT section on run and build 
time dependencies

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit cf728f890f6d2cd8cc831ba95a5d2d0dac6e8e35
Author: Günther Deschner g...@samba.org
Date:   Thu Sep 2 13:41:08 2010 +0200

s3-spoolss: fix some debug statements.

Guenther

---

Summary of changes:
 source3/printing/nt_printing_migrate.c |2 +-
 source3/rpc_server/srv_spoolss_nt.c|2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/printing/nt_printing_migrate.c 
b/source3/printing/nt_printing_migrate.c
index 362eb90..2060b91 100644
--- a/source3/printing/nt_printing_migrate.c
+++ b/source3/printing/nt_printing_migrate.c
@@ -243,7 +243,7 @@ static NTSTATUS migrate_printer(TALLOC_CTX *mem_ctx,
status = werror_to_ntstatus(result);
}
DEBUG(2, (OpenPrinter(%s) failed: %s\n,
- key_name, nt_errstr(status)));
+ key_name, win_errstr(result)));
return status;
}
 
diff --git a/source3/rpc_server/srv_spoolss_nt.c 
b/source3/rpc_server/srv_spoolss_nt.c
index 6ce377d..281de00 100644
--- a/source3/rpc_server/srv_spoolss_nt.c
+++ b/source3/rpc_server/srv_spoolss_nt.c
@@ -1541,7 +1541,7 @@ WERROR _spoolss_OpenPrinterEx(struct pipes_struct *p,
 
if (!open_printer_hnd(p, r-out.handle, r-in.printername, 0)) {
DEBUG(0,(_spoolss_OpenPrinterEx: Cannot open a printer handle 
-for printer %s\n, r-in.printername));
+   for printer %s\n, r-in.printername));
ZERO_STRUCTP(r-out.handle);
return WERR_INVALID_PARAM;
}


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-09-03 Thread Kamen Mazdrashki
The branch, master has been updated
   via  fdffa90 s4-drs: A quick fix for DRSUAPI_EXOP_FSMO_RID_ALLOC 
extended_op handling
   via  65b21c0 s4-dreplsrv: Refactor drepl_replica_sync() to behave as 
described in MS-DRSR
   via  715743b s4-dreplsrv: Helpers to locate source DSA in a partition by 
GUID or DNS name
   via  3691e6c s4-dreplsrv: Helper to find NC by DN or GUID or SID
   via  5685fb6 s4-dreplsrv: Add caller-specific data parameter for 
dreplsrv_fsmo_callback_t
  from  cf728f8 s3-spoolss: fix some debug statements.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit fdffa90ef99e10b963ecec73a65e18ecb6cec932
Author: Kamen Mazdrashki kame...@samba.org
Date:   Fri Sep 3 06:20:49 2010 +0300

s4-drs: A quick fix for DRSUAPI_EXOP_FSMO_RID_ALLOC extended_op handling

When DRSUAPI_EXOP_FSMO_RID_ALLOC extended op is handled
in DsGetNCChanges() stub, we need to returned a well know set of
object - see: [ms-adts], 3.1.1.5.1.7

With this hack we are going to return just objects modified
during RID allocation procedure - i.e. RID Manager$, RID Set for
computer object and computer object itself.

Which is a close approximation of what we are expected to return.

commit 65b21c056217b03ad0e0aa321bc9d85e048d2ee6
Author: Kamen Mazdrashki kame...@samba.org
Date:   Fri Sep 3 04:29:02 2010 +0300

s4-dreplsrv: Refactor drepl_replica_sync() to behave as described in MS-DRSR

see: MS-DRSR - 4.1.23.2

Note: Synchronious replication not implemented yet.

commit 715743b38dec1968dce843573a12947407d74324
Author: Kamen Mazdrashki kame...@samba.org
Date:   Tue Aug 31 04:16:18 2010 +0300

s4-dreplsrv: Helpers to locate source DSA in a partition by GUID or DNS name

commit 3691e6c97b2187730d42a2bb79ecc06f37aab344
Author: Kamen Mazdrashki kame...@samba.org
Date:   Tue Aug 31 04:15:37 2010 +0300

s4-dreplsrv: Helper to find NC by DN or GUID or SID

commit 5685fb64e4f4660d586e57c59800d0f374d10749
Author: Kamen Mazdrashki kame...@samba.org
Date:   Tue Aug 31 00:01:25 2010 +0300

s4-dreplsrv: Add caller-specific data parameter for dreplsrv_fsmo_callback_t

It is to be used when we need to preserve a state
to be used in tha callback when dreplsrv_out_operation is completed

---

Summary of changes:
 source4/dsdb/repl/drepl_out_pull.c|   10 ++-
 source4/dsdb/repl/drepl_partitions.c  |   73 ++
 source4/dsdb/repl/drepl_ridalloc.c|5 +-
 source4/dsdb/repl/drepl_service.c |  119 +++--
 source4/dsdb/repl/drepl_service.h |6 +-
 source4/rpc_server/drsuapi/getncchanges.c |9 ++
 6 files changed, 207 insertions(+), 15 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/dsdb/repl/drepl_out_pull.c 
b/source4/dsdb/repl/drepl_out_pull.c
index e9b57a1..db77a4e 100644
--- a/source4/dsdb/repl/drepl_out_pull.c
+++ b/source4/dsdb/repl/drepl_out_pull.c
@@ -38,7 +38,8 @@ WERROR dreplsrv_schedule_partition_pull_source(struct 
dreplsrv_service *s,
   struct 
dreplsrv_partition_source_dsa *source,
   enum drsuapi_DsExtendedOperation 
extended_op,
   uint64_t fsmo_info,
-  dreplsrv_fsmo_callback_t 
callback)
+  dreplsrv_fsmo_callback_t 
callback,
+  void *cb_data)
 {
struct dreplsrv_out_operation *op;
 
@@ -50,6 +51,7 @@ WERROR dreplsrv_schedule_partition_pull_source(struct 
dreplsrv_service *s,
op-extended_op = extended_op;
op-fsmo_info   = fsmo_info;
op-callback= callback;
+   op-cb_data = cb_data;
 
DLIST_ADD_END(s-ops.pending, op, struct dreplsrv_out_operation *);
 
@@ -64,7 +66,9 @@ static WERROR dreplsrv_schedule_partition_pull(struct 
dreplsrv_service *s,
struct dreplsrv_partition_source_dsa *cur;
 
for (cur = p-sources; cur; cur = cur-next) {
-   status = dreplsrv_schedule_partition_pull_source(s, cur, 
DRSUAPI_EXOP_NONE, 0, NULL);
+   status = dreplsrv_schedule_partition_pull_source(s, cur,
+
DRSUAPI_EXOP_NONE, 0,
+NULL, NULL);
W_ERROR_NOT_OK_RETURN(status);
}
 
@@ -160,7 +164,7 @@ static void dreplsrv_pending_op_callback(struct tevent_req 
*subreq)
 
 done:
if (op-callback) {
-   op-callback(s, rf-result_last_attempt, op-extended_ret);
+   op-callback(s, rf-result_last_attempt, op-extended_ret, 
op-cb_data);
}
talloc_free(op);

[SCM] Samba Shared Repository - branch v3-6-test updated

2010-09-03 Thread Michael Adam
The branch, v3-6-test has been updated
   via  2ab1635 docs:vfs_gpfs: improve the CAVEAT section on run and build 
time dependencies
  from  8e60fa5 docs-xml/vfs_gpfs: document 'gpfs:refuse_dacl_protected'

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test


- Log -
commit 2ab163564c6780ebea995d32bd12621f4cedcdd3
Author: Michael Adam ob...@samba.org
Date:   Mon Aug 30 14:49:16 2010 +0200

docs:vfs_gpfs: improve the CAVEAT section on run and build time dependencies

---

Summary of changes:
 docs-xml/manpages-3/vfs_gpfs.8.xml |   17 ++---
 1 files changed, 14 insertions(+), 3 deletions(-)


Changeset truncated at 500 lines:

diff --git a/docs-xml/manpages-3/vfs_gpfs.8.xml 
b/docs-xml/manpages-3/vfs_gpfs.8.xml
index 6421fc6..3372a95 100644
--- a/docs-xml/manpages-3/vfs_gpfs.8.xml
+++ b/docs-xml/manpages-3/vfs_gpfs.8.xml
@@ -274,9 +274,20 @@
 
 refsect1
titleCAVEATS/title
-   paraThe gpfs gpl libraries are required by commandgpfs/command VFS
-   module during both compilation and runtime.
-   Also this VFS module is tested to work on SLES 9/10 and RHEL 4.4
+   para
+   Depending on the version of gpfs, the commandlibgpfs_gpl/command
+   library or the commandlibgpfs/command library is needed at
+   runtime by the commandgpfs/command VFS module:
+   Starting with gpfs 3.2.1 PTF8, the complete commandlibgpfs/command
+   is available as open source and commandlibgpfs_gpl/command does no
+   longer exist. With earlier versions of gpfs, only the
+   commandlibgpfs_gpl/command library was open source and could be
+   used at run time.
+   /para
+   para
+   At build time, only the header file commandgpfs_gpl.h/command
+   is required , which is a symlink to commandgpfs.h/command in
+   gpfs versions newer than 3.2.1 PTF8.
/para
 /refsect1
 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-6-test updated

2010-09-03 Thread Björn Jacke
The branch, v3-6-test has been updated
   via  4199f00 s3: use fine grained time in netprot response
   via  35d3907 s3: use monotonic clock for time deltas in smbget
   via  b9b48da tdb/waf: the deps for rt are provided by libreplace
   via  9eea2ce replace/waf: add rt to deps at this place
   via  f590a68 s3: use monotonic time in timeout of sys_select_intr()
   via  3d27fed lib/util: add nsec_time_diff to calulate diffs from 
timespecs
   via  efb9d7c s3: use monotonic clock for time deltas in namequery 
functions
   via  b8a8226 s3: use monotonic clock for time deltas in smbtar
   via  7ba741e s3: use monotonic clock for time deltas in smbclient
   via  940b278 s3: add TspecDiff macro
   via  ab88767 lib/util: add function to query the monotonic clock with 
the required fallback to the realtime clock
   via  84dfa82 libreplace: make a define for a best effort monotonic clock
   via  ed431aa s3: we have clock_gettime everywhere, remove ifdefs
   via  20318f7 s3: use clock_gettime() in timespec_current()
   via  d3ad838 libreplace: add clock_gettime replacement function for 
systems that don't have it
   via  2479c9b libreplace/waf: look for clock_gettime
   via  abf907f libreplace: move detection of clock_gettime to libreplace
   via  62620a5 libreplace: move gettimeofday TZ arg check here
  from  2ab1635 docs:vfs_gpfs: improve the CAVEAT section on run and build 
time dependencies

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test


- Log -
commit 4199f00ae684020e537c8fb8b6e052a700a0a965
Author: Björn Jacke b...@sernet.de
Date:   Wed May 12 10:50:17 2010 +0200

s3: use fine grained time in netprot response

commit 35d39071f1ba77df9e4ba08c635e414db4835ff4
Author: Björn Jacke b...@sernet.de
Date:   Tue Aug 31 13:10:45 2010 +0200

s3: use monotonic clock for time deltas in smbget

commit b9b48dac02c3b70d51be6138080c8e3aad12999d
Author: Björn Jacke b...@sernet.de
Date:   Tue Aug 31 13:06:39 2010 +0200

tdb/waf: the deps for rt are provided by libreplace

commit 9eea2ce99fe0520fc5ea66869bdb62062680176f
Author: Björn Jacke b...@sernet.de
Date:   Tue Aug 31 11:31:19 2010 +0200

replace/waf: add rt to deps at this place

commit f590a68a590d7c5765ee1dbcc10c7649b0a963c8
Author: Björn Jacke b...@sernet.de
Date:   Mon Aug 30 18:02:19 2010 +0200

s3: use monotonic time in timeout of sys_select_intr()

commit 3d27fedacf6b494ae985083cf17ff3799ee652ba
Author: Björn Jacke b...@sernet.de
Date:   Mon Aug 30 17:56:37 2010 +0200

lib/util: add nsec_time_diff to calulate diffs from timespecs

commit efb9d7c627ba169b1c2da0ee184df4d9fe3c4d8a
Author: Björn Jacke b...@sernet.de
Date:   Mon Aug 30 15:46:22 2010 +0200

s3: use monotonic clock for time deltas in namequery functions

commit b8a82265216db5bb0220ab3a361f8282921dd0cc
Author: Björn Jacke b...@sernet.de
Date:   Mon Aug 30 15:44:54 2010 +0200

s3: use monotonic clock for time deltas in smbtar

commit 7ba741eccfb7f434a66399068a7a61ca9953866c
Author: Björn Jacke b...@sernet.de
Date:   Mon Aug 30 12:15:54 2010 +0200

s3: use monotonic clock for time deltas in smbclient

commit 940b278ba32b5c0698304723a4daabb48fe4d560
Author: Björn Jacke b...@sernet.de
Date:   Mon Aug 30 15:30:16 2010 +0200

s3: add TspecDiff macro

commit ab88767fe8812515c18ca1eca72caba086f8cf42
Author: Björn Jacke b...@sernet.de
Date:   Mon Aug 30 12:10:29 2010 +0200

lib/util: add function to query the monotonic clock with the required 
fallback to the realtime clock

commit 84dfa8295ce962a255ebfd74f19be48abef7554e
Author: Björn Jacke b...@sernet.de
Date:   Thu Aug 26 12:22:02 2010 +0200

libreplace: make a define for a best effort monotonic clock

commit ed431aa51f4716f37aeb7ae977c871f297d12d13
Author: Björn Jacke b...@sernet.de
Date:   Tue Aug 24 11:14:19 2010 +0200

s3: we have clock_gettime everywhere, remove ifdefs

commit 20318f70228969cdc468c55ab127c463e113bdd4
Author: Björn Jacke b...@sernet.de
Date:   Mon Aug 30 16:51:56 2010 +0200

s3: use clock_gettime() in timespec_current()

commit d3ad838895747e628d4500e37daf7e135046192b
Author: Björn Jacke b...@sernet.de
Date:   Thu Aug 19 19:07:04 2010 +0200

libreplace: add clock_gettime replacement function for systems that don't 
have it

commit 2479c9b54bfab278159f23db3bcb5f26fb38bed6
Author: Björn Jacke b...@sernet.de
Date:   Fri Aug 27 00:13:07 2010 +0200

libreplace/waf: look for clock_gettime

commit abf907f93bcb831187446399b6aeebc65238bedb
Author: Björn Jacke b...@sernet.de
Date:   Thu Aug 19 18:39:45 2010 +0200

libreplace: move detection of clock_gettime to libreplace

commit 62620a5fdc32a120fa4b895e7286608cb5345870
Author: Björn Jacke b...@sernet.de
Date:   Mon Aug 30 14:35:49 2010 +0200

libreplace: move gettimeofday TZ arg check here

---


[SCM] Samba Shared Repository - branch master updated

2010-09-03 Thread Stefan Metzmacher
The branch, master has been updated
   via  31d3227 s4:lib/messaging: make irpc_request private and remove 
unused code
   via  dd71542 s4:libcli/composite: remove unused composite_continue_irpc()
   via  a9078aa s4:lib/messaging/tests: make use of irpc_binding_handle()
   via  a65d1eb s4:lib/messaging: use irpc_binding_handle() for python 
bindings
   via  993d37b s4:wrepl_server: use irpc_binding_handle_by_name() in 
wreplsrv_scavenging_replica_active_records()
   via  f43ec0e s4:wrepl_server: use irpc_binding_handle_by_name() in 
r_do_release_demand()
   via  2e07f82 s4:wrepl_server: use irpc_binding_handle_by_name() in 
r_do_challenge()
   via  8202cf7 s4:auth_winbind: use irpc_binding_handle_by_name()
   via  52d4a97 s4:libcli/wbclient: use irpc_binding_handle_by_name()
   via  5c73c84 s4:rpc_server/netlogon: use irpc_binding_handle_by_name()
   via  e117177 s4:smbd/service_task: use irpc_binding_handle_by_name()
   via  ff0362f s4:dsdb/kcc: use irpc_binding_handle_by_name()
   via  3c41505 s4:libcli/finddcs: use irpc_binding_handle_by_name()
   via  f2422a0 s4:rpc_server/common: use irpc_binding_handle_by_name() in 
dcesrv_irpc_forward_rpc_call()
   via  611357a s4:lib/messaging: add irpc_binding_handle_by_name() helper 
function
   via  e26f0ab s4:lib/messaging: add irpc dcerpc_binding_handle backend
   via  328c708 s4:lib/messaging: move messaging prototypes from irpc.h to 
messaging.h
   via  8740cae s4:lib/messaging/tests: fix some compiler warnings
   via  705f4c2 s4:auth_winbind: remove unused winbind_samba3 backend
   via  0f35d51 s4:auth_winbind: fix segfault in 
winbind_check_password_wbclient()
   via  5b0e0ac s4:auth_winbind: fix compiler warnings
   via  14ffb7d nsswitch/libwbclient: LIBWBCLIENT depends on 
LIBWINBIND-CLIENT
  from  fdffa90 s4-drs: A quick fix for DRSUAPI_EXOP_FSMO_RID_ALLOC 
extended_op handling

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 31d3227074a63ab7f66f74eca019884bb2e236da
Author: Stefan Metzmacher me...@samba.org
Date:   Fri Sep 3 16:05:38 2010 +0200

s4:lib/messaging: make irpc_request private and remove unused code

metze

commit dd7154234c267254cea199638062c5be1cd8b253
Author: Stefan Metzmacher me...@samba.org
Date:   Fri Sep 3 15:59:44 2010 +0200

s4:libcli/composite: remove unused composite_continue_irpc()

metze

commit a9078aad3c970e325e71f72f9f2c09e7136082cd
Author: Stefan Metzmacher me...@samba.org
Date:   Fri Sep 3 15:42:56 2010 +0200

s4:lib/messaging/tests: make use of irpc_binding_handle()

metze

commit a65d1eb05ce2eb0369e7489205c57191cd09c989
Author: Stefan Metzmacher me...@samba.org
Date:   Fri Sep 3 15:21:16 2010 +0200

s4:lib/messaging: use irpc_binding_handle() for python bindings

metze

commit 993d37baf589da85f5285f4a0edc45da692cc192
Author: Stefan Metzmacher me...@samba.org
Date:   Fri Sep 3 13:18:14 2010 +0200

s4:wrepl_server: use irpc_binding_handle_by_name() in 
wreplsrv_scavenging_replica_active_records()

metze

commit f43ec0e7516a1039172ce3e7f26ad47eb0271310
Author: Stefan Metzmacher me...@samba.org
Date:   Fri Sep 3 13:05:32 2010 +0200

s4:wrepl_server: use irpc_binding_handle_by_name() in r_do_release_demand()

metze

commit 2e07f82f7cb905d5892d5dec7966ff17725bbc79
Author: Stefan Metzmacher me...@samba.org
Date:   Fri Sep 3 12:58:10 2010 +0200

s4:wrepl_server: use irpc_binding_handle_by_name() in r_do_challenge()

metze

commit 8202cf7966b8125ac175ceb8cef18037c9a8cc31
Author: Stefan Metzmacher me...@samba.org
Date:   Fri Sep 3 16:59:05 2010 +0200

s4:auth_winbind: use irpc_binding_handle_by_name()

metze

commit 52d4a97afc4b09f860e84f059c419d33bfec18ff
Author: Stefan Metzmacher me...@samba.org
Date:   Fri Sep 3 12:33:17 2010 +0200

s4:libcli/wbclient: use irpc_binding_handle_by_name()

metze

commit 5c73c84f291573e835e9286c8b3a0831bc3c7dad
Author: Stefan Metzmacher me...@samba.org
Date:   Fri Sep 3 12:09:36 2010 +0200

s4:rpc_server/netlogon: use irpc_binding_handle_by_name()

metze

commit e117177307fe42e0e6ef92ee66df1154ffe3b9ec
Author: Stefan Metzmacher me...@samba.org
Date:   Fri Sep 3 11:39:15 2010 +0200

s4:smbd/service_task: use irpc_binding_handle_by_name()

metze

commit ff0362fc3567ec2dab902c685f7715a6070a63e3
Author: Stefan Metzmacher me...@samba.org
Date:   Fri Sep 3 11:34:17 2010 +0200

s4:dsdb/kcc: use irpc_binding_handle_by_name()

metze

commit 3c4150522cc85fd5774ca3346ff11f9d481bca7a
Author: Stefan Metzmacher me...@samba.org
Date:   Fri Sep 3 11:13:01 2010 +0200

s4:libcli/finddcs: use irpc_binding_handle_by_name()

metze

commit f2422a0faab4443649633d6b378a4357eff194f2
Author: Stefan Metzmacher me...@samba.org
Date:   Mon Aug 30 13:45:48 2010 +0200

s4:rpc_server/common: 

[SCM] Samba Shared Repository - branch v3-6-test updated

2010-09-03 Thread Jeremy Allison
The branch, v3-6-test has been updated
   via  9bebfbd s3-ctdb: ctdbd_init_connection() is static to this file.
  from  4199f00 s3: use fine grained time in netprot response

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test


- Log -
commit 9bebfbdc80c16c446cdf63ca19e943ababe221d9
Author: Günther Deschner g...@samba.org
Date:   Wed Sep 1 10:56:17 2010 +0200

s3-ctdb: ctdbd_init_connection() is static to this file.

Guenther
(cherry picked from commit 5568ceda47905657b79f7971a3a5eca1ba0cedc1)

---

Summary of changes:
 source3/lib/ctdbd_conn.c |8 
 1 files changed, 0 insertions(+), 8 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/lib/ctdbd_conn.c b/source3/lib/ctdbd_conn.c
index afc13f2..ff28614 100644
--- a/source3/lib/ctdbd_conn.c
+++ b/source3/lib/ctdbd_conn.c
@@ -1379,12 +1379,4 @@ NTSTATUS ctdb_unwatch(struct ctdbd_connection *conn)
return status;
 }
 
-#else
-
-NTSTATUS ctdbd_init_connection(TALLOC_CTX *mem_ctx,
-  struct ctdbd_connection **pconn)
-{
-   return NT_STATUS_NOT_IMPLEMENTED;
-}
-
 #endif


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-6-test updated

2010-09-03 Thread Jeremy Allison
The branch, v3-6-test has been updated
   via  a7a907c Fix warning message on SAFE_FREE.
  from  9bebfbd s3-ctdb: ctdbd_init_connection() is static to this file.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test


- Log -
commit a7a907cf2fab061d78898c35a99d043ec1b8025f
Author: Jeremy Allison j...@samba.org
Date:   Fri Sep 3 13:57:01 2010 -0700

Fix warning message on SAFE_FREE.

---

Summary of changes:
 source3/include/auth.h |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/include/auth.h b/source3/include/auth.h
index b7089b8..6e85784 100644
--- a/source3/include/auth.h
+++ b/source3/include/auth.h
@@ -34,7 +34,7 @@ struct auth_usersupplied_info {
 
bool was_mapped;  /* Did the username map actually match? */
char *internal_username;  /* username after mapping */
-   const char *workstation_name; /* workstation name (netbios calling
+   char *workstation_name; /* workstation name (netbios calling
   * name) unicode string */
 
uint32 logon_parameters;


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-09-03 Thread Andrew Tridgell
The branch, master has been updated
   via  389d357 torture-lsa: cope with STATUS_SOME_UNMAPPED errors
   via  48323d8 selftest: run client tests with log level 1
   via  aefbdc4 waf: fixed make test with TESTS=test1 test2
   via  b58bfb3 util: added samba_start_debugger()
  from  31d3227 s4:lib/messaging: make irpc_request private and remove 
unused code

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 389d35708ea910e68468648396f405e52907c749
Author: Andrew Tridgell tri...@samba.org
Date:   Thu Sep 2 18:41:45 2010 +1000

torture-lsa: cope with STATUS_SOME_UNMAPPED errors

Now that we support SePrintOperatorPrivilege, an interaction between
the spoolss tests and the privileges tests cause a failure. The
failure happens like this:

 - the spoolss.access test creates and then deletes an account with
   SePrintOperatorPrivilege privilege

 - this leaves the privileges database with an entry for a deleted
   account that is still visible via LSA calls. This is correct
   behaviour (verified against w2k8r2)

 - the lsa.privileges test then enumerates all accounts that have at
   least one privilege, and gets the SID for the deleted account

 - it then called LookupNames and LookupSids on this deleted account,
   and gets an error.

The fix is to not call LookupSids and LookupNames on sids which have
SID_NAME_UNKNOWN as the type

Pair-Programmed-With: Andrew Bartlett abart...@samba.org

commit 48323d88cc4ca3a08d1bd79c748061c775d57eca
Author: Andrew Tridgell tri...@samba.org
Date:   Thu Sep 2 16:46:20 2010 +1000

selftest: run client tests with log level 1

this PIDL print functions to display

commit aefbdc4a9d78d0b92dabb960fadd13801202afe2
Author: Andrew Tridgell tri...@samba.org
Date:   Thu Sep 2 16:45:50 2010 +1000

waf: fixed make test with TESTS=test1 test2

when multiple tests are specified, make escapes the space in MAKEFLAGS
with a backslash, so we need to use shlex.split()

commit b58bfb351025816b18389ac2377c429b8a777dde
Author: Andrew Tridgell tri...@samba.org
Date:   Tue Jul 20 15:31:49 2010 +1000

util: added samba_start_debugger()

This developer function is useful for debugging unusual error
conditions

---

Summary of changes:
 buildtools/wafsamba/samba_utils.py |4 ++-
 lib/util/util.c|   14 
 lib/util/util.h|4 ++
 selftest/selftest.pl   |1 +
 source4/torture/rpc/lsa.c  |   65 +++
 5 files changed, 72 insertions(+), 16 deletions(-)


Changeset truncated at 500 lines:

diff --git a/buildtools/wafsamba/samba_utils.py 
b/buildtools/wafsamba/samba_utils.py
index 304264b..d858c5c 100644
--- a/buildtools/wafsamba/samba_utils.py
+++ b/buildtools/wafsamba/samba_utils.py
@@ -451,7 +451,9 @@ def CHECK_MAKEFLAGS(bld):
 return
 makeflags = os.environ.get('MAKEFLAGS')
 jobs_set = False
-for opt in makeflags.split():
+# we need to use shlex.split to cope with the escaping of spaces
+# in makeflags
+for opt in shlex.split(makeflags):
 # options can come either as -x or as x
 if opt[0:2] == 'V=':
 Options.options.verbose = Logs.verbose = int(opt[2:])
diff --git a/lib/util/util.c b/lib/util/util.c
index d645f7e..c0af4b0 100644
--- a/lib/util/util.c
+++ b/lib/util/util.c
@@ -891,3 +891,17 @@ void *allocate_anonymous_shared(size_t bufsz)
 
 }
 
+#ifdef DEVELOPER
+/* used when you want a debugger started at a particular point in the
+   code. Mostly useful in code that runs as a child process, where
+   normal gdb attach is harder to organise.
+*/
+void samba_start_debugger(void)
+{
+   char *cmd = NULL;
+   asprintf(cmd, xterm -e \gdb --pid %u\, getpid());
+   system(cmd);
+   free(cmd);
+   sleep(2);
+}
+#endif
diff --git a/lib/util/util.h b/lib/util/util.h
index 8383344..994fad0 100644
--- a/lib/util/util.h
+++ b/lib/util/util.h
@@ -877,4 +877,8 @@ struct tevent_req *samba_runcmd_send(TALLOC_CTX *mem_ctx,
 const char * const *argv0, ...);
 int samba_runcmd_recv(struct tevent_req *req, int *perrno);
 
+#ifdef DEVELOPER
+void samba_start_debugger(void);
+#endif
+
 #endif /* _SAMBA_UTIL_H_ */
diff --git a/selftest/selftest.pl b/selftest/selftest.pl
index 7f5aa76..76e1886 100755
--- a/selftest/selftest.pl
+++ b/selftest/selftest.pl
@@ -602,6 +602,7 @@ sub write_clientconf($$)
ldb:nosync = true
system:anonymous = true
client lanman auth = Yes
+   log level = 1
torture:basedir = $prefix_abs/client
 #We don't want to pass our self-tests if the PAC code is wrong
gensec:require_pac = true
diff --git a/source4/torture/rpc/lsa.c