Re: [Samba] IIS Change Notifications

2011-01-09 Thread Volker Lendecke
On Sun, Jan 09, 2011 at 08:31:11PM +1300, Gareth Evans wrote:
 Since I posted the above, i've done more testing and research.

Can you get us the raw network traces when running against
Samba 3.5.6 (there was a significant bug fixed in that
release, 7662) and against Windows, where it is working?
Also, can you get us the full corresponding debug level 10
log? If your changes all come from CIFS clients, can you try
Samba with kernel change notify = false to get the kernel
inotify out of the picture as a potential problem?

Information on how to create network traces can be found
under http://wiki.samba.org/index.php/Capture_Packets, for
Windows you can certainly also use wireshark.

Thanks,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] IIS Change Notifications

2011-01-09 Thread Volker Lendecke
On Sun, Jan 09, 2011 at 10:06:20PM +1300, Gareth Evans wrote:
 Sure, no problem - here's the full debug -10 log from when I tested this
 afternoon.

It would be great if you ran smbd without -i, this would
give us the time stamps and line numbers in the debug
output.

Thanks,

Volker
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] IIS Change Notifications

2011-01-09 Thread Gareth Evans
Sorry, what command should I use to start smbd and capture the log?
If I use -F  filename.log, it seems to just daemonize and not log anything
 (at least not to the piped log file or the log file in /var/log/samba)

I've captured everything without -i so i'm redoing the smbd traces

Gareth

On Sun, Jan 9, 2011 at 10:39 PM, Volker Lendecke
volker.lende...@sernet.dewrote:

 On Sun, Jan 09, 2011 at 10:06:20PM +1300, Gareth Evans wrote:
  Sure, no problem - here's the full debug -10 log from when I tested this
  afternoon.

 It would be great if you ran smbd without -i, this would
 give us the time stamps and line numbers in the debug
 output.

 Thanks,

 Volker

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] IIS Change Notifications

2011-01-09 Thread Volker Lendecke
On Sun, Jan 09, 2011 at 11:00:07AM +0100, Volker Lendecke wrote:
 On Sun, Jan 09, 2011 at 10:49:22PM +1300, Gareth Evans wrote:
  Sorry, what command should I use to start smbd and capture the log?
  If I use -F  filename.log, it seems to just daemonize and not log anything
   (at least not to the piped log file or the log file in /var/log/samba)
 
 Just start is as a normal daemon. Set debug level = 10 and
 max log size = 10 in the smb.conf file and just start
 smbd -D. Then it should log into the log file you set. If
 you compiled just with ./configure;make, it would show up
 under /usr/local/samba/var.

Ah, debug hires timestamp = yes might also help
correlating the network trace and the log.

Thanks,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] IIS Change Notifications

2011-01-09 Thread Volker Lendecke
On Sun, Jan 09, 2011 at 10:49:22PM +1300, Gareth Evans wrote:
 Sorry, what command should I use to start smbd and capture the log?
 If I use -F  filename.log, it seems to just daemonize and not log anything
  (at least not to the piped log file or the log file in /var/log/samba)

Just start is as a normal daemon. Set debug level = 10 and
max log size = 10 in the smb.conf file and just start
smbd -D. Then it should log into the log file you set. If
you compiled just with ./configure;make, it would show up
under /usr/local/samba/var.

With best regards,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] IIS Change Notifications

2011-01-09 Thread Gareth Evans
Hello Volker,

Thanks for your quick responses so far;

I've captured the following:
Log  Capture from kernel notify off, 3.5.6; (hires timestamp, normal
daemon, log level 10)
Log  Capture from kernel notify on, 3.5.6, (hires timestamp, normal daemon,
log level 10)
Wireshark Capture from using windows 7 machine as fileshare (no log since
you can't get one from windows)

All captureslogs were from IIS7 as the SMB client, but there's probably a
few standard windows refreshes and the like there, since I was starting and
stopping the samba server, I had to refresh the explorer windows a few times
to ensure the smbd had started before testing IIS;

If you would like traces from just standalone ReadDirectoryChangesW; let me
know - though it's almost 11:30pm so i'll be away for a few hours soon.

You can download the traces zipped here; 60mb (not sure why the wireshark
traces were so large, but i captured them with the tshark command from the
link you provided)

http://agrath.mole.feralhosting.com/traces.zip

The changes (to fire the notifications) were triggered by copying
red/green/blue dlls into the test/bin folder, which should cause IIS to
reload the appdomain
using a cp command on a ssh session and for the windows server, I used a
command prompt copy command (to eliminate the GUI messing it up by doing
something strange like forcing the notification to get fired or similar)

Gareth

On Sun, Jan 9, 2011 at 10:01 PM, Volker Lendecke
volker.lende...@sernet.dewrote:

 On Sun, Jan 09, 2011 at 08:31:11PM +1300, Gareth Evans wrote:
  Since I posted the above, i've done more testing and research.

 Can you get us the raw network traces when running against
 Samba 3.5.6 (there was a significant bug fixed in that
 release, 7662) and against Windows, where it is working?
 Also, can you get us the full corresponding debug level 10
 log? If your changes all come from CIFS clients, can you try
 Samba with kernel change notify = false to get the kernel
 inotify out of the picture as a potential problem?

 Information on how to create network traces can be found
 under http://wiki.samba.org/index.php/Capture_Packets, for
 Windows you can certainly also use wireshark.

 Thanks,

 Volker Lendecke

 --
 SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
 phone: +49-551-37-0, fax: +49-551-37-9
 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] When is a machine SID created?

2011-01-09 Thread Taso Hatzi
I have been having a problem with 'net getdomainsid' on a machine that I
set up to be a BDC.

# net getdomainsid
Could not fetch local SID

tdbdump shows that there is no machine SID in secrets.db, so I'm thinking
that I overlooked the step that creates a machine SID. What creates the machine
SID and when? Also, is it the hostname or the netbios name that samba uses as
the machine name?

I intend to promote the BDC to PDC eventually, and for practical purposes, give
it the name of the former PDC. Do I have to explicitly do anything to update the
secrets.tdb file or does Samba detect name changes?

There is an LDAP backend all this which has entries for both the PDC
and the BDC.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] tdbdump, tdbbackup

2011-01-09 Thread Michael Wood
On 9 January 2011 12:51, Taso Hatzi taso.ha...@gmail.com wrote:
 On Sat, Jan 8, 2011 at 11:40 PM, Michael Wood esiot...@gmail.com wrote:

 The following leads me to believe that the same package is available on 
 RHEL5:

 http://pkgs.org/centos-5-rhel-5/centos-rhel-updates-i386/tdb-tools-1.1.2-52.el5_5.i386.rpm.html

 You're correct, tdb-tools exists in both the Redhat and Epel
 repositories. A little dicking
 around is required to force the installation if you are using the
 samba3x packages instead
 of the plain samba ones (dependency problems) but the programs still
 work - at least tdbdump
 does.

Glad I could help :)

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] suitable samba version for windows 7

2011-01-09 Thread vishesh
Dear all
  I have samba+ldap setup,act as Domain server on Rhel 5.0 with samba
version 3.0.28.  Windows 7 machines are not joining this domain. I think
i need to upgrade samba. What samba version is stable with windows 7?

Thanks


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] suitable samba version for windows 7

2011-01-09 Thread John Drescher
  I have samba+ldap setup,act as Domain server on Rhel 5.0 with samba
 version 3.0.28.  Windows 7 machines are not joining this domain. I think
 i need to upgrade samba. What samba version is stable with windows 7?

I would say 3.5.6 is the best but you can get away with using 3.3.X versions.

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] DFS - access shares via \\domain\dfsroot\...

2011-01-09 Thread Taso Hatzi
Is there a trick to being able to access shares via
\\domain\dfsroot\.. rather than
\\computer\dfsroot\... ?  Only the latter works for me - samba 3.0.22
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] suitable samba version for windows 7

2011-01-09 Thread TAKAHASHI Motonobu
2011/1/10 John Drescher dresche...@gmail.com:
  I have samba+ldap setup,act as Domain server on Rhel 5.0 with samba
 version 3.0.28.  Windows 7 machines are not joining this domain. I think
 i need to upgrade samba. What samba version is stable with windows 7?

 I would say 3.5.6 is the best but you can get away with using 3.3.X versions.

 John

You can need at least 3.3.2. Both 3.3.1 and 3.3.0 cannot join.

Remember that Samba 3.3.2, 3.3.3 and 3.3.4 needs extra settings:

 HKLM\System\CurrentControlSet\Services\Netlogon\Parameters
  RequireSignOrSeal = 0
  RequireStrongKey = 0

Samba 3.3.5 or higher needs only the settings below and must not be
set the setting above.

HKLM\System\CCS\Services\LanmanWorkstation\Parameters
  DWORD  DomainCompatibilityMode = 1
  DWORD  DNSNameResolutionRequired = 0

---
TAKAHASHI Motonobu mo...@samba.gr.jp
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] DFS - access shares via \\domain\dfsroot\...

2011-01-09 Thread TAKAHASHI Motonobu
2011/1/10 Taso Hatzi taso.ha...@gmail.com:
 Is there a trick to being able to access shares via
 \\domain\dfsroot\.. rather than
 \\computer\dfsroot\... ?  Only the latter works for me - samba 3.0.22

Currently Samba 3.X does not support domain-based DFS, the former.

To support the former, basically Active Directory domain is required.

---
TAKAHASHI Motonobu mo...@samba.gr.jp
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] IIS Change Notifications

2011-01-09 Thread Volker Lendecke
On Sun, Jan 09, 2011 at 11:22:09PM +1300, Gareth Evans wrote:
 Thanks for your quick responses so far;
 
 I've captured the following:
 Log  Capture from kernel notify off, 3.5.6; (hires timestamp, normal
 daemon, log level 10)
 Log  Capture from kernel notify on, 3.5.6, (hires timestamp, normal daemon,
 log level 10)
 Wireshark Capture from using windows 7 machine as fileshare (no log since
 you can't get one from windows)
 
 All captureslogs were from IIS7 as the SMB client, but there's probably a
 few standard windows refreshes and the like there, since I was starting and
 stopping the samba server, I had to refresh the explorer windows a few times
 to ensure the smbd had started before testing IIS;

Unfortunately the network traces only contain SMB2 traffic.
I can understand that against Windows as a server, but even
that only contains READ commands, no notify at all. 

In the log files I indeed do not see any notification being
sent from the server, that's right also.

Maybe it's best if you sent us the small executable that
shows the problem. Please send exact instructions how to
reproduce. And, I don't have Visual Studio handily
available, so something executable on a standard W2k8 or
Win7 (or XP) would be very helpful.

With best regards,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] When is a machine SID created?

2011-01-09 Thread TAKAHASHI Motonobu
2011/1/9 Taso Hatzi taso.ha...@gmail.com:
 I have been having a problem with 'net getdomainsid' on a machine that I
 set up to be a BDC.

 # net getdomainsid
 Could not fetch local SID

 tdbdump shows that there is no machine SID in secrets.db,

First, you have to copy PDC's SID to the BDC with 'net getsid', or
some other ways.

---
TAKAHASHI Motonobu mo...@samba.gr.jp
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] IIS Change Notifications

2011-01-09 Thread Gareth Evans
Hi There

Good point, sorry - windows7 - windows7 will definitely negotiate SMB2; and
it's possible the change notifications work differently there.

I have tested this problem using an XP and 2003 machine as the host machine
(which would be SMB1) previously, but those weren't available last night
when I captured the trace. I could capture a wireshark trace today using XP
as the source if you need.

I have put a copy of the application I used for testing up here:
http://agrath.mole.feralhosting.com/ChangeNotifyTesting.zip
Source code is included (so you can see how it works), but also a compiled
binary in this path:
ChangeNotifyTestingConsole\ChangeNotifyTestingConsole\bin\Debug
It's a very slightly modified copy of the FileSystemWatcher sample
application that you can get from MSDN (I added the recursive flag)

You'll also see the Red/Green/Blue/Test websites I'm referring to.
These are in ChangeNotifyTesting/[red|green|blue|test]
If you wanted to test with those, with an IIS site pointing to the /Test
folder, you'd then copy Red/Bin/* to Test/Bin/ (or Green, Blue)
If you point IIS at a UNC path that isn't local, you'll have to tell ASP.Net
to trust the path using Caspol which is in the .net framework folder in
windows\microsoft .net\framework\v4.?\
Example here: http://blogs.msdn.com/b/shawnfa/archive/2004/12/30/344554.aspx
You don't need to do this for the .net application that just listens for and
logs change notification messages.

To run that program, there's two arguments; a path, which shouldn't contain
spaces and optionally -r

e.g. ChangeNotifyTestingConsole.exe \\smbtest\mwh-webstore\sites\ -r

The log files should show inotify stuff in there (just checked
kernelnotifyon.log) - that is, the notification was registered and the
change detected; but this never reaches the listening application (at least
not on a copy/move/modify (edit contents) operation)

Hopefully it's just the windows-as-source capture that isn't useful here.

Gareth

On Mon, Jan 10, 2011 at 6:37 AM, Volker Lendecke
volker.lende...@sernet.dewrote:

 On Sun, Jan 09, 2011 at 11:22:09PM +1300, Gareth Evans wrote:
  Thanks for your quick responses so far;
 
  I've captured the following:
  Log  Capture from kernel notify off, 3.5.6; (hires timestamp, normal
  daemon, log level 10)
  Log  Capture from kernel notify on, 3.5.6, (hires timestamp, normal
 daemon,
  log level 10)
  Wireshark Capture from using windows 7 machine as fileshare (no log since
  you can't get one from windows)
 
  All captureslogs were from IIS7 as the SMB client, but there's probably
 a
  few standard windows refreshes and the like there, since I was starting
 and
  stopping the samba server, I had to refresh the explorer windows a few
 times
  to ensure the smbd had started before testing IIS;

 Unfortunately the network traces only contain SMB2 traffic.
 I can understand that against Windows as a server, but even
 that only contains READ commands, no notify at all.

 In the log files I indeed do not see any notification being
 sent from the server, that's right also.

 Maybe it's best if you sent us the small executable that
 shows the problem. Please send exact instructions how to
 reproduce. And, I don't have Visual Studio handily
 available, so something executable on a standard W2k8 or
 Win7 (or XP) would be very helpful.

 With best regards,

 Volker Lendecke

 --
 SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
 phone: +49-551-37-0, fax: +49-551-37-9
 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] IIS Change Notifications

2011-01-09 Thread Gareth Evans
Sorry; exact problems to reproduce

1) Create a guest only share
1a) Make sure the windows box can access the share just using explorer
2) Start ChangeNotifyTestingConsole.exe \\path\to\share -r
2a ChangeNotifyTestingConsole will connect to the share and register for
change notifications, drop the -r if you don't want recursive)
3) Make file system changes (e.g. delete/create/modify/move/copy) on the
path you're watching (either over ssh or on the console of the server)
4) ChangeNotifyTestingConsole.exe will log any notify messages it receives;
Delete/Create logs stuff
Modify/Move/Copy isn't logging anything

I can probably upload a copy of the ubuntu 10.10 / samba 3.5.6 VM if you
need, but I expect you already have a working copy of 3.5.6

Gareth

On Mon, Jan 10, 2011 at 8:22 AM, Gareth Evans agr...@gmail.com wrote:

 Hi There

 Good point, sorry - windows7 - windows7 will definitely negotiate SMB2;
 and it's possible the change notifications work differently there.

 I have tested this problem using an XP and 2003 machine as the host machine
 (which would be SMB1) previously, but those weren't available last night
 when I captured the trace. I could capture a wireshark trace today using XP
 as the source if you need.

 I have put a copy of the application I used for testing up here:
 http://agrath.mole.feralhosting.com/ChangeNotifyTesting.zip
 Source code is included (so you can see how it works), but also a compiled
 binary in this path:
 ChangeNotifyTestingConsole\ChangeNotifyTestingConsole\bin\Debug
 It's a very slightly modified copy of the FileSystemWatcher sample
 application that you can get from MSDN (I added the recursive flag)

 You'll also see the Red/Green/Blue/Test websites I'm referring to.
 These are in ChangeNotifyTesting/[red|green|blue|test]
 If you wanted to test with those, with an IIS site pointing to the /Test
 folder, you'd then copy Red/Bin/* to Test/Bin/ (or Green, Blue)
 If you point IIS at a UNC path that isn't local, you'll have to tell
 ASP.Net to trust the path using Caspol which is in the .net framework folder
 in windows\microsoft .net\framework\v4.?\
 Example here:
 http://blogs.msdn.com/b/shawnfa/archive/2004/12/30/344554.aspx
 You don't need to do this for the .net application that just listens for
 and logs change notification messages.

 To run that program, there's two arguments; a path, which shouldn't contain
 spaces and optionally -r

 e.g. ChangeNotifyTestingConsole.exe \\smbtest\mwh-webstore\sites\ -r

 The log files should show inotify stuff in there (just checked
 kernelnotifyon.log) - that is, the notification was registered and the
 change detected; but this never reaches the listening application (at least
 not on a copy/move/modify (edit contents) operation)

 Hopefully it's just the windows-as-source capture that isn't useful here.

 Gareth

 On Mon, Jan 10, 2011 at 6:37 AM, Volker Lendecke 
 volker.lende...@sernet.de wrote:

 On Sun, Jan 09, 2011 at 11:22:09PM +1300, Gareth Evans wrote:
  Thanks for your quick responses so far;
 
  I've captured the following:
  Log  Capture from kernel notify off, 3.5.6; (hires timestamp, normal
  daemon, log level 10)
  Log  Capture from kernel notify on, 3.5.6, (hires timestamp, normal
 daemon,
  log level 10)
  Wireshark Capture from using windows 7 machine as fileshare (no log
 since
  you can't get one from windows)
 
  All captureslogs were from IIS7 as the SMB client, but there's probably
 a
  few standard windows refreshes and the like there, since I was starting
 and
  stopping the samba server, I had to refresh the explorer windows a few
 times
  to ensure the smbd had started before testing IIS;

 Unfortunately the network traces only contain SMB2 traffic.
 I can understand that against Windows as a server, but even
 that only contains READ commands, no notify at all.

 In the log files I indeed do not see any notification being
 sent from the server, that's right also.

 Maybe it's best if you sent us the small executable that
 shows the problem. Please send exact instructions how to
 reproduce. And, I don't have Visual Studio handily
 available, so something executable on a standard W2k8 or
 Win7 (or XP) would be very helpful.

 With best regards,

 Volker Lendecke

 --
 SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
 phone: +49-551-37-0, fax: +49-551-37-9
 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] LDAP Account Manager 3.3.0.RC1 released

2011-01-09 Thread Roland Gruber
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


LDAP Account Manager (LAM) 3.3.0.RC1 - January 9th, 2011


LAM is a web frontend for managing accounts stored in an LDAP directory.


Announcement:
- -

This release includes lots of improvements regarding usability. There is
also a new module to manage mailboxes on an IMAP server.

This is a test release. Please do not install it in your production
environment. Please report any bugs until 2011-01-21.


Full changelog:

http://www.ldap-account-manager.org/lamcms/changelog


Features:
- -

* management of various account types
 * Unix
 * Samba 3
 * Kolab 2
 * Asterisk
 * phpGroupwWare
 * Zarafa
 * DHCP
 * SSH keys
* profiles for account creation
* account creation via file upload
* automatic creation/deletion of home directories
* setting quotas
* PDF output for all accounts
* editor for organizational units
* schema browser
* tree view
* multiple configuration files
* multi-language support: Catalan, Chinese (Traditional + Simplified),
  Czech, Dutch, English, French, German, Hungarian, Italian, Japanese,
  Polish, Portuguese, Russian and Spanish
* support for LDAP+SSL/TLS


Availability:
- -

This software is available under the GNU General Public License V2.0.

You can get the newest version at http://www.ldap-account-manager.org.

File formats: DEB, RPM, tar.gz

There is also a FreeBSD port.

Debian users may use the packages in unstable.


Demo installation:
- --

You can try our demo installation online.

http://www.ldap-account-manager.org/lamcms/liveDemo


Support:
- 

If you find a bug please file a bug report. For questions or
implementing new features please use the mailinglist and feature request
tracker at our homepage http://www.ldap-account-manager.org.



Authors  Copyright:
- 

Copyright (C) 2003 - 2011:
Michael Duergner mich...@duergner.com
Roland Gruber p...@rolandgruber.de
Tilo Lutz tilol...@gmx.de


LAM is published under the GNU General Public License.
The complete list of licenses can be found in the copyright file.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk0qLWIACgkQq/ywNCsrGZ6llgCcDg4Bi2z4gUHMOIDPNv5lbCKq
vtgAn1ssT+zlJ0bCUNspuUDhpe+ToMCd
=QADB
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] When is a machine SID created?

2011-01-09 Thread Taso Hatzi

 First, you have to copy PDC's SID to the BDC with 'net getsid', or
 some other ways.


I have done that. The domain SID is present in the secrets.tdb file
of both PDC and the BDC. It's just the BDC that has no machine SID.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] When is a machine SID created?

2011-01-09 Thread Gaiseric Vandal
You should be able to use the net command to set the machine sid as well-
on the DC's, the machine sid should be the same as the domain sid.

-Original Message-
From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
On Behalf Of Taso Hatzi
Sent: Sunday, January 09, 2011 6:51 PM
To: samba@lists.samba.org
Subject: Re: [Samba] When is a machine SID created?


 First, you have to copy PDC's SID to the BDC with 'net getsid', or
 some other ways.


I have done that. The domain SID is present in the secrets.tdb file
of both PDC and the BDC. It's just the BDC that has no machine SID.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] IIS Change Notifications

2011-01-09 Thread Gareth Evans
Good afternoon all,

I'm a web developer (c#) who also manages a small hosting environment.
Roughly, our configuration is:

Two IIS7 (Windows Server 2008 Web) servers which share configuration data
and site files from a SMB share located on a ubuntu server.

The ubuntu server is currently running 3.0.28a which is quite old, but read
on.

We've been having a problem with the change notifications from the ubuntu
filesystem reaching IIS.

The symptoms are that if a file is changed on disk (such as a binary/dll or
web.config or similar) are changed, IIS does not flush the appdomain and
reload these files, it continues on using the old files until either

1) an app pool reset is performed (typically bad for performance and not
something you should do all the time)
2) samba is restarted (definitely not recommended)
3) the file that was changed is deleted and then added again

My test case is a simple .net based application which uses code to set the
colour of a box.
I compiled three different binaries, one for red/green/blue.

I can then switch the binaries out with a simple cp
(e.g. cp red/bin/* test/bin - where test is the wwwroot for my test site)

When I update the binary, IIS doesn't reload it.

I have tested many different configurations.

IIS7 accessing XP file share - works
IIS7 accessing Win7 file share - works
IIS7 accessing 2003 file share - works
IIS7 accessing 2008 file share - works
IIS7 accessing ubuntu samba 3.0.28a share - doesn't work
IIS7 accessing ubuntu samba 4.?? beta share - doesn't work
IIS7 accessing ubuntu samba 4 running SMB2 experimental - doesn't work
IIS7 accessing ubuntu 3.5.6 (built from source) share - doesn't work

Basically, if the share provider is windows (SMB1 or SMB2), it works - if
it's linux/samba it doesn't.

I've done a lot of reading on this topic, and I'm pretty sure that IIS uses
a different change notification mechanism to that of your standard file
browser window; that is, if I have a explorer window looking at the share, I
see the modify date change immediately, however IIS doesn't realise and load
the new binary.

I've done some debugging and at one point I saw messages from inside
notify.c; Client only wanted %d bytes, trying to marshall %d bytes\n; which
results in notify_marshall_changes returning false.

As far as I can tell, this bug has existed for quite some time and probably
hasn't been diagnosed correctly.

I tested explicitly today using a windows 7 desktop (IIS7 installed from
programs and features) with both a local folder (to first confirm that my
binaries would work as expected then a freshly installed 10.10 ubuntu with
samba 3.5.4 (from launchpad/aptitude) followed by a built from source 3.5.6.

I tested with 3.5.6 to confirm it wasn't the 4 byte boundry bug recently
fixed.

The ubuntu server is running on a VM locally.

IIS7 works much smoother with UNC paths than IIS6, except you have to use
caspol to trust the UNC path if you want to execute asp.net binaries.

I'm not very familiar with C code, especially on linux environments so i'm
not sure how to test/provide the information you need to diagnose this bug.

I am happy to file a bug report, but without a working IIS7 installation, it
will be very hard to replicate.
It's not reasonable to expect the samba developers to install and test an
IIS7 install so I would be happy to work with someone on the problem.

I can verify the problem in the most simple test case, and I have tested a
reasonable subset of samba installs.

My thoughts are it's something to do with watching a folder of files, and
this not propogating correctly - as in my testing the notifications reached
samba and appeared to be sent to windows, just IIS didn't respond to them.
This thread from 2003 describes a very similar issue with classic ASP (the
precursor to .net)
http://www.mail-archive.com/samba@lists.samba.org/msg12479.html

This issue would be great to fix, as it's pretty much the only stumbling
block in using SMB as a file share for IIS, we've been doing this for about
a year now - and it works perfectly once you set it up - with the exception
of the change notifications.

We've been working around it by recycling application pools but as mentioned
above, this isn't really a long-term solution and it means 3rd party
developers need way more access to the hosting environment (to recycle pools
etc) than I consider practical.

Appreciate any advice/help - and happy to provide more debugging information
when required,

Gareth Evans
Sniper Systems Ltd
New Zealand
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] RES: ntlm_auth Version 3.2.5 [SOLVED]

2011-01-09 Thread rafael.simao
Volker,

I can not tell how much I appreciate your help.
It Worked ! And worked very well.
Now, i can see my all characters passing by Squid through Samba.

Sorry for my broken English, I`m still learning it.

I hope it can helps someone else, because I lost several hours ... until i 
decided to activate debug and so many coffe :D

Best Regards,

Rafael Simão



-Mensagem original-
De: Volker Lendecke [mailto:volker.lende...@sernet.de] 
Enviada em: quinta-feira, 6 de janeiro de 2011 14:49
Para: Rafael Simão (rafael.simao)
Cc: samba@lists.samba.org
Assunto: Re: [Samba] ntlm_auth Version 3.2.5

On Wed, Jan 05, 2011 at 01:09:07PM -0200, Rafael Simão (rafael.simao) wrote:
 Im trying to integrate Samba + AD + Squid.
 Almost everything is ok, except that I got a problem with lib ntlm_auth 
 with respect with last characters.
 
 ie.
 libsmb/ntlmssp.c:ntlmssp_server_auth(745)
   Got user=[ADMINISTRATO] domain=[INTRANE] workstation=[AVELETRO] len1=24 
 len2=24
 
 But, at Windows, i`ve puted administrator and intranet.
 Last characters are gone, so authentication is not possible.
 
 ntlm_auth Version 3.2.5

Can you check with 3.5.6? 3.2.5 is certainly fixable, but to
do so you would need to contact someone doing paid support
from http://www.samba.org/samba/support

With best regards,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] suitable samba version for windows 7

2011-01-09 Thread vishesh kumar
Thanks John for reply.

 Now i am trying to install samba-3.5.6 from rpm by downloading it
from http://enterprisesamba.com/index.php?id=54 , But it shows error '
samba3-client is needed by samba3-3.5.6-43.el5.i386' while i already
installed samba3-5.6 client' . What may be the issue ?,please guide me
Thanks


On 1/9/11, John Drescher dresche...@gmail.com wrote:
  I have samba+ldap setup,act as Domain server on Rhel 5.0 with samba
 version 3.0.28.  Windows 7 machines are not joining this domain. I think
 i need to upgrade samba. What samba version is stable with windows 7?

 I would say 3.5.6 is the best but you can get away with using 3.3.X
 versions.

 John



-- 
http://linuxmantra.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[SCM] Samba Shared Repository - branch master updated

2011-01-09 Thread Volker Lendecke
The branch, master has been updated
   via  b57721f s3: Convert enc_blob_send_receive to cli_trans()
   via  3274d80 s3: Fix two incompatible pointer type warnings on Solaris
  from  bdff459 s3: Fix some warnings in the zfsacl module

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit b57721faafad749f01df22bf555841aac158fa71
Author: Volker Lendecke v...@samba.org
Date:   Sun Jan 9 10:53:04 2011 +0100

s3: Convert enc_blob_send_receive to cli_trans()

Autobuild-User: Volker Lendecke vlen...@samba.org
Autobuild-Date: Sun Jan  9 11:40:04 CET 2011 on sn-devel-104

commit 3274d80ffd19ccb5e5783f7577909121d8111854
Author: Volker Lendecke v...@samba.org
Date:   Sun Jan 9 10:20:29 2011 +0100

s3: Fix two incompatible pointer type warnings on Solaris

---

Summary of changes:
 source3/libsmb/clifsinfo.c  |   55 --
 source3/libsmb/unexpected.c |4 +-
 2 files changed, 23 insertions(+), 36 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/libsmb/clifsinfo.c b/source3/libsmb/clifsinfo.c
index 69e6546..a5f58bb 100644
--- a/source3/libsmb/clifsinfo.c
+++ b/source3/libsmb/clifsinfo.c
@@ -519,48 +519,35 @@ NTSTATUS cli_get_posix_fs_info(struct cli_state *cli,
 
 static NTSTATUS enc_blob_send_receive(struct cli_state *cli, DATA_BLOB *in, 
DATA_BLOB *out, DATA_BLOB *param_out)
 {
-   uint16 setup;
-   char param[4];
-   char *rparam=NULL, *rdata=NULL;
-   unsigned int rparam_count=0, rdata_count=0;
-   NTSTATUS status = NT_STATUS_OK;
-
-   setup = TRANSACT2_SETFSINFO;
+   uint16_t setup[1];
+   uint8_t param[4];
+   uint8_t *rparam=NULL, *rdata=NULL;
+   uint32_t num_rparam, num_rdata;
+   NTSTATUS status;
 
+   SSVAL(setup+0, 0, TRANSACT2_SETFSINFO);
SSVAL(param,0,0);
SSVAL(param,2,SMB_REQUEST_TRANSPORT_ENCRYPTION);
 
-   if (!cli_send_trans(cli, SMBtrans2,
-   NULL,
-   0, 0,
-   setup, 1, 0,
-   param, 4, 0,
-   (char *)in-data, in-length, CLI_BUFFER_SIZE)) 
{
-   status = cli_nt_error(cli);
-   goto out;
-   }
-
-   if (!cli_receive_trans(cli, SMBtrans2,
-   rparam, rparam_count,
-   rdata, rdata_count)) {
-   status = cli_nt_error(cli);
-   goto out;
-   }
+   status = cli_trans(talloc_tos(), cli, SMBtrans2, NULL, 0, 0, 0,
+  setup, 1, 0,
+  param, 4, 2,
+  (uint8_t *)in-data, in-length, CLI_BUFFER_SIZE,
+  NULL,  /* recv_flags */
+  NULL, 0, NULL, /* rsetup */
+  rparam, 0, num_rparam,
+  rdata, 0, num_rdata);
 
-   if (cli_is_error(cli)) {
-   status = cli_nt_error(cli);
-   if (!NT_STATUS_EQUAL(status, 
NT_STATUS_MORE_PROCESSING_REQUIRED)) {
-   goto out;
-   }
+   if (!NT_STATUS_IS_OK(status) 
+   !NT_STATUS_EQUAL(status, NT_STATUS_MORE_PROCESSING_REQUIRED)) {
+   return status;
}
 
-   *out = data_blob(rdata, rdata_count);
-   *param_out = data_blob(rparam, rparam_count);
-
-  out:
+   *out = data_blob(rdata, num_rdata);
+   *param_out = data_blob(rparam, num_rparam);
 
-   SAFE_FREE(rparam);
-   SAFE_FREE(rdata);
+   TALLOC_FREE(rparam);
+   TALLOC_FREE(rdata);
return status;
 }
 
diff --git a/source3/libsmb/unexpected.c b/source3/libsmb/unexpected.c
index 12832f6..faee559 100644
--- a/source3/libsmb/unexpected.c
+++ b/source3/libsmb/unexpected.c
@@ -390,7 +390,7 @@ static void nb_packet_client_send(struct nb_packet_client 
*client,
state-hdr.type = p-packet_type;
state-hdr.len = build_packet(state-buf, sizeof(state-buf), p);
 
-   state-iov[0].iov_base = state-hdr;
+   state-iov[0].iov_base = (char *)state-hdr;
state-iov[0].iov_len = sizeof(state-hdr);
state-iov[1].iov_base = state-buf;
state-iov[1].iov_len = state-hdr.len;
@@ -540,7 +540,7 @@ static void nb_packet_reader_connected(struct tevent_req 
*subreq)
return;
}
 
-   state-iov[0].iov_base = state-query;
+   state-iov[0].iov_base = (char *)state-query;
state-iov[0].iov_len = sizeof(state-query);
 
if (state-mailslot_name != NULL) {


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2011-01-09 Thread Stefan Metzmacher
The branch, master has been updated
   via  504be0a s4: make pipes with underscore works also
  from  b57721f s3: Convert enc_blob_send_receive to cli_trans()

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 504be0ac548bf422e303aca645aeaad12b6de6df
Author: Matthieu Patou m...@matws.net
Date:   Tue Sep 28 04:40:38 2010 +0400

s4: make pipes with underscore works also

Signed-off-by: Stefan Metzmacher me...@samba.org

Autobuild-User: Stefan Metzmacher me...@samba.org
Autobuild-Date: Sun Jan  9 15:47:01 CET 2011 on sn-devel-104

---

Summary of changes:
 source4/ntvfs/ipc/vfs_ipc.c |4 +++-
 1 files changed, 3 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/ntvfs/ipc/vfs_ipc.c b/source4/ntvfs/ipc/vfs_ipc.c
index 4f14398..972de27 100644
--- a/source4/ntvfs/ipc/vfs_ipc.c
+++ b/source4/ntvfs/ipc/vfs_ipc.c
@@ -228,7 +228,9 @@ static void ipc_open_done(struct tevent_req *subreq);
 static NTSTATUS validate_pipename(const char *name)
 {
while (*name) {
-   if (!isalnum(*name)) return NT_STATUS_INVALID_PARAMETER;
+   if (!isalnum(*name)  *name != '_') {
+   return NT_STATUS_INVALID_PARAMETER;
+   }
name++;
}
return NT_STATUS_OK;


-- 
Samba Shared Repository