[Samba] Samba4, bind9

2011-05-30 Thread csirt 
Hello,
i am testing samba4 for production readiness in our LAN. Host is
Ubuntu 10.04.02 LTS.
Samba version is 4.0.0alpha16-GIT-9c3e538, named is bind
9.7.0.dfsg.P1-1ubuntu0.1. I also tested it with self-compiled
bind-9.7.4b1. I used the Samba4/HOWTO
http://wiki.samba.org/index.php/Samba4/HOWTO
I smoothly joined my AD with a Win7 Client. I am able to add users and
group-policies with the MS AD-tools from the Win 7 client.

Following are my questions:
1. I do not see, neither the server "SAMBA4", nor its share [test] in
the network browse list, but i can connect to, and use it.
2. I get errors regarding dnsupdate in log.samba. Like this:

../source4/dsdb/dns/dns_update.c:252: Failed DNS update - NT_STATUS_IO_TIMEOUT
[2011/05/30 10:02:27,  0]
../source4/dsdb/dns/dns_update.c:252(dnsupdate_nameupdate_done)

When i start dnsupdate it tells the following:

./samba_dnsupdate --verbose
IPs: ['192.168.0.243']
Looking for DNS entry A mydomain.local 192.168.0.243 as mydomain.local.
Failed to find DNS entry A mydomain.local 192.168.0.243
Looking for DNS entry A samba4.mydomain.local 192.168.0.243 as
samba4.mydomain.local.
Failed to find DNS entry A samba4.mydomain.local 192.168.0.243
Looking for DNS entry CNAME
a637dd2c-5c63-4b6f-9332-19aade86c91d._msdcs.mydomain.local
samba4.mydomain.local as
a637dd2c-5c63-4b6f-9332-19aade86c91d._msdcs.mydomain.local.
Failed to find DNS entry CNAME
a637dd2c-5c63-4b6f-9332-19aade86c91d._msdcs.mydomain.local
samba4.mydomain.local
Looking for DNS entry SRV
_kerberos._tcp.default-first-site-name._sites.dc._msdcs.mydomain.local
samba4.mydomain.local 88 as
_kerberos._tcp.default-first-site-name._sites.dc._msdcs.mydomain.local.
Failed to find DNS entry SRV
_kerberos._tcp.default-first-site-name._sites.dc._msdcs.mydomain.local
samba4.mydomain.local 88
Looking for DNS entry SRV
_ldap._tcp.default-first-site-name._sites.dc._msdcs.mydomain.local
samba4.mydomain.local 389 as
_ldap._tcp.default-first-site-name._sites.dc._msdcs.mydomain.local.
Failed to find DNS entry SRV
_ldap._tcp.default-first-site-name._sites.dc._msdcs.mydomain.local
samba4.mydomain.local 389
Looking for DNS entry SRV _kerberos._tcp.dc._msdcs.mydomain.local
samba4.mydomain.local 88 as _kerberos._tcp.dc._msdcs.mydomain.local.
Failed to find DNS entry SRV _kerberos._tcp.dc._msdcs.mydomain.local
samba4.mydomain.local 88
Looking for DNS entry SRV _ldap._tcp.dc._msdcs.mydomain.local
samba4.mydomain.local 389 as _ldap._tcp.dc._msdcs.mydomain.local.
Failed to find DNS entry SRV _ldap._tcp.dc._msdcs.mydomain.local
samba4.mydomain.local 389
Looking for DNS entry SRV
_ldap._tcp.d212fde4-fb7e-4d94-a6ef-b6a292f518cb.domains._msdcs.mydomain.local
samba4.mydomain.local 389 as
_ldap._tcp.d212fde4-fb7e-4d94-a6ef-b6a292f518cb.domains._msdcs.mydomain.local.
Failed to find DNS entry SRV
_ldap._tcp.d212fde4-fb7e-4d94-a6ef-b6a292f518cb.domains._msdcs.mydomain.local
samba4.mydomain.local 389
Looking for DNS entry SRV
_ldap._tcp.default-first-site-name._sites.gc._msdcs.mydomain.local
samba4.mydomain.local 3268 as
_ldap._tcp.default-first-site-name._sites.gc._msdcs.mydomain.local.


Strangely enough, when i ask with "host" i get correct answers. Like
mentioned in the howto .
Are these only some type of cosmetic errors, or will a run into serous
problems if i move further on?

regards


#smb.conf:
# Global parameters
[global]
server role = domain controller
workgroup = SAMDOM
realm = mydomain.local
netbios name = SAMBA4

[netlogon]
path = /usr/local/samba/var/locks/sysvol/mydomain.local/scripts
read only = No

[sysvol]
path = /usr/local/samba/var/locks/sysvol
read only = No

[profiles]
path = /usr/local/samba/var/profiles
read only = no

[test]
path = /tmp
read only = no


#named.conf:
include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones";
zone "0.168.192.in-addr.arpa" {
type master;
file "/var/lib/bind/192.168.0.rev";
};


#named.conf.local:
include "/usr/local/samba/private/named.conf";


#private/named.conf:
zone "mydomain.local." IN {
type master;
update-policy {
grant MYDOMAIN.LOCAL ms-self * A ;
grant SAMBA4$@MYDOMAIN.LOCAL wildcard * A  SRV CNAME;
grant Administrator@MYDONAIN.LOCAL wildcard * A  SRV CNAME;
};
file "/usr/local/samba/private/dns/mydomain.local.zone";
check-names ignore;
};
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Samba and non-ASCII host names

2011-05-30 Thread Artyom Smirnov 
Hi all.

I work in LAN with bunch of windows 7 computers with Russian
localization which has bad habit to put international symbols
(cyrillic symbols in my case) into host name upon installing. I can't
force people to change host names on their computers so I trying to
manage myself. I found some options to manipulate character conversion
and added to config next lines:

dos charset = CP866
unix charset = UTF-8
display charset = UTF-8

It really affect on host names but I still see messed encodings. I
experimented with other encodings in dos charset option without luck.

I tried it on Ubuntu 11.04 with Samba 3.5.8~dfsg-1ubuntu2.2 and Mac OS
X with samba 3.0.28a-apple. I'm sure it not vanilla samba in both
cases but think it generic problem.

What I'm missing?

Thanks.
-- 
Artyom Smirnov
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Join W2008 R2 64bit to samba 3.5.8

2011-05-30 Thread Daniel Müller 
Just a short question:

How can a W2008 R2 64 bit Server be joined to samba 3.5.8 Domain?

---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Join W2008 R2 64bit to samba 3.5.8

2011-05-30 Thread Martin Hochreiter 

Am 2011-05-30 15:06, schrieb Daniel Müller:

Just a short question:

How can a W2008 R2 64 bit Server be joined to samba 3.5.8 Domain?

---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---



Hi Daniel!

The same way like a windows 7 client machine -
you have to set the necessary registry keys and then you
are able to join the machine ... unless you don't intend to let the
w2008 play domain controller in a NT4 style Samba domain ...

regards
martin

keys -> http://wiki.samba.org/index.php/Windows7
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Confusion berween file and direcory

2011-05-30 Thread Felix 
On Fri, 27 May 2011 00:50:36 +0900, TAKAHASHI Motonobu wrote:

> From: Felix 
> Date: Thu, 26 May 2011 14:28:07 + (UTC)
> 
>> I have some trouble with a samba 3.5.8 server when setting directory
>> attributes. On a windows XP I execute a small peace of code that calls
>> 'SetFileAttributes' for the directory 'test-dir' located on the samba
>> server. Using log level 10 I find this:
> 
> (snip)
> 
>> [2011/05/26 15:27:02.145766, 10] smbd/open.c:170(fd_open)
>>   fd_open: name test-dir, flags = 01 mode = 0764, fd = -1. Is a
>>   directory
>> [2011/05/26 15:27:02.145779,  3] smbd/open.c:461(open_file)
>>   Error opening file test-dir (NT_STATUS_FILE_IS_A_DIRECTORY)
>> (local_flags=1) (flags=1)
>> 
>> As I said, 'test-dir' is a directory. If my understand of the log is
>> correct samba confuses a directory with a file? Why would this happen?
> 
> The patch attached at
>   Newly create files are always failed with
>   NT_STATUS_FILE_IS_A_DIRECTORY
>   https://bugzilla.samba.org/show_bug.cgi?id=8042
> maybe solve you problem??
> 
> ---
> TAKAHASHI Motonobu 

This patch deals with problems during file creation. I do not have a 
problems creating files or directories. The problem occurs when trying to 
modify the attributes of a directory.

Felix

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba and non-ASCII host names

2011-05-30 Thread TAKAHASHI Motonobu 
From: Artyom Smirnov 
Date: Mon, 30 May 2011 14:48:36 +0400

> I work in LAN with bunch of windows 7 computers with Russian
> localization which has bad habit to put international symbols
> (cyrillic symbols in my case) into host name upon installing. I can't
> force people to change host names on their computers so I trying to
> manage myself. I found some options to manipulate character conversion
> and added to config next lines:
> 
> dos charset = CP866
> unix charset = UTF-8
> display charset = UTF-8
> 
> It really affect on host names but I still see messed encodings. I
> experimented with other encodings in dos charset option without luck.
> 
> I tried it on Ubuntu 11.04 with Samba 3.5.8~dfsg-1ubuntu2.2 and Mac OS
> X with samba 3.0.28a-apple. I'm sure it not vanilla samba in both
> cases but think it generic problem.
> 
> What I'm missing?

I examined non-ASCII hostnames several years ago around Samba 3.0.7
and realized that Samba is not intended to work with such hostnames.


It may be able to work in some cases but is not explicitly supported,
I think.

---
TAKAHASHI Motonobu 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Quota Problem with Samba 3.5.8

2011-05-30 Thread Sven Geggus 
Hello,

for some strange reason I can not get quota to work with Samba 3.5.8.

The quoata system itself works fine (using "repquota /mountpoint") and via
NFS, but Samba does not report the correct free space (df command in
smbclient).

Instead the real free space on the disk volume is shown to smb clients
(tested from Windows and smbclient).

The quotasystem in use is the new quota format on an ext4 filesystem.

Using the highest loglevel for quota I get the following:
[2011/05/30 18:22:02.624179,  3] lib/sysquotas.c:453(sys_get_quota)
  sys_get_vfs_quota() failed for mntpath[/storage] bdev[/dev/drbd0] qtype[2] 
id[15005]: Operation not permitted
[2011/05/30 18:22:02.624569,  3] lib/sysquotas.c:453(sys_get_quota)
  sys_get_vfs_quota() failed for mntpath[/storage] bdev[/dev/drbd0] qtype[4] 
id[1800]: Operation not permitted


and here is what stracing the samba daemon when doing "du" in smbclient shows:

...
quotactl(Q_GETQUOTA|USRQUOTA, "/dev/drbd0", 15005, 0xbfb26cf8) = -1 ESRCH (No 
such process)
quotactl(Q_GETQUOTA|USRQUOTA, "/dev/drbd0", 15005, 0xbfb26d18) = -1 ESRCH (No 
such process)
quotactl(Q_V1_GETQUOTA|USRQUOTA, "/dev/drbd0", 15005, 0xbfb26d1c) = -1 EPERM 
(Operation not permitted)
...
 
However stracing repquota does open /storage/aquota.user which smbclient
does not seem to try.
 
Any Idea what could be wrong here?
 
For me it does somewhat look like smbd is trying to use the wrong quota
system here which of course fails.
 
The system in use is Debian oldstable with a custom backport of samba from
Debian unstable (3.5.8) running on a vanilla Linuxkernel (v.2.6.36.2).
 
Regards
 
Sven
 
-- 
"If you don't make lower-resolution mapping data publicly
available, there will be people with their cars and GPS
devices, driving around with their laptops" (Tim Berners-Lee)
/me is giggls@ircnet, http://sven.gegg.us/ on the Web
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba