[Samba] Fwd: getent group fails - fixed

2011-06-23 Thread Dermot
Found it.

It turns out that the config file for libnss-ldap is
/etc/libnss-ldap.conf on my distro (Debian). So NSS was ignoring the
config that I had been in /etc/ldap/ldap.conf and taking it from
/etc/libnss-ldap.conf. The former had this nss_base_group
ou=Groups,dc=example,dc=co,dc=uk?sub and the latter this
nss_base_group ou=group,dc=example,dc=co,dc=uk?one. Once I edited
group to Groups, it started working.


Package: libnss-ldap
Priority: extra
Section: net
Installed-Size: 304
Maintainer: Richard A Nelson (Rick) ...
Architecture: amd64
Version: 261-2.1
Depends: libc6 (= 2.7-1), libcomerr2 (= 1.01), libkrb53 (=
1.6.dfsg.2), libldap-2.4-2 (= 2.4.7), libsasl2-2, debconf |
debconf-2.0
Recommends: nscd, libpam-ldap
...
Hope that saves someone the (huge) amount of time it's taken me to
figure out where this problem was.
Thanks,
Dermot.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Fwd: getent group fails - fixed

2011-06-23 Thread aly . khimji
Nice find! good work

Aly

Sent from my BlackBerry device on the Rogers Wireless Network

-Original Message-
From: Dermot paik...@googlemail.com
Sender: samba-boun...@lists.samba.org
Date: Thu, 23 Jun 2011 13:00:55 
To: samba@lists.samba.org
Subject: [Samba] Fwd: getent group fails - fixed

Found it.

It turns out that the config file for libnss-ldap is
/etc/libnss-ldap.conf on my distro (Debian). So NSS was ignoring the
config that I had been in /etc/ldap/ldap.conf and taking it from
/etc/libnss-ldap.conf. The former had this nss_base_group
ou=Groups,dc=example,dc=co,dc=uk?sub and the latter this
nss_base_group ou=group,dc=example,dc=co,dc=uk?one. Once I edited
group to Groups, it started working.


Package: libnss-ldap
Priority: extra
Section: net
Installed-Size: 304
Maintainer: Richard A Nelson (Rick) ...
Architecture: amd64
Version: 261-2.1
Depends: libc6 (= 2.7-1), libcomerr2 (= 1.01), libkrb53 (=
1.6.dfsg.2), libldap-2.4-2 (= 2.4.7), libsasl2-2, debconf |
debconf-2.0
Recommends: nscd, libpam-ldap
...
Hope that saves someone the (huge) amount of time it's taken me to
figure out where this problem was.
Thanks,
Dermot.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Fwd: getent group fails - fixed

2011-06-23 Thread Bruce Richardson
On Thu, Jun 23, 2011 at 01:00:55PM +0100, Dermot wrote:
 Found it.
 
 It turns out that the config file for libnss-ldap is
 /etc/libnss-ldap.conf on my distro (Debian). So NSS was ignoring the
 config that I had been in /etc/ldap/ldap.conf and taking it from
 /etc/libnss-ldap.conf.

As far as I'm aware, most of the distributions use a separate
configuration file for libnss-ldap, allowing /etc/ldap/ldap.conf to be
used for the generic configuration of user ldap searches (as it is
intended) and not have those constrained by the very specific needs of
nsswitch.  This separation is more than just a convenience.  At my
workplace, I have an LDAP directory as the backing for nsswitch and as
the passdb/idmap backend for Samba.  Samba's ldap searches are affected
by anything that goes into /etc/ldap/ldap.conf, which would cause
problems if the nsswitch-specific settings had to be stored there.

-- 
Bruce

Vajazzle - giving new meaning to the phrase I'll scratch your eyes
out.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Fwd: getent group fails - fixed

2011-06-23 Thread Dermot
On 23 June 2011 13:14, Bruce Richardson  wrote:
 On Thu, Jun 23, 2011 at 01:00:55PM +0100, Dermot wrote:
 Found it.

 It turns out that the config file for libnss-ldap is
 /etc/libnss-ldap.conf on my distro (Debian). So NSS was ignoring the
 config that I had been in /etc/ldap/ldap.conf and taking it from
 /etc/libnss-ldap.conf.

  Samba's ldap searches are affected
 by anything that goes into /etc/ldap/ldap.conf, which would cause
 problems if the nsswitch-specific settings had to be stored there.

Perhaps I am not understanding you correctly because that runs counter
my experience. The settings in my /etc/ldap/ldap.conf were correct
whereas the ones in /etc/libnss-ldap.conf were not. It was the search
filters from libnss-ldap.conf that were being used when I did `getent
group`. I think your telling me that getent is tied to the nss
framework so would use that config because that's what I told
nsswitch.conf to do. I would have thought, but I am no expert, that
samba would have used the config from smb.conf and that ldapsearch
(and anything else that didn't have hooks else where) would use
/etc/ldap/ldap.conf.

# /etc/nsswitch.conf
passwd: files ldap
group:  files ldap
shadow: files ldap

Your workplace configuration sounds like what I am trying to deploy at mine.
I'll be back. Thanks,
Dermot
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba process throttled back?

2011-06-23 Thread Lang, Rich
Well, it just gets curiouser and curiouser.

I downloaded, built and installed the latest stable version of Samba (i.e. 
3.5.9) on my inactive cluster member which is running RedHat ES 5.6.  In case 
I didn't show this before, here's the output of `uname -a`:
Linux mustang1 2.6.18-238.9.1.el5 #1 SMP Fri Mar 18 12:42:04 EDT 2011 i686 i686 
i386 GNU/Linux
Anyway, I create a share and copied the troublesome file to that share and 
opened it using the VB application that showed such poor performance.  It 
opened the file and processed it as quickly as if it were on my local hard 
drive.  This is more like it.  This is back to how the share used to respond.  
When I navigated back to the original copy of the file, the performance went to 
pieces again.
Same file, different versions of Samba, different performance.  Looks like I 
fixed it, although I don't know exactly what was wrong.
So, I wanted to take a wireshark snapshot of the poor performance to see if 
the client was negotiating the buffer size down over the wire.  In the 
meantime, the original file and its folder were moved from the Samba share to a 
M$ share on another server.  Oh well - I copied the file back to the Samba 
share.  Guess what?  The performance is great - back to where it was before the 
problem started.
So - it's not the version of Samba.  It looks like this is an inode corruption 
on the disk, although I've run fsck a number of times on the disk and it always 
comes up clean.
H...there might be some tools that I need to use to keep my shared disk 
clean.  We're running the cluster through a pair of HP SmartArray 642 SCSI 
interfaces both connected to an MSA 500 G2 disk array with redundant 
controllers.  There are four logical disks defined, each of which is defined as 
part of a cluster service so it can swing between cluster members in case of a 
failure.  Does anyone use this kind of disk array in a shared configuration 
like this?

Richard G. Lang
Sr. Software Engineer
la...@specsensors.commailto:la...@specsensors.com
(330) 659-3312

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Fwd: getent group fails - fixed

2011-06-23 Thread Bruce Richardson
On Thu, Jun 23, 2011 at 02:20:56PM +0100, Dermot wrote:
 I would have thought, but I am no expert, that
 samba would have used the config from smb.conf and that ldapsearch
 (and anything else that didn't have hooks else where) would use
 /etc/ldap/ldap.conf.

In smb.conf you specify those things which have meaning only to samba.
But the non-samba-specific bits are configured in /etc/ldap/ldap.conf.
For example, if you are using ldaps or ldap+tls (which you really
should), how are you going to tell samba where to find the CA cert that
authenticated the certs of your ldap servers?  Answer: you put the
correct ssl-relevant config into /etc/ldap/ldap.conf (or
/etc/openldap/ldap.conf on RedHat-based distributions).  Samba is using
the openldap client libraries, after all.

-- 
Bruce

The ice-caps are melting, tra-la-la-la.  All the world is drowning,
tra-la-la-la-la.  -- Tiny Tim.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba process throttled back?

2011-06-23 Thread Volker Lendecke
Hi!

I'd rather assume an oplock break. As long as you're alone
on the file, it's fast. Once somebody else opens (or even
just takes a look at) the file, it's slow. This can be
confirmed with a network trace.

Volker

On Thu, Jun 23, 2011 at 09:49:23AM -0400, Lang, Rich wrote:
 Well, it just gets curiouser and curiouser.
 
 I downloaded, built and installed the latest stable version of Samba (i.e. 
 3.5.9) on my inactive cluster member which is running RedHat ES 5.6.  In 
 case I didn't show this before, here's the output of `uname -a`:
 Linux mustang1 2.6.18-238.9.1.el5 #1 SMP Fri Mar 18 12:42:04 EDT 2011 i686 
 i686 i386 GNU/Linux
 Anyway, I create a share and copied the troublesome file to that share and 
 opened it using the VB application that showed such poor performance.  It 
 opened the file and processed it as quickly as if it were on my local hard 
 drive.  This is more like it.  This is back to how the share used to respond. 
  When I navigated back to the original copy of the file, the performance went 
 to pieces again.
 Same file, different versions of Samba, different performance.  Looks like I 
 fixed it, although I don't know exactly what was wrong.
 So, I wanted to take a wireshark snapshot of the poor performance to see if 
 the client was negotiating the buffer size down over the wire.  In the 
 meantime, the original file and its folder were moved from the Samba share to 
 a M$ share on another server.  Oh well - I copied the file back to the Samba 
 share.  Guess what?  The performance is great - back to where it was before 
 the problem started.
 So - it's not the version of Samba.  It looks like this is an inode 
 corruption on the disk, although I've run fsck a number of times on the disk 
 and it always comes up clean.
 H...there might be some tools that I need to use to keep my shared disk 
 clean.  We're running the cluster through a pair of HP SmartArray 642 SCSI 
 interfaces both connected to an MSA 500 G2 disk array with redundant 
 controllers.  There are four logical disks defined, each of which is defined 
 as part of a cluster service so it can swing between cluster members in case 
 of a failure.  Does anyone use this kind of disk array in a shared 
 configuration like this?
 
 Richard G. Lang
 Sr. Software Engineer
 la...@specsensors.commailto:la...@specsensors.com
 (330) 659-3312
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba process throttled back?

2011-06-23 Thread Jeremy Allison
On Thu, Jun 23, 2011 at 05:31:14PM +0200, Volker Lendecke wrote:
 Hi!
 
 I'd rather assume an oplock break. As long as you're alone
 on the file, it's fast. Once somebody else opens (or even
 just takes a look at) the file, it's slow. This can be
 confirmed with a network trace.

Yes, this is what screamed out to me. It has to be oplock
related IMHO.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] getting winbindd errors on OS X Server 10.6.6

2011-06-23 Thread Jeremy Allison
On Wed, Jun 22, 2011 at 12:54:31PM -0700, Michael Porter wrote:
 All,
 
 I am attempting to  resolve an issue that our OS X Server is having. It's 
 running 10.6.6 and samba 3.0.28a-apple. In the last two weeks we've been 
 rebooting this server multiple times a day because it stops responding to smb 
 requests. A look at the logs reveal the following two error messages repeated 
 hundreds of times:
 
 6/17/11 6:18:00 PM /usr/sbin/winbindd[231] dnssd_clientstub deliver_request: 
 socketpair failed 24 (Too many open files)
 6/17/11 6:18:00 PM /usr/sbin/winbindd[13089] dnssd_clientstub 
 deliver_request: socketpair failed 24 (Too many open files)
 
 The messages stop on the reboot and don't come back for a period of time.
 
 We typically have 60-75 clients connected to the system, which hosts files 
 for a software build system. We don't think there's been a significant change 
 in the way the clients interact with the server, nor have any software 
 changes been made on the server.
 
 Any help figuring out what to do next is appreciated!

You could always just restart winbindd, rather than reboot.
Looks like you're reaching the limit for winbindd clients,
but this is an older (3.0.28a) version of Samba (we're about
to release 3.6.0) and so will be hard to get a fix for.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] winbind and ipv6

2011-06-23 Thread Jeremy Allison
On Fri, Jun 10, 2011 at 10:22:27AM +0600, Eugene M. Zheganin wrote:
 Hi.
 
 FreeBSD 8.2-RELEASE
 Samba 3.4.9
 security = ads
 
 Samba as domain member. Controllers on Win2008 R2.
 When using IPv4 all is fine.
 
 Today I added IPv6 on controllers, winbind stopped working when using IPv6.
 I.e. when
 
 password server = NAME, which resolves to , winbind says
 
 ===Cut===
 # wbinfo -t
 checking the trust secret via RPC calls failed
 error code was NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND (0xc233)
 Could not check secret
 ===Cut===
 
 when I set password server to IPv4 address, all is fine again.
 Before you will start to blame me for lack of IPv6 connectivity, I
 want to say that IPv6 is working in this LAN for about half-a-year.
 Samba server can ping6 domains controller.
 Furthermore, when issuing kinit I see in tcpdump that it gets
 tickets by using ipv6. Samba is used by squid to authenticate users
 on this server. Users are succesfully connecting to squid via IPv6.
 Disturbing strings in log:
 
 ===Cut===
 [2011/06/09 22:13:58,  3] winbindd/winbindd_cm.c:1597(connection_ok)
   connection_ok: Connection to HQ-GC.norma.com for domain SOFTLAB is
 not connected
 [2011/06/09 22:13:58,  0] libads/kerberos.c:693(print_kdc_line)
   print_kdc_line: can't resolve name for kdc with non-default port
 [fd00::32d]. Error hostname nor servname provided, or not known
   .cm_prepare_connection: Unknown error: 0
 [2011/06/09 22:13:58,  0] libads/kerberos.c:693(print_kdc_line)
   print_kdc_line: can't resolve name for kdc with non-default port
 [fd00::32d]. Error hostname nor servname provided, or not known
   .cm_prepare_connection: Unknown error: 0
 [2011/06/09 22:13:58,  0] libads/kerberos.c:693(print_kdc_line)
   print_kdc_line: can't resolve name for kdc with non-default port
 [fd00::32d]. Error hostname nor servname provided, or not known
 ===Cut===
 (lots of these)

Ok, we only get into this message when the following is true:

if (port != 0  port != DEFAULT_KRB5_PORT)

- which means the port is being resolved as a strange
value. Can you reproduce with a debug level 10 log which
should tell you what port it's tring to use ?

That might give a hint as to what is the problem.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] ubuntu, ocfs2 with cman and ctdb

2011-06-23 Thread charles

 From: Jeremy Allison j...@samba.org
 To: charles
 Date: Mon, 20 Jun 2011 17:27:03 -0700
 Subject: Re: [Samba] ubuntu, ocfs2 with cman and ctdb
 On Mon, Jun 20, 2011 at 03:18:02PM -0600, charles wrote:
  hi guys,
 
  we're evaluating the available clustering options to get ctdb up and
 running
  for a highly available file server.
  we've set up both gluster and ocfs2 both on seperate 2 node setups.
  ocfs2 seems to provide better throughput and iops to samba clients than
 does
  gluster and that is comparing a single node server to a ctdb clustered 2
  node server.
  problem with ocfs2 is that i've been unable to configure it to utilize
  cman's stack  to provide proper locking for ctdb. gfs2 is up next.
 
  does anyone have any pointers/tutorials/document for getting ocfs2 set up
  with cman on ubunutu?

 Jim Mcdonough and his team @ SuSE has done most of the work
 looking at Samba/CTDB with ocfs2.

 Jim, any comments ?

 Jeremy.

 -- Forwarded message --
 From: Daniel Müller
 To: 'Jeremy Allison' j...@samba.org, 'charles'
 Date: Tue, 21 Jun 2011 08:35:29 +0200
 Subject: Re: [Samba] ubuntu, ocfs2 with cman and ctdb
 Gfs2 on centOS is working for me with ctdb. Gluster 3.2.1 is working with
 some tricks on Centos without using ctdb on a PDC BDC situation.
 Greetings
 Daniel

 ---
 EDV Daniel Müller

 Leitung EDV
 Tropenklinik Paul-Lechler-Krankenhaus
 Paul-Lechler-Str. 24
 72076 Tübingen

 Tel.: 07071/206-463, Fax: 07071/206-499
 eMail: muel...@tropenklinik.de
 Internet: www.tropenklinik.de
 ---

 -- Forwarded message --
 From: Jim McDonough j...@samba.org
 To: charles charlesaburr...@gmail.com
 Date: Tue, 21 Jun 2011 13:59:16 -0400
 Subject: Re: [Samba] ubuntu, ocfs2 with cman and ctdb
 On Mon, Jun 20, 2011 at 8:27 PM, Jeremy Allison j...@samba.org wrote:
  On Mon, Jun 20, 2011 at 03:18:02PM -0600, charles wrote:
  hi guys,
 
  we're evaluating the available clustering options to get ctdb up and
 running
  for a highly available file server.
  we've set up both gluster and ocfs2 both on seperate 2 node setups.
  ocfs2 seems to provide better throughput and iops to samba clients than
 does
  gluster and that is comparing a single node server to a ctdb clustered 2
  node server.
  problem with ocfs2 is that i've been unable to configure it to utilize
  cman's stack  to provide proper locking for ctdb. gfs2 is up next.
 
  does anyone have any pointers/tutorials/document for getting ocfs2 set
 up
  with cman on ubunutu?
 
  Jim Mcdonough and his team @ SuSE has done most of the work
  looking at Samba/CTDB with ocfs2.
 
  Jim, any comments ?
 I'm not familiar with cman.  On SUSE distributions, ocfs2 uses the
 pacemaker stack, so I can't really comment on cman.  The locking works
 properly with the pacemaker linux-ha stack and ocfs2.

 --
 Jim McDonough
 Samba Team
 SUSE labs
 jmcd at samba dot org
 jmcd at themcdonoughs dot org


 ___
 samba mailing list
 samba@lists.samba.org
 https://lists.samba.org/mailman/listinfo/samba

 thanks for the feedback, my next steps are to give centos a shot with ocfs2
and gfs2.
i've given gfs2 a try using cman (red hat's cluster manager). performance
seems on par with gluster, ctdb works on both, more or less.

i've noticed though that windows client locking of files doe not work across
nodes.

smbstatus does not show clients connected to both nodes or locked files only
the node from which the command is run.
i've added directive in my smb.conf files with no improvement.
i also have a problem with the server hanging while use crystal diskmark to
test random 4K write tests (the test can't be completed)
i use defaults for gfs2 clustered disk:  mkfs.gfs2 -t smbhaclust:gfs01 -j 2
/dev/drbd1

appreciate any assistance from those with gluster or gfs2 experience.


gluster nodes smb.conf

   passdb backend = tdbsam
   idmap backend = tdb2
   clustering = yes
[bunches]
read only = no
comment = cluster disk
path = /mnt/gluster/samba00
guest ok = yes


gfs2 nodes smb.conf
passdb backend = tdbsam
   idmap backend = tdb2
   clustering = yes
   use mmap = yes
   posix locking = no #added in attempt to fix
server hanging
   fileid:algorithm = fsname #added in attempt to fix
locking
   vfs objects = fileid  #added in attempt to fix
locking
   private dir = /mnt/repclust-disk/ctdb #added in attempt to fix locking

[bunches]
read only = no
comment = cluster disk
path = /mnt/repclust-disk/samba00
guest ok = yes

thanks

-- 
Charles
Belmopan, Belize

*clubmotorsports.bz* http://clubmotorsports.bz/
*
*
*club motorsports belize
facebookhttp://www.facebook.com/pages/Club-Motorsports/135687249774906
*
*
*
*http://www.cardomain.com/ride/2400106*

... we just love cars and we love driving them!
... Do things 

Re: [Samba] Samba process throttled back?

2011-06-23 Thread Lang, Rich
Thanks to all who responded.

This shouldn't be anything to do with oplocks, although I understand their 
nature and how they can destroy performance.  The file I analyze is being 
accessed by no one but me - guaranteed.  We're a small company and I know that 
to be true.

I reverted the secondary cluster member from Samba 3.5.9 back to 3.0.33 and, 
voila' - the slow performance returned.  No one else in the company even knows 
that this share exists, so this performance degradation isn't because someone 
else is breaking my oplock.

I ran a wireshark analysis on the net during a fast file analysis (under 
Samba 3.5.9) and a slow analysis (under Samba 3.0.33).  The SMB protocol 
shows that the client is the one that is ratcheting-down the file access to 
where single bytes are being retrieved from the server.  Under Samba 3.5.9, the 
client is retrieving data using 4096-byte blocks.

This may have happened due to a Microsoft update to the client at that point in 
time and 3.0.33 isn't responding correctly somehow.  I haven't found the real 
reason - I just know that 3.5.9 appears to work when 3.0.33 doesn't.  However, 
3.0.33 *does* work on the active cluster member.

Rich

-Original Message-
From: Jeremy Allison [mailto:j...@samba.org] 
Sent: Thursday, June 23, 2011 12:09 PM
To: Volker Lendecke
Cc: Lang, Rich; samba@lists.samba.org
Subject: Re: [Samba] Samba process throttled back?

On Thu, Jun 23, 2011 at 05:31:14PM +0200, Volker Lendecke wrote:
 Hi!
 
 I'd rather assume an oplock break. As long as you're alone
 on the file, it's fast. Once somebody else opens (or even
 just takes a look at) the file, it's slow. This can be
 confirmed with a network trace.

Yes, this is what screamed out to me. It has to be oplock
related IMHO.

Jeremy.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] ubuntu, ocfs2 with cman and ctdb

2011-06-23 Thread charles
On Thu, Jun 23, 2011 at 2:17 PM, charles wrote:

 From: Jeremy Allison j...@samba.org
 To: charles
 Date: Mon, 20 Jun 2011 17:27:03 -0700
 Subject: Re: [Samba] ubuntu, ocfs2 with cman and ctdb

 On Mon, Jun 20, 2011 at 03:18:02PM -0600, charles wrote:
  hi guys,
 
  we're evaluating the available clustering options to get ctdb up and
 running
  for a highly available file server.
  we've set up both gluster and ocfs2 both on seperate 2 node setups.
  ocfs2 seems to provide better throughput and iops to samba clients than
 does
  gluster and that is comparing a single node server to a ctdb clustered 2
  node server.
  problem with ocfs2 is that i've been unable to configure it to utilize
  cman's stack  to provide proper locking for ctdb. gfs2 is up next.
 
  does anyone have any pointers/tutorials/document for getting ocfs2 set
 up
  with cman on ubunutu?

 Jim Mcdonough and his team @ SuSE has done most of the work
 looking at Samba/CTDB with ocfs2.

 Jim, any comments ?

 Jeremy.


 -- Forwarded message --
 From: Daniel Müller
 To: 'Jeremy Allison' j...@samba.org, 'charles'
 Date: Tue, 21 Jun 2011 08:35:29 +0200
 Subject: Re: [Samba] ubuntu, ocfs2 with cman and ctdb
 Gfs2 on centOS is working for me with ctdb. Gluster 3.2.1 is working with
 some tricks on Centos without using ctdb on a PDC BDC situation.
 Greetings
 Daniel

 ---
 EDV Daniel Müller

 Leitung EDV
 Tropenklinik Paul-Lechler-Krankenhaus
 Paul-Lechler-Str. 24
 72076 Tübingen

 Tel.: 07071/206-463, Fax: 07071/206-499
 eMail: muel...@tropenklinik.de
 Internet: www.tropenklinik.de
 ---

 -- Forwarded message --
 From: Jim McDonough j...@samba.org
 To: charles charlesaburr...@gmail.com
 Date: Tue, 21 Jun 2011 13:59:16 -0400
 Subject: Re: [Samba] ubuntu, ocfs2 with cman and ctdb
 On Mon, Jun 20, 2011 at 8:27 PM, Jeremy Allison j...@samba.org wrote:
  On Mon, Jun 20, 2011 at 03:18:02PM -0600, charles wrote:
  hi guys,
 
  we're evaluating the available clustering options to get ctdb up and
 running
  for a highly available file server.
  we've set up both gluster and ocfs2 both on seperate 2 node setups.
  ocfs2 seems to provide better throughput and iops to samba clients than
 does
  gluster and that is comparing a single node server to a ctdb clustered
 2
  node server.
  problem with ocfs2 is that i've been unable to configure it to utilize
  cman's stack  to provide proper locking for ctdb. gfs2 is up next.
 
  does anyone have any pointers/tutorials/document for getting ocfs2 set
 up
  with cman on ubunutu?
 
  Jim Mcdonough and his team @ SuSE has done most of the work
  looking at Samba/CTDB with ocfs2.
 
  Jim, any comments ?
 I'm not familiar with cman.  On SUSE distributions, ocfs2 uses the
 pacemaker stack, so I can't really comment on cman.  The locking works
 properly with the pacemaker linux-ha stack and ocfs2.

 --
 Jim McDonough
 Samba Team
 SUSE labs
 jmcd at samba dot org
 jmcd at themcdonoughs dot org


 ___
 samba mailing list
 samba@lists.samba.org
 https://lists.samba.org/mailman/listinfo/samba

 thanks for the feedback, my next steps are to give centos a shot with
 ocfs2 and gfs2.
 i've given gfs2 a try using cman (red hat's cluster manager). performance
 seems on par with gluster, ctdb works on both, more or less.

 i've noticed though that windows client locking of files doe not work
 across nodes.

 smbstatus does not show clients connected to both nodes or locked files
 only the node from which the command is run.
 i've added directive in my smb.conf files with no improvement.
 i also have a problem with the server hanging while use crystal diskmark to
 test random 4K write tests (the test can't be completed)
 i use defaults for gfs2 clustered disk:  mkfs.gfs2 -t smbhaclust:gfs01 -j 2
 /dev/drbd1

 appreciate any assistance from those with gluster or gfs2 experience.


 gluster nodes smb.conf

passdb backend = tdbsam
idmap backend = tdb2
clustering = yes
 [bunches]
 read only = no
 comment = cluster disk
 path = /mnt/gluster/samba00
 guest ok = yes


 gfs2 nodes smb.conf
 passdb backend = tdbsam
idmap backend = tdb2
clustering = yes
use mmap = yes
posix locking = no #added in attempt to fix
 server hanging
fileid:algorithm = fsname #added in attempt to fix
 locking
vfs objects = fileid  #added in attempt to fix
 locking
private dir = /mnt/repclust-disk/ctdb #added in attempt to fix locking

 [bunches]
 read only = no
 comment = cluster disk
 path = /mnt/repclust-disk/samba00
 guest ok = yes

 thanks

 --
 Charles
 Belmopan, Belize

 *clubmotorsports.bz* http://clubmotorsports.bz/
 *
 *
 *club motorsports belize 
 facebookhttp://www.facebook.com/pages/Club-Motorsports/135687249774906
 *
 *
 *

Re: [Samba] Samba process throttled back?

2011-06-23 Thread Volker Lendecke
On Thu, Jun 23, 2011 at 04:32:42PM -0400, Lang, Rich wrote:
 Thanks to all who responded.
 
 This shouldn't be anything to do with oplocks, although I
 understand their nature and how they can destroy
 performance.  The file I analyze is being accessed by no
 one but me - guaranteed.  We're a small company and I know
 that to be true.

Being the only one does not mean no oplocks are broken.
Excel as a sample application is very prone to do that. To
make 100% sure, you will need to look at the network trace
and look for lockingx calls from server to client without a
request. That's what I would look for next. But as you have
already done that I can't help anymore. Sorry.

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Code? or Test Pattern?

2011-06-23 Thread Kenji Ichinoseki

My name is Kenji Ichinoseki and I am in charge of 
a project at Sumitomo Electric Networks, Inc.

Please give me cooperation by all means about the affair in the account of a 
title.
Now, I included Samba 3.0.37 in the Linux system currently developed (us).
And it is testing using smbtorture(samba3.5.8 source4) .

The point in question was found in our entry of this test.
It has a question to implementation of smbtorture of MODE_INFORMATION 
which is an entry of a RAW-SFILEINFO test.

http://samba.org/samba/devel/smbtorture-raw-functions.txt 

-- it is written to the 1114th line in this URL as follows.

---
Request is made using the MODE_INFORMATION (1016) info level.  File is
referenced by NAME.
Set file mode to 0.

SMBTorture Output: None.

Tests/Expectations:
Server should respond with NT_STATUS_OK
MODE_INFORMATION query response should show that the file mode 
is set to 0.
Notes:
Same test as above except the file is referenced by name.
---

Please see source4/torture/raw/setfileinfo.c.

In CHECK_CALL_PATH in the 409th line of a version 3.5.8, 2 is set up to 
mode.

---
printf(test mode_information level\n);
sfinfo.mode_information.in.mode = 2;
CHECK_CALL_FNUM(MODE_INFORMATION, NT_STATUS_OK);
CHECK_VALUE(MODE_INFORMATION, mode_information, mode, 2);

CHECK_CALL_PATH(MODE_INFORMATION, NT_STATUS_OK);
CHECK_VALUE(MODE_INFORMATION, mode_information, mode, 0);

sfinfo.mode_information.in.mode = 1;
---

This is the same also in version 3.5.9 and 4.0.0 alpha15.

I think that I should perform sfinfo.mode_information.in.mode = 0;, 
before executing CHECK_CALL_PATH, but is this understanding a mistake?

Or is it a mistake in a document?

Kenji.

--
Kenji Ichinoseki (ichinos...@sei-networks.com)



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Different permissions displayed in security tab andadvanced tab

2011-06-23 Thread Linda W

Dale Schroeder wrote:

David,

Samba does not have the ability to change the permissions of directories 
on the security tab, and many times they will not be displayed either.  
As you have already discovered, permissions on directories are changed 
in Advanced.  The permissions of files can be manipulated on the 
security tab.


I just tried this --

I was able to add a Domain group, and give it 'full permissions'
on the ACL and save it.

'RIGHTS' / priviledges work as well...(just tried it)

my user has the 'SETakeOwnershipPrivilege' in the Domain.

Among other things, this allowed me to change a directory that
was owned by root w/permis = rwxr-xr-x, to being owned by me.


As for diffs on Security and Advanced tab -- see MS.
(It's a feature...they don't show the exact same info...but close)...

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Different permissions displayed in security tab andadvanced tab

2011-06-23 Thread Linda W

Linda W wrote:



I just tried this --

I was able to add a Domain group, and give it 'full permissions'
on the ACL and save it.

'RIGHTS' / priviledges work as well...(just tried it)


FWIW, I use the 'xfs' file system.

It requires no special options to enable acl or ea support on mounting.

In my (G) section, I have:

ea support = yes

Then on each Share (they are share level params) that I want
full Win compatbility, I use:

map acl inherit = yes
acl group control = yes

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[SCM] Samba Shared Repository - branch master updated

2011-06-23 Thread Michael Adam
The branch, master has been updated
   via  472759a s3: remove prototype of convert_string_error from proto.h
   via  8683490 s3: remove prototype of convert_string from proto.h
  from  4f7f143 dfsreferral: search client's site and use it

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 472759a1e407d564d0125ec8f47eee38d62d6e1f
Author: Michael Adam ob...@samba.org
Date:   Tue Jun 21 10:23:51 2011 +0200

s3: remove prototype of convert_string_error from proto.h

Autobuild-User: Michael Adam ob...@samba.org
Autobuild-Date: Thu Jun 23 12:34:31 CEST 2011 on sn-devel-104

commit 8683490748a6ed2eaed11655c96e2838c4aa597b
Author: Michael Adam ob...@samba.org
Date:   Tue Jun 21 10:23:17 2011 +0200

s3: remove prototype of convert_string from proto.h

---

Summary of changes:
 source3/include/proto.h |8 
 1 files changed, 0 insertions(+), 8 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/include/proto.h b/source3/include/proto.h
index aa99d1c..ef8be4f 100644
--- a/source3/include/proto.h
+++ b/source3/include/proto.h
@@ -73,14 +73,6 @@ int bitmap_find(struct bitmap *bm, unsigned ofs);
 /* The following definitions come from lib/charcnv.c  */
 
 void gfree_charcnv(void);
-bool convert_string(charset_t from, charset_t to,
- void const *src, size_t srclen, 
- void *dest, size_t destlen,
- size_t *converted_size);
-bool convert_string_error(charset_t from, charset_t to,
-   void const *src, size_t srclen,
-   void *dest, size_t destlen,
-   size_t *converted_size);
 size_t ucs2_align(const void *base_ptr, const void *p, int flags);
 size_t push_ascii(void *dest, const char *src, size_t dest_len, int flags);
 size_t push_ascii_fstring(void *dest, const char *src);


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2011-06-23 Thread Volker Lendecke
The branch, master has been updated
   via  6c3cef7 s3: Add IO_REPARSE_TAG_SYMLINK define
   via  fb1346d s3: Fix some nonempty blank lines
  from  472759a s3: remove prototype of convert_string_error from proto.h

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 6c3cef773a989f175c518b435feebab287a58cf0
Author: Volker Lendecke v...@samba.org
Date:   Thu Jun 23 12:24:40 2011 +0200

s3: Add IO_REPARSE_TAG_SYMLINK define

From http://msdn.microsoft.com/en-us/library/dd541667%28v=PROT.13%29.aspx

Autobuild-User: Volker Lendecke vlen...@samba.org
Autobuild-Date: Thu Jun 23 13:46:37 CEST 2011 on sn-devel-104

commit fb1346d748a969702d51d02dcecc38ae93714599
Author: Volker Lendecke v...@samba.org
Date:   Thu Jun 23 12:24:21 2011 +0200

s3: Fix some nonempty blank lines

---

Summary of changes:
 source3/include/ntioctl.h |7 ---
 1 files changed, 4 insertions(+), 3 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/include/ntioctl.h b/source3/include/ntioctl.h
index 18707c5..131d596 100644
--- a/source3/include/ntioctl.h
+++ b/source3/include/ntioctl.h
@@ -2,17 +2,17 @@
Unix SMB/CIFS implementation.
NT ioctl code constants
Copyright (C) Andrew Tridgell  2002
-   
+
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
-   
+
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.
-   
+
You should have received a copy of the GNU General Public License
along with this program.  If not, see http://www.gnu.org/licenses/.
 */
@@ -69,6 +69,7 @@
 
 #endif
 
+#define IO_REPARSE_TAG_SYMLINK  0xA00C
 #define IO_REPARSE_TAG_MOUNT_POINT   0xA003
 #define IO_REPARSE_TAG_HSM   0xC004
 #define IO_REPARSE_TAG_SIS   0x8007


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2011-06-23 Thread Andrew Bartlett
The branch, master has been updated
   via  a73abc0 build: Add a script to install python and Samba with one 
command
   via  734e1b6 s3-param Remove 'announce version' parameter
   via  38b5beb param: Remove announce as parameter
   via  4d2c56c s3-net: Bind our gettext results to 'unix charset'
   via  fb3d5ad s3-swat Remove d_printf() calls
   via  de0e011 lib/util/charset: Remove autodetection of charset from 
LOCALE
   via  125a2ff lib/util/charset: Remove 'display charset'
  from  6c3cef7 s3: Add IO_REPARSE_TAG_SYMLINK define

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit a73abc0403b8267eeb15f9d5f394109495d1b667
Author: Andrew Bartlett abart...@samba.org
Date:   Thu Jun 23 20:43:16 2011 +1000

build: Add a script to install python and Samba with one command

This should help folks on systems that don't have a recent python
provided by the OS.

Python is installed into the same prefix as Samba, not in the default
path.

Andrew Bartlett

Autobuild-User: Andrew Bartlett abart...@samba.org
Autobuild-Date: Thu Jun 23 14:56:54 CEST 2011 on sn-devel-104

commit 734e1b6812b672fc7d838e943b14b8a176552734
Author: Andrew Bartlett abart...@samba.org
Date:   Tue Jun 21 15:14:29 2011 +1000

s3-param Remove 'announce version' parameter

The only users I can find of this on the internet involve confused
users, and our own documentation recommends never setting this.  Don't
confuse our users any longer.

Andrew Bartlett

commit 38b5beb33d78fd6a799fa591e29e5e1227adfa70
Author: Andrew Bartlett abart...@samba.org
Date:   Tue Jun 21 10:20:05 2011 +1000

param: Remove announce as parameter

commit 4d2c56c4b1a4f846b44f24c6f73e1b95fdf3a9bb
Author: Andrew Bartlett abart...@samba.org
Date:   Wed Jun 22 10:40:26 2011 +1000

s3-net: Bind our gettext results to 'unix charset'

This ensures that the translations and any embedded strings are in the
same charset.  It won't be the one from the user's locale (we no
longer auto-detect that), but it will be self-consistent.

Thanks to Steve Langasek for pointing this function out!

Andrew Bartlett

commit fb3d5ade9d3f935a69834aaee0046a54dbf38ca1
Author: Andrew Bartlett abart...@samba.org
Date:   Wed Jun 22 10:12:39 2011 +1000

s3-swat Remove d_printf() calls

These calls only ever output ASCII strings (protocol strings and
debugging), and never user content, so make it clear that these don't
need to be converted into UTF8.

Andrew Bartlett

commit de0e0119447060c64f4531c031e5509de3afc1b5
Author: Andrew Bartlett abart...@samba.org
Date:   Wed Jun 22 09:58:59 2011 +1000

lib/util/charset: Remove autodetection of charset from LOCALE

In the past, our LOCALE would set the display charset of Samba.  The
display charset has now been removed.  This patch removes the support
code that detected the locale from the environment.  We cannot safely
have 'unix charset' follow the locale (at it creates files on disk and
entries in databases that must not vary), so this code is unused.

As an example, imagine a database is manipulated in the
administrator's locale, and then read by smbd starting up in the
system default locale.  Or smbd restarted by the administrator rather
than a startup script.  Both of these situations could corrupt
databases or filenames on disk.

Andrew Bartlett

commit 125a2ff262aa312df20eec68802fd5f8a47f492f
Author: Andrew Bartlett abart...@samba.org
Date:   Wed Jun 22 09:52:31 2011 +1000

lib/util/charset: Remove 'display charset'

As discussed in 'CH_DISPLAY and gettext' on the samba-technical list:
http://lists.samba.org/archive/samba-technical/2011-June/078190.html

Setting this to a value other than 'unix charset' does not make sense,
as any system where the filesytem charset does not equal the terminal
charset will already have problems with programs as simple as 'ls'.
It also means that our output could not be pasted as our input in
interactive programs or onto our command line, as we never did
translate in the DISPLAY - UNIX direction.

The d_printf() calls are retained in case we need to revisit this, and
to support display_set_stderr().

Andrew Bartlett

---

Summary of changes:
 docs-xml/smbdotconf/protocol/announceas.xml  |   21 
 docs-xml/smbdotconf/protocol/announceversion.xml |   14 ---
 install_with_python.sh   |   41 +++
 lib/util/charset/charset.h   |6 +-
 lib/util/charset/codepoints.c|   43 +---
 lib/util/charset/tests/convert_string.c  |  110 +-
 lib/util/charset/util_str.c  |1 

[SCM] CTDB repository - branch master updated - ctdb-1.10-216-gdc0c585

2011-06-23 Thread Michael Adam
The branch, master has been updated
   via  dc0c58547cd4b20a8e2cd21f3c8363f34fd03e75 (commit)
   via  af75d3e37412e03d3978073edbe6dee78f265c3c (commit)
  from  66e89797c7866d207a5bbf1836f52d70dba7cea6 (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=master


- Log -
commit dc0c58547cd4b20a8e2cd21f3c8363f34fd03e75
Author: David Disseldorp dd...@suse.de
Date:   Tue Apr 5 13:26:29 2011 +0200

client: handle transient connection errors

Client connections to the ctdbd unix domain socket may fail
intermittently while the server is under heavy load. This change
introduces a client connect retry loop.

During failure the client will retry for a maximum of 64 seconds, the
ctdb --timelimit option can be used to cap client runtime.

Signed-off-by: Michael Adam ob...@samba.org

commit af75d3e37412e03d3978073edbe6dee78f265c3c
Author: Mathieu Parent math.par...@gmail.com
Date:   Sat Mar 26 11:55:30 2011 +0100

Manpage for ping_pong

Signed-off-by: Michael Adam ob...@samba.org

---

Summary of changes:
 Makefile.in|4 +-
 client/ctdb_client.c   |   35 --
 doc/ping_pong.1|  110 
 doc/ping_pong.1.html   |   37 +++
 doc/ping_pong.1.xml|  110 
 packaging/RPM/ctdb.spec.in |1 +
 6 files changed, 291 insertions(+), 6 deletions(-)
 create mode 100644 doc/ping_pong.1
 create mode 100644 doc/ping_pong.1.html
 create mode 100644 doc/ping_pong.1.xml


Changeset truncated at 500 lines:

diff --git a/Makefile.in b/Makefile.in
index aec64e1..8fb9ea7 100755
--- a/Makefile.in
+++ b/Makefile.in
@@ -203,7 +203,8 @@ tests/bin/ibwrapper_test: $(CTDB_CLIENT_OBJ) 
ib/ibwrapper_test.o
 doc: doc/ctdb.1 doc/ctdb.1.html \
doc/ctdbd.1 doc/ctdbd.1.html \
doc/onnode.1 doc/onnode.1.html \
-   doc/ltdbtool.1 doc/ltdbtool.1.html
+   doc/ltdbtool.1 doc/ltdbtool.1.html \
+   doc/ping_pong.1 doc/ping_pong.1.html
 
 clean:
rm -f *.o */*.o */*.a */*/*.o */*~
@@ -264,6 +265,7 @@ install: all
if [ -f doc/ctdbd.1 ];then ${INSTALLCMD} -m 644 doc/ctdbd.1 
$(DESTDIR)$(mandir)/man1; fi
if [ -f doc/onnode.1 ];then ${INSTALLCMD} -m 644 doc/onnode.1 
$(DESTDIR)$(mandir)/man1; fi
if [ -f doc/ltdbtool.1 ]; then ${INSTALLCMD} -m 644 doc/ltdbtool.1 
$(DESTDIR)$(mandir)/man1; fi
+   if [ -f doc/ping_pong.1 ];then ${INSTALLCMD} -m 644 doc/ping_pong.1 
$(DESTDIR)$(mandir)/man1; fi
if [ ! -f $(DESTDIR)$(etcdir)/ctdb/notify.sh ];then ${INSTALLCMD} -m 
755 config/notify.sh $(DESTDIR)$(etcdir)/ctdb; fi
if [ ! -f $(DESTDIR)$(etcdir)/ctdb/ctdb-crash-cleanup.sh ];then 
${INSTALLCMD} -m 755 config/ctdb-crash-cleanup.sh $(DESTDIR)$(etcdir)/ctdb; fi
 
diff --git a/client/ctdb_client.c b/client/ctdb_client.c
index 5e06604..55c3273 100644
--- a/client/ctdb_client.c
+++ b/client/ctdb_client.c
@@ -246,16 +246,41 @@ done:
 }
 
 /*
-  connect to a unix domain socket
+  connect with exponential backoff, thanks Stevens
 */
-int ctdb_socket_connect(struct ctdb_context *ctdb)
+#define CONNECT_MAXSLEEP 64
+static int ctdb_connect_retry(struct ctdb_context *ctdb)
 {
struct sockaddr_un addr;
+   int secs;
+   int ret = 0;
 
memset(addr, 0, sizeof(addr));
addr.sun_family = AF_UNIX;
strncpy(addr.sun_path, ctdb-daemon.name, sizeof(addr.sun_path));
 
+   for (secs = 1; secs = CONNECT_MAXSLEEP; secs *= 2) {
+   ret = connect(ctdb-daemon.sd, (struct sockaddr *)addr,
+ sizeof(addr));
+   if ((ret == 0) || (errno != EAGAIN)) {
+   break;
+   }
+
+   if (secs = (CONNECT_MAXSLEEP / 2)) {
+   DEBUG(DEBUG_ERR,(connect failed: %s, retry in %d 
second(s)\n,
+strerror(errno), secs));
+   sleep(secs);
+   }
+   }
+
+   return ret;
+}
+
+/*
+  connect to a unix domain socket
+*/
+int ctdb_socket_connect(struct ctdb_context *ctdb)
+{
ctdb-daemon.sd = socket(AF_UNIX, SOCK_STREAM, 0);
if (ctdb-daemon.sd == -1) {
DEBUG(DEBUG_ERR,(__location__  Failed to open client socket. 
Errno:%s(%d)\n, strerror(errno), errno));
@@ -264,11 +289,11 @@ int ctdb_socket_connect(struct ctdb_context *ctdb)
 
set_nonblocking(ctdb-daemon.sd);
set_close_on_exec(ctdb-daemon.sd);
-   
-   if (connect(ctdb-daemon.sd, (struct sockaddr *)addr, sizeof(addr)) == 
-1) {
+
+   if (ctdb_connect_retry(ctdb) == -1) {
+   DEBUG(DEBUG_ERR,(__location__  Failed to connect client socket 
to daemon. Errno:%s(%d)\n, strerror(errno), errno));
close(ctdb-daemon.sd);
ctdb-daemon.sd 

[SCM] Samba Shared Repository - branch master updated

2011-06-23 Thread Jeremy Allison
The branch, master has been updated
   via  5d7d52c Fix bug #8254 - acl check permissions = no does not work 
in all cases
  from  a73abc0 build: Add a script to install python and Samba with one 
command

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 5d7d52ceea6ac046940ae0a8112ee7ba79ce886d
Author: Jeremy Allison j...@samba.org
Date:   Thu Jun 23 15:06:16 2011 -0700

Fix bug #8254 - acl check permissions = no does not work in all cases

Move lp_acl_check_permissions() into can_delete_file_in_directory()
where it makes sense. Remove ACL check when requesting DELETE_ACCESS
when lp_acl_check_permissions is false.

Thanks to John Janosik @ IBM for noticing this.

Autobuild-User: Jeremy Allison j...@samba.org
Autobuild-Date: Fri Jun 24 01:18:11 CEST 2011 on sn-devel-104

---

Summary of changes:
 source3/smbd/file_access.c |5 +
 source3/smbd/open.c|   13 +++--
 2 files changed, 16 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/smbd/file_access.c b/source3/smbd/file_access.c
index 960dcb7..7485564 100644
--- a/source3/smbd/file_access.c
+++ b/source3/smbd/file_access.c
@@ -92,6 +92,11 @@ bool can_delete_file_in_directory(connection_struct *conn,
return False;
}
 
+   if (!lp_acl_check_permissions(SNUM(conn))) {
+   /* This option means don't check. */
+   return true;
+   }
+
/* Get the parent directory permission mask and owners. */
if (!parent_dirname(ctx, smb_fname-base_name, dname, NULL)) {
return False;
diff --git a/source3/smbd/open.c b/source3/smbd/open.c
index ee7b2ad..86a5924 100644
--- a/source3/smbd/open.c
+++ b/source3/smbd/open.c
@@ -77,6 +77,16 @@ NTSTATUS smbd_check_open_rights(struct connection_struct 
*conn,
NTSTATUS status;
struct security_descriptor *sd = NULL;
 
+   if ((access_mask  DELETE_ACCESS)  
!lp_acl_check_permissions(SNUM(conn))) {
+   *access_granted = access_mask;
+
+   DEBUG(10,(smbd_check_open_rights: not checking ACL 
+   on DELETE_ACCESS on file %s. Granting 0x%x\n,
+   smb_fname_str_dbg(smb_fname),
+   (unsigned int)*access_granted ));
+   return NT_STATUS_OK;
+   }
+
status = SMB_VFS_GET_NT_ACL(conn, smb_fname-base_name,
(SECINFO_OWNER |
SECINFO_GROUP |
@@ -3278,8 +3288,7 @@ static NTSTATUS create_file_unixpath(connection_struct 
*conn,
 
/* Setting FILE_SHARE_DELETE is the hint. */
 
-   if (lp_acl_check_permissions(SNUM(conn))
-(create_disposition != FILE_CREATE)
+   if ((create_disposition != FILE_CREATE)
 (access_mask  DELETE_ACCESS)
 (!(can_delete_file_in_directory(conn, smb_fname) ||
 can_access_file_acl(conn, smb_fname, DELETE_ACCESS {


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2011-06-23 Thread Andrew Bartlett
The branch, master has been updated
   via  877de9f s3-build Require fully defined symbols in ALL libraries by 
default
   via  52255f4 s3-build: Require fully defined symbols for all public 
libraries
   via  9554fd6 s3-build: Remove SECRETS3 as a samba3core dep
   via  b332743 s3-param Remove %(DomainSID) support
  from  5d7d52c Fix bug #8254 - acl check permissions = no does not work 
in all cases

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 877de9fee773b3f6b5a95afe1d01001e0b1b4ff2
Author: Andrew Bartlett abart...@samba.org
Date:   Fri Jun 24 11:47:45 2011 +1000

s3-build Require fully defined symbols in ALL libraries by default

The only exception here is libsmbregistry, which needs further work to
resolve the library loop caused by the registry based smb.conf
loading.

Andrew Bartlett

Autobuild-User: Andrew Bartlett abart...@samba.org
Autobuild-Date: Fri Jun 24 05:01:38 CEST 2011 on sn-devel-104

commit 52255f4eb50866cb2eceb92308c9a5ab49c04f7c
Author: Andrew Bartlett abart...@samba.org
Date:   Wed May 25 16:05:23 2011 +1000

s3-build: Require fully defined symbols for all public libraries

commit 9554fd6e2ff12760d463c9464f72cf6b51b7363d
Author: Andrew Bartlett abart...@samba.org
Date:   Thu Jun 23 17:33:04 2011 +1000

s3-build: Remove SECRETS3 as a samba3core dep

This resolves the the library loop between libsmbconf and
SECRETS3/passdb, and allows the next commit to require fully defined
symbols in public libraries.

Andrew Bartlett

commit b332743ddb13e2ce83c7686780c004d638a1b16f
Author: Andrew Bartlett abart...@samba.org
Date:   Thu Jun 23 17:32:07 2011 +1000

s3-param Remove %(DomainSID) support

This also removes the now unused longvar support.  This experiment
never took off.

Fixing this allows me to resolve the the library loop between libsmbconf
and SECRETS3/passdb.

Andreas correctly points out that this loop originally comes from my
patch to obtain the domain sid from passdb
(25cfa29e29bdbb6c84bd85ea02ec542228ae585f), but as I would prefer to
keep that feature, I'm hoping to break the loop here instead.

Andrew Bartlett

---

Summary of changes:
 buildtools/wafsamba/samba3.py |2 -
 source3/lib/substitute.c  |  102 -
 source3/wscript_build |   94 +++---
 3 files changed, 37 insertions(+), 161 deletions(-)


Changeset truncated at 500 lines:

diff --git a/buildtools/wafsamba/samba3.py b/buildtools/wafsamba/samba3.py
index c11e7d8..d77cd4d 100644
--- a/buildtools/wafsamba/samba3.py
+++ b/buildtools/wafsamba/samba3.py
@@ -93,8 +93,6 @@ def s3_fix_kwargs(bld, kwargs):
 
 def SAMBA3_LIBRARY(bld, name, *args, **kwargs):
s3_fix_kwargs(bld, kwargs)
-if not 'allow_undefined_symbols' in kwargs:
-kwargs['allow_undefined_symbols'] = True
return bld.SAMBA_LIBRARY(name, *args, **kwargs)
 Build.BuildContext.SAMBA3_LIBRARY = SAMBA3_LIBRARY
 
diff --git a/source3/lib/substitute.c b/source3/lib/substitute.c
index 38fdc40..df217bc 100644
--- a/source3/lib/substitute.c
+++ b/source3/lib/substitute.c
@@ -324,105 +324,6 @@ static char * realloc_expand_env_var(char *str, char *p)
 }
 
 /***
-***/
-
-static char *longvar_domainsid( void )
-{
-   struct dom_sid sid;
-   fstring tmp;
-   char *sid_string;
-
-   if ( !secrets_fetch_domain_sid( lp_workgroup(), sid ) ) {
-   return NULL;
-   }
-
-   sid_string = SMB_STRDUP( sid_to_fstring( tmp, sid ) );
-
-   if ( !sid_string ) {
-   DEBUG(0,(longvar_domainsid: failed to dup SID string!\n));
-   }
-
-   return sid_string;
-}
-
-/***
-***/
-
-struct api_longvar {
-   const char *name;
-   char* (*fn)( void );
-};
-
-static struct api_longvar longvar_table[] = {
-   { DomainSID,  longvar_domainsid },
-   { NULL, NULL }
-};
-
-static char *get_longvar_val( const char *varname )
-{
-   int i;
-
-   DEBUG(7,(get_longvar_val: expanding variable [%s]\n, varname));
-
-   for ( i=0; longvar_table[i].name; i++ ) {
-   if ( strequal( longvar_table[i].name, varname ) ) {
-   return longvar_table[i].fn();
-   }
-   }
-
-   return NULL;
-}
-
-/***
- Expand the long smb.conf variable names given a pointer to a %(NAME).
- Return the number of characters by which the pointer should be 

[SCM] Samba Shared Repository - branch master updated

2011-06-23 Thread Andrew Bartlett
The branch, master has been updated
   via  dc6ab33 s3-build Add dep on popt to fix FreeBSD build
   via  0ddafeb selftest: Cope with no binary argument being supplied to 
gdb_backtrace
   via  abb7217 selftest: Remove %PROG% argument from 'panic action'
   via  54d8836 s3-selftest Remove unused gdb_backtrace
   via  3d08e84 param: Remove remaining references to announce as and 
announce version
  from  877de9f s3-build Require fully defined symbols in ALL libraries by 
default

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit dc6ab33f2cd036de713094552840ecc9b7563080
Author: Andrew Bartlett abart...@samba.org
Date:   Fri Jun 24 13:22:11 2011 +1000

s3-build Add dep on popt to fix FreeBSD build

Autobuild-User: Andrew Bartlett abart...@samba.org
Autobuild-Date: Fri Jun 24 06:32:59 CEST 2011 on sn-devel-104

commit 0ddafeba6968759d290ee0489c5b2bf4108c8aef
Author: Andrew Bartlett abart...@samba.org
Date:   Fri Jun 24 13:17:19 2011 +1000

selftest: Cope with no binary argument being supplied to gdb_backtrace

Modern versions of gdb are better than us at working out what binary
is running, and so it is more reliable to omit the binary argument.

This change is required because samba4 no longer supplies this
argument.

Andrew Bartlett

commit abb72170e4c8b7a31d8466ac0959f8953267612a
Author: Andrew Bartlett abart...@samba.org
Date:   Fri Jun 24 13:04:27 2011 +1000

selftest: Remove %PROG% argument from 'panic action'

The debugger or script will need to work out the binary from the PID,
as %PROG% support was lost when the setup_fault() code was merged
between Samba3 and Samba4.

Andrew Bartlett

commit 54d8836a84fe6310a1a064d416b55aa169b8
Author: Andrew Bartlett abart...@samba.org
Date:   Fri Jun 24 13:03:49 2011 +1000

s3-selftest Remove unused gdb_backtrace

The version in selftest/ has more features and is the one used by 'make 
test'.

Andrew Bartlett

commit 3d08e844fc2870387449850342091ae621bd938d
Author: Andrew Bartlett abart...@samba.org
Date:   Fri Jun 24 12:57:47 2011 +1000

param: Remove remaining references to announce as and announce version

---

Summary of changes:
 docs-xml/using_samba/appc.xml |   28 -
 docs-xml/using_samba/ch05.xml |   29 --
 selftest/gdb_backtrace|   36 
 selftest/selftest.pl  |2 +-
 selftest/target/Samba4.pm |2 +-
 source3/script/tests/gdb_backtrace|   87 -
 source3/wscript_build |2 +-
 source4/param/loadparm.c  |5 --
 source4/scripting/python/samba/upgrade.py |2 -
 9 files changed, 28 insertions(+), 165 deletions(-)
 delete mode 100755 source3/script/tests/gdb_backtrace


Changeset truncated at 500 lines:

diff --git a/docs-xml/using_samba/appc.xml b/docs-xml/using_samba/appc.xml
index f4b4666..30f5045 100644
--- a/docs-xml/using_samba/appc.xml
+++ b/docs-xml/using_samba/appc.xml
@@ -66,34 +66,6 @@ options./para
 /refsynopsisdiv
 /refentry
 
-refentry id=appc-refentry-4
-refmeta
-refmiscinfo class=allowable valuesNT, Win95, WfW/refmiscinfo
-refmiscinfo class=defaultNT/refmiscinfo
-/refmeta
-refnamediv
-refname[global] announce as = system type/refname
-/refnamediv
-refsynopsisdiv
-paraHave Samba announce itself as something other than an NT server. 
Discouraged because it interferes with serving browse lists./para
-
-/refsynopsisdiv
-/refentry
-
-refentry id=appc-refentry-5
-refmeta
-refmiscinfo class=allowable valuesany/refmiscinfo
-refmiscinfo class=default4.2/refmiscinfo
-/refmeta
-refnamediv
-refname[global] announce version = number.number/refname
-/refnamediv
-refsynopsisdiv
-paraInstructs Samba to announce itself as an older version SMB server. 
Discouraged./para
-
-/refsynopsisdiv
-/refentry
-
 refentry id=appc-refentry-6
 refmeta
 refmiscinfo class=allowable valuesany shares/refmiscinfo
diff --git a/docs-xml/using_samba/ch05.xml b/docs-xml/using_samba/ch05.xml
index 8bf541c..2e8bc32 100644
--- a/docs-xml/using_samba/ch05.xml
+++ b/docs-xml/using_samba/ch05.xml
@@ -523,35 +523,6 @@ remote browse sync = 192.168.221.130 
192.168.222.120/programlisting
 tbody
 row
 
-entry colname=col1paraliteralannounce as/literal/para/entry
-
-entry colname=col2paraliteralNT/literal
-indexterm 
id=ch05-idx-969670-0primarybrowsing/primarysecondaryoptions for, list 
of/secondary/indexterm or literalWin95/literal or literalWf 
W/literal/para/entry
-
-entry colname=col3paraSets the operating system that Samba will announce 
itself as./para/entry
-
-entry colname=col4paraliteralN T/literal/para/entry
-
-entry colname=col5paraGlobal/para/entry
-
-/row
-
-row
-
-entry colname=col1paraliteralannounce 

[SCM] CTDB repository - branch 1.2.27 updated - ctdb-1.9.1-418-g964db53

2011-06-23 Thread Ronnie Sahlberg
The branch, 1.2.27 has been updated
   via  964db53769704cb4db1567aa0377c70b3698e5fb (commit)
  from  b4de1afc184cf9fb3a2bef9db078e842a44fb270 (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=1.2.27


- Log -
commit 964db53769704cb4db1567aa0377c70b3698e5fb
Author: Ronnie Sahlberg ronniesahlb...@gmail.com
Date:   Sat Jun 18 10:47:25 2011 +1000

Remove a benign by annoying log message that will be logged after an 
interface that has been in use has later been removed and is no longer 
referenced by any public addresses.

CQ S1024495

---

Summary of changes:
 config/events.d/10.interface |1 -
 1 files changed, 0 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/config/events.d/10.interface b/config/events.d/10.interface
index 5f25445..b906e6a 100755
--- a/config/events.d/10.interface
+++ b/config/events.d/10.interface
@@ -42,7 +42,6 @@ monitor_interfaces()
for IFACE in $INTERFACES ; do
 
ip addr show $IFACE 2/dev/null /dev/null || {
-   echo Interface $IFACE does not exist but it is used by public 
addresses.
continue
}
 


-- 
CTDB repository


[SCM] CTDB repository - branch 1.2 updated - ctdb-1.9.1-441-gd403304

2011-06-23 Thread Ronnie Sahlberg
The branch, 1.2 has been updated
   via  d40330453854d81d182112b49f5f6f2e0814b231 (commit)
  from  bfffe067a8152145ef54482dccb49529c6a4827f (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=1.2


- Log -
commit d40330453854d81d182112b49f5f6f2e0814b231
Author: Ronnie Sahlberg ronniesahlb...@gmail.com
Date:   Sat Jun 18 10:47:25 2011 +1000

Remove a benign by annoying log message that will be logged after an 
interface that has been in use has later been removed and is no longer 
referenced by any public addresses.

CQ S1024495

---

Summary of changes:
 config/events.d/10.interface |1 -
 1 files changed, 0 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/config/events.d/10.interface b/config/events.d/10.interface
index 7f5791a..f793673 100755
--- a/config/events.d/10.interface
+++ b/config/events.d/10.interface
@@ -41,7 +41,6 @@ monitor_interfaces()
for IFACE in $INTERFACES ; do
 
ip addr show $IFACE 2/dev/null /dev/null || {
-   echo Interface $IFACE does not exist but it is used by public 
addresses.
continue
}
 


-- 
CTDB repository