Re: [Samba] Samba + acl,user_xattr
Added to global section vfs objects = acl_xattr No changes. Still dont store DOS attr. You only need acl_xattr is you want to store Windows ACLs, not DOS attrs. Have you tried using setfattr on that filesystem ? Does it work ? Jeremy. Hello Jeremy! You are right! I don't want to store Windows ACLs, need only DOS attrs (hidden file attr). What Is enough to add to my smb.conf? 'store dos attributes (S) or 'map hidden (S)' or together or else? #cat /opt/samba/smb.conf [global] pid directory = /opt/samba/run lock directory = /opt/samba/cache private dir = /opt/samba/cache log file = /opt/samba/smbd.log log level = 10 workgroup = TEST security = share show add printer wizard = no max log size = 10240 bind interfaces only = true interfaces = eth1 [homes] browseable = no printable = no [public] path = /mnt/public comment = read only = no guest ok = yes follow symlinks = no writable = yes -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Join Win7 to Samba
On 2011-12-15 08:02, Kai Blin wrote: Hi Piotr, These two settings are not related to domain controllers, they control if the box wants to be a domain master browser for the NetBIOS browsing elections. Hm, actually the domain master setting does matter for the PDC. It's really been a while since I last worked with NT4.0 style domains. :) Still, you might want to make sure the settings are ok using testparm and then force a browser election. All this NetBIOS browsing is pretty messy. Cheers, Kai -- Kai Blin Worldforge developer http://www.worldforge.org/ Wine developer http://wiki.winehq.org/KaiBlin Samba team member http://www.samba.org/samba/team/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] how to set up bind9 dns server for joined samba 4 to server 2003
who to join samba as DC to windows without add windows dns? On Wed, Dec 14, 2011 at 3:23 PM, Mohammad Ebrahim Abravi lamp@gmail.com wrote: Hi Samba4 joined to server 2003 as a DC with this command: samba-tool domain join samba.example.com DC -Uadministrator --realm=samba.example.com *How to Setup bind 9.7.3 as dns server Instead of windows dns server?* try this: create dns and named files with provision command copy dns and named files to joind samba config bind and set KEYTAB_FILE=/usr/local/samba/private/dns.keytab KRB5_KTNAME=/usr/local/samba/private/dns.keytab export KEYTAB_FILE export KRB5_KTNAME ... ... ... and all other thing (need for setting on single samba 4 dc) run samba_dnsupdate dns_tkey_negotiategss: TKEY is unacceptable Failed update of 1 entries *some times see this error in syslog:* Dec 14 10:46:55 samba named[9305]: client 192.168.60.247#1161: updating zone 'samba.example.com./IN': update unsuccessful: your-pc.samba.example.com/A: 'RRset exists (value dependent)' prerequisite not satisfied (NXRRSET) Dec 14 10:46:55 samba named[9305]: client 192.168.60.247#1164: update 'samba.example.com/IN' denie -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Weird Samba issues
I manage a Samba server that has been working nicely for a couple of months (after it replace the old Samba server which worked happily for years). We use LDAP for accounts, but don't use domain logons or anything fancy. All users have their home dir on Samba mapped to drive 'M:'. In their home, there are symbolic links to various directories they're entitled to access. Links and file-system permissions are periodically maintained by a shell script based on user's groups (fetched from nsswitch) and this worked well with the old server and it seemed to work well for a couple of months now. Generally users only use the 'homes' share, while admins use some additional shares like 'backup'. About a week or two ago users started reporting their 'Explorer' windows are freezing while using the share and things seem to be getting worse (more and more users complain). So I did a bit of testing on my own and can indeed confirm that while browsing the directories on the 'M:' drive, the 'Explorer' window sometimes becomes unresponsive - if I let it be for long enough it then reports an error: 'An error occurred while reconnecting M: to \\mdisk\user1 Microsoft Windows Network : The local device name is already in use This connection has not been restored' While waiting, I'm able to fire up another Explorer window and browse those same directories with no issues, unless it -seemingly randomly- happens on that windows too, but I can then open a third windows and work there. Of course users are not happy with that 'solution'. Looking at the workstation log file there are no obvious errors. The only thing that is a bit odd are lines like ths: [2011/12/15 14:18:04.263224, 2] passdb/pdb_ldap.c:572(init_sam_from_ldap) init_sam_from_ldap: Entry found for user: user9 [2011/12/15 14:19:18.083636, 2] passdb/pdb_ldap.c:572(init_sam_from_ldap) init_sam_from_ldap: Entry found for user: user3 Where 'user3' and 'user9' are NOT the username I'm really logged in with (and it's not limited to just those two users). Looking at 'nmbd' log file, this is what it looks like after restarting it: [2011/12/15 14:39:52, 0] nmbd/nmbd.c:857(main) nmbd version 3.5.4-5.11.1-2573-SUSE-SL11.3 started. Copyright Andrew Tridgell and the Samba Team 1992-2010 [2011/12/15 14:39:52.978706, 2] lib/tallocmsg.c:106(register_msg_pool_usage) Registered MSG_REQ_POOL_USAGE [2011/12/15 14:39:52.978746, 2] lib/dmallocmsg.c:77(register_dmalloc_msgs) Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED [2011/12/15 14:39:52.978908, 2] param/loadparm.c:7296(handle_include) Can't find include file /etc/samba/dhcp.conf [2011/12/15 14:39:52.979316, 2] nmbd/nmbd.c:890(main) Becoming a daemon. [2011/12/15 14:39:52.980906, 0] nmbd/asyncdns.c:155(start_async_dns) started asyncdns process 25834 [2011/12/15 14:39:52.982597, 2] lib/interface.c:478(interpret_interface) interpret_interface: Adding interface 192.168.1.3/17 [2011/12/15 14:39:52.982637, 2] lib/interface.c:340(add_interface) added interface 192.168.1.3/17 ip=192.168.1.3 bcast=192.168.127.255 netmask=255.255.128.0 [2011/12/15 14:39:52.982738, 2] lib/interface.c:340(add_interface) added interface lo ip=127.0.0.1 bcast=127.255.255.255 netmask=255.0.0.0 [2011/12/15 14:39:52.982779, 2] nmbd/nmbd_subnetdb.c:299(create_subnets) create_subnets: Ignoring loopback interface. [2011/12/15 14:39:52.982905, 2] nmbd/nmbd_subnetdb.c:171(make_subnet) making subnet name:192.168.1.3 Broadcast address:192.168.127.255 Subnet mask:255.255.128.0 [2011/12/15 14:39:52.982938, 2] nmbd/nmbd_subnetdb.c:171(make_subnet) making subnet name:UNICAST_SUBNET Broadcast address:127.0.0.1 Subnet mask:127.0.0.1 [2011/12/15 14:39:52.982966, 2] nmbd/nmbd_subnetdb.c:171(make_subnet) making subnet name:REMOTE_BROADCAST_SUBNET Broadcast address:0.0.0.0 Subnet mask:0.0.0.0 [2011/12/15 14:39:52.982994, 2] nmbd/nmbd_subnetdb.c:171(make_subnet) making subnet name:WINS_SERVER_SUBNET Broadcast address:0.0.0.0 Subnet mask:0.0.0.0 [2011/12/15 14:39:57.008772, 2] nmbd/nmbd_elections.c:107(check_for_master_browser_fail) check_for_master_browser_fail: Forcing election on workgroup ZAG subnet 192.168.1.3 [2011/12/15 14:39:59.436528, 2] nmbd/nmbd_elections.c:40(send_election_dgram) send_election_dgram: Sending election packet for workgroup ZAG on subnet 192.168.1.3 [2011/12/15 14:40:01.015802, 2] nmbd/nmbd_elections.c:40(send_election_dgram) send_election_dgram: Sending election packet for workgroup ZAG on subnet 192.168.1.3 [2011/12/15 14:40:03.018011, 2] nmbd/nmbd_elections.c:40(send_election_dgram) send_election_dgram: Sending election packet for workgroup ZAG on subnet 192.168.1.3 [2011/12/15 14:40:04.372942, 2] nmbd/nmbd_elections.c:40(send_election_dgram) send_election_dgram: Sending election packet for workgroup ZAG on subnet 192.168.1.3 [2011/12/15 14:40:07.059608, 2] nmbd/nmbd_elections.c:40(send_election_dgram) send_election_dgram:
Re: [Samba] bind errors for latest samba 4 checkout [solved]
On 12/14/2011 09:12 AM, steve wrote: On 12/09/2011 07:38 PM, Dale Schroeder wrote: Yes, that seems to explain it. I have listen-on-v6 { any; }; in /etc/named.conf I think that this should be commented (#) as I don't have any ip6 addresses. Can confirm that commenting the line removes the error. I now have a squeaky clean bind:) For a default openSUSE 12.1 with Samba 4 git from today, /etc/named.conf looks like this: options { directory /var/lib/named; managed-keys-directory /var/lib/named/dyn/; dump-file /var/log/named_dump.db; statistics-file /var/log/named.stats; notify no; disable-empty-zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA; include /etc/named.d/forwarders.conf; }; zone . in { type hint; file root.hint; }; zone localhost in { type master; file localhost.zone; }; zone 0.0.127.in-addr.arpa in { type master; file 127.0.0.zone; }; zone 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa in { type master; file 127.0.0.zone; }; include /etc/named.conf.include; include /usr/local/samba/private/named.conf; Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] how to improve smb2 performance..
Have you considered you may have already reached the best under your network condition? Cheers -David 2011/12/15 sathishkumar kanagaraj sathish.kanaga...@gmail.com Hi, i am using smb2 max read/write/credits value 5 times the default value in smb.conf file. Even this changes i am getting similar performance in samba-3.6.1 smb2 protocol in widows 7 client. is it correct way to improve I/O performance? -Sathish. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] XP SP3 can't authenticate
Hello, I have a strange problem. I've re-included a XP SP3 pro in my samba domain. Only the administrators can authenticate and enter in a windows session. All other users can't. smb version : 3.3.5 Any help would be appreciate ... regards -- Hervé Hénoch Responsable informatique Institut Sainte Catherine 1750, chemin du Lavarin, 84000 Avignon Téléphone : 04.90.27.57.44 Messagerie : h.hen...@isc84.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Bind9 dlopen version
On Sunday 11 December 2011 15:58:31 Davy Loose wrote: Hey guys, I'm currently using Ubuntu 10.04 for setting up Samba4 and I'm having a problem with the dlz_dlopen driver. I've installed Bind9 from hauke (https://launchpad.net/~hauke/+archive/bind9) because the bind9 version from the apt-get didn't give me the correct version. I've included the /usr/local/samba/private/named.conf file in my /etc/bind/named.conf, but on starting the bind9 service I get the following message: dlz_dlopen: incorrect version 1 should be 2 in '/usr/local/samba/modules/bind9/dlz_bind9.so' Does anybody have any idea how to fix this problem. Thank you. Those 9.9.0.x versions are beta ones from isc.org. Stable is 9.8.1-P1. The beta 9.9.0.x needs a change in the samba4 source in source4/dns_server/dlz_minimal.h #define DLZ_DLOPEN_VERSION 1 #define DLZ_DLOPEN_VERSION 2 and a re-build of samba4 is needed. Cheers, Günter -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] XP SP3 can't authenticate
It might be an issues with group mappings (for the well know groups.) Can you verify that the net groupmap list shows at a minimum Domain Users and Domain Admins. If you login as Administrator, can you can network users or groups to the local Users group? Does pdbedit -Lv show the computer account on the PDC. Does getent passwd shows the computer account on the PDC? On 12/15/2011 11:16 AM, Hervé Hénoch wrote: Hello, I have a strange problem. I've re-included a XP SP3 pro in my samba domain. Only the administrators can authenticate and enter in a windows session. All other users can't. smb version : 3.3.5 Any help would be appreciate ... regards -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] getpeername failed error when signed communications policy enabled
On Thu, Dec 15, 2011 at 09:10:11AM +, Hilton, David wrote: No, the only error that we see is the getpeername failed error in the Samba log for the client machine that is trying to print the job. Then I doubt it's a signing issue (which makes it strange). What does a debug level 10 say ? Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] question regarding samba permissions
On 12/14/2011 4:35 PM, skull wrote: woudln't work because all the users are in one group anyway. and i am not allowed to to give read rights do any (i.e. 755) but theres really no option in smb.conf like read only users = or something like that? read list = user1 user2 Am 13.12.2011 17:56, schrieb Raffael Sahli: On Tue, 13 Dec 2011 16:38:41 +0100, skullskul...@gmx.ch wrote: I want to make a subfolder read only for certain users. for example: /data/pool is public rwx for all users. and now i would like to make a /data/pool/subfolder only rwx for user1 and grant read only permissions to user2 and user3 how do i do this? any links or direct tips on that? You have to change the permission on the filesystem and not with Samba. set the owner user1 and a group with all other users. After that change the dir mod (chmod 0750) my suggestion would be something like this, but as you can imagine it didn't work: # The general datapool where everyone may rwx [pool] comment = Datapool path = /data/pool force directory mode = 700 force create mode = 770 create mode = 770 directory mode = 770 public = yes writable = yes printable = no valid users = user1 user2 user3 #My new Protected Subfolder [Write Protected Subfolder] comment = Write Protected Subfolder path = /data/pool/subfolder force directory mode = 700 force create mode = 770 create mode = 770 directory mode = 770 public = yes writable = yes printable = no valid users = user1 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba + acl,user_xattr
On Thu, Dec 15, 2011 at 12:17:21PM +0400, Dmitry Mordovin wrote: Added to global section vfs objects = acl_xattr No changes. Still dont store DOS attr. You only need acl_xattr is you want to store Windows ACLs, not DOS attrs. Have you tried using setfattr on that filesystem ? Does it work ? Jeremy. Hello Jeremy! You are right! I don't want to store Windows ACLs, need only DOS attrs (hidden file attr). What Is enough to add to my smb.conf? 'store dos attributes (S) or 'map hidden (S)' or together or else? I use: store dos attributes = yes map readonly = no map system = no map hidden = no map archive = no Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] samba print notifications
I remember conversing with Jeremy at the beginning of the year re: issues with samba's print notifications to clients (specifically XP) with firewalls enabled. I believe that an option to turn this behavior off was going to be added. Does anyone know if the option was added and if so, beginning in what version and the name of the option? I'm not having much luck (other then finding my original message :) Tom -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] samba print notifications
On Thu, Dec 15, 2011 at 07:18:03PM +, Tom Ryan wrote: I remember conversing with Jeremy at the beginning of the year re: issues with samba's print notifications to clients (specifically XP) with firewalls enabled. I believe that an option to turn this behavior off was going to be added. Does anyone know if the option was added and if so, beginning in what version and the name of the option? I'm not having much luck (other then finding my original message :) It's called: print notify backchannel = [yes|no] and is included in 3.6.0 and above. Cheers, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] how to improve smb2 performance..
hi, i am using 1G switch tried testparm to validate the smb.conf, its giving like unknown parameter found and ignoring for smb2 max w Have you considered you may have already reached the best under your network condition? Cheers -David 2011/12/15 sathishkumar kanagaraj sathish.kanaga...@gmail.com Hi, i am using smb2 max read/write/credits value 5 times the default value in smb.conf file. Even this changes i am getting similar performance in samba-3.6.1 smb2 protocol in widows 7 client. is it correct way to improve I/O performance? -Sathish. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] All read and write
Got few help, but still not working. Anyone know the configuration for full read and write for everyone. So no security needed or permission, ownership, or objects. Just full read and write for everyone. All the different configurations that I have tried (these are 3 separate smb.conf config and NOT all together): security = SHARE [Share] path = /home/project public = yes writeable = yes read only = no browseable = yes locking = no strict locking = no create mask = 777 directory mask = 777 force directory mode = 777 security = share [Share] path = /home/project browseable = yes guest ok = yes read only = no hide files = /lost+found/ force directory mode = 777 force create mode = 666 directory mask = 777 create mask = 666 and this security=user [Share] path = /home/project public = yes writeable = yes browseable = yes guest ok = yes guest account = Everyone create mask = 777 directory mask = 777 I am able to create file and folders, but folders I create I can't take ownership and is still lock. Any ideas? Sharing Ubuntu volume and mounting it into windows 7. So want so there's no security tab when checking the properties in Windows and just have all read and write. Thanks, Jessica -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] All read and write
BTW, this is my smbstatus: PID UID DenyMode Access R/W OpLock Share 5773 65534 DENY_NONE 0x100081RDONLY NONE /home/project On Thu, Dec 15, 2011 at 2:35 PM, Jessica Guynn jessgu...@gmail.com wrote: Got few help, but still not working. Anyone know the configuration for full read and write for everyone. So no security needed or permission, ownership, or objects. Just full read and write for everyone. All the different configurations that I have tried (these are 3 separate smb.conf config and NOT all together): security = SHARE [Share] path = /home/project public = yes writeable = yes read only = no browseable = yes locking = no strict locking = no create mask = 777 directory mask = 777 force directory mode = 777 security = share [Share] path = /home/project browseable = yes guest ok = yes read only = no hide files = /lost+found/ force directory mode = 777 force create mode = 666 directory mask = 777 create mask = 666 and this security=user [Share] path = /home/project public = yes writeable = yes browseable = yes guest ok = yes guest account = Everyone create mask = 777 directory mask = 777 I am able to create file and folders, but folders I create I can't take ownership and is still lock. Any ideas? Sharing Ubuntu volume and mounting it into windows 7. So want so there's no security tab when checking the properties in Windows and just have all read and write. Thanks, Jessica -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] All read and write
On Friday 16 December 2011 00:37:12 Jessica Guynn wrote: BTW, this is my smbstatus: PID UID DenyMode Access R/W OpLock Share 5773 65534 DENY_NONE 0x100081RDONLY NONE /home/project On Thu, Dec 15, 2011 at 2:35 PM, Jessica Guynn jessgu...@gmail.com wrote: Got few help, but still not working. Anyone know the configuration for full read and write for everyone. So no security needed or permission, ownership, or objects. Just full read and write for everyone. All the different configurations that I have tried (these are 3 separate smb.conf config and NOT all together): security = SHARE [Share] path = /home/project public = yes writeable = yes read only = no browseable = yes locking = no strict locking = no create mask = 777 directory mask = 777 force directory mode = 777 security = share [Share] path = /home/project browseable = yes guest ok = yes read only = no hide files = /lost+found/ force directory mode = 777 force create mode = 666 directory mask = 777 create mask = 666 and this security=user [Share] path = /home/project public = yes writeable = yes browseable = yes guest ok = yes guest account = Everyone create mask = 777 directory mask = 777 I am able to create file and folders, but folders I create I can't take ownership and is still lock. Any ideas? Sharing Ubuntu volume and mounting it into windows 7. So want so there's no security tab when checking the properties in Windows and just have all read and write. Thanks, Jessica Hi Jessica, there are many ways to accomplish this. A completely open way - were _any_ connected user is allowed to do anything with _all_ files/dirs - could be: [global] security = user map to guest = bad user guest account = nobody # see later note more to come from your original smb.conf [Share] comment = public access (all access is done as guest account) path = /home/project read only = No browseable = yes guest ok = yes guest only = yes inherit owner = yes inherit permissions = yes . Note: guest account = nobody specifies the linux user who is doing all file system access. This linux user must exist - and of course must have proper file system access rights. Check that user nobody with: id nobody to also list his groups. e.g. here i get: uid=65534(nobody) gid=65533(nobody) Gruppen=65533(nobody),65534(nogroup) Now we need to set proper owner, group and permissions to the shared path: Note that you might have a different group name for nobody. sudo chown nobody:nobody /home/project/ sudo chmod 0700 /home/project/ I assume here that the shared path is empty at the moment and that only remote smb users are accessing this path. If you have further questions, a lot of talk/support is also done through IRC these days. Often much faster results than with emails. You can find me as nickname kukks on irc://irc.freenode.net/ Cheers, Günter -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] sambaMungedDial
On Mon, 2011-12-12 at 08:17 -0500, Adam Tauno Williams wrote: On Mon, 2011-12-12 at 11:22 +0100, Alexander Födisch wrote: Hi, does anybody know how to decode/recode sambaMungedDial attribute? I need to store the terminal server profile path in it but can not find any documentation. There are a couple of applications that decode/encode sambaMungedDial. Looking at their source(s) might help. For example http://gosa.sourcearchive.com/documentation/2.5.8/class__sambaMungedDial_8inc-source.html -- System Administrator / OpenGroupware developer: awill...@whitemice.org http://www.whitemiceconsulting.com/ It has been quite a saga, but we worked with Microsoft to get all of this documented. The first bit is the dialback string for their old Remote Access Server, the rest is the terminal server stuff needed here. http://msdn.microsoft.com/en-us/library/ff635189%28v=PROT.10%29.aspx See also threads about userParameters on the cifs-protocol list, as we work out how to deal with this for Samba4. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba + acl,user_xattr
Hello Jeremy! You are right! I don't want to store Windows ACLs, need only DOS attrs (hidden file attr). What Is enough to add to my smb.conf? 'store dos attributes (S) or 'map hidden (S)' or together or else? I use: store dos attributes = yes map readonly = no map system = no map hidden = no map archive = no Jeremy. Added to smb.conf Now, when I try to Apply hidden attribute, popup message - Error change file attributes. Access Denied. I suspect this due to Bug 8414 (https://bugzilla.samba.org/show_bug.cgi?id=8414) for me. Thank you. PS: With hacked version of smbd this error happens too. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] All read and write
On Fri, Dec 16, 2011 at 02:56:08AM +0100, Günter Kukkukk wrote: On Friday 16 December 2011 00:37:12 Jessica Guynn wrote: BTW, this is my smbstatus: PID UID DenyMode Access R/W OpLock Share 5773 65534 DENY_NONE 0x100081RDONLY NONE /home/project On Thu, Dec 15, 2011 at 2:35 PM, Jessica Guynn jessgu...@gmail.com wrote: Got few help, but still not working. Anyone know the configuration for full read and write for everyone. So no security needed or permission, ownership, or objects. Just full read and write for everyone. All the different configurations that I have tried (these are 3 separate smb.conf config and NOT all together): security = SHARE [Share] path = /home/project public = yes writeable = yes read only = no browseable = yes locking = no strict locking = no create mask = 777 directory mask = 777 force directory mode = 777 security = share [Share] path = /home/project browseable = yes guest ok = yes read only = no hide files = /lost+found/ force directory mode = 777 force create mode = 666 directory mask = 777 create mask = 666 and this security=user [Share] path = /home/project public = yes writeable = yes browseable = yes guest ok = yes guest account = Everyone create mask = 777 directory mask = 777 I am able to create file and folders, but folders I create I can't take ownership and is still lock. Any ideas? Sharing Ubuntu volume and mounting it into windows 7. So want so there's no security tab when checking the properties in Windows and just have all read and write. Thanks, Jessica Hi Jessica, there are many ways to accomplish this. A completely open way - were _any_ connected user is allowed to do anything with _all_ files/dirs - could be: [global] security = user map to guest = bad user guest account = nobody # see later note more to come from your original smb.conf [Share] comment = public access (all access is done as guest account) path = /home/project read only = No browseable = yes guest ok = yes guest only = yes inherit owner = yes inherit permissions = yes To be 100% certain, add force user = nobody to the sahre definition. Volker -- SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen phone: +49-551-37-0, fax: +49-551-37-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen http://www.sernet.de, mailto:kont...@sernet.de -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] msgbox empty when trying to connect
Hello I've the following event which happens when I try to connect a XP SP3 Pro to samba 3.5 domain : * Administrators of the domain can log in. * Users of the domain can't. An empty msgbox appears and that's all. If I give a bad password, it is indicated so the user is seen in samba. * root preexec is not executed for this user. * no directory is created in Documents and Settings * for others XP machines all works well. The machine is a Lenovo R60 ... I've tried to put in registry Open a local session the user but it has changed nothing. Any help would be appreciate ... Thanks -- Hervé Hénoch Responsable informatique Institut Sainte Catherine 1750, chemin du Lavarin, 84000 Avignon Téléphone : 04.90.27.57.44 Messagerie : h.hen...@isc84.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] All read and write
What are your rights from prompt: Ls -la yourshare Does other have drwxr-xr-x If your path is within another directory, other must have the x options even in the directory above. This solved a nearly the same problem for me in CENTOS. --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de Internet: www.tropenklinik.de --- -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von Volker Lendecke Gesendet: Freitag, 16. Dezember 2011 07:38 An: Günter Kukkukk Cc: samba@lists.samba.org; Jessica Guynn Betreff: Re: [Samba] All read and write On Fri, Dec 16, 2011 at 02:56:08AM +0100, Günter Kukkukk wrote: On Friday 16 December 2011 00:37:12 Jessica Guynn wrote: BTW, this is my smbstatus: PID UID DenyMode Access R/W OpLock Share 5773 65534 DENY_NONE 0x100081RDONLY NONE /home/project On Thu, Dec 15, 2011 at 2:35 PM, Jessica Guynn jessgu...@gmail.com wrote: Got few help, but still not working. Anyone know the configuration for full read and write for everyone. So no security needed or permission, ownership, or objects. Just full read and write for everyone. All the different configurations that I have tried (these are 3 separate smb.conf config and NOT all together): security = SHARE [Share] path = /home/project public = yes writeable = yes read only = no browseable = yes locking = no strict locking = no create mask = 777 directory mask = 777 force directory mode = 777 security = share [Share] path = /home/project browseable = yes guest ok = yes read only = no hide files = /lost+found/ force directory mode = 777 force create mode = 666 directory mask = 777 create mask = 666 and this security=user [Share] path = /home/project public = yes writeable = yes browseable = yes guest ok = yes guest account = Everyone create mask = 777 directory mask = 777 I am able to create file and folders, but folders I create I can't take ownership and is still lock. Any ideas? Sharing Ubuntu volume and mounting it into windows 7. So want so there's no security tab when checking the properties in Windows and just have all read and write. Thanks, Jessica Hi Jessica, there are many ways to accomplish this. A completely open way - were _any_ connected user is allowed to do anything with _all_ files/dirs - could be: [global] security = user map to guest = bad user guest account = nobody # see later note more to come from your original smb.conf [Share] comment = public access (all access is done as guest account) path = /home/project read only = No browseable = yes guest ok = yes guest only = yes inherit owner = yes inherit permissions = yes To be 100% certain, add force user = nobody to the sahre definition. Volker -- SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen phone: +49-551-37-0, fax: +49-551-37-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen http://www.sernet.de, mailto:kont...@sernet.de -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 19078b9 s3:smbd/globals: remove unused msg_ctx_to_sconn() via 0345551 s3:smbd: pass smbd_server_connection and a snumused function pointer to reload_services() via 5061dd2 s3:printing/spoolssd: pass event and messaging context to check_updater_child() via 06c1c33 s3:rpc_server/spoolss: remove reload_services check from delete_printer_hook() via e412b8b s3:smbd: split smb_conf_updated into parent and child versions via 715933a s3:smbd: split ID_CACHE_* message handling into parent and child parts from 0429471 lib/ccan: Fix some typos in libccan.m4 http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 19078b9b0564ed2654a1dae1d23488f89aadb41f Author: Stefan Metzmacher me...@samba.org Date: Wed Dec 14 13:26:36 2011 +0100 s3:smbd/globals: remove unused msg_ctx_to_sconn() metze Autobuild-User: Stefan Metzmacher me...@samba.org Autobuild-Date: Thu Dec 15 14:24:59 CET 2011 on sn-devel-104 commit 03455519e70253cb86007ac5a8960999e9aa5fa4 Author: Stefan Metzmacher me...@samba.org Date: Wed Dec 14 13:25:20 2011 +0100 s3:smbd: pass smbd_server_connection and a snumused function pointer to reload_services() metze commit 5061dd26d314baf38c7e8b3f8e495579baba49de Author: Stefan Metzmacher me...@samba.org Date: Wed Dec 14 11:12:49 2011 +0100 s3:printing/spoolssd: pass event and messaging context to check_updater_child() metze commit 06c1c338e3fcaf6460f4e462c7f881ce2abc9ac7 Author: Stefan Metzmacher me...@samba.org Date: Thu Dec 15 11:03:29 2011 +0100 s3:rpc_server/spoolss: remove reload_services check from delete_printer_hook() As the spoolss code can run embedded or external relative to the smbd file server process, it's very tricky to verify if a share is still in use. Checking the result of the deleteprinter command command should be enough to check for success. We should not return WERR_ACCESS_DENIED if the share is still in use, by the current client, as the primary printer definition is already deleted. metze commit e412b8bfcce46720b913d42ac7f56d4e024162f0 Author: Stefan Metzmacher me...@samba.org Date: Wed Dec 14 12:39:36 2011 +0100 s3:smbd: split smb_conf_updated into parent and child versions metze commit 715933a3d3d1023df0d77c1765850e8579b84dfc Author: Stefan Metzmacher me...@samba.org Date: Wed Dec 14 10:23:30 2011 +0100 s3:smbd: split ID_CACHE_* message handling into parent and child parts metze --- Summary of changes: source3/Makefile.in |2 +- source3/printing/spoolssd.c |9 +- source3/rpc_server/spoolss/srv_spoolss_nt.c | 20 ++-- source3/smbd/globals.c | 13 -- source3/smbd/globals.h |2 - source3/smbd/msg_idmap.c| 174 --- source3/smbd/negprot.c |4 +- source3/smbd/process.c | 138 +- source3/smbd/proto.h|7 +- source3/smbd/reply.c|2 +- source3/smbd/server.c | 74 +--- source3/smbd/server_reload.c| 20 ++-- source3/smbd/sesssetup.c| 10 +- source3/smbd/smb2_sesssetup.c |2 +- source3/torture/vfstest.c |2 +- source3/wscript_build |2 +- 16 files changed, 232 insertions(+), 249 deletions(-) delete mode 100644 source3/smbd/msg_idmap.c Changeset truncated at 500 lines: diff --git a/source3/Makefile.in b/source3/Makefile.in index b0c17f6..1389293 100644 --- a/source3/Makefile.in +++ b/source3/Makefile.in @@ -914,7 +914,7 @@ AUTH_OBJ = auth/auth.o @AUTH_STATIC@ auth/auth_util.o auth/token_util.o \ MANGLE_OBJ = smbd/mangle.o smbd/mangle_hash.o smbd/mangle_hash2.o -SMBD_OBJ_MAIN = smbd/server.o smbd/server_exit.o smbd/msg_idmap.o +SMBD_OBJ_MAIN = smbd/server.o smbd/server_exit.o BUILDOPT_OBJ = smbd/build_options.o diff --git a/source3/printing/spoolssd.c b/source3/printing/spoolssd.c index 06ce61b..fa722e2 100644 --- a/source3/printing/spoolssd.c +++ b/source3/printing/spoolssd.c @@ -489,7 +489,8 @@ static void spoolss_handle_client(struct tevent_req *req) extern pid_t background_lpq_updater_pid; static char *bq_logfile; -static void check_updater_child(void) +static void check_updater_child(struct tevent_context *ev_ctx, + struct messaging_context *msg_ctx) { int status; pid_t pid; @@ -501,9 +502,7 @@ static void check_updater_child(void) pid = sys_waitpid(background_lpq_updater_pid, status, WNOHANG); if (pid 0) {
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 8eeb3ff s3-dbwrap: All relevant backends provide parse_record(). Remove the fallback. via f6d8f74 s3-dbwrap: Remove the fetch db_context callback via b5d056c s3-dbwrap: Rewrite dbwrap_fetch in terms of dbwrap_parse_record via 77dca70 s3-dbwrap: Rewrite dbwrap_fallback_parse_record based on dbwrap_fetch_locked via daa3654 s3-dbwrap: For nostalgic reasons, make dbwrap_file.c compile at least via 29f62bb s3-dbwrap: Fix some blank line endings via 098048a s3-dbwrap: Implement db_ctdb_parse_record in terms of db_ctdb_fetch via 26fc729 s3-dbwrap: Make dbwrap_parse_record return NTSTATUS from 19078b9 s3:smbd/globals: remove unused msg_ctx_to_sconn() http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 8eeb3ff753b36f8d33ae55a9ab2d8cc52fffa1a4 Author: Volker Lendecke v...@samba.org Date: Fri Dec 9 11:22:50 2011 +0100 s3-dbwrap: All relevant backends provide parse_record(). Remove the fallback. Signed-off-by: Michael Adam ob...@samba.org Autobuild-User: Michael Adam ob...@samba.org Autobuild-Date: Thu Dec 15 17:41:53 CET 2011 on sn-devel-104 commit f6d8f7440c4f7e25574045a4e42a770d48d4c43d Author: Volker Lendecke v...@samba.org Date: Thu Dec 8 16:46:09 2011 +0100 s3-dbwrap: Remove the fetch db_context callback Signed-off-by: Michael Adam ob...@samba.org commit b5d056ca231f67b4c6fd608ecbe6f83f1823a33b Author: Volker Lendecke v...@samba.org Date: Thu Dec 8 16:43:40 2011 +0100 s3-dbwrap: Rewrite dbwrap_fetch in terms of dbwrap_parse_record Signed-off-by: Michael Adam ob...@samba.org commit 77dca703504044412872b7e9ad4d2c9c1971ba32 Author: Volker Lendecke v...@samba.org Date: Thu Dec 8 16:37:40 2011 +0100 s3-dbwrap: Rewrite dbwrap_fallback_parse_record based on dbwrap_fetch_locked This is in preparation to remove the db_context-fetch function pointer Signed-off-by: Michael Adam ob...@samba.org commit daa365493e3fd7b7a664628e48438e7938fa4628 Author: Volker Lendecke v...@samba.org Date: Thu Dec 8 16:05:08 2011 +0100 s3-dbwrap: For nostalgic reasons, make dbwrap_file.c compile at least Signed-off-by: Michael Adam ob...@samba.org commit 29f62bbed792da4236a299100d0e227df5e423a5 Author: Volker Lendecke v...@samba.org Date: Thu Dec 8 16:04:19 2011 +0100 s3-dbwrap: Fix some blank line endings Signed-off-by: Michael Adam ob...@samba.org commit 098048a89c4ce14b17a0151dcb64c7cdf06f4152 Author: Volker Lendecke v...@samba.org Date: Thu Dec 8 15:56:35 2011 +0100 s3-dbwrap: Implement db_ctdb_parse_record in terms of db_ctdb_fetch Signed-off-by: Michael Adam ob...@samba.org commit 26fc72921f7b72dfebfe8394baa85b81ef66d26d Author: Volker Lendecke v...@samba.org Date: Thu Dec 8 15:50:33 2011 +0100 s3-dbwrap: Make dbwrap_parse_record return NTSTATUS Also, the parser now returns void. The parser is called if and only if dbwrap_parse_record returns NT_STATUS_OK. Signed-off-by: Michael Adam ob...@samba.org --- Summary of changes: source3/lib/dbwrap/dbwrap.c | 100 +- source3/lib/dbwrap/dbwrap.h |8 ++-- source3/lib/dbwrap/dbwrap_ctdb.c| 20 +++- source3/lib/dbwrap/dbwrap_file.c| 33 +++- source3/lib/dbwrap/dbwrap_private.h | 10 ++-- source3/lib/dbwrap/dbwrap_rbt.c | 33 ++-- source3/lib/dbwrap/dbwrap_tdb.c | 101 +++ source3/lib/serverid.c | 10 ++-- 8 files changed, 126 insertions(+), 189 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/lib/dbwrap/dbwrap.c b/source3/lib/dbwrap/dbwrap.c index a806c6a..c551bfd 100644 --- a/source3/lib/dbwrap/dbwrap.c +++ b/source3/lib/dbwrap/dbwrap.c @@ -25,61 +25,15 @@ #include util_tdb.h /* - * Fall back using fetch_locked if no genuine fetch operation is provided - */ - -static NTSTATUS dbwrap_fallback_fetch(struct db_context *db, - TALLOC_CTX *mem_ctx, - TDB_DATA key, TDB_DATA *data) -{ - struct db_record *rec; - - rec = dbwrap_fetch_locked(db, mem_ctx, key); - if (rec == NULL) { - return NT_STATUS_UNSUCCESSFUL; - } - - data-dsize = rec-value.dsize; - data-dptr = talloc_move(mem_ctx, rec-value.dptr); - TALLOC_FREE(rec); - return NT_STATUS_OK; -} - -/* * Fall back using fetch if no genuine exists operation is provided */ static int dbwrap_fallback_exists(struct db_context *db, TDB_DATA key) { - int res = dbwrap_parse_record(db, key, NULL, NULL); - return ( res == -1) ? 0 : 1; + NTSTATUS status = dbwrap_parse_record(db, key, NULL, NULL); +
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via d0330c7 s3-libsmb: Don't duplicate kerberos service tickets. from 8eeb3ff s3-dbwrap: All relevant backends provide parse_record(). Remove the fallback. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit d0330c7dd64b320cd86e2341b31da6be81ba829b Author: Andreas Schneider a...@samba.org Date: Mon Nov 21 18:19:43 2011 +0100 s3-libsmb: Don't duplicate kerberos service tickets. This fixes bug #8628. Each time we do a client connection. Each time we call to function to get the service ticket from the cache we duplicate it. So with each connection we end up with one or three duplicated tickets. Autobuild-User: Andreas Schneider a...@cryptomilk.org Autobuild-Date: Thu Dec 15 19:30:42 CET 2011 on sn-devel-104 --- Summary of changes: source3/libsmb/clikrb5.c |5 - 1 files changed, 0 insertions(+), 5 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/libsmb/clikrb5.c b/source3/libsmb/clikrb5.c index c083af2..6a11def 100644 --- a/source3/libsmb/clikrb5.c +++ b/source3/libsmb/clikrb5.c @@ -1817,11 +1817,6 @@ krb5_error_code smb_krb5_get_credentials(krb5_context context, goto done; } - ret = krb5_cc_store_cred(context, ccache, creds); - if (ret) { - goto done; - } - if (out_creds) { *out_creds = creds; } -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 851b9e9 s3:vfs fix up vfs_gpfs after function pointer renames from d0330c7 s3-libsmb: Don't duplicate kerberos service tickets. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 851b9e9183ef598269aeb6c57f237a2599d701fa Author: Christian Ambach a...@samba.org Date: Thu Dec 15 14:31:03 2011 +0100 s3:vfs fix up vfs_gpfs after function pointer renames In 422494a8e630e2ca89386344eaa5346388698a32, vfs_gpfs.c was forgotten Autobuild-User: Christian Ambach a...@samba.org Autobuild-Date: Thu Dec 15 21:08:02 CET 2011 on sn-devel-104 --- Summary of changes: source3/modules/vfs_gpfs.c | 50 ++-- 1 files changed, 25 insertions(+), 25 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/modules/vfs_gpfs.c b/source3/modules/vfs_gpfs.c index d879124..ba6ec6d 100644 --- a/source3/modules/vfs_gpfs.c +++ b/source3/modules/vfs_gpfs.c @@ -1323,32 +1323,32 @@ static int vfs_gpfs_open(struct vfs_handle_struct *handle, static struct vfs_fn_pointers vfs_gpfs_fns = { .connect_fn = vfs_gpfs_connect, - .fs_capabilities = vfs_gpfs_capabilities, - .kernel_flock = vfs_gpfs_kernel_flock, -.linux_setlease = vfs_gpfs_setlease, -.get_real_filename = vfs_gpfs_get_real_filename, -.fget_nt_acl = gpfsacl_fget_nt_acl, -.get_nt_acl = gpfsacl_get_nt_acl, -.fset_nt_acl = gpfsacl_fset_nt_acl, -.sys_acl_get_file = gpfsacl_sys_acl_get_file, -.sys_acl_get_fd = gpfsacl_sys_acl_get_fd, -.sys_acl_set_file = gpfsacl_sys_acl_set_file, -.sys_acl_set_fd = gpfsacl_sys_acl_set_fd, -.sys_acl_delete_def_file = gpfsacl_sys_acl_delete_def_file, -.chmod = vfs_gpfs_chmod, -.fchmod = vfs_gpfs_fchmod, -.close_fn = vfs_gpfs_close, -.setxattr = gpfs_set_xattr, -.getxattr = gpfs_get_xattr, -.stat = vfs_gpfs_stat, -.fstat = vfs_gpfs_fstat, -.lstat = vfs_gpfs_lstat, - .ntimes = vfs_gpfs_ntimes, - .is_offline = vfs_gpfs_is_offline, - .aio_force = vfs_gpfs_aio_force, - .sendfile = vfs_gpfs_sendfile, + .fs_capabilities_fn = vfs_gpfs_capabilities, + .kernel_flock_fn = vfs_gpfs_kernel_flock, + .linux_setlease_fn = vfs_gpfs_setlease, + .get_real_filename_fn = vfs_gpfs_get_real_filename, + .fget_nt_acl_fn = gpfsacl_fget_nt_acl, + .get_nt_acl_fn = gpfsacl_get_nt_acl, + .fset_nt_acl_fn = gpfsacl_fset_nt_acl, + .sys_acl_get_file_fn = gpfsacl_sys_acl_get_file, + .sys_acl_get_fd_fn = gpfsacl_sys_acl_get_fd, + .sys_acl_set_file_fn = gpfsacl_sys_acl_set_file, + .sys_acl_set_fd_fn = gpfsacl_sys_acl_set_fd, + .sys_acl_delete_def_file_fn = gpfsacl_sys_acl_delete_def_file, + .chmod_fn = vfs_gpfs_chmod, + .fchmod_fn = vfs_gpfs_fchmod, + .close_fn = vfs_gpfs_close, + .setxattr_fn = gpfs_set_xattr, + .getxattr_fn = gpfs_get_xattr, + .stat_fn = vfs_gpfs_stat, + .fstat_fn = vfs_gpfs_fstat, + .lstat_fn = vfs_gpfs_lstat, + .ntimes_fn = vfs_gpfs_ntimes, + .is_offline_fn = vfs_gpfs_is_offline, + .aio_force_fn = vfs_gpfs_aio_force, + .sendfile_fn = vfs_gpfs_sendfile, .open_fn = vfs_gpfs_open, - .ftruncate = vfs_gpfs_ftruncate + .ftruncate_fn = vfs_gpfs_ftruncate }; NTSTATUS vfs_gpfs_init(void); -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 1355f0a s3: Fix a typo from 851b9e9 s3:vfs fix up vfs_gpfs after function pointer renames http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 1355f0ac8c3bd9067c06de7c103e4f571b97b08a Author: Volker Lendecke v...@samba.org Date: Thu Dec 15 15:48:33 2011 +0100 s3: Fix a typo Autobuild-User: Volker Lendecke vlen...@samba.org Autobuild-Date: Thu Dec 15 23:35:28 CET 2011 on sn-devel-104 --- Summary of changes: source3/locking/locking.c |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/locking/locking.c b/source3/locking/locking.c index 39d3f28..35ae758 100644 --- a/source3/locking/locking.c +++ b/source3/locking/locking.c @@ -29,7 +29,7 @@ September 1997. Jeremy Allison (jalli...@whistle.com). Added oplock support. - rewrtten completely to use new tdb code. Tridge, Dec '99 + rewritten completely to use new tdb code. Tridge, Dec '99 Added POSIX locking support. Jeremy Allison (jer...@valinux.com), Apr. 2000. Added Unix Extensions POSIX locking support. Jeremy Allison Mar 2006. -- Samba Shared Repository
autobuild: intermittent test failure detected
The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2011-12-16-0022/flakey.log The samba3 build logs are available here: http://git.samba.org/autobuild.flakey/2011-12-16-0022/samba3.stderr http://git.samba.org/autobuild.flakey/2011-12-16-0022/samba3.stdout The source4 build logs are available here: http://git.samba.org/autobuild.flakey/2011-12-16-0022/samba4.stderr http://git.samba.org/autobuild.flakey/2011-12-16-0022/samba4.stdout The top commit at the time of the failure was: commit 1355f0ac8c3bd9067c06de7c103e4f571b97b08a Author: Volker Lendecke v...@samba.org Date: Thu Dec 15 15:48:33 2011 +0100 s3: Fix a typo Autobuild-User: Volker Lendecke vlen...@samba.org Autobuild-Date: Thu Dec 15 23:35:28 CET 2011 on sn-devel-104
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via d62de8d lib/param: Set s4 host msdfs = true by default via 77a551d loadparm: fixed service list handling via fae42c1 pidfile: use set_close_on_exec() via 9f4c3da s4-socket: use set_close_on_exec() via d581c9d genrand: use set_close_on_exec() via 3b56f64 lib/util: added set_close_on_exec() via 9782501 dynconfig: added SBINDIR and BINDIR as updated dynconfig variables from 1355f0a s3: Fix a typo http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit d62de8d83e451a8c562dd59d8599c2a325c7ac1f Author: Andrew Bartlett abart...@samba.org Date: Fri Dec 16 09:26:04 2011 +1100 lib/param: Set s4 host msdfs = true by default This matches the s3 loadparm, and makes this feature available by default for our users in a DC environment. (This is needed for the correct operation of GPOs). Andrew Bartlett Autobuild-User: Andrew Bartlett abart...@samba.org Autobuild-Date: Fri Dec 16 01:08:34 CET 2011 on sn-devel-104 commit 77a551d613059fd2df0fbfbd86f206c2b59e91a7 Author: Andrew Tridgell tri...@samba.org Date: Tue Dec 6 11:30:24 2011 +1100 loadparm: fixed service list handling when you have: server services = +smb -s3fs and 'smb' is already in the list, then this should not be an error. This ensures that a config that specifically sets the services it wants doesn't generate an error if the service list being set happens to be the default commit fae42c1f41435bf087c23d384cd6147dd9f7f4ef Author: Andrew Tridgell tri...@samba.org Date: Wed Nov 30 15:18:54 2011 +1100 pidfile: use set_close_on_exec() this prevents a fd leak to child processes commit 9f4c3da734adbabf457074563f3fb3fae7b85585 Author: Andrew Tridgell tri...@samba.org Date: Wed Nov 30 15:18:45 2011 +1100 s4-socket: use set_close_on_exec() this prevents a fd leak to child processes commit d581c9d284e7c635b0379d57e95cb32e682f0f02 Author: Andrew Tridgell tri...@samba.org Date: Wed Nov 30 15:18:08 2011 +1100 genrand: use set_close_on_exec() this prevents a fd leak to child processes commit 3b56f64923a71a90734c5167d549e4eb14002d18 Author: Andrew Tridgell tri...@samba.org Date: Wed Nov 30 15:17:47 2011 +1100 lib/util: added set_close_on_exec() this was already in tevent_util.c, but library layering prevented us from using it in some other libraries commit 9782501f0b9fafa171c4ed830abd8433b0be1f1b Author: Andrew Tridgell tri...@samba.org Date: Wed Nov 30 10:07:30 2011 +1100 dynconfig: added SBINDIR and BINDIR as updated dynconfig variables this allows these to work correctly in a build environment, pointing at bin/ --- Summary of changes: dynconfig/wscript|2 ++ lib/param/loadparm.c | 20 ++-- lib/util/blocking.c | 18 ++ lib/util/genrand.c |9 + lib/util/samba_util.h|5 + source4/lib/socket/socket_ip.c |4 source4/lib/socket/socket_unix.c |4 source4/smbd/pidfile.c |2 ++ 8 files changed, 50 insertions(+), 14 deletions(-) Changeset truncated at 500 lines: diff --git a/dynconfig/wscript b/dynconfig/wscript index 28f6e8d..374ede2 100755 --- a/dynconfig/wscript +++ b/dynconfig/wscript @@ -340,6 +340,8 @@ def dynconfig_cflags(bld, list=None): override = { 'MODULESDIR': 'bin/modules', 'PYTHONDIR' : 'bin/python', 'PYTHONARCHDIR' : 'bin/python', + 'BINDIR': 'bin', + 'SBINDIR' : 'bin', 'CODEPAGEDIR' : os.path.join(bld.env.srcdir, 'codepages'), 'SCRIPTSBINDIR' : os.path.join(bld.env.srcdir, 'source4/scripting/bin'), 'SETUPDIR' : os.path.join(bld.env.srcdir, 'source4/setup') } diff --git a/lib/param/loadparm.c b/lib/param/loadparm.c index 48b5221..8ed9ced 100644 --- a/lib/param/loadparm.c +++ b/lib/param/loadparm.c @@ -2509,23 +2509,13 @@ static bool set_variable(TALLOC_CTX *mem_ctx, int parmnum, void *parm_ptr, char **new_list = str_list_make(mem_ctx, pszParmValue, NULL); for (i=0; new_list[i]; i++) { - if (new_list[i][0] == '+' new_list[i][1] - (!str_list_check(*(const char ***)parm_ptr, -new_list[i][1]))) { - *(const char ***)parm_ptr = str_list_add(*(const char ***)parm_ptr, - new_list[i][1]);
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via c5cbe48 Third part of fix for bug #8663 - deleting a symlink fails if the symlink target is outside of the share. via f448c0e Second part of fix for bug #8663 - deleting a symlink fails if the symlink target is outside of the share. via 8eca223 First part of fix for bug #8663 - deleting a symlink fails if the symlink target is outside of the share. from d62de8d lib/param: Set s4 host msdfs = true by default http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit c5cbe481a759316be5d598123233cc859078d74a Author: Jeremy Allison j...@samba.org Date: Thu Dec 15 16:55:32 2011 -0800 Third part of fix for bug #8663 - deleting a symlink fails if the symlink target is outside of the share. smbd_check_access_rights() - we can always delete a symlink. Autobuild-User: Jeremy Allison j...@samba.org Autobuild-Date: Fri Dec 16 03:32:15 CET 2011 on sn-devel-104 commit f448c0e6db1384425e78531150aa1d3f6f8bd951 Author: Jeremy Allison j...@samba.org Date: Thu Dec 15 16:33:37 2011 -0800 Second part of fix for bug #8663 - deleting a symlink fails if the symlink target is outside of the share. Ensure we use UCF_UNIX_NAME_LOOKUP flags on filename_convert() when doing a UNIX infolevel in trans2setfilepathinfo(). commit 8eca2231238d0088b8a25409fdaf5fb2e837b330 Author: Jeremy Allison j...@samba.org Date: Thu Dec 15 16:31:51 2011 -0800 First part of fix for bug #8663 - deleting a symlink fails if the symlink target is outside of the share. Remove two unneeded check_name() calls. They have already been done in order to get here. --- Summary of changes: source3/smbd/open.c | 20 source3/smbd/trans2.c |7 ++- 2 files changed, 14 insertions(+), 13 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/smbd/open.c b/source3/smbd/open.c index 433bc09..9174388 100644 --- a/source3/smbd/open.c +++ b/source3/smbd/open.c @@ -99,6 +99,14 @@ NTSTATUS smbd_check_access_rights(struct connection_struct *conn, return NT_STATUS_OK; } + if (access_mask == DELETE_ACCESS S_ISLNK(smb_fname-st.st_ex_mode)) { + /* We can always delete a symlink. */ + DEBUG(10,(smbd_check_access_rights: not checking ACL + on DELETE_ACCESS on symlink %s.\n, + smb_fname_str_dbg(smb_fname) )); + return NT_STATUS_OK; + } + status = SMB_VFS_GET_NT_ACL(conn, smb_fname-base_name, (SECINFO_OWNER | SECINFO_GROUP | @@ -1723,11 +1731,6 @@ static NTSTATUS open_file_ntcreate(connection_struct *conn, } } - status = check_name(conn, smb_fname-base_name); - if (!NT_STATUS_IS_OK(status)) { - return status; - } - if (!posix_open) { new_dos_attributes = SAMBA_ATTRIBUTES_MASK; if (file_existed) { @@ -3846,13 +3849,6 @@ NTSTATUS create_file_default(connection_struct *conn, } } - /* All file access must go through check_name() */ - - status = check_name(conn, smb_fname-base_name); - if (!NT_STATUS_IS_OK(status)) { - goto fail; - } - if (stream_name is_ntfs_default_stream_smb_fname(smb_fname)) { int ret; smb_fname-stream_name = NULL; diff --git a/source3/smbd/trans2.c b/source3/smbd/trans2.c index 0126419..4417cb2 100644 --- a/source3/smbd/trans2.c +++ b/source3/smbd/trans2.c @@ -8007,6 +8007,7 @@ static void call_trans2setfilepathinfo(connection_struct *conn, } } else { char *fname = NULL; + uint32_t ucf_flags = 0; /* set path info */ if (total_params 7) { @@ -8023,10 +8024,14 @@ static void call_trans2setfilepathinfo(connection_struct *conn, return; } + if (INFO_LEVEL_IS_UNIX(info_level)) { + ucf_flags |= UCF_UNIX_NAME_LOOKUP; + } + status = filename_convert(req, conn, req-flags2 FLAGS2_DFS_PATHNAMES, fname, -0, +ucf_flags, NULL, smb_fname); if (!NT_STATUS_IS_OK(status)) { -- Samba Shared Repository