Re: [Samba] Samba + acl,user_xattr

2011-12-15 Thread Dmitry Mordovin



Added to global section

vfs objects = acl_xattr


No changes. Still dont store DOS attr.

You only need acl_xattr is you want to store Windows ACLs, not DOS attrs.

Have you tried using setfattr on that filesystem ? Does it work ?

Jeremy.


Hello Jeremy!

You are right!

I don't want to store Windows ACLs, need only DOS attrs (hidden file attr).

What Is enough to add to my smb.conf?
'store dos attributes (S)  or 'map hidden (S)' or together or else?

#cat /opt/samba/smb.conf
[global]
pid directory = /opt/samba/run
lock directory = /opt/samba/cache
private dir = /opt/samba/cache
log file = /opt/samba/smbd.log
log level = 10
workgroup = TEST
security = share
show add printer wizard = no
max log size = 10240
bind interfaces only = true
interfaces = eth1

[homes]
browseable = no
printable = no

[public]
path = /mnt/public
comment = 
read only = no
guest ok = yes
follow symlinks = no
writable = yes

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Join Win7 to Samba

2011-12-15 Thread Kai Blin
On 2011-12-15 08:02, Kai Blin wrote:

Hi Piotr,

 These two settings are not related to domain controllers, they
 control if the box wants to be a domain master browser for the
 NetBIOS browsing elections.

Hm, actually the domain master setting does matter for the PDC. It's
really been a while since I last worked with NT4.0 style domains. :)

Still, you might want to make sure the settings are ok using testparm
and then force a browser election. All this NetBIOS browsing is pretty
messy.

Cheers,
Kai
-- 
Kai Blin
Worldforge developer http://www.worldforge.org/
Wine developer http://wiki.winehq.org/KaiBlin
Samba team member http://www.samba.org/samba/team/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] how to set up bind9 dns server for joined samba 4 to server 2003

2011-12-15 Thread Mohammad Ebrahim Abravi
who to join samba as DC to windows without add windows dns?

On Wed, Dec 14, 2011 at 3:23 PM, Mohammad Ebrahim Abravi lamp@gmail.com
 wrote:

 Hi
 Samba4 joined to server 2003 as a DC with this command:

 samba-tool domain join samba.example.com DC -Uadministrator 
 --realm=samba.example.com

 *How to Setup bind 9.7.3 as dns server Instead of windows dns server?*

 

 try this:
 create dns and named files with provision command
 copy dns and named files to joind samba
 config bind and set
  KEYTAB_FILE=/usr/local/samba/private/dns.keytab
  KRB5_KTNAME=/usr/local/samba/private/dns.keytab
  export KEYTAB_FILE
  export KRB5_KTNAME
 ...
 ...
 ...
 and all other thing (need for setting on single samba 4 dc)

 run samba_dnsupdate
 dns_tkey_negotiategss: TKEY is unacceptable
 Failed update of 1 entries

 *some times see this error in syslog:*

 Dec 14 10:46:55 samba named[9305]: client 192.168.60.247#1161: updating zone 
 'samba.example.com./IN': update unsuccessful: your-pc.samba.example.com/A: 
 'RRset exists (value dependent)' prerequisite not satisfied (NXRRSET)

 Dec 14 10:46:55 samba named[9305]: client 192.168.60.247#1164: update 
 'samba.example.com/IN' denie
 



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Weird Samba issues

2011-12-15 Thread Danilo Godec
I manage a Samba server that has been working nicely for a couple of 
months (after it replace the old Samba server which worked happily for 
years). We use LDAP for accounts, but don't use domain logons or 
anything fancy.


All users have their home dir on Samba mapped to drive 'M:'. In their 
home, there are symbolic links to various directories they're entitled 
to access. Links and file-system permissions are periodically maintained 
by a shell script based on user's groups (fetched from nsswitch) and 
this worked well with the old server and it seemed to work well for a 
couple of months now.


Generally users only use the 'homes' share, while admins use some 
additional shares like 'backup'.


About a week or two ago users started reporting their 'Explorer' windows 
are freezing while using the share and things seem to be getting worse 
(more and more users complain).


So I did a bit of testing on my own and can indeed confirm that while 
browsing the directories on the 'M:' drive, the 'Explorer' window 
sometimes becomes unresponsive - if I let it be for long enough it then 
reports an error:



'An error occurred while reconnecting M: to \\mdisk\user1
Microsoft Windows Network : The local device name is already in use
This connection has not been restored'


While waiting, I'm able to fire up another Explorer window and browse 
those same directories with no issues, unless it -seemingly randomly- 
happens on that windows too, but I can then open a third windows and 
work there. Of course users are not happy with that 'solution'.


Looking at the workstation log file there are no obvious errors. The 
only thing that is a bit odd are lines like ths:



[2011/12/15 14:18:04.263224,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
  init_sam_from_ldap: Entry found for user: user9
[2011/12/15 14:19:18.083636,  2] passdb/pdb_ldap.c:572(init_sam_from_ldap)
  init_sam_from_ldap: Entry found for user: user3




Where 'user3' and 'user9' are NOT the username I'm really logged in with 
(and it's not limited to just those two users).


Looking at 'nmbd' log file, this is what it looks like after restarting it:


[2011/12/15 14:39:52,  0] nmbd/nmbd.c:857(main)
  nmbd version 3.5.4-5.11.1-2573-SUSE-SL11.3 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2010
[2011/12/15 14:39:52.978706,  2] 
lib/tallocmsg.c:106(register_msg_pool_usage)

  Registered MSG_REQ_POOL_USAGE
[2011/12/15 14:39:52.978746,  2] 
lib/dmallocmsg.c:77(register_dmalloc_msgs)

  Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
[2011/12/15 14:39:52.978908,  2] param/loadparm.c:7296(handle_include)
  Can't find include file /etc/samba/dhcp.conf
[2011/12/15 14:39:52.979316,  2] nmbd/nmbd.c:890(main)
  Becoming a daemon.
[2011/12/15 14:39:52.980906,  0] nmbd/asyncdns.c:155(start_async_dns)
  started asyncdns process 25834
[2011/12/15 14:39:52.982597,  2] lib/interface.c:478(interpret_interface)
  interpret_interface: Adding interface 192.168.1.3/17
[2011/12/15 14:39:52.982637,  2] lib/interface.c:340(add_interface)
  added interface 192.168.1.3/17 ip=192.168.1.3 bcast=192.168.127.255 
netmask=255.255.128.0

[2011/12/15 14:39:52.982738,  2] lib/interface.c:340(add_interface)
  added interface lo ip=127.0.0.1 bcast=127.255.255.255 netmask=255.0.0.0
[2011/12/15 14:39:52.982779,  2] nmbd/nmbd_subnetdb.c:299(create_subnets)
  create_subnets: Ignoring loopback interface.
[2011/12/15 14:39:52.982905,  2] nmbd/nmbd_subnetdb.c:171(make_subnet)
  making subnet name:192.168.1.3 Broadcast address:192.168.127.255 
Subnet mask:255.255.128.0

[2011/12/15 14:39:52.982938,  2] nmbd/nmbd_subnetdb.c:171(make_subnet)
  making subnet name:UNICAST_SUBNET Broadcast address:127.0.0.1 Subnet 
mask:127.0.0.1

[2011/12/15 14:39:52.982966,  2] nmbd/nmbd_subnetdb.c:171(make_subnet)
  making subnet name:REMOTE_BROADCAST_SUBNET Broadcast address:0.0.0.0 
Subnet mask:0.0.0.0

[2011/12/15 14:39:52.982994,  2] nmbd/nmbd_subnetdb.c:171(make_subnet)
  making subnet name:WINS_SERVER_SUBNET Broadcast address:0.0.0.0 
Subnet mask:0.0.0.0
[2011/12/15 14:39:57.008772,  2] 
nmbd/nmbd_elections.c:107(check_for_master_browser_fail)
  check_for_master_browser_fail: Forcing election on workgroup ZAG 
subnet 192.168.1.3
[2011/12/15 14:39:59.436528,  2] 
nmbd/nmbd_elections.c:40(send_election_dgram)
  send_election_dgram: Sending election packet for workgroup ZAG on 
subnet 192.168.1.3
[2011/12/15 14:40:01.015802,  2] 
nmbd/nmbd_elections.c:40(send_election_dgram)
  send_election_dgram: Sending election packet for workgroup ZAG on 
subnet 192.168.1.3
[2011/12/15 14:40:03.018011,  2] 
nmbd/nmbd_elections.c:40(send_election_dgram)
  send_election_dgram: Sending election packet for workgroup ZAG on 
subnet 192.168.1.3
[2011/12/15 14:40:04.372942,  2] 
nmbd/nmbd_elections.c:40(send_election_dgram)
  send_election_dgram: Sending election packet for workgroup ZAG on 
subnet 192.168.1.3
[2011/12/15 14:40:07.059608,  2] 
nmbd/nmbd_elections.c:40(send_election_dgram)
  send_election_dgram: 

Re: [Samba] bind errors for latest samba 4 checkout [solved]

2011-12-15 Thread steve

On 12/14/2011 09:12 AM, steve wrote:

On 12/09/2011 07:38 PM, Dale Schroeder wrote:

Yes, that seems to explain it. I have
 listen-on-v6 { any; };
in /etc/named.conf

I think that this should be commented (#) as I don't have any ip6 
addresses.
Can confirm that commenting the line removes the error. I now have a 
squeaky clean bind:)


For a default openSUSE 12.1 with Samba 4 git from today, /etc/named.conf 
looks like this:


options {
directory /var/lib/named;
managed-keys-directory /var/lib/named/dyn/;
dump-file /var/log/named_dump.db;
statistics-file /var/log/named.stats;
 notify no;
disable-empty-zone 
1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA;

include /etc/named.d/forwarders.conf;
};

zone . in {
type hint;
file root.hint;
};
zone localhost in {
type master;
file localhost.zone;
};
zone 0.0.127.in-addr.arpa in {
type master;
file 127.0.0.zone;
};
zone 
0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa 
in {

type master;
file 127.0.0.zone;
};

include /etc/named.conf.include;
include /usr/local/samba/private/named.conf;

Steve
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] how to improve smb2 performance..

2011-12-15 Thread David Roid
Have you considered you may have already reached the best under your
network condition?

Cheers
-David

2011/12/15 sathishkumar kanagaraj sathish.kanaga...@gmail.com

 Hi,

i am using smb2 max read/write/credits value 5 times the default
 value in smb.conf file. Even this changes i am getting similar performance
 in samba-3.6.1  smb2 protocol in widows 7 client.

 is it correct way to improve I/O performance?

 -Sathish.
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] XP SP3 can't authenticate

2011-12-15 Thread Hervé Hénoch

Hello,

I have a strange problem. I've re-included a XP SP3 pro in my samba 
domain. Only the administrators can authenticate and enter in a windows 
session.


All other users can't.


smb version : 3.3.5

Any help would be appreciate ...

regards

--
Hervé Hénoch
Responsable informatique
Institut Sainte Catherine
1750, chemin du Lavarin, 84000 Avignon
Téléphone : 04.90.27.57.44
Messagerie : h.hen...@isc84.org


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Bind9 dlopen version

2011-12-15 Thread Günter Kukkukk
On Sunday 11 December 2011 15:58:31 Davy Loose wrote:
 Hey guys,
 
 I'm currently using Ubuntu 10.04 for setting up Samba4 and I'm having a
 problem with the dlz_dlopen driver.
 
 I've installed Bind9 from hauke
 (https://launchpad.net/~hauke/+archive/bind9) because the bind9 version
 from the apt-get didn't give me the correct version.
 
 I've included the /usr/local/samba/private/named.conf file in my
 /etc/bind/named.conf, but on starting the bind9 service I get the
 following message:
 
 dlz_dlopen: incorrect version 1 should be 2 in
 '/usr/local/samba/modules/bind9/dlz_bind9.so'
 
 Does anybody have any idea how to fix this problem.
 
 Thank you.

Those 9.9.0.x versions are beta ones from isc.org.
Stable is 9.8.1-P1.

The beta 9.9.0.x needs a change in the samba4 source in
source4/dns_server/dlz_minimal.h 
#define DLZ_DLOPEN_VERSION 1  #define DLZ_DLOPEN_VERSION 2
and a re-build of samba4 is needed.

Cheers, Günter
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] XP SP3 can't authenticate

2011-12-15 Thread Gaiseric Vandal

It might be an issues with group mappings (for the well know groups.)

Can you verify that the  net  groupmap list  shows at a  minimum 
Domain Users and Domain Admins.
If you login as Administrator, can you can network users or groups to 
the local Users group?



Does pdbedit -Lv show the computer account on the PDC.  Does getent 
passwd shows the computer account on the PDC?




On 12/15/2011 11:16 AM, Hervé Hénoch wrote:

Hello,

I have a strange problem. I've re-included a XP SP3 pro in my samba 
domain. Only the administrators can authenticate and enter in a 
windows session.


All other users can't.


smb version : 3.3.5

Any help would be appreciate ...

regards



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] getpeername failed error when signed communications policy enabled

2011-12-15 Thread Jeremy Allison
On Thu, Dec 15, 2011 at 09:10:11AM +, Hilton, David wrote:
 No, the only error that we see is the getpeername failed error in the Samba 
 log for the client machine that is trying to print the job.

Then I doubt it's a signing issue (which makes it strange).

What does a debug level 10 say ?

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] question regarding samba permissions

2011-12-15 Thread Dale Schroeder

On 12/14/2011 4:35 PM, skull wrote:


woudln't work because all the users are in one group anyway.
and i am not allowed to to give read rights do any (i.e. 755)

but theres really no option in smb.conf like read only users =  or
something like that?


read list = user1 user2




Am 13.12.2011 17:56, schrieb Raffael Sahli:

 On Tue, 13 Dec 2011 16:38:41 +0100, skullskul...@gmx.ch   wrote:

 I want to make a subfolder read only for certain users.
 for example: /data/pool is public rwx for all users.
 and now i would like to make a /data/pool/subfolder only rwx for user1

 and

 grant read only permissions to user2 and user3
 how do i do this? any links or direct tips on that?

 You have to change the permission on the filesystem and not with Samba.
 set the owner user1 and a group with all other users. After that change
 the dir mod (chmod 0750)


 my suggestion would be something like this, but as you can imagine it
 didn't work:

 # The general datapool where everyone may rwx
 [pool]
  comment = Datapool
  path = /data/pool
  force directory mode = 700
  force create mode = 770
  create mode = 770
  directory mode = 770
  public = yes
  writable = yes
  printable = no
  valid users = user1 user2 user3

 #My new Protected Subfolder
 [Write Protected Subfolder]
  comment = Write Protected Subfolder
  path = /data/pool/subfolder
  force directory mode = 700
  force create mode = 770
  create mode = 770
  directory mode = 770
  public = yes
  writable = yes
  printable = no
  valid users = user1




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba + acl,user_xattr

2011-12-15 Thread Jeremy Allison
On Thu, Dec 15, 2011 at 12:17:21PM +0400, Dmitry Mordovin wrote:
 
 Added to global section
 
 vfs objects = acl_xattr
 
 
 No changes. Still dont store DOS attr.
 You only need acl_xattr is you want to store Windows ACLs, not DOS attrs.
 
 Have you tried using setfattr on that filesystem ? Does it work ?
 
 Jeremy.
 
 Hello Jeremy!
 
 You are right!
 
 I don't want to store Windows ACLs, need only DOS attrs (hidden file attr).
 
 What Is enough to add to my smb.conf?
 'store dos attributes (S)  or 'map hidden (S)' or together or else?

I use:

   store dos attributes = yes
   map readonly = no
   map system = no
   map hidden = no
   map archive = no

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] samba print notifications

2011-12-15 Thread Tom Ryan
I remember conversing with Jeremy at the beginning of the year re: issues with 
samba's print notifications to clients (specifically XP) with firewalls enabled.

I believe that an option to turn this behavior off was going to be added.

Does anyone know if the option was added and if so, beginning in what version 
and the name of the option?

I'm not having much luck (other then finding my original message :)

Tom
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba print notifications

2011-12-15 Thread Jeremy Allison
On Thu, Dec 15, 2011 at 07:18:03PM +, Tom Ryan wrote:
 I remember conversing with Jeremy at the beginning of the year re: issues 
 with samba's print notifications to clients (specifically XP) with firewalls 
 enabled.
 
 I believe that an option to turn this behavior off was going to be added.
 
 Does anyone know if the option was added and if so, beginning in what version 
 and the name of the option?
 
 I'm not having much luck (other then finding my original message :)

It's called:

print notify backchannel = [yes|no]

and is included in 3.6.0 and above.

Cheers,

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] how to improve smb2 performance..

2011-12-15 Thread sathishkumar kanagaraj
hi,

i am using 1G switch  tried testparm to validate the smb.conf, its
giving like unknown parameter found and ignoring  for smb2 max w

 Have you considered you may have already reached the best under your
 network condition?

 Cheers
 -David

 2011/12/15 sathishkumar kanagaraj sathish.kanaga...@gmail.com

 Hi,

i am using smb2 max read/write/credits value 5 times the default
 value in smb.conf file. Even this changes i am getting similar performance
 in samba-3.6.1  smb2 protocol in widows 7 client.

 is it correct way to improve I/O performance?

 -Sathish.
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] All read and write

2011-12-15 Thread Jessica Guynn
Got few help, but still not working.  Anyone know the configuration for
full read and write for everyone.  So no security needed or permission,
ownership, or objects.  Just full read and write for everyone.

All the different configurations that I have tried (these are 3 separate
smb.conf config and NOT all together):

security = SHARE

[Share]

path = /home/project
public = yes
writeable = yes
read only = no
browseable = yes
locking = no
strict locking = no
create mask = 777
directory mask = 777
force directory mode = 777

security = share

[Share]

   path = /home/project
   browseable = yes
   guest ok = yes
   read only = no
   hide files = /lost+found/
   force directory mode = 777
   force create mode = 666
   directory mask = 777
   create mask = 666

and this

security=user

[Share]
 path = /home/project
 public = yes
 writeable = yes
 browseable = yes
 guest ok = yes
 guest account = Everyone
 create mask = 777
 directory mask = 777

I am able to create file and folders, but folders I create I can't take
ownership and is still lock.  Any ideas?   Sharing Ubuntu volume and
mounting it into windows 7.  So want so there's no security tab when
checking the properties in Windows and just have all read and write.

Thanks,

Jessica
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] All read and write

2011-12-15 Thread Jessica Guynn
BTW, this is my smbstatus:

PID   UID DenyMode  Access   R/W  OpLock  Share
5773 65534  DENY_NONE  0x100081RDONLY   NONE   /home/project

On Thu, Dec 15, 2011 at 2:35 PM, Jessica Guynn jessgu...@gmail.com wrote:

 Got few help, but still not working.  Anyone know the configuration for
 full read and write for everyone.  So no security needed or permission,
 ownership, or objects.  Just full read and write for everyone.

 All the different configurations that I have tried (these are 3 separate
 smb.conf config and NOT all together):

 security = SHARE

 [Share]

 path = /home/project
 public = yes
 writeable = yes
 read only = no
 browseable = yes
 locking = no
 strict locking = no
 create mask = 777
 directory mask = 777
 force directory mode = 777

 security = share

 [Share]

path = /home/project

browseable = yes
guest ok = yes
read only = no
hide files = /lost+found/
force directory mode = 777
force create mode = 666
directory mask = 777
create mask = 666

 and this

 security=user

 [Share]
  path = /home/project
  public = yes
  writeable = yes
  browseable = yes
  guest ok = yes
  guest account = Everyone
  create mask = 777
  directory mask = 777

 I am able to create file and folders, but folders I create I can't take
 ownership and is still lock.  Any ideas?   Sharing Ubuntu volume and
 mounting it into windows 7.  So want so there's no security tab when
 checking the properties in Windows and just have all read and write.

 Thanks,

 Jessica


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] All read and write

2011-12-15 Thread Günter Kukkukk
On Friday 16 December 2011 00:37:12 Jessica Guynn wrote:
 BTW, this is my smbstatus:
 
 PID   UID DenyMode  Access   R/W  OpLock  Share
 5773 65534  DENY_NONE  0x100081RDONLY   NONE   /home/project
 
 On Thu, Dec 15, 2011 at 2:35 PM, Jessica Guynn jessgu...@gmail.com wrote:
  Got few help, but still not working.  Anyone know the configuration for
  full read and write for everyone.  So no security needed or permission,
  ownership, or objects.  Just full read and write for everyone.
  
  All the different configurations that I have tried (these are 3 separate
  smb.conf config and NOT all together):
  
  security = SHARE
  
  [Share]
  
  path = /home/project
  public = yes
  writeable = yes
  read only = no
  browseable = yes
  locking = no
  strict locking = no
  create mask = 777
  directory mask = 777
  force directory mode = 777
  
  security = share
  
  [Share]
  
 path = /home/project
 
 browseable = yes
 guest ok = yes
 read only = no
 hide files = /lost+found/
 force directory mode = 777
 force create mode = 666
 directory mask = 777
 create mask = 666
  
  and this
  
  security=user
  
  [Share]
  
   path = /home/project
   public = yes
   writeable = yes
   browseable = yes
   guest ok = yes
   guest account = Everyone
   create mask = 777
   directory mask = 777
  
  I am able to create file and folders, but folders I create I can't take
  ownership and is still lock.  Any ideas?   Sharing Ubuntu volume and
  mounting it into windows 7.  So want so there's no security tab when
  checking the properties in Windows and just have all read and write.
  
  Thanks,
  
  Jessica
Hi Jessica,
there are many ways to accomplish this.

A completely open way - were _any_ connected user is allowed to
do anything with _all_ files/dirs - could be:

[global]
security = user
map to guest = bad user
guest account = nobody   # see later note
 more to come from your original smb.conf

[Share]
comment = public access (all access is done as guest account)
path = /home/project
read only = No
browseable = yes
guest ok = yes
guest only = yes
inherit owner = yes
inherit permissions = yes
.

Note:
guest account = nobody specifies the linux user who is doing
all file system access. This linux user must exist - and of course
must have proper file system access rights.

Check that user nobody with:
   id nobody
to also list his groups. e.g. here i get:
uid=65534(nobody) gid=65533(nobody) Gruppen=65533(nobody),65534(nogroup)

Now we need to set proper owner, group and permissions to the shared path:
Note that you might have a different group name for nobody.

sudo chown nobody:nobody /home/project/
sudo chmod 0700 /home/project/

I assume here that the shared path is empty at the moment and that
only remote smb users are accessing this path.

If you have further questions, a lot of talk/support is also done
through IRC these days. Often much faster results than with emails.
You can find me as nickname kukks on irc://irc.freenode.net/

Cheers, Günter
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] sambaMungedDial

2011-12-15 Thread Andrew Bartlett
On Mon, 2011-12-12 at 08:17 -0500, Adam Tauno Williams wrote:
 On Mon, 2011-12-12 at 11:22 +0100, Alexander Födisch wrote:
  Hi,
  
  does anybody know how to decode/recode sambaMungedDial attribute? I need to 
  store the terminal server profile path in it 
  but can not find any documentation.
 
 There are a couple of applications that decode/encode sambaMungedDial.
 Looking at their source(s) might help.
 
 For example
 http://gosa.sourcearchive.com/documentation/2.5.8/class__sambaMungedDial_8inc-source.html
 -- 
 System Administrator / OpenGroupware developer: awill...@whitemice.org
 http://www.whitemiceconsulting.com/

It has been quite a saga, but we worked with Microsoft to get all of
this documented.

The first bit is the dialback string for their old Remote Access Server,
the rest is the terminal server stuff needed here.  

http://msdn.microsoft.com/en-us/library/ff635189%28v=PROT.10%29.aspx

See also threads about userParameters on the cifs-protocol list, as we
work out how to deal with this for Samba4.

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba + acl,user_xattr

2011-12-15 Thread Dmitry Mordovin



Hello Jeremy!

You are right!

I don't want to store Windows ACLs, need only DOS attrs (hidden file attr).

What Is enough to add to my smb.conf?
'store dos attributes (S)  or 'map hidden (S)' or together or else?

I use:

store dos attributes = yes
map readonly = no
map system = no
map hidden = no
map archive = no

Jeremy.


Added to smb.conf

Now, when I try to Apply hidden attribute, popup message - Error change 
file attributes. Access Denied.


I suspect this due to Bug 8414 
(https://bugzilla.samba.org/show_bug.cgi?id=8414) for me.


Thank you.

PS: With hacked version of smbd this error happens too.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] All read and write

2011-12-15 Thread Volker Lendecke
On Fri, Dec 16, 2011 at 02:56:08AM +0100, Günter Kukkukk wrote:
 On Friday 16 December 2011 00:37:12 Jessica Guynn wrote:
  BTW, this is my smbstatus:
  
  PID   UID DenyMode  Access   R/W  OpLock  Share
  5773 65534  DENY_NONE  0x100081RDONLY   NONE   /home/project
  
  On Thu, Dec 15, 2011 at 2:35 PM, Jessica Guynn jessgu...@gmail.com wrote:
   Got few help, but still not working.  Anyone know the configuration for
   full read and write for everyone.  So no security needed or permission,
   ownership, or objects.  Just full read and write for everyone.
   
   All the different configurations that I have tried (these are 3 separate
   smb.conf config and NOT all together):
   
   security = SHARE
   
   [Share]
   
   path = /home/project
   public = yes
   writeable = yes
   read only = no
   browseable = yes
   locking = no
   strict locking = no
   create mask = 777
   directory mask = 777
   force directory mode = 777
   
   security = share
   
   [Share]
   
  path = /home/project
  
  browseable = yes
  guest ok = yes
  read only = no
  hide files = /lost+found/
  force directory mode = 777
  force create mode = 666
  directory mask = 777
  create mask = 666
   
   and this
   
   security=user
   
   [Share]
   
path = /home/project
public = yes
writeable = yes
browseable = yes
guest ok = yes
guest account = Everyone
create mask = 777
directory mask = 777
   
   I am able to create file and folders, but folders I create I can't take
   ownership and is still lock.  Any ideas?   Sharing Ubuntu volume and
   mounting it into windows 7.  So want so there's no security tab when
   checking the properties in Windows and just have all read and write.
   
   Thanks,
   
   Jessica
 Hi Jessica,
 there are many ways to accomplish this.
 
 A completely open way - were _any_ connected user is allowed to
 do anything with _all_ files/dirs - could be:
 
 [global]
   security = user
   map to guest = bad user
   guest account = nobody   # see later note
  more to come from your original smb.conf
 
 [Share]
   comment = public access (all access is done as guest account)
   path = /home/project
   read only = No
   browseable = yes
   guest ok = yes
   guest only = yes
   inherit owner = yes
   inherit permissions = yes

To be 100% certain, add force user = nobody to the sahre
definition.

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kont...@sernet.de
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] msgbox empty when trying to connect

2011-12-15 Thread Hervé Hénoch

Hello

I've the following event which happens when I try to connect a XP SP3 
Pro to samba 3.5 domain :


   * Administrators of the domain can log in.
   * Users of the domain can't. An empty msgbox appears and that's all.
 If I give a bad password, it is indicated so the user is seen in
 samba.
   * root preexec is not executed for this user.
   * no directory is created in Documents and Settings
   * for others XP machines all works well.

The machine is a Lenovo R60 ...

I've tried to put in registry Open a local session the user but it has 
changed nothing.


Any help would be appreciate ...

Thanks

--
Hervé Hénoch
Responsable informatique
Institut Sainte Catherine
1750, chemin du Lavarin, 84000 Avignon
Téléphone : 04.90.27.57.44
Messagerie : h.hen...@isc84.org


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] All read and write

2011-12-15 Thread Daniel Müller
What are your rights from prompt:

Ls -la yourshare

Does other have  drwxr-xr-x 
If your path is within another directory, other must have the x options even
in the directory above.
This solved a nearly the same problem for me in CENTOS.


---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---
-Ursprüngliche Nachricht-
Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im
Auftrag von Volker Lendecke
Gesendet: Freitag, 16. Dezember 2011 07:38
An: Günter Kukkukk
Cc: samba@lists.samba.org; Jessica Guynn
Betreff: Re: [Samba] All read and write

On Fri, Dec 16, 2011 at 02:56:08AM +0100, Günter Kukkukk wrote:
 On Friday 16 December 2011 00:37:12 Jessica Guynn wrote:
  BTW, this is my smbstatus:
  
  PID   UID DenyMode  Access   R/W  OpLock  Share
  5773 65534  DENY_NONE  0x100081RDONLY   NONE   /home/project
  
  On Thu, Dec 15, 2011 at 2:35 PM, Jessica Guynn jessgu...@gmail.com
wrote:
   Got few help, but still not working.  Anyone know the configuration
for
   full read and write for everyone.  So no security needed or
permission,
   ownership, or objects.  Just full read and write for everyone.
   
   All the different configurations that I have tried (these are 3
separate
   smb.conf config and NOT all together):
   
   security = SHARE
   
   [Share]
   
   path = /home/project
   public = yes
   writeable = yes
   read only = no
   browseable = yes
   locking = no
   strict locking = no
   create mask = 777
   directory mask = 777
   force directory mode = 777
   
   security = share
   
   [Share]
   
  path = /home/project
  
  browseable = yes
  guest ok = yes
  read only = no
  hide files = /lost+found/
  force directory mode = 777
  force create mode = 666
  directory mask = 777
  create mask = 666
   
   and this
   
   security=user
   
   [Share]
   
path = /home/project
public = yes
writeable = yes
browseable = yes
guest ok = yes
guest account = Everyone
create mask = 777
directory mask = 777
   
   I am able to create file and folders, but folders I create I can't
take
   ownership and is still lock.  Any ideas?   Sharing Ubuntu volume and
   mounting it into windows 7.  So want so there's no security tab when
   checking the properties in Windows and just have all read and write.
   
   Thanks,
   
   Jessica
 Hi Jessica,
 there are many ways to accomplish this.
 
 A completely open way - were _any_ connected user is allowed to
 do anything with _all_ files/dirs - could be:
 
 [global]
   security = user
   map to guest = bad user
   guest account = nobody   # see later note
  more to come from your original smb.conf
 
 [Share]
   comment = public access (all access is done as guest account)
   path = /home/project
   read only = No
   browseable = yes
   guest ok = yes
   guest only = yes
   inherit owner = yes
   inherit permissions = yes

To be 100% certain, add force user = nobody to the sahre
definition.

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kont...@sernet.de
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[SCM] Samba Shared Repository - branch master updated

2011-12-15 Thread Stefan Metzmacher
The branch, master has been updated
   via  19078b9 s3:smbd/globals: remove unused msg_ctx_to_sconn()
   via  0345551 s3:smbd: pass smbd_server_connection and a snumused 
function pointer to reload_services()
   via  5061dd2 s3:printing/spoolssd: pass event and messaging context to 
check_updater_child()
   via  06c1c33 s3:rpc_server/spoolss: remove reload_services check from 
delete_printer_hook()
   via  e412b8b s3:smbd: split smb_conf_updated into parent and child 
versions
   via  715933a s3:smbd: split ID_CACHE_* message handling into parent and 
child parts
  from  0429471 lib/ccan: Fix some typos in libccan.m4

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 19078b9b0564ed2654a1dae1d23488f89aadb41f
Author: Stefan Metzmacher me...@samba.org
Date:   Wed Dec 14 13:26:36 2011 +0100

s3:smbd/globals: remove unused msg_ctx_to_sconn()

metze

Autobuild-User: Stefan Metzmacher me...@samba.org
Autobuild-Date: Thu Dec 15 14:24:59 CET 2011 on sn-devel-104

commit 03455519e70253cb86007ac5a8960999e9aa5fa4
Author: Stefan Metzmacher me...@samba.org
Date:   Wed Dec 14 13:25:20 2011 +0100

s3:smbd: pass smbd_server_connection and a snumused function pointer to 
reload_services()

metze

commit 5061dd26d314baf38c7e8b3f8e495579baba49de
Author: Stefan Metzmacher me...@samba.org
Date:   Wed Dec 14 11:12:49 2011 +0100

s3:printing/spoolssd: pass event and messaging context to 
check_updater_child()

metze

commit 06c1c338e3fcaf6460f4e462c7f881ce2abc9ac7
Author: Stefan Metzmacher me...@samba.org
Date:   Thu Dec 15 11:03:29 2011 +0100

s3:rpc_server/spoolss: remove reload_services check from 
delete_printer_hook()

As the spoolss code can run embedded or external relative to the
smbd file server process, it's very tricky to verify if a share
is still in use.

Checking the result of the deleteprinter command command should
be enough to check for success. We should not return WERR_ACCESS_DENIED
if the share is still in use, by the current client, as the primary
printer definition is already deleted.

metze

commit e412b8bfcce46720b913d42ac7f56d4e024162f0
Author: Stefan Metzmacher me...@samba.org
Date:   Wed Dec 14 12:39:36 2011 +0100

s3:smbd: split smb_conf_updated into parent and child versions

metze

commit 715933a3d3d1023df0d77c1765850e8579b84dfc
Author: Stefan Metzmacher me...@samba.org
Date:   Wed Dec 14 10:23:30 2011 +0100

s3:smbd: split ID_CACHE_* message handling into parent and child parts

metze

---

Summary of changes:
 source3/Makefile.in |2 +-
 source3/printing/spoolssd.c |9 +-
 source3/rpc_server/spoolss/srv_spoolss_nt.c |   20 ++--
 source3/smbd/globals.c  |   13 --
 source3/smbd/globals.h  |2 -
 source3/smbd/msg_idmap.c|  174 ---
 source3/smbd/negprot.c  |4 +-
 source3/smbd/process.c  |  138 +-
 source3/smbd/proto.h|7 +-
 source3/smbd/reply.c|2 +-
 source3/smbd/server.c   |   74 +---
 source3/smbd/server_reload.c|   20 ++--
 source3/smbd/sesssetup.c|   10 +-
 source3/smbd/smb2_sesssetup.c   |2 +-
 source3/torture/vfstest.c   |2 +-
 source3/wscript_build   |2 +-
 16 files changed, 232 insertions(+), 249 deletions(-)
 delete mode 100644 source3/smbd/msg_idmap.c


Changeset truncated at 500 lines:

diff --git a/source3/Makefile.in b/source3/Makefile.in
index b0c17f6..1389293 100644
--- a/source3/Makefile.in
+++ b/source3/Makefile.in
@@ -914,7 +914,7 @@ AUTH_OBJ = auth/auth.o @AUTH_STATIC@ auth/auth_util.o 
auth/token_util.o \
 
 MANGLE_OBJ = smbd/mangle.o smbd/mangle_hash.o smbd/mangle_hash2.o
 
-SMBD_OBJ_MAIN = smbd/server.o smbd/server_exit.o smbd/msg_idmap.o
+SMBD_OBJ_MAIN = smbd/server.o smbd/server_exit.o
 
 BUILDOPT_OBJ = smbd/build_options.o
 
diff --git a/source3/printing/spoolssd.c b/source3/printing/spoolssd.c
index 06ce61b..fa722e2 100644
--- a/source3/printing/spoolssd.c
+++ b/source3/printing/spoolssd.c
@@ -489,7 +489,8 @@ static void spoolss_handle_client(struct tevent_req *req)
 extern pid_t background_lpq_updater_pid;
 static char *bq_logfile;
 
-static void check_updater_child(void)
+static void check_updater_child(struct tevent_context *ev_ctx,
+   struct messaging_context *msg_ctx)
 {
int status;
pid_t pid;
@@ -501,9 +502,7 @@ static void check_updater_child(void)
pid = sys_waitpid(background_lpq_updater_pid, status, WNOHANG);
if (pid  0) {

[SCM] Samba Shared Repository - branch master updated

2011-12-15 Thread Michael Adam
The branch, master has been updated
   via  8eeb3ff s3-dbwrap: All relevant backends provide parse_record(). 
Remove the fallback.
   via  f6d8f74 s3-dbwrap: Remove the fetch db_context callback
   via  b5d056c s3-dbwrap: Rewrite dbwrap_fetch in terms of 
dbwrap_parse_record
   via  77dca70 s3-dbwrap: Rewrite dbwrap_fallback_parse_record based on 
dbwrap_fetch_locked
   via  daa3654 s3-dbwrap: For nostalgic reasons, make dbwrap_file.c 
compile at least
   via  29f62bb s3-dbwrap: Fix some blank line endings
   via  098048a s3-dbwrap: Implement db_ctdb_parse_record in terms of 
db_ctdb_fetch
   via  26fc729 s3-dbwrap: Make dbwrap_parse_record return NTSTATUS
  from  19078b9 s3:smbd/globals: remove unused msg_ctx_to_sconn()

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 8eeb3ff753b36f8d33ae55a9ab2d8cc52fffa1a4
Author: Volker Lendecke v...@samba.org
Date:   Fri Dec 9 11:22:50 2011 +0100

s3-dbwrap: All relevant backends provide parse_record(). Remove the 
fallback.

Signed-off-by: Michael Adam ob...@samba.org

Autobuild-User: Michael Adam ob...@samba.org
Autobuild-Date: Thu Dec 15 17:41:53 CET 2011 on sn-devel-104

commit f6d8f7440c4f7e25574045a4e42a770d48d4c43d
Author: Volker Lendecke v...@samba.org
Date:   Thu Dec 8 16:46:09 2011 +0100

s3-dbwrap: Remove the fetch db_context callback

Signed-off-by: Michael Adam ob...@samba.org

commit b5d056ca231f67b4c6fd608ecbe6f83f1823a33b
Author: Volker Lendecke v...@samba.org
Date:   Thu Dec 8 16:43:40 2011 +0100

s3-dbwrap: Rewrite dbwrap_fetch in terms of dbwrap_parse_record

Signed-off-by: Michael Adam ob...@samba.org

commit 77dca703504044412872b7e9ad4d2c9c1971ba32
Author: Volker Lendecke v...@samba.org
Date:   Thu Dec 8 16:37:40 2011 +0100

s3-dbwrap: Rewrite dbwrap_fallback_parse_record based on dbwrap_fetch_locked

This is in preparation to remove the db_context-fetch function pointer

Signed-off-by: Michael Adam ob...@samba.org

commit daa365493e3fd7b7a664628e48438e7938fa4628
Author: Volker Lendecke v...@samba.org
Date:   Thu Dec 8 16:05:08 2011 +0100

s3-dbwrap: For nostalgic reasons, make dbwrap_file.c compile at least

Signed-off-by: Michael Adam ob...@samba.org

commit 29f62bbed792da4236a299100d0e227df5e423a5
Author: Volker Lendecke v...@samba.org
Date:   Thu Dec 8 16:04:19 2011 +0100

s3-dbwrap: Fix some blank line endings

Signed-off-by: Michael Adam ob...@samba.org

commit 098048a89c4ce14b17a0151dcb64c7cdf06f4152
Author: Volker Lendecke v...@samba.org
Date:   Thu Dec 8 15:56:35 2011 +0100

s3-dbwrap: Implement db_ctdb_parse_record in terms of db_ctdb_fetch

Signed-off-by: Michael Adam ob...@samba.org

commit 26fc72921f7b72dfebfe8394baa85b81ef66d26d
Author: Volker Lendecke v...@samba.org
Date:   Thu Dec 8 15:50:33 2011 +0100

s3-dbwrap: Make dbwrap_parse_record return NTSTATUS

Also, the parser now returns void. The parser is called if and only if
dbwrap_parse_record returns NT_STATUS_OK.

Signed-off-by: Michael Adam ob...@samba.org

---

Summary of changes:
 source3/lib/dbwrap/dbwrap.c |  100 +-
 source3/lib/dbwrap/dbwrap.h |8 ++--
 source3/lib/dbwrap/dbwrap_ctdb.c|   20 +++-
 source3/lib/dbwrap/dbwrap_file.c|   33 +++-
 source3/lib/dbwrap/dbwrap_private.h |   10 ++--
 source3/lib/dbwrap/dbwrap_rbt.c |   33 ++--
 source3/lib/dbwrap/dbwrap_tdb.c |  101 +++
 source3/lib/serverid.c  |   10 ++--
 8 files changed, 126 insertions(+), 189 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/lib/dbwrap/dbwrap.c b/source3/lib/dbwrap/dbwrap.c
index a806c6a..c551bfd 100644
--- a/source3/lib/dbwrap/dbwrap.c
+++ b/source3/lib/dbwrap/dbwrap.c
@@ -25,61 +25,15 @@
 #include util_tdb.h
 
 /*
- * Fall back using fetch_locked if no genuine fetch operation is provided
- */
-
-static NTSTATUS dbwrap_fallback_fetch(struct db_context *db,
- TALLOC_CTX *mem_ctx,
- TDB_DATA key, TDB_DATA *data)
-{
-   struct db_record *rec;
-
-   rec = dbwrap_fetch_locked(db, mem_ctx, key);
-   if (rec == NULL) {
-   return NT_STATUS_UNSUCCESSFUL;
-   }
-
-   data-dsize = rec-value.dsize;
-   data-dptr = talloc_move(mem_ctx, rec-value.dptr);
-   TALLOC_FREE(rec);
-   return NT_STATUS_OK;
-}
-
-/*
  * Fall back using fetch if no genuine exists operation is provided
  */
 
 static int dbwrap_fallback_exists(struct db_context *db, TDB_DATA key)
 {
-   int res = dbwrap_parse_record(db, key, NULL, NULL);
-   return  ( res == -1) ? 0 : 1;
+   NTSTATUS status = dbwrap_parse_record(db, key, NULL, NULL);
+   

[SCM] Samba Shared Repository - branch master updated

2011-12-15 Thread Andreas Schneider
The branch, master has been updated
   via  d0330c7 s3-libsmb: Don't duplicate kerberos service tickets.
  from  8eeb3ff s3-dbwrap: All relevant backends provide parse_record(). 
Remove the fallback.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit d0330c7dd64b320cd86e2341b31da6be81ba829b
Author: Andreas Schneider a...@samba.org
Date:   Mon Nov 21 18:19:43 2011 +0100

s3-libsmb: Don't duplicate kerberos service tickets.

This fixes bug #8628.

Each time we do a client connection. Each time we call to function to
get the service ticket from the cache we duplicate it. So with each
connection we end up with one or three duplicated tickets.

Autobuild-User: Andreas Schneider a...@cryptomilk.org
Autobuild-Date: Thu Dec 15 19:30:42 CET 2011 on sn-devel-104

---

Summary of changes:
 source3/libsmb/clikrb5.c |5 -
 1 files changed, 0 insertions(+), 5 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/libsmb/clikrb5.c b/source3/libsmb/clikrb5.c
index c083af2..6a11def 100644
--- a/source3/libsmb/clikrb5.c
+++ b/source3/libsmb/clikrb5.c
@@ -1817,11 +1817,6 @@ krb5_error_code smb_krb5_get_credentials(krb5_context 
context,
goto done;
}
 
-   ret = krb5_cc_store_cred(context, ccache, creds);
-   if (ret) {
-   goto done;
-   }
-
if (out_creds) {
*out_creds = creds;
}


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2011-12-15 Thread Christian Ambach
The branch, master has been updated
   via  851b9e9 s3:vfs fix up vfs_gpfs after function pointer renames
  from  d0330c7 s3-libsmb: Don't duplicate kerberos service tickets.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 851b9e9183ef598269aeb6c57f237a2599d701fa
Author: Christian Ambach a...@samba.org
Date:   Thu Dec 15 14:31:03 2011 +0100

s3:vfs fix up vfs_gpfs after function pointer renames

In 422494a8e630e2ca89386344eaa5346388698a32, vfs_gpfs.c was forgotten

Autobuild-User: Christian Ambach a...@samba.org
Autobuild-Date: Thu Dec 15 21:08:02 CET 2011 on sn-devel-104

---

Summary of changes:
 source3/modules/vfs_gpfs.c |   50 ++--
 1 files changed, 25 insertions(+), 25 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/modules/vfs_gpfs.c b/source3/modules/vfs_gpfs.c
index d879124..ba6ec6d 100644
--- a/source3/modules/vfs_gpfs.c
+++ b/source3/modules/vfs_gpfs.c
@@ -1323,32 +1323,32 @@ static int vfs_gpfs_open(struct vfs_handle_struct 
*handle,
 
 static struct vfs_fn_pointers vfs_gpfs_fns = {
.connect_fn = vfs_gpfs_connect,
-   .fs_capabilities = vfs_gpfs_capabilities,
-   .kernel_flock = vfs_gpfs_kernel_flock,
-.linux_setlease = vfs_gpfs_setlease,
-.get_real_filename = vfs_gpfs_get_real_filename,
-.fget_nt_acl = gpfsacl_fget_nt_acl,
-.get_nt_acl = gpfsacl_get_nt_acl,
-.fset_nt_acl = gpfsacl_fset_nt_acl,
-.sys_acl_get_file = gpfsacl_sys_acl_get_file,
-.sys_acl_get_fd = gpfsacl_sys_acl_get_fd,
-.sys_acl_set_file = gpfsacl_sys_acl_set_file,
-.sys_acl_set_fd = gpfsacl_sys_acl_set_fd,
-.sys_acl_delete_def_file = gpfsacl_sys_acl_delete_def_file,
-.chmod = vfs_gpfs_chmod,
-.fchmod = vfs_gpfs_fchmod,
-.close_fn = vfs_gpfs_close,
-.setxattr = gpfs_set_xattr,
-.getxattr = gpfs_get_xattr,
-.stat = vfs_gpfs_stat,
-.fstat = vfs_gpfs_fstat,
-.lstat = vfs_gpfs_lstat,
-   .ntimes = vfs_gpfs_ntimes,
-   .is_offline = vfs_gpfs_is_offline,
-   .aio_force = vfs_gpfs_aio_force,
-   .sendfile = vfs_gpfs_sendfile,
+   .fs_capabilities_fn = vfs_gpfs_capabilities,
+   .kernel_flock_fn = vfs_gpfs_kernel_flock,
+   .linux_setlease_fn = vfs_gpfs_setlease,
+   .get_real_filename_fn = vfs_gpfs_get_real_filename,
+   .fget_nt_acl_fn = gpfsacl_fget_nt_acl,
+   .get_nt_acl_fn = gpfsacl_get_nt_acl,
+   .fset_nt_acl_fn = gpfsacl_fset_nt_acl,
+   .sys_acl_get_file_fn = gpfsacl_sys_acl_get_file,
+   .sys_acl_get_fd_fn = gpfsacl_sys_acl_get_fd,
+   .sys_acl_set_file_fn = gpfsacl_sys_acl_set_file,
+   .sys_acl_set_fd_fn = gpfsacl_sys_acl_set_fd,
+   .sys_acl_delete_def_file_fn = gpfsacl_sys_acl_delete_def_file,
+   .chmod_fn = vfs_gpfs_chmod,
+   .fchmod_fn = vfs_gpfs_fchmod,
+   .close_fn = vfs_gpfs_close,
+   .setxattr_fn = gpfs_set_xattr,
+   .getxattr_fn = gpfs_get_xattr,
+   .stat_fn = vfs_gpfs_stat,
+   .fstat_fn = vfs_gpfs_fstat,
+   .lstat_fn = vfs_gpfs_lstat,
+   .ntimes_fn = vfs_gpfs_ntimes,
+   .is_offline_fn = vfs_gpfs_is_offline,
+   .aio_force_fn = vfs_gpfs_aio_force,
+   .sendfile_fn = vfs_gpfs_sendfile,
.open_fn = vfs_gpfs_open,
-   .ftruncate = vfs_gpfs_ftruncate
+   .ftruncate_fn = vfs_gpfs_ftruncate
 };
 
 NTSTATUS vfs_gpfs_init(void);


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2011-12-15 Thread Volker Lendecke
The branch, master has been updated
   via  1355f0a s3: Fix a typo
  from  851b9e9 s3:vfs fix up vfs_gpfs after function pointer renames

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 1355f0ac8c3bd9067c06de7c103e4f571b97b08a
Author: Volker Lendecke v...@samba.org
Date:   Thu Dec 15 15:48:33 2011 +0100

s3: Fix a typo

Autobuild-User: Volker Lendecke vlen...@samba.org
Autobuild-Date: Thu Dec 15 23:35:28 CET 2011 on sn-devel-104

---

Summary of changes:
 source3/locking/locking.c |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/locking/locking.c b/source3/locking/locking.c
index 39d3f28..35ae758 100644
--- a/source3/locking/locking.c
+++ b/source3/locking/locking.c
@@ -29,7 +29,7 @@
September 1997. Jeremy Allison (jalli...@whistle.com). Added oplock
support.
 
-   rewrtten completely to use new tdb code. Tridge, Dec '99
+   rewritten completely to use new tdb code. Tridge, Dec '99
 
Added POSIX locking support. Jeremy Allison (jer...@valinux.com), Apr. 2000.
Added Unix Extensions POSIX locking support. Jeremy Allison Mar 2006.


-- 
Samba Shared Repository


autobuild: intermittent test failure detected

2011-12-15 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2011-12-16-0022/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2011-12-16-0022/samba3.stderr
   http://git.samba.org/autobuild.flakey/2011-12-16-0022/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2011-12-16-0022/samba4.stderr
   http://git.samba.org/autobuild.flakey/2011-12-16-0022/samba4.stdout
  
The top commit at the time of the failure was:

commit 1355f0ac8c3bd9067c06de7c103e4f571b97b08a
Author: Volker Lendecke v...@samba.org
Date:   Thu Dec 15 15:48:33 2011 +0100

s3: Fix a typo

Autobuild-User: Volker Lendecke vlen...@samba.org
Autobuild-Date: Thu Dec 15 23:35:28 CET 2011 on sn-devel-104


[SCM] Samba Shared Repository - branch master updated

2011-12-15 Thread Andrew Bartlett
The branch, master has been updated
   via  d62de8d lib/param: Set s4 host msdfs = true by default
   via  77a551d loadparm: fixed service list handling
   via  fae42c1 pidfile: use set_close_on_exec()
   via  9f4c3da s4-socket: use set_close_on_exec()
   via  d581c9d genrand: use set_close_on_exec()
   via  3b56f64 lib/util: added set_close_on_exec()
   via  9782501 dynconfig: added SBINDIR and BINDIR as updated dynconfig 
variables
  from  1355f0a s3: Fix a typo

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit d62de8d83e451a8c562dd59d8599c2a325c7ac1f
Author: Andrew Bartlett abart...@samba.org
Date:   Fri Dec 16 09:26:04 2011 +1100

lib/param: Set s4 host msdfs = true by default

This matches the s3 loadparm, and makes this feature available
by default for our users in a DC environment.  (This is needed
for the correct operation of GPOs).

Andrew Bartlett

Autobuild-User: Andrew Bartlett abart...@samba.org
Autobuild-Date: Fri Dec 16 01:08:34 CET 2011 on sn-devel-104

commit 77a551d613059fd2df0fbfbd86f206c2b59e91a7
Author: Andrew Tridgell tri...@samba.org
Date:   Tue Dec 6 11:30:24 2011 +1100

loadparm: fixed service list handling

when you have:

  server services = +smb -s3fs

and 'smb' is already in the list, then this should not be an
error. This ensures that a config that specifically sets the services
it wants doesn't generate an error if the service list being set
happens to be the default

commit fae42c1f41435bf087c23d384cd6147dd9f7f4ef
Author: Andrew Tridgell tri...@samba.org
Date:   Wed Nov 30 15:18:54 2011 +1100

pidfile: use set_close_on_exec()

this prevents a fd leak to child processes

commit 9f4c3da734adbabf457074563f3fb3fae7b85585
Author: Andrew Tridgell tri...@samba.org
Date:   Wed Nov 30 15:18:45 2011 +1100

s4-socket: use set_close_on_exec()

this prevents a fd leak to child processes

commit d581c9d284e7c635b0379d57e95cb32e682f0f02
Author: Andrew Tridgell tri...@samba.org
Date:   Wed Nov 30 15:18:08 2011 +1100

genrand: use set_close_on_exec()

this prevents a fd leak to child processes

commit 3b56f64923a71a90734c5167d549e4eb14002d18
Author: Andrew Tridgell tri...@samba.org
Date:   Wed Nov 30 15:17:47 2011 +1100

lib/util: added set_close_on_exec()

this was already in tevent_util.c, but library layering prevented us
from using it in some other libraries

commit 9782501f0b9fafa171c4ed830abd8433b0be1f1b
Author: Andrew Tridgell tri...@samba.org
Date:   Wed Nov 30 10:07:30 2011 +1100

dynconfig: added SBINDIR and BINDIR as updated dynconfig variables

this allows these to work correctly in a build environment, pointing
at bin/

---

Summary of changes:
 dynconfig/wscript|2 ++
 lib/param/loadparm.c |   20 ++--
 lib/util/blocking.c  |   18 ++
 lib/util/genrand.c   |9 +
 lib/util/samba_util.h|5 +
 source4/lib/socket/socket_ip.c   |4 
 source4/lib/socket/socket_unix.c |4 
 source4/smbd/pidfile.c   |2 ++
 8 files changed, 50 insertions(+), 14 deletions(-)


Changeset truncated at 500 lines:

diff --git a/dynconfig/wscript b/dynconfig/wscript
index 28f6e8d..374ede2 100755
--- a/dynconfig/wscript
+++ b/dynconfig/wscript
@@ -340,6 +340,8 @@ def dynconfig_cflags(bld, list=None):
 override = { 'MODULESDIR': 'bin/modules',
  'PYTHONDIR' : 'bin/python',
  'PYTHONARCHDIR' : 'bin/python',
+ 'BINDIR': 'bin',
+ 'SBINDIR'   : 'bin',
  'CODEPAGEDIR'   : os.path.join(bld.env.srcdir, 'codepages'),
  'SCRIPTSBINDIR' : os.path.join(bld.env.srcdir, 
'source4/scripting/bin'),
  'SETUPDIR'  : os.path.join(bld.env.srcdir, 
'source4/setup') }
diff --git a/lib/param/loadparm.c b/lib/param/loadparm.c
index 48b5221..8ed9ced 100644
--- a/lib/param/loadparm.c
+++ b/lib/param/loadparm.c
@@ -2509,23 +2509,13 @@ static bool set_variable(TALLOC_CTX *mem_ctx, int 
parmnum, void *parm_ptr,
char **new_list = str_list_make(mem_ctx,
pszParmValue, NULL);
for (i=0; new_list[i]; i++) {
-   if (new_list[i][0] == '+'  new_list[i][1] 
-   (!str_list_check(*(const char ***)parm_ptr,
-new_list[i][1]))) {
-   *(const char ***)parm_ptr = 
str_list_add(*(const char ***)parm_ptr,
-   
 new_list[i][1]);

[SCM] Samba Shared Repository - branch master updated

2011-12-15 Thread Jeremy Allison
The branch, master has been updated
   via  c5cbe48 Third part of fix for bug #8663 - deleting a symlink fails 
if the symlink target is outside of the share.
   via  f448c0e Second part of fix for bug #8663 - deleting a symlink fails 
if the symlink target is outside of the share.
   via  8eca223 First part of fix for bug #8663 - deleting a symlink fails 
if the symlink target is outside of the share.
  from  d62de8d lib/param: Set s4 host msdfs = true by default

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit c5cbe481a759316be5d598123233cc859078d74a
Author: Jeremy Allison j...@samba.org
Date:   Thu Dec 15 16:55:32 2011 -0800

Third part of fix for bug #8663 - deleting a symlink fails if the symlink 
target is outside of the share.

smbd_check_access_rights() - we can always delete a symlink.

Autobuild-User: Jeremy Allison j...@samba.org
Autobuild-Date: Fri Dec 16 03:32:15 CET 2011 on sn-devel-104

commit f448c0e6db1384425e78531150aa1d3f6f8bd951
Author: Jeremy Allison j...@samba.org
Date:   Thu Dec 15 16:33:37 2011 -0800

Second part of fix for bug #8663 - deleting a symlink fails if the symlink 
target is outside of the share.

Ensure we use UCF_UNIX_NAME_LOOKUP flags on filename_convert()
when doing a UNIX infolevel in trans2setfilepathinfo().

commit 8eca2231238d0088b8a25409fdaf5fb2e837b330
Author: Jeremy Allison j...@samba.org
Date:   Thu Dec 15 16:31:51 2011 -0800

First part of fix for bug #8663 - deleting a symlink fails if the symlink 
target is outside of the share.

Remove two unneeded check_name() calls. They have already been done
in order to get here.

---

Summary of changes:
 source3/smbd/open.c   |   20 
 source3/smbd/trans2.c |7 ++-
 2 files changed, 14 insertions(+), 13 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/smbd/open.c b/source3/smbd/open.c
index 433bc09..9174388 100644
--- a/source3/smbd/open.c
+++ b/source3/smbd/open.c
@@ -99,6 +99,14 @@ NTSTATUS smbd_check_access_rights(struct connection_struct 
*conn,
return NT_STATUS_OK;
}
 
+   if (access_mask == DELETE_ACCESS  S_ISLNK(smb_fname-st.st_ex_mode)) {
+   /* We can always delete a symlink. */
+   DEBUG(10,(smbd_check_access_rights: not checking ACL 
+   on DELETE_ACCESS on symlink %s.\n,
+   smb_fname_str_dbg(smb_fname) ));
+   return NT_STATUS_OK;
+   }
+
status = SMB_VFS_GET_NT_ACL(conn, smb_fname-base_name,
(SECINFO_OWNER |
SECINFO_GROUP |
@@ -1723,11 +1731,6 @@ static NTSTATUS open_file_ntcreate(connection_struct 
*conn,
}
}
 
-   status = check_name(conn, smb_fname-base_name);
-   if (!NT_STATUS_IS_OK(status)) {
-   return status;
-   }
-
if (!posix_open) {
new_dos_attributes = SAMBA_ATTRIBUTES_MASK;
if (file_existed) {
@@ -3846,13 +3849,6 @@ NTSTATUS create_file_default(connection_struct *conn,
}
}
 
-   /* All file access must go through check_name() */
-
-   status = check_name(conn, smb_fname-base_name);
-   if (!NT_STATUS_IS_OK(status)) {
-   goto fail;
-   }
-
if (stream_name  is_ntfs_default_stream_smb_fname(smb_fname)) {
int ret;
smb_fname-stream_name = NULL;
diff --git a/source3/smbd/trans2.c b/source3/smbd/trans2.c
index 0126419..4417cb2 100644
--- a/source3/smbd/trans2.c
+++ b/source3/smbd/trans2.c
@@ -8007,6 +8007,7 @@ static void call_trans2setfilepathinfo(connection_struct 
*conn,
}
} else {
char *fname = NULL;
+   uint32_t ucf_flags = 0;
 
/* set path info */
if (total_params  7) {
@@ -8023,10 +8024,14 @@ static void 
call_trans2setfilepathinfo(connection_struct *conn,
return;
}
 
+   if (INFO_LEVEL_IS_UNIX(info_level)) {
+   ucf_flags |= UCF_UNIX_NAME_LOOKUP;
+   }
+
status = filename_convert(req, conn,
 req-flags2  FLAGS2_DFS_PATHNAMES,
 fname,
-0,
+ucf_flags,
 NULL,
 smb_fname);
if (!NT_STATUS_IS_OK(status)) {


-- 
Samba Shared Repository