Re: [Samba] Winbind Issues with Server 2003/2008

2012-03-12 Thread Volker Lendecke 
On Mon, Mar 12, 2012 at 10:17:26AM +1000, Nathan Frankish wrote:
 I really hate emailing lists, but I've come to a wall that I just cant
 work out how to get past at the moment, so am hoping for some community
 assistance if possible.
 
  
 
 Some background:
 
 We are running Windows Server 2003 on all of our domain controllers, and
 are in the middle of migrating to server 2008 R2. We have unix exentions
 enabled (rfc2307 I believe), and manage all of our uids/shell/home via
 this. 
 
  
 
 Our linux servers are a mix of RHEL 5.1, 5.4 and 5.5.
 
  
 
 We were using Samba 3.0.33-3.29.el5_5.1 or equivalent on most of our
 servers, but we hit a stone wall when trying to get them to co-exist
 with a domain controller that was running Server 2008.
 
 So we upgraded to the redhat package Samba3x which I believe is 3.3.8 on
 some of the hosts and 3.5.10 on the others.
 
  
 
 However then we hit the snafu that the servers running samba3x wouldn't
 talk to the domain controllers running server 2003 still.  To combat
 that, we null routed the server 2003 servers, and only let the Linux
 servers talk to AD servers running 2008.
 
 This was working fine, except that some servers stopped being able to
 run getent passwd or getent group and would just return nothing from
 winbind.
 
  
 
 As a test, I converted over to RID as the idmap backend away from ADS,
 and this appears to have almost worked perfectly. Except now that a
 users UID isn't being returned from the AD unixattributes tab, but
 instead has what I assume is the RID ID for the user. Other attributes
 seem to be coming down ok

When you change idmap backends, you must always also delete
all caches. Delete the winbindd_cache.tdb file and issue a
net cache flush.

Hope that helps,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kont...@sernet.de
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] follow symlinks + allow insecure wide links

2012-03-12 Thread frank schwarz 
Hi List,

i did a fresh  3.6.3 installation and have a problem with symlinks:

a look in the logfiles shows:

doing parameter follow symlinks = yes
doing parameter allow insecure wide links = yes
doing parameter unix extensions = no

but when i try to access a symlink the log message is:

check_reduced_name: Bad access attempt: link-test/desktop.ini is a symlink 
outside the share path

i thought my parameter set would allow following symlinks pointing somewhere 
outside the share path?

regards

frank
-- 
Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir
belohnen Sie mit bis zu 50,- Euro! https://freundschaftswerbung.gmx.de
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Unable to start Samba on AIX 6.1

2012-03-12 Thread Jeremy Allison 
On Fri, Mar 09, 2012 at 04:42:49PM +, neetesh.gu...@accenture.com wrote:
 Hi All,
 
 I have installed the SAMBA 3.2.0.0 on my AIX 6.1 machine. 
 While I am starting nmbd process, I am getting below error.
 
 [2012/03/08 20:52:20,  0] nmbd/nmbd.c:main(849)
   nmbd version 3.2.0 started.
   Copyright Andrew Tridgell and the Samba Team 1992-2008
 [2012/03/08 20:52:20,  0] lib/interface.c:load_interfaces(517)
   ERROR: Could not determine network interfaces, you must use a interfaces 
 config line
 
 
 While I added the below two lines in my smb.conf file
 
interfaces = en2
bind interfaces only = yes
 
nmbd is crashing with below error.
 
 [2012/03/08 20:44:45,  0] nmbd/nmbd.c:main(849)
   nmbd version 3.2.0 started.
   Copyright Andrew Tridgell and the Samba Team 1992-2008
 [2012/03/08 20:44:46,  0] lib/interface.c:load_interfaces(540)
   WARNING: no network interfaces found
 [2012/03/08 20:44:46,  0] nmbd/nmbd_subnetdb.c:create_subnets(205)
   create_subnets: No local interfaces !
 [2012/03/08 20:44:46,  0] nmbd/nmbd_subnetdb.c:create_subnets(206)
   create_subnets: Waiting for an interface to appear ...
 [2012/03/08 20:44:51,  0] lib/fault.c:fault_report(40)
   ===
 [2012/03/08 20:44:51,  0] lib/fault.c:fault_report(41)
   INTERNAL ERROR: Signal 11 in pid 46203380 (3.2.0)
   Please read the Trouble-Shooting section of the Samba3-HOWTO
 [2012/03/08 20:44:51,  0] lib/fault.c:fault_report(43)
 
   From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
 [2012/03/08 20:44:51,  0] lib/fault.c:fault_report(44)
   ===
 [2012/03/08 20:44:51,  0] lib/util.c:smb_panic(1666)
   PANIC (pid 46203380): internal error
 [2012/03/08 20:44:51,  0] lib/util.c:log_stack_trace(1820)
   unable to produce a stack trace on this platform
 [2012/03/08 20:44:51,  0] lib/fault.c:dump_core(201)
   dumping core in /var/cores/nmbd

3.2.0 is a very old, unsupported release. Is there a
chance you can install the latest 3.6.3 release instead ?

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] samba PDC/NIS client

2012-03-12 Thread Simon Matthews 
On Sun, Mar 11, 2012 at 4:09 AM, Tony Molloy tony.mol...@ul.ie wrote:

 On Sunday 11 March 2012 05:31:35 Simon Matthews wrote:
  On Sat, Mar 10, 2012 at 4:24 PM, Gaiseric Vandal
 
  gaiseric.van...@gmail.comwrote:
   Do you have password sync enabled?If password sync is
   enabled, samba will try to use the passwd command to set the
   unix password.  But with nis, you probably might need something
   nis specific. On solaris it was “passwd –r nis” -  not sure
   about linux.Probably better to just disable password sync.
 

 I've got a very similar setup to you. Except I use a smbpasswd file.

  No, I don't have this option enabled. I am not sure how it is
  relevant. Problem summary:
  The samba PDC is an NIS client
  getent passwd retruns the passwd data.
  The user's SAMBA password was set  using smbpasswd
  The user's NIS passwd was set using yppasswd

 So far all the same.

  ALL I had to do to allow domain logins was:
  ypcat passwd | grep username  /etc/passwd

 Why duplicate the password entries. I just have them in NIS and
 /etc/passwd just has the system passwords.

  Note that after copying the user details to /etc/passwd, the
  password that was set with smbpasswd was the password that was
  used with the successful domain login.

 Don't really uinderstand what you mean by domain logins

 1.  Create the user under linux first
 2.  Use smbpasswd to add the user to samba

 You now have a user in both linux and samba but remember the passwords
 are stored separately, changing one does not change the other.

 3.   Edit /etc/nsswitch.conf. Set

 passwd:files nis
 shdow:  files



Removing the nis entry from shadow: in /etc/nsswitch.conf solved the
issue. I don't understand why, but it did .

Simon


 That works for me. YMMV

 Tony

 
  Simon

 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Unable to get to git.samba.org?

2012-03-12 Thread Stefan (metze) Metzmacher 
Hi Charles,

Am 12.03.2012 18:49, schrieb Charles Tryon:
 I'm trying to do a pull from the Samba git repository, and getting errors
 that it can't get to the host:
 
 samba:samba-master? git pull
 fatal: unable to connect to git.samba.org:
 git.samba.org[0: 193.175.80.230]: errno=No route to host
 
 I've tried from a couple of different test environments on different
 networks and I'm getting the same error.  Possibly a transient problem with
 DNS?  (I did a pull an hour ago and it was fine.)

git.samba.org is currently down for maintenance,

If you have urgent need to get the samba git tree, please use
http://repo.or.cz/w/Samba.git

Sorry for any inconvenience!

metze



signature.asc
Description: OpenPGP digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] samba PDC/NIS client

2012-03-12 Thread Gaiseric Vandal 
If your NIS passwd file did NOT have a valid password, maybe samba or 
unix was rejecting logins as a security measure.




On 03/12/12 13:33, Simon Matthews wrote:

On Sun, Mar 11, 2012 at 4:09 AM, Tony Molloytony.mol...@ul.ie  wrote:


On Sunday 11 March 2012 05:31:35 Simon Matthews wrote:

On Sat, Mar 10, 2012 at 4:24 PM, Gaiseric Vandal

gaiseric.van...@gmail.comwrote:

Do you have password sync enabled?If password sync is
enabled, samba will try to use the passwd command to set the
unix password.  But with nis, you probably might need something
nis specific. On solaris it was “passwd –r nis” -  not sure
about linux.Probably better to just disable password sync.

I've got a very similar setup to you. Except I use a smbpasswd file.


No, I don't have this option enabled. I am not sure how it is
relevant. Problem summary:
The samba PDC is an NIS client
getent passwd retruns the passwd data.
The user's SAMBA password was set  using smbpasswd
The user's NIS passwd was set using yppasswd

So far all the same.


ALL I had to do to allow domain logins was:
ypcat passwd | grepusername/etc/passwd

Why duplicate the password entries. I just have them in NIS and
/etc/passwd just has the system passwords.


Note that after copying the user details to /etc/passwd, the
password that was set with smbpasswd was the password that was
used with the successful domain login.

Don't really uinderstand what you mean by domain logins

1.  Create the user under linux first
2.  Use smbpasswd to add the user to samba

You now have a user in both linux and samba but remember the passwords
are stored separately, changing one does not change the other.

3.   Edit /etc/nsswitch.conf. Set

passwd:files nis
shdow:  files



Removing the nis entry from shadow: in /etc/nsswitch.conf solved the
issue. I don't understand why, but it did .

Simon


That works for me. YMMV

Tony


Simon

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] samba PDC/NIS client

2012-03-12 Thread Tony Molloy 
On Monday 12 March 2012 17:33:28 Simon Matthews wrote:
 On Sun, Mar 11, 2012 at 4:09 AM, Tony Molloy tony.mol...@ul.ie 
wrote:
  On Sunday 11 March 2012 05:31:35 Simon Matthews wrote:
   On Sat, Mar 10, 2012 at 4:24 PM, Gaiseric Vandal
   
   gaiseric.van...@gmail.comwrote:
Do you have password sync enabled?If password sync is
enabled, samba will try to use the passwd command to set the
unix password.  But with nis, you probably might need
something nis specific. On solaris it was “passwd –r nis” - 
not sure about linux.Probably better to just disable
password sync.
  
  I've got a very similar setup to you. Except I use a smbpasswd
  file.
  
   No, I don't have this option enabled. I am not sure how it is
   relevant. Problem summary:
   The samba PDC is an NIS client
   getent passwd retruns the passwd data.
   The user's SAMBA password was set  using smbpasswd
   The user's NIS passwd was set using yppasswd
  
  So far all the same.
  
   ALL I had to do to allow domain logins was:
   ypcat passwd | grep username  /etc/passwd
  
  Why duplicate the password entries. I just have them in NIS and
  /etc/passwd just has the system passwords.
  
   Note that after copying the user details to /etc/passwd, the
   password that was set with smbpasswd was the password that
   was used with the successful domain login.
  
  Don't really uinderstand what you mean by domain logins
  
  1.  Create the user under linux first
  2.  Use smbpasswd to add the user to samba
  
  You now have a user in both linux and samba but remember the
  passwords are stored separately, changing one does not change
  the other.
  
  3.   Edit /etc/nsswitch.conf. Set
  
  passwd:files nis
  shdow:  files
 
 Removing the nis entry from shadow: in /etc/nsswitch.conf
 solved the issue. I don't understand why, but it did .
 
 Simon


The shadow file /etc/shadow stores the passwords associated with the 
entries in the password file /etc/passwd.

It has nothing to do with the NIS password database which stores the 
passwords in the actual database entries.

Tony
 
  That works for me. YMMV
  
  Tony
  
   Simon
  
  --
  To unsubscribe from this list go to the following URL and read
  the instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Unable to start Samba on AIX 6.1

2012-03-12 Thread Jeremy Allison 
On Mon, Mar 12, 2012 at 05:17:39PM +, neetesh.gu...@accenture.com wrote:
 Hi Allison,
 
 I have downloaded the package yesterday night, complied  
 installed. While I am starting the nmbd  smbd process, I am getting below 
 error.
 
 
 # ./nmbd
 exec(): 0509-036 Cannot load program ./nmbd because of the following errors:
 0509-150   Dependent module libwbclient.so could not be loaded.
 0509-022 Cannot load module libwbclient.so.
 0509-026 System error: A file or directory in the path name does not 
 exist.
 # ./smbd
 exec(): 0509-036 Cannot load program ./smbd because of the following errors:
 0509-150   Dependent module libtalloc.so could not be loaded.
 0509-022 Cannot load module libtalloc.so.
 0509-026 System error: A file or directory in the path name does not 
 exist.

Set your shared library load path to /usr/local/samba/lib.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] [ANNOUNCE] Samba 3.5.13 Available for Download

2012-03-12 Thread Karolin Seeger 
Please note that the tarball is available, but the v3-6-stable git branch
and the websites cannot be updated right now because of technical
problems. Thank you for your understanding.

===
A great artist is always
 before his time or behind it.

 George Edward Moore
==


Release Announcements
=

This is the latest stable release of Samba 3.5.

Major enhancements in Samba 3.5.13 include:

o  Fix a crash bug in cldap_socket_recv_dgram() (bug #8593).
o  Fully observe password change settings (bug #8561).
o  Fix NT ACL issue (bug #8673).
o  Fix segfault in Winbind if we can't map the last user (bug #8678).


Changes since 3.5.12:



o   Michael Adam ob...@samba.org
* BUG 8327: Fix config reload to reload shares from registry.


o   Jeremy Allison j...@samba.org
* BUG 8139: Ignore SMBecho errors.
* BUG 8521: Fix Winbind cache timeout expiry test.
* BUG 8561: Fully observe password change settings.
* BUG 8631: Fix POSIX ACE x permission mapping to and from a DACL.
* BUG 8636: When returning an ACL without SECINFO_DACL requested, we still
  set SEC_DESC_DACL_PRESENT in the type field.
* BUG 8644: Make sure that vfs_acl_xattr and vfs_acl_tdb modules add
  inheritable entries on a directory with no stored ACL.
* BUG 8663: Fix deleting a symlink if the symlink target is outside of the
* share.
* BUG 8664: Fix renaming a symlink if the symlink target is outside of the
  share.
* BUG 8673: Fix NT ACL issue.
* BUG 8679: Make sure that recvfile code path using splice() on Linux
  does not leave data in the pipe on short write.
* BUG 8687: Fix typo in 'net memberships' usage.


o   Christian Ambach christian.amb...@de.ibm.com
* BUG 8658: Add timeouts to Winbind cache.


o   Andrew Bartlett abart...@samba.org
* BUG 8727: Do not limit read replies to NBT packet sizes.


o   Günther Deschner g...@samba.org
* BUG 8176: Fix perl path.
* BUG 8692: Fix malloc/talloc mismatch in ads_keytab_verify_ticket().


o   Björn Jacke b...@sernet.de
* BUG 8652: Document the ignore system acls option of vfs_acl_xattr and
  vfs_acl_tdb.


o   Jeff Layton jlay...@redhat.com
* BUG 8648: Document more undocumented mount.cifs options.


o   Volker Lendecke v...@samba.org
* BUG 8639: Fix the vfs_commit module.
* BUG 8686: Packet validation checks can be done before length validation
  causing uninitialized memory read.


o   Stefan Metzmacher me...@samba.org
* BUG 5326: Fix cli_write_and_x() against OS/2 print shares.
* BUG 8562: Fix double free error (talloc).
* BUG 8593: Fix a crash bug in cldap_socket_recv_dgram().
* BUG 8684: Try ctdbd_init_connection() as root.


o   Masafumi Nakayama mas...@jp.ibm.com
* BUG 563: Fix 'smbclient tar' for files greater than 8GB on BE machines.


o   Matthieu Patou m...@matws.net
* BUG 8599: Make WINBINDD_PAM_AUTH_CRAP return valid user session key.
* BUG 8771: Make Winbind change faster from DC1 to DC2.


o   Andreas Schneider a...@samba.org
* BUG 8608: Don't fail on users without a uid (Winbind).
* BUG 8628: Don't duplicate Kerberos service tickets.
* BUG 8645: Add missing prefixpath options for mount.cifs manpage.
* BUG 8658: Add an update function for Winbind cache.
* BUG 8678: Fix segfault in Winbind if we can't map the last user.


o   Karolin Seeger ksee...@samba.org
* BUG 7705: Fix rpm build issues on RHEL4.


o   Richard Sharpe realrichardsha...@gmail.com
* BUG 8607: Simplify building modules outside the Samba source tree.


##
Reporting bugs  Development Discussion
###

Please discuss this release on the samba-technical mailing list or by
joining the #samba-technical IRC channel on irc.freenode.net.

If you do report problems then please try to send high quality
feedback. If you don't provide vital information to help us track down
the problem then you will probably be ignored.  All bug reports should
be filed under the Samba 3.5 product in the project's Bugzilla
database (https://bugzilla.samba.org/).


==
== Our Code, Our Bugs, Our Responsibility.
== The Samba Team
==



Download Details


The uncompressed tarballs and patch files have been signed
using GnuPG (ID 6568B7EA).  The source code can be downloaded
from:

http://download.samba.org/samba/ftp/stable

The release notes are available online at:

http://www.samba.org/samba/history/samba-3.5.13.html

Binary packages will be made available on

[ANNOUNCE] Samba 3.5.13 Available for Download

2012-03-12 Thread Karolin Seeger 
Please note that the tarball is available, but the v3-6-stable git branch
and the websites cannot be updated right now because of technical
problems. Thank you for your understanding.

===
A great artist is always
 before his time or behind it.

 George Edward Moore
==


Release Announcements
=

This is the latest stable release of Samba 3.5.

Major enhancements in Samba 3.5.13 include:

o  Fix a crash bug in cldap_socket_recv_dgram() (bug #8593).
o  Fully observe password change settings (bug #8561).
o  Fix NT ACL issue (bug #8673).
o  Fix segfault in Winbind if we can't map the last user (bug #8678).


Changes since 3.5.12:



o   Michael Adam ob...@samba.org
* BUG 8327: Fix config reload to reload shares from registry.


o   Jeremy Allison j...@samba.org
* BUG 8139: Ignore SMBecho errors.
* BUG 8521: Fix Winbind cache timeout expiry test.
* BUG 8561: Fully observe password change settings.
* BUG 8631: Fix POSIX ACE x permission mapping to and from a DACL.
* BUG 8636: When returning an ACL without SECINFO_DACL requested, we still
  set SEC_DESC_DACL_PRESENT in the type field.
* BUG 8644: Make sure that vfs_acl_xattr and vfs_acl_tdb modules add
  inheritable entries on a directory with no stored ACL.
* BUG 8663: Fix deleting a symlink if the symlink target is outside of the
* share.
* BUG 8664: Fix renaming a symlink if the symlink target is outside of the
  share.
* BUG 8673: Fix NT ACL issue.
* BUG 8679: Make sure that recvfile code path using splice() on Linux
  does not leave data in the pipe on short write.
* BUG 8687: Fix typo in 'net memberships' usage.


o   Christian Ambach christian.amb...@de.ibm.com
* BUG 8658: Add timeouts to Winbind cache.


o   Andrew Bartlett abart...@samba.org
* BUG 8727: Do not limit read replies to NBT packet sizes.


o   Günther Deschner g...@samba.org
* BUG 8176: Fix perl path.
* BUG 8692: Fix malloc/talloc mismatch in ads_keytab_verify_ticket().


o   Björn Jacke b...@sernet.de
* BUG 8652: Document the ignore system acls option of vfs_acl_xattr and
  vfs_acl_tdb.


o   Jeff Layton jlay...@redhat.com
* BUG 8648: Document more undocumented mount.cifs options.


o   Volker Lendecke v...@samba.org
* BUG 8639: Fix the vfs_commit module.
* BUG 8686: Packet validation checks can be done before length validation
  causing uninitialized memory read.


o   Stefan Metzmacher me...@samba.org
* BUG 5326: Fix cli_write_and_x() against OS/2 print shares.
* BUG 8562: Fix double free error (talloc).
* BUG 8593: Fix a crash bug in cldap_socket_recv_dgram().
* BUG 8684: Try ctdbd_init_connection() as root.


o   Masafumi Nakayama mas...@jp.ibm.com
* BUG 563: Fix 'smbclient tar' for files greater than 8GB on BE machines.


o   Matthieu Patou m...@matws.net
* BUG 8599: Make WINBINDD_PAM_AUTH_CRAP return valid user session key.
* BUG 8771: Make Winbind change faster from DC1 to DC2.


o   Andreas Schneider a...@samba.org
* BUG 8608: Don't fail on users without a uid (Winbind).
* BUG 8628: Don't duplicate Kerberos service tickets.
* BUG 8645: Add missing prefixpath options for mount.cifs manpage.
* BUG 8658: Add an update function for Winbind cache.
* BUG 8678: Fix segfault in Winbind if we can't map the last user.


o   Karolin Seeger ksee...@samba.org
* BUG 7705: Fix rpm build issues on RHEL4.


o   Richard Sharpe realrichardsha...@gmail.com
* BUG 8607: Simplify building modules outside the Samba source tree.


##
Reporting bugs  Development Discussion
###

Please discuss this release on the samba-technical mailing list or by
joining the #samba-technical IRC channel on irc.freenode.net.

If you do report problems then please try to send high quality
feedback. If you don't provide vital information to help us track down
the problem then you will probably be ignored.  All bug reports should
be filed under the Samba 3.5 product in the project's Bugzilla
database (https://bugzilla.samba.org/).


==
== Our Code, Our Bugs, Our Responsibility.
== The Samba Team
==



Download Details


The uncompressed tarballs and patch files have been signed
using GnuPG (ID 6568B7EA).  The source code can be downloaded
from:

http://download.samba.org/samba/ftp/stable

The release notes are available online at:

http://www.samba.org/samba/history/samba-3.5.13.html

Binary packages will be made available on

autobuild: intermittent test failure detected

2012-03-12 Thread autobuild 
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2012-03-12-0824/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-03-12-0824/samba3.stderr
   http://git.samba.org/autobuild.flakey/2012-03-12-0824/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-03-12-0824/samba4.stderr
   http://git.samba.org/autobuild.flakey/2012-03-12-0824/samba4.stdout
  
The top commit at the time of the failure was:

commit 8af7dadca2c820e125c6059eef62e2a4c76f7ff3
Author: Jelmer Vernooij jel...@samba.org
Date:   Sun Mar 11 23:56:56 2012 +0100

selftest.run: Use subunit version of iso8601.

Autobuild-User: Jelmer Vernooij jel...@samba.org
Autobuild-Date: Mon Mar 12 01:36:25 CET 2012 on sn-devel-104

[SCM] CTDB repository - branch master updated - ctdb-1.13-3-gf066349

2012-03-12 Thread Ronnie Sahlberg 
The branch, master has been updated
   via  f06634951331232cddf0b48eac3552b92aca5b93 (commit)
  from  68390cb1e8c7f30be034b8ca6c9215b40147305b (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=master


- Log -
commit f06634951331232cddf0b48eac3552b92aca5b93
Author: Ronnie Sahlberg ronniesahlb...@gmail.com
Date:   Mon Mar 12 16:09:32 2012 +1100

Test: add test tool and test that UPDATE_RECORD works on persistent 
databases

---

Summary of changes:
 Makefile.in|5 +
 tests/simple/72_update_record_persistent.sh|   89 +++
 ...only_loop.c = ctdb_update_record_persistent.c} |   91 +---
 3 files changed, 136 insertions(+), 49 deletions(-)
 create mode 100755 tests/simple/72_update_record_persistent.sh
 copy tests/src/{ctdb_fetch_readonly_loop.c = ctdb_update_record_persistent.c} 
(57%)


Changeset truncated at 500 lines:

diff --git a/Makefile.in b/Makefile.in
index 24283f3..9055a8f 100755
--- a/Makefile.in
+++ b/Makefile.in
@@ -85,6 +85,7 @@ TEST_BINS=tests/bin/ctdb_bench tests/bin/ctdb_fetch 
tests/bin/ctdb_fetch_one \
tests/bin/ctdb_randrec tests/bin/ctdb_persistent \
tests/bin/ctdb_traverse tests/bin/rb_test tests/bin/ctdb_transaction \
tests/bin/ctdb_takeover_tests tests/bin/ctdb_update_record \
+   tests/bin/ctdb_update_record_persistent \
tests/bin/ctdb_tool_libctdb tests/bin/ctdb_tool_stubby \
@INFINIBAND_BINS@
 
@@ -215,6 +216,10 @@ tests/bin/ctdb_update_record: $(CTDB_CLIENT_OBJ) 
tests/src/ctdb_update_record.o
@echo Linking $@
@$(CC) $(CFLAGS) -o $@ tests/src/ctdb_update_record.o 
$(CTDB_CLIENT_OBJ) $(LIB_FLAGS)
 
+tests/bin/ctdb_update_record_persistent: $(CTDB_CLIENT_OBJ) 
tests/src/ctdb_update_record_persistent.o 
+   @echo Linking $@
+   @$(CC) $(CFLAGS) -o $@ tests/src/ctdb_update_record_persistent.o 
$(CTDB_CLIENT_OBJ) $(LIB_FLAGS)
+
 tests/bin/ctdb_store: $(CTDB_CLIENT_OBJ) tests/src/ctdb_store.o 
@echo Linking $@
@$(CC) $(CFLAGS) -o $@ tests/src/ctdb_store.o $(CTDB_CLIENT_OBJ) 
$(LIB_FLAGS)
diff --git a/tests/simple/72_update_record_persistent.sh 
b/tests/simple/72_update_record_persistent.sh
new file mode 100755
index 000..d232b40
--- /dev/null
+++ b/tests/simple/72_update_record_persistent.sh
@@ -0,0 +1,89 @@
+#!/bin/bash
+
+test_info()
+{
+cat EOF
+UPDATE_RECORD control should be able to create new records and update
+existing records in a persistent database.
+
+Prerequisites:
+
+* An active CTDB cluster with at least one active node.
+
+Steps:
+
+1. Verify that the status on all of the ctdb nodes is 'OK'.
+2. create a persistent test database
+3, wipe the database to make sure it is empty
+4, create a new record
+5, update the record
+
+Expected results:
+
+* 4 created record found in the tdb
+* 5 updated record found in the tdb
+
+EOF
+}
+
+. ctdb_test_functions.bash
+
+ctdb_test_init $@
+
+set -e
+
+cluster_is_healthy
+
+try_command_on_node 0 $CTDB listnodes
+num_nodes=$(echo $out | wc -l)
+
+# create a temporary persistent database to test with
+echo create persistent test database persistent_test.tdb
+try_command_on_node -q 0 $CTDB_TEST_WRAPPER ctdb attach persistent_test.tdb 
persistent
+
+
+# 3,
+echo wipe the persistent test database
+try_command_on_node -q 0 $CTDB_TEST_WRAPPER ctdb wipedb persistent_test.tdb
+echo force a recovery
+try_command_on_node -q 0 $CTDB_TEST_WRAPPER ctdb recover
+
+# check that the database is wiped
+num_records=$(try_command_on_node -v -pq 1 $CTDB_TEST_WRAPPER ctdb cattdb 
persistent_test.tdb | grep key | wc -l)
+[ $num_records != 0 ]  {
+echo BAD: we did not end up with an empty database
+exit 1
+}
+echo OK. database was wiped
+
+TDB=`try_command_on_node -v -q 0 $CTDB_TEST_WRAPPER ctdb getdbmap | grep 
persistent_test.tdb | sed -e s/.*path:// -e s/ .*//`
+
+# 4,
+echo Create a new record in the persistent database using UPDATE_RECORD
+try_command_on_node -q 0 $CTDB_TEST_WRAPPER ctdb_update_record_persistent  
--database=persistent_test.tdb --record=Update_Record_Persistent 
--value=FirstValue
+
+num_records=`tdbdump $TDB | grep FirstValue | wc -l`
+[ $num_records != 1 ]  {
+echo BAD: we did find the record after the create/update
+exit 1
+}
+
+# 5,
+echo Modify an existing record in the persistent database using UPDATE_RECORD
+try_command_on_node -q 0 $CTDB_TEST_WRAPPER ctdb_update_record_persistent  
--database=persistent_test.tdb --record=Update_Record_Persistent 
--value=SecondValue
+
+num_records=`tdbdump $TDB | grep FirstValue | wc -l`
+[ $num_records != 0 ]  {
+echo BAD: we still found the old record after the modify/update
+exit 1
+}
+
+num_records=`tdbdump $TDB | grep SecondValue | wc -l`
+[ $num_records != 1 ]  {
+echo BAD: could not find the record after the modify/update
+exit 1
+}
+
+

autobuild: intermittent test failure detected

2012-03-12 Thread autobuild 
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2012-03-12-1028/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-03-12-1028/samba3.stderr
   http://git.samba.org/autobuild.flakey/2012-03-12-1028/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-03-12-1028/samba4.stderr
   http://git.samba.org/autobuild.flakey/2012-03-12-1028/samba4.stdout
  
The top commit at the time of the failure was:

commit 8af7dadca2c820e125c6059eef62e2a4c76f7ff3
Author: Jelmer Vernooij jel...@samba.org
Date:   Sun Mar 11 23:56:56 2012 +0100

selftest.run: Use subunit version of iso8601.

Autobuild-User: Jelmer Vernooij jel...@samba.org
Autobuild-Date: Mon Mar 12 01:36:25 CET 2012 on sn-devel-104

[SCM] Samba Website Repository - branch master updated

2012-03-12 Thread Karolin Seeger 
The branch, master has been updated
   via  4a461a3 Announce Samba 3.5.13.
  from  bb0151a Update to use conservancy's paypal account

http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master


- Log -
commit 4a461a340f2e4e49bc6a2c0335caa3724ac04b72
Author: Karolin Seeger ksee...@samba.org
Date:   Sun Mar 11 20:56:38 2012 +0100

Announce Samba 3.5.13.

Karolin

---

Summary of changes:
 generated_news/latest_10_bodies.html|   22 +++
 generated_news/latest_10_headlines.html |4 +-
 generated_news/latest_2_bodies.html |   18 +++---
 history/header_history.html |1 +
 history/samba-3.5.13.html   |  119 +++
 5 files changed, 140 insertions(+), 24 deletions(-)
 create mode 100755 history/samba-3.5.13.html


Changeset truncated at 500 lines:

diff --git a/generated_news/latest_10_bodies.html 
b/generated_news/latest_10_bodies.html
index c1cd654..4d579a2 100644
--- a/generated_news/latest_10_bodies.html
+++ b/generated_news/latest_10_bodies.html
@@ -1,3 +1,12 @@
+   h5a name=3.5.1312 March 2012/a/h5
+   p class=headlineSamba 3.5.13 Available for Download/p
+   pThis is the latest stable release of the Samba 3.5 series./p
+
+pThe uncompressed tarballs and patch files have been signed
+using GnuPG (ID 6568B7EA).  The source code can be
+a href=http://samba.org/samba/ftp/stable/samba-3.5.13.tar.gz;downloaded
+now/a. A a 
href=http://samba.org/samba/ftp/patches/patch-3.5.12-3.5.13.diffs.gz;patch 
against Samba 3.5.12/a is also available. See a 
href=http://samba.org/samba/history/samba-3.5.13.html;the release notes for 
more info/a./p
+
h5a name=CVE-2012-087023 February 2012/a/h5
p class=headlineSamba pre-3.4 Security Issue/p
pPatches for a 
href=http://www.samba.org/samba/ftp/patches/security/samba-3.0-CVE-2012-0870.patch;3.0/a,
 a 
href=http://www.samba.org/samba/ftp/patches/security/samba-3.2-CVE-2012-0870.patch;3.2/a,
 a 
href=http://www.samba.org/samba/ftp/patches/security/samba-3.3-CVE-2012-0870.patch;and
 3.3/a got released in order to address a 
href=http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-CVE-2012-0870;CVE-2012-0870
 (Remote code execution vulnerability in smbd)/a./p
@@ -76,16 +85,3 @@ nice enough to write a comprehensive summary with some focus 
on
 using GnuPG (ID 6568B7EA).  The source code can be
 a href=http://samba.org/samba/ftp/stable/samba-3.4.15.tar.gz;downloaded
 now/a. A a 
href=http://samba.org/samba/ftp/patches/patch-3.4.14-3.4.15.diffs.gz;patch 
against Samba 3.4.15/a is also available. See a 
href=http://samba.org/samba/history/samba-3.4.15.html;the release notes for 
more info/a./p
-
-
-   h5a name=3.6.0_highlights09 August 2011/a/h5
-   p class=headlineThe highlights of Samba 3.6/p
-   pThe major new release of the award-winning Free Software is the first
-free software SMB2 server, with improved printing and cluster file server
-support, simplified identity mapping, greater reliability, and extensively
-enhanced library components./p
-
-   pYou like to know more details about the
-a href=/samba/news/releases/3.6.0.htmlhighlights of 3.6/a?/p
-
-
diff --git a/generated_news/latest_10_headlines.html 
b/generated_news/latest_10_headlines.html
index 7740819..2dd84b1 100644
--- a/generated_news/latest_10_headlines.html
+++ b/generated_news/latest_10_headlines.html
@@ -1,4 +1,6 @@
 ul
+   li 12 March 2012 a href=#3.5.13Samba 3.5.13 Available for 
Download/a/li
+
li 23 February 2012 a href=#CVE-2012-0870Samba pre-3.4 Security 
Issue/a/li
 
li 29 January 2012 a href=#3.6.3Samba 3.6.3 Security Release 
Available for Download/a/li
@@ -16,6 +18,4 @@
li 26 September 2011 a 
href=/samba/news/developers/2011-snia-sdc-report.html2011 SNIA SDC 
Report/a/li
 
li 23 August 2011 a href=#3.4.15Samba 3.4.15 Available for 
Download/a/li
-
-   li 09 August 2011 a href=/samba/news/releases/3.6.0.htmlThe 
highlights of Samba 3.6/a/li
 /ul
diff --git a/generated_news/latest_2_bodies.html 
b/generated_news/latest_2_bodies.html
index f0dbcea..e439ee1 100644
--- a/generated_news/latest_2_bodies.html
+++ b/generated_news/latest_2_bodies.html
@@ -1,14 +1,14 @@
+   h5a name=3.5.1312 March 2012/a/h5
+   p class=headlineSamba 3.5.13 Available for Download/p
+   pThis is the latest stable release of the Samba 3.5 series./p
+
+pThe uncompressed tarballs and patch files have been signed
+using GnuPG (ID 6568B7EA).  The source code can be
+a href=http://samba.org/samba/ftp/stable/samba-3.5.13.tar.gz;downloaded
+now/a. A a 
href=http://samba.org/samba/ftp/patches/patch-3.5.12-3.5.13.diffs.gz;patch 
against Samba 3.5.12/a is also available. See a 
href=http://samba.org/samba/history/samba-3.5.13.html;the release notes for 
more info/a./p
+
h5a name=CVE-2012-087023 February 2012/a/h5

[SCM] Samba Shared Repository - branch v3-5-stable updated

2012-03-12 Thread Karolin Seeger 
The branch, v3-5-stable has been updated
   via  e2250ba WHATSNEW: Update 3.5.13 release notes.
   via  5a20ab5 WHATSNEW: Start to add changes since 3.5.12.
   via  e3051e7 s3-winbindd: Close netlogon connection if the status 
returned by the NetrSamLogonEx call is timeout in the pam_auth_crap path
   via  ca113c3 s3-winbindd: set the can_do_validation6 also for trusted 
domain
   via  fc1fae9 s3:loadparm: fix the reload of the configuration: also 
reload activated registry shares
   via  b77d5dc s3:loadparm: add reload_registry_shares() - reload only 
those shares already loaded (cherry picked from commit 
ec113a58a4dc4e4f3ea03f7818eb312325f69482) (cherry picked from commit 
bc5a7f23e1e909a2196a1038da20c3391c922614)
   via  713e927 s3:client: ignore SMBecho errors (the server may not 
support it) (bug #8139) Signed-off-by: Jeremy Allison j...@samba.org (cherry 
picked from commit bb28a9387d3c76f6f8c7f79ec61d37a499d6c8f6) (cherry picked 
from commit 461adc665aaadc730d7705b3785d45f787f98425)
   via  366c9a7 s3-libsmb Do not limit read replies to NBT packet sizes
   via  8a5975a Fix bug 8636 - When returning an ACL without SECINFO_DACL 
requested, we still set SEC_DESC_DACL_PRESENT in the type field. (cherry picked 
from commit f0c4e96cb4419015a9082e05ffc65bb370aede48)
   via  1d7ebc6 Second part of fix for bug #8673 - NT ACL issue.
   via  6c0b221 First part of fix for bug #8673 - NT ACL issue.
   via  6c15644 Third part of fix for bug #8663 - deleting a symlink fails 
if the symlink target is outside of the share.
   via  7b61a2d Second part of fix for bug #8663 - deleting a symlink fails 
if the symlink target is outside of the share.
   via  f0f9d4b First part of fix for bug #8663 - deleting a symlink fails 
if the symlink target is outside of the share.
   via  4d3c098 Fix bug #8664 - Renaming a symlink fails if the symlink 
target is outside of the share. (cherry picked from commit 
33fd99946178e3c2649b289580b1ae1285c46d23)
   via  3fca061 s3-libads: fix malloc/talloc mismatch in 
ads_keytab_verify_ticket().
   via  7f055e5 libcli/cldap: fix a crash bug in cldap_socket_recv_dgram() 
(bug #8593)
   via  0f6999f s3:lib/ctdbd_conn: try ctdbd_init_connection() as root (bug 
#8684)
   via  0c6c5a4 Fix bug #8686 - Packet validation checks can be done before 
length validation causing uninitialized memory read. (cherry picked from commit 
24ac26ddfd9ee8841d1984e710a4dfe535b9abcf) (cherry picked from commit 
93c76f96b82ec27be97c390cd1ef5d965766e273)
   via  2376414 Fix bug #8687 - net memberships usage info is wrong
   via  01e994a s3-libsmb: Don't duplicate kerberos service tickets.
   via  1e4d95e Final part of fix for bug #8679 - recvfile code path using 
splice() on Linux leaves data in the pipe on short write.
   via  b523851 Third part of fix for bug #8679 - recvfile code path using 
splice() on Linux leaves data in the pipe on short write.
   via  87dd891 Second part of fix for bug #8679 - recvfile code path using 
splice() on Linux leaves data in the pipe on short write.
   via  7413c4b Fix bug #8679 - recvfile code path using splice() on Linux 
leaves data in the pipe on short write
   via  2d173f3 s3-cli: fix bug 563, 8GB tar on BE machines
   via  f13f4d1 s3-winbind: Move finding the domain to it's own function.
   via  b6931cd s3-winbind: Fix segfault if we can't map the last user.
   via  24bf25c Fix bug #8644 - vfs_acl_xattr and vfs_acl_tdb modules can 
fail to add inheritable entries on a directory with no stored ACL.
   via  53c3f46 s3-winbind: Add an update function for winbind cache.
   via  d5753e2 Fix bug #8521 - winbindd cache timeout expiry test was 
reversed
   via  b865a51 s3:winbind add timeouts to winbind cache
   via  4509eed s3/doc: document the ignore system acls option of 
vfs_acl_xattr and vfs_acl_tdb
   via  365d8b2 manpage: add more undocumented options to mount.cifs manpage
   via  80c64ea docs: Add missing prefixpath options for mount.cifs.
   via  fc036bf s3: Attempt to fix the vfs_commit module
   via  d300b44 Fix bug 8631 - POSIX ACE x permission becomes rx following 
mapping to and from a DACL Reported by David Disseldorp. Fix based on a patch 
by David.
   via  c24646f Improve configure.in so it can be used outside the Samba 
source tree.
   via  906d384 s3-winbind: Don't fail on users without a uid.
   via  048ad02 s3/packaging: Fix rpm build issues on RHEL4.
   via  7e5acdc0 s3/packaging: Fix rpm build issues on RHEL.
   via  605d202 s3:libsmb: consistently use state-size in 
cli_write_andx_create() (bug #5326)
   via  53ff088 s3:libsmb: fix cli_write_and_x() against OS/2 print shares 
(bug #5326)
   via  c40c0d1 Fix bug #8561 - Password change settings not fully 
observed. (cherry picked from commit 467a586b3b25f632a5b9ca58abf428a546d97740)
   via  bf430e5 examples: Fix perl path.

[SCM] Samba Shared Repository - annotated tag samba-3.5.13 created

2012-03-12 Thread Karolin Seeger 
The annotated tag, samba-3.5.13 has been created
at  c05868166c2b997bbd59bdb380244e634d5c60c2 (tag)
   tagging  e2250ba709a400e1d9a263ee6e885637f8369ca5 (commit)
  replaces  samba-3.5.12
 tagged by  Karolin Seeger
on  Sun Mar 11 20:32:22 2012 +0100

- Log -
tag samba-3.5.13
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.15 (GNU/Linux)

iD8DBQBPXP3bbzORW2Vot+oRAvUoAKCGpuq6jyrY/4xAbvO215yrgqIFDwCfYOll
5c3Qrj9+hGpe/WgR9CoW3Sw=
=37wY
-END PGP SIGNATURE-

Andreas Schneider (6):
  s3-winbind: Don't fail on users without a uid.
  docs: Add missing prefixpath options for mount.cifs.
  s3-winbind: Add an update function for winbind cache.
  s3-winbind: Fix segfault if we can't map the last user.
  s3-winbind: Move finding the domain to it's own function.
  s3-libsmb: Don't duplicate kerberos service tickets.

Andrew Bartlett (1):
  s3-libsmb Do not limit read replies to NBT packet sizes

Björn Jacke (1):
  s3/doc: document the ignore system acls option of vfs_acl_xattr and 
vfs_acl_tdb

Christian Ambach (1):
  s3:winbind add timeouts to winbind cache

Günther Deschner (2):
  examples: Fix perl path.
  s3-libads: fix malloc/talloc mismatch in ads_keytab_verify_ticket().

Jeff Layton (1):
  manpage: add more undocumented options to mount.cifs manpage

Jeremy Allison (16):
  Fix bug #8561 - Password change settings not fully observed.
  Fix bug 8631 - POSIX ACE x permission becomes rx following mapping to and 
from a DACL Reported by David Disseldorp. Fix based on a patch by David.
  Fix bug #8521 - winbindd cache timeout expiry test was reversed
  Fix bug #8644 - vfs_acl_xattr and vfs_acl_tdb modules can fail to add 
inheritable entries on a directory with no stored ACL.
  Fix bug #8679 - recvfile code path using splice() on Linux leaves data in 
the pipe on short write
  Second part of fix for bug #8679 - recvfile code path using splice() on 
Linux leaves data in the pipe on short write.
  Third part of fix for bug #8679 - recvfile code path using splice() on 
Linux leaves data in the pipe on short write.
  Final part of fix for bug #8679 - recvfile code path using splice() on 
Linux leaves data in the pipe on short write.
  Fix bug #8687 - net memberships usage info is wrong
  Fix bug #8664 - Renaming a symlink fails if the symlink target is outside 
of the share.
  First part of fix for bug #8663 - deleting a symlink fails if the symlink 
target is outside of the share.
  Second part of fix for bug #8663 - deleting a symlink fails if the 
symlink target is outside of the share.
  Third part of fix for bug #8663 - deleting a symlink fails if the symlink 
target is outside of the share.
  First part of fix for bug #8673 - NT ACL issue.
  Second part of fix for bug #8673 - NT ACL issue.
  Fix bug 8636 - When returning an ACL without SECINFO_DACL requested, we 
still set SEC_DESC_DACL_PRESENT in the type field.

Karolin Seeger (6):
  VERSION: Bump version up to 3.5.13.
  WHATSNEW: Start release notes for 3.5.13.
  s3/packaging: Fix rpm build issues on RHEL.
  s3/packaging: Fix rpm build issues on RHEL4.
  WHATSNEW: Start to add changes since 3.5.12.
  WHATSNEW: Update 3.5.13 release notes.

Masafumi Nakayama (1):
  s3-cli: fix bug 563, 8GB tar on BE machines

Matthieu Patou (2):
  s3-winbindd: set the can_do_validation6 also for trusted domain
  s3-winbindd: Close netlogon connection if the status returned by the 
NetrSamLogonEx call is timeout in the pam_auth_crap path

Michael Adam (2):
  s3:loadparm: add reload_registry_shares() - reload only those shares 
already loaded (cherry picked from commit 
ec113a58a4dc4e4f3ea03f7818eb312325f69482)
  s3:loadparm: fix the reload of the configuration: also reload activated 
registry shares

Richard Sharpe (1):
  Improve configure.in so it can be used outside the Samba source tree.

Stefan Metzmacher (8):
  libcli/auth: debug the given computer name creds might be NULL
  libcli/auth: only expose creds to the caller on success
  s3:rpc_server/srv_netlogon: make sure we don't use an unitialized variable
  s3:libsmb: fix cli_write_and_x() against OS/2 print shares (bug #5326)
  s3:libsmb: consistently use state-size in cli_write_andx_create() (bug 
#5326)
  s3:lib/ctdbd_conn: try ctdbd_init_connection() as root (bug #8684)
  libcli/cldap: fix a crash bug in cldap_socket_recv_dgram() (bug #8593)
  s3:client: ignore SMBecho errors (the server may not support it) (bug 
#8139) Signed-off-by: Jeremy Allison j...@samba.org

Volker Lendecke (2):
  s3: Attempt to fix the vfs_commit module
  Fix bug #8686 - Packet validation checks can be done before length 
validation causing uninitialized memory read.

---


-- 
Samba Shared