Re: [Samba] how to allow ISC dhcpd to add/update entries to bind9 with bind_dlz (samba4)

2012-03-21 Thread Andreas Oster
Am 20.03.2012 19:20, schrieb Charles Tryon:
 Hi Andreas,
 
   Yes, I did a lot of work trying to get that script working (along with a
 bunch of other people on that discussion thread).  I have it mostly
 functional, but have largely backed away from that approach, since it runs
 against what appears to be the more accepted policy of letting the machines
 (in particular, the Windows machines) do their own secure update of the DNS
 records.  The unfortunate part is that the Linux clients don't seem to have
 a way to do this by default.  I have no idea how the Mac machines handle
 their DNS once they get a DHCP response.  Servers, which mostly use static
 IP assignments, are a moot point, since I can just manually create the DNS
 records and be done with it.
 
   The issue is the fact that DNS remembers who created (owns) the DNS
 record, and based on that ownership, who it will allow to change it.  If it
 is created by some dhcpd initiated transaction, then the Windows client
 itself is not allowed to update the record in the future.
 
   My feeling at this point is to try to follow the Windows Way for the time
 being (since that's the bulk of the machines on the network), and handle
 the few Linux clients (oddballs like myself) as special cases.  We also use
 DHCP reservations based on the machine's MAC address, so largely it's a
 non-issue.  (Or, at least I've got bigger fish to fry first before I go
 back and make sure the DHCP/DLZ behavior is tidy.)
 
 
 
 On Sun, Mar 18, 2012 at 3:38 AM, Andreas Oster aos...@novanetwork.dewrote:
 
 Am 17.03.2012 21:06, schrieb Matthieu Patou:
 On 03/17/2012 10:00 AM, Andreas Oster wrote:
 Hello all,

 I have set up a samba4 server with bind9 and the bind_dlz module.
 Everything is working as it should but now I need to allow the dhcp
 server to add entries to the forwarding zone. Has anybody implemented
 such a configuration ? Can this be done with the kerberos DNS dynamic
 update configuration.
 I had it working with flat file backend.
 I think that the way dhcp and bind do their DDNS is different form the
 way windows do it's DDNS, as far as I know dlz_plugin only support the
 later one so far.

 I want to achieve the following:

 1) allow non-Windows machines (printers, ILO ...) to be added by dhcpd
 2) allow Windows machines (joined to AD) to update their own entries

 2 - already works with the configuration from samba wiki

 I put our DNS experts in direct copy maybe then can advise you better
 than I.

 Hello Mattieu,

 thank you for you answer. I searched the web allot, but the
 only useful stuff I found was a script by Michael Kuron which
 has been slightly modified by Charles Tryon but I have no
 clue how to integrate this with bind9 dlz, see:


 http://blog.michael.kuron-germany.de/2011/02/isc-dhcpd-dynamic-dns-updates-against-secure-microsoft-dns/

 It would be great if someone could help me with the DDNS setup.

 best regards

 Andreas

 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

 
 
 
Hello Charles,

first I would like to thank you for this great script.

For our small network,50 or so clients, I modified your script just a
little. I have added an additional name comparison to check if the name
contains a special string ( in our case all Windows workstations are
named like DOMAINNAME+WS+Number) and if it does just exit the script.
This way I do not get the ownership issue. All other machines either do
have static IPs or are not members in the AD.

Thanks

best regards

Andreas

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Upgrade of IDMAP_VERSION from -1 to 2 is not possible with incomplete configuration

2012-03-21 Thread Michael Adam
Hi Gregory,

I am completely ignorant of interaction with likewise.
But I assume (from the logs) that you have samba's winbindd
running. I also don't know about the lwicompat_v4 backend
that you configured.

What you should know thought is that a domain placeholder ALL
is not used for the default idmap configuration any more since
samba 3.3. This must be the reason why you get logs from the
idmap_tdb backend at all.

So in order to configure the lwicompat_v4 backend as the default
(catch-all) backend, you should set:

idmap backend = lwicompat_v4

And this should be it. (remove all the other idmap-options).
There is currently no global read only option to id mapping
in 3.5. And from your configuration, the range options
(idmap uid and idmap gid) are not needed for your case.
If you specify them, then you have to specify values (like
idmap uid = 10-20).

So my guess is that you should try:

~
idmap backend = lwicompat_v4
~

instead of

~
idmap config ALL:backend = lwicompat_v4
idmap config ALL:default = yes
idmap config ALL:readonly = yes
idmap backend
idmap uid
idmap gid
~

Cheers - Michael

Gregory Machin wrote:
 Thanks for the suggestion, but no joy
 
 Below is my [global]
 
 workgroup = endace
realm = ad.DOMAIN.COM
server string = %h server
wins server = 10.0.32.2
dns proxy = no
panic action = /usr/share/samba/panic-action %d
security = ADS
encrypt passwords = true
passdb backend = tdbsam
obey pam restrictions = no
unix password sync = yes
 password server = dcn01.ad.DOMAIN.COM
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n
 *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
machine password timeout = 0
pam password change = yes
map to guest = bad user
 force group = domain^users
 idmap config ALL:backend = lwicompat_v4
 idmap config ALL:default = yes
 idmap config ALL:readonly = yes
 idmap backend
 idmap uid
 idmap gid
 hosts allow = ALL
 
usershare allow guests = yes
 
 printcap name = /etc/printcap
 
 #Logging
 #   log file = /var/log/samba/log.%m
 max log size = 1000
 #syslog = 0
 log level = 1 vfs:1
 log file = /var/log/samba/%U.%m.log
 
 
 #Network
 socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=65536
 SO_SNDBUF=65536
 #
 
 
 Any further advice ?
 
 Thanks
 
 
 On Sat, Mar 17, 2012 at 2:58 AM, Tom Noonan II thomas.noonan...@hp.com 
 wrote:
         I saw this on CentOS 6 with winbind, not LikewiseOpen.  The problem 
  is
  that it expects configuration options to be present that are flagged as 
  having
  (sane) defaults in the smb.conf man page.  Once I added the following 
  options
  for winbind to my smb.conf this problem went away:
 
  idmap backend
  idmap uid
  idmap gid
 
  I believe it was idmap backend, but I didn't verify that.
 
 
  --
  Tom Noonan II
  ESL Technician - Randstad
 
 
  On Fri, 16 Mar 2012 08:37:48 +
  Gregory Machin g...@linuxpro.co.za wrote:
 
  Hi
 
  I'm running CentOS 6.2 with samba-3.5.10-114 , and LikewiseOpen 6.1 .
 
  How do I fix these errors ?
 
  Mar 16 20:25:43 nzhmlfpr05 winbindd[2556]: [2012/03/16
  20:25:43.639871,  0] winbindd/idmap_tdb.c:287(idmap_tdb_open_db)
  Mar 16 20:25:43 nzhmlfpr05 winbindd[2556]:   Upgrade of IDMAP_VERSION
  from -1 to 2 is not possible with incomplete configuration
  Mar 16 20:25:43 nzhmlfpr05 winbindd[2556]: [2012/03/16
  20:25:43.654353,  0] winbindd/idmap_tdb.c:287(idmap_tdb_open_db)
  Mar 16 20:25:43 nzhmlfpr05 winbindd[2556]:   Upgrade of IDMAP_VERSION
  from -1 to 2 is not possible with incomplete configuration
  Mar 16 20:25:43 nzhmlfpr05 winbindd[2556]: [2012/03/16
  20:25:43.655811,  0] winbindd/idmap_tdb.c:287(idmap_tdb_open_db)
  Mar 16 20:25:43 nzhmlfpr05 winbindd[2556]:   Upgrade of IDMAP_VERSION
  from -1 to 2 is not possible with incomplete configuration
  Mar 16 20:25:43 nzhmlfpr05 winbindd[2556]: [2012/03/16
  20:25:43.674267,  0] winbindd/idmap_tdb.c:287(idmap_tdb_open_db)
  Mar 16 20:25:43 nzhmlfpr05 winbindd[2556]:   Upgrade of IDMAP_VERSION
  from -1 to 2 is not possible with incomplete configuration
  Mar 16 20:25:43 nzhmlfpr05 winbindd[2556]: [2012/03/16
  20:25:43.675524,  0] winbindd/idmap_tdb.c:287(idmap_tdb_open_db)
  Mar 16 20:25:43 nzhmlfpr05 winbindd[2556]:   Upgrade of IDMAP_VERSION
  from -1 to 2 is not possible with incomplete configuration
  Mar 16 20:25:43 nzhmlfpr05 winbindd[2556]: [2012/03/16
  20:25:43.693888,  0] winbindd/idmap_tdb.c:287(idmap_tdb_open_db)
  Mar 16 20:25:43 nzhmlfpr05 winbindd[2556]:   Upgrade of IDMAP_VERSION
  from -1 to 2 is not possible with incomplete configuration
  Mar 16 20:25:43 nzhmlfpr05 winbindd[2556]: [2012/03/16
  20:25:43.695097,  0] winbindd/idmap_tdb.c:287(idmap_tdb_open_db)
 
  Thanks
 

Re: [Samba] Samba4: error in schema?

2012-03-21 Thread steve

Hi everyone

Struggling to find a workaround for this. Sorry to bump but could 
someone give me a quick yes or no or it's-you-that's-at-fault on this one?


Thanks,
Steve

El 18/03/12 08:19, steve escribió:

Hi
There seems to be a discrepancy in the s4 schema concerning security 
groups.
Domain Users comes with gidNumber: 100. This is however contrary to 
what the schema allows. You can show this as follows:


Create a new group. samba-tool group add mygroup.
Use phpldapadmin to add the gidNumber attribute.

There is an error because gidNumber is provided by the posixGroup 
class and that objectclass is not present by default.


No problem. We add objectClass: posixGroup and then we can add 
gidNumber: xxx just fine.


This however throws up another error in that mygroup is now not a 
security group but a posix group and the ability to view and 
manipulate group members is not available in Active Directory 
Computers and Users (ADCU). We made the folllowing observations:


1. The members tabs are missing from mygroup properties in ADCU
2. you can still use samba-tool group addmembers to manipulate the groups
3. you can still select and change primary group for a user in ADCU
4. you can add users to the group under phpldapadmin but the users who 
are already members are not displayed. An error is however correctly 
displayed if you try to add a user who is already a member.
5. You can still manipulate the posixGroup as if it were a security 
group, set acl's and permissions etc from the security tab of a file 
or folder.
6. You can use a big hammer to add attributes that you should not be 
able to add. e.g. you can add gidNumber without the objectClass (which 
supplies gidNumber) being present using ldapmodify or ldbmodify.
7. posixAccount and its associated attributes work exactly as 
advertised in the schema.


Conclusion:
This is simply an inconvenience. Everything works as expected except 
being able to view the members that are in a group either in ADCU or 
phpldapadmin _after_ you have added objectClass: posixGroup to it.


Why does adding the posixGroup Class knock out the ability to be able 
to view group membership? Is this an error in the posixGroup schema?  
Is it an aim that s4 be an _exact_ replacement for m$ AD?

Is this the schema that is used?

from: MS-AD_Schema_2K8_R2_Classes, under 
/usr/local/samba/share/setup/ad-schema

cn: PosixAccount
ldapDisplayName: posixAccount
governsId: 1.3.6.1.1.1.2.0
objectClassCategory: 3
rdnAttId: uid
subClassOf: top
mayContain: uid, cn, uidNumber, gidNumber, 
unixHomeDirectory,homeDirectory, userPassword, unixUserPassword, 
loginShell, gecos,description

schemaIdGuid:ad44bb41-67d5-4d88-b575-7b20674e76d8
defaultSecurityDescriptor: 
D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

defaultHidingValue: TRUE
systemOnly: FALSE
defaultObjectCategory: 
CN=PosixAccount,CN=Schema,CN=Configuration,RootDomainDN


cn: PosixGroup
ldapDisplayName: posixGroup
governsId: 1.3.6.1.1.1.2.2
objectClassCategory: 3
rdnAttId: cn
subClassOf: top
mayContain: cn, userPassword, unixUserPassword, description,gidNumber, 
memberUid

schemaIdGuid:2a9350b8-062c-4ed0-9903-dde10d06deba
defaultSecurityDescriptor: 
D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)

defaultHidingValue: TRUE
systemOnly: FALSE
defaultObjectCategory: 
CN=PosixGroup,CN=Schema,CN=Configuration,RootDomainDN


There are full details of what we have tried with screenshots in the 
latter part of this bugzilla:


https://bugzilla.samba.org/show_bug.cgi?id=8635

Please let us know if there is anything we can test.

Cheers,
Steve
(Could someone fwd to samba-tecnical?)


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Many usershare messages logged but no usershares defined

2012-03-21 Thread Charles
There are many messages about samba usershares in the logs but no
usershares are defined:

# grep '\[2012/03/20' /var/log/samba/log.smbd | grep
process_usershare_file | wc -l
1518
# grep --ignore-case usershare /etc/samba/smb.conf.source /etc/samba
/smb.conf
[no output]
# ls -l /var/lib/samba/usershares/
total 0

The messages are typically like:

[2012/03/20 10:05:05.002947,  0]
param/loadparm.c:8686(process_usershare_file)
  process_usershare_file: stat of /var/lib/samba/usershares/share name
failed. No such file or directory
[2012/03/20 10:05:05.004924,  0]
param/loadparm.c:8686(process_usershare_file)
  process_usershare_file: stat of /var/lib/samba/usershares/share name
failed. Permission denied

One example shows ~100 lines like that in one second, probably caused by
a user running an application that has its data on that share.

Often these messages are accompanied by one or two messages like these

Mar 20 10:05:01 LS1 smbd[31614]: [2012/03/20 10:05:01.166801,  0]
../libcli/auth/ntlm_check.c:54(smb_pwd_check_ntlmv1)
Mar 20 10:05:01 LS1 smbd[31614]:   smb_pwd_check_ntlmv1: incorrect
password length (64)


The share names seen are the only two public writeable shares on the
server.

Here is smb.conf (global and affected shares)
= smb.conf begins =
[global]
workgroup = ACUR
server string = Server
security = SHARE
smb ports = 139
load printers = No
preferred master = Yes
domain master = Yes
wins support = Yes
remote announce = 10.8.0.6/ACUR 10.8.0.10/ACUR 10.8.0.14/ACUR
10.8.0.18/ACUR   10.8.0.22/ACUR 10.8.0.26/ACUR 10.8.0.30/ACUR
10.8.0.34/ACUR 10.8.0.38/ACUR   10.8.0.42/ACUR 10.8.0.46/ACUR
10.8.0.50/ACUR 10.8.0.54/ACUR 10.8.0.60/ACUR   10.8.0.64/ACUR 10.8.0.68/ACUR
guest only = Yes

[Intranet_Mapping]
comment = Intranet Mapping (MapInfo)
path = /srv/samba/Intranet_Mapping
read only = No
guest ok = Yes

[LadA share]
comment = Replacement for the Viji share
path = /srv/samba/LadA
read only = No
guest ok = Yes
= smb.conf ends =

The server is Debian Squeeze running samba 2:3.5.6~dfsg-3squeeze6. The
clients are a mixture of Windows 7 and XP.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] adding a win7 computer

2012-03-21 Thread Anna-Karin . Burman
Hi,

I am having problems adding a windows 7 professional to the domain. What am I 
doing wrong? I have added lots of XP computers without problems. It says the 
domain cannot be found (but in Swedish). Is there a special trick to Win 7? 

/Anna-Karin

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] adding a win7 computer

2012-03-21 Thread Gaiseric Vandal

On 03/21/12 10:45, anna-karin.bur...@bjurholm.se wrote:

Hi,

I am having problems adding a windows 7 professional to the domain. What am I doing wrong? I have added lots of XP computers without problems. It says the domain cannot be found (but in Swedish). Is there a special trick to Win 7? 


/Anna-Karin


Please see

http://wiki.samba.org/index.php/Windows7


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] IDMAP dump and restore for second server.

2012-03-21 Thread Johan Hendriks
Hello all.

I use Samba 3.6.3 on FreeBSD in combination with ZFS, and it all works fine.
I use zfs send to receive my store on a backup machine and i want the users id 
to be the same as on the master server so to say.
Keeps my backups easy accessable with samba!

Now i know i can dump the IDMAP database using the following: net idmap dump.

I expect a whole bunch of lines,but i get the following, we around  70 users

filer01 ~ # net idmap dump
dumping id mapping from /var/db/samba/winbindd_idmap.tdb
GID 150004 S-1-5-11
GID 150005 S-1-5-32-546
USER HWM 15
GID 150002 S-1-1-0
GID 150003 S-1-5-2
GROUP HWM 150006
filer01 ~ #

Also a tdbdump /var/db/samba/winbind_idmap.tdb gives me a small amount of Lines.

tdbdump /var/db/samba/winbindd_idmap.tdb
{
key(11) = GID 150002\00
data(8) = S-1-1-0\00
}
{
key(9) = S-1-5-11\00
data(11) = GID 150004\00
}
{
key(13) = S-1-5-32-546\00
data(11) = GID 150005\00
}
{
key(11) = GID 150005\00
data(13) = S-1-5-32-546\00
}
{
key(11) = GID 150003\00
data(8) = S-1-5-2\00
}
{
key(9) = USER HWM\00
data(4) = \F0I\02\00
}
{
key(8) = S-1-1-0\00
data(11) = GID 150002\00
}
{
key(11) = GID 150004\00
data(9) = S-1-5-11\00
}
{
key(8) = S-1-5-2\00
data(11) = GID 150003\00
}
{
key(10) = GROUP HWM\00
data(4) = \F6I\02\00
}
{
key(14) = IDMAP_VERSION\00
data(4) = \02\00\00\00
}

wbinfo -u and wbinfo -g as id username all works fine.

The relevant config part (as far as i know)

template homedir = /sanstorage/sambashare/home/%U
winbind use default domain = yes
winbind cache time = 3600
winbind nested groups = yes
winbind separator = |
winbind offline logon = yes
winbind enum users = yes
winbind enum groups = yes
winbind refresh tickets = yes
allow trusted domains = yes

idmap config * : backend = tdb
idmap config * : range = 1-8

idmap config DOMAIN1 : backend = rid
idmap config DOMAIN1 : base_rid = 500
idmap config DOMAIN1 : range = 1 - 2

idmap config DOMAIN2 : backend = rid
idmap config DOMAIN2 : base_rid = 500
idmap config DOMAIN2 : range = 3 - 4

Is there a problem , or am i missing something.
I have been googling a lot, but could not find something related.

Thanks for your time

Regards
Johan Hendriks
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] samba+ldap

2012-03-21 Thread Leonam Silva
I'm trying to combine samba + ldap, I was successful in another
attempt what motivated me to create one. deb package that would make
the whole process, I installed this package, the ldap dit was created
successfully but when I try to insert a Windows machine in the Domain
I get the message that the Referred Domain does not exist or can not
be contacted. The system log does not log connections slapd in
compensation log.nmbd the reports that my domain is ok, since I
thought that might be the fact that before I used samba compiladod
manually - with-ldap, now thank you.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba+ldap

2012-03-21 Thread Miguel Medalha



I'm trying to combine samba + ldap, I was successful in another
attempt what motivated me to create one. deb package that would make
the whole process, I installed this package, the ldap dit was created
successfully but when I try to insert a Windows machine in the Domain
I get the message that the Referred Domain does not exist or can not
be contacted. The system log does not log connections slapd in
compensation log.nmbd the reports that my domain is ok, since I
thought that might be the fact that before I used samba compiladod
manually - with-ldap, now thank you.


Are you trying to join a Windows 7 machine to the domain?

If so, please see this page:

http://wiki.samba.org/index.php/Windows7

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] IDMAP dump and restore for second server.

2012-03-21 Thread Michael Adam
Hi,

everything is fine:

You are using the rid backend for your domains (DOMAIN1 and
DOMAIN2). This is a purely algorithmical method for doing
id mappings. These mappings are not stored in databases
but calculated each time (at least when the cache entries
expire).

The default backend tdb is only used for anything but
DOMAIN1 and DOMAIN2. Apparently you don't have a third
real domain around, which is why there are so few mappings
in the db and hence in the dump.

Hope this helps.

Cheers - Michael


Johan Hendriks wrote:
 Hello all.
 
 I use Samba 3.6.3 on FreeBSD in combination with ZFS, and it all works fine.
 I use zfs send to receive my store on a backup machine and i want the users 
 id to be the same as on the master server so to say.
 Keeps my backups easy accessable with samba!
 
 Now i know i can dump the IDMAP database using the following: net idmap dump.
 
 I expect a whole bunch of lines,but i get the following, we around  70 users
 
 filer01 ~ # net idmap dump
 dumping id mapping from /var/db/samba/winbindd_idmap.tdb
 GID 150004 S-1-5-11
 GID 150005 S-1-5-32-546
 USER HWM 15
 GID 150002 S-1-1-0
 GID 150003 S-1-5-2
 GROUP HWM 150006
 filer01 ~ #
 
 Also a tdbdump /var/db/samba/winbind_idmap.tdb gives me a small amount of 
 Lines.
 
 tdbdump /var/db/samba/winbindd_idmap.tdb
 {
 key(11) = GID 150002\00
 data(8) = S-1-1-0\00
 }
 {
 key(9) = S-1-5-11\00
 data(11) = GID 150004\00
 }
 {
 key(13) = S-1-5-32-546\00
 data(11) = GID 150005\00
 }
 {
 key(11) = GID 150005\00
 data(13) = S-1-5-32-546\00
 }
 {
 key(11) = GID 150003\00
 data(8) = S-1-5-2\00
 }
 {
 key(9) = USER HWM\00
 data(4) = \F0I\02\00
 }
 {
 key(8) = S-1-1-0\00
 data(11) = GID 150002\00
 }
 {
 key(11) = GID 150004\00
 data(9) = S-1-5-11\00
 }
 {
 key(8) = S-1-5-2\00
 data(11) = GID 150003\00
 }
 {
 key(10) = GROUP HWM\00
 data(4) = \F6I\02\00
 }
 {
 key(14) = IDMAP_VERSION\00
 data(4) = \02\00\00\00
 }
 
 wbinfo -u and wbinfo -g as id username all works fine.
 
 The relevant config part (as far as i know)
 
 template homedir = /sanstorage/sambashare/home/%U
 winbind use default domain = yes
 winbind cache time = 3600
 winbind nested groups = yes
 winbind separator = |
 winbind offline logon = yes
 winbind enum users = yes
 winbind enum groups = yes
 winbind refresh tickets = yes
 allow trusted domains = yes
 
 idmap config * : backend = tdb
 idmap config * : range = 1-8
 
 idmap config DOMAIN1 : backend = rid
 idmap config DOMAIN1 : base_rid = 500
 idmap config DOMAIN1 : range = 1 - 2
 
 idmap config DOMAIN2 : backend = rid
 idmap config DOMAIN2 : base_rid = 500
 idmap config DOMAIN2 : range = 3 - 4
 
 Is there a problem , or am i missing something.
 I have been googling a lot, but could not find something related.
 
 Thanks for your time
 
 Regards
 Johan Hendriks
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba



pgpFKws3jWOPl.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] samba4(git) user log on to workstation not work

2012-03-21 Thread Matthias Dieter Wallnöfer

This setting seems only to work with computer names, not sites.

Mohammad Ebrahim Abravi schrieb:

*This Error:

Your account is configured to prevent you from using this computer.*

On Wed, Mar 7, 2012 at 11:36 AM, Mohammad Ebrahim Abravilamp@gmail.com

wrote:
admin pak -
select an OU -  right click on a user name  -  properties -  account -
Log On to -  checked (the following computer) -  add  (site9 )


On Wed, Mar 7, 2012 at 10:58 AM, Mohammad Ebrahim Abravi
lamp@gmail.com  wrote:


Hi

set the following setting on samba 4 but user can not  login to site9 !,
what?

user -  properties -  account -  Log On to -  checked (the following
computer) -  add  (site9 )

Note : On samba 4.0.11 this setting work





--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Unable to start Samba on AIX 6.1

2012-03-21 Thread neetesh.gupta
Hi Allison,

I have downloaded the package yesterday night, complied  
installed. While I am starting the nmbd  smbd process, I am getting below 
error.


# ./nmbd
exec(): 0509-036 Cannot load program ./nmbd because of the following errors:
0509-150   Dependent module libwbclient.so could not be loaded.
0509-022 Cannot load module libwbclient.so.
0509-026 System error: A file or directory in the path name does not 
exist.
# ./smbd
exec(): 0509-036 Cannot load program ./smbd because of the following errors:
0509-150   Dependent module libtalloc.so could not be loaded.
0509-022 Cannot load module libtalloc.so.
0509-026 System error: A file or directory in the path name does not 
exist.
#


Thanks
Neetesh Gupta
Accenture Infrastructure Outsourcing
AIX Administrator
Stanford Hospital and Clinics
phone:   +1 6122984817
e-mail:  neetesh.gu...@accenture.com
Team email id : shc-u...@accenture.com
ITSM queue : IM-DCS-SHC-AIX-UNIX-Server


-Original Message-
From: Jeremy Allison [mailto:j...@samba.org]
Sent: Monday, March 12, 2012 12:10 PM
To: Gupta, Neetesh
Cc: samba@lists.samba.org
Subject: Re: [Samba] Unable to start Samba on AIX 6.1

On Fri, Mar 09, 2012 at 04:42:49PM +, neetesh.gu...@accenture.com wrote:
 Hi All,

 I have installed the SAMBA 3.2.0.0 on my AIX 6.1 machine. 
 While I am starting nmbd process, I am getting below error.

 [2012/03/08 20:52:20,  0] nmbd/nmbd.c:main(849)
   nmbd version 3.2.0 started.
   Copyright Andrew Tridgell and the Samba Team 1992-2008
 [2012/03/08 20:52:20,  0] lib/interface.c:load_interfaces(517)
   ERROR: Could not determine network interfaces, you must use a
 interfaces config line


 While I added the below two lines in my smb.conf file

interfaces = en2
bind interfaces only = yes

nmbd is crashing with below error.

 [2012/03/08 20:44:45,  0] nmbd/nmbd.c:main(849)
   nmbd version 3.2.0 started.
   Copyright Andrew Tridgell and the Samba Team 1992-2008
 [2012/03/08 20:44:46,  0] lib/interface.c:load_interfaces(540)
   WARNING: no network interfaces found
 [2012/03/08 20:44:46,  0] nmbd/nmbd_subnetdb.c:create_subnets(205)
   create_subnets: No local interfaces !
 [2012/03/08 20:44:46,  0] nmbd/nmbd_subnetdb.c:create_subnets(206)
   create_subnets: Waiting for an interface to appear ...
 [2012/03/08 20:44:51,  0] lib/fault.c:fault_report(40)
   ===
 [2012/03/08 20:44:51,  0] lib/fault.c:fault_report(41)
   INTERNAL ERROR: Signal 11 in pid 46203380 (3.2.0)
   Please read the Trouble-Shooting section of the Samba3-HOWTO
 [2012/03/08 20:44:51,  0] lib/fault.c:fault_report(43)

   From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
 [2012/03/08 20:44:51,  0] lib/fault.c:fault_report(44)
   ===
 [2012/03/08 20:44:51,  0] lib/util.c:smb_panic(1666)
   PANIC (pid 46203380): internal error
 [2012/03/08 20:44:51,  0] lib/util.c:log_stack_trace(1820)
   unable to produce a stack trace on this platform
 [2012/03/08 20:44:51,  0] lib/fault.c:dump_core(201)
   dumping core in /var/cores/nmbd

3.2.0 is a very old, unsupported release. Is there a chance you can install the 
latest 3.6.3 release instead ?

Jeremy.



Subject to local law, communications with Accenture and its affiliates 
including telephone calls and emails (including content), may be monitored by 
our systems for the purposes of security and the assessment of internal 
compliance with Accenture policy.
__

www.accenture.com

Subject to local law, communications with Accenture and its affiliates 
including telephone calls and emails (including content), may be monitored by 
our systems for the purposes of security and the assessment of internal 
compliance with Accenture policy.
__

www.accenture.com

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Unable to start Samba on AIX 6.1

2012-03-21 Thread neetesh.gupta
Done that  below is my smb.conf file

# cat /usr/local/samba/lib/smb.conf
[global]
   workgroup = Materials
   server string = MSCM Share Server
   max log size = 100
   load printers = No
   dns proxy = No
   security = share

[mscmshare]
   path = /home/ngupta
   read only = No
   guest ok = Yes



I am able to start nmbd process but unable to start smbd process.

# pwd
/usr/local/samba/sbin
# ./nmbd 
[1] 8782068
# ./smbd 
[2] 11141138
#
[2] + Illegal instruction(coredump) ./smbd 
# ps -ef |grep -i mbd
root  8782068 11010066  91 12:33:39  pts/2  0:09 ./nmbd
root 11141140 11010066   0 12:33:56  pts/2  0:00 grep -i mbd

Thanks
Neetesh Gupta
Accenture Infrastructure Outsourcing
AIX Administrator
Stanford Hospital and Clinics
phone:   +1 6122984817
e-mail:  neetesh.gu...@accenture.com
Team email id : shc-u...@accenture.com
ITSM queue : IM-DCS-SHC-AIX-UNIX-Server


-Original Message-
From: Jeremy Allison [mailto:j...@samba.org]
Sent: Monday, March 12, 2012 1:18 PM
To: Gupta, Neetesh
Cc: j...@samba.org; samba@lists.samba.org
Subject: Re: [Samba] Unable to start Samba on AIX 6.1

On Mon, Mar 12, 2012 at 05:17:39PM +, neetesh.gu...@accenture.com wrote:
 Hi Allison,

 I have downloaded the package yesterday night, complied  
 installed. While I am starting the nmbd  smbd process, I am getting below 
 error.


 # ./nmbd
 exec(): 0509-036 Cannot load program ./nmbd because of the following errors:
 0509-150   Dependent module libwbclient.so could not be loaded.
 0509-022 Cannot load module libwbclient.so.
 0509-026 System error: A file or directory in the path name does not 
 exist.
 # ./smbd
 exec(): 0509-036 Cannot load program ./smbd because of the following errors:
 0509-150   Dependent module libtalloc.so could not be loaded.
 0509-022 Cannot load module libtalloc.so.
 0509-026 System error: A file or directory in the path name does not 
 exist.

Set your shared library load path to /usr/local/samba/lib.



Subject to local law, communications with Accenture and its affiliates 
including telephone calls and emails (including content), may be monitored by 
our systems for the purposes of security and the assessment of internal 
compliance with Accenture policy.
__

www.accenture.com

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Domain users are loosing there groups after some time.

2012-03-21 Thread Голостенов Михаил
Hello.
I have the same problem with Samba 3.6.3
How did you solved it?
Thanks.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] how to allow ISC dhcpd to add/update entries to bind9 with bind_dlz (samba4)

2012-03-21 Thread Amitay Isaacs
Hi Andreas,

On Sun, Mar 18, 2012 at 7:06 AM, Matthieu Patou m...@samba.org wrote:
 On 03/17/2012 10:00 AM, Andreas Oster wrote:

 Hello all,

 I have set up a samba4 server with bind9 and the bind_dlz module.
 Everything is working as it should but now I need to allow the dhcp
 server to add entries to the forwarding zone. Has anybody implemented
 such a configuration ? Can this be done with the kerberos DNS dynamic
 update configuration.

 I had it working with flat file backend.
 I think that the way dhcp and bind do their DDNS is different form the way
 windows do it's DDNS, as far as I know dlz_plugin only support the later one
 so far.

 I want to achieve the following:

 1) allow non-Windows machines (printers, ILO ...) to be added by dhcpd

You need to configure secure updates from dhcpd as dlz_bind9 plugin
only supports secure dynamic updates. Following link might help to set
up secure dynamic updates from dhcpd.

http://blog.michael.kuron-germany.de/2011/02/isc-dhcpd-dynamic-dns-updates-against-secure-microsoft-dns/

 2) allow Windows machines (joined to AD) to update their own entries

 2 - already works with the configuration from samba wiki

This should work automatically with the current master. But remember
that if you update a DNS entry for windows machine through DHCP, then
the windows machine itself may not be able to update its own entry
because of the ACLs.

Amitay.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Receiving async directory change notifications from a Windows Server host on a Linux client

2012-03-21 Thread Tin Tvrtković
Hello everyone,

I need a way to programatically monitor a remote SMB share (hosted on a
Windows server) for new files, in an asynchronous (inotify-like) way from a
Linux machine. The directory I'd be monitoring might have a large number of
files, so I'd like to avoid constant polling. I'm open to just about
anything, from parsing smbclient stdout, to writing my own little C wrapper
around libsmbclient or a JCIFS Java application.

I'd like to know if this kind of async monitoring is even possible, and
what would be a good way to go about implementing it?

Thanks in advance.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Disable AD checking per share in smb.conf [sec=unclassified]

2012-03-21 Thread Kym Newbery

Hi,


Is it possible to have non-authenticating shares on an server with security=ADS 
 ?


I have a RHEL server, with Centrify Express, and joined to a domain, but I would 
like to have a samba share that doesn't request a username/password for machines 
not on the domain.



When I have a plain windows XP machine (not on the domain) attempt to connect, I 
get asked for a username/password.


Is this possible? (to have a public share) whilst also having shares that use AD 
usernames for other users.


I'm using

CentrifyDC-adbindproxy-4.5.1-504.i386
CentrifyDC-5.0.1-177.i386
CentrifyDC-samba-3.5.9-4.5.1.504.i386
CentrifyDC-openssh-5.9p1-4.5.2.534.i386


Regards
Kym


--

[global]
security = ADS
realm = 
workgroup = 
netbios name = XXX
server string = Science Technical Support - Development Server

auth methods = guest, sam, winbind, ntdomain
machine password timeout = 0
passdb backend = tdbsam:/etc/samba/private/passdb.tdb

#
# Using kerberos keytab may lead to a serious Samba crash.
# Centrify recommends against using it.
# Kerberos authentication is still supported without it.
#
use kerberos keytab = No
client use spnego principal = true

# If your Samba server only serves to Windows systems, try server signing = 
mandatory.

server signing = auto

template shell = /bin/bash

winbind use default domain = Yes

winbind enum users = No
winbind enum groups = No
winbind nested groups = Yes

ignore syssetgroups error = No

idmap uid = 1000 - 2
idmap gid = 1000 - 2

enable core files = false

# Disable Logging to syslog, and only write log to Samba standard log files.

syslog = 0

guest account = nobody
map to guest = Bad Uid

[samba-test]
path = /samba-test
 guest ok = yes
read only = yes
browseable = yes
force user = nobody
force group = nobody

--


--
Kym B Newbery, Science Technical Support Electronics Design Engineer
Australian Antarctic Division 203 Channel Highway, Kingston, TASMANIA, 7050.
PHONE +61 3 6232 3329  FAX +61 3 6232 3351


___

   Australian Antarctic Division - Commonwealth of Australia
IMPORTANT: This transmission is intended for the addressee only. If you are not 
the
intended recipient, you are notified that use or dissemination of this 
communication is
strictly prohibited by Commonwealth law. If you have received this transmission 
in error,
please notify the sender immediately by e-mail or by telephoning +61 3 6232 
3209 and
DELETE the message.
   Visit our web site at http://www.antarctica.gov.au/
___
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[SCM] Samba Shared Repository - branch master updated

2012-03-21 Thread Andreas Schneider
The branch, master has been updated
   via  06db3bf waf: Add autoconf --target support.
  from  b114043 s4-upgradedns: Add DNS partitions in msDS-hasMasterNCs in 
NTDS settings

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 06db3bfa374026c05dc21bf0454234dbdbedb26b
Author: Andreas Schneider a...@samba.org
Date:   Thu Mar 15 17:04:00 2012 +0100

waf: Add autoconf --target support.

This is needed on some platforms so that you can set it and it is not
automagically transformed into --targets. The --target option is
normally set by the RPM %configure macro.

Autobuild-User: Andreas Schneider a...@cryptomilk.org
Autobuild-Date: Wed Mar 21 11:54:02 CET 2012 on sn-devel-104

---

Summary of changes:
 buildtools/wafsamba/wscript |3 +++
 1 files changed, 3 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/buildtools/wafsamba/wscript b/buildtools/wafsamba/wscript
index 094f9cc..49d2107 100755
--- a/buildtools/wafsamba/wscript
+++ b/buildtools/wafsamba/wscript
@@ -156,6 +156,9 @@ def set_options(opt):
 opt.add_option('--host',
   help=SUPPRESS_HELP,
   action='store', dest='AUTOCONF_HOST', default='')
+opt.add_option('--target',
+  help=SUPPRESS_HELP,
+  action='store', dest='AUTOCONF_TARGET', default='')
 opt.add_option('--program-prefix',
   help=SUPPRESS_HELP,
   action='store', dest='AUTOCONF_PROGRAM_PREFIX', default='')


-- 
Samba Shared Repository


[SCM] Samba Website Repository - branch master updated

2012-03-21 Thread Michael Adam
The branch, master has been updated
   via  e3b85dc Add news links to the MS SMB2.2 interop event.
  from  83705c1 Add blog post about SMB2.2 interop event from my blog.

http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master


- Log -
commit e3b85dc6bd5a557bf807c56b9ef67f27e325cc6d
Author: Michael Adam ob...@samba.org
Date:   Wed Mar 21 11:53:05 2012 +0100

Add news links to the MS SMB2.2 interop event.

---

Summary of changes:
 generated_news/latest_10_bodies.html|   20 ++--
 generated_news/latest_10_headlines.html |4 ++--
 generated_news/latest_2_bodies.html |   16 ++--
 3 files changed, 22 insertions(+), 18 deletions(-)


Changeset truncated at 500 lines:

diff --git a/generated_news/latest_10_bodies.html 
b/generated_news/latest_10_bodies.html
index 4d579a2..667a083 100644
--- a/generated_news/latest_10_bodies.html
+++ b/generated_news/latest_10_bodies.html
@@ -1,3 +1,13 @@
+   h5a name=SMB2.2 Interop Event20 March 2012/a/h5
+   p class=headlineReport: Microsoft SMB2.2 Interop Event/p
+   pA few Samba Team members recently accepted an invitation by Microsoft
+   and attended an SMB2.2 interop testing opportunity.
+   a href=http://www.samba.org/~obnox/;Michael Adam/a has
+   written a report about this successful event./p
+
+   pIf you are interested in this event and Samba's progress in the SMB2 
area,
+   please read a 
href=/samba/news/developers/obnox-samba-team-visits-microsoft-for-smb2-2-interop-event.htmlMichael's
 full report/a./p
+
h5a name=3.5.1312 March 2012/a/h5
p class=headlineSamba 3.5.13 Available for Download/p
pThis is the latest stable release of the Samba 3.5 series./p
@@ -75,13 +85,3 @@ nice enough to write a comprehensive summary with some focus 
on
 
pAre you curious about the
 a href=/samba/news/developers/2011-snia-sdc-report.html2011 SNIA SDC 
Report/a?/p
-
-
-   h5a name=3.4.1523 August 2011/a/h5
-   p class=headlineSamba 3.4.15 Available for Download/p
-   pThis is the latest stable release of the Samba 3.4 series./p
-
-pThe uncompressed tarballs and patch files have been signed
-using GnuPG (ID 6568B7EA).  The source code can be
-a href=http://samba.org/samba/ftp/stable/samba-3.4.15.tar.gz;downloaded
-now/a. A a 
href=http://samba.org/samba/ftp/patches/patch-3.4.14-3.4.15.diffs.gz;patch 
against Samba 3.4.15/a is also available. See a 
href=http://samba.org/samba/history/samba-3.4.15.html;the release notes for 
more info/a./p
diff --git a/generated_news/latest_10_headlines.html 
b/generated_news/latest_10_headlines.html
index 2dd84b1..e9af10b 100644
--- a/generated_news/latest_10_headlines.html
+++ b/generated_news/latest_10_headlines.html
@@ -1,4 +1,6 @@
 ul
+   li 20 March 2012 a 
href=/samba/news/developers/obnox-samba-team-visits-microsoft-for-smb2-2-interop-event.htmlReport:
 Microsoft SMB2.2 Interop Event/a/li
+
li 12 March 2012 a href=#3.5.13Samba 3.5.13 Available for 
Download/a/li
 
li 23 February 2012 a href=#CVE-2012-0870Samba pre-3.4 Security 
Issue/a/li
@@ -16,6 +18,4 @@
li 20 October 2011 a href=#3.6.1Samba 3.6.1 Available for 
Download/a/li
 
li 26 September 2011 a 
href=/samba/news/developers/2011-snia-sdc-report.html2011 SNIA SDC 
Report/a/li
-
-   li 23 August 2011 a href=#3.4.15Samba 3.4.15 Available for 
Download/a/li
 /ul
diff --git a/generated_news/latest_2_bodies.html 
b/generated_news/latest_2_bodies.html
index e439ee1..3a9ba50 100644
--- a/generated_news/latest_2_bodies.html
+++ b/generated_news/latest_2_bodies.html
@@ -1,3 +1,13 @@
+   h5a name=SMB2.2 Interop Event20 March 2012/a/h5
+   p class=headlineReport: Microsoft SMB2.2 Interop Event/p
+   pA few Samba Team members recently accepted an invitation by Microsoft
+   and attended an SMB2.2 interop testing opportunity.
+   a href=http://www.samba.org/~obnox/;Michael Adam/a has
+   written a report about this successful event./p
+
+   pIf you are interested in this event and Samba's progress in the SMB2 
area,
+   please read a 
href=/samba/news/developers/obnox-samba-team-visits-microsoft-for-smb2-2-interop-event.htmlMichael's
 full report/a./p
+
h5a name=3.5.1312 March 2012/a/h5
p class=headlineSamba 3.5.13 Available for Download/p
pThis is the latest stable release of the Samba 3.5 series./p
@@ -6,9 +16,3 @@
 using GnuPG (ID 6568B7EA).  The source code can be
 a href=http://samba.org/samba/ftp/stable/samba-3.5.13.tar.gz;downloaded
 now/a. A a 
href=http://samba.org/samba/ftp/patches/patch-3.5.12-3.5.13.diffs.gz;patch 
against Samba 3.5.12/a is also available. See a 
href=http://samba.org/samba/history/samba-3.5.13.html;the release notes for 
more info/a./p
-
-   h5a name=CVE-2012-087023 February 2012/a/h5
-   p 

[SCM] Samba Shared Repository - branch master updated

2012-03-21 Thread Volker Lendecke
The branch, master has been updated
   via  f3fe536 s3: Move the notify_ctx to the smbd_server_connection
   via  7dcc2bf s3: Remove conn param from notify_init()
   via  91f7725 s3: Remove conn param from sys_notify_context_create
   via  6a2bf12 s3: Remove conn from sys_notify_context
   via  8e256a2 s3: Pass conn to sys_notify_watch()
   via  8044db0 s3: Pass conn to notify_add()
   via  4319076 s3: Pass path through vfs_notify_watch
  from  06db3bf waf: Add autoconf --target support.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit f3fe53668f5f42123ab4d91de23ac4f16bf12733
Author: Volker Lendecke v...@samba.org
Date:   Wed Mar 21 12:18:09 2012 +0100

s3: Move the notify_ctx to the smbd_server_connection

We only need one notify_ctx per smbd. The notify_array can become quite 
large.
It's based on absolute paths, so there's no point in having a copy of the
complete array in memory multiple times.

Autobuild-User: Volker Lendecke v...@samba.org
Autobuild-Date: Wed Mar 21 14:26:07 CET 2012 on sn-devel-104

commit 7dcc2bf7af10c6bf5f714b43ca81083fa1bea0b9
Author: Volker Lendecke v...@samba.org
Date:   Wed Mar 21 11:59:27 2012 +0100

s3: Remove conn param from notify_init()

commit 91f77253e70d8b41f21f62282a7a876a731a795b
Author: Volker Lendecke v...@samba.org
Date:   Wed Mar 21 11:55:55 2012 +0100

s3: Remove conn param from sys_notify_context_create

commit 6a2bf12f6a95fcff747f28ea5089c6e93b26643c
Author: Volker Lendecke v...@samba.org
Date:   Wed Mar 21 11:52:27 2012 +0100

s3: Remove conn from sys_notify_context

commit 8e256a2734bed8785c5fe919a442627050e70af9
Author: Volker Lendecke v...@samba.org
Date:   Wed Mar 21 11:47:50 2012 +0100

s3: Pass conn to sys_notify_watch()

commit 8044db0a4d625598bbd4cf676efc74525dc3
Author: Volker Lendecke v...@samba.org
Date:   Wed Mar 21 11:47:50 2012 +0100

s3: Pass conn to notify_add()

commit 4319076ccaf3e6264207a88b88dea0fa63b31879
Author: Volker Lendecke v...@samba.org
Date:   Mon Mar 19 21:57:50 2012 +0100

s3: Pass path through vfs_notify_watch

---

Summary of changes:
 examples/VFS/skel_transparent.c  |   16 ++--
 source3/include/smb.h|2 --
 source3/include/vfs.h|2 ++
 source3/include/vfs_macros.h |8 
 source3/modules/vfs_default.c|6 --
 source3/modules/vfs_full_audit.c |4 +++-
 source3/modules/vfs_notify_fam.c |4 +++-
 source3/modules/vfs_time_audit.c |3 ++-
 source3/smbd/files.c |6 --
 source3/smbd/globals.h   |1 +
 source3/smbd/notify.c|   18 ++
 source3/smbd/notify_inotify.c|5 +++--
 source3/smbd/notify_internal.c   |   15 ++-
 source3/smbd/proto.h |   12 +++-
 source3/smbd/service.c   |   11 ++-
 source3/smbd/vfs.c   |3 ++-
 16 files changed, 67 insertions(+), 49 deletions(-)


Changeset truncated at 500 lines:

diff --git a/examples/VFS/skel_transparent.c b/examples/VFS/skel_transparent.c
index b384790..964ba6d 100644
--- a/examples/VFS/skel_transparent.c
+++ b/examples/VFS/skel_transparent.c
@@ -357,12 +357,16 @@ static char *skel_realpath(vfs_handle_struct *handle,  
const char *path)
return SMB_VFS_NEXT_REALPATH(handle, path);
 }
 
-static NTSTATUS skel_notify_watch(struct vfs_handle_struct *handle,
-   struct sys_notify_context *ctx, struct notify_entry *e,
-   void (*callback)(struct sys_notify_context *ctx, void 
*private_data, struct notify_event *ev),
-   void *private_data, void *handle_p)
-{
-   return SMB_VFS_NEXT_NOTIFY_WATCH(handle, ctx, e, callback,
+static NTSTATUS skel_notify_watch(
+   struct vfs_handle_struct *handle,
+   struct sys_notify_context *ctx,
+   struct notify_entry *e,
+   const char *path,
+   void (*callback)(struct sys_notify_context *ctx, void *private_data,
+struct notify_event *ev),
+   void *private_data, void *handle_p)
+{
+   return SMB_VFS_NEXT_NOTIFY_WATCH(handle, ctx, e, path, callback,
private_data, handle_p);
 }
 
diff --git a/source3/include/smb.h b/source3/include/smb.h
index 382926c..a12ca54 100644
--- a/source3/include/smb.h
+++ b/source3/include/smb.h
@@ -192,7 +192,6 @@ struct notify_change_request;
 struct sys_notify_backend;
 struct sys_notify_context {
struct event_context *ev;
-   struct connection_struct *conn;
void *private_data; /* For use by the system backend */
 };
 
@@ -428,7 +427,6 @@ typedef struct connection_struct {
name_compare_entry *aio_write_behind_list; /* Per-share list of files 
to use aio write behind on. */   
struct dfree_cached_info *dfree_info;
struct trans_state 

autobuild: intermittent test failure detected

2012-03-21 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2012-03-21-1427/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-03-21-1427/samba3.stderr
   http://git.samba.org/autobuild.flakey/2012-03-21-1427/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-03-21-1427/samba4.stderr
   http://git.samba.org/autobuild.flakey/2012-03-21-1427/samba4.stdout
  
The top commit at the time of the failure was:

commit 06db3bfa374026c05dc21bf0454234dbdbedb26b
Author: Andreas Schneider a...@samba.org
Date:   Thu Mar 15 17:04:00 2012 +0100

waf: Add autoconf --target support.

This is needed on some platforms so that you can set it and it is not
automagically transformed into --targets. The --target option is
normally set by the RPM %configure macro.

Autobuild-User: Andreas Schneider a...@cryptomilk.org
Autobuild-Date: Wed Mar 21 11:54:02 CET 2012 on sn-devel-104


[SCM] Samba Shared Repository - branch master updated

2012-03-21 Thread Michael Adam
The branch, master has been updated
   via  217d041 s4-samba-tool: add password verification in change user pass
   via  5b4d5be s4-samba-tool: add password verification in add user
   via  70e7124 s4-provision: don't ask only 3 times for passwd in 
interactive mode
   via  0f35c4a s4-provision: add password verification in interactive mode
  from  f3fe536 s3: Move the notify_ctx to the smbd_server_connection

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 217d04138b9ba13ca30ea9d826e6b515d9e593dc
Author: Björn Baumbach b...@sernet.de
Date:   Mon Mar 19 14:48:43 2012 +0100

s4-samba-tool: add password verification in change user pass

Signed-off-by: Michael Adam ob...@samba.org

Autobuild-User: Michael Adam ob...@samba.org
Autobuild-Date: Wed Mar 21 17:43:35 CET 2012 on sn-devel-104

commit 5b4d5bee44d595dfd11563615f37bb45b17e60b1
Author: Björn Baumbach b...@sernet.de
Date:   Thu Mar 8 15:40:58 2012 +0100

s4-samba-tool: add password verification in add user

Signed-off-by: Michael Adam ob...@samba.org

commit 70e71240e27e4b36b235afc0aeb302710a2b580e
Author: Björn Baumbach b...@sernet.de
Date:   Tue Mar 20 11:10:44 2012 +0100

s4-provision: don't ask only 3 times for passwd in interactive mode

Signed-off-by: Michael Adam ob...@samba.org

commit 0f35c4a242db4dd545bfacd86d38e596e06454bc
Author: Björn Baumbach b...@sernet.de
Date:   Thu Mar 8 15:27:05 2012 +0100

s4-provision: add password verification in interactive mode

Since we do not print the password out (anymore), it is necessary to
verify the entered password.

Signed-off-by: Michael Adam ob...@samba.org

---

Summary of changes:
 source4/scripting/python/samba/netcmd/user.py |   10 +-
 source4/setup/provision   |   14 ++
 2 files changed, 19 insertions(+), 5 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/scripting/python/samba/netcmd/user.py 
b/source4/scripting/python/samba/netcmd/user.py
index f44ebca..6ba6150 100644
--- a/source4/scripting/python/samba/netcmd/user.py
+++ b/source4/scripting/python/samba/netcmd/user.py
@@ -120,6 +120,10 @@ Example3 shows how to create a new user in the OrgUnit 
organizational unit.
 if password is not None and password is not '':
 break
 password = getpass(New Password: )
+passwordverify = getpass(Retype Password: )
+if not password == passwordverify:
+password = None
+self.outf.write(Sorry, passwords do not match.\n)
 
 lp = sambaopts.get_loadparm()
 creds = credopts.get_credentials(lp)
@@ -438,10 +442,14 @@ class cmd_user_password(Command):
 net = Net(creds, lp, server=credopts.ipaddress)
 
 password = newpassword
-while 1:
+while True:
 if password is not None and password is not '':
 break
 password = getpass(New Password: )
+passwordverify = getpass(Retype Password: )
+if not password == passwordverify:
+password = None
+self.outf.write(Sorry, passwords do not match.\n)
 
 try:
 net.change_password(password)
diff --git a/source4/setup/provision b/source4/setup/provision
index 4316ad0..554a516 100755
--- a/source4/setup/provision
+++ b/source4/setup/provision
@@ -164,12 +164,18 @@ if opts.interactive:
 sys.exit(1)
 
 opts.server_role = ask(Server Role (dc, member, standalone), dc)
-for i in range(3):
-opts.adminpass = getpass(Administrator password: )
-if not opts.adminpass:
+while True:
+adminpass = getpass(Administrator password: )
+if not adminpass:
 print sys.stderr, Invalid administrator password.
 else:
-break
+adminpassverify = getpass(Retype password: )
+if not adminpass == adminpassverify:
+print sys.stderr, Sorry, passwords do not match.
+else:
+opts.adminpass = adminpass
+break
+
 else:
 if opts.realm in (None, ):
 opts.realm = sambaopts._lp.get('realm')


-- 
Samba Shared Repository


autobuild: intermittent test failure detected

2012-03-21 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2012-03-21-1822/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-03-21-1822/samba3.stderr
   http://git.samba.org/autobuild.flakey/2012-03-21-1822/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-03-21-1822/samba4.stderr
   http://git.samba.org/autobuild.flakey/2012-03-21-1822/samba4.stdout
  
The top commit at the time of the failure was:

commit 217d04138b9ba13ca30ea9d826e6b515d9e593dc
Author: Björn Baumbach b...@sernet.de
Date:   Mon Mar 19 14:48:43 2012 +0100

s4-samba-tool: add password verification in change user pass

Signed-off-by: Michael Adam ob...@samba.org

Autobuild-User: Michael Adam ob...@samba.org
Autobuild-Date: Wed Mar 21 17:43:35 CET 2012 on sn-devel-104


autobuild: intermittent test failure detected

2012-03-21 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2012-03-21-2228/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-03-21-2228/samba3.stderr
   http://git.samba.org/autobuild.flakey/2012-03-21-2228/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-03-21-2228/samba4.stderr
   http://git.samba.org/autobuild.flakey/2012-03-21-2228/samba4.stdout
  
The top commit at the time of the failure was:

commit 217d04138b9ba13ca30ea9d826e6b515d9e593dc
Author: Björn Baumbach b...@sernet.de
Date:   Mon Mar 19 14:48:43 2012 +0100

s4-samba-tool: add password verification in change user pass

Signed-off-by: Michael Adam ob...@samba.org

Autobuild-User: Michael Adam ob...@samba.org
Autobuild-Date: Wed Mar 21 17:43:35 CET 2012 on sn-devel-104


[SCM] CTDB repository - branch 1.13 updated - ctdb-1.13-14-gae86409

2012-03-21 Thread Ronnie Sahlberg
The branch, 1.13 has been updated
   via  ae86409ded3a242dd2f7452287ebdb55e006b055 (commit)
   via  980beee0aea319d8670a538858895ba662e036f8 (commit)
  from  6802b43c09cd11cc3074882e7a43fae52dc914a5 (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=1.13


- Log -
commit ae86409ded3a242dd2f7452287ebdb55e006b055
Author: Ronnie Sahlberg ronniesahlb...@gmail.com
Date:   Thu Mar 22 09:05:49 2012 +1100

Make NoIPFailback a node local setting. Nodes that have NoIPFailback set to 
!0 can not takeover new ip addresses during failover.

Remove the old global setting for this unused tunable and add it as a new 
node flag. This node flag is only valid/defined within the takeover subsystem 
in the recovery daemon. Add async functions to collec the NoIPFailback settings 
for each node.

This will later e used to disqualify certain nodes from being takeover 
targets when we perform reallocation.

commit 980beee0aea319d8670a538858895ba662e036f8
Author: Ronnie Sahlberg ronniesahlb...@gmail.com
Date:   Wed Mar 21 16:41:20 2012 +1100

New version 1.13.1

---

Summary of changes:
 include/ctdb_protocol.h |2 +
 server/ctdb_takeover.c  |   65 ++
 2 files changed, 50 insertions(+), 17 deletions(-)


Changeset truncated at 500 lines:

diff --git a/include/ctdb_protocol.h b/include/ctdb_protocol.h
index a153f01..ae989a9 100644
--- a/include/ctdb_protocol.h
+++ b/include/ctdb_protocol.h
@@ -559,6 +559,8 @@ struct ctdb_node_map {
 #define NODE_FLAGS_DISABLED
(NODE_FLAGS_UNHEALTHY|NODE_FLAGS_PERMANENTLY_DISABLED)
 #define NODE_FLAGS_INACTIVE
(NODE_FLAGS_DELETED|NODE_FLAGS_DISCONNECTED|NODE_FLAGS_BANNED|NODE_FLAGS_STOPPED)
 
+#define NODE_FLAGS_NOIPFAILBACK0x0100 /* this node can not 
be failed back onto, this flag is ONLY valid within the recovery daemon */
+
 
 struct ctdb_public_ip {
uint32_t pnn;
diff --git a/server/ctdb_takeover.c b/server/ctdb_takeover.c
index bff22a8..dba375b 100644
--- a/server/ctdb_takeover.c
+++ b/server/ctdb_takeover.c
@@ -1980,19 +1980,6 @@ try_again:
basic_allocate_unassigned(ctdb, nodemap, mask, all_ips);
}
 
-   /* If we dont want ips to fail back after a node becomes healthy
-  again, we wont even try to reallocat the ip addresses so that
-  they are evenly spread out.
-  This can NOT be used at the same time as DeterministicIPs !
-   */
-   if (1 == ctdb-tunable.no_ip_failback) {
-   if (1 == ctdb-tunable.deterministic_public_ips) {
-   DEBUG(DEBUG_ERR, (ERROR: You can not use 
'DeterministicIPs' and 'NoIPFailback' at the same time\n));
-   }
-   goto finished;
-   }
-
-
/* now, try to make sure the ip adresses are evenly distributed
   across the node.
*/
@@ -2008,16 +1995,37 @@ try_again:
 
/* finished distributing the public addresses, now just send the 
   info out to the nodes
-   */
-finished:
-
-   /* at this point -pnn is the node which will own each IP
+  at this point -pnn is the node which will own each IP
   or -1 if there is no node that can cover this ip
*/
 
return;
 }
 
+static void noipfailback_cb(struct ctdb_context *ctdb, uint32_t pnn, int32_t 
res, TDB_DATA outdata, void *callback)
+{
+   struct ctdb_node_map *nodemap = (struct ctdb_node_map *)callback;
+
+   if (res != 0) {
+   DEBUG(DEBUG_ERR,(Failure to read NoIPFailback tunable from 
remote node %d\n, pnn));
+   return;
+   }
+
+   if (outdata.dsize != sizeof(uint32_t)) {
+   DEBUG(DEBUG_ERR,(Wrong size of returned data when reading 
NoIPFailback tunable from node %d. Expected %d bytes but received %d bytes\n, 
pnn, (int)sizeof(uint32_t), (int)outdata.dsize));
+   return;
+   }
+
+   if (pnn = nodemap-num) {
+   DEBUG(DEBUG_ERR,(Got NoIPFailback reply from node %d but 
nodemap only has %d entries\n, pnn, nodemap-num));
+   return;
+   }
+
+   if (*(uint32_t *)outdata.dptr != 0) {
+   nodemap-nodes[pnn].flags |= NODE_FLAGS_NOIPFAILBACK;
+   }
+}
+
 /*
   make any IP alias changes for public addresses that are necessary 
  */
@@ -2026,6 +2034,7 @@ int ctdb_takeover_run(struct ctdb_context *ctdb, struct 
ctdb_node_map *nodemap)
int i;
struct ctdb_public_ip ip;
struct ctdb_public_ipv4 ipv4;
+   struct ctdb_control_get_tunable *t;
uint32_t *nodes;
struct ctdb_public_ip_list *all_ips, *tmp_ip;
TDB_DATA data;
@@ -2042,6 +2051,28 @@ int ctdb_takeover_run(struct ctdb_context *ctdb, struct 
ctdb_node_map *nodemap)
goto ipreallocated;
}
 
+
+   /* assume all nodes do 

[SCM] CTDB repository - branch master updated - ctdb-1.13-18-g668f3e8

2012-03-21 Thread Ronnie Sahlberg
The branch, master has been updated
   via  668f3e88a9e5f598706952b7140547640c85a5ed (commit)
  from  0ae2a46e37df8d84ce0c76b7a5d32d6e93af709b (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=master


- Log -
commit 668f3e88a9e5f598706952b7140547640c85a5ed
Author: Ronnie Sahlberg ronniesahlb...@gmail.com
Date:   Thu Mar 22 09:05:49 2012 +1100

Make NoIPFailback a node local setting. Nodes that have NoIPFailback set to 
!0 can not takeover new ip addresses during failover.

Remove the old global setting for this unused tunable and add it as a new 
node flag. This node flag is only valid/defined within the takeover subsystem 
in the recovery daemon. Add async functions to collec the NoIPFailback settings 
for each node.

This will later e used to disqualify certain nodes from being takeover 
targets when we perform reallocation.

---

Summary of changes:
 include/ctdb_protocol.h |2 +
 server/ctdb_takeover.c  |   65 ++
 2 files changed, 50 insertions(+), 17 deletions(-)


Changeset truncated at 500 lines:

diff --git a/include/ctdb_protocol.h b/include/ctdb_protocol.h
index a153f01..ae989a9 100644
--- a/include/ctdb_protocol.h
+++ b/include/ctdb_protocol.h
@@ -559,6 +559,8 @@ struct ctdb_node_map {
 #define NODE_FLAGS_DISABLED
(NODE_FLAGS_UNHEALTHY|NODE_FLAGS_PERMANENTLY_DISABLED)
 #define NODE_FLAGS_INACTIVE
(NODE_FLAGS_DELETED|NODE_FLAGS_DISCONNECTED|NODE_FLAGS_BANNED|NODE_FLAGS_STOPPED)
 
+#define NODE_FLAGS_NOIPFAILBACK0x0100 /* this node can not 
be failed back onto, this flag is ONLY valid within the recovery daemon */
+
 
 struct ctdb_public_ip {
uint32_t pnn;
diff --git a/server/ctdb_takeover.c b/server/ctdb_takeover.c
index bff22a8..dba375b 100644
--- a/server/ctdb_takeover.c
+++ b/server/ctdb_takeover.c
@@ -1980,19 +1980,6 @@ try_again:
basic_allocate_unassigned(ctdb, nodemap, mask, all_ips);
}
 
-   /* If we dont want ips to fail back after a node becomes healthy
-  again, we wont even try to reallocat the ip addresses so that
-  they are evenly spread out.
-  This can NOT be used at the same time as DeterministicIPs !
-   */
-   if (1 == ctdb-tunable.no_ip_failback) {
-   if (1 == ctdb-tunable.deterministic_public_ips) {
-   DEBUG(DEBUG_ERR, (ERROR: You can not use 
'DeterministicIPs' and 'NoIPFailback' at the same time\n));
-   }
-   goto finished;
-   }
-
-
/* now, try to make sure the ip adresses are evenly distributed
   across the node.
*/
@@ -2008,16 +1995,37 @@ try_again:
 
/* finished distributing the public addresses, now just send the 
   info out to the nodes
-   */
-finished:
-
-   /* at this point -pnn is the node which will own each IP
+  at this point -pnn is the node which will own each IP
   or -1 if there is no node that can cover this ip
*/
 
return;
 }
 
+static void noipfailback_cb(struct ctdb_context *ctdb, uint32_t pnn, int32_t 
res, TDB_DATA outdata, void *callback)
+{
+   struct ctdb_node_map *nodemap = (struct ctdb_node_map *)callback;
+
+   if (res != 0) {
+   DEBUG(DEBUG_ERR,(Failure to read NoIPFailback tunable from 
remote node %d\n, pnn));
+   return;
+   }
+
+   if (outdata.dsize != sizeof(uint32_t)) {
+   DEBUG(DEBUG_ERR,(Wrong size of returned data when reading 
NoIPFailback tunable from node %d. Expected %d bytes but received %d bytes\n, 
pnn, (int)sizeof(uint32_t), (int)outdata.dsize));
+   return;
+   }
+
+   if (pnn = nodemap-num) {
+   DEBUG(DEBUG_ERR,(Got NoIPFailback reply from node %d but 
nodemap only has %d entries\n, pnn, nodemap-num));
+   return;
+   }
+
+   if (*(uint32_t *)outdata.dptr != 0) {
+   nodemap-nodes[pnn].flags |= NODE_FLAGS_NOIPFAILBACK;
+   }
+}
+
 /*
   make any IP alias changes for public addresses that are necessary 
  */
@@ -2026,6 +2034,7 @@ int ctdb_takeover_run(struct ctdb_context *ctdb, struct 
ctdb_node_map *nodemap)
int i;
struct ctdb_public_ip ip;
struct ctdb_public_ipv4 ipv4;
+   struct ctdb_control_get_tunable *t;
uint32_t *nodes;
struct ctdb_public_ip_list *all_ips, *tmp_ip;
TDB_DATA data;
@@ -2042,6 +2051,28 @@ int ctdb_takeover_run(struct ctdb_context *ctdb, struct 
ctdb_node_map *nodemap)
goto ipreallocated;
}
 
+
+   /* assume all nodes do support failback */
+   for (i=0;inodemap-num;i++) {
+   nodemap-nodes[i].flags = ~NODE_FLAGS_NOIPFAILBACK;
+   }
+   data.dsize = offsetof(struct ctdb_control_get_tunable, name) + 

[SCM] CTDB repository - branch 1.13 updated - ctdb-1.13-15-g77db0a8

2012-03-21 Thread Ronnie Sahlberg
The branch, 1.13 has been updated
   via  77db0a8e48b2693c50bcb59ad72ab5d603723135 (commit)
  from  ae86409ded3a242dd2f7452287ebdb55e006b055 (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=1.13


- Log -
commit 77db0a8e48b2693c50bcb59ad72ab5d603723135
Author: Ronnie Sahlberg ronniesahlb...@gmail.com
Date:   Thu Mar 22 09:22:35 2012 +1100

NoIPFailback: Exclude nodes which have NoIPFailback as failback targets 
during reallocation

---

Summary of changes:
 server/ctdb_takeover.c |   22 ++
 1 files changed, 22 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/server/ctdb_takeover.c b/server/ctdb_takeover.c
index dba375b..0ed5132 100644
--- a/server/ctdb_takeover.c
+++ b/server/ctdb_takeover.c
@@ -1175,6 +1175,12 @@ static int find_takeover_node(struct ctdb_context *ctdb,
 
pnn= -1;
for (i=0;inodemap-num;i++) {
+   if (nodemap-nodes[i].flags  NODE_FLAGS_NOIPFAILBACK) {
+   /* This node is not allowed to takeover any addresses
+   */
+   continue;
+   }
+
if (nodemap-nodes[i].flags  mask) {
/* This node is not healty and can not be used to serve
   a public address 
@@ -1465,6 +1471,11 @@ static bool basic_failback(struct ctdb_context *ctdb,
continue;
}
 
+   /* Only check nodes that are allowed to takeover an ip 
*/
+   if (nodemap-nodes[i].flags  NODE_FLAGS_NOIPFAILBACK) {
+   continue;
+   }
+
/* only check nodes that can actually serve this ip */
if (can_node_serve_ip(ctdb, i, tmp_ip)) {
/* no it couldnt   so skip to the next node */
@@ -1640,6 +1651,11 @@ static void lcp2_allocate_unassigned(struct ctdb_context 
*ctdb,
}
 
for (dstnode=0; dstnode  nodemap-num; dstnode++) {
+   /* Only check nodes that are allowed to 
takeover an ip */
+   if (nodemap-nodes[dstnode].flags  
NODE_FLAGS_NOIPFAILBACK) {
+   continue;
+   }
+
/* only check nodes that can actually serve 
this ip */
if (can_node_serve_ip(ctdb, dstnode, tmp_ip)) {
/* no it couldnt   so skip to the next 
node */
@@ -1748,6 +1764,12 @@ static bool lcp2_failback_candidate(struct ctdb_context 
*ctdb,
if (! newly_healthy[dstnode]) {
continue;
}
+
+   /* Only check nodes that are allowed to takeover an ip 
*/
+   if (nodemap-nodes[dstnode].flags  
NODE_FLAGS_NOIPFAILBACK) {
+   continue;
+   }
+
/* only check nodes that can actually serve this ip */
if (can_node_serve_ip(ctdb, dstnode, tmp_ip)) {
/* no it couldnt   so skip to the next node */


-- 
CTDB repository


[SCM] CTDB repository - branch master updated - ctdb-1.13-19-gc262c29

2012-03-21 Thread Ronnie Sahlberg
The branch, master has been updated
   via  c262c29773d1608e7ce04bdfb7f4469df0a9637b (commit)
  from  668f3e88a9e5f598706952b7140547640c85a5ed (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=master


- Log -
commit c262c29773d1608e7ce04bdfb7f4469df0a9637b
Author: Ronnie Sahlberg ronniesahlb...@gmail.com
Date:   Thu Mar 22 09:22:35 2012 +1100

NoIPFailback: Exclude nodes which have NoIPFailback as failback targets 
during reallocation

---

Summary of changes:
 server/ctdb_takeover.c |   22 ++
 1 files changed, 22 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/server/ctdb_takeover.c b/server/ctdb_takeover.c
index dba375b..0ed5132 100644
--- a/server/ctdb_takeover.c
+++ b/server/ctdb_takeover.c
@@ -1175,6 +1175,12 @@ static int find_takeover_node(struct ctdb_context *ctdb,
 
pnn= -1;
for (i=0;inodemap-num;i++) {
+   if (nodemap-nodes[i].flags  NODE_FLAGS_NOIPFAILBACK) {
+   /* This node is not allowed to takeover any addresses
+   */
+   continue;
+   }
+
if (nodemap-nodes[i].flags  mask) {
/* This node is not healty and can not be used to serve
   a public address 
@@ -1465,6 +1471,11 @@ static bool basic_failback(struct ctdb_context *ctdb,
continue;
}
 
+   /* Only check nodes that are allowed to takeover an ip 
*/
+   if (nodemap-nodes[i].flags  NODE_FLAGS_NOIPFAILBACK) {
+   continue;
+   }
+
/* only check nodes that can actually serve this ip */
if (can_node_serve_ip(ctdb, i, tmp_ip)) {
/* no it couldnt   so skip to the next node */
@@ -1640,6 +1651,11 @@ static void lcp2_allocate_unassigned(struct ctdb_context 
*ctdb,
}
 
for (dstnode=0; dstnode  nodemap-num; dstnode++) {
+   /* Only check nodes that are allowed to 
takeover an ip */
+   if (nodemap-nodes[dstnode].flags  
NODE_FLAGS_NOIPFAILBACK) {
+   continue;
+   }
+
/* only check nodes that can actually serve 
this ip */
if (can_node_serve_ip(ctdb, dstnode, tmp_ip)) {
/* no it couldnt   so skip to the next 
node */
@@ -1748,6 +1764,12 @@ static bool lcp2_failback_candidate(struct ctdb_context 
*ctdb,
if (! newly_healthy[dstnode]) {
continue;
}
+
+   /* Only check nodes that are allowed to takeover an ip 
*/
+   if (nodemap-nodes[dstnode].flags  
NODE_FLAGS_NOIPFAILBACK) {
+   continue;
+   }
+
/* only check nodes that can actually serve this ip */
if (can_node_serve_ip(ctdb, dstnode, tmp_ip)) {
/* no it couldnt   so skip to the next node */


-- 
CTDB repository


[SCM] Samba Shared Repository - branch master updated

2012-03-21 Thread Jeremy Allison
The branch, master has been updated
   via  86a80cf Fix bug 8823 - source3/smbd/process.c:smb_dump seems to 
have a memory leak.
  from  217d041 s4-samba-tool: add password verification in change user pass

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 86a80cf4fde13576ed89a5e1ea12bb5e61261fc8
Author: Jeremy Allison j...@samba.org
Date:   Wed Mar 21 14:34:34 2012 -0700

Fix bug 8823 - source3/smbd/process.c:smb_dump seems to have a memory leak.

Based on code from Richard Sharpe. Move to talloc from malloc.

Autobuild-User: Jeremy Allison j...@samba.org
Autobuild-Date: Thu Mar 22 00:20:41 CET 2012 on sn-devel-104

---

Summary of changes:
 source3/smbd/process.c |   11 ---
 1 files changed, 8 insertions(+), 3 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/smbd/process.c b/source3/smbd/process.c
index 8b15ac8..defedf6 100644
--- a/source3/smbd/process.c
+++ b/source3/smbd/process.c
@@ -1315,12 +1315,17 @@ static void smb_dump(const char *name, int type, const 
char *data)
 
len = smb_len_tcp(data)+4;
for (i=1;i100;i++) {
-   if (asprintf(fname, /tmp/%s.%d.%s, name, i,
-type ? req : resp) == -1) {
+   fname = talloc_asprintf(talloc_tos(),
+   /tmp/%s.%d.%s,
+   name,
+   i,
+   type ? req : resp);
+   if (fname == NULL) {
return;
}
fd = open(fname, O_WRONLY|O_CREAT|O_EXCL, 0644);
if (fd != -1 || errno != EEXIST) break;
+   TALLOC_FREE(fname);
}
if (fd != -1) {
ssize_t ret = write(fd, data, len);
@@ -1329,7 +1334,7 @@ static void smb_dump(const char *name, int type, const 
char *data)
close(fd);
DEBUG(0,(created %s len %lu\n, fname, (unsigned long)len));
}
-   SAFE_FREE(fname);
+   TALLOC_FREE(fname);
 }
 
 /


-- 
Samba Shared Repository


[SCM] CTDB repository - branch 1.13 updated - ctdb-1.13-17-g1d69f89

2012-03-21 Thread Ronnie Sahlberg
The branch, 1.13 has been updated
   via  1d69f897ce525a9d8967a365718143a3a4dcf9a8 (commit)
   via  c1e421b955c1de060af9ae4d6489f3170198f727 (commit)
  from  77db0a8e48b2693c50bcb59ad72ab5d603723135 (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=1.13


- Log -
commit 1d69f897ce525a9d8967a365718143a3a4dcf9a8
Author: Ronnie Sahlberg ronniesahlb...@gmail.com
Date:   Thu Mar 22 11:12:37 2012 +1100

DOC: regenerate manpages

commit c1e421b955c1de060af9ae4d6489f3170198f727
Author: Ronnie Sahlberg ronniesahlb...@gmail.com
Date:   Thu Mar 22 11:00:27 2012 +1100

NoIPTakeover: change the tunable name for the dont allow failing addresses 
over onto the node to NoIPTakeover

---

Summary of changes:
 doc/ctdbd.1 |   11 +++-
 doc/ctdbd.1.html|  146 ---
 doc/ctdbd.1.xml |   11 +++-
 include/ctdb_private.h  |1 +
 include/ctdb_protocol.h |2 +-
 server/ctdb_takeover.c  |   48 ++--
 server/ctdb_tunables.c  |3 +-
 7 files changed, 128 insertions(+), 94 deletions(-)


Changeset truncated at 500 lines:

diff --git a/doc/ctdbd.1 b/doc/ctdbd.1
index 87f0bfa..7e5443e 100644
--- a/doc/ctdbd.1
+++ b/doc/ctdbd.1
@@ -2,12 +2,12 @@
 .\ Title: ctdbd
 .\Author: [FIXME: author] [see http://docbook.sf.net/el/author]
 .\ Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/
-.\  Date: 03/20/2012
+.\  Date: 03/22/2012
 .\Manual: CTDB - clustered TDB database
 .\Source: ctdb
 .\  Language: English
 .\
-.TH CTDBD 1 03/20/2012 ctdb CTDB \- clustered TDB database
+.TH CTDBD 1 03/22/2012 ctdb CTDB \- clustered TDB database
 .\ -
 .\ * Define some portability stuff
 .\ -
@@ -475,9 +475,14 @@ When you enable this tunable, CTDB will no longer attempt 
to rebalance the clust
 .PP
 Default: 0
 .PP
-When enabled, ctdb weill not perform failover or failback\. Even if a node 
fails while holding public IPs, ctdb will not recover the IPs or assign them to 
another node\.
+When enabled, ctdb will not perform failover or failback\. Even if a node 
fails while holding public IPs, ctdb will not recover the IPs or assign them to 
another node\.
 .PP
 When you enable this tunable, CTDB will no longer attempt to recover the 
cluster by failing IP addresses over to other nodes\. This leads to a service 
outage until the administrator has manually performed failover to replacement 
nodes using the \*(Aqctdb moveip\*(Aq command\.
+.SS NoIPTakeover
+.PP
+Default: 0
+.PP
+When set to 1, ctdb will allow ip addresses to be failed over onto this 
node\. Any ip addresses that the node currently hosts will remain on the node 
but no new ip addresses can be failed over onto the node\.
 .SS VerboseMemoryNames
 .PP
 Default: 0
diff --git a/doc/ctdbd.1.html b/doc/ctdbd.1.html
index 11f3693..add708b 100644
--- a/doc/ctdbd.1.html
+++ b/doc/ctdbd.1.html
@@ -1,4 +1,4 @@
-htmlheadmeta http-equiv=Content-Type content=text/html; 
charset=ISO-8859-1titlectdbd/titlemeta name=generator content=DocBook 
XSL Stylesheets V1.75.2/headbody bgcolor=white text=black 
link=#FF vlink=#840084 alink=#FFdiv class=refentry 
title=ctdbda name=ctdbd.1/adiv class=titlepage/divdiv 
class=refnamedivh2Name/h2pctdbd #8212; The CTDB cluster 
daemon/p/divdiv class=refsynopsisdiv 
title=Synopsish2Synopsis/h2div class=cmdsynopsispcode 
class=commandctdbd/code /p/divdiv class=cmdsynopsispcode 
class=commandctdbd/code  [-? --help] [-d --debug=lt;INTEGERgt;] 
{--dbdir=lt;directorygt;} {--dbdir-persistent=lt;directorygt;} 
[--event-script-dir=lt;directorygt;] [-i --interactive] 
[--listen=lt;addressgt;] [--logfile=lt;filenamegt;] [--lvs] 
{--nlist=lt;filenamegt;} [--no-lmaster] [--no-recmaster] [--nosetsched] 
{--notification-script=lt;filenamegt;} [--public-add
 resses=lt;filenamegt;] [--public-interface=lt;interfacegt;] 
{--reclock=lt;filenamegt;} [--single-public-ip=lt;addressgt;] 
[--socket=lt;filenamegt;] [--start-as-disabled] [--start-as-stopped] 
[--syslog] [--log-ringbuf-size=lt;num-entriesgt;] [--torture] 
[--transport=lt;STRINGgt;] [--usage]/p/div/divdiv class=refsect1 
title=DESCRIPTIONa name=id386691/ah2DESCRIPTION/h2p
+htmlheadmeta http-equiv=Content-Type content=text/html; 
charset=ISO-8859-1titlectdbd/titlemeta name=generator content=DocBook 
XSL Stylesheets V1.75.2/headbody bgcolor=white text=black 
link=#FF vlink=#840084 alink=#FFdiv class=refentry 
title=ctdbda name=ctdbd.1/adiv class=titlepage/divdiv 
class=refnamedivh2Name/h2pctdbd #8212; The CTDB cluster 
daemon/p/divdiv class=refsynopsisdiv 
title=Synopsish2Synopsis/h2div class=cmdsynopsispcode 
class=commandctdbd/code /p/divdiv class=cmdsynopsispcode 
class=commandctdbd/code  [-? --help] [-d 

[SCM] CTDB repository - branch master updated - ctdb-1.13-21-g270edc8

2012-03-21 Thread Ronnie Sahlberg
The branch, master has been updated
   via  270edc87e6bcfd6e76c526bf86df865e4d47d11c (commit)
   via  35592e618cfd827b6978af6332f80504f232c46a (commit)
  from  c262c29773d1608e7ce04bdfb7f4469df0a9637b (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=master


- Log -
commit 270edc87e6bcfd6e76c526bf86df865e4d47d11c
Author: Ronnie Sahlberg ronniesahlb...@gmail.com
Date:   Thu Mar 22 11:12:37 2012 +1100

DOC: regenerate manpages

commit 35592e618cfd827b6978af6332f80504f232c46a
Author: Ronnie Sahlberg ronniesahlb...@gmail.com
Date:   Thu Mar 22 11:00:27 2012 +1100

NoIPTakeover: change the tunable name for the dont allow failing addresses 
over onto the node to NoIPTakeover

---

Summary of changes:
 doc/ctdbd.1 |   11 +++-
 doc/ctdbd.1.html|  146 ---
 doc/ctdbd.1.xml |   11 +++-
 include/ctdb_private.h  |1 +
 include/ctdb_protocol.h |2 +-
 server/ctdb_takeover.c  |   48 ++--
 server/ctdb_tunables.c  |3 +-
 7 files changed, 128 insertions(+), 94 deletions(-)


Changeset truncated at 500 lines:

diff --git a/doc/ctdbd.1 b/doc/ctdbd.1
index 87f0bfa..7e5443e 100644
--- a/doc/ctdbd.1
+++ b/doc/ctdbd.1
@@ -2,12 +2,12 @@
 .\ Title: ctdbd
 .\Author: [FIXME: author] [see http://docbook.sf.net/el/author]
 .\ Generator: DocBook XSL Stylesheets v1.75.2 http://docbook.sf.net/
-.\  Date: 03/20/2012
+.\  Date: 03/22/2012
 .\Manual: CTDB - clustered TDB database
 .\Source: ctdb
 .\  Language: English
 .\
-.TH CTDBD 1 03/20/2012 ctdb CTDB \- clustered TDB database
+.TH CTDBD 1 03/22/2012 ctdb CTDB \- clustered TDB database
 .\ -
 .\ * Define some portability stuff
 .\ -
@@ -475,9 +475,14 @@ When you enable this tunable, CTDB will no longer attempt 
to rebalance the clust
 .PP
 Default: 0
 .PP
-When enabled, ctdb weill not perform failover or failback\. Even if a node 
fails while holding public IPs, ctdb will not recover the IPs or assign them to 
another node\.
+When enabled, ctdb will not perform failover or failback\. Even if a node 
fails while holding public IPs, ctdb will not recover the IPs or assign them to 
another node\.
 .PP
 When you enable this tunable, CTDB will no longer attempt to recover the 
cluster by failing IP addresses over to other nodes\. This leads to a service 
outage until the administrator has manually performed failover to replacement 
nodes using the \*(Aqctdb moveip\*(Aq command\.
+.SS NoIPTakeover
+.PP
+Default: 0
+.PP
+When set to 1, ctdb will allow ip addresses to be failed over onto this 
node\. Any ip addresses that the node currently hosts will remain on the node 
but no new ip addresses can be failed over onto the node\.
 .SS VerboseMemoryNames
 .PP
 Default: 0
diff --git a/doc/ctdbd.1.html b/doc/ctdbd.1.html
index 11f3693..add708b 100644
--- a/doc/ctdbd.1.html
+++ b/doc/ctdbd.1.html
@@ -1,4 +1,4 @@
-htmlheadmeta http-equiv=Content-Type content=text/html; 
charset=ISO-8859-1titlectdbd/titlemeta name=generator content=DocBook 
XSL Stylesheets V1.75.2/headbody bgcolor=white text=black 
link=#FF vlink=#840084 alink=#FFdiv class=refentry 
title=ctdbda name=ctdbd.1/adiv class=titlepage/divdiv 
class=refnamedivh2Name/h2pctdbd #8212; The CTDB cluster 
daemon/p/divdiv class=refsynopsisdiv 
title=Synopsish2Synopsis/h2div class=cmdsynopsispcode 
class=commandctdbd/code /p/divdiv class=cmdsynopsispcode 
class=commandctdbd/code  [-? --help] [-d --debug=lt;INTEGERgt;] 
{--dbdir=lt;directorygt;} {--dbdir-persistent=lt;directorygt;} 
[--event-script-dir=lt;directorygt;] [-i --interactive] 
[--listen=lt;addressgt;] [--logfile=lt;filenamegt;] [--lvs] 
{--nlist=lt;filenamegt;} [--no-lmaster] [--no-recmaster] [--nosetsched] 
{--notification-script=lt;filenamegt;} [--public-add
 resses=lt;filenamegt;] [--public-interface=lt;interfacegt;] 
{--reclock=lt;filenamegt;} [--single-public-ip=lt;addressgt;] 
[--socket=lt;filenamegt;] [--start-as-disabled] [--start-as-stopped] 
[--syslog] [--log-ringbuf-size=lt;num-entriesgt;] [--torture] 
[--transport=lt;STRINGgt;] [--usage]/p/div/divdiv class=refsect1 
title=DESCRIPTIONa name=id386691/ah2DESCRIPTION/h2p
+htmlheadmeta http-equiv=Content-Type content=text/html; 
charset=ISO-8859-1titlectdbd/titlemeta name=generator content=DocBook 
XSL Stylesheets V1.75.2/headbody bgcolor=white text=black 
link=#FF vlink=#840084 alink=#FFdiv class=refentry 
title=ctdbda name=ctdbd.1/adiv class=titlepage/divdiv 
class=refnamedivh2Name/h2pctdbd #8212; The CTDB cluster 
daemon/p/divdiv class=refsynopsisdiv 
title=Synopsish2Synopsis/h2div class=cmdsynopsispcode 
class=commandctdbd/code /p/divdiv class=cmdsynopsispcode 
class=commandctdbd/code  [-? --help] [-d 

[SCM] Samba Shared Repository - branch master updated

2012-03-21 Thread Michael Adam
The branch, master has been updated
   via  4882a4c docs:man:vfs_gpfs: fix formatting of values for gpfs:syncio
   via  475f0d1 docs:man:vfs_gpfs: Fix documented values for gpfs:hsm
   via  2619eae s3:vfs_tsmsm: Fix a misspelling of a config parameter in 
the doc-comment
   via  0e3be00 s3-selftest: Remove some unnecessary comma
   via  56f2f76 s3-selftest: Add samba3.blackbox.net.registry.check to test 
list
   via  d5db47c s3-selftest: introduce new net registry check check
  from  86a80cf Fix bug 8823 - source3/smbd/process.c:smb_dump seems to 
have a memory leak.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 4882a4cd68f90ee2c0808bffe114cd147e665c5c
Author: Michael Adam ob...@samba.org
Date:   Thu Mar 22 00:03:08 2012 +0100

docs:man:vfs_gpfs: fix formatting of values for gpfs:syncio

Autobuild-User: Michael Adam ob...@samba.org
Autobuild-Date: Thu Mar 22 01:56:08 CET 2012 on sn-devel-104

commit 475f0d15122851cbd26a62726455728a9dd7e9e9
Author: Michael Adam ob...@samba.org
Date:   Thu Mar 22 00:01:24 2012 +0100

docs:man:vfs_gpfs: Fix documented values for gpfs:hsm

commit 2619eae6260c9af9a43337c7ca8fb8ababf3e11a
Author: Michael Adam ob...@samba.org
Date:   Wed Mar 21 23:40:44 2012 +0100

s3:vfs_tsmsm: Fix a misspelling of a config parameter in the doc-comment

The module uses tsmsm:dmapi attribute instead of tsmsm:attribute name.

commit 0e3be00af10f12a9664a955279ee5565e58f521c
Author: Björn Baumbach b...@sernet.de
Date:   Wed Nov 9 13:19:59 2011 +0100

s3-selftest: Remove some unnecessary comma

Signed-off-by: Michael Adam ob...@samba.org

commit 56f2f76166def8e06f7ceade98ccb00b72999443
Author: Björn Baumbach b...@sernet.de
Date:   Wed Nov 9 13:19:22 2011 +0100

s3-selftest: Add samba3.blackbox.net.registry.check to test list

Signed-off-by: Michael Adam ob...@samba.org

commit d5db47c7d412c1795a7485f10c2517e36f80c7fc
Author: Björn Baumbach b...@sernet.de
Date:   Wed Nov 9 13:24:42 2011 +0100

s3-selftest: introduce new net registry check check

Add a new check which checks for defects in the net registry
check tool.

Signed-off-by: Michael Adam ob...@samba.org

---

Summary of changes:
 docs-xml/manpages-3/vfs_gpfs.8.xml  |6 +-
 source3/modules/vfs_tsmsm.c |2 +-
 source3/script/tests/test_net_registry_check.sh |  146 +++
 source3/selftest/tests.py   |6 +-
 4 files changed, 154 insertions(+), 6 deletions(-)
 create mode 100755 source3/script/tests/test_net_registry_check.sh


Changeset truncated at 500 lines:

diff --git a/docs-xml/manpages-3/vfs_gpfs.8.xml 
b/docs-xml/manpages-3/vfs_gpfs.8.xml
index a6b3124..2107b74 100644
--- a/docs-xml/manpages-3/vfs_gpfs.8.xml
+++ b/docs-xml/manpages-3/vfs_gpfs.8.xml
@@ -118,7 +118,7 @@
commandno(default)/command - Do not announce HSM.
/para/listitem
listitempara
-   commandno/command - Announce HSM.
+   commandyes/command - Announce HSM.
/para/listitem
/itemizedlist
/listitem
@@ -287,9 +287,9 @@
  values:
/para
itemizedlist
-   listitemparacommandyes/commandOpen files with O_SYNC
+   listitemparacommandyes/command - Open files with O_SYNC
/para/listitem
-   listitemparacommandno (default)/commandOpen files as
+   listitemparacommandno (default)/command - Open files as
normal Samba would do
/para/listitem
/itemizedlist
diff --git a/source3/modules/vfs_tsmsm.c b/source3/modules/vfs_tsmsm.c
index 468fe67..d7cc050 100644
--- a/source3/modules/vfs_tsmsm.c
+++ b/source3/modules/vfs_tsmsm.c
@@ -27,7 +27,7 @@
 where operation is currently 'offline' to set offline status of the 
filepath
 
   tsmsm: online ratio = ratio to check reported size against actual file size 
(0.5 by default)
-  tsmsm: attribute name = name of DMAPI attribute that is present when a file 
is offline. 
+  tsmsm: dmapi attribute = name of DMAPI attribute that is present when a file 
is offline.
   Default is IBMobj (which is what GPFS uses)
 
   The TSMSM VFS module tries to avoid calling expensive DMAPI calls with some 
heuristics
diff --git a/source3/script/tests/test_net_registry_check.sh 
b/source3/script/tests/test_net_registry_check.sh
new file mode 100755
index 000..627f67c
--- /dev/null
+++ b/source3/script/tests/test_net_registry_check.sh
@@ -0,0 +1,146 @@
+#!/bin/sh
+#
+# Blackbox tests for the net registry check command.
+#
+# Copyright (C) 2011 Björn Baumbach b...@sernet.de
+
+if [ $# -lt 5 ]; then
+   echo Usage: test_net_registry.sh SCRIPTDIR 

[SCM] Samba Shared Repository - branch master updated

2012-03-21 Thread Rusty Russell
The branch, master has been updated
   via  4816ffa lib/tdb2: fix -Wcast-qual warnings.
   via  4ea9f8d lib/tdb2: fix -Wshadow warnings.
   via  a93e03d lib/tdb2: fix OpenBSD incoherent mmap (tdb2 version)
   via  aa53786 lib/tdb2: fix OpenBSD incoherent mmap (tdb1 version)
   via  fde6942 lib/tdb: fix OpenBSD incoherent mmap.
   via  584b996 lib/replace: test for incoherent mmap.
   via  b3a6ffd lib/ccan/failtest: compile fix for OpenBSD
   via  6755932 lib/ccan: namespacize ccan/list to avoid conflict with 
OpenIndiana's sys/list.h
   via  eafd837 lib/tdb: fix up run-die-during-transaction test cases on 
Solaris.
  from  4882a4c docs:man:vfs_gpfs: fix formatting of values for gpfs:syncio

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 4816ffacb81d3234231730149c7b0629bb3646a4
Author: Rusty Russell ru...@rustcorp.com.au
Date:   Thu Mar 22 10:47:27 2012 +1030

lib/tdb2: fix -Wcast-qual warnings.

We use tdb_mkdata() to get rid of many of them from the tests, and
explicit cast_const() in a few places.

tlist_for_each() still causes a warning, but that needs to be fixed in
CCAN.

Signed-off-by: Rusty Russell ru...@rustcorp.com.au

Autobuild-User: Rusty Russell ru...@rustcorp.com.au
Autobuild-Date: Thu Mar 22 03:29:32 CET 2012 on sn-devel-104

commit 4ea9f8d4c0d08343910d85f44eebdd2d7bff6571
Author: Rusty Russell ru...@rustcorp.com.au
Date:   Thu Mar 22 10:47:27 2012 +1030

lib/tdb2: fix -Wshadow warnings.

These warnings clutter things up, even though they're of marginal
utility.

Signed-off-by: Rusty Russell ru...@rustcorp.com.au

commit a93e03d27de573988263aa4e39e55e7edbe34069
Author: Rusty Russell ru...@rustcorp.com.au
Date:   Thu Mar 22 10:47:27 2012 +1030

lib/tdb2: fix OpenBSD incoherent mmap (tdb2 version)

This handles incoherent mmaps for TDB2 native databases, by forcing
mmap on for such systems, just like we did for tdb1.

Signed-off-by: Rusty Russell ru...@rustcorp.com.au

commit aa5378602d8da099a435a6457245b13c2677
Author: Rusty Russell ru...@rustcorp.com.au
Date:   Thu Mar 22 10:47:26 2012 +1030

lib/tdb2: fix OpenBSD incoherent mmap (tdb1 version)

This is a direct port of the previous patch, to the TDB2 codebase.

Signed-off-by: Rusty Russell ru...@rustcorp.com.au

commit fde694274e1e5a11d1473695e7ec7a97f95d39e4
Author: Rusty Russell ru...@rustcorp.com.au
Date:   Thu Mar 22 10:47:26 2012 +1030

lib/tdb: fix OpenBSD incoherent mmap.

This comment appears in two places in the code (commit
4c6a8273c6dd3e2aeda5a63c4a62aa55bc133099 from 2001):

/*
 * We must ensure the file is unmapped before doing this
 * to ensure consistency with systems like OpenBSD where
 * writes and mmaps are not consistent.
 */

But this doesn't help, because if one process is using mmap and another
using pwrite, we get incoherent results.  As demonstrated by OpenBSD's
failure on the tdb unit tests.

Rather than disable mmap on OpenBSD, we test for this issue and force mmap
to be enabled.  This means that we will fail on very large TDBs on 32-bit
systems, but it's better than the horrendous performance penalty on every
OpenBSD system.

Signed-off-by: Rusty Russell ru...@rustcorp.com.au

commit 584b996a1a27870dad30eb422d375bb08b57c64c
Author: Rusty Russell ru...@rustcorp.com.au
Date:   Thu Mar 22 10:47:24 2012 +1030

lib/replace: test for incoherent mmap.

We test for other mmap features here, and both tdb1 and tdb2 want this 
check.

Signed-off-by: Rusty Russell ru...@rustcorp.com.au

commit b3a6ffd7b269f7a34334d24b54591c225da773a5
Author: Rusty Russell ru...@rustcorp.com.au
Date:   Wed Mar 21 11:20:06 2012 +1030

lib/ccan/failtest: compile fix for OpenBSD

OpenBSD doesn't idempotent-wrap sys/mman.h, so when we #define mmap to
an alternative, it fails to compile when sys/mman.h is included again.

Workaround is not to #define mmap to add arguments on Open BSD.

(Imported from CCAN commit e18e80fe175422d26efe689addc0f67bdba0e097)

Signed-off-by: Rusty Russell ru...@rustcorp.com.au

commit 675593221c25dbebaaf8e4ce9f4271a8fb0171d0
Author: Rusty Russell ru...@rustcorp.com.au
Date:   Wed Mar 21 00:58:14 2012 +1030

lib/ccan: namespacize ccan/list to avoid conflict with OpenIndiana's 
sys/list.h

CCAN includes a little utility called namespacize which prepends ccan_ to
all public methods of a module, and fixes up any dependencies it finds.  
It's
a little primitive, but it works here.

Signed-off-by: Rusty Russell ru...@rustcorp.com.au

commit eafd83736918bc5953e4a91cf2d893e68f2da2a2
Author: Rusty Russell ru...@rustcorp.com.au
Date:   Wed Mar 21 00:57:14 2012 +1030

lib/tdb: fix up 

[SCM] CTDB repository - branch 1.13 updated - ctdb-1.13-66-g41ee3cb

2012-03-21 Thread Ronnie Sahlberg
The branch, 1.13 has been updated
   via  41ee3cb65b63605ab968cf1eef05a75256d4db6c (commit)
   via  f6d4cf009d63605f8c1246c59c53b1f82989d2a1 (commit)
   via  7d7488a49bc7e799f39f3da3fa81be7a2e14480a (commit)
   via  da2e9650a97f99e7d694659926d9958927edd8ad (commit)
   via  0142729c96b8bfecfabe35439071557bcc6ed4da (commit)
   via  1db9a533aacc6e02ddbadf76241429144a949e1c (commit)
   via  299ce89fb3deeefcc7c01b20197dc6adee1e8194 (commit)
   via  79eec235ac9b051333751186c32924d92e6ebeff (commit)
   via  0fc20ab5207d4f812bf62b90a66c707f76742f84 (commit)
   via  9c30bf7fd3d94884e27a258571a28dca5e460177 (commit)
   via  6d4b4b1293ba960d8fdf81958d6e8dd23c9d771a (commit)
   via  38396185effbcf313678c2e94d4bd20f534c4f03 (commit)
   via  d132a8f4a8c0573ac447713a71911f02b6f0d73c (commit)
   via  236d572556e447e2d82d14d2c8a40ed8cb98944d (commit)
   via  351ca413eec460330571ca8b01ad269728fe15df (commit)
   via  d4621277240721e6d130a930b0100506b64467ea (commit)
   via  bdb4cdaf2aed79c8de6a8db8c01685b242808310 (commit)
   via  d034845ecea66b47004bc73f2554914a397b1c9d (commit)
   via  ac2cd2a8cbed97348ceae54167ad83cb074ff6b3 (commit)
   via  26292f362890ca6cb65d0028d50fa97458e0449f (commit)
   via  8b8e17bea87a8c16f7c0f54fcfe29190f203f673 (commit)
   via  f4949b3c1b36949544e98c9fbb64447f94f9e432 (commit)
   via  994492f79275fe84155d842f6bc288c1858217dd (commit)
   via  93f90caf91246074d9359bf31a39b2621242 (commit)
   via  2a2ea6c61a05af2d0765e964abcc7ef04047431e (commit)
   via  45c3476d12bf0f52966b72d286f101fce1382cd2 (commit)
   via  0f7cbbb55f26cf3c953e98fe5e7eaa12f59fbf78 (commit)
   via  97b0c138cb97e30db27c40b4ee1481109ae90c78 (commit)
   via  270edc87e6bcfd6e76c526bf86df865e4d47d11c (commit)
   via  35592e618cfd827b6978af6332f80504f232c46a (commit)
   via  c262c29773d1608e7ce04bdfb7f4469df0a9637b (commit)
   via  668f3e88a9e5f598706952b7140547640c85a5ed (commit)
   via  0ae2a46e37df8d84ce0c76b7a5d32d6e93af709b (commit)
   via  e6a8306257dece02313043274789b52cef1a5647 (commit)
   via  d0d98f7e45e5084b81335b004d50bddc80cdc219 (commit)
   via  cf96d6380de974c1abff7a33c62a7e31ac980551 (commit)
   via  035c0d981bde8c0eee8b3f24ba8e2dc817e5b504 (commit)
   via  1c976d83b1d7dac6f0ef81306774998e4c8b56a1 (commit)
   via  05923a14bc8ae8e3c5cda28ff4e0fb0d473d5f7d (commit)
   via  c37aa6f3738693653f64c2fa015ace061da38b5a (commit)
   via  eafd7bbaaa5931546a96c8beae3cf9a39a49c925 (commit)
   via  7d3931298e6477d92f43652c3006b0c426cb1307 (commit)
   via  af72f8bc05f78983f9624d81788f9d89af474b11 (commit)
   via  f06634951331232cddf0b48eac3552b92aca5b93 (commit)
   via  68390cb1e8c7f30be034b8ca6c9215b40147305b (commit)
   via  fb00e1290fcea3386132a46c883994019a43799a (commit)
   via  a7ad2fb75f06791508dd928d2a0c305fc7f7b814 (commit)
   via  db69a39ca010b2c8853b13466e30792dda350cdb (commit)
   via  a0340a50c2acd9ccc281faef032a364254f7f95a (commit)
  from  1d69f897ce525a9d8967a365718143a3a4dcf9a8 (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=1.13


- Log -
commit 41ee3cb65b63605ab968cf1eef05a75256d4db6c
Merge: f6d4cf009d63605f8c1246c59c53b1f82989d2a1 
7d7488a49bc7e799f39f3da3fa81be7a2e14480a
Author: Ronnie Sahlberg ronniesahlb...@gmail.com
Date:   Thu Mar 22 15:40:55 2012 +1100

Merge remote branch 'martins/policy_routing' into 1.13

commit f6d4cf009d63605f8c1246c59c53b1f82989d2a1
Author: Martin Schwenke mar...@meltin.net
Date:   Thu Mar 22 15:27:25 2012 +1100

Undo damage done by d8d37493478a26c5f1809a5f3df89ffd6e149281

The implementation of DisableIPFailover got intermingled with
--nopublicipcheck.  This just looks wrong - Ronnie must have been
having a bad day.  :-)

Signed-off-by: Martin Schwenke mar...@meltin.net

---

Summary of changes:
 .gitignore |2 +
 Makefile.in|6 +-
 config/README  |6 -
 config/events.d/13.per_ip_routing  |  662 
 config/functions   |  197 +++
 config/interface_modify.sh |  142 -
 include/ctdb_private.h |1 +
 packaging/RPM/ctdb.spec.in |1 -
 server/ctdb_recoverd.c |2 +-
 server/ctdbd.c |4 +-
 tests/eventscripts/common.sh   |  188 --
 tests/eventscripts/etc-ctdb/public_addresses   |5 +
 .../multievent/13.per_ip_routing.001.sh|   16 +
 .../multievent/13.per_ip_routing.002.sh|   14 +
 .../multievent/13.per_ip_routing.003.sh   

[SCM] CTDB repository - branch master updated - ctdb-1.13-49-g7293762

2012-03-21 Thread Ronnie Sahlberg
The branch, master has been updated
   via  7293762046e25a9c96e6417e34e18c214ebc6e55 (commit)
   via  5083b266dd68b292c4275505f3d1b878dbf12f11 (commit)
   via  7d7488a49bc7e799f39f3da3fa81be7a2e14480a (commit)
   via  da2e9650a97f99e7d694659926d9958927edd8ad (commit)
   via  0142729c96b8bfecfabe35439071557bcc6ed4da (commit)
   via  1db9a533aacc6e02ddbadf76241429144a949e1c (commit)
   via  299ce89fb3deeefcc7c01b20197dc6adee1e8194 (commit)
   via  79eec235ac9b051333751186c32924d92e6ebeff (commit)
   via  0fc20ab5207d4f812bf62b90a66c707f76742f84 (commit)
   via  9c30bf7fd3d94884e27a258571a28dca5e460177 (commit)
   via  6d4b4b1293ba960d8fdf81958d6e8dd23c9d771a (commit)
   via  38396185effbcf313678c2e94d4bd20f534c4f03 (commit)
   via  d132a8f4a8c0573ac447713a71911f02b6f0d73c (commit)
   via  236d572556e447e2d82d14d2c8a40ed8cb98944d (commit)
   via  351ca413eec460330571ca8b01ad269728fe15df (commit)
   via  d4621277240721e6d130a930b0100506b64467ea (commit)
   via  bdb4cdaf2aed79c8de6a8db8c01685b242808310 (commit)
   via  d034845ecea66b47004bc73f2554914a397b1c9d (commit)
   via  ac2cd2a8cbed97348ceae54167ad83cb074ff6b3 (commit)
   via  26292f362890ca6cb65d0028d50fa97458e0449f (commit)
   via  8b8e17bea87a8c16f7c0f54fcfe29190f203f673 (commit)
   via  f4949b3c1b36949544e98c9fbb64447f94f9e432 (commit)
   via  994492f79275fe84155d842f6bc288c1858217dd (commit)
   via  93f90caf91246074d9359bf31a39b2621242 (commit)
   via  2a2ea6c61a05af2d0765e964abcc7ef04047431e (commit)
   via  45c3476d12bf0f52966b72d286f101fce1382cd2 (commit)
   via  0f7cbbb55f26cf3c953e98fe5e7eaa12f59fbf78 (commit)
   via  97b0c138cb97e30db27c40b4ee1481109ae90c78 (commit)
  from  270edc87e6bcfd6e76c526bf86df865e4d47d11c (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=master


- Log -
commit 7293762046e25a9c96e6417e34e18c214ebc6e55
Merge: 5083b266dd68b292c4275505f3d1b878dbf12f11 
7d7488a49bc7e799f39f3da3fa81be7a2e14480a
Author: Ronnie Sahlberg ronniesahlb...@gmail.com
Date:   Thu Mar 22 15:39:59 2012 +1100

Merge remote branch 'martins/policy_routing'

commit 5083b266dd68b292c4275505f3d1b878dbf12f11
Author: Martin Schwenke mar...@meltin.net
Date:   Thu Mar 22 15:27:25 2012 +1100

Undo damage done by d8d37493478a26c5f1809a5f3df89ffd6e149281

The implementation of DisableIPFailover got intermingled with
--nopublicipcheck.  This just looks wrong - Ronnie must have been
having a bad day.  :-)

Signed-off-by: Martin Schwenke mar...@meltin.net

---

Summary of changes:
 .gitignore |2 +
 Makefile.in|1 -
 config/README  |6 -
 config/events.d/13.per_ip_routing  |  662 
 config/functions   |  197 +++
 config/interface_modify.sh |  142 -
 include/ctdb_private.h |1 +
 packaging/RPM/ctdb.spec.in |1 -
 server/ctdb_recoverd.c |2 +-
 server/ctdbd.c |4 +-
 tests/eventscripts/common.sh   |  188 --
 tests/eventscripts/etc-ctdb/public_addresses   |5 +
 .../multievent/13.per_ip_routing.001.sh|   16 +
 .../multievent/13.per_ip_routing.002.sh|   14 +
 .../multievent/13.per_ip_routing.003.sh|   24 +
 .../multievent/13.per_ip_routing.004.sh|   25 +
 .../multievent/13.per_ip_routing.005.sh|   38 ++
 .../multievent/13.per_ip_routing.006.sh|   38 ++
 .../multievent/13.per_ip_routing.007.sh|   40 ++
 .../multievent/13.per_ip_routing.008.sh|   42 ++
 .../multievent/13.per_ip_routing.009.sh|   44 ++
 .../multievent/13.per_ip_routing.010.sh|   52 ++
 .../multievent/13.per_ip_routing.011.sh|   41 ++
 .../multievent/13.per_ip_routing.012.sh|   48 ++
 tests/eventscripts/run_tests.sh|   13 +
 .../simple/10.interface.monitor.015.sh |2 +-
 .../eventscripts/simple/10.interface.takeip.003.sh |6 +-
 tests/eventscripts/stubs/ctdb  |  208 +--
 tests/eventscripts/stubs/ip|  598 +-
 29 files changed, 1512 insertions(+), 948 deletions(-)
 delete mode 100755 config/interface_modify.sh
 create mode 100755 tests/eventscripts/multievent/13.per_ip_routing.001.sh
 create mode 100755 tests/eventscripts/multievent/13.per_ip_routing.002.sh
 create mode 100755 tests/eventscripts/multievent/13.per_ip_routing.003.sh
 create mode 100755 tests/eventscripts/multievent/13.per_ip_routing.004.sh