Re: [Samba] Sysvol Replication in Samba4

2012-08-29 Thread Gémes Géza

2012-08-29 02:31 keltezéssel, Matthieu Patou írta:

On 08/26/2012 10:24 PM, Gémes Géza wrote:

Hi Matthieu!

Thank you for the script.

Could you also attach /usr/local/etc/ecv/list_dcs which is sourced?

Well no :-(
But this is defining the variable LIST_DC a bit like this:

LIST_DC=dc1name namedc2

It's a space separated list of dc names.
Matthieu.



Thank you!

Of course I didn't want you to share confidential information. I was 
just thinking about a clever script to query the actual DCs from AD.


Cheers

Geza Gemes
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Problem building samba 4.0.0beta7 on Solaris 10

2012-08-29 Thread Tom Crummey
Hello,

I've been trying to build samba 4.0.0 beta7 on Solaris 10 without success.

I'm using gcc 4.4.0.

The problems I'm encountering are compilation errors where include files
are not being found:

[1177/3379] Compiling source4/ntvfs/posix/python/pyposix_eadb.c
../source4/ntvfs/posix/python/pyposix_eadb.c:24:24: error: tdb_compat.h:
No such file or directory
Waf: Leaving directory `/usr/local/src/samba-4.0.0beta7/bin'
Build failed:  - task failed (err #1):
{task: cc pyposix_eadb.c - pyposix_eadb_10.o}
gmake: *** [all] Error 1

and an undefined symbol:

[3203/3379] Linking default/lib/ntdb/ntdbtorture
Undefined   first referenced
 symbol in file
err default/lib/ntdb/tools/ntdbtorture_3.o
ld: fatal: Symbol referencing errors. No output written to
/usr/local/src/samba-4.0.0beta7/bin/default/lib/ntdb/ntdbtorture
collect2: ld returned 1 exit status
Waf: Leaving directory `/usr/local/src/samba-4.0.0beta7/bin'
Build failed:  - task failed (err #1):
{task: cc_link
ntdbtorture_3.o,ilog_2.o,hash_1.o,replace_2.o,timegm_2.o,snprintf_2.o,strptime_2.o,getpass_2.o,getifaddrs_2.o,xattr_2.o,debug_4.o,str_4.o,tally_5.o,likely_10.o,check_1.o,free_1.o,hash_1.o,io_1.o,lock_1.o,open_1.o,summary_1.o,ntdb_1.o,transaction_1.o,traverse_1.o
- ntdbtorture}


I had submitted a bug report (Bug ID 9064) which was against beta4, but
I've updated it with the above information. I'd be grateful either for a
full fix or pointers to what to change to make it work.

Thanks,


-- 
Tom.

--
 Tom Crummey, Infrastructure Manager, EMAIL: t...@ee.ucl.ac.uk
 Dept. of Electronic and Electrical Engineering,
 University College London, Roberts Building,   TEL: +44 (0)20 7679 3898
 Torrington Place,  FAX: +44 (0)20 7388 9325
 London, UK, WC1E 7JE.
--
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Support for Linux Authentication with Samba4's Internal LDAP Server

2012-08-29 Thread Andrew Martin
Ok. Also, is there any way to allow or enable anonymous binds? 


Thanks, 


Andrew 

- Original Message -

From: Andrew Bartlett abart...@samba.org 
To: Andrew Martin amar...@xes-inc.com 
Cc: samba@lists.samba.org 
Sent: Tuesday, August 28, 2012 5:28:18 PM 
Subject: Re: [Samba] Support for Linux Authentication with Samba4's Internal 
LDAP Server 

On Tue, 2012-08-28 at 17:13 -0500, Andrew Martin wrote: 
 Andrew, 
 
 
 Thanks for the clarification. Is there a list of the attributes Samba4 
 will maintain, so I can determine which ones I'll have to manually 
 update? 

Essentially we behave like AD, so reference guides around that if you 
need further clues. 

Andrew Bartlett 

-- 
Andrew Bartlett http://samba.org/~abartlet/ 
Authentication Developer, Samba Team http://samba.org 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Phantom Domain Master Browser

2012-08-29 Thread Robert Adkins II
There is no wins.dat or browse.dat anywhere on my server.

I am surprised to find this to be the case.

I do not have a machine on my network with the IP Address in question.

Regards,
Robert
 

 -Original Message-
 From: samba-boun...@lists.samba.org 
 [mailto:samba-boun...@lists.samba.org] On Behalf Of Gaiseric Vandal
 Sent: Tuesday, July 31, 2012 9:46 AM
 To: samba@lists.samba.org
 Subject: Re: [Samba] Phantom Domain Master Browser
 
 In the /var/samba/locks directory you may have browse.dat file  or
 wins.*  (if this is a WINS server) files that have incorrect info.   
 You should be able to name/backup these  files and restart nmbd.  
 
 Is the phantom master browser a samba server or a Windows 
 machine?  the Samba DC normally should win browser elections 
 but it is not always the case.
 
  
 
 
 On 07/20/12 09:08, Robert Adkins II wrote:
  I brought up the old server and have been reviewing the log files.
 
  There is no indication of the phantom master browser 
 existing in the 
  old log files.
 
  --
 
  Regards,
  Robert Adkins II
  IT Manager/Buyer
  Impel Industries, Inc.
  586-254-5800
 
   
 
  -Original Message-
  From: samba-boun...@lists.samba.org
  [mailto:samba-boun...@lists.samba.org] On Behalf Of Robert 
 Adkins II
  Sent: Friday, July 20, 2012 8:50 AM
  To: samba@lists.samba.org
  Subject: [Samba] Phantom Domain Master Browser
 
  There's a phantom domain master browser showing up in my Samba 
  nmbd.log file.
   
  I keep thinking that maybe it is left over in one of the 
 files that I 
  transferred over from the old server to the new server and 
 it isn't 
  clearing itself out. Is there a way to clear that and is 
 it possible 
  to have a phantom browser fighting over the Domain from a 
 copied over 
  file?
   
  I transferred all of the Samba files found in /etc/samba 
 to the new 
  server.
   
  This was also an upgrade from Samba 3.2.7 to Samba 3.6.3
   
  I have noticed some additional files in the /var/log/Samba 
 directory 
  as well as some additional files in the /etc/samba 
 directory on the 
  new server.
   
   
   
 
 
  --
 
  Regards,
  Robert Adkins II
  IT Manager/Buyer
  Impel Industries, Inc. 
  586-254-5800
 
   
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/options/samba
 
 
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] What could cause an unclean shutdown of process?

2012-08-29 Thread Frederic Fournier
Hello everyone,

I've been experiencing many problems recently with windows software parsing
large text files stored on a samba share (smb version 3.6.3 on
ubuntu12.04). The software, which are running on windows XP stations, are
crashing quite often.

I notice this in the log.smbd at the time of the crash:
[2012/08/28 17:25:21.980609,  3] smbd/server.c:629(smbd_parent_housekeeping)
  Printcap cache time expired.
[2012/08/28 17:25:21.980679,  3] printing/pcap.c:138(pcap_cache_reload)
  reloading printcap cache
[2012/08/28 17:25:21.980756,  3] printing/pcap.c:189(pcap_cache_reload)
  reload status: ok
*[2012/08/28 17:37:08.715154,  3] smbd/server.c:292(remove_child_pid)*
*  smbd/server.c:292 Unclean shutdown of pid 32526*
*[2012/08/28 17:37:08.715318,  1] smbd/server.c:300(remove_child_pid)*
*  Scheduled cleanup of brl and lock database after unclean shutdown*
*[2012/08/28 17:37:28.722037,  1] smbd/server.c:272(cleanup_timeout_fn)*
*  Cleaning up brl and lock database after unclean shutdown*
[2012/08/28 17:38:22.509303,  3] smbd/server.c:629(smbd_parent_housekeeping)
  Printcap cache time expired.
[2012/08/28 17:38:22.509403,  3] printing/pcap.c:138(pcap_cache_reload)
  reloading printcap cache
[2012/08/28 17:38:22.509499,  3] printing/pcap.c:189(pcap_cache_reload)
  reload status: ok
I don't see anything that catches my eye in the other logs (log.nmbd,
log.client_name, log.client_IP, log.winbindd). The log.client_name
shows a very long list of transactions that stops suddently at the time of
the 'unclean shutdown'.

Do you have any idea what could cause this 'unclean shutdown'? What would
be the best way to further diagnose this problem? I've looked into the
servers' log without noticing anything strange?

Thank you very much for your help,

Frederic
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Phantom Domain Master Browser

2012-08-29 Thread Robert Adkins II
Nevermind. I found them.

I also performed the below suggestions and the phantom IP address is still
there, fighting for control of the network.


--

Regards,
Robert Adkins

 

 -Original Message-
 From: Robert Adkins II [mailto:radk...@impelind.com] 
 Sent: Wednesday, August 29, 2012 10:54 AM
 To: 'gaiseric.van...@gmail.com'; 'samba@lists.samba.org'
 Subject: RE: [Samba] Phantom Domain Master Browser
 
 There is no wins.dat or browse.dat anywhere on my server.
 
 I am surprised to find this to be the case.
 
 I do not have a machine on my network with the IP Address in question.
 
 Regards,
 Robert
  
 
  -Original Message-
  From: samba-boun...@lists.samba.org
  [mailto:samba-boun...@lists.samba.org] On Behalf Of Gaiseric Vandal
  Sent: Tuesday, July 31, 2012 9:46 AM
  To: samba@lists.samba.org
  Subject: Re: [Samba] Phantom Domain Master Browser
  
  In the /var/samba/locks directory you may have browse.dat file  or
  wins.*  (if this is a WINS server) files that have 
 incorrect info.   
  You should be able to name/backup these  files and restart nmbd.  
  
  Is the phantom master browser a samba server or a Windows machine?  
  the Samba DC normally should win browser elections but it is not 
  always the case.
  
   
  
  
  On 07/20/12 09:08, Robert Adkins II wrote:
   I brought up the old server and have been reviewing the log files.
  
   There is no indication of the phantom master browser
  existing in the
   old log files.
  
   --
  
   Regards,
   Robert Adkins II
   IT Manager/Buyer
   Impel Industries, Inc.
   586-254-5800
  

  
   -Original Message-
   From: samba-boun...@lists.samba.org 
   [mailto:samba-boun...@lists.samba.org] On Behalf Of Robert
  Adkins II
   Sent: Friday, July 20, 2012 8:50 AM
   To: samba@lists.samba.org
   Subject: [Samba] Phantom Domain Master Browser
  
   There's a phantom domain master browser showing up in my Samba 
   nmbd.log file.

   I keep thinking that maybe it is left over in one of the
  files that I
   transferred over from the old server to the new server and
  it isn't
   clearing itself out. Is there a way to clear that and is
  it possible
   to have a phantom browser fighting over the Domain from a
  copied over
   file?

   I transferred all of the Samba files found in /etc/samba
  to the new
   server.

   This was also an upgrade from Samba 3.2.7 to Samba 3.6.3

   I have noticed some additional files in the /var/log/Samba
  directory
   as well as some additional files in the /etc/samba
  directory on the
   new server.



  
  
   --
  
   Regards,
   Robert Adkins II
   IT Manager/Buyer
   Impel Industries, Inc. 
   586-254-5800
  

   --
   To unsubscribe from this list go to the following URL 
 and read the
   instructions:  https://lists.samba.org/mailman/options/samba
  
  
  
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/options/samba
  

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] What could cause an unclean shutdown of process?

2012-08-29 Thread David Disseldorp
Hi Frederic,

On Wed, 29 Aug 2012 11:04:22 -0400
Frederic Fournier frederic.bioi...@gmail.com wrote:

 I notice this in the log.smbd at the time of the crash:
 [2012/08/28 17:25:21.980609,  3] smbd/server.c:629(smbd_parent_housekeeping)
   Printcap cache time expired.
 [2012/08/28 17:25:21.980679,  3] printing/pcap.c:138(pcap_cache_reload)
   reloading printcap cache
 [2012/08/28 17:25:21.980756,  3] printing/pcap.c:189(pcap_cache_reload)
   reload status: ok
 *[2012/08/28 17:37:08.715154,  3] smbd/server.c:292(remove_child_pid)*
 *  smbd/server.c:292 Unclean shutdown of pid 32526*
 *[2012/08/28 17:37:08.715318,  1] smbd/server.c:300(remove_child_pid)*
 *  Scheduled cleanup of brl and lock database after unclean shutdown*
 *[2012/08/28 17:37:28.722037,  1] smbd/server.c:272(cleanup_timeout_fn)*
 *  Cleaning up brl and lock database after unclean shutdown*
 [2012/08/28 17:38:22.509303,  3] smbd/server.c:629(smbd_parent_housekeeping)
   Printcap cache time expired.
 [2012/08/28 17:38:22.509403,  3] printing/pcap.c:138(pcap_cache_reload)
   reloading printcap cache
 [2012/08/28 17:38:22.509499,  3] printing/pcap.c:189(pcap_cache_reload)
   reload status: ok
 I don't see anything that catches my eye in the other logs (log.nmbd,
 log.client_name, log.client_IP, log.winbindd). The log.client_name
 shows a very long list of transactions that stops suddently at the time of
 the 'unclean shutdown'.

These messages are the side effect of the asynchronous printcap update
process exiting normally, and should not be causing any problems.
To confirm this, you could change the printcap cache time setting to
0.

Cheers, David
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Add apple MCX directory extensions

2012-08-29 Thread Caleb O'Connell
I'm trying to load the apple attributes and classes to samba4 using 
ldbmodify.  I can get it to load, sort of.  I keep getting errors and having 
to modify the file.  

Command I'm using:

sudo ldbmodify -v -H ldap://lda.server.local -UAdministrator 
/home/user/apple-mcx.ldif


here is the ldif that I'm loading
--

# ==
#  Attributes
# ==

# Attribute: apple-category
dn: cn=apple-category,cn=Schema,cn=Configuration,dc=X
changetype: add
objectClass: attributeSchema
attributeId: 1.3.6.1.4.1.63.1000.1.1.1.10.4
ldapDisplayName: apple-category
attributeSyntax: 2.5.5.12
adminDescription: Category for the computer or neighborhood
oMSyntax: 64
systemOnly: FALSE

# Attribute: apple-computeralias
dn: cn=apple-computeralias,cn=Schema,cn=Configuration,dc=X
changetype: add
objectClass: attributeSchema
attributeId: 1.3.6.1.4.1.63.1000.1.1.1.20.3
ldapDisplayName: apple-computeralias
attributeSyntax: 2.5.5.12
adminDescription: XML plist referring to a computer record
oMSyntax: 64
systemOnly: FALSE

# Attribute: apple-computer-list-groups
dn: cn=apple-computer-list-groups,cn=Schema,cn=Configuration,dc=X
changetype: add
objectClass: attributeSchema
attributeId: 1.3.6.1.4.1.63.1000.1.1.1.11.4
ldapDisplayName: apple-computer-list-groups
attributeSyntax: 2.5.5.12
adminDescription: groups
oMSyntax: 64
systemOnly: FALSE

# Attribute: apple-computers
dn: cn=apple-computers,cn=Schema,cn=Configuration,dc=X
changetype: add
objectClass: attributeSchema
attributeId: 1.3.6.1.4.1.63.1000.1.1.1.11.3
ldapDisplayName: apple-computers
attributeSyntax: 2.5.5.12
adminDescription: computers
oMSyntax: 64
systemOnly: FALSE

# Attribute: apple-data-stamp
dn: cn=apple-data-stamp,cn=Schema,cn=Configuration,dc=X
changetype: add
objectClass: attributeSchema
attributeId: 1.3.6.1.4.1.63.1000.1.1.1.12.2
ldapDisplayName: apple-data-stamp
attributeSyntax: 2.5.5.5
adminDescription: data stamp
oMSyntax: 22
isSingleValued: TRUE
systemOnly: FALSE

# Attribute: apple-dns-domain
dn: cn=apple-dns-domain,cn=Schema,cn=Configuration,dc=X
changetype: add
objectClass: attributeSchema
attributeId: 1.3.6.1.4.1.63.1000.1.1.1.18.1
ldapDisplayName: apple-dns-domain
attributeSyntax: 2.5.5.12
adminDescription: DNS domain
oMSyntax: 64
systemOnly: FALSE

# Attribute: apple-dnsname
dn: cn=apple-dnsname,cn=Schema,cn=Configuration,dc=X
changetype: add
objectClass: attributeSchema
attributeId: 1.3.6.1.4.1.63.1000.1.1.1.19.4
ldapDisplayName: apple-dnsname
attributeSyntax: 2.5.5.12
adminDescription: DNS name
oMSyntax: 64
systemOnly: FALSE

# Attribute: apple-dns-nameserver
dn: cn=apple-dns-nameserver,cn=Schema,cn=Configuration,dc=X
changetype: add
objectClass: attributeSchema
attributeId: 1.3.6.1.4.1.63.1000.1.1.1.18.2
ldapDisplayName: apple-dns-nameserver
attributeSyntax: 2.5.5.12
adminDescription: DNS name server list
oMSyntax: 64
systemOnly: FALSE

# Attribute: apple-group-homeowner
dn: cn=apple-group-homeowner,cn=Schema,cn=Configuration,dc=X
changetype: add
objectClass: attributeSchema
attributeId: 1.3.6.1.4.1.63.1000.1.1.1.14.2
ldapDisplayName: apple-group-homeowner
attributeSyntax: 2.5.5.5
adminDescription: group home owner settings
oMSyntax: 22
isSingleValued: TRUE
systemOnly: FALSE

# Attribute: apple-group-homeurl
dn: cn=apple-group-homeurl,cn=Schema,cn=Configuration,dc=X
changetype: add
objectClass: attributeSchema
attributeId: 1.3.6.1.4.1.63.1000.1.1.1.14.1
ldapDisplayName: apple-group-homeurl
attributeSyntax: 2.5.5.5
adminDescription: group home url
oMSyntax: 22
isSingleValued: TRUE
systemOnly: FALSE

# Attribute: apple-imhandle
dn: cn=apple-imhandle,cn=Schema,cn=Configuration,dc=X
changetype: add
objectClass: attributeSchema
attributeId: 1.3.6.1.4.1.63.1000.1.1.1.1.21
ldapDisplayName: apple-imhandle
attributeSyntax: 2.5.5.12
adminDescription: IM handle (service:account name)
oMSyntax: 64
systemOnly: FALSE

# Attribute: apple-keyword
dn: cn=apple-keyword,cn=Schema,cn=Configuration,dc=X
changetype: add
objectClass: attributeSchema
attributeId: 1.3.6.1.4.1.63.1000.1.1.1.1.19
ldapDisplayName: apple-keyword
attributeSyntax: 2.5.5.12
adminDescription: keywords
oMSyntax: 64
systemOnly: FALSE

# Attribute: apple-mcxflags
dn: cn=apple-mcxflags,cn=Schema,cn=Configuration,dc=X
changetype: add
objectClass: attributeSchema
attributeId: 1.3.6.1.4.1.63.1000.1.1.1.1.10
ldapDisplayName: apple-mcxflags
attributeSyntax: 2.5.5.12
adminDescription: mcx flags
oMSyntax: 64
isSingleValued: TRUE
systemOnly: FALSE

# Attribute: apple-mcxsettings
dn: cn=apple-mcxsettings,cn=Schema,cn=Configuration,dc=X
changetype: add
objectClass: attributeSchema
attributeId: 1.3.6.1.4.1.63.1000.1.1.1.1.16
ldapDisplayName: apple-mcxsettings
attributeSyntax: 2.5.5.12
adminDescription: mcx settings
oMSyntax: 64
systemOnly: FALSE

# Attribute: apple-neighborhoodalias
dn: 

Re: [Samba] What could cause an unclean shutdown of process?

2012-08-29 Thread Frederic Fournier
Hello David,

Thanks for the tip, I was also looking for a way to get rid of those
Printcap messages that pops up every 13 minutes. (especially since there is
no printer on this server).

But I only included those messages to give a bit of context: its the three
messages in the middle that cause me trouble:
smbd/server.c:292 Unclean shutdown of pid 32526
Scheduled cleanup of brl and lock database after unclean shutdown*
 Cleaning up brl and lock database after unclean shutdown*

Do you know how I could find what causes the server to do an unclean
shutdown of one of its process (and how to prevent it)? Because when there
is such an unclean shutdown, there is also a crash on the client side. (Or
maybe it's the other way around?) How could I find more about it?

Thank you very much for your help!!

Frederic

On Wed, Aug 29, 2012 at 11:46 AM, David Disseldorp dd...@suse.de wrote:

 Hi Frederic,

 On Wed, 29 Aug 2012 11:04:22 -0400
 Frederic Fournier frederic.bioi...@gmail.com wrote:

  I notice this in the log.smbd at the time of the crash:
  [2012/08/28 17:25:21.980609,  3]
 smbd/server.c:629(smbd_parent_housekeeping)
Printcap cache time expired.
  [2012/08/28 17:25:21.980679,  3] printing/pcap.c:138(pcap_cache_reload)
reloading printcap cache
  [2012/08/28 17:25:21.980756,  3] printing/pcap.c:189(pcap_cache_reload)
reload status: ok
  *[2012/08/28 17:37:08.715154,  3] smbd/server.c:292(remove_child_pid)*
  *  smbd/server.c:292 Unclean shutdown of pid 32526*
  *[2012/08/28 17:37:08.715318,  1] smbd/server.c:300(remove_child_pid)*
  *  Scheduled cleanup of brl and lock database after unclean shutdown*
  *[2012/08/28 17:37:28.722037,  1] smbd/server.c:272(cleanup_timeout_fn)*
  *  Cleaning up brl and lock database after unclean shutdown*
  [2012/08/28 17:38:22.509303,  3]
 smbd/server.c:629(smbd_parent_housekeeping)
Printcap cache time expired.
  [2012/08/28 17:38:22.509403,  3] printing/pcap.c:138(pcap_cache_reload)
reloading printcap cache
  [2012/08/28 17:38:22.509499,  3] printing/pcap.c:189(pcap_cache_reload)
reload status: ok
  I don't see anything that catches my eye in the other logs (log.nmbd,
  log.client_name, log.client_IP, log.winbindd). The log.client_name
  shows a very long list of transactions that stops suddently at the time
 of
  the 'unclean shutdown'.

 These messages are the side effect of the asynchronous printcap update
 process exiting normally, and should not be causing any problems.
 To confirm this, you could change the printcap cache time setting to
 0.

 Cheers, David

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] replication error?

2012-08-29 Thread Steve Thompson

Samba4 beta6. CentOS 6.3.

I have a CentOS client, using sssd, bound to a samba4 domain. The sssd 
configuration uses GSSAPI to bind to the directory. In both scenarios 
below, kerberos is fine, DNS is fine, I can use ldapsearch and bind to the 
directory with GSSAPI just fine, etc.


If I have just one DC, everything works perfectly well for weeks on end.

If I have two or more DC's, everything works fine when the machine is 
first bound to the domain. Sssd caches the login info, but eventually this 
times out and another call to Samba has to be made to refresh the cache. 
The SASL bind to the directory fails with:


  (Wed Aug 29 11:40:56 2012) [sssd[be[SAMBA4]]] [sasl_bind_send] (0x0020):
  ldap_sasl_bind failed (49)[Invalid credentials]

Some time later, it starts working again, presumably because the first DC
popped up in the name resolution order once again. The client 
configuration is unchanged from the first (working) scenario.


As I said, everything works perfectly with one DC, and fails consistently 
with two or more. I have verified that the machine's unicodePwd is the

same in each database.

This is a serious showstopper. Any clues?

Steve
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] What could cause an unclean shutdown of process?

2012-08-29 Thread David Disseldorp
Hi Frederic,

On Wed, 29 Aug 2012 11:58:38 -0400
Frederic Fournier frederic.bioi...@gmail.com wrote:

 Thanks for the tip, I was also looking for a way to get rid of those
 Printcap messages that pops up every 13 minutes. (especially since there is
 no printer on this server).
 
 But I only included those messages to give a bit of context: its the three
 messages in the middle that cause me trouble:
 smbd/server.c:292 Unclean shutdown of pid 32526
 Scheduled cleanup of brl and lock database after unclean shutdown*
  Cleaning up brl and lock database after unclean shutdown*
 
 Do you know how I could find what causes the server to do an unclean
 shutdown of one of its process (and how to prevent it)? Because when there
 is such an unclean shutdown, there is also a crash on the client side. (Or
 maybe it's the other way around?) How could I find more about it?

The 'cleanup...after unclean shutdown' messages are also caused by the
printcap process. It does not register it's pid which results in
the parent smbd process complaining on SIGCHLD when the printcap process
exits.

Cheers, David
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Phantom Domain Master Browser

2012-08-29 Thread Dale Schroeder

Robert,

Assuming one of the files you found was wins.dat, is there an entry for 
the offending IP with a corresponding hostname?

Knowing the source should surely help with troubleshooting.

Dale


On 08/29/2012 10:08 AM, Robert Adkins II wrote:

Nevermind. I found them.

I also performed the below suggestions and the phantom IP address is still
there, fighting for control of the network.


--

Regards,
Robert Adkins

  


-Original Message-
From: Robert Adkins II [mailto:radk...@impelind.com]
Sent: Wednesday, August 29, 2012 10:54 AM
To: 'gaiseric.van...@gmail.com'; 'samba@lists.samba.org'
Subject: RE: [Samba] Phantom Domain Master Browser

There is no wins.dat or browse.dat anywhere on my server.

I am surprised to find this to be the case.

I do not have a machine on my network with the IP Address in question.

Regards,
Robert
  


-Original Message-
From: samba-boun...@lists.samba.org
[mailto:samba-boun...@lists.samba.org] On Behalf Of Gaiseric Vandal
Sent: Tuesday, July 31, 2012 9:46 AM
To: samba@lists.samba.org
Subject: Re: [Samba] Phantom Domain Master Browser

In the /var/samba/locks directory you may have browse.dat file  or
wins.*  (if this is a WINS server) files that have

incorrect info.

You should be able to name/backup these  files and restart nmbd.

Is the phantom master browser a samba server or a Windows machine?
the Samba DC normally should win browser elections but it is not
always the case.

  



On 07/20/12 09:08, Robert Adkins II wrote:

I brought up the old server and have been reviewing the log files.

There is no indication of the phantom master browser

existing in the

old log files.

--

Regards,
Robert Adkins II
IT Manager/Buyer
Impel Industries, Inc.
586-254-5800

  


-Original Message-
From: samba-boun...@lists.samba.org
[mailto:samba-boun...@lists.samba.org] On Behalf Of Robert

Adkins II

Sent: Friday, July 20, 2012 8:50 AM
To: samba@lists.samba.org
Subject: [Samba] Phantom Domain Master Browser

There's a phantom domain master browser showing up in my Samba
nmbd.log file.
  
I keep thinking that maybe it is left over in one of the

files that I

transferred over from the old server to the new server and

it isn't

clearing itself out. Is there a way to clear that and is

it possible

to have a phantom browser fighting over the Domain from a

copied over

file?
  
I transferred all of the Samba files found in /etc/samba

to the new

server.
  
This was also an upgrade from Samba 3.2.7 to Samba 3.6.3
  
I have noticed some additional files in the /var/log/Samba

directory

as well as some additional files in the /etc/samba

directory on the

new server.
  
  
  



--

Regards,
Robert Adkins II
IT Manager/Buyer
Impel Industries, Inc.
586-254-5800

  
--

To unsubscribe from this list go to the following URL

and read the

instructions:  https://lists.samba.org/mailman/options/samba



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.4.3 and DOS read only

2012-08-29 Thread Jim Gallagher
New info:

I finally realized there are two log files for each client, one with the IP
address of the client in the file name and the other with the client's
hostname. I have been looking in the former, when the important info was in
the latter. It appears that for the unix_mode() call, there are extra
characters getting appended to the file name. For example, when I try to
set readonly for a file test.c, the log entry shows:

[2012/08/29 10:17:29,  3] smbd/dosmode.c:135(unix_mode)
  unix_mode(test.cî³°) returning 0744
[2012/08/29 10:17:29,  3] smbd/error.c:56(error_packet_set)
  error packet at smbd/nttrans.c(541) cmd=162 (SMBntcreateX)
NT_STATUS_OBJECT_NAME_NOT_FOUND

The characters did not paste correctly; they are not ASCII.

The file is indeed test.c. Other files appear to get the same characters
appended for this operation. Wireshark shows the client sends the name as
test.c. I can open, edit and save the file without issue.

What about my Windows clients could cause this? Smbclient works fine.

Thanks,
Jim

On Sun, Aug 26, 2012 at 4:24 PM, Günter Kukkukk li...@kukkukk.com wrote:

 Am Sonntag, 26. August 2012, 22:46:12 schrieb Jim Gallagher:
  Günter,
 
  I am using the Windows file properties dialog and checking the read only
  box. I have tested with both Windows 2003 and Windows 7 Enterprise
 clients,
  with the same results. It seems strange to me that there is no log entry
 on
  the samba side, but I am not familiar with the log levels.
 
  Using wireshark, I definitely see traffic after selecting OK from the
  dialog when attempting to set RO, but I don't know enough about the
  protocol to decipher what's going on.
 
  Thanks,
  Jim
 
  On Sun, Aug 26, 2012 at 9:34 AM, Günter Kukkukk li...@kukkukk.com
 wrote:
   Hi Jim,
  
   in your smbd debug log i don't see any call where the dos
   attributes are modified.
   From what kind of client are you connecting and which commands
   do you use to change the readonly/readwrite dos attribute ?
  
   As Jeremy already posted, with smblient you can use
  
 setmode filename +r (or -r)
  
   Inside a windows MSDOS cmdline window you can use
  
 attrib *(to list the current attributes)
 attrib +r somefile  (to set that file read only)
 attrib -r somefile  (to set that file read/write)
  
   Also the windows GUI file explorer can be used.
  
   With samba log level = 4 here i get the following logged:
  
   a.) Setting read/write for file test.fil:
   [2012/08/26 17:40:11.977248,  3] smbd/dosmode.c:160(unix_mode)
  
 unix_mode(test.fil) returning 0644
  
   [2012/08/26 17:40:11.977857,  3] smbd/reply.c:1390(reply_setatr)
  
 setatr name=test.fil mode=0
  
   Result on the unix side:
 -rw-r--r-- 1 gk users 1 Aug 12  2011 test.fil
  
   --
  
   b.) Setting read only for file test.fil:
   [2012/08/26 17:41:23.200130,  3] smbd/dosmode.c:160(unix_mode)
  
 unix_mode(test.fil) returning 0444
  
   [2012/08/26 17:41:23.201050,  3] smbd/reply.c:1390(reply_setatr)
  
 setatr name=test.fil mode=1
  
   Result on the unix side:
-r--r--r-- 1 gk users 1 Aug 12  2011 test.fil
  
   -
  
   Cheers, Günter

 when you change a dos attribute, within wireshark you should see
   Set Information Request, Path:\yourfile
   Set Information Response
 packet pairs on the wire.
 The passed File Attributes can be also viewed.

 Haven't tried windows7 here, whether it uses a different approach.

 Can you try on your server itself:
 smbclient //localhost/test -U jim
 ... pw entry
 smb: \ setmode yourfile +r
 smb: \ setmode yourfile -r

 Cheers, Günter

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Migrate samba to new server

2012-08-29 Thread Dale Schroeder

Alejandro,

There are far too many changes between those two versions to cover here 
- added parameters, deleted parameters, and default value changes.

However, a listing of changes by version can be found here:

https://wiki.samba.org/index.php/Samba_Features_added/changed_%28by_release%29

Following are two somewhat aged upgrade manuals:

http://www.samba.org/samba/docs/man/Samba-Guide/upgrades.html
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/migration.html

Be sure to run testparm on the old version and save its output for 
comparing with the new version.


Good luck.

Dale


On 08/28/2012 4:45 PM, Alejandro Rodriguez Luna wrote:


  Hi, i
have a really old server running samba 3.0.11 (PDC, tdbsam backend) and i'd 
like to
update my server and start using samba 3.6.7 from sernet, my question
here is.
What files do i need to migrate from one version to another, do i need to make 
some changes on my current conf file?
Do i need to join all clients again to the domain?



--
Alejandro Rodriguez Luna
E-mail: el_alexl...@yahoo.com.mx
--


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] syntax of samba-tool to deal with SRV DNS record

2012-08-29 Thread Hleb Valoshka
On 8/29/12, Alain Foucher a.fouc...@cht.nc wrote:
 i'm looking to update some SRV DNS Record , but i didn't find the correct
 syntax to handle priority, weight and port.

from samba-tool output:
ERROR: Data requires 4 elements - server, port, priority, weight
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Phantom Domain Master Browser

2012-08-29 Thread Robert Adkins II

Two things:

1. There is no active hosts on my network using that IP Address.

2. There are entries for the Phantom Domain Master Browser, they are
pointing to the following:

[Domain Name]#1c {string of #'s} -Phantom Server IP Address-
*Current Samba Server IP Address*

[Domain Name]#1b {string of #'s} -Phantom Server IP Address-
*Current Samba Server IP Address*

There are no single entries with the phantom IP Address.

I have also run an nmap scan of the entire network, there is nothing
listed as using the Phantom IP Address, we do not use Wireless and there is
nothing plugged into any of the network jacks that I am unaware of, every
port is accounted for.

--

Regards,
Robert Adkins 

 

 -Original Message-
 From: Dale Schroeder [mailto:d...@briannassaladdressing.com] 
 Sent: Wednesday, August 29, 2012 1:33 PM
 To: Robert Adkins II
 Cc: Samba
 Subject: Re: [Samba] Phantom Domain Master Browser
 
 Robert,
 
 Assuming one of the files you found was wins.dat, is there an 
 entry for the offending IP with a corresponding hostname?
 Knowing the source should surely help with troubleshooting.
 
 Dale
 
 
 On 08/29/2012 10:08 AM, Robert Adkins II wrote:
  Nevermind. I found them.
 
  I also performed the below suggestions and the phantom IP 
 address is 
  still there, fighting for control of the network.
 
 
  --
 
  Regards,
  Robert Adkins
 

 
  -Original Message-
  From: Robert Adkins II [mailto:radk...@impelind.com]
  Sent: Wednesday, August 29, 2012 10:54 AM
  To: 'gaiseric.van...@gmail.com'; 'samba@lists.samba.org'
  Subject: RE: [Samba] Phantom Domain Master Browser
 
  There is no wins.dat or browse.dat anywhere on my server.
 
  I am surprised to find this to be the case.
 
  I do not have a machine on my network with the IP Address 
 in question.
 
  Regards,
  Robert

 
  -Original Message-
  From: samba-boun...@lists.samba.org
  [mailto:samba-boun...@lists.samba.org] On Behalf Of 
 Gaiseric Vandal
  Sent: Tuesday, July 31, 2012 9:46 AM
  To: samba@lists.samba.org
  Subject: Re: [Samba] Phantom Domain Master Browser
 
  In the /var/samba/locks directory you may have browse.dat file  or
  wins.*  (if this is a WINS server) files that have
  incorrect info.
  You should be able to name/backup these  files and restart nmbd.
 
  Is the phantom master browser a samba server or a Windows machine?
  the Samba DC normally should win browser elections but it is not 
  always the case.
 

 
 
  On 07/20/12 09:08, Robert Adkins II wrote:
  I brought up the old server and have been reviewing the 
 log files.
 
  There is no indication of the phantom master browser
  existing in the
  old log files.
 
  --
 
  Regards,
  Robert Adkins II
  IT Manager/Buyer
  Impel Industries, Inc.
  586-254-5800
 

 
  -Original Message-
  From: samba-boun...@lists.samba.org 
  [mailto:samba-boun...@lists.samba.org] On Behalf Of Robert
  Adkins II
  Sent: Friday, July 20, 2012 8:50 AM
  To: samba@lists.samba.org
  Subject: [Samba] Phantom Domain Master Browser
 
  There's a phantom domain master browser showing up in my Samba 
  nmbd.log file.

  I keep thinking that maybe it is left over in one of the
  files that I
  transferred over from the old server to the new server and
  it isn't
  clearing itself out. Is there a way to clear that and is
  it possible
  to have a phantom browser fighting over the Domain from a
  copied over
  file?

  I transferred all of the Samba files found in /etc/samba
  to the new
  server.

  This was also an upgrade from Samba 3.2.7 to Samba 3.6.3

  I have noticed some additional files in the /var/log/Samba
  directory
  as well as some additional files in the /etc/samba
  directory on the
  new server.



 
 
  --
 
  Regards,
  Robert Adkins II
  IT Manager/Buyer
  Impel Industries, Inc.
  586-254-5800
 

  --
  To unsubscribe from this list go to the following URL
  and read the
  instructions:  https://lists.samba.org/mailman/options/samba
 
 
  --
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/options/samba
 
 
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] How to modify ACLs from Mac OS X Clients (Win clients work fine)

2012-08-29 Thread Bruce Martin
Hi there - I have managed to set up an ACL based Samba share on a
linux server.  It's a simple setup: no PDC, no LDAP, no UID/GID
mapping etc.

The server name is REUBEN

From my Windows machines, I can right click on a file, and add acl
entries by choosing usernames on the server like this: REUBEN\username

However, I can't find any way to do this on Mac OS X? Anyone done this before?

Thanks
 Bruce
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] What could cause an unclean shutdown of process?

2012-08-29 Thread Frederic Fournier
Hello,

I added printcap cache time = 0 to my smb.conf and the printcap related
messages disappeared from my log. Thank you very much for that!!

But the 'unclean shutdown of PID xxx' was not related to printcap. (If you
look in the log, you see that it happens 12 minutes after the last printcap
rescanning and one minutes before the next.)
I made more tests, and the programs that are running on the windows clients
keep crashing. The only two things that I see in samba logs are these
'unclean shutdown of PID xxx' messages in log.smbd and a sudden stop in a
long long list of transactions in log.client_name. There are minimal logs
on the client side where I can see: Error caused by: java.io.IOException:
The specified network name is no longer available.
(The client error seems to be logged 1 second after the server error, but
their clock might not perfectly synchronized, so I can't say for sure what
happens first.)

I need to fix this problem, but I don't know how. So far, Google has
brought me to similar problems (e.g.
http://lists.samba.org/archive/samba/2010-August/157948.html), but to no
solution :(

Any help would be greatly appreciated!

Frederic





On Wed, Aug 29, 2012 at 12:24 PM, David Disseldorp dd...@suse.de wrote:

 Hi Frederic,

 On Wed, 29 Aug 2012 11:58:38 -0400
 Frederic Fournier frederic.bioi...@gmail.com wrote:

  Thanks for the tip, I was also looking for a way to get rid of those
  Printcap messages that pops up every 13 minutes. (especially since there
 is
  no printer on this server).
 
  But I only included those messages to give a bit of context: its the
 three
  messages in the middle that cause me trouble:
  smbd/server.c:292 Unclean shutdown of pid 32526
  Scheduled cleanup of brl and lock database after unclean shutdown*
   Cleaning up brl and lock database after unclean shutdown*
 
  Do you know how I could find what causes the server to do an unclean
  shutdown of one of its process (and how to prevent it)? Because when
 there
  is such an unclean shutdown, there is also a crash on the client side.
 (Or
  maybe it's the other way around?) How could I find more about it?

 The 'cleanup...after unclean shutdown' messages are also caused by the
 printcap process. It does not register it's pid which results in
 the parent smbd process complaining on SIGCHLD when the printcap process
 exits.

 Cheers, David

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] LDAP access to Samba 4

2012-08-29 Thread Kristofer
Hello,

I am currently migrating from OpenLDAP to Samba 4 PDC, and I have a webpage 
(PHP/Apache) available for users so that they can change their password on the 
existing LDAP server.

I attempted to adjust that script to change the password on the Samba 4 AD 
controller, but I get a cannot connect error to LDAP.  The web server the 
password script is running on is not on the same machine as the Samba 4 
controller, and is not joined to the AD domain.  What is the best way to 
connect to the LDAP server from PHP to make this happen?  Is there something 
with Kerberos I need to do?  or am I going to have to fully join the machine to 
the domain before it can connect to LDAP?

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] replication error?

2012-08-29 Thread Steve Thompson

On Wed, 29 Aug 2012, Steve Thompson wrote:


 (Wed Aug 29 11:40:56 2012) [sssd[be[SAMBA4]]] [sasl_bind_send] (0x0020):
 ldap_sasl_bind failed (49)[Invalid credentials]


More information. If I have two DC's, dc1 and dc2, and I point ldap_uri 
and krb5_server in sssd.conf directly at dc1, it always works. If I point 
either of those parameters at dc2, it always fails. Replication looks 
clean, and the machine's unicodePwd is the same on both DC's. I have 
verified this with several different clients and DC setups, using beta3, 
beta4 and beta6. I'm not using any custom schema. So now where do I go?


Steve

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.4.3 and DOS read only

2012-08-29 Thread Jim Gallagher
The Windows clients should be using unicode. Does smbclient use unicode by
default? Could that explain the different behavior between the Windows
clients and smbclient?

On Wed, Aug 29, 2012 at 10:59 AM, Jim Gallagher j...@thegallaghers.bizwrote:

 New info:

 I finally realized there are two log files for each client, one with the
 IP address of the client in the file name and the other with the client's
 hostname. I have been looking in the former, when the important info was in
 the latter. It appears that for the unix_mode() call, there are extra
 characters getting appended to the file name. For example, when I try to
 set readonly for a file test.c, the log entry shows:

 [2012/08/29 10:17:29,  3] smbd/dosmode.c:135(unix_mode)
   unix_mode(test.cî³°) returning 0744
 [2012/08/29 10:17:29,  3] smbd/error.c:56(error_packet_set)
   error packet at smbd/nttrans.c(541) cmd=162 (SMBntcreateX)
 NT_STATUS_OBJECT_NAME_NOT_FOUND

 The characters did not paste correctly; they are not ASCII.

 The file is indeed test.c. Other files appear to get the same characters
 appended for this operation. Wireshark shows the client sends the name as
 test.c. I can open, edit and save the file without issue.

 What about my Windows clients could cause this? Smbclient works fine.

 Thanks,
 Jim


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] syntax of samba-tool to deal with SRV DNS record

2012-08-29 Thread Alain Foucher

Hello Hleb,

i try to use something like :

samba-tool  dns  add   smb4   domain.local_http._tcp.domain.local   SRV 
tx4.domain.local  80   1   5


but i get this message

Usage: samba-tool dns add server zone name 
A||PTR|CNAME|NS|MX|SRV|TXT data


Any idea ?

ALlain


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Permissions incorrectly ordered on Windows after disabling inheritance

2012-08-29 Thread Jeremy Allison
On Fri, Aug 24, 2012 at 11:08:53AM -0600, Walkes, Dan wrote:
 Hi everyone,
 
 I've noticed a problem with Debian wheezy + samba 3.6.6 configured with
 acl_xattr in my configuration.  The following test sequence causes
 Windows Explorer to report incorrectly ordered permission entries:
 1)Map a share as with admin user credentials  to a drive letter
 on a Windows client
 2)Create a folder at the root of the share rootfolder
 3)Create a subfolder subfolder1 under rootfolder
 4)Un-check Include inheritable permissions from this object's
 parent in the windows security settings dialog for Windows Explorer on
 the root folder
 5)Create a subfolder subfolder2 under subfolder1
 6)Right-click with Windows Explorer and attempt to edit the
 permissions of subfolder2.  Windows Explorer pops up a message stating
 The permissions on subfolder2 are incorrectly ordered, which may cause
 some entries to be ineffective.

FYI, the complete and correct fix for this ifor 3.6.next s now attached to
bug :

https://bugzilla.samba.org/show_bug.cgi?id=9124

as a patch. Please test (it fixes the problem here). Thanks for reporting
this, the same code will go into master as soon as I've finished wrestling
with autobuild :-).

Cheers,

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[SCM] Samba Shared Repository - branch master updated

2012-08-29 Thread Andrew Bartlett
The branch, master has been updated
   via  e39cce4 s4-libnet: Fix passing samba_all_enctypes as a fn rather 
than the encrypt array it returns
  from  5d96498 s4-dsdb: Avoid printing secret attributes in ldb trace logs

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit e39cce4214b8df14aa123d63a9ac8e1c03925f2d
Author: Andrew Bartlett abart...@samba.org
Date:   Wed Aug 29 16:22:24 2012 +1000

s4-libnet: Fix passing samba_all_enctypes as a fn rather than the encrypt 
array it returns

Autobuild-User(master): Andrew Bartlett abart...@samba.org
Autobuild-Date(master): Wed Aug 29 09:56:27 CEST 2012 on sn-devel-104

---

Summary of changes:
 source4/libnet/libnet_export_keytab.c |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/libnet/libnet_export_keytab.c 
b/source4/libnet/libnet_export_keytab.c
index 9763726..16165b8 100644
--- a/source4/libnet/libnet_export_keytab.c
+++ b/source4/libnet/libnet_export_keytab.c
@@ -63,7 +63,7 @@ NTSTATUS libnet_export_keytab(struct libnet_context *ctx, 
TALLOC_CTX *mem_ctx, s
}
 
if (r-in.principal) {
-   ret = kt_copy_one_principal(smb_krb5_context-krb5_context, 
from_keytab, r-in.keytab_name, r-in.principal, 0, samba_all_enctypes);
+   ret = kt_copy_one_principal(smb_krb5_context-krb5_context, 
from_keytab, r-in.keytab_name, r-in.principal, 0, samba_all_enctypes());
} else {
unlink(r-in.keytab_name);
ret = kt_copy(smb_krb5_context-krb5_context, from_keytab, 
r-in.keytab_name);


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2012-08-29 Thread Andreas Schneider
The branch, master has been updated
   via  24356f3 libkrb5: Fix build with MIT Kerberos.
  from  e39cce4 s4-libnet: Fix passing samba_all_enctypes as a fn rather 
than the encrypt array it returns

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 24356f3cc9382b321939a53efec313ebce0acfa5
Author: Andreas Schneider a...@samba.org
Date:   Wed Aug 29 10:36:21 2012 +0200

libkrb5: Fix build with MIT Kerberos.

Autobuild-User(master): Andreas Schneider a...@cryptomilk.org
Autobuild-Date(master): Wed Aug 29 12:23:37 CEST 2012 on sn-devel-104

---

Summary of changes:
 lib/krb5_wrap/enctype_convert.c |   12 ++--
 1 files changed, 6 insertions(+), 6 deletions(-)


Changeset truncated at 500 lines:

diff --git a/lib/krb5_wrap/enctype_convert.c b/lib/krb5_wrap/enctype_convert.c
index 446384e..b78304f 100644
--- a/lib/krb5_wrap/enctype_convert.c
+++ b/lib/krb5_wrap/enctype_convert.c
@@ -28,11 +28,11 @@ const krb5_enctype *samba_all_enctypes(void)
 {
/* TODO: Find a way not to have to use a fixed list */
static const krb5_enctype enctypes[] = {
-   KRB5_ENCTYPE_DES_CBC_CRC,
-   KRB5_ENCTYPE_DES_CBC_MD5,
-   KRB5_ENCTYPE_AES128_CTS_HMAC_SHA1_96,
-   KRB5_ENCTYPE_AES256_CTS_HMAC_SHA1_96,
-   KRB5_ENCTYPE_ARCFOUR_HMAC_MD5,
+   ENCTYPE_DES_CBC_CRC,
+   ENCTYPE_DES_CBC_MD5,
+   ENCTYPE_AES128_CTS_HMAC_SHA1_96,
+   ENCTYPE_AES256_CTS_HMAC_SHA1_96,
+   ENCTYPE_ARCFOUR_HMAC,
0
};
return enctypes;
@@ -47,7 +47,7 @@ uint32_t kerberos_enctype_to_bitmap(krb5_enctype 
enc_type_enum)
return ENC_CRC32;
case ENCTYPE_DES_CBC_MD5:
return ENC_RSA_MD5;
-   case ENCTYPE_ARCFOUR_HMAC_MD5:
+   case ENCTYPE_ARCFOUR_HMAC:
return ENC_RC4_HMAC_MD5;
case ENCTYPE_AES128_CTS_HMAC_SHA1_96:
return ENC_HMAC_SHA1_96_AES128;


-- 
Samba Shared Repository


[SCM] build.samba.org - branch master updated

2012-08-29 Thread Björn Jacke
The branch, master has been updated
   via  5a76ae9 move pidl build into the compiler loop
  from  b7bc145 Use --enable-selftest only on master

http://gitweb.samba.org/?p=build-farm.git;a=shortlog;h=master


- Log -
commit 5a76ae967439025bb40499339d0a77af7c785388
Author: Björn Jacke b...@sernet.de
Date:   Wed Aug 29 13:01:39 2012 +0200

move pidl build into the compiler loop

---

Summary of changes:
 generic.fns |   11 ++-
 1 files changed, 6 insertions(+), 5 deletions(-)


Changeset truncated at 500 lines:

diff --git a/generic.fns b/generic.fns
index 25a6b2e..46f552a 100644
--- a/generic.fns
+++ b/generic.fns
@@ -73,11 +73,12 @@ for compiler in $compilers; do
   fi
 fi
   fi
-done
 
-# only attempt pidl if we have perl
-if which perl  /dev/null; then
-  test_tree pidl . cc
-fi
+  # only attempt pidl if we have perl
+  if which perl  /dev/null; then
+test_tree pidl . cc
+  fi
+
+done
 
 global_unlock


-- 
build.samba.org


[SCM] Samba Shared Repository - branch master updated

2012-08-29 Thread David Disseldorp
The branch, master has been updated
   via  fb15e5a s3-printing: fix bug 9123 lprng job tracking errors
  from  24356f3 libkrb5: Fix build with MIT Kerberos.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit fb15e5a58f79801b0a74a8ddf555411c0fd44acb
Author: David Disseldorp dd...@samba.org
Date:   Tue Aug 28 18:58:24 2012 +0200

s3-printing: fix bug 9123 lprng job tracking errors

The lprng printing back-end is truncating the print job filename in the
lpq output, which means that Samba is not able to determine the back-end
job ID for a newly submitted print job.
Remove the unneeded spoolss job ID from the print job file name to
ensure the job filename is not truncated. Also log these warnings at a
higher log level.

Autobuild-User(master): David Disseldorp dd...@samba.org
Autobuild-Date(master): Wed Aug 29 14:25:13 CEST 2012 on sn-devel-104

---

Summary of changes:
 source3/printing/print_generic.c |2 +-
 source3/printing/printing.c  |4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/printing/print_generic.c b/source3/printing/print_generic.c
index efe910d..1560a03 100644
--- a/source3/printing/print_generic.c
+++ b/source3/printing/print_generic.c
@@ -288,7 +288,7 @@ static int generic_job_submit(int snum, struct printjob 
*pjob,
ret = 0;
}
if (pjob-sysjob == -1) {
-   DEBUG(0, (failed to get sysjob for job %u (%s), tracking as 
+   DEBUG(2, (failed to get sysjob for job %u (%s), tracking as 
  Unix job\n, pjob-jobid, jobname));
}
 
diff --git a/source3/printing/printing.c b/source3/printing/printing.c
index 9a7b110..23b143b 100644
--- a/source3/printing/printing.c
+++ b/source3/printing/printing.c
@@ -2739,8 +2739,8 @@ static WERROR print_job_spool_file(int snum, uint32_t 
jobid,
}
 
slprintf(pjob-filename, sizeof(pjob-filename)-1,
-%s/%s%.8u.XX, lp_pathname(talloc_tos(), snum),
-PRINT_SPOOL_PREFIX, (unsigned int)jobid);
+%s/%sXX, lp_pathname(talloc_tos(), snum),
+PRINT_SPOOL_PREFIX);
pjob-fd = mkstemp(pjob-filename);
 
if (pjob-fd == -1) {


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2012-08-29 Thread Björn Jacke
The branch, master has been updated
   via  f31d0d0 vfs_media_harmony: fix some compile warnings with llvm
  from  fb15e5a s3-printing: fix bug 9123 lprng job tracking errors

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit f31d0d0e30af6577de483ec4e811b9422b8ef39a
Author: Björn Jacke b...@sernet.de
Date:   Wed Aug 29 13:37:05 2012 +0200

vfs_media_harmony: fix some compile warnings with llvm

Autobuild-User(master): Björn Jacke b...@sernet.de
Autobuild-Date(master): Wed Aug 29 16:05:10 CEST 2012 on sn-devel-104

---

Summary of changes:
 source3/modules/vfs_media_harmony.c |  132 +-
 1 files changed, 66 insertions(+), 66 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/modules/vfs_media_harmony.c 
b/source3/modules/vfs_media_harmony.c
index e2cb407..53cb176 100644
--- a/source3/modules/vfs_media_harmony.c
+++ b/source3/modules/vfs_media_harmony.c
@@ -430,7 +430,7 @@ static int alloc_get_client_path(vfs_handle_struct *handle,
(*newPath)[pathPtr - path + CREATING_DIRNAME_LEN] = '\0';
DEBUG(MH_INFO_DEBUG, (newPath #2 %s\n, *newPath));
 
-   if (status = alloc_append_client_suffix(handle, newPath))
+   if ((status = alloc_append_client_suffix(handle, newPath)))
{
goto out;
}
@@ -462,7 +462,7 @@ static int alloc_get_client_path(vfs_handle_struct *handle,
)
{
DEBUG(MH_INFO_DEBUG, (newPath #5 %s\n, *newPath));
-   if (status = alloc_append_client_suffix(handle, newPath))
+   if ((status = alloc_append_client_suffix(handle, newPath)))
{
goto out;
}
@@ -498,9 +498,9 @@ static int alloc_get_client_smb_fname(struct 
vfs_handle_struct *handle,
status = -1;
goto err;
}
-   if (status = alloc_get_client_path(handle, ctx,
+   if ((status = alloc_get_client_path(handle, ctx,
smb_fname-base_name,
-   (*clientFname)-base_name))
+   (*clientFname)-base_name)))
{
goto err;
}
@@ -533,7 +533,7 @@ static int alloc_set_client_dirinfo_path(struct 
vfs_handle_struct *handle,
status = -1;
goto err;
}
-   if (status = alloc_append_client_suffix(handle, path))
+   if ((status = alloc_append_client_suffix(handle, path)))
{
goto err;
}
@@ -590,14 +590,14 @@ static int set_fake_mtime(vfs_handle_struct *handle,
copy_len -= 2;
}
 
-   if ((statPath = talloc_strndup(ctx,
-   (*clientFname)-base_name, copy_len)) == NULL)
+   if (((statPath = talloc_strndup(ctx,
+   (*clientFname)-base_name, copy_len)) == NULL))
{
errno = ENOMEM;
status = -1;
goto err;
}
-   if (status = alloc_append_client_suffix(handle, statPath))
+   if ((status = alloc_append_client_suffix(handle, statPath)))
{
goto err;
}
@@ -647,9 +647,9 @@ static int mh_statvfs(struct vfs_handle_struct *handle,
char *clientPath = NULL;
TALLOC_CTX *ctx = talloc_tos();
 
-   if (status = alloc_get_client_path(handle, ctx,
+   if ((status = alloc_get_client_path(handle, ctx,
path,
-   clientPath))
+   clientPath)))
{
goto err;
}
@@ -1046,9 +1046,9 @@ static int mh_mkdir(vfs_handle_struct *handle,
char *clientPath = NULL;
TALLOC_CTX *ctx = talloc_tos();
 
-   if (status = alloc_get_client_path(handle, ctx,
+   if ((status = alloc_get_client_path(handle, ctx,
path,
-   clientPath))
+   clientPath)))
{
goto err;
}
@@ -1081,9 +1081,9 @@ static int mh_rmdir(vfs_handle_struct *handle,
char *clientPath = NULL;
TALLOC_CTX *ctx = talloc_tos();
 
-   if (status = alloc_get_client_path(handle, ctx,
+   if ((status = alloc_get_client_path(handle, ctx,
path,
-   clientPath))
+   clientPath)))
{
goto err;
}
@@ -1300,16 +1300,16 @@ static int mh_rename(vfs_handle_struct *handle,
struct smb_filename *dstClientFname = NULL;
TALLOC_CTX *ctx = talloc_tos();
 
-   if (status = alloc_get_client_smb_fname(handle, ctx,
+   if ((status = alloc_get_client_smb_fname(handle, ctx,
 

Re: [SCM] Samba Shared Repository - branch master updated

2012-08-29 Thread Volker Lendecke
On Wed, Aug 29, 2012 at 04:06:02PM +0200, Björn Jacke wrote:
 The branch, master has been updated
via  f31d0d0 vfs_media_harmony: fix some compile warnings with llvm
   from  fb15e5a s3-printing: fix bug 9123 lprng job tracking errors
 
 http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
 
 
 - Log -
 commit f31d0d0e30af6577de483ec4e811b9422b8ef39a
 Author: Björn Jacke b...@sernet.de
 Date:   Wed Aug 29 13:37:05 2012 +0200
 
 vfs_media_harmony: fix some compile warnings with llvm
 
 Autobuild-User(master): Björn Jacke b...@sernet.de
 Autobuild-Date(master): Wed Aug 29 16:05:10 CEST 2012 on sn-devel-104
 
 ---
 
 Summary of changes:
  source3/modules/vfs_media_harmony.c |  132 +-
  1 files changed, 66 insertions(+), 66 deletions(-)
 
 
 Changeset truncated at 500 lines:
 
 diff --git a/source3/modules/vfs_media_harmony.c 
 b/source3/modules/vfs_media_harmony.c
 index e2cb407..53cb176 100644
 --- a/source3/modules/vfs_media_harmony.c
 +++ b/source3/modules/vfs_media_harmony.c
 @@ -430,7 +430,7 @@ static int alloc_get_client_path(vfs_handle_struct 
 *handle,
   (*newPath)[pathPtr - path + CREATING_DIRNAME_LEN] = '\0';
   DEBUG(MH_INFO_DEBUG, (newPath #2 %s\n, *newPath));
  
 - if (status = alloc_append_client_suffix(handle, newPath))
 + if ((status = alloc_append_client_suffix(handle, newPath)))

Can you make that into two lines? This form will create
warnings on other compilers.

status = ...
if (status != NULL) {
}

is the one to use according to README.Coding.

Thanks,

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kont...@sernet.de


[SCM] Samba Shared Repository - branch master updated

2012-08-29 Thread Christian Ambach
The branch, master has been updated
   via  6678907 s3:vfs_gpfs: Use directory not file to get fileset id
  from  f31d0d0 vfs_media_harmony: fix some compile warnings with llvm

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 6678907fae43e0d25b578b4e649a2fbd9c5e9d71
Author: Christof Schmitt christof.schm...@us.ibm.com
Date:   Thu Aug 16 12:47:52 2012 -0700

s3:vfs_gpfs: Use directory not file to get fileset id

The query of the fileset quota needs to determine the file set id first.
With the currently available interface, this requires opening the file
to get a file descriptor. For files, this open can fail when a share
mode is set.

Workaround this by querying the fileset id on the directory instead.

The proper solution would be getting an interface for getting the
fileset id that does not require opening the file.

Autobuild-User(master): Christian Ambach a...@samba.org
Autobuild-Date(master): Wed Aug 29 18:58:34 CEST 2012 on sn-devel-104

---

Summary of changes:
 source3/modules/gpfs.c |   16 +---
 source3/modules/vfs_gpfs.c |   24 ++--
 2 files changed, 35 insertions(+), 5 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/modules/gpfs.c b/source3/modules/gpfs.c
index db60256..9730d3a 100644
--- a/source3/modules/gpfs.c
+++ b/source3/modules/gpfs.c
@@ -253,8 +253,11 @@ int get_gpfs_fset_id(const char *pathname, int *fset_id)
arg.fsn.structType = GPFS_FCNTL_GET_FILESETNAME;
 
fd = open(pathname, O_RDONLY);
-   if (fd == -1)
+   if (fd == -1) {
+   DEBUG(1, (Could not open %s: %s\n,
+ pathname, strerror(errno)));
return fd;
+   }
 
err = gpfs_fcntl_fn(fd, arg);
errno_fcntl = errno;
@@ -262,11 +265,18 @@ int get_gpfs_fset_id(const char *pathname, int *fset_id)
 
if (err) {
errno = errno_fcntl;
+   DEBUG(1, (GPFS_FCNTL_GET_FILESETNAME for %s failed: %s\n,
+ pathname, strerror(errno)));
return err;
}
 
-   return gpfs_getfilesetid_fn(discard_const_p(char, pathname),
-   arg.fsn.buffer, fset_id);
+   err = gpfs_getfilesetid_fn(discard_const_p(char, pathname),
+  arg.fsn.buffer, fset_id);
+   if (err) {
+   DEBUG(1, (gpfs_getfilesetid for %s failed: %s\n,
+ pathname, strerror(errno)));
+   }
+   return err;
 }
 
 void smbd_gpfs_lib_init()
diff --git a/source3/modules/vfs_gpfs.c b/source3/modules/vfs_gpfs.c
index 7a01257..a39187e 100644
--- a/source3/modules/vfs_gpfs.c
+++ b/source3/modules/vfs_gpfs.c
@@ -1541,10 +1541,30 @@ static int vfs_gpfs_get_quotas(const char *path, uid_t 
uid, gid_t gid,
   struct gpfs_quotaInfo *qi_fset)
 {
int err;
+   char *dir_path;
+   bool b;
 
-   err = get_gpfs_fset_id(path, fset_id);
+   /*
+* We want to always use the directory to get the fileset id,
+* because files might have a share mode. We also do not want
+* to get the parent directory when there is already a
+* directory to avoid stepping in a different fileset.  The
+* path passed here is currently either . or a filename, so
+* this is ok. The proper solution would be having a way to
+* query the fileset id without opening the file.
+*/
+   b = parent_dirname(talloc_tos(), path, dir_path, NULL);
+   if (!b) {
+   errno = ENOMEM;
+   return -1;
+   }
+
+   DEBUG(10, (path %s, directory %s\n, path, dir_path));
+
+   err = get_gpfs_fset_id(dir_path, fset_id);
if (err) {
-   DEBUG(0, (Get fset id failed, errno %d.\n, errno));
+   DEBUG(0, (Get fset id failed path %s, dir %s, errno %d.\n,
+ path, dir_path, errno));
return err;
}
 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2012-08-29 Thread Andrew Bartlett
The branch, master has been updated
   via  5131359 auth/credentials: Support match-by-key in 
cli_credentials_get_server_gss_creds()
   via  a58bf44 s4-torture: Add start of a test to confirm winbindd PAC 
parsing
   via  fe36bb4 lib/krb4_wrap: Add const to kt_copy_one_principal
  from  6678907 s3:vfs_gpfs: Use directory not file to get fileset id

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 5131359edae7a5c7092c0d41bb225941596ddcac
Author: Andrew Bartlett abart...@samba.org
Date:   Thu Aug 30 07:49:21 2012 +1000

auth/credentials: Support match-by-key in 
cli_credentials_get_server_gss_creds()

This allows a password alone to be used to accept kerberos tickets.

Of course, we need to have got the salt right, but we do not need also
the correct kvno.  This allows gensec_gssapi to accept tickets based on
a secrets.tdb entry.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett abart...@samba.org
Autobuild-Date(master): Thu Aug 30 01:26:12 CEST 2012 on sn-devel-104

commit a58bf44c1ec62736fc20e0e7dedb8a1c0306380c
Author: Andrew Bartlett abart...@samba.org
Date:   Fri Aug 24 10:01:42 2012 +1000

s4-torture: Add start of a test to confirm winbindd PAC parsing

So far this confirms that we can accept a ticket using the secrets.tdb
entry.

Andrew Bartlett

commit fe36bb4bcc35cccbc6f0a91a9ef4a29e908048a0
Author: Andrew Bartlett abart...@samba.org
Date:   Wed Aug 29 17:58:45 2012 +1000

lib/krb4_wrap: Add const to kt_copy_one_principal

---

Summary of changes:
 auth/credentials/credentials_krb5.c   |   11 ++-
 lib/krb5_wrap/keytab_util.c   |2 +-
 lib/krb5_wrap/krb5_samba.h|2 +-
 source3/selftest/tests.py |4 +-
 source4/auth/kerberos/kerberos.h  |1 +
 source4/auth/kerberos/kerberos_util.c |1 +
 source4/torture/rpc/remote_pac.c  |2 +-
 source4/torture/winbind/winbind.c |  153 +
 8 files changed, 169 insertions(+), 7 deletions(-)


Changeset truncated at 500 lines:

diff --git a/auth/credentials/credentials_krb5.c 
b/auth/credentials/credentials_krb5.c
index 2a23688..459e948 100644
--- a/auth/credentials/credentials_krb5.c
+++ b/auth/credentials/credentials_krb5.c
@@ -717,6 +717,11 @@ _PUBLIC_ int cli_credentials_get_keytab(struct 
cli_credentials *cred,
cred-keytab_obtained = (MAX(cred-principal_obtained, 
 cred-username_obtained));
 
+   /* We make this keytab up based on a password.  Therefore
+* match-by-key is acceptable, we can't match on the wrong
+* principal */
+   ktc-password_based = true;
+
talloc_steal(cred, ktc);
cred-keytab = ktc;
*_ktc = cred-keytab;
@@ -818,12 +823,12 @@ _PUBLIC_ int cli_credentials_get_server_gss_creds(struct 
cli_credentials *cred,
return ENOMEM;
}
 
-   if (obtained  CRED_SPECIFIED) {
-   /* This creates a GSSAPI cred_id_t with the principal and 
keytab set */
+   if (ktc-password_based || obtained  CRED_SPECIFIED) {
+   /* This creates a GSSAPI cred_id_t for match-by-key with only 
the keytab set */
maj_stat = gss_krb5_import_cred(min_stat, NULL, NULL, 
ktc-keytab,
gcc-creds);
} else {
-   /* This creates a GSSAPI cred_id_t with the principal and 
keytab set */
+   /* This creates a GSSAPI cred_id_t with the principal and 
keytab set, matching by name */
maj_stat = gss_krb5_import_cred(min_stat, NULL, princ, 
ktc-keytab,
gcc-creds);
}
diff --git a/lib/krb5_wrap/keytab_util.c b/lib/krb5_wrap/keytab_util.c
index 91e4990..f9a8679 100644
--- a/lib/krb5_wrap/keytab_util.c
+++ b/lib/krb5_wrap/keytab_util.c
@@ -162,7 +162,7 @@ krb5_error_code kt_copy_one_principal(krb5_context context,
  const char *to,
  const char *principal,
  krb5_kvno kvno,
- krb5_enctype *enctypes)
+ const krb5_enctype *enctypes)
 {
 krb5_error_code ret;
 krb5_keytab src_keytab, dst_keytab;
diff --git a/lib/krb5_wrap/krb5_samba.h b/lib/krb5_wrap/krb5_samba.h
index c823c73..73a52a5 100644
--- a/lib/krb5_wrap/krb5_samba.h
+++ b/lib/krb5_wrap/krb5_samba.h
@@ -281,7 +281,7 @@ krb5_error_code kt_copy_one_principal(krb5_context context,
  const char *to,
  const char *principal,
  krb5_kvno kvno,
- krb5_enctype *enctypes);
+   

autobuild: intermittent test failure detected

2012-08-29 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2012-08-30-0127/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-08-30-0127/samba3.stderr
   http://git.samba.org/autobuild.flakey/2012-08-30-0127/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-08-30-0127/samba.stderr
   http://git.samba.org/autobuild.flakey/2012-08-30-0127/samba.stdout
  
The top commit at the time of the failure was:

commit 6678907fae43e0d25b578b4e649a2fbd9c5e9d71
Author: Christof Schmitt christof.schm...@us.ibm.com
Date:   Thu Aug 16 12:47:52 2012 -0700

s3:vfs_gpfs: Use directory not file to get fileset id

The query of the fileset quota needs to determine the file set id first.
With the currently available interface, this requires opening the file
to get a file descriptor. For files, this open can fail when a share
mode is set.

Workaround this by querying the fileset id on the directory instead.

The proper solution would be getting an interface for getting the
fileset id that does not require opening the file.

Autobuild-User(master): Christian Ambach a...@samba.org
Autobuild-Date(master): Wed Aug 29 18:58:34 CEST 2012 on sn-devel-104