Re: [Samba] Does samba-3.6.7's libsmbclient supports SMB2 protocol?

2012-09-03 Thread naga_kishore_kommuri
Thanks a lot Volker,
Does source4 directory has got SMB2 support in libsmbclient library?


thanks,
-Kishore



 From: Volker Lendecke volker.lende...@sernet.de
To: naga_kishore_komm...@yahoo.com 
Cc: samba@lists.samba.org samba@lists.samba.org 
Sent: Friday, August 31, 2012 7:41 PM
Subject: Re: [Samba] Does samba-3.6.7's libsmbclient supports SMB2 protocol?
 
On Fri, Aug 31, 2012 at 06:56:04AM -0700, naga_kishore_komm...@yahoo.com wrote:
 Hi,
 I'm using libsmbclient library built from source3 directory of samba-3.6.7.
 When I connect to a vista/2008 server using this libsmbclient library, 
 communication is happening in SMB1 protocol and NOT in SMB2.
 Please note that I've enabled SMB2 by adding following line to smb.conf
 
 max protocol = SMB2
 
 Does libsmbclient library built from source3 directory of samba-3.6.7 
 supports SMB2?

No, it does not yet.

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kont...@sernet.de
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Unable to use more than 1000 concurrent ntlm_auth processes

2012-09-03 Thread Andrew Bartlett
On Sat, 2012-08-18 at 23:03 +0930, Michael Hendrie wrote:
 Hi List,
 
 I'm running a heavily loaded squid server that uses ntlm_auth to provide NTLM 
 authentication.
 
 As load has increased over time, I've found the need to increase the
 number of ntlm_auth processes available to squid as well as the
 winbind max clients value in the smb.conf file.  This has worked
 well up until now but seems I've hit some sort of limit.
 
 If I keep the number of ntlm_auth processes under 1000, all is good.  Going 
 above continually produces the messages below in /var/log/messages and the 
 additional helpers unusable:
 
 Aug 16 22:34:17 prox (ntlm_auth): [2012/08/16 22:34:17.342283,  0] 
 utils/ntlm_auth.c:186(get_winbind_domain) 
 Aug 16 22:34:17 prox (ntlm_auth):   could not obtain winbind domain name! 
 Aug 16 22:34:17 prox (ntlm_auth): [2012/08/16 22:34:17.345335,  0] 
 utils/ntlm_auth.c:186(get_winbind_domain) 
 Aug 16 22:34:17 prox (ntlm_auth):   could not obtain winbind domain name! 
 Aug 16 22:34:17 prox (ntlm_auth): [2012/08/16 22:34:17.353230,  0] 
 utils/ntlm_auth.c:186(get_winbind_domain) 
 Aug 16 22:34:17 prox (ntlm_auth):   could not obtain winbind domain name! 
 Aug 16 22:34:17 prox (ntlm_auth): [2012/08/16 22:34:17.358237,  0] 
 utils/ntlm_auth.c:186(get_winbind_domain) 
 Aug 16 22:34:17 prox (ntlm_auth):   could not obtain winbind domain name!
 
 And with winbindd log level on 9, /var/log/samba/winbindd.log shows:
 
 [2012/08/16 22:33:42.352991,  6] winbindd/winbindd.c:768(new_connection)
   accepted socket 1032
 [2012/08/16 22:33:42.359183,  6] winbindd/winbindd.c:768(new_connection)
   accepted socket 1036
 [2012/08/16 22:37:59.337941,  2] 
 winbindd/winbindd.c:710(winbind_client_response_written)
   Could not write response[14772:INTERFACE_VERSION] to client: Broken pipe

 Running distro supplied samba versions:
 
 samba3x.x86_64:  3.5.10-0.110.el5_8
 samba3x-common.x86_64:  3.5.10-0.110.el5_8
 samba3x-winbind.x86_64:  3.5.10-0.110.el5_8
 
 Does anyone have any suggestions on how to overcome this issue, I am happy to 
 compile from source if there are any options that could help?

In relation to a similar query, it was suggested that with master (or a
Samba 4.0 beta) you could set:

winbind max domain connections = larger number than 1

This might increase the throughput, and avoid the backlog getting to
1000.

I still think that you are hitting an OS limit somewhere (perhaps on the
total of the ntlm_auth children, rather than winbindd?), but having 1000
outstanding authentications would be painful in any case.

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Does samba-3.6.7's libsmbclient supports SMB2 protocol?

2012-09-03 Thread Volker Lendecke
On Sun, Sep 02, 2012 at 11:11:17PM -0700, naga_kishore_komm...@yahoo.com wrote:
 Thanks a lot Volker,
 Does source4 directory has got SMB2 support in libsmbclient library?

Well, there is some support for SMB2 calls in both source3
and source4. But neither directly support SMB2 out of the
box with the interface that is published as libsmbclient.h.

With best regards,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kont...@sernet.de
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Windows boxes cannot find the file server

2012-09-03 Thread steve

Hi
I have a Samba4 AD running samba and a Samba3 machine joined to the 
domain as a file server. I have smbd and winbind running on the samba3 box.


Samba4: hh30.hh3.site
Samba3: hh32.hh3.site

I can browse the shares (netlogon and sysvol) on the S4 machine by 
typing \\hh30 into explorer but if I type \\hh32 I get:


Windows cannot find '\\hh32'. Check the spelling. . .etc.

When I start nmbd on the server I get:
The security database on the server does not have a computer account for 
this workstation trust relationship.


Here is the config on the S3 fie server:

[global]
preferred master = Yes
workgroup = ALTEA
security = ADS
winbind enum users = Yes
winbind enum groups = Yes
idmap config *:backend = ad
idmap config *:range  = 2500-3000
idmap config ALTEA:backend = ad
idmap config ALTEA:range = 2-4000
idmap config ALTEA:schema_mode = rfc2307
winbind nss info = rfc2307
winbind expand groups = 2
winbind nested groups = yes
winbind use default domain = Yes
usershare allow guests = No
realm = HH3.SITE
winbind refresh tickets = yes

[profiles]
path = /home2/profiles
read only = No

[home]
path = /home2/home
read only = No

[staff]
path = /home2/staff
read only = No

Question:
How do I get the windows machines to look for the fileserver as well as 
the DC?

Thanks,
Steve
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] suggestion for filesystem or general performance optimization

2012-09-03 Thread Götz Reinicke
Hi,

recently I noticed, that we have some performance issues regarding our
central samba fileserver. Red Hat EL 5.8, samba3x-3.5.10-0.109.

Doing a rsync, scp or accessing a share from a client and copy large
files (e.g. 3 GB ISO), I do get a read / write average about 60 to 90
MB/sec. So LAN and general hardware can work at max. lan speed.

But copying or syncing small files, e.g. user profiles etc. or doing a
backup of the smaller files lets drop the average performance to 10
MB/Sec or less :(

We use ext3 (noatime), the storage is connected by iscsi, it is a sun
storage with sas harddisk.

All suggestions so far: migrate to ext4 and good luck :)

I read a couple of filesystem comparisons and ext4 looks like the best
option, but what else could I do or expect?

Locking? Limits ... blocksizes, more RAM (4GB installed), we have about
600GB of user data. so not really much...

Thanks for any suggestion or hint . Regards . Götz

-- 
Götz Reinicke
IT-Koordinator

Filmakademie Baden-Württemberg GmbH

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Windows boxes cannot find the file server

2012-09-03 Thread Rowland Penny

On 03/09/12 08:41, steve wrote:

Hi
I have a Samba4 AD running samba and a Samba3 machine joined to the 
domain as a file server. I have smbd and winbind running on the samba3 
box.


Samba4: hh30.hh3.site
Samba3: hh32.hh3.site

I can browse the shares (netlogon and sysvol) on the S4 machine by 
typing \\hh30 into explorer but if I type \\hh32 I get:


Windows cannot find '\\hh32'. Check the spelling. . .etc.

When I start nmbd on the server I get:
The security database on the server does not have a computer account 
for this workstation trust relationship.


Here is the config on the S3 fie server:

[global]
preferred master = Yes
workgroup = ALTEA
security = ADS
winbind enum users = Yes
winbind enum groups = Yes
idmap config *:backend = ad
idmap config *:range  = 2500-3000
idmap config ALTEA:backend = ad
idmap config ALTEA:range = 2-4000
idmap config ALTEA:schema_mode = rfc2307
winbind nss info = rfc2307
winbind expand groups = 2
winbind nested groups = yes
winbind use default domain = Yes
usershare allow guests = No
realm = HH3.SITE
winbind refresh tickets = yes

[profiles]
path = /home2/profiles
read only = No

[home]
path = /home2/home
read only = No

[staff]
path = /home2/staff
read only = No

Question:
How do I get the windows machines to look for the fileserver as well 
as the DC?

Thanks,
Steve


Hi Steve,

This, to me, seems to be a network resolution problem. I take it that 
hh32.hh3.site has a fixed ip and 'dig hh32.hh3.site' run on the 
nameserver gives the correct ip.


How do the clients get their ipaddresses? are they fixed or supplied by 
DHCP? what nameserver are they pointed at? does this nameserver know 
about hh32?


What does 'ipconfig /all' (run in a dos box on the client) give?

Rowland

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] High load while printing a Word document

2012-09-03 Thread Michael Wood
On 27 August 2012 15:52, Alexander Busam
a.bu...@hofmann-foerdertechnik.com wrote:
[...]
 I've attached the word document, log.smbd and smb.conf as zip-file.
[...]

The mailing list strips attachments normally.

Try including what you can in the message itself (e.g. the config).
Maybe you can provide a link to download the document?

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Windows boxes cannot find the file server [SOLVED]

2012-09-03 Thread steve

On 03/09/12 10:46, Rowland Penny wrote:

On 03/09/12 08:41, steve wrote:




How do the clients get their ipaddresses? are they fixed or supplied by
DHCP? what nameserver are they pointed at? does this nameserver know
about hh32?



Hi Rowland. Hi everyone

Your reply gave me the clue I needed. When the fileserver joined the 
domain I got a DNS update error that the update for hh32 failed. I made 
it a fixed IP and added an A record hh32.hh3.site and the CNAME hh32 to 
the DC using samba-tool. Now it works although it worries me that

 net ads join
on a Linux box does not update DNS correctly.

For the record (jejeje) I may add that adding Linux clients that are 
DHCP (i.e. not crucial file servers) also get the same failed DNS update 
message upon joining, but thereafter work fine.


Cheers,
Steve



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Windows boxes cannot find the file server [SOLVED]

2012-09-03 Thread Rowland Penny

On 03/09/12 10:37, steve wrote:

On 03/09/12 10:46, Rowland Penny wrote:

On 03/09/12 08:41, steve wrote:




How do the clients get their ipaddresses? are they fixed or supplied by
DHCP? what nameserver are they pointed at? does this nameserver know
about hh32?



Hi Rowland. Hi everyone

Your reply gave me the clue I needed. When the fileserver joined the 
domain I got a DNS update error that the update for hh32 failed. I 
made it a fixed IP and added an A record hh32.hh3.site and the CNAME 
hh32 to the DC using samba-tool. Now it works although it worries me that

 net ads join
on a Linux box does not update DNS correctly.

For the record (jejeje) I may add that adding Linux clients that are 
DHCP (i.e. not crucial file servers) also get the same failed DNS 
update message upon joining, but thereafter work fine.


Cheers,
Steve





Hi Steve,

I cheat , my ddns server is running on my Samba4 server ;-)

Rowland


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Windows boxes cannot find the file server [SOLVED]

2012-09-03 Thread steve

On 03/09/12 11:56, Rowland Penny wrote:

On 03/09/12 10:37, steve wrote:

On 03/09/12 10:46, Rowland Penny wrote:

On 03/09/12 08:41, steve wrote:




Hi Steve,

I cheat , my ddns server is running on my Samba4 server ;-)

Rowland



Hi Rowland
Well, that's better than us. I use our 
(buy-2-get-one-free-at-the-local-supermarket brand) ADSL router. Yeah, I 
know. It's just plain lazy.

Cheers,
Steve

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] How to migrate Active Directory from one Samba4 server to another

2012-09-03 Thread Julian Timm

 Original-Nachricht 
 Datum: Thu, 16 Aug 2012 13:29:42 +0200
 Von: x-dimens...@gmx.net
 An: samba@lists.samba.org
 Betreff: Re: [Samba] How to migrate Active Directory from one Samba4 server 
 to another

   Original-Nachricht 
   Datum: Mon, 13 Aug 2012 17:47:35 +1000
   Von: Andrew Bartlett abart...@samba.org
   An: x-dimens...@gmx.net
   CC: samba@lists.samba.org
   Betreff: Re: [Samba] How to migrate Active Directory from one Samba4
  server to another
  
   On Sat, 2012-08-11 at 22:03 +0200, x-dimens...@gmx.net wrote:
Hello!

We are using a Samba4.0.0alpha19 (Resara 1.1.2) based domain
  controller
   in a small production environment and because the Resara development
 has
   ended we want to switch to a plain Samba4 beta based Ubuntu
  12.04/Zentyal
   Server.
I have installed and configured the new server with the same
  domain-name
   and the same hostname like the old server. 
How can i export the Active Directory from the old server and import
  it
   to the new Samba4 server? 
   
   Something like this (unstested):
   
   Use a different hostname, then run 'samba-tool domain join' to join it
   to the first domain.  Then you can use the
   source4/scripting/bin/renamedc script to rename it back to the name of
   the first DC, after running 'samba-tool domain demote' on it. 
   
   You may need to seize FSMO roles from one DC to the other with
   'samba-tool domain fsmo'.
   
Do i need to rejoin the clients to the domain, after this?
   
   No.
   
   Additional complications may include DNS configuration.  You may need
 to
   use --dns-backend=none on the join command. 
   
   This is just a series of hints to get you started.  Hopefully you can
   work it out from here. 
   
   Andrew Bartlett
   
   -- 
   Andrew Bartlett   
  http://samba.org/~abartlet/
   Authentication Developer, Samba Team   http://samba.org
   
   
  Thank you Andrew, this was very helpful!
  Joining the new Samba4 Server to the old one replicates the Active
  Directory without a problem! After shutting down the old server,
 renaming the new
  server and restore smb.conf and krb5.conf i can access the new server
 with
  RSAT now. :-)
  
  What does not work is the dns-backend! :-(
  After the AD replication the DNS snap-in from RSAT does not work
 anymore.
  The join option --dns-backend=none is not available here
  (Samba4.0.0beta2 Zentyal package) 
  Is there another way to get DNS working after the replication from the
 old
  server? 
  
  I have also another question: What does the renamedc script do? 
  When i start it, it always tells me that there are opened transactions
 and
  so it can't run.
  Because of this i simple change the hostname in /etc/hostname/ and
  /etc/hosts and run hostname -F /etc/hostname. After a restart all looks
 good so
  far. (but i haven't tested it very much)
  
  THX
  -- 
  To unsubscribe from this list go to the following URL and read the
  instructions:  https://lists.samba.org/mailman/options/samba
 
 I've tried now also Samba4.0.0beta6 and when i join this server with the
 --dns-backend=NONE option to the old samba4alpha PDC i have no working DNS
 service on the new Samba server. Bind9 won't start because it can't find
 sam.ldb. This file is created on provisioning the Samba server the first time,
 but while our old Resara Server uses plain Bind without the
 Samba-LDAP-backend sam.ldb is not created when joining the new server to the 
 existing
 domain.
 Is there a way setup the DNS-part after the replication, so that it uses
 the internal LDAP of Samba4? I don't need to get the DNS entries of the old
 server to the new server, but i need a working DNS-Samba/LDAP Backend to
 create Zones and entries with RSAT.
 
 Thx for help!
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

I'm now a big step ahead and i get the BIND_DLZ backend working.

Here is what i've done:

1. Join the new Samba4.0.0beta8 server PDC2 to the old Samba4.0.0alpha server 
PDC with:

samba-tool domain join mydomain.lan DC -Uadministrator --realm=mydomain.lan 
--dns-backend=none

2. Copy the file based Bind9 configuration from /etc/bind of PDC to PDC2   

3. Disconnect PDC from the network

4. run samba_upgradedns on PDC2 to get BIND_DLZ to work

5. Configure Bind9 to use Samba4/BIND_DLZ

What works:
A. I can browse with Microsoft RSAT through the Active Directory and can edit 
or create users and so on
B. I can create and modify DNS-entries from the DNS-Tool of MS RSAT

C. I can join a computer to PDC2 when logging on with administrator@mydomain

What does not work:
A. I can't join a computer to PDC2 when using only administrator instead of 
administrator@mydomain
B. After joining a computer successfully to the domain, user login don't work! 
I get always Wrong username or password message :(

What goes wrong here?

Some other 

Re: [Samba] mount.cifs ms dfs and failover

2012-09-03 Thread Jeff Layton
On Wed, 18 Jul 2012 17:31:28 +1000
Sam Abed samsa...@hotmail.com wrote:

 
 Hello,
   I can't find any reference on if linux understands multiple targets when it 
 mounts a MS dfs share, specifically if it can failover.
 I can mount a MS dfs share fine, however if the server picked is shutdow 
 the mount hangs. I tried it on a recent ubuntu to discount the enterprise 
 lag.
 
 am I missing something or is it not working
 

(cc'ing linux-cifs)

No, there's currently no support for failover with Linux CIFS DFS code.
Once it picks the server, it stays with it.

-- 
Jeff Layton jlay...@samba.org
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[SCM] Samba Shared Repository - annotated tag ldb-1.1.12 created

2012-09-03 Thread Stefan Metzmacher
The annotated tag, ldb-1.1.12 has been created
at  2e9571215e2926354d76d7289db7b1147c9eb9c8 (tag)
   tagging  395b8e4d58e2815d9848f8a6390f23d8c7d10a91 (commit)
  replaces  ldb-1.1.11
 tagged by  Stefan Metzmacher
on  Mon Sep 3 11:48:48 2012 +0200

- Log -
ldb: tag release ldb-1.1.12
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)

iQEcBAABAgAGBQJQRH0AAAoJEEeTkWETCEAlJ9wIAI50WOpCdYrfiZJ2yQWJgc7G
pq3zwrGZQ7TuDXlTqCxnC/7F5gWSGyxPYpAl3mo3t+XWy43+zaT6pZza0/ObbYu2
vUJbLf/i5ahusNlhUhpg7+CvXg8CdgxfRVlW+vcbKGNxRXRqQIggnmavycKrro1E
6RX52k5po/lI43ZkQzIKDMPDK2TfMgJBbRhdYYC9g9/20Dy/YS6pIXEReFeKYGie
LUgiTMrTrqUKJDaTULPaV3shF7bOoxltnVSvN5F67tqf0QGoHnEjs+tsXkSKLPCU
JxUyCskdA5cBpUpq58NuegUsbvBvNrR1XEyK3oMK+/HPOL1pPSCCVhxwFFxR+dI=
=NZGp
-END PGP SIGNATURE-

Andreas Schneider (1):
  s3-smbd: Fix flooding the logs with records we don't find in pcap.

Andrew Bartlett (7):
  s3-classicupgrade: Fix import from ldap
  auth/credentials: Avoid double-free in the failure case
  selftest: Add a test for smbclient --machine-pass without secrets.tdb
  auth/credentials: Improve memory handling in 
cli_credentials_set_machine_account
  auth/credentials: Better integrate fetch of secrets.tdb and secrets.ldb 
records
  auth/credentials: Remove unused, and un-declared 
cli_credentials_set_krbtgt()
  lib/ldb: Avoid printing secret attributes in ldb trace logs

---


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2012-09-03 Thread Andrew Bartlett
The branch, master has been updated
   via  18c0d87 build: skip shipping the alpha13 provision in the release 
tarballs
   via  2dd0e71 s4-classicupgrade: Show more clearly what is wrong with the 
Adminstrator SID
   via  3b3d7bb build: Only make bin/ if it does not exist
   via  3ad9c52 selftest: skip tests if the tarball did not include the 
alpha13 provision
  from  05f9829 waf: add new quota header checks and sysquota_4B source file

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 18c0d872d119f47f3f82f6fa1f4fa8a2afc36750
Author: Andrew Bartlett abart...@samba.org
Date:   Mon Sep 3 18:55:06 2012 +1000

build: skip shipping the alpha13 provision in the release tarballs

This test is important, but it is not important enough to include this 
volume of data
in every tarball.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett abart...@samba.org
Autobuild-Date(master): Mon Sep  3 13:01:58 CEST 2012 on sn-devel-104

commit 2dd0e7141f24a4e92e165c3aadaaa3a97eb26712
Author: Andrew Bartlett abart...@samba.org
Date:   Mon Sep 3 18:50:16 2012 +1000

s4-classicupgrade: Show more clearly what is wrong with the Adminstrator SID

commit 3b3d7bb6029bf7c89abec0fb0b455a6154b0d0bf
Author: Andrew Bartlett abart...@samba.org
Date:   Mon Sep 3 18:43:33 2012 +1000

build: Only make bin/ if it does not exist

commit 3ad9c52b1471da7192aa39f878d3ec22ea52d665
Author: Andrew Bartlett abart...@samba.org
Date:   Mon Sep 3 18:42:55 2012 +1000

selftest: skip tests if the tarball did not include the alpha13 provision

---

Summary of changes:
 source4/scripting/python/samba/upgrade.py |1 +
 testprogs/blackbox/dbcheck-alpha13.sh |   34 +++-
 wscript   |5 ++-
 3 files changed, 32 insertions(+), 8 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/scripting/python/samba/upgrade.py 
b/source4/scripting/python/samba/upgrade.py
index d3f0b8d..6b6a188 100644
--- a/source4/scripting/python/samba/upgrade.py
+++ b/source4/scripting/python/samba/upgrade.py
@@ -869,6 +869,7 @@ Please fix this account before attempting to upgrade again
 for username in userdata:
 if username.lower() == 'administrator':
 if userdata[username].user_sid != dom_sid(str(domainsid) + -500):
+logger.error(User 'Administrator' in your existing directory 
has SID %s, expected it to be %s % (userdata[username].user_sid, 
dom_sid(str(domainsid) + -500)))
 raise ProvisioningError(User 'Administrator' in your existing 
directory does not have SID ending in -500)
 if username.lower() == 'root':
 if userdata[username].user_sid == dom_sid(str(domainsid) + -500):
diff --git a/testprogs/blackbox/dbcheck-alpha13.sh 
b/testprogs/blackbox/dbcheck-alpha13.sh
index 00cb97a..a028116 100755
--- a/testprogs/blackbox/dbcheck-alpha13.sh
+++ b/testprogs/blackbox/dbcheck-alpha13.sh
@@ -12,12 +12,14 @@ shift 1
 
 . `dirname $0`/subunit.sh
 
+alpha13_dir=`dirname $0`/../../source4/selftest/provisions/alpha13
+
 alpha13() {
if test -x $BINDIR/tdbrestore;
then
-   `dirname $0`/../../source4/selftest/provisions/undump.sh `dirname 
$0`/../../source4/selftest/provisions/alpha13 $PREFIX_ABS/alpha13 
$BINDIR/tdbrestore
+   `dirname $0`/../../source4/selftest/provisions/undump.sh $alpha13_dir 
$PREFIX_ABS/alpha13 $BINDIR/tdbrestore
else 
-   `dirname $0`/../../source4/selftest/provisions/undump.sh `dirname 
$0`/../../source4/selftest/provisions/alpha13 $PREFIX_ABS/alpha13
+   `dirname $0`/../../source4/selftest/provisions/undump.sh $alpha13_dir 
$PREFIX_ABS/alpha13
fi
 }
 
@@ -34,9 +36,29 @@ dbcheck_clean() {
$BINDIR/samba-tool dbcheck --cross-ncs -H 
tdb://$PREFIX_ABS/alpha13/private/sam.ldb $@
 }
 
-testit alpha13 alpha13
-testit reindex reindex
-testit_expect_failure dbcheck dbcheck
-testit dbcheck_clean dbcheck_clean
+if [ -d $alpha13_dir ]; then
+testit alpha13 alpha13
+testit reindex reindex
+testit_expect_failure dbcheck dbcheck
+testit dbcheck_clean dbcheck_clean
+else
+subunit_start_test alpha13
+subunit_skip_test alpha13 EOF 
+no test provision 
+EOF
+
+subunit_start_test reindex
+subunit_skip_test reindex EOF 
+no test provision 
+EOF
+subunit_start_test dbcheck
+subunit_skip_test dbcheck EOF 
+no test provision 
+EOF
+subunit_start_test dbcheck_clean
+subunit_skip_test dbcheck_clean EOF 
+no test provision 
+EOF
+fi
 
 exit $failed
diff --git a/wscript b/wscript
index fcf4a0f..64aaaf2 100755
--- a/wscript
+++ b/wscript
@@ -12,7 +12,7 @@ import wafsamba, Options, samba_dist, Scripting, Utils, 
samba_version
 
 
 samba_dist.DIST_DIRS('.')
-samba_dist.DIST_BLACKLIST('.gitignore .bzrignore')

autobuild: intermittent test failure detected

2012-09-03 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2012-09-03-1615/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-09-03-1615/samba3.stderr
   http://git.samba.org/autobuild.flakey/2012-09-03-1615/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-09-03-1615/samba.stderr
   http://git.samba.org/autobuild.flakey/2012-09-03-1615/samba.stdout
  
The top commit at the time of the failure was:

commit 18c0d872d119f47f3f82f6fa1f4fa8a2afc36750
Author: Andrew Bartlett abart...@samba.org
Date:   Mon Sep 3 18:55:06 2012 +1000

build: skip shipping the alpha13 provision in the release tarballs

This test is important, but it is not important enough to include this 
volume of data
in every tarball.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett abart...@samba.org
Autobuild-Date(master): Mon Sep  3 13:01:58 CEST 2012 on sn-devel-104


autobuild: intermittent test failure detected

2012-09-03 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2012-09-04-0031/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-09-04-0031/samba3.stderr
   http://git.samba.org/autobuild.flakey/2012-09-04-0031/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-09-04-0031/samba.stderr
   http://git.samba.org/autobuild.flakey/2012-09-04-0031/samba.stdout
  
The top commit at the time of the failure was:

commit 75484f491140fb86eaee90dde1dc1c9d4ebe8a41
Author: Karolin Seeger ksee...@samba.org
Date:   Mon Sep 3 21:49:25 2012 +0200

docs: Rename manpages-3 - manpages.

This change was suggested by Andrew Bartlett on the samba-technical mailing
list.

Karolin

Autobuild-User(master): Karolin Seeger ksee...@samba.org
Autobuild-Date(master): Mon Sep  3 23:35:38 CEST 2012 on sn-devel-104


[SCM] build.samba.org - branch master updated

2012-09-03 Thread Andrew Bartlett
The branch, master has been updated
   via  8976254 build: Fix build farm for hosts other than our coverage test
  from  178df90 Add action_none to assist hosts with no extra_actions

http://gitweb.samba.org/?p=build-farm.git;a=shortlog;h=master


- Log -
commit 89762541cf479b8656040daf78127255b529c4d7
Author: Andrew Bartlett abart...@samba.org
Date:   Tue Sep 4 09:56:38 2012 +1000

build: Fix build farm for hosts other than our coverage test

---

Summary of changes:
 build_test.fns |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/build_test.fns b/build_test.fns
index 3b0a4b8..ded4d09 100644
--- a/build_test.fns
+++ b/build_test.fns
@@ -814,7 +814,7 @@ test_tree() {
fi
 
if [ $extra_actions =  ]; then
-   actions=none
+   extra_actions=none
fi
 
# start the build


-- 
build.samba.org


[SCM] Samba Shared Repository - branch master updated

2012-09-03 Thread Andrew Bartlett
The branch, master has been updated
   via  68f68d0 docs: Move Samba4 HOWTO link into README
   via  8be652a docs: Update Roadmap
   via  3f42619 docs: Remove merged-branches.txt
   via  0010828 docs: Remove docs for removed parameter 'display charset'
   via  339fb7e remove extra tab from Makefile
   via  f9e8f08 docs: Fix undocumented target to find smb.conf directives 
in the right place
   via  28499b0 docs: Remove references to security=share and 
security=server from the smb.conf docs
   via  4a52a3f docs: Remove docs for removed parameter 'parinoid server 
security'
  from  75484f4 docs: Rename manpages-3 - manpages.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 68f68d01529e159d965cefa1da497f3472a36972
Author: Andrew Bartlett abart...@samba.org
Date:   Tue Sep 4 09:31:27 2012 +1000

docs: Move Samba4 HOWTO link into README

This allows us to make clear that it applies to the AD DC deployment.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett abart...@samba.org
Autobuild-Date(master): Tue Sep  4 03:05:02 CEST 2012 on sn-devel-104

commit 8be652a675efb5f25f0e2c573b9c8d6c0f3a9b5f
Author: Andrew Bartlett abart...@samba.org
Date:   Tue Sep 4 09:24:52 2012 +1000

docs: Update Roadmap

commit 3f42619e802b9dc13dc4dd770d419a0e4e9fce9d
Author: Andrew Bartlett abart...@samba.org
Date:   Tue Sep 4 09:20:19 2012 +1000

docs: Remove merged-branches.txt

We are now well past simply having two projects in once tree, and each
continued reference to 'samba3' and 'samba4' causes user confusion.

Andrew Bartlett

commit 00108282d046c2d4948c7c5977c98b412e08fb0a
Author: Andrew Bartlett abart...@samba.org
Date:   Tue Sep 4 09:12:17 2012 +1000

docs: Remove docs for removed parameter 'display charset'

commit 339fb7ef61e675c1db7743e039f2c1e6c45c08a0
Author: Andrew Bartlett abart...@samba.org
Date:   Tue Sep 4 09:10:59 2012 +1000

remove extra tab from Makefile

commit f9e8f08197651f053bf6a23584bf04814440fec0
Author: Andrew Bartlett abart...@samba.org
Date:   Tue Sep 4 09:09:38 2012 +1000

docs: Fix undocumented target to find smb.conf directives in the right place

The manpages target needs to be reworked to know about waf.

Andrew Bartlett

commit 28499b04769ee0d310e48576b868e11c0d2b1422
Author: Andrew Bartlett abart...@samba.org
Date:   Tue Sep 4 08:46:06 2012 +1000

docs: Remove references to security=share and security=server from the 
smb.conf docs

commit 4a52a3f48de60c79113018ca20a420dab536f46d
Author: Andrew Bartlett abart...@samba.org
Date:   Tue Sep 4 08:27:23 2012 +1000

docs: Remove docs for removed parameter 'parinoid server security'

---

Summary of changes:
 README |   11 +++-
 Roadmap|8 ++--
 docs-xml/Makefile  |6 +-
 docs-xml/Makefile.settings.in  |2 +-
 docs-xml/scripts/find_missing_doc.pl   |2 +-
 docs-xml/smbdotconf/base/displaycharset.xml|   17 --
 docs-xml/smbdotconf/logon/adduserscript.xml|8 ---
 docs-xml/smbdotconf/security/adminusers.xml|3 -
 docs-xml/smbdotconf/security/encryptpasswords.xml  |2 +-
 docs-xml/smbdotconf/security/maptoguest.xml|   18 +--
 docs-xml/smbdotconf/security/passwordserver.xml|   55 ++--
 docs-xml/smbdotconf/security/readlist.xml  |4 --
 docs-xml/smbdotconf/security/security.xml  |2 +-
 docs-xml/smbdotconf/security/usernamemap.xml   |6 +-
 docs-xml/smbdotconf/security/writelist.xml |5 --
 .../smbdotconf/tuning/paranoidserversecurity.xml   |   19 ---
 howto4.txt |7 ---
 merged-branches.txt|6 --
 18 files changed, 29 insertions(+), 152 deletions(-)
 delete mode 100644 docs-xml/smbdotconf/base/displaycharset.xml
 delete mode 100644 docs-xml/smbdotconf/tuning/paranoidserversecurity.xml
 delete mode 100644 howto4.txt
 delete mode 100644 merged-branches.txt


Changeset truncated at 500 lines:

diff --git a/README b/README
index 6c842c3..6fc98e6 100644
--- a/README
+++ b/README
@@ -1,13 +1,18 @@
 This is the release version of Samba, the free SMB and CIFS client and
-server for UNIX and other operating systems. Samba is maintained by
-the Samba Team, who support the original author, Andrew Tridgell.
+server and Domain Controller for UNIX and other operating
+systems. Samba is maintained by the Samba Team, who support the
+original author, Andrew Tridgell.
 
  Please read THE WHOLE of this file as it gives important information
  about the configuration and use of Samba.
 
-NOTE: Installation instructions may be found in 

[SCM] Samba Shared Repository - branch master updated

2012-09-03 Thread Andrew Bartlett
The branch, master has been updated
   via  9983ad7 s3-passdb: Rename pdb_samba4 to samba_dsdb and 
autoconfigure when we are a AD DC
  from  68f68d0 docs: Move Samba4 HOWTO link into README

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 9983ad7a80477d816488a93dffc6a32dd1ef
Author: Andrew Bartlett abart...@samba.org
Date:   Tue Sep 4 10:27:50 2012 +1000

s3-passdb: Rename pdb_samba4 to samba_dsdb and autoconfigure when we are a 
AD DC

The name samba_dsdb is not ideal, but it matches the primary ldb
module we use, and more importantly it avoids having '4' in the name.
We should slowly avoid using the term samba4 in long-term places like
the smb.conf because it is confusing to users given we are shipping
Samba 4.0 as an AD DC as well as all the other supported roles (domain
member/standalone server/classic DC)

Additionally, samba4 will be an odd name when we eventually release
Samba 5.0!

samba4 remains accepted as an alias to ensure existing smb.conf files
load, but to allow changes here in the future, we set the value during
the smb.conf load, and not during the provision when we are an AD DC.

This simplifies the default smb.conf for the vast majority of our
users and reduces the number of things listed in smb.conf files that
we later have to work around if we wish to change the
name/implementation of the passdb glue module again.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett abart...@samba.org
Autobuild-Date(master): Tue Sep  4 04:45:16 CEST 2012 on sn-devel-104

---

Summary of changes:
 selftest/target/Samba4.pm  |2 -
 source3/param/loadparm.c   |1 +
 source3/passdb/{pdb_samba4.c = pdb_samba_dsdb.c}  |  549 ++--
 source3/passdb/wscript_build   |8 +-
 source3/wscript|2 +-
 source4/scripting/python/samba/netcmd/ntacl.py |4 +-
 .../scripting/python/samba/provision/__init__.py   |   23 +-
 7 files changed, 297 insertions(+), 292 deletions(-)
 rename source3/passdb/{pdb_samba4.c = pdb_samba_dsdb.c} (76%)


Changeset truncated at 500 lines:

diff --git a/selftest/target/Samba4.pm b/selftest/target/Samba4.pm
index fb437d7..d2e890e 100644
--- a/selftest/target/Samba4.pm
+++ b/selftest/target/Samba4.pm
@@ -603,8 +603,6 @@ sub provision_raw_step1($$)
dreplsrv:periodic_startup_interval = 0
dsdb:schema update allowed = yes
 
-   passdb backend = samba4
-
 vfs objects = dfs_samba4 acl_xattr fake_acls xattr_tdb streams_depot
 
# remove this again, when our smb2 client library
diff --git a/source3/param/loadparm.c b/source3/param/loadparm.c
index c92b631..1e41825 100644
--- a/source3/param/loadparm.c
+++ b/source3/param/loadparm.c
@@ -4914,6 +4914,7 @@ static bool lp_load_ex(const char *pszFname,
lp_do_parameter(-1, vfs objects, dfs_samba4 
acl_xattr);
}
}
+   lp_do_parameter(-1, passdb backend, samba_dsdb);
}
 
bAllowIncludeRegistry = true;
diff --git a/source3/passdb/pdb_samba4.c b/source3/passdb/pdb_samba_dsdb.c
similarity index 76%
rename from source3/passdb/pdb_samba4.c
rename to source3/passdb/pdb_samba_dsdb.c
index 01eb4ba..2552fb9 100644
--- a/source3/passdb/pdb_samba4.c
+++ b/source3/passdb/pdb_samba_dsdb.c
@@ -1,8 +1,8 @@
 /*
Unix SMB/CIFS implementation.
-   pdb glue module for samba4
+   pdb glue module for direct access to the dsdb via LDB APIs
Copyright (C) Volker Lendecke 2009-2011
-   Copyright (C) Andrew Bartlett 2010
+   Copyright (C) Andrew Bartlett 2010-2012
Copyright (C) Matthias Dieter Wallnöfer 2009
 
This program is free software; you can redistribute it and/or modify
@@ -36,24 +36,24 @@
 #include source4/dsdb/common/util.h
 #include source3/include/secrets.h
 
-struct pdb_samba4_state {
+struct pdb_samba_dsdb_state {
struct tevent_context *ev;
struct ldb_context *ldb;
struct idmap_context *idmap_ctx;
struct loadparm_context *lp_ctx;
 };
 
-static NTSTATUS pdb_samba4_getsampwsid(struct pdb_methods *m,
+static NTSTATUS pdb_samba_dsdb_getsampwsid(struct pdb_methods *m,
struct samu *sam_acct,
const struct dom_sid *sid);
-static NTSTATUS pdb_samba4_getsamupriv(struct pdb_samba4_state *state,
+static NTSTATUS pdb_samba_dsdb_getsamupriv(struct pdb_samba_dsdb_state *state,
const char *filter,
TALLOC_CTX *mem_ctx,
struct ldb_message **pmsg);
-static bool pdb_samba4_sid_to_id(struct pdb_methods *m, const