Re: [Samba] file server or member server?

2013-07-02 Thread steve
On Mon, 2013-07-01 at 19:55 -0500, Ricky Nance wrote:

 
 
 I feel like I am saying what has already been said, so if you could be
 more specific about what kind of hierarchy you have, I could give you
 a more specific answer. For the most part, if its serving files and in
 a domain, but not providing authentication itself, its a 'member
 server', if its NOT in a domain, but simply serving files to any and
 all windows clients, its a simple file server, if its in a domain and
 providing the domain with username/password authentication its a
 domain server (or domain controller).

Phew, I think I'm getting there.
OK, I have:
1. a 4.0.6 DC
It serves these files selfishly:
[netlogon]
path = /usr/local/samba/var/locks/sysvol/hh3.site/scripts
read only = No

[sysvol]
path = /usr/local/samba/var/locks/sysvol
read only = No

2. A 4.0.6 box joined to the domain. It serves profiles, home
directories, stuff that groups can rw to and anything else you can throw
at it e.g.
[users]
path = /home/users
read only = No

[profiles]
path = /home/profiles
read only = No

[shared]
path = /home/shared
read only = No

/home/profiles and /home/shared have ace's set to mimic what we would
otherwise have to set in smb.conf

Do I have this?
1. is a domain controller and a file server.
2. is a member server and a file server.

Another question, why do you say:
'...its a domain server (or domain controller).'
Which _is_ it? If it's the same thing then why does it have two names?

This thread may seem like a waste of space to many, but it's merely the
tip of the iceberg for us. Our main problem is that we are not dealing
with native English speakers. The grammatical and interpretational
problems which this list and the samba documentation in general throw up
are at times insurmountable.

Thank you all for the patience which you afford us.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] [Announce] Samba 4.0.7 Available for Download

2013-07-02 Thread Karolin Seeger
=
No pressure, no diamonds.

 Thomas Carlyle
=

Release Announcements
-

This is is the latest stable release of Samba 4.0.

Major enhancements in Samba 4.0.7 include:

o  Fix a core dump with invalid lock order while opening/editing
   or copying MS files (bug #9794).
o  Fix crash bug from search of mail= (bug #9967).
o  winbind4: talloc use after free (bug #9832).


Changes since 4.0.6:


o   Michael Adam ob...@samba.org
* BUG 9909: build: Add missing new line to replaced python shebang line.


o   Jeremy Allison j...@samba.org
* BUG 9794: Fix a core dump with invalid lock order while opening/editing
  or copying MS files.


o   Andrew Bartlett abart...@samba.org
* BUG 9465: s3-rpc_server: Ensure we are root when starting and using
  gensec.
* BUG 9906: Doc fixes for 4.0.
* BUG 9907: Build fixes for 4.0 found during autoconf or debian packaging
  work.
* BUG 9967: Fix crash bug from search of mail=.
* BUG 9968: Fix build with system Heimdal of samba4kgetcred.


o   Björn Baumbach b...@sernet.de
* BUG 9947: Check for netbios aliases in ad_get_referrals.


o   Kai Blin k...@samba.org
* BUG 9485: Add support for MX queries.
* BUG 9559: dns: Delete dnsNode objects when they are empty.
* BUG 9632: dns: Support larger queries when asking forwarder.


o   David Disseldorp dd...@samba.org
* BUG 8997: Change libreplace GPL source to LGPL.
* BUG 9900: is_printer_published GUID retrieval.
* BUG 9910: PIE builds not supported.


o   Peng Haitao pen...@cn.fujitsu.com
* BUG 9941: Fix a bug of drvupgrade of smbcontrol.


o   Björn Jacke b...@sernet.de
* BUG 9880: Use of wrong RFC2307 primary group field.


o   Volker Lendecke v...@samba.org
* BUG 9832: winbind4: talloc use after free.
* BUG 9953: Fix tevent_poll on 32-bit machines (Coverity ID 989236).


o   Stefan Metzmacher me...@samba.org
* BUG 9805: s3:lib/server_mutex: Open mutex.tdb with CLEAR_IF_FIRST.
* BUG 9929: s4:winbind: Don't leak libnet_context into the main event
  context.


o   Andreas Schneider a...@samba.org
* BUG 9881: Check for system libtevent.


o   Michael Wood esiot...@gmail.com
* BUG 9964: docs: Avoid mentioning a possibly misleading option.


o   Vadim Zhukov persg...@gmail.com
* BUG 9888: More generic check for OpenBSD platform.


###
Reporting bugs  Development Discussion
###

Please discuss this release on the samba-technical mailing list or by
joining the #samba-technical IRC channel on irc.freenode.net.

If you do report problems then please try to send high quality
feedback. If you don't provide vital information to help us track down
the problem then you will probably be ignored.  All bug reports should
be filed under the Samba 4.0 product in the project's Bugzilla
database (https://bugzilla.samba.org/).


==
== Our Code, Our Bugs, Our Responsibility.
== The Samba Team
==


Download Details


The uncompressed tarballs and patch files have been signed
using GnuPG (ID 6568B7EA).  The source code can be downloaded
from:

http://download.samba.org/samba/ftp/stable/

The release notes are available online at:

http://www.samba.org/samba/history/samba-4.0.7.html

Binary packages will be made available on a volunteer basis from

http://download.samba.org/samba/ftp/Binary_Packages/

Our Code, Our Bugs, Our Responsibility.
(https://bugzilla.samba.org/)

--Enjoy
The Samba Team
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba Domain Rename

2013-07-02 Thread Michael Wood
If Sandeep is running Samba 4 as an Active Directory domain controller,
then I very much doubt that just editing the workgroup setting in smb.conf
will fix it.  There are e.g. files in the samba private directory named
after the domain and also containing the name of the domain.

I don't know if there's a straightforward way of renaming the domain.  I
suspect there isn't.

Sandeep, if you don't get a good answer here, you could try getting the
attention of one of the Samba developers on the IRC channel, perhaps.

On 2 July 2013 07:49, Frostyfrog frostyfr...@gmail.com wrote:

 I'm not sure which distro you are using (I use Archlinux), but these steps
 should work if you have command line access (press the key surrounded in 
 when there is one, don't type the  or the stuff inside):

 1. Login to the server
 2. type: vim /etc/samba/smb.confenter
 3. type: /workgroup =enter
 (If that doesn't work, try it without the equals)
 4. press the arrow keys until it is placed just after the equals
 5. type c$
 6. type in what you want the new domain name to be
 7. press esc
 8. type: :wq
 9. restart samba

 Disclaimer: These steps are not for those who have no idea what they are
 doing (although it may seem that way), please proceed with caution.

 ~Frostyfrog
 From a friendly web page developer.
 ^.^

 On Mon, Jul 1, 2013 at 11:24 PM, Sandeep Kumar sandeep.ku...@arborfs.com
 wrote:

  Hi Team,
 
  I am using  samba 4 Domain in my production environment and everything is
  working fine but now for some reason I have to rename the domain
 
  Can you please help on this, I need to do this asap
 
  Waiting for your response………
 
  Many Thanks,
  Sandeep Kumar
  *Arbor Financial Systems Ltd*
  Direct: +91 172 400 6144
  Support: +44 (0) 203 070 9650
  www.arborfs.com


-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] file server or member server?

2013-07-02 Thread Michael Wood
Hi Steve

On 2 July 2013 09:28, steve st...@steve-ss.com wrote:

 On Mon, 2013-07-01 at 19:55 -0500, Ricky Nance wrote:

  I feel like I am saying what has already been said, so if you could be
  more specific about what kind of hierarchy you have, I could give you
  a more specific answer. For the most part, if its serving files and in
  a domain, but not providing authentication itself, its a 'member
  server', if its NOT in a domain, but simply serving files to any and
  all windows clients, its a simple file server, if its in a domain and
  providing the domain with username/password authentication its a
  domain server (or domain controller).

 Phew, I think I'm getting there.
 OK, I have:
 1. a 4.0.6 DC
 It serves these files selfishly:
 [netlogon]
 path = /usr/local/samba/var/locks/sysvol/hh3.site/scripts
 read only = No

 [sysvol]
 path = /usr/local/samba/var/locks/sysvol
 read only = No

 2. A 4.0.6 box joined to the domain. It serves profiles, home
 directories, stuff that groups can rw to and anything else you can throw
 at it e.g.
 [users]
 path = /home/users
 read only = No

 [profiles]
 path = /home/profiles
 read only = No

 [shared]
 path = /home/shared
 read only = No

 /home/profiles and /home/shared have ace's set to mimic what we would
 otherwise have to set in smb.conf

 Do I have this?
 1. is a domain controller and a file server.


Yes, I suppose so, although most people would not really call it a file
server, because the files it's serving are just related to the DC
functionality.  (Or at least that's how I look at it.)  It's not a general
anything else you can throw at it file server.


 2. is a member server and a file server.


Yes.

And as hinted at in some of the other messages, you could have a standalone
server (i.e. not joined to a domain, and therefore not a member server)
that serves file.  This would also be a file server, but (as mentioned) not
a member server.

Also you could have a server (whether joined to the domain or not) that
does not serve files at all, but only printers.  This would be a print
server.  Of course a server could also be a file and print server.

Another question, why do you say:
 '...its a domain server (or domain controller).'
 Which _is_ it? If it's the same thing then why does it have two names?


He's using or in the sense of: You can call it a domain server, or you
can call it a domain controller.  It's the same thing.

Personally, I have not come across the term domain server and it seems
rather ambiguous to me.  I would avoid using it and stick with domain
controller.

This thread may seem like a waste of space to many, but it's merely the
 tip of the iceberg for us. Our main problem is that we are not dealing
 with native English speakers. The grammatical and interpretational
 problems which this list and the samba documentation in general throw up
 are at times insurmountable.

 Thank you all for the patience which you afford us.


-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] file server or member server?

2013-07-02 Thread steve
On Tue, 2013-07-02 at 11:02 +0200, Michael Wood wrote:
 Hi Steve
 
 On 2 July 2013 09:28, steve st...@steve-ss.com wrote:
 On Mon, 2013-07-01 at 19:55 -0500, Ricky Nance wrote:
 
  I feel like I am saying what has already been said, so if
 you could be
  more specific about what kind of hierarchy you have, I could
 give you
  a more specific answer. For the most part, if its serving
 files and in
  a domain, but not providing authentication itself, its a
 'member
  server', if its NOT in a domain, but simply serving files to
 any and
  all windows clients, its a simple file server, if its in a
 domain and
  providing the domain with username/password authentication
 its a
  domain server (or domain controller).
 
 
 Phew, I think I'm getting there.
 OK, I have:
 1. a 4.0.6 DC
 It serves these files selfishly:
 [netlogon]
 path
 = /usr/local/samba/var/locks/sysvol/hh3.site/scripts
 read only = No
 
 [sysvol]
 path = /usr/local/samba/var/locks/sysvol
 read only = No
 
 2. A 4.0.6 box joined to the domain. It serves profiles, home
 directories, stuff that groups can rw to and anything else you
 can throw
 at it e.g.
 [users]
 path = /home/users
 read only = No
 
 [profiles]
 path = /home/profiles
 read only = No
 
 [shared]
 path = /home/shared
 read only = No
 
 /home/profiles and /home/shared have ace's set to mimic what
 we would
 otherwise have to set in smb.conf
 
 Do I have this?
 1. is a domain controller and a file server.
 
 Yes, I suppose so, although most people would not really call it a
 file server, because the files it's serving are just related to the DC
 functionality.  (Or at least that's how I look at it.)  It's not a
 general anything else you can throw at it file server.
  
 2. is a member server and a file server.
 
 Yes.
 
The two Yes's there are wonderful to read. We're going to pretend that
you didn't add the 'I suppose so'.

This introduces another question for which I suppose I should start
another thread but there may be some relevance here.

I think we're making the wrong decision given 2 boxes to make the
domain. We're using the more powerful box with the bigger disk as the DC
but it sits there with hardly any load all the time. The member server
hits smbd hard all day. top gives high %CPU and %MEM a lot of the time,
especially when we're doing photos. It doesn't seem to slow things down
much and the other thing we see is that when everyone logs on at the
same time, it's slow. The latter is the DC but it still doesn't show
much activity. Could that be because it's reading the profile for
windows and the home folder for Linux?

Are there any guidelines for this sort of stuff?
Cheers,
Steve


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba Domain Rename

2013-07-02 Thread Sandeep Kumar
Hi Michael/Frosty,



Thanks for your quick response



@ developers - I am using samba 4 domain on centos 6 but for some reason i
have to rename the domain



Is it possible?, if yes then can you please provide steps to accomplish this



Second, do i need to unjoin and rejoin the existing domain client machines



Looking forward to your quick response...



Thanks,

Sandeep





*From:* Michael Wood [mailto:esiot...@gmail.com]
*Sent:* 02 July 2013 14:22
*To:* Frostyfrog
*Cc:* Sandeep Kumar; samba@lists.samba.org
*Subject:* Re: [Samba] Samba Domain Rename



If Sandeep is running Samba 4 as an Active Directory domain controller,
then I very much doubt that just editing the workgroup setting in smb.conf
will fix it.  There are e.g. files in the samba private directory named
after the domain and also containing the name of the domain.

I don't know if there's a straightforward way of renaming the domain.  I
suspect there isn't.

Sandeep, if you don't get a good answer here, you could try getting the
attention of one of the Samba developers on the IRC channel, perhaps.

On 2 July 2013 07:49, Frostyfrog frostyfr...@gmail.com wrote:

I'm not sure which distro you are using (I use Archlinux), but these steps
should work if you have command line access (press the key surrounded in 
when there is one, don't type the  or the stuff inside):

1. Login to the server
2. type: vim /etc/samba/smb.confenter
3. type: /workgroup =enter
(If that doesn't work, try it without the equals)
4. press the arrow keys until it is placed just after the equals
5. type c$
6. type in what you want the new domain name to be
7. press esc
8. type: :wq
9. restart samba

Disclaimer: These steps are not for those who have no idea what they are
doing (although it may seem that way), please proceed with caution.

~Frostyfrog
From a friendly web page developer.
^.^

On Mon, Jul 1, 2013 at 11:24 PM, Sandeep Kumar sandeep.ku...@arborfs.com
wrote:


 Hi Team,

 I am using  samba 4 Domain in my production environment and everything is
 working fine but now for some reason I have to rename the domain

 Can you please help on this, I need to do this asap

 Waiting for your response………

 Many Thanks,
 Sandeep Kumar
 *Arbor Financial Systems Ltd*
 Direct: +91 172 400 6144
 Support: +44 (0) 203 070 9650
 www.arborfs.com


-- 
Michael Wood esiot...@gmail.com

-- 
 

www.arborfs.com

This e-mail and any attachment are confidential and contain proprietary 
information, some or all of which may be legally privileged.

It is intended solely for the use of the individual or entity to which it 
is addressed.  If you are not the intended recipient, please notify the 
author immediately by telephone or by replying to this e-mail, and then 
delete all copies of the e-mail on your system.  If you are not the 
intended recipient, you must not use, disclose, distribute, copy, print or 
rely on this e-mail.

Whilst we have taken reasonable precautions to ensure that this e-mail and 
any attachment has been checked for viruses, we cannot guarantee that they 
are virus free and we cannot accept liability for any damage sustained as a 
result of software viruses.  We would advise that you carry out your own 
virus checks, especially before opening an attachment.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Sernet Samba-4 Howto for Centos 6.4

2013-07-02 Thread schmero...@gmail.com
I have registered at https://portal.enterprisesamba.com, but am unclear 
regarding which packages to install for a fully functioning samba4 
installation, or if there are prerequisites such as krb5. I am starting 
with a minimal install of Centos 6.4.


I can make some reasonably educated guesses, but don't want to miss 
something important.


Anyone know if there is a step by step howto for installing samba4 on 
Centos using the Sernet repository?


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Sernet Samba-4 Howto for Centos 6.4

2013-07-02 Thread Masopust, Christian

Hi,

that's pretty easy: simply add the sernet.repo 
(https://download.sernet.de/pub/samba/3.6/centos/6/sernet-samba.repo) to your 
/etc/yum.repos.d/ and run a yum install samba3.

The packages from SerNet are built that (clever) way to replace the 
original CentOS packages without problems. As far as I remember, the only
thing to be done afterwards is enabling the services.

br,
christian 

 -Ursprüngliche Nachricht-
 Von: samba-boun...@lists.samba.org 
 [mailto:samba-boun...@lists.samba.org] Im Auftrag von 
 schmero...@gmail.com
 Gesendet: Dienstag, 02. Juli 2013 13:23
 An: samba@lists.samba.org
 Betreff: [Samba] Sernet Samba-4 Howto for Centos 6.4
 
 I have registered at https://portal.enterprisesamba.com, but 
 am unclear 
 regarding which packages to install for a fully functioning samba4 
 installation, or if there are prerequisites such as krb5. I 
 am starting 
 with a minimal install of Centos 6.4.
 
 I can make some reasonably educated guesses, but don't want to miss 
 something important.
 
 Anyone know if there is a step by step howto for installing samba4 on 
 Centos using the Sernet repository?
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Sernet Samba-4 Howto for Centos 6.4

2013-07-02 Thread Taylor, Jonn

He was asking about samba 4 packages not samba 3.

https://download.sernet.de/pub/samba/4.0/README.txt

On 07/02/2013 08:36 AM, Masopust, Christian wrote:

Hi,

that's pretty easy: simply add the sernet.repo 
(https://download.sernet.de/pub/samba/3.6/centos/6/sernet-samba.repo) to your 
/etc/yum.repos.d/ and run a yum install samba3.

The packages from SerNet are built that (clever) way to replace the
original CentOS packages without problems. As far as I remember, the only
thing to be done afterwards is enabling the services.

br,
christian


-Ursprüngliche Nachricht-
Von: samba-boun...@lists.samba.org
[mailto:samba-boun...@lists.samba.org] Im Auftrag von
schmero...@gmail.com
Gesendet: Dienstag, 02. Juli 2013 13:23
An: samba@lists.samba.org
Betreff: [Samba] Sernet Samba-4 Howto for Centos 6.4

I have registered at https://portal.enterprisesamba.com, but
am unclear
regarding which packages to install for a fully functioning samba4
installation, or if there are prerequisites such as krb5. I
am starting
with a minimal install of Centos 6.4.

I can make some reasonably educated guesses, but don't want to miss
something important.

Anyone know if there is a step by step howto for installing samba4 on
Centos using the Sernet repository?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Incredible slow logon on Samba4 domain

2013-07-02 Thread Patrick Sarnighausen
Hi everyone, I am facing a major trouble with my Samba4 domain

Just installed Samba 4.0.6 on Centos 6.4, using internal DNS, when I add an
W7 client it is a little bit slow to join the domain, but when I login as
as Samba user it takes over 15 minutes. is there any trick to get it faster?

I am using an internal DNS server, but it hapens the same with Google or
OpenDNS.
My resolv.conf is pointing to the samba4 server.

My smb.conf
--
# Global parameters
[global]
workgroup = VALE
realm = VALE.LOCAL
netbios name = SAMBA4
server role = active directory domain controller
allow dns updates = nonsecure
dns forwarder = 172.16.18.13

[netlogon]
path = /opt/samba/var/locks/sysvol/vale.local/scripts
read only = No

[sysvol]
path = /opt/samba/var/locks/sysvol
read only = No


Patrick
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba Domain Rename

2013-07-02 Thread Ricky Nance
Like Michael said, samba 4 as an AD DC would probably not be happy if you
just change the 'workgroup = ' line in your smb.conf (as a matter of fact,
that line shouldn't exist in a AD DC setup in my opinion) the domain is
more than likely embedded very deep inside of the LDB's, and I would
strongly recommend against changing those, however, with sufficient backups
and lots of luck you might be successful in changing it (look into
ldbsearch and ldbedit if you are really REALLY brave). I think even
changing every instance in the LDB's  however will still not work, as
during provision the machine joins itself to the domain (yes it joins
itself to itself if I recall right). I would try to avoid this at all
costs, but if you must do it, starting over may be your best option.

Just my thoughts,
Ricky
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba Domain Rename

2013-07-02 Thread Michael Leone
Changing a domain name, even in an all-Microsoft Windows server
environment, is strongly discouraged, at least on the user mailing
lists I am on. Better would be to use the domain migration tools, and
migrate to a newly named domain.

On Tue, Jul 2, 2013 at 11:07 AM, Ricky Nance ricky.na...@gmail.com wrote:
 Like Michael said, samba 4 as an AD DC would probably not be happy if you
 just change the 'workgroup = ' line in your smb.conf (as a matter of fact,
 that line shouldn't exist in a AD DC setup in my opinion) the domain is
 more than likely embedded very deep inside of the LDB's, and I would
 strongly recommend against changing those, however, with sufficient backups
 and lots of luck you might be successful in changing it (look into
 ldbsearch and ldbedit if you are really REALLY brave). I think even
 changing every instance in the LDB's  however will still not work, as
 during provision the machine joins itself to the domain (yes it joins
 itself to itself if I recall right). I would try to avoid this at all
 costs, but if you must do it, starting over may be your best option.

 Just my thoughts,
 Ricky
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Logon scripts, home directories, and Samba4 AD

2013-07-02 Thread Lee Allen
I have two separate (virtual) servers: one running Samba4 functioning as an
AD controller, and one running Samba 3.6.1  functioning as a file  print
server.

I am using security=ads and winbind.  Everything is working great.

Where things get a little messy is with the [homes] shares.

Here is what I am doing now:

My Samba3 smb.conf has a typical [homes] section.  I create a subdirectory
for each user, and set ownership  permissions.

I create a logon script on the Samba4 system -- one for each user, because
the username is embedded in it:
net use H: \\samba3\username

And then I use RSAT to set the logon script to the correct value for each
user.

It's just a lot of steps that need to be performed (perfectly) for each
user.  Is there a better way?

I see RSAT allows me to specify a Home folder.  Could this be a folder on
the Samba3 server -- ie, \\samba3\username ? (I tried that and it did not
work)

I can imagine some scripts that would create the logon script on the Samba4
system, and create the necessary directories on the Samba3 system.  I could
probably manage that, but I hate to re-invent the wheel --

If there is a clean, orthodox way to do this, I would like to know what it
is.

Thank you.

-- 
*Lee Allen*
email: l...@leecallen.com
bus: (716) 773-2729
home: (716) 773-2326
cell: (716) 880-0854
fax: (716) 408-8844
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba Domain Rename

2013-07-02 Thread Denis Cardon

Hi Sandeep,


Changing a domain name, even in an all-Microsoft Windows server
environment, is strongly discouraged, at least on the user mailing
lists I am on. Better would be to use the domain migration tools, and
migrate to a newly named domain.


I had recently to migrate a windows 2003 domaine from a short dns domain 
name media1 to standard dns name media1.local before migrating to a 
samba4 domain. There are actually some microsoft tool to do the 
migration, but it is far from trivial. I don't know if there are 
anything in samba4 to do the same thing though, and probably the method 
outlined by Michael might still be the best one.


Cheers,

Denis



On Tue, Jul 2, 2013 at 11:07 AM, Ricky Nance ricky.na...@gmail.com wrote:

Like Michael said, samba 4 as an AD DC would probably not be happy if you
just change the 'workgroup = ' line in your smb.conf (as a matter of fact,
that line shouldn't exist in a AD DC setup in my opinion) the domain is
more than likely embedded very deep inside of the LDB's, and I would
strongly recommend against changing those, however, with sufficient backups
and lots of luck you might be successful in changing it (look into
ldbsearch and ldbedit if you are really REALLY brave). I think even
changing every instance in the LDB's  however will still not work, as
during provision the machine joins itself to the domain (yes it joins
itself to itself if I recall right). I would try to avoid this at all
costs, but if you must do it, starting over may be your best option.

Just my thoughts,
Ricky
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba



--
Denis Cardon
Tranquil IT Systems
Les Espaces Jules Verne, bâtiment A
12 avenue Jules Verne
44230 Saint Sébastien sur Loire
tel : +33 (0) 2.40.97.57.55
http://www.tranquil-it-systems.fr

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Large file transfer fails when multiple network drives from different servers are mapped

2013-07-02 Thread Vladimir Rosu

Hi all,

I have the following problem which haunted me for a very long time, and 
I did not found an solution for as long as I searched:

Laptop:
- Windows 8 Pro 64bit (happened also on Windows 7 Home Edition 64 bit)
- 5 network drives are set up in this computer: 4 drives are guest 
accesible and one is accessible using specific user and password 
(retained by Windows)
Server 1: Ubuntu Server 13.04, with Samba 3.6.9 with smb.conf file added 
below, in a 192.168.72.0/24 LAN
Server 2: Ubuntu Server 9.10, with Samba 3.4.0 with smb.conf file added 
below, in a 192.168.1.0/24 LAN
When accessing Server 1, Server 2 is not accessible and vice-versa 
(different locations).
When I try to copy large files (1-10 GB) from Laptop to Server 1, at 
some intervals the transfer fails, with the message Network error. 
There is a problem accessing Z:\ Make sure that you're connected to the 
network and try again..

The specific interesting section from the samba log is below.

[2013/07/02 20:45:53.854564,  2] smbd/open.c:704(open_file)
  nobody opened file xxx.mkv read=Yes write=Yes (numopen=3)
[2013/07/02 20:45:57.915958,  2] smbd/close.c:696(close_normal_file)
  nobody closed file desktop.ini (numopen=2) NT_STATUS_OK
[2013/07/02 20:52:57.083125,  1] smbd/service.c:1114(make_connection_snum)
  vr-pc (192.168.72.102) connect to service games initially as user 
nobody (uid=65534, gid=65534) (pid 4580)

[2013/07/02 20:52:57.086980,  1] smbd/service.c:1114(make_connection_snum)
  vr-pc (192.168.72.102) connect to service diverse initially as user 
nobody (uid=65534, gid=65534) (pid 4580)

[2013/07/02 20:55:06.485696,  2] auth/auth.c:319(check_ntlm_password)
  check_ntlm_password:  Authentication for user [VR] - [VR] FAILED 
with error NT_STATUS_NO_SUCH_USER
--at this point the transfer fails on the 
desktop--

[2013/07/02 20:55:10.611281,  1] smbd/service.c:1114(make_connection_snum)
  vr-pc (192.168.72.102) connect to service P-Z initially as user 
nobody (uid=65534, gid=65534) (pid 5842)

[2013/07/02 20:55:10.614556,  1] smbd/service.c:1114(make_connection_snum)
  vr-pc (192.168.72.102) connect to service 1-O initially as user 
nobody (uid=65534, gid=65534) (pid 5842)

---
I believe that my laptop tries to authenticate with the username set for 
the share which is on Server 2, obviously not present on Server 1, and 
when that authentication fails, it resets all ongoing transfers.
Now, this problem was not present when both servers were running same 
Samba version, it only appeared when I installed Ubuntu 10.04 LTS on 
Server 1. The problem stayed on a fresh install
of Ubuntu 13.04. Please forgive me that I don't write the specific Samba 
versions, but I think you understand the fundamental issue.
Because that this problem was not present on older Samba version, and 
because it doesn't seem logical it seems that this is a bug. However, if 
anyone of you who has more knowledge about this specific issue knows 
more, I would be happy to listen.


Note: you may see some deprecated options in the smb.confs' below, is 
because I tried some other fixes from internet just to be sure.


Server 1 smb.conf file:
---
[global]
log file = /var/log/samba/log.%m
read raw = no
write raw = no
passwd chat = *Enter\snew\s*\spassword:* %n\n 
*Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .

socket options = TCP_NODELAY
obey pam restrictions = yes
null passwords = yes
interfaces = 192.168.72.200/255.255.255.0
map to guest = bad user
encrypt passwords = true
winbind trusted domains only = yes
winbind use default domain = yes
passdb backend = tdbsam
passwd program = /usr/bin/passwd %u
wins support = true
dns proxy = no
server string = %h server (Samba, Ubuntu)
unix password sync = yes
workgroup = INFORM
os level = 20
debug level = 2
socket address = 192.168.72.200
syslog = 0
preferred master = yes
panic action = /usr/share/samba/panic-action %d
usershare allow guests = yes
max log size = 1000
pam password change = yes


[printers]
   comment = All Printers
   browseable = no
   path = /var/spool/samba
   printable = yes
   guest ok = no
   read only = yes
   create mask = 0700

[print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers
   browseable = yes
   read only = yes
   guest ok = no


[P-Z]
hide dot files = no
writeable = yes
public = yes
create mode = 775
path = /mnt/movies1
directory mode = 775
guest ok = yes



[games]
writeable = yes
path = /mnt/diverse
guest ok = yes
hide dot files = no
create mode = 775
public = yes
directory mode = 775

[1-O]
writeable = yes

Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-02 Thread Mark Galeck
Dale, thank you for your help!  However...

I had already checked all the things you are asking.  Permissions are good,
I tried without this parameter, and there is not any error indication in
the logs.  Still the same problem.


On Mon, Jul 1, 2013 at 9:11 AM, Dale Schroeder 
d...@briannassaladdressing.com wrote:

 Mark,

 First verify that the posix permissions are good for your home directory:
 ls -lA /home/mark
 If those are good, then I would try removing the hosts allow parameter in
 [global].
 If that doesn't work, checking the Samba logs is always a good idea.

 Dale


 On 06/28/2013 6:03 PM, Mark Galeck wrote:

 Hello,

 I am a beginner to Samba and I RTFMd carefully but cannot get started.

 I want to access my user account mark home directory on Linux, with the
 same account name on Windows 8.

 The user mark has the same password on Linux and Windows 8.  In addition
 I did this on Linux

  smbpasswd -a mark

 and gave the same password.

 Following the manuals on samba website I edited the samba configuration
 smb.conf file so:

 [global]
  hosts allow = ALL
  client signing = no
  # log files split per-machine:
  log file = /var/log/samba/log.%m
  # maximum size of 50KB per log file, then rotate:
  max log size = 50
  security = user

 [homes]
  valid users = %S
  read only = No


 and successfully started the samba service.

 I can then see mark share on that Linux machine from Windows, I can map
 it to a drive letter in Windows Explorer, and I also see this:

 [root@v64-sw-dev003-mark /]# smbstatus

 Samba version 3.6.12-1.fc17
 PID Username  Group Machine
 --**--**---
 14678 mark  mark  mark-pc  (192.168.221.76)

 Service  pid machine   Connected at
 --**-
 mark 14678   mark-pc   Fri Jun 28 15:56:39 2013

 No locked files



 This all looks very good to me, as Samba server sees my client with the
 correct username, Windows machine name and IP address.


 YET, when I actually try to double-click on the share in the Windows
 Explorer, I get an error dialog:


 Windows cannot access \\192.168.221.32\mark
 You do not have permission to access \\192.168.221.32\mark\. Contact your
 network administrator to request access.


 192.168.221.32 is the Linux machine address.

 Please, what am I doing wrong??

 Thank you,

 Mark




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-02 Thread Ricky Nance
Can you log into the linux machine with the user mark and write files to
/home/mark without issue? What is the output of smbclient //localhost/homes
-Umark -d5 (then at a smb:\ do ls). Just a couple of things I would look
at\try.

Ricky
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-02 Thread Mark Galeck
Can you log into the linux machine with the user mark and write files to
/home/mark without issue?

Certainly. I don't know Samba, but I do know Unix/Linux and as far as I can
tell, everything on Linux is working fine, as well as on the Windows 8 side.

What is the output of smbclient //localhost/homes -Umark -d5 (then at a
smb:\ do ls)

??  Command not found - I can't execute this on Linux.  I use
/bin/systemctl status smb.service
to get status


On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance ricky.na...@gmail.com wrote:

 Can you log into the linux machine with the user mark and write files to
 /home/mark without issue? What is the output of smbclient //localhost/homes
 -Umark -d5 (then at a smb:\ do ls). Just a couple of things I would look
 at\try.

 Ricky

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-02 Thread Ricky Nance
Mark, which distro are you running?


On Tue, Jul 2, 2013 at 2:00 PM, Mark Galeck m...@xpliant.com wrote:

 Can you log into the linux machine with the user mark and write files to
 /home/mark without issue?

 Certainly. I don't know Samba, but I do know Unix/Linux and as far as I
 can tell, everything on Linux is working fine, as well as on the Windows 8
 side.

 What is the output of smbclient //localhost/homes -Umark -d5 (then at a
 smb:\ do ls)

 ??  Command not found - I can't execute this on Linux.  I use
 /bin/systemctl status smb.service
 to get status


 On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance ricky.na...@gmail.comwrote:

 Can you log into the linux machine with the user mark and write files to
 /home/mark without issue? What is the output of smbclient //localhost/homes
 -Umark -d5 (then at a smb:\ do ls). Just a couple of things I would look
 at\try.

 Ricky



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] ANNOUNCE: cifs-utils release 6.1 ready for download

2013-07-02 Thread Jeffrey Layton
It has been a few months since the last cifs-utils release, and again
there's been almost no activity. Still, at some point we need to get
the bugfixes into the field, no matter how minor they are.

So, nothing much earth-shattering here, mostly just bugfixes, and one
new feature to allow cifs.upcall to use a dedicated keytab.

Go forth and download!

webpage:https://wiki.samba.org/index.php/LinuxCIFS_utils
tarball:ftp://ftp.samba.org/pub/linux-cifs/cifs-utils/
git:git://git.samba.org/cifs-utils.git
gitweb: http://git.samba.org/?p=cifs-utils.git;a=summary

Detailed list of changes since 6.0:

commit 0d57c198d6d03117b1e8ebb564ce8ac2535b607d
Author: Jeff Layton jlay...@samba.org
Date:   Wed Apr 10 13:24:50 2013 -0400

cifs-utils: set version to 6.0.1 for interim builds

Signed-off-by: Jeff Layton jlay...@samba.org

commit 6885a6253aa214cbd6f6adbd5c948b74fa4a27a1
Author: Scott Lovenberg scott.lovenb...@gmail.com
Date:   Wed Apr 10 13:16:52 2013 -0400

mount.cifs: Trivial comment fixes

Two trivial comment fixes.

Signed-off-by: Scott Lovenberg scott.lovenb...@gmail.com

commit 21b5bdcb354bc113473347af5e4995fae2285b58
Author: Peng Haitao pen...@cn.fujitsu.com
Date:   Fri Apr 12 16:58:49 2013 +0800

setcifsacl.c: fix a bug of goto setcifsacl_facenum_ret

setcifsacl_facenum_ret: is called only if attrlen is equal to -1.

Signed-off-by: Peng Haitao pen...@cn.fujitsu.com

commit 76dacff50330dcc55ad5c08bf8610e0d7e3ca2ec
Author: Peng Haitao pen...@cn.fujitsu.com
Date:   Fri May 17 17:27:02 2013 +0800

cifs.upcall: the exit code should be 0 when print version

When print version number, the exit code should be 0
and syslog() should not send Negating key to the system logger.

Signed-off-by: Peng Haitao pen...@cn.fujitsu.com

commit e99024cf8f70a1337e09eb9e97a57926f7bc8cac
Author: Jeff Layton jlay...@samba.org
Date:   Wed May 29 14:54:26 2013 -0400

cifs.upcall: allow users to specify dedicated keytab on command-line

Currently cifs.upcall only looks at the default system keytab
(/etc/krb5.keytab). It's often the case however that a dedicated keytab
is desirable. Allow administrators to set one on the command-line.

Reported-by: steve st...@steve-ss.com
Signed-off-by: Jeff Layton jlay...@samba.org

commit 069d1efdfab8d0d411b08f2c20f53b111cc92625
Author: Jeff Layton jlay...@samba.org
Date:   Tue Jul 2 15:13:33 2013 -0400

cifs-utils: set version to 6.1

Signed-off-by: Jeff Layton jlay...@samba.org

-- 
Jeffrey Layton jlay...@samba.org


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-02 Thread Mark Galeck
Fedora release 17 (Beefy Miracle)


On Tue, Jul 2, 2013 at 12:16 PM, Ricky Nance ricky.na...@gmail.com wrote:

 Mark, which distro are you running?


 On Tue, Jul 2, 2013 at 2:00 PM, Mark Galeck m...@xpliant.com wrote:

 Can you log into the linux machine with the user mark and write files to
 /home/mark without issue?

 Certainly. I don't know Samba, but I do know Unix/Linux and as far as I
 can tell, everything on Linux is working fine, as well as on the Windows 8
 side.

 What is the output of smbclient //localhost/homes -Umark -d5 (then at a
 smb:\ do ls)

 ??  Command not found - I can't execute this on Linux.  I use
 /bin/systemctl status smb.service
 to get status


 On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance ricky.na...@gmail.comwrote:

 Can you log into the linux machine with the user mark and write files to
 /home/mark without issue? What is the output of smbclient //localhost/homes
 -Umark -d5 (then at a smb:\ do ls). Just a couple of things I would look
 at\try.

 Ricky




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-02 Thread Ricky Nance
Try yum install samba-client as root, then see if that command will work.
If smbclient works then, it would probably be best to see if we can get a
packet capture of when you try to access the share from the windows 8
machine (btw, which version of windows 8 are you running?). Also, does it
work from windows 8 if you do a start - run - \\192.168.221.32\homes
instead of \\192.168.221.32\mark ?

Ricky
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Logon scripts, home directories, and Samba4 AD

2013-07-02 Thread Lee Allen
I apologize if this appears twice: I posted it several hours ago and it has
not appeared on the list, so I am tweaking the email address and trying
again.

I have two separate (virtual) servers: one running Samba4 functioning as an
AD controller, and one running Samba 3.6.1  functioning as a file  print
server.

On the Samba3 side I am using security=ads and winbind and authenticating
against the Samba4 ADC.  Everything is working great.

Where things get a little messy is with the [homes] shares.

Here is what I am doing now:

My Samba3 smb.conf has a typical [homes] section.  I create a subdirectory
for each user, and set ownership  permissions.

I create a logon script on the Samba4 system -- one for each user, because
the username is embedded in it:
net use H: \\samba3\username

And then I use RSAT to set the logon script to the correct value for each
user.

It's just a lot of steps that need to be performed (perfectly) for each
user.  Is there a better way?

I see RSAT allows me to specify a Home folder.  Could this be a folder on
the Samba3 server -- ie, \\samba3\username ? (I tried that and it did not
work)

I can imagine some scripts that would create the logon script on the Samba4
system, and create the necessary directories on the Samba3 system.  I could
probably manage that, but I hate to re-invent the wheel --

If there is a clean, orthodox way to do this, I would like to know what it
is.

Thank you.

Lee Allen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-02 Thread Mark Galeck
Also, does it work from windows 8 if you do a start - run - \\
192.168.221.32\homes instead of \\192.168.221.32\mark ?

No. Same error.

The output from smbclient which I now installed, that you requested, is
below.

Thank you very much Ricky.

[root@v64-sw-dev003-mark /]# smbclient //localhost/homes -Umark -d5
INFO: Current debug levels:
  all: 5
  tdb: 5
  printdrivers: 5
  lanman: 5
  smb: 5
  rpc_parse: 5
  rpc_srv: 5
  rpc_cli: 5
  passdb: 5
  sam: 5
  auth: 5
  winbind: 5
  vfs: 5
  idmap: 5
  quota: 5
  acls: 5
  locking: 5
  msdfs: 5
  dmapi: 5
  registry: 5
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
INFO: Current debug levels:
  all: 5
  tdb: 5
  printdrivers: 5
  lanman: 5
  smb: 5
  rpc_parse: 5
  rpc_srv: 5
  rpc_cli: 5
  passdb: 5
  sam: 5
  auth: 5
  winbind: 5
  vfs: 5
  idmap: 5
  quota: 5
  acls: 5
  locking: 5
  msdfs: 5
  dmapi: 5
  registry: 5
params.c:pm_process() - Processing configuration file /etc/samba/smb.conf
Processing section [global]
doing parameter client signing = no
doing parameter log file = /var/log/samba/log.%m
doing parameter max log size = 50
doing parameter security = user
pm_process() returned Yes
Substituting charset 'UTF-8' for LOCALE
added interface eth0 ip=fe80::5054:ff:fe2c:3d38%eth0
bcast=fe80:::::%eth0 netmask=:::::
added interface eth0 ip=192.168.221.32 bcast=192.168.221.255
netmask=255.255.254.0
Netbios name list:-
my_netbios_names[0]=V64-SW-DEV003-MARK
Client started (version 3.6.12-1.fc17).
Enter mark's password:
Opening cache file at /var/lib/samba/gencache.tdb
Opening cache file at /var/lib/samba/gencache_notrans.tdb
sitename_fetch: No stored sitename for
no entry for localhost#20 found.
resolve_lmhosts: Attempting lmhosts lookup for name localhost0x20
resolve_lmhosts: Attempting lmhosts lookup for name localhost0x20
getlmhostsent: lmhost entry: 127.0.0.1 localhost
namecache_store: storing 1 address for localhost#20: 127.0.0.1
Connecting to 127.0.0.1 at port 445
Socket options:
SO_KEEPALIVE = 0
SO_REUSEADDR = 0
SO_BROADCAST = 0
TCP_NODELAY = 1
TCP_KEEPCNT = 9
TCP_KEEPIDLE = 7200
TCP_KEEPINTVL = 75
IPTOS_LOWDELAY = 0
IPTOS_THROUGHPUT = 0
SO_SNDBUF = 663750
SO_RCVBUF = 262006
SO_SNDLOWAT = 1
SO_RCVLOWAT = 1
SO_SNDTIMEO = 0
SO_RCVTIMEO = 0
TCP_QUICKACK = 1
 session request ok
Substituting charset 'UTF-8' for LOCALE
Doing spnego session setup (blob length=58)
got OID=1.3.6.1.4.1.311.2.2.10
got principal=NONE
Got challenge flags:
Got NTLMSSP neg_flags=0x608a8215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_TARGET_INFO
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x60088215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x60088215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.6.12-1.fc17]
 session setup ok
 tconx ok
smb: \ do ls
do: command not found
smb: \ ls
NT_STATUS_ACCESS_DENIED listing \*
smb: \



On Tue, Jul 2, 2013 at 2:08 PM, Ricky Nance ricky.na...@gmail.com wrote:

 Try yum install samba-client as root, then see if that command will work.
 If smbclient works then, it would probably be best to see if we can get a
 packet capture of when you try to access the share from the windows 8
 machine (btw, which version of windows 8 are you running?). Also, does it
 work from windows 8 if you do a start - run - \\192.168.221.32\homes
 instead of \\192.168.221.32\mark ?

 Ricky


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[SCM] Samba Shared Repository - branch v4-0-stable updated

2013-07-02 Thread Karolin Seeger
The branch, v4-0-stable has been updated
   via  5e3a301 VERSION: Disable git snapshots for the 4.0.7 release.
   via  67a77db WHATSNEW: Add release notes for Samba 4.0.7.
   via  cc13903 torture: Add tests for LDAP substring search with no 
strings provided
   via  51f19c4 libcli/ldap: Cope with substring match with no chunks in 
ldap_push_filter
   via  980ecbf ldb: bump version to allow a depencency on the substring 
crash fix
   via  1650e8a ldb: Cope with substring match with no chunks in 
ldb_filter_from_tree
   via  df6574c ldb: Ensure not to segfault on a filter such as (mail=)
   via  b67c906 heimdal_build: Add missing dep on samba4kgetcred
   via  4b25860 docs: Avoid mentioning a possibly misleading option.
   via  a46a6be tevent: Fix Coverity ID 989236 Operands don't affect result
   via  45ba921 Bug 8997: change libreplace GPL source to LGPL
   via  897bfd1 s4-dfs_server: check for netbios aliases in 
ad_get_referrals (bug #9947)
   via  57a6c8f dns: Support larger queries when asking forwarder
   via  81539da idl: Add support for parsing OPT records
   via  9328284 When message-type is drvupgrade, MSG_DEBUG should be 
replaced with MSG_PRINTER_DRVUPGRADE.
   via  865765c Check for WRITE_ACCESS on the file before overriding an 
EACCESS.
   via  e90f140 Ensure we don't try the open_file_fchmod() if we can't 
write to the file.
   via  02a9d78 Remove indentation around code wrapped by unneeded 
CAN_WRITE.
   via  7391cae Add early return in file_set_dosmode() on a read only share.
   via  d0ec11d BUG 9881: Check for system libtevent.
   via  1d610ce s4:winbind: don't leak libnet_context into the main event 
context (bug #9929)
   via  62e25dc Fix bug 9900: is_printer_published GUID retrieval
   via  60bb8f9 printing: explicitly clear PUBLISHED attribute
   via  6736784 dns: Delete dnsNode objects when they are empty
   via  1a1e445 dns: Fix allocation of txt_record in txt record tests
   via  a2814d3 dns: more debug debug options in the tests
   via  5a2d041 winbind4: Fix bug 9832 -- talloc use after free
   via  d4cd828 waf: build PIEs if supported by the compiler
   via  b4378f1 waf: build position independent executables
   via  097ec58 waf: add --with[out]-pie configure arguments
   via  0996e95 build: Add missing new line to replaced python shebang 
line. (Fix bug #9909)
   via  2aee249 build: Install smbtar in waf build
   via  06228ec build: Blacklist the release-4-0-0 provision as well
   via  1100bf2 build: Do not set PATH in install_with_python now we set 
$PYTHON
   via  7f88d81 build: Rework BSD_STYLE_STATVFS check to match autoconf 
build
   via  f27239b lib/replace: Set BROKEN_STRNLEN and BROKEN_STRNDUP on all 
AIX
   via  85db5bf docs: Remove all references to testprns
   via  b54aed1 docs: Fix small errors in TOSHARG-Compiling
   via  68c5915 docs: Remove TOSHARG-HighAvailability which is made 
obsolete by CTDB
   via  5bbcf09 docs: Remove out of date and unmaintained Speed page from 
the HOWTO
   via  07073fb dns: Add support for MX queries
   via  46e82a2 More generic check for OpenBSD platform
   via  9b1fac4 docs: mention AD prerequirements for using idmap_ad
   via  f6f3849 winbind/idmap_ad: be verbose about the user that we fail to 
map
   via  27a3cab s3:lib/server_mutex: open mutex.tdb with CLEAR_IF_FIRST
   via  671943a s3-rpc_server: Ensure we are root when starting and usiing 
gensec
   via  c497442 VERSION: Bump version number up to 4.0.7...
  from  4800b9f VERSION: Disable git snapshots for the 4.0.6 release.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-stable


- Log -
---

Summary of changes:
 VERSION|2 +-
 WHATSNEW.txt   |  112 +-
 buildtools/wafsamba/samba_autoconf.py  |4 +-
 buildtools/wafsamba/wafsamba.py|   15 +-
 dfs_server/dfs_server_ad.c |   35 ++
 docs-xml/Samba3-HOWTO/TOSHARG-Compiling.xml|6 +-
 docs-xml/Samba3-HOWTO/TOSHARG-HighAvailability.xml |  500 
 docs-xml/Samba3-HOWTO/TOSHARG-Speed.xml|  327 -
 docs-xml/Samba3-HOWTO/index.xml|4 -
 docs-xml/manpages/idmap_ad.8.xml   |9 +-
 docs-xml/manpages/nmbd.8.xml   |1 -
 docs-xml/manpages/smb.conf.5.xml   |1 -
 docs-xml/manpages/smbd.8.xml   |1 -
 docs-xml/smbdotconf/domain/allowdnsupdates.xml |4 +-
 docs-xml/using_samba/appd.xml  |   18 -
 docs-xml/using_samba/ch01.xml  |6 -
 docs-xml/using_samba/ch07.xml

[SCM] Samba Shared Repository - annotated tag samba-4.0.7 created

2013-07-02 Thread Karolin Seeger
The annotated tag, samba-4.0.7 has been created
at  a0db687ac06e6bb00c428599aa51f342c15f4ead (tag)
   tagging  5e3a3012f3083c40e70f89c1d96ffa6be91aa72a (commit)
  replaces  samba-4.0.6
 tagged by  Karolin Seeger
on  Mon Jul 1 09:17:27 2013 +0200

- Log -
samba: tag release samba-4.0.7
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)

iD8DBQBR0S0HbzORW2Vot+oRAv9cAJwN2dC3xjI69yDDSre/ORBcehddDgCfSIX3
vAxJhcOWoyfR0jl6rDhtK1s=
=AA5S
-END PGP SIGNATURE-

Andreas Schneider (1):
  BUG 9881: Check for system libtevent.

Andrew Bartlett (16):
  s3-rpc_server: Ensure we are root when starting and usiing gensec
  docs: Remove out of date and unmaintained Speed page from the HOWTO
  docs: Remove TOSHARG-HighAvailability which is made obsolete by CTDB
  docs: Fix small errors in TOSHARG-Compiling
  docs: Remove all references to testprns
  lib/replace: Set BROKEN_STRNLEN and BROKEN_STRNDUP on all AIX
  build: Rework BSD_STYLE_STATVFS check to match autoconf build
  build: Do not set PATH in install_with_python now we set $PYTHON
  build: Blacklist the release-4-0-0 provision as well
  build: Install smbtar in waf build
  heimdal_build: Add missing dep on samba4kgetcred
  ldb: Ensure not to segfault on a filter such as (mail=)
  ldb: Cope with substring match with no chunks in ldb_filter_from_tree
  ldb: bump version to allow a depencency on the substring crash fix
  libcli/ldap: Cope with substring match with no chunks in ldap_push_filter
  torture: Add tests for LDAP substring search with no strings provided

Björn Baumbach (1):
  s4-dfs_server: check for netbios aliases in ad_get_referrals (bug #9947)

Björn Jacke (2):
  winbind/idmap_ad: be verbose about the user that we fail to map
  docs: mention AD prerequirements for using idmap_ad

David Disseldorp (6):
  waf: add --with[out]-pie configure arguments
  waf: build position independent executables
  waf: build PIEs if supported by the compiler
  printing: explicitly clear PUBLISHED attribute
  Fix bug 9900: is_printer_published GUID retrieval
  Bug 8997: change libreplace GPL source to LGPL

Jeremy Allison (4):
  Add early return in file_set_dosmode() on a read only share.
  Remove indentation around code wrapped by unneeded CAN_WRITE.
  Ensure we don't try the open_file_fchmod() if we can't write to the file.
  Check for WRITE_ACCESS on the file before overriding an EACCESS.

Kai Blin (6):
  dns: Add support for MX queries
  dns: more debug debug options in the tests
  dns: Fix allocation of txt_record in txt record tests
  dns: Delete dnsNode objects when they are empty
  idl: Add support for parsing OPT records
  dns: Support larger queries when asking forwarder

Karolin Seeger (3):
  VERSION: Bump version number up to 4.0.7...
  WHATSNEW: Add release notes for Samba 4.0.7.
  VERSION: Disable git snapshots for the 4.0.7 release.

Michael Adam (1):
  build: Add missing new line to replaced python shebang line. (Fix bug 
#9909)

Michael Wood (1):
  docs: Avoid mentioning a possibly misleading option.

Peng Haitao (1):
  When message-type is drvupgrade, MSG_DEBUG should be replaced with 
MSG_PRINTER_DRVUPGRADE.

Stefan Metzmacher (2):
  s3:lib/server_mutex: open mutex.tdb with CLEAR_IF_FIRST
  s4:winbind: don't leak libnet_context into the main event context (bug 
#9929)

Vadim Zhukov (1):
  More generic check for OpenBSD platform

Volker Lendecke (2):
  winbind4: Fix bug 9832 -- talloc use after free
  tevent: Fix Coverity ID 989236 Operands don't affect result

---


-- 
Samba Shared Repository


[SCM] Samba Website Repository - branch master updated

2013-07-02 Thread Karolin Seeger
The branch, master has been updated
   via  bc38ac6 Announce Samba 4.0.7.
  from  7bf4548 Announce Samba 3.6.16.

http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master


- Log -
commit bc38ac61eb910e137ce55ddaad8342f17db7d9fd
Author: Karolin Seeger ksee...@samba.org
Date:   Tue Jul 2 09:47:11 2013 +0200

Announce Samba 4.0.7.

Signed-off-by: Karolin Seeger ksee...@samba.org

---

Summary of changes:
 generated_news/latest_10_bodies.html|   54 -
 generated_news/latest_10_headlines.html |4 +-
 generated_news/latest_2_bodies.html |   26 
 history/header_history.html |1 +
 history/samba-4.0.7.html|  101 +++
 latest_stable_release.html  |6 +-
 6 files changed, 133 insertions(+), 59 deletions(-)
 create mode 100755 history/samba-4.0.7.html


Changeset truncated at 500 lines:

diff --git a/generated_news/latest_10_bodies.html 
b/generated_news/latest_10_bodies.html
index b56c433..ea4b4d4 100644
--- a/generated_news/latest_10_bodies.html
+++ b/generated_news/latest_10_bodies.html
@@ -1,3 +1,16 @@
+   h5a name=4.0.702 July 2013/a/h5
+   p class=headlineSamba 4.0.7 Available for Download/p
+   pThis is the latest stable release of the Samba 4.0 series./p
+
+pThe uncompressed tarballs and patch files have been signed
+using GnuPG (ID 6568B7EA).  The source code can be
+a href=http://samba.org/samba/ftp/stable/samba-4.0.7.tar.gz;downloaded
+now/a. A a 
href=http://samba.org/samba/ftp/patches/patch-4.0.6-4.0.7.diffs.gz;
+patch against Samba 4.0.6/a is also available. See
+a href=http://samba.org/samba/history/samba-4.0.7.html; the release notes
+ for more info/a./p
+
+
h5a name=3.6.1619 June 2013/a/h5
p class=headlineSamba 3.6.16 Available for Download/p
pThis is the latest stable release of the Samba 3.6 series./p
@@ -113,44 +126,3 @@ now/a. A a 
href=http://samba.org/samba/ftp/patches/patch-4.0.2-4.0.3.diffs.g
 patch against Samba 4.0.2/a is also available. See
 a href=http://samba.org/samba/history/samba-4.0.3.html; the release notes
  for more info/a./p
-
-
-   h5a name=4.0.230 January 2013/a/h5
-   p class=headlineSamba 4.0.2, 3.6.12 and 3.5.21 bSecurity 
Releases/b Available for Download/p
-   pThese are security releases in order to address
-   a 
href=http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0213;CVE-2013-0213/a
-   (Samba 3.0.x to 4.0.1 (incl.) are affected by a bclickjacking issue 
in SWAT/b) and br
-   a 
href=http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0214;CVE-2013-0214
 /a
-   (Samba 3.0.x to 4.0.1 (incl.) are affected by a bpotential XSRF in 
SWAT/b)./p
-
-pThe uncompressed tarballs and patch files have been signed
-using GnuPG (ID 6568B7EA)./p
-p
-The source code can be downloaded here:
-lia href=http://samba.org/samba/ftp/stable/samba-4.0.2.tar.gz;download
-Samba 4.0.2/a,/li
-lia href=http://samba.org/samba/ftp/stable/samba-3.6.12.tar.gz;download
-Samba 3.6.12/a,/li
-lia href=http://samba.org/samba/ftp/stable/samba-3.5.21.tar.gz;download
-Samba 3.5.21/a./li
-/p
-
-p
-Patches against the parents are also available:
-lia 
href=http://samba.org/samba/ftp/patches/patch-4.0.1-4.0.2.diffs.gz;patch Samba
-4.0.1/4.0.2/a,/li
-lia 
href=http://samba.org/samba/ftp/patches/patch-3.6.11-3.6.12.diffs.gz;patch
-Samba 3.6.11/3.6.12/a,/li
-lia 
href=http://samba.org/samba/ftp/patches/patch-3.5.20-3.5.21.diffs.gz;patch
-Samba 3.5.20/3.5.21/a./li
-/p
-
-p
-Please see the release notes for more info:
-lia href=http://samba.org/samba/history/samba-4.0.2.html;release notes
-Samba 4.0.2/a,/li
-lia href=http://samba.org/samba/history/samba-3.6.12.html;release notes
-Samba 3.6.12/a,/li
-lia href=http://samba.org/samba/history/samba-3.5.21.html;release notes
-Samba 3.5.21/a./li
-/p
diff --git a/generated_news/latest_10_headlines.html 
b/generated_news/latest_10_headlines.html
index e0dba2e..3dcbebe 100644
--- a/generated_news/latest_10_headlines.html
+++ b/generated_news/latest_10_headlines.html
@@ -1,4 +1,6 @@
 ul
+   li 02 July 2013 a href=#4.0.7Samba 4.0.7 Available for 
Download/a/li
+
li 19 June 2013 a href=#3.6.16Samba 3.6.16 Available for 
Download/a/li
 
li 21 May 2013 a href=#4.0.6Samba 4.0.6 Available for 
Download/a/li
@@ -16,6 +18,4 @@
li 18 March 2013 a href=#3.6.13Samba 3.6.13 Available for 
Download/a/li
 
li 05 February 2013 a href=#4.0.3Samba 4.0.3 Available for 
Download/a/li
-
-   li 30 January 2013 a href=#4.0.2Samba 4.0.2, 3.6.12 and 3.5.21 
Security Releases Available for Download/a/li
 /ul
diff --git a/generated_news/latest_2_bodies.html 
b/generated_news/latest_2_bodies.html
index cf0a1f9..cdc55f1 100644
--- a/generated_news/latest_2_bodies.html
+++ b/generated_news/latest_2_bodies.html
@@ -1,3 +1,16 @@
+   

[SCM] Samba Shared Repository - branch v4-0-test updated

2013-07-02 Thread Karolin Seeger
The branch, v4-0-test has been updated
   via  9f7cbc7 s3:smbd:smb2: fix setting of scavenge timeout when 
reconnecting durable handles
   via  e309d2e s3:smbd: call scavenger_schedule_disconnected() from close 
normal file for durable handles
   via  f688ed3 s3:smbd: add a scavenger process for disconnected durable 
handles
   via  888694d s3:locking: add function share_mode_cleanup_disconnected()
   via  4e423bc s3:locking: improve debug output of parse_share_modes()
   via  73f7c56 s3:locking: no need to make a file_id passed by value a 
constant
   via  1446ff4 s3:locking:brlock: add function brl_cleanup_disconnected()
   via  66eedcd s3:locking:brlock: explain the lockdb_clean semantic better 
in brl_reconnect_disconnected()
   via  b25d4ae s3:locking:brlock: let validate_lock_entries keep entries 
for disconnected servers in traverses
   via  383e20d s3:locking:brlock: improve the comment for the brl self 
cleaning code
   via  ff5e657 s3:locking:brlock: use serverids_exist to 
validate_lock_entries
   via  9fa4365 s3:smbXsrv_open: add function smbXsrv_open_cleanup()
   via  db0325f s3:smbXsrv_open: factor out smbXsrv_open_global_parse_record
   via  17106d7 s3:smbXsrv_open: add smbXsrv_open_global_traverse()
   via  e5c3875 lib: Add prctl_set_comment to utils.
   via  5eccfbf s3:smbd:smb2: fix segfault (access after free) in durable 
disconnect code
   via  af17545 s3:smbd: add debugging to close code (regarding disconnect 
of a durable)
   via  6a8cd1c s3:smbd: use smbXsrv_open_close() instead of 
smbXsrv_open_update()
  from  5c8e5ba VERSION: Bump version number up to 4.0.8...

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test


- Log -
commit 9f7cbc7e8916268da7fa6e2e7bd4e1a1154ab1ab
Author: Michael Adam ob...@samba.org
Date:   Thu Apr 18 13:11:03 2013 +0200

s3:smbd:smb2: fix setting of scavenge timeout when reconnecting durable 
handles

The bug fixed with this commit led to reconnected durable handles
having a disconnect timeout of 0 msec. This fix re-establishes the
original timeout for the reconnected handle.

Pair-Programmed-With: Stefan Metzmacher me...@samba.org

Signed-off-by: Stefan Metzmacher me...@samba.org
Signed-off-by: Michael Adam ob...@samba.org
(cherry picked from commit beb9a27180e5570337381d03fac55bbe6d1637e0)

The last 18 patches address bug #9930 - smbd did not cleanup disonnected 
durable
handles.

Autobuild-User(v4-0-test): Karolin Seeger ksee...@samba.org
Autobuild-Date(v4-0-test): Tue Jul  2 12:45:17 CEST 2013 on sn-devel-104

commit e309d2e3cf1e32b1302a38915fc5e3165626e9f3
Author: Gregor Beck gb...@sernet.de
Date:   Wed Mar 20 10:01:43 2013 +0100

s3:smbd: call scavenger_schedule_disconnected() from close normal file for 
durable handles

Signed-off-by: Gregor Beck gb...@sernet.de
Reviewed-by: Michael Adam ob...@samba.org
Reviewed-by: Stefan Metzmacher me...@samba.org
(cherry picked from commit c2ef5182e32fafeb3e279d9fc3a2a409e4aa0543)

commit f688ed37faa5c4e8979c0ae6e18859e9b0dc020b
Author: Gregor Beck gb...@sernet.de
Date:   Thu Feb 7 15:26:37 2013 +0100

s3:smbd: add a scavenger process for disconnected durable handles

Pair-Programmed-With: Stefan Metzmacher me...@samba.org

Signed-off-by: Gregor Beck gb...@sernet.de
Signed-off-by: Stefan Metzmacher me...@samba.org
Reviewed-by: Michael Adam ob...@samba.org
(cherry picked from commit 1ed22ba4b7998c1fc29476e931bd463f2bc1ba7e)

Conflicts:

source3/Makefile.in

commit 888694d3b15c54696e9ccde4b37a4eb1e98f2e65
Author: Gregor Beck gb...@sernet.de
Date:   Wed Mar 13 11:35:37 2013 +0100

s3:locking: add function share_mode_cleanup_disconnected()

For a given file, clean share mode entries for a given persistent file id.

Pair-Programmed-With: Michael Adam ob...@samba.org
Pair-Programmed-With: Stefan Metzmacher me...@samba.org

Signed-off-by: Gregor Beck gb...@sernet.de
Signed-off-by: Michael Adam ob...@samba.org
Signed-off-by: Stefan Metzmacher me...@samba.org
(cherry picked from commit f608bedfca4118b7e3606802df40e266bcc099d8)

commit 4e423bc59703994842d6c271203894c485e9faa3
Author: Gregor Beck gb...@sernet.de
Date:   Wed Mar 20 10:22:06 2013 +0100

s3:locking: improve debug output of parse_share_modes()

Signed-off-by: Gregor Beck gb...@sernet.de
Reviewed-by: Michael Adam ob...@samba.org
Reviewed-by: Stefan Metzmacher me...@samba.org
(cherry picked from commit 0ac0b35dad796d10cf04ab77a53a926420cc0589)

commit 73f7c56e1c890d9e50665b0bdd23234925d48112
Author: Gregor Beck gb...@sernet.de
Date:   Tue Mar 12 15:10:51 2013 +0100

s3:locking: no need to make a file_id passed by value a constant

Signed-off-by: Gregor Beck gb...@sernet.de
Reviewed-by: Michael 

[SCM] Samba Shared Repository - branch v4-1-test updated

2013-07-02 Thread Karolin Seeger
The branch, v4-1-test has been updated
   via  bef3fc8 tsocket: Pass the full port number to getaddrinfo().
   via  3d20d20 smbtorture: Make cracksname easier to debug by outputing 
the offered format
   via  74dd365 Fix a missing parenthesis in the LDAP search request
   via  af41eb6 docs-xml/manpages/smbclient.1.xml: fix case of -T flag in 
example.
   via  59462f2 winbindd and nmbd don't set their umask to zero on startup 
like smbd does.
   via  011dc52 sharesec: Document --view-all
   via  4da8984 sharesec: Document -v/--view
   via  780e2b0 sharesec: Implement --view-all
   via  4ee73fd s3:smbd/close remove filesystem lock before removing 
sharemode
   via  935992f s3:smbd/close use common exit path
   via  245b5ff s3:lib add mapping for ETXTBSY
   via  526f0df s3-ctdb: Fix auto-enabling of CTDB readonly support
   via  c9924eb s3:smbd/aio mark file as modified in the SMB2 case
   via  e65c532 nsswitch: fix a comment
   via  48ae86f heimdal_build: Add missing dep on samba4kgetcred
   via  7bf8fc7 torture: Add tests for LDAP substring search with no 
strings provided
   via  70cb7fd libcli/ldap: Cope with substring match with no chunks in 
ldap_push_filter
   via  4ca9639 ldb: bump version to allow a depencency on the substring 
crash fix
   via  1a279f7 ldb: Cope with substring match with no chunks in 
ldb_filter_from_tree
   via  32d0b75 Note how vfs_gpfs uses the acl map full control parameter.
   via  056e636 Add missing documentation for vfs_zfsacl.
   via  b00d9d2 Use existing acl map full control parameter to control 
the adding of the DELETE_CHILD parameter on NFSv4/ZFS/GPFS file ACE's.
   via  398ee49 s3/smbclient: fix incorrect command tab completions
   via  d544d17 build: Remove the struct MD5Context conf file check.
   via  9b88166 lsa4: Fix a set but unused variable warning
   via  0ee8650 ldb: Ensure not to segfault on a filter such as (mail=)
   via  bbe09b3 Add missing SMB2/SMB3 share capability flag define
   via  06e5401 lsa4: Fix a set but unused variable warning
   via  7d5daaa lsa4: Remove an unused variable
   via  2448fe3 lsa4: Remove an unused variable
   via  720b4d3 lsa4: Remove an unused variable
   via  6c49f90 Fix glusterfs backend crash found at the Microsoft interop 
event.
   via  b96cea4 Fix some blank line endings
   via  d2642cb dns: Fix CID 1034969 Uninitialized scalar variable
   via  ad86e2a s3:passdb/pdb_util make pdb_create_builtin consider whether 
backend deals with BUILTIN
   via  2d2d13e s3:passdb add a gid argument to pdb_create_builtin_alias
   via  212baed s3:utils/net_sam make use of pdb_create_builtin helper 
function
   via  df41835 s3:passdb expose pdb_create_builtin function
   via  6a048b4 s3:passdb/pdb_tdb add parameter to control handling of 
BUILTIN
   via  324b3cc s3:passdb/pdb_ldap remove an unnecessary check
   via  01e094b s3:passdb/pdb_ldap make the module handle well-known
   via  987de8a s3:passdb make pdb_sid_to_id honor backend responsibilities
   via  55dd9e6 s3:passdb/pdb_samba_dsdb make the module handle well-known
   via  56df37d s3:lib/util_sid_passdb make use of pdb_is_responsible_for_* 
functions
   via  0ad38d7 s3:passdb add pdb_*_is_responsible_for* functions
   via  9eb67f2 s3:passdb add idmap control functions
   via  0ad89c3 s3:passdb/samba_dsdb fix some compiler warnings
   via  e211b5c s3:passdb/samba_dsdb fix a compiler warning
   via  e17bc56 s3:utils/net_lookup fix a format-error
   via  88c72fc s4-winbind: Add special case for BUILTIN domain
   via  d4091c5 Fix bug #9166 - Starting smbd or nmbd with stdin from 
/dev/null results in EOF on stdin
   via  fc13489 build: Build with system md5.h on OpenIndiana
   via  5c4772e Re-add umask(0) code removed by commit 
3a7c2777ee0de37d758fe81d67d6836a8354825e
   via  fcc43cf Fix xx_path() - return check from mkdir() is incorrect.
   via  d924da9 docs/vfs_catia: rework man page
   via  8ac17ff docs/vfs_catia: remove space-char mapping recommendation
   via  8d75965 vfs_catia: use translate direction enum instead of int
   via  4cd7e1d vfs_streams_xattr: Do not attempt to write empty attribute 
twice
   via  9f25ad4 librpc: Shorten dcerpc_binding_handle_call a bit
   via  7982d2a librpc: Use tevent_req_poll_ntstatus
   via  20bede7 libsmbclient: Fix typos
   via  fffb701 tsocket: Add some const
   via  cf86f3e gencache: Simplify gencache_init a bit
   via  c71d6ec genrand: Slightly simplify do_reseed
   via  dd0e38b tevent: Fix Coverity ID 989236 Operands don't affect result
   via  f1781ad dsdb: remove a wrong comment in 
dsdb_check_access_on_dn_internal()
   via  122214b dsdb: don't allow a missing nTSecurityDescriptor in 
dsdb_get_sd_from_ldb_message()
   via  5959aff dsdb: use AS_SYSTEM | SHOW_RECYCLED for 

autobuild: intermittent test failure detected

2013-07-02 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2013-07-02-1855/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2013-07-02-1855/samba3.stderr
   http://git.samba.org/autobuild.flakey/2013-07-02-1855/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2013-07-02-1855/samba.stderr
   http://git.samba.org/autobuild.flakey/2013-07-02-1855/samba.stdout
  
The top commit at the time of the failure was:

commit 0b58eed3351e207b0a0f0d32fe37ea5bee9dbc33
Author: Andreas Schneider a...@samba.org
Date:   Mon Jul 1 17:05:33 2013 +0200

tsocket: Pass the full port number to getaddrinfo().

The code stripped port numbers above  down to 4 digits.

Signed-off-by: Andreas Schneider a...@samba.org
Reviewed-by: Jeremy Allison j...@samba.org

Autobuild-User(master): Jeremy Allison j...@samba.org
Autobuild-Date(master): Mon Jul  1 21:10:53 CEST 2013 on sn-devel-104


[SCM] Samba Shared Repository - branch master updated

2013-07-02 Thread Jeremy Allison
The branch, master has been updated
   via  caf3af3 s3-winbind: Allow sec_initial_uid() to store creds.
   via  a4af4fa selftest: Use higher ip numbers.
   via  d5511b1 selftest: Add a newline to root entries in the nss files.
   via  7392985 selftest: Fix domain name of plugindc.
   via  bf5bc72 torture: Don't segfault in smb2.session on error.
   via  d295e18 torture: Don't segfault in raw.session on error.
   via  474eee0 torture: Fix comparsion of uninitalized bytes.
  from  0b58eed tsocket: Pass the full port number to getaddrinfo().

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit caf3af33deeea9bee61a741fcc991285006cc6f5
Author: Andreas Schneider a...@samba.org
Date:   Mon Jul 1 13:02:48 2013 +0200

s3-winbind: Allow sec_initial_uid() to store creds.

Signed-off-by: Andreas Schneider a...@samba.org
Reviewed-by: Jeremy Allison j...@samba.org

Autobuild-User(master): Jeremy Allison j...@samba.org
Autobuild-Date(master): Tue Jul  2 23:26:24 CEST 2013 on sn-devel-104

commit a4af4fa9db768dce2e009ba132cf88525a9b8314
Author: Andreas Schneider a...@samba.org
Date:   Mon Jul 1 13:02:47 2013 +0200

selftest: Use higher ip numbers.

127.0.0.2 is used by some distributions to resolve the own hostname.

Signed-off-by: Andreas Schneider a...@samba.org
Reviewed-by: Jeremy Allison j...@samba.org

commit d5511b125ccfd9c46cad63796aa49258bcc0ae38
Author: Andreas Schneider a...@samba.org
Date:   Mon Jul 1 13:02:46 2013 +0200

selftest: Add a newline to root entries in the nss files.

Signed-off-by: Andreas Schneider a...@samba.org
Reviewed-by: Jeremy Allison j...@samba.org

commit 7392985b2981cb82be5f99255faae1605972be53
Author: Andreas Schneider a...@samba.org
Date:   Mon Jul 1 13:02:45 2013 +0200

selftest: Fix domain name of plugindc.

Signed-off-by: Andreas Schneider a...@samba.org
Reviewed-by: Jeremy Allison j...@samba.org

commit bf5bc723da0605c7bc796f5e047e3f041db0b943
Author: Andreas Schneider a...@samba.org
Date:   Mon Jul 1 13:02:44 2013 +0200

torture: Don't segfault in smb2.session on error.

Signed-off-by: Andreas Schneider a...@samba.org
Reviewed-by: Jeremy Allison j...@samba.org

commit d295e18409a2e18e52c5bb76fec0e0540b6199cf
Author: Andreas Schneider a...@samba.org
Date:   Mon Jul 1 13:02:43 2013 +0200

torture: Don't segfault in raw.session on error.

Signed-off-by: Andreas Schneider a...@samba.org
Reviewed-by: Jeremy Allison j...@samba.org

commit 474eee0df7893a3a4546e1c6ea47220700c5b99f
Author: Andreas Schneider a...@samba.org
Date:   Tue Jul 2 15:24:40 2013 +0200

torture: Fix comparsion of uninitalized bytes.

As we compare string make sure we have the null terminator.

Found by valgrind.

Signed-off-by: Andreas Schneider a...@samba.org
Reviewed-by: Volker Lendecke v...@samba.org

---

Summary of changes:
 selftest/target/Samba.pm  |   11 ++-
 selftest/target/Samba3.pm |6 --
 selftest/target/Samba4.pm |2 +-
 source3/winbindd/winbindd_ccache_access.c |2 +-
 source4/torture/raw/session.c |4 +++-
 source4/torture/smb2/session.c|2 +-
 6 files changed, 16 insertions(+), 11 deletions(-)


Changeset truncated at 500 lines:

diff --git a/selftest/target/Samba.pm b/selftest/target/Samba.pm
index fa18985..ab3851f 100644
--- a/selftest/target/Samba.pm
+++ b/selftest/target/Samba.pm
@@ -150,11 +150,12 @@ sub get_interface($)
 $netbiosname = lc($netbiosname);
 
 my %interfaces = ();
-$interfaces{locals3dc2} = 2;
-$interfaces{localmember3} = 3;
-$interfaces{localshare4} = 4;
-$interfaces{localktest6} = 6;
-$interfaces{maptoguest} = 7;
+$interfaces{locals3dc2} = 3;
+$interfaces{localmember3} = 4;
+$interfaces{localshare4} = 5;
+
+$interfaces{localktest6} = 7;
+$interfaces{maptoguest} = 8;
 
 # 11-16 used by selftest.pl for client interfaces
 
diff --git a/selftest/target/Samba3.pm b/selftest/target/Samba3.pm
index 91a8133..26f5e92 100755
--- a/selftest/target/Samba3.pm
+++ b/selftest/target/Samba3.pm
@@ -1124,7 +1124,8 @@ $unix_name:x:$unix_uid:$unix_gids[0]:$unix_name 
gecos:$prefix_abs:/bin/false
 pdbtest:x:$uid_pdbtest:$gid_nogroup:pdbtest gecos:$prefix_abs:/bin/false
 ;
if ($unix_uid != 0) {
-   print PASSWD root:x:$uid_root:$gid_root:root 
gecos:$prefix_abs:/bin/false;
+   print PASSWD root:x:$uid_root:$gid_root:root 
gecos:$prefix_abs:/bin/false
+;
}
close(PASSWD);
 
@@ -1139,7 +1140,8 @@ domusers:X:$gid_domusers:
 domadmins:X:$gid_domadmins:
 ;
if ($unix_gids[0] != 0) {
-   print GROUP root:x:$gid_root:;
+   print GROUP root:x:$gid_root:
+;
 

[SCM] CTDB repository - branch 1.2.40 updated - ctdb-1.2.64-33-gdc84c8e

2013-07-02 Thread Amitay Isaacs
The branch, 1.2.40 has been updated
   via  dc84c8ed12ed1bf136827b55128c2e74b38bdf55 (commit)
   via  20f730070d9dfbff5e29461a32dec8ee2a185a68 (commit)
   via  345f17d9bcf4b4f0f246b951d55458e1f774f5df (commit)
   via  c7156f49616600d1ad97262115728fbb42ef5574 (commit)
   via  d2f641181927f427b80705e28b88777e50a88433 (commit)
   via  1fbe90b28f11d18ab1a0e3e15eaa42c6de75683f (commit)
   via  8196c25749e9b12628768bdd96f9d85bd7166c07 (commit)
   via  7b98e4cae9b3e52256bdf5ec42aedabe236b7de5 (commit)
   via  d450c31e37fd4b38a6ac3245a85082769b78935f (commit)
   via  877923c8aee49eb3ef610d83727f41ae2f9d09ba (commit)
   via  350ba6907b8f7122c4df21879ffbb3b74e8df93c (commit)
   via  24a0bc600acbe3deea9549ce87567e9e0f779a89 (commit)
   via  42c8c05d23dcd22404d6c761171ffe210734150c (commit)
   via  c0626646d87fe477bbbd425ef94513f466b2e876 (commit)
   via  324d70e26bef94fab1c8c9b8c17cd0a7817866d9 (commit)
   via  1a03e2f0366800eeb15308932f6483f48e2547ea (commit)
   via  df6d7554ccb6c53bcff9bded85ed4882f335eaee (commit)
   via  1c64d205d92da6b5a9af98190755ebce5e1176f1 (commit)
   via  53ecceb8e0dba4149005bb4b042c0845470e859b (commit)
   via  c311947f93c5c01a3819c401566dfa9dc87855d0 (commit)
   via  ca276e0ceb0952ca2832829d8bfc44074915ffe5 (commit)
   via  d29d729ddb26fc5f8ce622a2e733c57baa3733a6 (commit)
   via  5c62e4313c505baba73beab9fcb097ea4e10d452 (commit)
   via  faf8a5fd78ca4854bf103bb4317758082f127684 (commit)
   via  2a2de0939e1a30a4eb8839dbd49d8d8c80609d9c (commit)
   via  c18dbafff80494277d2bb1c91f67cdf3c2425ad8 (commit)
   via  911534f39708848087911f2ab69dbcbc59c12295 (commit)
   via  023d4825375f49e8eeaa25ff54db4fc5eeea9ac8 (commit)
   via  c7665d48f1ac5baecfd64502f419215b1fb259d0 (commit)
   via  5f235169728576e008067d08eefa0661d4a6b520 (commit)
   via  a2bc855110b908ed72941bdfe176a79a5b5876a6 (commit)
   via  7a77f8661c4b7919c0b575fb79a22e62391e7654 (commit)
   via  c02afd52b6788dfe6b051f185465ff6854f7a845 (commit)
  from  4560186b514221bbde89ebc0124380007a22ed08 (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=1.2.40


- Log -
commit dc84c8ed12ed1bf136827b55128c2e74b38bdf55
Author: Amitay Isaacs ami...@gmail.com
Date:   Tue Jul 2 17:19:05 2013 +1000

New version 1.2.65

Signed-off-by: Amitay Isaacs ami...@gmail.com

commit 20f730070d9dfbff5e29461a32dec8ee2a185a68
Author: Amitay Isaacs ami...@gmail.com
Date:   Tue Jul 2 12:40:37 2013 +1000

ctdbd: Don't ban self if init or shutdown event fails

There is no point in banning the node if init or shutdown event times
out since it's going to quit anyway.

Signed-off-by: Amitay Isaacs ami...@gmail.com
(cherry picked from commit ef1c4e99ca66e7a990bc557f34abb624c315e6ba)

commit 345f17d9bcf4b4f0f246b951d55458e1f774f5df
Author: Amitay Isaacs ami...@gmail.com
Date:   Thu Jun 27 17:46:43 2013 +1000

doc: The second half of monitoring is only for recovery master

Signed-off-by: Amitay Isaacs ami...@gmail.com
(cherry picked from commit fcd5e1f04c5fe6c98399429b8f0918b8779acba6)

commit c7156f49616600d1ad97262115728fbb42ef5574
Author: Michael Adam ob...@samba.org
Date:   Wed Jun 26 09:23:22 2013 +0200

recoverd: when the recmaster is banned, use that information when forcing 
an election

When we trigger an election because the recmaster considers itself inactive,
update our local nodemap with the recmaster's flags before calling
force_election(). This way, we don't send the inactive node freeze commands
(e.g.) that may fail and then lead to ourselves getting banned.

The theory is that this should help avoiding banning loops.

Signed-off-by: Michael Adam ob...@samba.org
(cherry picked from commit 932360992b08a5483d90c0590218ba0fd756119e)

commit d2f641181927f427b80705e28b88777e50a88433
Author: Michael Adam ob...@samba.org
Date:   Wed Jun 26 07:11:51 2013 +0200

recoverd: fix a comment typo

Signed-off-by: Michael Adam ob...@samba.org
(cherry picked from commit 741944f118e98f178b860194eecb215180949d18)

commit 1fbe90b28f11d18ab1a0e3e15eaa42c6de75683f
Author: Michael Adam ob...@samba.org
Date:   Fri Jun 21 17:57:37 2013 +0200

recoverd: fix a comment in main_loop

Signed-off-by: Michael Adam ob...@samba.org
(cherry picked from commit ac06c46e4a80c635f6094b5ac6f0bf3e3a02db95)

commit 8196c25749e9b12628768bdd96f9d85bd7166c07
Author: Michael Adam ob...@samba.org
Date:   Fri Jun 21 14:06:22 2013 +0200

recoverd: eliminate some trailing spaces from ctdb_election_win()

Signed-off-by: Michael Adam ob...@samba.org
(cherry picked from commit df30c0a05ed908fc2a997c56ff5484736b23b70f)

commit 7b98e4cae9b3e52256bdf5ec42aedabe236b7de5
Author: Martin Schwenke mar...@meltin.net
Date:   Fri Jun 28 16:31:07 2013 +1000

recoverd: 

[SCM] CTDB repository - annotated tag ctdb-1.2.65 created - ctdb-1.2.65

2013-07-02 Thread Amitay Isaacs
The annotated tag, ctdb-1.2.65 has been created
at  cbc43cae7cc3b7901cc5bf77d4c103ff699d0e88 (tag)
   tagging  dc84c8ed12ed1bf136827b55128c2e74b38bdf55 (commit)
  replaces  ctdb-1.2.64
 tagged by  Amitay Isaacs
on  Wed Jul 3 10:16:51 2013 +1000

- Log -
new version 1.2.65

Amitay Isaacs (22):
  recoverd: When updating flags on nodes, send updated flags and not old 
flags
  recoverd: Print banning message only after verifying pnn
  freeze: Log message from ctdb_start_freeze() and ctdb_control_freeze()
  freeze: If priority is invalid here, it's time to abort
  freeze: Make ctdb_start_freeze() a void function
  banning: Log ban state changes for other nodes at higher debug level
  recovered: Remove old comment as the code corresponding to that has gone 
away
  recoverd: Set node_flags information as soon as we get nodemap
  recoverd: Also check if current node is in recovery when it is banned
  banning: Make ctdb_local_node_got_banned() a void function
  banning: No need to check if banned pnn is for local node
  banning: Do not come out of ban if databases are not frozen
  recoverd: Do not set banning credits on a node if current node is inactive
  recoverd: Always do an early exit from main_loop if node is stopped or 
banned
  recoverd: No need to check if node is recovery master when inactive
  recoverd: Update capabilities only if the current node is active
  recoverd: Delay the initial election if node is started in stopped state
  recoverd: Move code to ban other nodes after we get local node flags
  recoverd: Refactor code to ban misbehaving nodes
  doc: The second half of monitoring is only for recovery master
  ctdbd: Don't ban self if init or shutdown event fails
  New version 1.2.65

Martin Schwenke (3):
  recoverd: Clarify some misleading log messages
  tools/ctdb: Add force option to recover command
  recoverd: Don't continue if the current node gets banned

Michael Adam (5):
  recoverd: remove bogus comment qqq from add prototype new banning code
  recoverd: eliminate some trailing spaces from ctdb_election_win()
  recoverd: fix a comment in main_loop
  recoverd: fix a comment typo
  recoverd: when the recmaster is banned, use that information when forcing 
an election

Stefan Metzmacher (3):
  server/banning: also release all ips if we're banning ourself
  server/recoverd: do takeover_run after verifying the reclock file
  recoverd: try to become the recovery master if we have the capability, 
but the current master doesn't

---


-- 
CTDB repository