Re: [Samba] file server or member server?
On Mon, 2013-07-01 at 19:55 -0500, Ricky Nance wrote: I feel like I am saying what has already been said, so if you could be more specific about what kind of hierarchy you have, I could give you a more specific answer. For the most part, if its serving files and in a domain, but not providing authentication itself, its a 'member server', if its NOT in a domain, but simply serving files to any and all windows clients, its a simple file server, if its in a domain and providing the domain with username/password authentication its a domain server (or domain controller). Phew, I think I'm getting there. OK, I have: 1. a 4.0.6 DC It serves these files selfishly: [netlogon] path = /usr/local/samba/var/locks/sysvol/hh3.site/scripts read only = No [sysvol] path = /usr/local/samba/var/locks/sysvol read only = No 2. A 4.0.6 box joined to the domain. It serves profiles, home directories, stuff that groups can rw to and anything else you can throw at it e.g. [users] path = /home/users read only = No [profiles] path = /home/profiles read only = No [shared] path = /home/shared read only = No /home/profiles and /home/shared have ace's set to mimic what we would otherwise have to set in smb.conf Do I have this? 1. is a domain controller and a file server. 2. is a member server and a file server. Another question, why do you say: '...its a domain server (or domain controller).' Which _is_ it? If it's the same thing then why does it have two names? This thread may seem like a waste of space to many, but it's merely the tip of the iceberg for us. Our main problem is that we are not dealing with native English speakers. The grammatical and interpretational problems which this list and the samba documentation in general throw up are at times insurmountable. Thank you all for the patience which you afford us. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] [Announce] Samba 4.0.7 Available for Download
= No pressure, no diamonds. Thomas Carlyle = Release Announcements - This is is the latest stable release of Samba 4.0. Major enhancements in Samba 4.0.7 include: o Fix a core dump with invalid lock order while opening/editing or copying MS files (bug #9794). o Fix crash bug from search of mail= (bug #9967). o winbind4: talloc use after free (bug #9832). Changes since 4.0.6: o Michael Adam ob...@samba.org * BUG 9909: build: Add missing new line to replaced python shebang line. o Jeremy Allison j...@samba.org * BUG 9794: Fix a core dump with invalid lock order while opening/editing or copying MS files. o Andrew Bartlett abart...@samba.org * BUG 9465: s3-rpc_server: Ensure we are root when starting and using gensec. * BUG 9906: Doc fixes for 4.0. * BUG 9907: Build fixes for 4.0 found during autoconf or debian packaging work. * BUG 9967: Fix crash bug from search of mail=. * BUG 9968: Fix build with system Heimdal of samba4kgetcred. o Björn Baumbach b...@sernet.de * BUG 9947: Check for netbios aliases in ad_get_referrals. o Kai Blin k...@samba.org * BUG 9485: Add support for MX queries. * BUG 9559: dns: Delete dnsNode objects when they are empty. * BUG 9632: dns: Support larger queries when asking forwarder. o David Disseldorp dd...@samba.org * BUG 8997: Change libreplace GPL source to LGPL. * BUG 9900: is_printer_published GUID retrieval. * BUG 9910: PIE builds not supported. o Peng Haitao pen...@cn.fujitsu.com * BUG 9941: Fix a bug of drvupgrade of smbcontrol. o Björn Jacke b...@sernet.de * BUG 9880: Use of wrong RFC2307 primary group field. o Volker Lendecke v...@samba.org * BUG 9832: winbind4: talloc use after free. * BUG 9953: Fix tevent_poll on 32-bit machines (Coverity ID 989236). o Stefan Metzmacher me...@samba.org * BUG 9805: s3:lib/server_mutex: Open mutex.tdb with CLEAR_IF_FIRST. * BUG 9929: s4:winbind: Don't leak libnet_context into the main event context. o Andreas Schneider a...@samba.org * BUG 9881: Check for system libtevent. o Michael Wood esiot...@gmail.com * BUG 9964: docs: Avoid mentioning a possibly misleading option. o Vadim Zhukov persg...@gmail.com * BUG 9888: More generic check for OpenBSD platform. ### Reporting bugs Development Discussion ### Please discuss this release on the samba-technical mailing list or by joining the #samba-technical IRC channel on irc.freenode.net. If you do report problems then please try to send high quality feedback. If you don't provide vital information to help us track down the problem then you will probably be ignored. All bug reports should be filed under the Samba 4.0 product in the project's Bugzilla database (https://bugzilla.samba.org/). == == Our Code, Our Bugs, Our Responsibility. == The Samba Team == Download Details The uncompressed tarballs and patch files have been signed using GnuPG (ID 6568B7EA). The source code can be downloaded from: http://download.samba.org/samba/ftp/stable/ The release notes are available online at: http://www.samba.org/samba/history/samba-4.0.7.html Binary packages will be made available on a volunteer basis from http://download.samba.org/samba/ftp/Binary_Packages/ Our Code, Our Bugs, Our Responsibility. (https://bugzilla.samba.org/) --Enjoy The Samba Team -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba Domain Rename
If Sandeep is running Samba 4 as an Active Directory domain controller, then I very much doubt that just editing the workgroup setting in smb.conf will fix it. There are e.g. files in the samba private directory named after the domain and also containing the name of the domain. I don't know if there's a straightforward way of renaming the domain. I suspect there isn't. Sandeep, if you don't get a good answer here, you could try getting the attention of one of the Samba developers on the IRC channel, perhaps. On 2 July 2013 07:49, Frostyfrog frostyfr...@gmail.com wrote: I'm not sure which distro you are using (I use Archlinux), but these steps should work if you have command line access (press the key surrounded in when there is one, don't type the or the stuff inside): 1. Login to the server 2. type: vim /etc/samba/smb.confenter 3. type: /workgroup =enter (If that doesn't work, try it without the equals) 4. press the arrow keys until it is placed just after the equals 5. type c$ 6. type in what you want the new domain name to be 7. press esc 8. type: :wq 9. restart samba Disclaimer: These steps are not for those who have no idea what they are doing (although it may seem that way), please proceed with caution. ~Frostyfrog From a friendly web page developer. ^.^ On Mon, Jul 1, 2013 at 11:24 PM, Sandeep Kumar sandeep.ku...@arborfs.com wrote: Hi Team, I am using samba 4 Domain in my production environment and everything is working fine but now for some reason I have to rename the domain Can you please help on this, I need to do this asap Waiting for your response……… Many Thanks, Sandeep Kumar *Arbor Financial Systems Ltd* Direct: +91 172 400 6144 Support: +44 (0) 203 070 9650 www.arborfs.com -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] file server or member server?
Hi Steve On 2 July 2013 09:28, steve st...@steve-ss.com wrote: On Mon, 2013-07-01 at 19:55 -0500, Ricky Nance wrote: I feel like I am saying what has already been said, so if you could be more specific about what kind of hierarchy you have, I could give you a more specific answer. For the most part, if its serving files and in a domain, but not providing authentication itself, its a 'member server', if its NOT in a domain, but simply serving files to any and all windows clients, its a simple file server, if its in a domain and providing the domain with username/password authentication its a domain server (or domain controller). Phew, I think I'm getting there. OK, I have: 1. a 4.0.6 DC It serves these files selfishly: [netlogon] path = /usr/local/samba/var/locks/sysvol/hh3.site/scripts read only = No [sysvol] path = /usr/local/samba/var/locks/sysvol read only = No 2. A 4.0.6 box joined to the domain. It serves profiles, home directories, stuff that groups can rw to and anything else you can throw at it e.g. [users] path = /home/users read only = No [profiles] path = /home/profiles read only = No [shared] path = /home/shared read only = No /home/profiles and /home/shared have ace's set to mimic what we would otherwise have to set in smb.conf Do I have this? 1. is a domain controller and a file server. Yes, I suppose so, although most people would not really call it a file server, because the files it's serving are just related to the DC functionality. (Or at least that's how I look at it.) It's not a general anything else you can throw at it file server. 2. is a member server and a file server. Yes. And as hinted at in some of the other messages, you could have a standalone server (i.e. not joined to a domain, and therefore not a member server) that serves file. This would also be a file server, but (as mentioned) not a member server. Also you could have a server (whether joined to the domain or not) that does not serve files at all, but only printers. This would be a print server. Of course a server could also be a file and print server. Another question, why do you say: '...its a domain server (or domain controller).' Which _is_ it? If it's the same thing then why does it have two names? He's using or in the sense of: You can call it a domain server, or you can call it a domain controller. It's the same thing. Personally, I have not come across the term domain server and it seems rather ambiguous to me. I would avoid using it and stick with domain controller. This thread may seem like a waste of space to many, but it's merely the tip of the iceberg for us. Our main problem is that we are not dealing with native English speakers. The grammatical and interpretational problems which this list and the samba documentation in general throw up are at times insurmountable. Thank you all for the patience which you afford us. -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] file server or member server?
On Tue, 2013-07-02 at 11:02 +0200, Michael Wood wrote: Hi Steve On 2 July 2013 09:28, steve st...@steve-ss.com wrote: On Mon, 2013-07-01 at 19:55 -0500, Ricky Nance wrote: I feel like I am saying what has already been said, so if you could be more specific about what kind of hierarchy you have, I could give you a more specific answer. For the most part, if its serving files and in a domain, but not providing authentication itself, its a 'member server', if its NOT in a domain, but simply serving files to any and all windows clients, its a simple file server, if its in a domain and providing the domain with username/password authentication its a domain server (or domain controller). Phew, I think I'm getting there. OK, I have: 1. a 4.0.6 DC It serves these files selfishly: [netlogon] path = /usr/local/samba/var/locks/sysvol/hh3.site/scripts read only = No [sysvol] path = /usr/local/samba/var/locks/sysvol read only = No 2. A 4.0.6 box joined to the domain. It serves profiles, home directories, stuff that groups can rw to and anything else you can throw at it e.g. [users] path = /home/users read only = No [profiles] path = /home/profiles read only = No [shared] path = /home/shared read only = No /home/profiles and /home/shared have ace's set to mimic what we would otherwise have to set in smb.conf Do I have this? 1. is a domain controller and a file server. Yes, I suppose so, although most people would not really call it a file server, because the files it's serving are just related to the DC functionality. (Or at least that's how I look at it.) It's not a general anything else you can throw at it file server. 2. is a member server and a file server. Yes. The two Yes's there are wonderful to read. We're going to pretend that you didn't add the 'I suppose so'. This introduces another question for which I suppose I should start another thread but there may be some relevance here. I think we're making the wrong decision given 2 boxes to make the domain. We're using the more powerful box with the bigger disk as the DC but it sits there with hardly any load all the time. The member server hits smbd hard all day. top gives high %CPU and %MEM a lot of the time, especially when we're doing photos. It doesn't seem to slow things down much and the other thing we see is that when everyone logs on at the same time, it's slow. The latter is the DC but it still doesn't show much activity. Could that be because it's reading the profile for windows and the home folder for Linux? Are there any guidelines for this sort of stuff? Cheers, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba Domain Rename
Hi Michael/Frosty, Thanks for your quick response @ developers - I am using samba 4 domain on centos 6 but for some reason i have to rename the domain Is it possible?, if yes then can you please provide steps to accomplish this Second, do i need to unjoin and rejoin the existing domain client machines Looking forward to your quick response... Thanks, Sandeep *From:* Michael Wood [mailto:esiot...@gmail.com] *Sent:* 02 July 2013 14:22 *To:* Frostyfrog *Cc:* Sandeep Kumar; samba@lists.samba.org *Subject:* Re: [Samba] Samba Domain Rename If Sandeep is running Samba 4 as an Active Directory domain controller, then I very much doubt that just editing the workgroup setting in smb.conf will fix it. There are e.g. files in the samba private directory named after the domain and also containing the name of the domain. I don't know if there's a straightforward way of renaming the domain. I suspect there isn't. Sandeep, if you don't get a good answer here, you could try getting the attention of one of the Samba developers on the IRC channel, perhaps. On 2 July 2013 07:49, Frostyfrog frostyfr...@gmail.com wrote: I'm not sure which distro you are using (I use Archlinux), but these steps should work if you have command line access (press the key surrounded in when there is one, don't type the or the stuff inside): 1. Login to the server 2. type: vim /etc/samba/smb.confenter 3. type: /workgroup =enter (If that doesn't work, try it without the equals) 4. press the arrow keys until it is placed just after the equals 5. type c$ 6. type in what you want the new domain name to be 7. press esc 8. type: :wq 9. restart samba Disclaimer: These steps are not for those who have no idea what they are doing (although it may seem that way), please proceed with caution. ~Frostyfrog From a friendly web page developer. ^.^ On Mon, Jul 1, 2013 at 11:24 PM, Sandeep Kumar sandeep.ku...@arborfs.com wrote: Hi Team, I am using samba 4 Domain in my production environment and everything is working fine but now for some reason I have to rename the domain Can you please help on this, I need to do this asap Waiting for your response……… Many Thanks, Sandeep Kumar *Arbor Financial Systems Ltd* Direct: +91 172 400 6144 Support: +44 (0) 203 070 9650 www.arborfs.com -- Michael Wood esiot...@gmail.com -- www.arborfs.com This e-mail and any attachment are confidential and contain proprietary information, some or all of which may be legally privileged. It is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient, please notify the author immediately by telephone or by replying to this e-mail, and then delete all copies of the e-mail on your system. If you are not the intended recipient, you must not use, disclose, distribute, copy, print or rely on this e-mail. Whilst we have taken reasonable precautions to ensure that this e-mail and any attachment has been checked for viruses, we cannot guarantee that they are virus free and we cannot accept liability for any damage sustained as a result of software viruses. We would advise that you carry out your own virus checks, especially before opening an attachment. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Sernet Samba-4 Howto for Centos 6.4
I have registered at https://portal.enterprisesamba.com, but am unclear regarding which packages to install for a fully functioning samba4 installation, or if there are prerequisites such as krb5. I am starting with a minimal install of Centos 6.4. I can make some reasonably educated guesses, but don't want to miss something important. Anyone know if there is a step by step howto for installing samba4 on Centos using the Sernet repository? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Sernet Samba-4 Howto for Centos 6.4
Hi, that's pretty easy: simply add the sernet.repo (https://download.sernet.de/pub/samba/3.6/centos/6/sernet-samba.repo) to your /etc/yum.repos.d/ and run a yum install samba3. The packages from SerNet are built that (clever) way to replace the original CentOS packages without problems. As far as I remember, the only thing to be done afterwards is enabling the services. br, christian -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von schmero...@gmail.com Gesendet: Dienstag, 02. Juli 2013 13:23 An: samba@lists.samba.org Betreff: [Samba] Sernet Samba-4 Howto for Centos 6.4 I have registered at https://portal.enterprisesamba.com, but am unclear regarding which packages to install for a fully functioning samba4 installation, or if there are prerequisites such as krb5. I am starting with a minimal install of Centos 6.4. I can make some reasonably educated guesses, but don't want to miss something important. Anyone know if there is a step by step howto for installing samba4 on Centos using the Sernet repository? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Sernet Samba-4 Howto for Centos 6.4
He was asking about samba 4 packages not samba 3. https://download.sernet.de/pub/samba/4.0/README.txt On 07/02/2013 08:36 AM, Masopust, Christian wrote: Hi, that's pretty easy: simply add the sernet.repo (https://download.sernet.de/pub/samba/3.6/centos/6/sernet-samba.repo) to your /etc/yum.repos.d/ and run a yum install samba3. The packages from SerNet are built that (clever) way to replace the original CentOS packages without problems. As far as I remember, the only thing to be done afterwards is enabling the services. br, christian -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von schmero...@gmail.com Gesendet: Dienstag, 02. Juli 2013 13:23 An: samba@lists.samba.org Betreff: [Samba] Sernet Samba-4 Howto for Centos 6.4 I have registered at https://portal.enterprisesamba.com, but am unclear regarding which packages to install for a fully functioning samba4 installation, or if there are prerequisites such as krb5. I am starting with a minimal install of Centos 6.4. I can make some reasonably educated guesses, but don't want to miss something important. Anyone know if there is a step by step howto for installing samba4 on Centos using the Sernet repository? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Incredible slow logon on Samba4 domain
Hi everyone, I am facing a major trouble with my Samba4 domain Just installed Samba 4.0.6 on Centos 6.4, using internal DNS, when I add an W7 client it is a little bit slow to join the domain, but when I login as as Samba user it takes over 15 minutes. is there any trick to get it faster? I am using an internal DNS server, but it hapens the same with Google or OpenDNS. My resolv.conf is pointing to the samba4 server. My smb.conf -- # Global parameters [global] workgroup = VALE realm = VALE.LOCAL netbios name = SAMBA4 server role = active directory domain controller allow dns updates = nonsecure dns forwarder = 172.16.18.13 [netlogon] path = /opt/samba/var/locks/sysvol/vale.local/scripts read only = No [sysvol] path = /opt/samba/var/locks/sysvol read only = No Patrick -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba Domain Rename
Like Michael said, samba 4 as an AD DC would probably not be happy if you just change the 'workgroup = ' line in your smb.conf (as a matter of fact, that line shouldn't exist in a AD DC setup in my opinion) the domain is more than likely embedded very deep inside of the LDB's, and I would strongly recommend against changing those, however, with sufficient backups and lots of luck you might be successful in changing it (look into ldbsearch and ldbedit if you are really REALLY brave). I think even changing every instance in the LDB's however will still not work, as during provision the machine joins itself to the domain (yes it joins itself to itself if I recall right). I would try to avoid this at all costs, but if you must do it, starting over may be your best option. Just my thoughts, Ricky -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba Domain Rename
Changing a domain name, even in an all-Microsoft Windows server environment, is strongly discouraged, at least on the user mailing lists I am on. Better would be to use the domain migration tools, and migrate to a newly named domain. On Tue, Jul 2, 2013 at 11:07 AM, Ricky Nance ricky.na...@gmail.com wrote: Like Michael said, samba 4 as an AD DC would probably not be happy if you just change the 'workgroup = ' line in your smb.conf (as a matter of fact, that line shouldn't exist in a AD DC setup in my opinion) the domain is more than likely embedded very deep inside of the LDB's, and I would strongly recommend against changing those, however, with sufficient backups and lots of luck you might be successful in changing it (look into ldbsearch and ldbedit if you are really REALLY brave). I think even changing every instance in the LDB's however will still not work, as during provision the machine joins itself to the domain (yes it joins itself to itself if I recall right). I would try to avoid this at all costs, but if you must do it, starting over may be your best option. Just my thoughts, Ricky -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Logon scripts, home directories, and Samba4 AD
I have two separate (virtual) servers: one running Samba4 functioning as an AD controller, and one running Samba 3.6.1 functioning as a file print server. I am using security=ads and winbind. Everything is working great. Where things get a little messy is with the [homes] shares. Here is what I am doing now: My Samba3 smb.conf has a typical [homes] section. I create a subdirectory for each user, and set ownership permissions. I create a logon script on the Samba4 system -- one for each user, because the username is embedded in it: net use H: \\samba3\username And then I use RSAT to set the logon script to the correct value for each user. It's just a lot of steps that need to be performed (perfectly) for each user. Is there a better way? I see RSAT allows me to specify a Home folder. Could this be a folder on the Samba3 server -- ie, \\samba3\username ? (I tried that and it did not work) I can imagine some scripts that would create the logon script on the Samba4 system, and create the necessary directories on the Samba3 system. I could probably manage that, but I hate to re-invent the wheel -- If there is a clean, orthodox way to do this, I would like to know what it is. Thank you. -- *Lee Allen* email: l...@leecallen.com bus: (716) 773-2729 home: (716) 773-2326 cell: (716) 880-0854 fax: (716) 408-8844 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba Domain Rename
Hi Sandeep, Changing a domain name, even in an all-Microsoft Windows server environment, is strongly discouraged, at least on the user mailing lists I am on. Better would be to use the domain migration tools, and migrate to a newly named domain. I had recently to migrate a windows 2003 domaine from a short dns domain name media1 to standard dns name media1.local before migrating to a samba4 domain. There are actually some microsoft tool to do the migration, but it is far from trivial. I don't know if there are anything in samba4 to do the same thing though, and probably the method outlined by Michael might still be the best one. Cheers, Denis On Tue, Jul 2, 2013 at 11:07 AM, Ricky Nance ricky.na...@gmail.com wrote: Like Michael said, samba 4 as an AD DC would probably not be happy if you just change the 'workgroup = ' line in your smb.conf (as a matter of fact, that line shouldn't exist in a AD DC setup in my opinion) the domain is more than likely embedded very deep inside of the LDB's, and I would strongly recommend against changing those, however, with sufficient backups and lots of luck you might be successful in changing it (look into ldbsearch and ldbedit if you are really REALLY brave). I think even changing every instance in the LDB's however will still not work, as during provision the machine joins itself to the domain (yes it joins itself to itself if I recall right). I would try to avoid this at all costs, but if you must do it, starting over may be your best option. Just my thoughts, Ricky -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- Denis Cardon Tranquil IT Systems Les Espaces Jules Verne, bâtiment A 12 avenue Jules Verne 44230 Saint Sébastien sur Loire tel : +33 (0) 2.40.97.57.55 http://www.tranquil-it-systems.fr -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Large file transfer fails when multiple network drives from different servers are mapped
Hi all, I have the following problem which haunted me for a very long time, and I did not found an solution for as long as I searched: Laptop: - Windows 8 Pro 64bit (happened also on Windows 7 Home Edition 64 bit) - 5 network drives are set up in this computer: 4 drives are guest accesible and one is accessible using specific user and password (retained by Windows) Server 1: Ubuntu Server 13.04, with Samba 3.6.9 with smb.conf file added below, in a 192.168.72.0/24 LAN Server 2: Ubuntu Server 9.10, with Samba 3.4.0 with smb.conf file added below, in a 192.168.1.0/24 LAN When accessing Server 1, Server 2 is not accessible and vice-versa (different locations). When I try to copy large files (1-10 GB) from Laptop to Server 1, at some intervals the transfer fails, with the message Network error. There is a problem accessing Z:\ Make sure that you're connected to the network and try again.. The specific interesting section from the samba log is below. [2013/07/02 20:45:53.854564, 2] smbd/open.c:704(open_file) nobody opened file xxx.mkv read=Yes write=Yes (numopen=3) [2013/07/02 20:45:57.915958, 2] smbd/close.c:696(close_normal_file) nobody closed file desktop.ini (numopen=2) NT_STATUS_OK [2013/07/02 20:52:57.083125, 1] smbd/service.c:1114(make_connection_snum) vr-pc (192.168.72.102) connect to service games initially as user nobody (uid=65534, gid=65534) (pid 4580) [2013/07/02 20:52:57.086980, 1] smbd/service.c:1114(make_connection_snum) vr-pc (192.168.72.102) connect to service diverse initially as user nobody (uid=65534, gid=65534) (pid 4580) [2013/07/02 20:55:06.485696, 2] auth/auth.c:319(check_ntlm_password) check_ntlm_password: Authentication for user [VR] - [VR] FAILED with error NT_STATUS_NO_SUCH_USER --at this point the transfer fails on the desktop-- [2013/07/02 20:55:10.611281, 1] smbd/service.c:1114(make_connection_snum) vr-pc (192.168.72.102) connect to service P-Z initially as user nobody (uid=65534, gid=65534) (pid 5842) [2013/07/02 20:55:10.614556, 1] smbd/service.c:1114(make_connection_snum) vr-pc (192.168.72.102) connect to service 1-O initially as user nobody (uid=65534, gid=65534) (pid 5842) --- I believe that my laptop tries to authenticate with the username set for the share which is on Server 2, obviously not present on Server 1, and when that authentication fails, it resets all ongoing transfers. Now, this problem was not present when both servers were running same Samba version, it only appeared when I installed Ubuntu 10.04 LTS on Server 1. The problem stayed on a fresh install of Ubuntu 13.04. Please forgive me that I don't write the specific Samba versions, but I think you understand the fundamental issue. Because that this problem was not present on older Samba version, and because it doesn't seem logical it seems that this is a bug. However, if anyone of you who has more knowledge about this specific issue knows more, I would be happy to listen. Note: you may see some deprecated options in the smb.confs' below, is because I tried some other fixes from internet just to be sure. Server 1 smb.conf file: --- [global] log file = /var/log/samba/log.%m read raw = no write raw = no passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* . socket options = TCP_NODELAY obey pam restrictions = yes null passwords = yes interfaces = 192.168.72.200/255.255.255.0 map to guest = bad user encrypt passwords = true winbind trusted domains only = yes winbind use default domain = yes passdb backend = tdbsam passwd program = /usr/bin/passwd %u wins support = true dns proxy = no server string = %h server (Samba, Ubuntu) unix password sync = yes workgroup = INFORM os level = 20 debug level = 2 socket address = 192.168.72.200 syslog = 0 preferred master = yes panic action = /usr/share/samba/panic-action %d usershare allow guests = yes max log size = 1000 pam password change = yes [printers] comment = All Printers browseable = no path = /var/spool/samba printable = yes guest ok = no read only = yes create mask = 0700 [print$] comment = Printer Drivers path = /var/lib/samba/printers browseable = yes read only = yes guest ok = no [P-Z] hide dot files = no writeable = yes public = yes create mode = 775 path = /mnt/movies1 directory mode = 775 guest ok = yes [games] writeable = yes path = /mnt/diverse guest ok = yes hide dot files = no create mode = 775 public = yes directory mode = 775 [1-O] writeable = yes
Re: [Samba] Win8 account sees its home share, but does not have permissions to access
Dale, thank you for your help! However... I had already checked all the things you are asking. Permissions are good, I tried without this parameter, and there is not any error indication in the logs. Still the same problem. On Mon, Jul 1, 2013 at 9:11 AM, Dale Schroeder d...@briannassaladdressing.com wrote: Mark, First verify that the posix permissions are good for your home directory: ls -lA /home/mark If those are good, then I would try removing the hosts allow parameter in [global]. If that doesn't work, checking the Samba logs is always a good idea. Dale On 06/28/2013 6:03 PM, Mark Galeck wrote: Hello, I am a beginner to Samba and I RTFMd carefully but cannot get started. I want to access my user account mark home directory on Linux, with the same account name on Windows 8. The user mark has the same password on Linux and Windows 8. In addition I did this on Linux smbpasswd -a mark and gave the same password. Following the manuals on samba website I edited the samba configuration smb.conf file so: [global] hosts allow = ALL client signing = no # log files split per-machine: log file = /var/log/samba/log.%m # maximum size of 50KB per log file, then rotate: max log size = 50 security = user [homes] valid users = %S read only = No and successfully started the samba service. I can then see mark share on that Linux machine from Windows, I can map it to a drive letter in Windows Explorer, and I also see this: [root@v64-sw-dev003-mark /]# smbstatus Samba version 3.6.12-1.fc17 PID Username Group Machine --**--**--- 14678 mark mark mark-pc (192.168.221.76) Service pid machine Connected at --**- mark 14678 mark-pc Fri Jun 28 15:56:39 2013 No locked files This all looks very good to me, as Samba server sees my client with the correct username, Windows machine name and IP address. YET, when I actually try to double-click on the share in the Windows Explorer, I get an error dialog: Windows cannot access \\192.168.221.32\mark You do not have permission to access \\192.168.221.32\mark\. Contact your network administrator to request access. 192.168.221.32 is the Linux machine address. Please, what am I doing wrong?? Thank you, Mark -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win8 account sees its home share, but does not have permissions to access
Can you log into the linux machine with the user mark and write files to /home/mark without issue? What is the output of smbclient //localhost/homes -Umark -d5 (then at a smb:\ do ls). Just a couple of things I would look at\try. Ricky -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win8 account sees its home share, but does not have permissions to access
Can you log into the linux machine with the user mark and write files to /home/mark without issue? Certainly. I don't know Samba, but I do know Unix/Linux and as far as I can tell, everything on Linux is working fine, as well as on the Windows 8 side. What is the output of smbclient //localhost/homes -Umark -d5 (then at a smb:\ do ls) ?? Command not found - I can't execute this on Linux. I use /bin/systemctl status smb.service to get status On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance ricky.na...@gmail.com wrote: Can you log into the linux machine with the user mark and write files to /home/mark without issue? What is the output of smbclient //localhost/homes -Umark -d5 (then at a smb:\ do ls). Just a couple of things I would look at\try. Ricky -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win8 account sees its home share, but does not have permissions to access
Mark, which distro are you running? On Tue, Jul 2, 2013 at 2:00 PM, Mark Galeck m...@xpliant.com wrote: Can you log into the linux machine with the user mark and write files to /home/mark without issue? Certainly. I don't know Samba, but I do know Unix/Linux and as far as I can tell, everything on Linux is working fine, as well as on the Windows 8 side. What is the output of smbclient //localhost/homes -Umark -d5 (then at a smb:\ do ls) ?? Command not found - I can't execute this on Linux. I use /bin/systemctl status smb.service to get status On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance ricky.na...@gmail.comwrote: Can you log into the linux machine with the user mark and write files to /home/mark without issue? What is the output of smbclient //localhost/homes -Umark -d5 (then at a smb:\ do ls). Just a couple of things I would look at\try. Ricky -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] ANNOUNCE: cifs-utils release 6.1 ready for download
It has been a few months since the last cifs-utils release, and again there's been almost no activity. Still, at some point we need to get the bugfixes into the field, no matter how minor they are. So, nothing much earth-shattering here, mostly just bugfixes, and one new feature to allow cifs.upcall to use a dedicated keytab. Go forth and download! webpage:https://wiki.samba.org/index.php/LinuxCIFS_utils tarball:ftp://ftp.samba.org/pub/linux-cifs/cifs-utils/ git:git://git.samba.org/cifs-utils.git gitweb: http://git.samba.org/?p=cifs-utils.git;a=summary Detailed list of changes since 6.0: commit 0d57c198d6d03117b1e8ebb564ce8ac2535b607d Author: Jeff Layton jlay...@samba.org Date: Wed Apr 10 13:24:50 2013 -0400 cifs-utils: set version to 6.0.1 for interim builds Signed-off-by: Jeff Layton jlay...@samba.org commit 6885a6253aa214cbd6f6adbd5c948b74fa4a27a1 Author: Scott Lovenberg scott.lovenb...@gmail.com Date: Wed Apr 10 13:16:52 2013 -0400 mount.cifs: Trivial comment fixes Two trivial comment fixes. Signed-off-by: Scott Lovenberg scott.lovenb...@gmail.com commit 21b5bdcb354bc113473347af5e4995fae2285b58 Author: Peng Haitao pen...@cn.fujitsu.com Date: Fri Apr 12 16:58:49 2013 +0800 setcifsacl.c: fix a bug of goto setcifsacl_facenum_ret setcifsacl_facenum_ret: is called only if attrlen is equal to -1. Signed-off-by: Peng Haitao pen...@cn.fujitsu.com commit 76dacff50330dcc55ad5c08bf8610e0d7e3ca2ec Author: Peng Haitao pen...@cn.fujitsu.com Date: Fri May 17 17:27:02 2013 +0800 cifs.upcall: the exit code should be 0 when print version When print version number, the exit code should be 0 and syslog() should not send Negating key to the system logger. Signed-off-by: Peng Haitao pen...@cn.fujitsu.com commit e99024cf8f70a1337e09eb9e97a57926f7bc8cac Author: Jeff Layton jlay...@samba.org Date: Wed May 29 14:54:26 2013 -0400 cifs.upcall: allow users to specify dedicated keytab on command-line Currently cifs.upcall only looks at the default system keytab (/etc/krb5.keytab). It's often the case however that a dedicated keytab is desirable. Allow administrators to set one on the command-line. Reported-by: steve st...@steve-ss.com Signed-off-by: Jeff Layton jlay...@samba.org commit 069d1efdfab8d0d411b08f2c20f53b111cc92625 Author: Jeff Layton jlay...@samba.org Date: Tue Jul 2 15:13:33 2013 -0400 cifs-utils: set version to 6.1 Signed-off-by: Jeff Layton jlay...@samba.org -- Jeffrey Layton jlay...@samba.org signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win8 account sees its home share, but does not have permissions to access
Fedora release 17 (Beefy Miracle) On Tue, Jul 2, 2013 at 12:16 PM, Ricky Nance ricky.na...@gmail.com wrote: Mark, which distro are you running? On Tue, Jul 2, 2013 at 2:00 PM, Mark Galeck m...@xpliant.com wrote: Can you log into the linux machine with the user mark and write files to /home/mark without issue? Certainly. I don't know Samba, but I do know Unix/Linux and as far as I can tell, everything on Linux is working fine, as well as on the Windows 8 side. What is the output of smbclient //localhost/homes -Umark -d5 (then at a smb:\ do ls) ?? Command not found - I can't execute this on Linux. I use /bin/systemctl status smb.service to get status On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance ricky.na...@gmail.comwrote: Can you log into the linux machine with the user mark and write files to /home/mark without issue? What is the output of smbclient //localhost/homes -Umark -d5 (then at a smb:\ do ls). Just a couple of things I would look at\try. Ricky -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win8 account sees its home share, but does not have permissions to access
Try yum install samba-client as root, then see if that command will work. If smbclient works then, it would probably be best to see if we can get a packet capture of when you try to access the share from the windows 8 machine (btw, which version of windows 8 are you running?). Also, does it work from windows 8 if you do a start - run - \\192.168.221.32\homes instead of \\192.168.221.32\mark ? Ricky -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Logon scripts, home directories, and Samba4 AD
I apologize if this appears twice: I posted it several hours ago and it has not appeared on the list, so I am tweaking the email address and trying again. I have two separate (virtual) servers: one running Samba4 functioning as an AD controller, and one running Samba 3.6.1 functioning as a file print server. On the Samba3 side I am using security=ads and winbind and authenticating against the Samba4 ADC. Everything is working great. Where things get a little messy is with the [homes] shares. Here is what I am doing now: My Samba3 smb.conf has a typical [homes] section. I create a subdirectory for each user, and set ownership permissions. I create a logon script on the Samba4 system -- one for each user, because the username is embedded in it: net use H: \\samba3\username And then I use RSAT to set the logon script to the correct value for each user. It's just a lot of steps that need to be performed (perfectly) for each user. Is there a better way? I see RSAT allows me to specify a Home folder. Could this be a folder on the Samba3 server -- ie, \\samba3\username ? (I tried that and it did not work) I can imagine some scripts that would create the logon script on the Samba4 system, and create the necessary directories on the Samba3 system. I could probably manage that, but I hate to re-invent the wheel -- If there is a clean, orthodox way to do this, I would like to know what it is. Thank you. Lee Allen -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win8 account sees its home share, but does not have permissions to access
Also, does it work from windows 8 if you do a start - run - \\ 192.168.221.32\homes instead of \\192.168.221.32\mark ? No. Same error. The output from smbclient which I now installed, that you requested, is below. Thank you very much Ricky. [root@v64-sw-dev003-mark /]# smbclient //localhost/homes -Umark -d5 INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5 idmap: 5 quota: 5 acls: 5 locking: 5 msdfs: 5 dmapi: 5 registry: 5 lp_load_ex: refreshing parameters Initialising global parameters rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5 idmap: 5 quota: 5 acls: 5 locking: 5 msdfs: 5 dmapi: 5 registry: 5 params.c:pm_process() - Processing configuration file /etc/samba/smb.conf Processing section [global] doing parameter client signing = no doing parameter log file = /var/log/samba/log.%m doing parameter max log size = 50 doing parameter security = user pm_process() returned Yes Substituting charset 'UTF-8' for LOCALE added interface eth0 ip=fe80::5054:ff:fe2c:3d38%eth0 bcast=fe80:::::%eth0 netmask=::::: added interface eth0 ip=192.168.221.32 bcast=192.168.221.255 netmask=255.255.254.0 Netbios name list:- my_netbios_names[0]=V64-SW-DEV003-MARK Client started (version 3.6.12-1.fc17). Enter mark's password: Opening cache file at /var/lib/samba/gencache.tdb Opening cache file at /var/lib/samba/gencache_notrans.tdb sitename_fetch: No stored sitename for no entry for localhost#20 found. resolve_lmhosts: Attempting lmhosts lookup for name localhost0x20 resolve_lmhosts: Attempting lmhosts lookup for name localhost0x20 getlmhostsent: lmhost entry: 127.0.0.1 localhost namecache_store: storing 1 address for localhost#20: 127.0.0.1 Connecting to 127.0.0.1 at port 445 Socket options: SO_KEEPALIVE = 0 SO_REUSEADDR = 0 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 663750 SO_RCVBUF = 262006 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 session request ok Substituting charset 'UTF-8' for LOCALE Doing spnego session setup (blob length=58) got OID=1.3.6.1.4.1.311.2.2.10 got principal=NONE Got challenge flags: Got NTLMSSP neg_flags=0x608a8215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_TARGET_INFO NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.6.12-1.fc17] session setup ok tconx ok smb: \ do ls do: command not found smb: \ ls NT_STATUS_ACCESS_DENIED listing \* smb: \ On Tue, Jul 2, 2013 at 2:08 PM, Ricky Nance ricky.na...@gmail.com wrote: Try yum install samba-client as root, then see if that command will work. If smbclient works then, it would probably be best to see if we can get a packet capture of when you try to access the share from the windows 8 machine (btw, which version of windows 8 are you running?). Also, does it work from windows 8 if you do a start - run - \\192.168.221.32\homes instead of \\192.168.221.32\mark ? Ricky -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[SCM] Samba Shared Repository - branch v4-0-stable updated
The branch, v4-0-stable has been updated via 5e3a301 VERSION: Disable git snapshots for the 4.0.7 release. via 67a77db WHATSNEW: Add release notes for Samba 4.0.7. via cc13903 torture: Add tests for LDAP substring search with no strings provided via 51f19c4 libcli/ldap: Cope with substring match with no chunks in ldap_push_filter via 980ecbf ldb: bump version to allow a depencency on the substring crash fix via 1650e8a ldb: Cope with substring match with no chunks in ldb_filter_from_tree via df6574c ldb: Ensure not to segfault on a filter such as (mail=) via b67c906 heimdal_build: Add missing dep on samba4kgetcred via 4b25860 docs: Avoid mentioning a possibly misleading option. via a46a6be tevent: Fix Coverity ID 989236 Operands don't affect result via 45ba921 Bug 8997: change libreplace GPL source to LGPL via 897bfd1 s4-dfs_server: check for netbios aliases in ad_get_referrals (bug #9947) via 57a6c8f dns: Support larger queries when asking forwarder via 81539da idl: Add support for parsing OPT records via 9328284 When message-type is drvupgrade, MSG_DEBUG should be replaced with MSG_PRINTER_DRVUPGRADE. via 865765c Check for WRITE_ACCESS on the file before overriding an EACCESS. via e90f140 Ensure we don't try the open_file_fchmod() if we can't write to the file. via 02a9d78 Remove indentation around code wrapped by unneeded CAN_WRITE. via 7391cae Add early return in file_set_dosmode() on a read only share. via d0ec11d BUG 9881: Check for system libtevent. via 1d610ce s4:winbind: don't leak libnet_context into the main event context (bug #9929) via 62e25dc Fix bug 9900: is_printer_published GUID retrieval via 60bb8f9 printing: explicitly clear PUBLISHED attribute via 6736784 dns: Delete dnsNode objects when they are empty via 1a1e445 dns: Fix allocation of txt_record in txt record tests via a2814d3 dns: more debug debug options in the tests via 5a2d041 winbind4: Fix bug 9832 -- talloc use after free via d4cd828 waf: build PIEs if supported by the compiler via b4378f1 waf: build position independent executables via 097ec58 waf: add --with[out]-pie configure arguments via 0996e95 build: Add missing new line to replaced python shebang line. (Fix bug #9909) via 2aee249 build: Install smbtar in waf build via 06228ec build: Blacklist the release-4-0-0 provision as well via 1100bf2 build: Do not set PATH in install_with_python now we set $PYTHON via 7f88d81 build: Rework BSD_STYLE_STATVFS check to match autoconf build via f27239b lib/replace: Set BROKEN_STRNLEN and BROKEN_STRNDUP on all AIX via 85db5bf docs: Remove all references to testprns via b54aed1 docs: Fix small errors in TOSHARG-Compiling via 68c5915 docs: Remove TOSHARG-HighAvailability which is made obsolete by CTDB via 5bbcf09 docs: Remove out of date and unmaintained Speed page from the HOWTO via 07073fb dns: Add support for MX queries via 46e82a2 More generic check for OpenBSD platform via 9b1fac4 docs: mention AD prerequirements for using idmap_ad via f6f3849 winbind/idmap_ad: be verbose about the user that we fail to map via 27a3cab s3:lib/server_mutex: open mutex.tdb with CLEAR_IF_FIRST via 671943a s3-rpc_server: Ensure we are root when starting and usiing gensec via c497442 VERSION: Bump version number up to 4.0.7... from 4800b9f VERSION: Disable git snapshots for the 4.0.6 release. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-stable - Log - --- Summary of changes: VERSION|2 +- WHATSNEW.txt | 112 +- buildtools/wafsamba/samba_autoconf.py |4 +- buildtools/wafsamba/wafsamba.py| 15 +- dfs_server/dfs_server_ad.c | 35 ++ docs-xml/Samba3-HOWTO/TOSHARG-Compiling.xml|6 +- docs-xml/Samba3-HOWTO/TOSHARG-HighAvailability.xml | 500 docs-xml/Samba3-HOWTO/TOSHARG-Speed.xml| 327 - docs-xml/Samba3-HOWTO/index.xml|4 - docs-xml/manpages/idmap_ad.8.xml |9 +- docs-xml/manpages/nmbd.8.xml |1 - docs-xml/manpages/smb.conf.5.xml |1 - docs-xml/manpages/smbd.8.xml |1 - docs-xml/smbdotconf/domain/allowdnsupdates.xml |4 +- docs-xml/using_samba/appd.xml | 18 - docs-xml/using_samba/ch01.xml |6 - docs-xml/using_samba/ch07.xml
[SCM] Samba Shared Repository - annotated tag samba-4.0.7 created
The annotated tag, samba-4.0.7 has been created at a0db687ac06e6bb00c428599aa51f342c15f4ead (tag) tagging 5e3a3012f3083c40e70f89c1d96ffa6be91aa72a (commit) replaces samba-4.0.6 tagged by Karolin Seeger on Mon Jul 1 09:17:27 2013 +0200 - Log - samba: tag release samba-4.0.7 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) iD8DBQBR0S0HbzORW2Vot+oRAv9cAJwN2dC3xjI69yDDSre/ORBcehddDgCfSIX3 vAxJhcOWoyfR0jl6rDhtK1s= =AA5S -END PGP SIGNATURE- Andreas Schneider (1): BUG 9881: Check for system libtevent. Andrew Bartlett (16): s3-rpc_server: Ensure we are root when starting and usiing gensec docs: Remove out of date and unmaintained Speed page from the HOWTO docs: Remove TOSHARG-HighAvailability which is made obsolete by CTDB docs: Fix small errors in TOSHARG-Compiling docs: Remove all references to testprns lib/replace: Set BROKEN_STRNLEN and BROKEN_STRNDUP on all AIX build: Rework BSD_STYLE_STATVFS check to match autoconf build build: Do not set PATH in install_with_python now we set $PYTHON build: Blacklist the release-4-0-0 provision as well build: Install smbtar in waf build heimdal_build: Add missing dep on samba4kgetcred ldb: Ensure not to segfault on a filter such as (mail=) ldb: Cope with substring match with no chunks in ldb_filter_from_tree ldb: bump version to allow a depencency on the substring crash fix libcli/ldap: Cope with substring match with no chunks in ldap_push_filter torture: Add tests for LDAP substring search with no strings provided Björn Baumbach (1): s4-dfs_server: check for netbios aliases in ad_get_referrals (bug #9947) Björn Jacke (2): winbind/idmap_ad: be verbose about the user that we fail to map docs: mention AD prerequirements for using idmap_ad David Disseldorp (6): waf: add --with[out]-pie configure arguments waf: build position independent executables waf: build PIEs if supported by the compiler printing: explicitly clear PUBLISHED attribute Fix bug 9900: is_printer_published GUID retrieval Bug 8997: change libreplace GPL source to LGPL Jeremy Allison (4): Add early return in file_set_dosmode() on a read only share. Remove indentation around code wrapped by unneeded CAN_WRITE. Ensure we don't try the open_file_fchmod() if we can't write to the file. Check for WRITE_ACCESS on the file before overriding an EACCESS. Kai Blin (6): dns: Add support for MX queries dns: more debug debug options in the tests dns: Fix allocation of txt_record in txt record tests dns: Delete dnsNode objects when they are empty idl: Add support for parsing OPT records dns: Support larger queries when asking forwarder Karolin Seeger (3): VERSION: Bump version number up to 4.0.7... WHATSNEW: Add release notes for Samba 4.0.7. VERSION: Disable git snapshots for the 4.0.7 release. Michael Adam (1): build: Add missing new line to replaced python shebang line. (Fix bug #9909) Michael Wood (1): docs: Avoid mentioning a possibly misleading option. Peng Haitao (1): When message-type is drvupgrade, MSG_DEBUG should be replaced with MSG_PRINTER_DRVUPGRADE. Stefan Metzmacher (2): s3:lib/server_mutex: open mutex.tdb with CLEAR_IF_FIRST s4:winbind: don't leak libnet_context into the main event context (bug #9929) Vadim Zhukov (1): More generic check for OpenBSD platform Volker Lendecke (2): winbind4: Fix bug 9832 -- talloc use after free tevent: Fix Coverity ID 989236 Operands don't affect result --- -- Samba Shared Repository
[SCM] Samba Website Repository - branch master updated
The branch, master has been updated via bc38ac6 Announce Samba 4.0.7. from 7bf4548 Announce Samba 3.6.16. http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master - Log - commit bc38ac61eb910e137ce55ddaad8342f17db7d9fd Author: Karolin Seeger ksee...@samba.org Date: Tue Jul 2 09:47:11 2013 +0200 Announce Samba 4.0.7. Signed-off-by: Karolin Seeger ksee...@samba.org --- Summary of changes: generated_news/latest_10_bodies.html| 54 - generated_news/latest_10_headlines.html |4 +- generated_news/latest_2_bodies.html | 26 history/header_history.html |1 + history/samba-4.0.7.html| 101 +++ latest_stable_release.html |6 +- 6 files changed, 133 insertions(+), 59 deletions(-) create mode 100755 history/samba-4.0.7.html Changeset truncated at 500 lines: diff --git a/generated_news/latest_10_bodies.html b/generated_news/latest_10_bodies.html index b56c433..ea4b4d4 100644 --- a/generated_news/latest_10_bodies.html +++ b/generated_news/latest_10_bodies.html @@ -1,3 +1,16 @@ + h5a name=4.0.702 July 2013/a/h5 + p class=headlineSamba 4.0.7 Available for Download/p + pThis is the latest stable release of the Samba 4.0 series./p + +pThe uncompressed tarballs and patch files have been signed +using GnuPG (ID 6568B7EA). The source code can be +a href=http://samba.org/samba/ftp/stable/samba-4.0.7.tar.gz;downloaded +now/a. A a href=http://samba.org/samba/ftp/patches/patch-4.0.6-4.0.7.diffs.gz; +patch against Samba 4.0.6/a is also available. See +a href=http://samba.org/samba/history/samba-4.0.7.html; the release notes + for more info/a./p + + h5a name=3.6.1619 June 2013/a/h5 p class=headlineSamba 3.6.16 Available for Download/p pThis is the latest stable release of the Samba 3.6 series./p @@ -113,44 +126,3 @@ now/a. A a href=http://samba.org/samba/ftp/patches/patch-4.0.2-4.0.3.diffs.g patch against Samba 4.0.2/a is also available. See a href=http://samba.org/samba/history/samba-4.0.3.html; the release notes for more info/a./p - - - h5a name=4.0.230 January 2013/a/h5 - p class=headlineSamba 4.0.2, 3.6.12 and 3.5.21 bSecurity Releases/b Available for Download/p - pThese are security releases in order to address - a href=http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0213;CVE-2013-0213/a - (Samba 3.0.x to 4.0.1 (incl.) are affected by a bclickjacking issue in SWAT/b) and br - a href=http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0214;CVE-2013-0214 /a - (Samba 3.0.x to 4.0.1 (incl.) are affected by a bpotential XSRF in SWAT/b)./p - -pThe uncompressed tarballs and patch files have been signed -using GnuPG (ID 6568B7EA)./p -p -The source code can be downloaded here: -lia href=http://samba.org/samba/ftp/stable/samba-4.0.2.tar.gz;download -Samba 4.0.2/a,/li -lia href=http://samba.org/samba/ftp/stable/samba-3.6.12.tar.gz;download -Samba 3.6.12/a,/li -lia href=http://samba.org/samba/ftp/stable/samba-3.5.21.tar.gz;download -Samba 3.5.21/a./li -/p - -p -Patches against the parents are also available: -lia href=http://samba.org/samba/ftp/patches/patch-4.0.1-4.0.2.diffs.gz;patch Samba -4.0.1/4.0.2/a,/li -lia href=http://samba.org/samba/ftp/patches/patch-3.6.11-3.6.12.diffs.gz;patch -Samba 3.6.11/3.6.12/a,/li -lia href=http://samba.org/samba/ftp/patches/patch-3.5.20-3.5.21.diffs.gz;patch -Samba 3.5.20/3.5.21/a./li -/p - -p -Please see the release notes for more info: -lia href=http://samba.org/samba/history/samba-4.0.2.html;release notes -Samba 4.0.2/a,/li -lia href=http://samba.org/samba/history/samba-3.6.12.html;release notes -Samba 3.6.12/a,/li -lia href=http://samba.org/samba/history/samba-3.5.21.html;release notes -Samba 3.5.21/a./li -/p diff --git a/generated_news/latest_10_headlines.html b/generated_news/latest_10_headlines.html index e0dba2e..3dcbebe 100644 --- a/generated_news/latest_10_headlines.html +++ b/generated_news/latest_10_headlines.html @@ -1,4 +1,6 @@ ul + li 02 July 2013 a href=#4.0.7Samba 4.0.7 Available for Download/a/li + li 19 June 2013 a href=#3.6.16Samba 3.6.16 Available for Download/a/li li 21 May 2013 a href=#4.0.6Samba 4.0.6 Available for Download/a/li @@ -16,6 +18,4 @@ li 18 March 2013 a href=#3.6.13Samba 3.6.13 Available for Download/a/li li 05 February 2013 a href=#4.0.3Samba 4.0.3 Available for Download/a/li - - li 30 January 2013 a href=#4.0.2Samba 4.0.2, 3.6.12 and 3.5.21 Security Releases Available for Download/a/li /ul diff --git a/generated_news/latest_2_bodies.html b/generated_news/latest_2_bodies.html index cf0a1f9..cdc55f1 100644 --- a/generated_news/latest_2_bodies.html +++ b/generated_news/latest_2_bodies.html @@ -1,3 +1,16 @@ +
[SCM] Samba Shared Repository - branch v4-0-test updated
The branch, v4-0-test has been updated via 9f7cbc7 s3:smbd:smb2: fix setting of scavenge timeout when reconnecting durable handles via e309d2e s3:smbd: call scavenger_schedule_disconnected() from close normal file for durable handles via f688ed3 s3:smbd: add a scavenger process for disconnected durable handles via 888694d s3:locking: add function share_mode_cleanup_disconnected() via 4e423bc s3:locking: improve debug output of parse_share_modes() via 73f7c56 s3:locking: no need to make a file_id passed by value a constant via 1446ff4 s3:locking:brlock: add function brl_cleanup_disconnected() via 66eedcd s3:locking:brlock: explain the lockdb_clean semantic better in brl_reconnect_disconnected() via b25d4ae s3:locking:brlock: let validate_lock_entries keep entries for disconnected servers in traverses via 383e20d s3:locking:brlock: improve the comment for the brl self cleaning code via ff5e657 s3:locking:brlock: use serverids_exist to validate_lock_entries via 9fa4365 s3:smbXsrv_open: add function smbXsrv_open_cleanup() via db0325f s3:smbXsrv_open: factor out smbXsrv_open_global_parse_record via 17106d7 s3:smbXsrv_open: add smbXsrv_open_global_traverse() via e5c3875 lib: Add prctl_set_comment to utils. via 5eccfbf s3:smbd:smb2: fix segfault (access after free) in durable disconnect code via af17545 s3:smbd: add debugging to close code (regarding disconnect of a durable) via 6a8cd1c s3:smbd: use smbXsrv_open_close() instead of smbXsrv_open_update() from 5c8e5ba VERSION: Bump version number up to 4.0.8... http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test - Log - commit 9f7cbc7e8916268da7fa6e2e7bd4e1a1154ab1ab Author: Michael Adam ob...@samba.org Date: Thu Apr 18 13:11:03 2013 +0200 s3:smbd:smb2: fix setting of scavenge timeout when reconnecting durable handles The bug fixed with this commit led to reconnected durable handles having a disconnect timeout of 0 msec. This fix re-establishes the original timeout for the reconnected handle. Pair-Programmed-With: Stefan Metzmacher me...@samba.org Signed-off-by: Stefan Metzmacher me...@samba.org Signed-off-by: Michael Adam ob...@samba.org (cherry picked from commit beb9a27180e5570337381d03fac55bbe6d1637e0) The last 18 patches address bug #9930 - smbd did not cleanup disonnected durable handles. Autobuild-User(v4-0-test): Karolin Seeger ksee...@samba.org Autobuild-Date(v4-0-test): Tue Jul 2 12:45:17 CEST 2013 on sn-devel-104 commit e309d2e3cf1e32b1302a38915fc5e3165626e9f3 Author: Gregor Beck gb...@sernet.de Date: Wed Mar 20 10:01:43 2013 +0100 s3:smbd: call scavenger_schedule_disconnected() from close normal file for durable handles Signed-off-by: Gregor Beck gb...@sernet.de Reviewed-by: Michael Adam ob...@samba.org Reviewed-by: Stefan Metzmacher me...@samba.org (cherry picked from commit c2ef5182e32fafeb3e279d9fc3a2a409e4aa0543) commit f688ed37faa5c4e8979c0ae6e18859e9b0dc020b Author: Gregor Beck gb...@sernet.de Date: Thu Feb 7 15:26:37 2013 +0100 s3:smbd: add a scavenger process for disconnected durable handles Pair-Programmed-With: Stefan Metzmacher me...@samba.org Signed-off-by: Gregor Beck gb...@sernet.de Signed-off-by: Stefan Metzmacher me...@samba.org Reviewed-by: Michael Adam ob...@samba.org (cherry picked from commit 1ed22ba4b7998c1fc29476e931bd463f2bc1ba7e) Conflicts: source3/Makefile.in commit 888694d3b15c54696e9ccde4b37a4eb1e98f2e65 Author: Gregor Beck gb...@sernet.de Date: Wed Mar 13 11:35:37 2013 +0100 s3:locking: add function share_mode_cleanup_disconnected() For a given file, clean share mode entries for a given persistent file id. Pair-Programmed-With: Michael Adam ob...@samba.org Pair-Programmed-With: Stefan Metzmacher me...@samba.org Signed-off-by: Gregor Beck gb...@sernet.de Signed-off-by: Michael Adam ob...@samba.org Signed-off-by: Stefan Metzmacher me...@samba.org (cherry picked from commit f608bedfca4118b7e3606802df40e266bcc099d8) commit 4e423bc59703994842d6c271203894c485e9faa3 Author: Gregor Beck gb...@sernet.de Date: Wed Mar 20 10:22:06 2013 +0100 s3:locking: improve debug output of parse_share_modes() Signed-off-by: Gregor Beck gb...@sernet.de Reviewed-by: Michael Adam ob...@samba.org Reviewed-by: Stefan Metzmacher me...@samba.org (cherry picked from commit 0ac0b35dad796d10cf04ab77a53a926420cc0589) commit 73f7c56e1c890d9e50665b0bdd23234925d48112 Author: Gregor Beck gb...@sernet.de Date: Tue Mar 12 15:10:51 2013 +0100 s3:locking: no need to make a file_id passed by value a constant Signed-off-by: Gregor Beck gb...@sernet.de Reviewed-by: Michael
[SCM] Samba Shared Repository - branch v4-1-test updated
The branch, v4-1-test has been updated via bef3fc8 tsocket: Pass the full port number to getaddrinfo(). via 3d20d20 smbtorture: Make cracksname easier to debug by outputing the offered format via 74dd365 Fix a missing parenthesis in the LDAP search request via af41eb6 docs-xml/manpages/smbclient.1.xml: fix case of -T flag in example. via 59462f2 winbindd and nmbd don't set their umask to zero on startup like smbd does. via 011dc52 sharesec: Document --view-all via 4da8984 sharesec: Document -v/--view via 780e2b0 sharesec: Implement --view-all via 4ee73fd s3:smbd/close remove filesystem lock before removing sharemode via 935992f s3:smbd/close use common exit path via 245b5ff s3:lib add mapping for ETXTBSY via 526f0df s3-ctdb: Fix auto-enabling of CTDB readonly support via c9924eb s3:smbd/aio mark file as modified in the SMB2 case via e65c532 nsswitch: fix a comment via 48ae86f heimdal_build: Add missing dep on samba4kgetcred via 7bf8fc7 torture: Add tests for LDAP substring search with no strings provided via 70cb7fd libcli/ldap: Cope with substring match with no chunks in ldap_push_filter via 4ca9639 ldb: bump version to allow a depencency on the substring crash fix via 1a279f7 ldb: Cope with substring match with no chunks in ldb_filter_from_tree via 32d0b75 Note how vfs_gpfs uses the acl map full control parameter. via 056e636 Add missing documentation for vfs_zfsacl. via b00d9d2 Use existing acl map full control parameter to control the adding of the DELETE_CHILD parameter on NFSv4/ZFS/GPFS file ACE's. via 398ee49 s3/smbclient: fix incorrect command tab completions via d544d17 build: Remove the struct MD5Context conf file check. via 9b88166 lsa4: Fix a set but unused variable warning via 0ee8650 ldb: Ensure not to segfault on a filter such as (mail=) via bbe09b3 Add missing SMB2/SMB3 share capability flag define via 06e5401 lsa4: Fix a set but unused variable warning via 7d5daaa lsa4: Remove an unused variable via 2448fe3 lsa4: Remove an unused variable via 720b4d3 lsa4: Remove an unused variable via 6c49f90 Fix glusterfs backend crash found at the Microsoft interop event. via b96cea4 Fix some blank line endings via d2642cb dns: Fix CID 1034969 Uninitialized scalar variable via ad86e2a s3:passdb/pdb_util make pdb_create_builtin consider whether backend deals with BUILTIN via 2d2d13e s3:passdb add a gid argument to pdb_create_builtin_alias via 212baed s3:utils/net_sam make use of pdb_create_builtin helper function via df41835 s3:passdb expose pdb_create_builtin function via 6a048b4 s3:passdb/pdb_tdb add parameter to control handling of BUILTIN via 324b3cc s3:passdb/pdb_ldap remove an unnecessary check via 01e094b s3:passdb/pdb_ldap make the module handle well-known via 987de8a s3:passdb make pdb_sid_to_id honor backend responsibilities via 55dd9e6 s3:passdb/pdb_samba_dsdb make the module handle well-known via 56df37d s3:lib/util_sid_passdb make use of pdb_is_responsible_for_* functions via 0ad38d7 s3:passdb add pdb_*_is_responsible_for* functions via 9eb67f2 s3:passdb add idmap control functions via 0ad89c3 s3:passdb/samba_dsdb fix some compiler warnings via e211b5c s3:passdb/samba_dsdb fix a compiler warning via e17bc56 s3:utils/net_lookup fix a format-error via 88c72fc s4-winbind: Add special case for BUILTIN domain via d4091c5 Fix bug #9166 - Starting smbd or nmbd with stdin from /dev/null results in EOF on stdin via fc13489 build: Build with system md5.h on OpenIndiana via 5c4772e Re-add umask(0) code removed by commit 3a7c2777ee0de37d758fe81d67d6836a8354825e via fcc43cf Fix xx_path() - return check from mkdir() is incorrect. via d924da9 docs/vfs_catia: rework man page via 8ac17ff docs/vfs_catia: remove space-char mapping recommendation via 8d75965 vfs_catia: use translate direction enum instead of int via 4cd7e1d vfs_streams_xattr: Do not attempt to write empty attribute twice via 9f25ad4 librpc: Shorten dcerpc_binding_handle_call a bit via 7982d2a librpc: Use tevent_req_poll_ntstatus via 20bede7 libsmbclient: Fix typos via fffb701 tsocket: Add some const via cf86f3e gencache: Simplify gencache_init a bit via c71d6ec genrand: Slightly simplify do_reseed via dd0e38b tevent: Fix Coverity ID 989236 Operands don't affect result via f1781ad dsdb: remove a wrong comment in dsdb_check_access_on_dn_internal() via 122214b dsdb: don't allow a missing nTSecurityDescriptor in dsdb_get_sd_from_ldb_message() via 5959aff dsdb: use AS_SYSTEM | SHOW_RECYCLED for
autobuild: intermittent test failure detected
The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2013-07-02-1855/flakey.log The samba3 build logs are available here: http://git.samba.org/autobuild.flakey/2013-07-02-1855/samba3.stderr http://git.samba.org/autobuild.flakey/2013-07-02-1855/samba3.stdout The source4 build logs are available here: http://git.samba.org/autobuild.flakey/2013-07-02-1855/samba.stderr http://git.samba.org/autobuild.flakey/2013-07-02-1855/samba.stdout The top commit at the time of the failure was: commit 0b58eed3351e207b0a0f0d32fe37ea5bee9dbc33 Author: Andreas Schneider a...@samba.org Date: Mon Jul 1 17:05:33 2013 +0200 tsocket: Pass the full port number to getaddrinfo(). The code stripped port numbers above down to 4 digits. Signed-off-by: Andreas Schneider a...@samba.org Reviewed-by: Jeremy Allison j...@samba.org Autobuild-User(master): Jeremy Allison j...@samba.org Autobuild-Date(master): Mon Jul 1 21:10:53 CEST 2013 on sn-devel-104
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via caf3af3 s3-winbind: Allow sec_initial_uid() to store creds. via a4af4fa selftest: Use higher ip numbers. via d5511b1 selftest: Add a newline to root entries in the nss files. via 7392985 selftest: Fix domain name of plugindc. via bf5bc72 torture: Don't segfault in smb2.session on error. via d295e18 torture: Don't segfault in raw.session on error. via 474eee0 torture: Fix comparsion of uninitalized bytes. from 0b58eed tsocket: Pass the full port number to getaddrinfo(). http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit caf3af33deeea9bee61a741fcc991285006cc6f5 Author: Andreas Schneider a...@samba.org Date: Mon Jul 1 13:02:48 2013 +0200 s3-winbind: Allow sec_initial_uid() to store creds. Signed-off-by: Andreas Schneider a...@samba.org Reviewed-by: Jeremy Allison j...@samba.org Autobuild-User(master): Jeremy Allison j...@samba.org Autobuild-Date(master): Tue Jul 2 23:26:24 CEST 2013 on sn-devel-104 commit a4af4fa9db768dce2e009ba132cf88525a9b8314 Author: Andreas Schneider a...@samba.org Date: Mon Jul 1 13:02:47 2013 +0200 selftest: Use higher ip numbers. 127.0.0.2 is used by some distributions to resolve the own hostname. Signed-off-by: Andreas Schneider a...@samba.org Reviewed-by: Jeremy Allison j...@samba.org commit d5511b125ccfd9c46cad63796aa49258bcc0ae38 Author: Andreas Schneider a...@samba.org Date: Mon Jul 1 13:02:46 2013 +0200 selftest: Add a newline to root entries in the nss files. Signed-off-by: Andreas Schneider a...@samba.org Reviewed-by: Jeremy Allison j...@samba.org commit 7392985b2981cb82be5f99255faae1605972be53 Author: Andreas Schneider a...@samba.org Date: Mon Jul 1 13:02:45 2013 +0200 selftest: Fix domain name of plugindc. Signed-off-by: Andreas Schneider a...@samba.org Reviewed-by: Jeremy Allison j...@samba.org commit bf5bc723da0605c7bc796f5e047e3f041db0b943 Author: Andreas Schneider a...@samba.org Date: Mon Jul 1 13:02:44 2013 +0200 torture: Don't segfault in smb2.session on error. Signed-off-by: Andreas Schneider a...@samba.org Reviewed-by: Jeremy Allison j...@samba.org commit d295e18409a2e18e52c5bb76fec0e0540b6199cf Author: Andreas Schneider a...@samba.org Date: Mon Jul 1 13:02:43 2013 +0200 torture: Don't segfault in raw.session on error. Signed-off-by: Andreas Schneider a...@samba.org Reviewed-by: Jeremy Allison j...@samba.org commit 474eee0df7893a3a4546e1c6ea47220700c5b99f Author: Andreas Schneider a...@samba.org Date: Tue Jul 2 15:24:40 2013 +0200 torture: Fix comparsion of uninitalized bytes. As we compare string make sure we have the null terminator. Found by valgrind. Signed-off-by: Andreas Schneider a...@samba.org Reviewed-by: Volker Lendecke v...@samba.org --- Summary of changes: selftest/target/Samba.pm | 11 ++- selftest/target/Samba3.pm |6 -- selftest/target/Samba4.pm |2 +- source3/winbindd/winbindd_ccache_access.c |2 +- source4/torture/raw/session.c |4 +++- source4/torture/smb2/session.c|2 +- 6 files changed, 16 insertions(+), 11 deletions(-) Changeset truncated at 500 lines: diff --git a/selftest/target/Samba.pm b/selftest/target/Samba.pm index fa18985..ab3851f 100644 --- a/selftest/target/Samba.pm +++ b/selftest/target/Samba.pm @@ -150,11 +150,12 @@ sub get_interface($) $netbiosname = lc($netbiosname); my %interfaces = (); -$interfaces{locals3dc2} = 2; -$interfaces{localmember3} = 3; -$interfaces{localshare4} = 4; -$interfaces{localktest6} = 6; -$interfaces{maptoguest} = 7; +$interfaces{locals3dc2} = 3; +$interfaces{localmember3} = 4; +$interfaces{localshare4} = 5; + +$interfaces{localktest6} = 7; +$interfaces{maptoguest} = 8; # 11-16 used by selftest.pl for client interfaces diff --git a/selftest/target/Samba3.pm b/selftest/target/Samba3.pm index 91a8133..26f5e92 100755 --- a/selftest/target/Samba3.pm +++ b/selftest/target/Samba3.pm @@ -1124,7 +1124,8 @@ $unix_name:x:$unix_uid:$unix_gids[0]:$unix_name gecos:$prefix_abs:/bin/false pdbtest:x:$uid_pdbtest:$gid_nogroup:pdbtest gecos:$prefix_abs:/bin/false ; if ($unix_uid != 0) { - print PASSWD root:x:$uid_root:$gid_root:root gecos:$prefix_abs:/bin/false; + print PASSWD root:x:$uid_root:$gid_root:root gecos:$prefix_abs:/bin/false +; } close(PASSWD); @@ -1139,7 +1140,8 @@ domusers:X:$gid_domusers: domadmins:X:$gid_domadmins: ; if ($unix_gids[0] != 0) { - print GROUP root:x:$gid_root:; + print GROUP root:x:$gid_root: +;
[SCM] CTDB repository - branch 1.2.40 updated - ctdb-1.2.64-33-gdc84c8e
The branch, 1.2.40 has been updated via dc84c8ed12ed1bf136827b55128c2e74b38bdf55 (commit) via 20f730070d9dfbff5e29461a32dec8ee2a185a68 (commit) via 345f17d9bcf4b4f0f246b951d55458e1f774f5df (commit) via c7156f49616600d1ad97262115728fbb42ef5574 (commit) via d2f641181927f427b80705e28b88777e50a88433 (commit) via 1fbe90b28f11d18ab1a0e3e15eaa42c6de75683f (commit) via 8196c25749e9b12628768bdd96f9d85bd7166c07 (commit) via 7b98e4cae9b3e52256bdf5ec42aedabe236b7de5 (commit) via d450c31e37fd4b38a6ac3245a85082769b78935f (commit) via 877923c8aee49eb3ef610d83727f41ae2f9d09ba (commit) via 350ba6907b8f7122c4df21879ffbb3b74e8df93c (commit) via 24a0bc600acbe3deea9549ce87567e9e0f779a89 (commit) via 42c8c05d23dcd22404d6c761171ffe210734150c (commit) via c0626646d87fe477bbbd425ef94513f466b2e876 (commit) via 324d70e26bef94fab1c8c9b8c17cd0a7817866d9 (commit) via 1a03e2f0366800eeb15308932f6483f48e2547ea (commit) via df6d7554ccb6c53bcff9bded85ed4882f335eaee (commit) via 1c64d205d92da6b5a9af98190755ebce5e1176f1 (commit) via 53ecceb8e0dba4149005bb4b042c0845470e859b (commit) via c311947f93c5c01a3819c401566dfa9dc87855d0 (commit) via ca276e0ceb0952ca2832829d8bfc44074915ffe5 (commit) via d29d729ddb26fc5f8ce622a2e733c57baa3733a6 (commit) via 5c62e4313c505baba73beab9fcb097ea4e10d452 (commit) via faf8a5fd78ca4854bf103bb4317758082f127684 (commit) via 2a2de0939e1a30a4eb8839dbd49d8d8c80609d9c (commit) via c18dbafff80494277d2bb1c91f67cdf3c2425ad8 (commit) via 911534f39708848087911f2ab69dbcbc59c12295 (commit) via 023d4825375f49e8eeaa25ff54db4fc5eeea9ac8 (commit) via c7665d48f1ac5baecfd64502f419215b1fb259d0 (commit) via 5f235169728576e008067d08eefa0661d4a6b520 (commit) via a2bc855110b908ed72941bdfe176a79a5b5876a6 (commit) via 7a77f8661c4b7919c0b575fb79a22e62391e7654 (commit) via c02afd52b6788dfe6b051f185465ff6854f7a845 (commit) from 4560186b514221bbde89ebc0124380007a22ed08 (commit) http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=1.2.40 - Log - commit dc84c8ed12ed1bf136827b55128c2e74b38bdf55 Author: Amitay Isaacs ami...@gmail.com Date: Tue Jul 2 17:19:05 2013 +1000 New version 1.2.65 Signed-off-by: Amitay Isaacs ami...@gmail.com commit 20f730070d9dfbff5e29461a32dec8ee2a185a68 Author: Amitay Isaacs ami...@gmail.com Date: Tue Jul 2 12:40:37 2013 +1000 ctdbd: Don't ban self if init or shutdown event fails There is no point in banning the node if init or shutdown event times out since it's going to quit anyway. Signed-off-by: Amitay Isaacs ami...@gmail.com (cherry picked from commit ef1c4e99ca66e7a990bc557f34abb624c315e6ba) commit 345f17d9bcf4b4f0f246b951d55458e1f774f5df Author: Amitay Isaacs ami...@gmail.com Date: Thu Jun 27 17:46:43 2013 +1000 doc: The second half of monitoring is only for recovery master Signed-off-by: Amitay Isaacs ami...@gmail.com (cherry picked from commit fcd5e1f04c5fe6c98399429b8f0918b8779acba6) commit c7156f49616600d1ad97262115728fbb42ef5574 Author: Michael Adam ob...@samba.org Date: Wed Jun 26 09:23:22 2013 +0200 recoverd: when the recmaster is banned, use that information when forcing an election When we trigger an election because the recmaster considers itself inactive, update our local nodemap with the recmaster's flags before calling force_election(). This way, we don't send the inactive node freeze commands (e.g.) that may fail and then lead to ourselves getting banned. The theory is that this should help avoiding banning loops. Signed-off-by: Michael Adam ob...@samba.org (cherry picked from commit 932360992b08a5483d90c0590218ba0fd756119e) commit d2f641181927f427b80705e28b88777e50a88433 Author: Michael Adam ob...@samba.org Date: Wed Jun 26 07:11:51 2013 +0200 recoverd: fix a comment typo Signed-off-by: Michael Adam ob...@samba.org (cherry picked from commit 741944f118e98f178b860194eecb215180949d18) commit 1fbe90b28f11d18ab1a0e3e15eaa42c6de75683f Author: Michael Adam ob...@samba.org Date: Fri Jun 21 17:57:37 2013 +0200 recoverd: fix a comment in main_loop Signed-off-by: Michael Adam ob...@samba.org (cherry picked from commit ac06c46e4a80c635f6094b5ac6f0bf3e3a02db95) commit 8196c25749e9b12628768bdd96f9d85bd7166c07 Author: Michael Adam ob...@samba.org Date: Fri Jun 21 14:06:22 2013 +0200 recoverd: eliminate some trailing spaces from ctdb_election_win() Signed-off-by: Michael Adam ob...@samba.org (cherry picked from commit df30c0a05ed908fc2a997c56ff5484736b23b70f) commit 7b98e4cae9b3e52256bdf5ec42aedabe236b7de5 Author: Martin Schwenke mar...@meltin.net Date: Fri Jun 28 16:31:07 2013 +1000 recoverd:
[SCM] CTDB repository - annotated tag ctdb-1.2.65 created - ctdb-1.2.65
The annotated tag, ctdb-1.2.65 has been created at cbc43cae7cc3b7901cc5bf77d4c103ff699d0e88 (tag) tagging dc84c8ed12ed1bf136827b55128c2e74b38bdf55 (commit) replaces ctdb-1.2.64 tagged by Amitay Isaacs on Wed Jul 3 10:16:51 2013 +1000 - Log - new version 1.2.65 Amitay Isaacs (22): recoverd: When updating flags on nodes, send updated flags and not old flags recoverd: Print banning message only after verifying pnn freeze: Log message from ctdb_start_freeze() and ctdb_control_freeze() freeze: If priority is invalid here, it's time to abort freeze: Make ctdb_start_freeze() a void function banning: Log ban state changes for other nodes at higher debug level recovered: Remove old comment as the code corresponding to that has gone away recoverd: Set node_flags information as soon as we get nodemap recoverd: Also check if current node is in recovery when it is banned banning: Make ctdb_local_node_got_banned() a void function banning: No need to check if banned pnn is for local node banning: Do not come out of ban if databases are not frozen recoverd: Do not set banning credits on a node if current node is inactive recoverd: Always do an early exit from main_loop if node is stopped or banned recoverd: No need to check if node is recovery master when inactive recoverd: Update capabilities only if the current node is active recoverd: Delay the initial election if node is started in stopped state recoverd: Move code to ban other nodes after we get local node flags recoverd: Refactor code to ban misbehaving nodes doc: The second half of monitoring is only for recovery master ctdbd: Don't ban self if init or shutdown event fails New version 1.2.65 Martin Schwenke (3): recoverd: Clarify some misleading log messages tools/ctdb: Add force option to recover command recoverd: Don't continue if the current node gets banned Michael Adam (5): recoverd: remove bogus comment qqq from add prototype new banning code recoverd: eliminate some trailing spaces from ctdb_election_win() recoverd: fix a comment in main_loop recoverd: fix a comment typo recoverd: when the recmaster is banned, use that information when forcing an election Stefan Metzmacher (3): server/banning: also release all ips if we're banning ourself server/recoverd: do takeover_run after verifying the reclock file recoverd: try to become the recovery master if we have the capability, but the current master doesn't --- -- CTDB repository