Re: [Samba] frequent tdb corruption

[Timur I. Bakeyev]

I suspect, that ML software removes attachments, so please put
it somewhere on the Web.

Regards,
Timur Bakeyev.


On Tue, May 14, 2013 at 1:57 PM, Adam Thorn  wrote:

>
> > [global]
> >include = /data/config/samba/servers/%i
> >
> > and I've attached the result from running testparm on one of those
> > included files.
>
> ..that attachment seemed be mislaid, so it's attached here instead!
>
> Adam
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] samba 4.0.3 compiling fails on freebsd 9.1

[Timur I. Bakeyev]

Use ports for this, please.


On Mon, Mar 11, 2013 at 6:32 PM, Joeri Vanthienen
wrote:

> Hi,
>
> I have a problem compiling samba 4.0.3 on freebsd 9.1.
>
> root@freebsd-san:/root/samba-4.0.3 # uname -a
> FreeBSD freebsd-san 9.1-RELEASE FreeBSD 9.1-RELEASE #0 r243825: Tue
> Dec  4 09:23:10 UTC 2012
> r...@farrell.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  amd64
> root@freebsd-san:/root/samba-4.0.3 #
>
> I've installed the devel/libinotify port and there is a header file
> located at "/usr/local/include/sys/inotify.h".
> Am I missing something?
>
> 
> [3409/3611] Linking default/source4/lib/policy/py-policy.so
> [3410/3611] Linking
> default/source4/dsdb/samdb/ldb_modules/libldb-objectclass.so
> [3411/3611] Linking
> default/source4/dsdb/samdb/ldb_modules/libldb-descriptor.so
> [3412/3611] Linking default/source4/ntvfs/libntvfs.so
> default/source4/ntvfs/sysdep/inotify_1.o: In function `inotify_setup':
> inotify.c:(.text+0x508): undefined reference to `inotify_init'
> default/source4/ntvfs/sysdep/inotify_1.o: In function `watch_destructor':
> inotify.c:(.text+0x8d4): undefined reference to `inotify_rm_watch'
> default/source4/ntvfs/sysdep/inotify_1.o: In function `inotify_watch':
> inotify.c:(.text+0x9c5): undefined reference to `inotify_add_watch'
> inotify.c:(.text+0xa21): undefined reference to `inotify_rm_watch'
> inotify.c:(.text+0xac6): undefined reference to `inotify_rm_watch'
> Waf: Leaving directory `/root/samba-4.0.3/bin'
> Build failed:  -> task failed (err #1):
> {task: cc_link
>
> inotify_1.o,vfs_smb2_6.o,vfs_ipc_12.o,ipc_rap_12.o,rap_server_12.o,pvfs_acl_1.o,pvfs_acl_xattr_3.o,vfs_cifs_5.o,vfs_simple_7.o,svfs_util_7.o,vfs_unixuid_1.o,sys_lease_3.o,sys_notify_2.o,ntvfs_base_1.o,ntvfs_generic_1.o,ntvfs_interface_1.o,ntvfs_util_1.o,pvfs_acl_nfs4_4.o,server_info_1.o,share_info_1.o,vfs_print_11.o,vfs_cifs_posix_9.o,svfs_util_9.o,vfs_posix_5.o,pvfs_util_5.o,pvfs_search_5.o,pvfs_dirlist_5.o,pvfs_fileinfo_5.o,pvfs_unlink_5.o,pvfs_mkdir_5.o,pvfs_open_5.o,pvfs_read_5.o,pvfs_flush_5.o,pvfs_write_5.o,pvfs_fsinfo_5.o,pvfs_qfileinfo_5.o,pvfs_setfileinfo_5.o,pvfs_rename_5.o,pvfs_resolve_5.o,pvfs_shortname_5.o,pvfs_lock_5.o,pvfs_oplock_5.o,pvfs_wait_5.o,pvfs_seek_5.o,pvfs_ioctl_5.o,pvfs_xattr_5.o,pvfs_streams_5.o,pvfs_notify_5.o,pvfs_sys_5.o,xattr_system_5.o,vfs_nbench_14.o,init_1.o,brlock_1.o,brlock_tdb_1.o,opendb_1.o,opendb_tdb_1.o,notify_1.o
> -> libntvfs.so}
> *** [all] Error code 1
>
> Stop in /root/samba-4.0.3.
>
> Thanks.
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba 4 Replication Problem

[Timur I. Bakeyev]

Hi, Ricardo!

That's not the FreeBSD port. Dunno, where did you get that. Please, update
your ports tree with 'make update' via SVN or portsnap. And better before
building one remove all the installed dependencies you got from this port.

Regards,
Timur.


On Thu, Feb 28, 2013 at 6:14 PM, Ricardo Suguita wrote:

> Yes, Samba4 was installed by ports
>
> ===
>
> cd /usr/ports
> fetch -o - -q https://bitbucket.org/gugabsd/**freebsd-samba4-port/get/**
> default.tar.gz<https://bitbucket.org/gugabsd/freebsd-samba4-port/get/default.tar.gz>|
>  tar zxvf -
> mv gugabsd-freebsd-samba4-port-**d638b66aa1fe net/samba4
> cd net/samba4
>
> make install clean
>
> ==
>
> Thanks!
>
>
>
>
> On 28-02-2013 13:13, Timur I. Bakeyev wrote:
>
>> Do yo use port version of Samba4? If not - why?
>>
>>
>> On Thu, Feb 28, 2013 at 4:50 PM, Ricardo Suguita > >wrote:
>>
>>  Hi ,
>>>
>>> I 've been trying to get my 2 Samba DCs to replicate between each other
>>> but it fails
>>>
>>> DC1: Freebsd-9.1-Release, Samba 4.02, hostname ldap1, objectGUID:
>>> a2454bb4-9f94-4879-a5ff-c1a40537cb5e
>>>
>>> DC2: Freebsd-9.1-Release, Samba 4.02, hostname ldap2, objectGUID:
>>> 0103c98e-0b54-4ca4-a4e5-2259fa6b0563
>>>
>>>
>>> ===the output showrepl command==
>>> [root@ldap1 ~]# samba-tool drs showrepl
>>> Default-First-Site-Name\LDAP1
>>> DSA Options: 0x0001
>>> DSA object GUID: 0103c98e-0b54-4ca4-a4e5-2259fa6b0563
>>> DSA invocationId: d9975fad-ca2d-447d-8138-0fd5957f8fa3
>>>
>>>  INBOUND NEIGHBORS 
>>> ERROR(runtime): DsReplicaGetInfo of type 0 failed - (-1073610723,
>>> 'NT_STATUS_RPC_PROTOCOL_ERROR')
>>> ====
>>>
>>>
>>> ===the output host -t 
>>> [root@ldap1 ~]# host -t CNAME 0103c98e-0b54-4ca4-a4e5-2259fa6b0563._
>>> msdcs.**prefeitura.unicamp.br 
>>> <http://msdcs.prefeitura.**unicamp.br<http://msdcs.prefeitura.unicamp.br>
>>> >.
>>> 0103c98e-0b54-4ca4-a4e5-2259fa6b0563._msdcs.**prefeitu**
>>> ra.unicamp.br <http://prefeitura.unicamp.br><http://msdcs.**
>>> prefeitura.unicamp.br <http://msdcs.prefeitura.unicamp.br>>is an alias
>>> for
>>> ldap1.prefeitura.unicamp.br.
>>> 0103c98e-0b54-4ca4-a4e5-2259fa6b0563._msdcs.**prefeitu**
>>> ra.unicamp.br <http://prefeitura.unicamp.br><http://msdcs.**
>>> prefeitura.unicamp.br <http://msdcs.prefeitura.unicamp.br>>is an alias
>>> for
>>>
>>> dc1.prefeitura.unicamp.br.
>>> [root@ldap1 ~]#
>>>
>>> ===the output host -t 
>>> [root@ldap1 ~]# host -t CNAME a2454bb4-9f94-4879-a5ff-c1a40537cb5e._
>>> msdcs.**prefeitura.unicamp.br 
>>> <http://msdcs.prefeitura.**unicamp.br<http://msdcs.prefeitura.unicamp.br>
>>> >.
>>> a2454bb4-9f94-4879-a5ff-c1a40537cb5e._msdcs.**prefeitu**
>>> ra.unicamp.br <http://prefeitura.unicamp.br><http://msdcs.**
>>> prefeitura.unicamp.br <http://msdcs.prefeitura.unicamp.br>>is an alias
>>> for
>>>
>>> ldap2.prefeitura.unicamp.br.
>>> [root@ldap1 ~]#
>>>
>>> === the log error on DC1=
>>> dns child failed to find name 'a2454bb4-9f94-4879-a5ff-
>>> c1a40537cb5e._
>>> msdcs.**prefeitura.unicamp.br 
>>> <http://msdcs.prefeitura.**unicamp.br<http://msdcs.prefeitura.unicamp.br>>'
>>> of
>>>
>>> type A
>>>
>>> === the log error on DC2 =
>>> dns child failed to find name '0103c98e-0b54-4ca4-a4e5-
>>> 2259fa6b0563._
>>> msdcs.**prefeitura.unicamp.br 
>>> <http://msdcs.prefeitura.**unicamp.br<http://msdcs.prefeitura.unicamp.br>>'
>>> of
>>>
>>> type A
>>>
>>>
>>> I followed step-by-step the Samba 4 Wiki and I don't know whats wrong.
>>> Any ideas ?
>>>
>>> Thanks !
>>>
>>> --
>>> Ricardo Suguita
>>> Analista de Redes
>>> CSCO11723146
>>> Prefeitura Unicamp
>>> Ramal 14619 // Fone +55(19)3521-4619
>>> http://www.prefeitura.unicamp.br 
>>> <http://www.prefeitura.**unicamp.br<http://www.prefeitura.unicamp.br>
>>> >
>>>
>>> Cidade Universitária Zeferino Vaz
>>> Rua Roxo Moreira, 1831
>>> Campinas, SP – Brasil
>>>
>>> --
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions:  
>>> https://lists.samba.org/mailman/options/samba<https://lists.samba.org/**mailman/options/samba>
>>> <https://**lists.samba.org/mailman/**options/samba<https://lists.samba.org/mailman/options/samba>
>>> >
>>>
>>>
>
> --
> Ricardo Suguita
> Analista de Redes
> CSCO11723146
> Prefeitura Unicamp
> Ramal 14619 // Fone +55(19)3521-4619
> http://www.prefeitura.unicamp.**br <http://www.prefeitura.unicamp.br>
> Cidade Universitária Zeferino Vaz
> Rua Roxo Moreira, 1831
> Campinas, SP – Brasil
>
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba 4 Replication Problem

[Timur I. Bakeyev]

Do yo use port version of Samba4? If not - why?


On Thu, Feb 28, 2013 at 4:50 PM, Ricardo Suguita wrote:

> Hi ,
>
> I 've been trying to get my 2 Samba DCs to replicate between each other
> but it fails
>
> DC1: Freebsd-9.1-Release, Samba 4.02, hostname ldap1, objectGUID:
> a2454bb4-9f94-4879-a5ff-**c1a40537cb5e
> DC2: Freebsd-9.1-Release, Samba 4.02, hostname ldap2, objectGUID:
> 0103c98e-0b54-4ca4-a4e5-**2259fa6b0563
>
> ===the output showrepl command==
> [root@ldap1 ~]# samba-tool drs showrepl
> Default-First-Site-Name\LDAP1
> DSA Options: 0x0001
> DSA object GUID: 0103c98e-0b54-4ca4-a4e5-**2259fa6b0563
> DSA invocationId: d9975fad-ca2d-447d-8138-**0fd5957f8fa3
>  INBOUND NEIGHBORS 
> ERROR(runtime): DsReplicaGetInfo of type 0 failed - (-1073610723,
> 'NT_STATUS_RPC_PROTOCOL_ERROR'**)
> ==**==
>
> ===the output host -t 
> [root@ldap1 ~]# host -t CNAME 0103c98e-0b54-4ca4-a4e5-**2259fa6b0563._
> msdcs.**prefeitura.unicamp.br .
> 0103c98e-0b54-4ca4-a4e5-**2259fa6b0563._msdcs.**prefeitura.unicamp.bris
>  an alias for
> ldap1.prefeitura.unicamp.br.
> 0103c98e-0b54-4ca4-a4e5-**2259fa6b0563._msdcs.**prefeitura.unicamp.bris
>  an alias for
> dc1.prefeitura.unicamp.br.
> [root@ldap1 ~]#
>
> ===the output host -t 
> [root@ldap1 ~]# host -t CNAME a2454bb4-9f94-4879-a5ff-**c1a40537cb5e._
> msdcs.**prefeitura.unicamp.br .
> a2454bb4-9f94-4879-a5ff-**c1a40537cb5e._msdcs.**prefeitura.unicamp.bris
>  an alias for
> ldap2.prefeitura.unicamp.br.
> [root@ldap1 ~]#
>
> === the log error on DC1=
> dns child failed to find name 'a2454bb4-9f94-4879-a5ff-**c1a40537cb5e._
> msdcs.**prefeitura.unicamp.br ' of
> type A
>
> === the log error on DC2 =
> dns child failed to find name '0103c98e-0b54-4ca4-a4e5-**2259fa6b0563._
> msdcs.**prefeitura.unicamp.br ' of
> type A
>
>
> I followed step-by-step the Samba 4 Wiki and I don't know whats wrong.
> Any ideas ?
>
> Thanks !
>
> --
> Ricardo Suguita
> Analista de Redes
> CSCO11723146
> Prefeitura Unicamp
> Ramal 14619 // Fone +55(19)3521-4619
> http://www.prefeitura.unicamp.**br 
> Cidade Universitária Zeferino Vaz
> Rua Roxo Moreira, 1831
> Campinas, SP – Brasil
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  
> https://lists.samba.org/**mailman/options/samba
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] group_mapping.tdb error upon Samba upgrade

[Timur I. Bakeyev]

I'd try to rename that *.upgraded file to the normal one, possibly
preserving a copy somewhere.

On Fri, Jun 3, 2011 at 10:21 AM, Willy Offermans
wrote:

> Dear Samba friends,
>
> I have recently upgraded from Samba 3.0.36 to Samba 3.5.6. After upgrade I
> encounter the following error in log.smbd:
>
> [2011/06/03 10:09:43,  0] smbd/server.c:1119(main) smbd version 3.5.6
> started.  Copyright Andrew Tridgell and the Samba Team 1992-2010
> [2011/06/03 10:09:43.379106,  1] param/loadparm.c:7605(lp_do_parameter)
> WARNING: The "share modes" option is deprecated
> [2011/06/03 10:09:43.379286,  1] param/loadparm.c:7605(lp_do_parameter)
> WARNING: The "printer admin" option is deprecated
> [2011/06/03 10:09:43.401015,  1] smbd/files.c:193(file_init) file_init:
> Information only: requested 16384 open files, 7129 are available.
> [2011/06/03 10:12:20, 0] lib/util_tdb.c:tdb_log(664)
> tdb(/var/db/samba/group_mapping.tdb): tdb_reopen: open failed (No such file
> or directory)
> [2011/06/03 10:12:20, 0] lib/util.c:reinit_after_fork(3319) tdb_reopen_all
> failed.  [2011/06/03 10:12:20, 0] smbd/server.c:open_sockets_smbd(570)
> reinit_after_fork failed.
> [2011/06/03 10:12:20, 0] lib/util.c:smb_panic(1633) PANIC (pid 20164):
> reinit_after_fork failed.
> [2011/06/03 10:12:20, 0] lib/util.c:log_stack_trace(1737) BACKTRACE: 4
> stack frames: #0 0x122b9fd  at /usr/local/sbin/smbd #1
> 0x12ef709  at /usr/local/sbin/smbd #2 0x104abdb <_start+203> at
> /usr/local/sbin/smbd #3 0x104ab25 <_start+21> at /usr/local/sbin/smbd
> [2011/06/03 10:12:20, 0] lib/fault.c:dump_core(181) dumping core in
> /var/log/samba/cores/smbd
>
> when issuing the following command:
>
> smbclient -L localhost
> Enter password:
> protocol negotiation failed: NT_STATUS_PIPE_BROKEN
>
> I noticed that there is a file called
> /var/db/samba/group_mapping.tdb.upgraded
> but no /var/db/samba/group_mapping.tdb
>
> Samba 3.5.6 is running on FreeBSD 8.1-RELEASE #1
>
> What is going on?
>
> Do you need more information to solve this issue?
>
>
> --
> Met vriendelijke groeten,
> With kind regards,
> Mit freundlichen Gruessen,
>
> Willy
>
> *
>  W.K. Offermans
> Home:   +31 45 544 49 44
> Mobile: +31 681 15 87 68
> e-mail: wi...@offermans.rompen.nl
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba upgrade HowTo requested

[Timur I. Bakeyev]

Hi, Volker!

On Sat, Dec 18, 2010 at 10:10 AM, Volker Lendecke
 wrote:
> On Fri, Dec 17, 2010 at 11:26:12AM +0100, Willy Offermans wrote:
>>
>> 20101026:
>>   AFFECTS: users of net/samba35
>>   AUTHOR: Timur Bakeyev 
>>
>>   This is the latest stable release of the Samba3 distribution. It has
>>   been extended with the experimental support of the NFS4-like ACLs on
>>   ZFS partitions, thanks to the sysutils/libsunacl library by Edward
>>   Tomasz Napierala(trasz). This support haven't been tested thoroughly,
>>   so try it on your own risk.
>
> This looks interesting. I just did a portsnap fetch update
> in my FreeBSD 8.1 box, but I don't find that snippet. Where
> can I find those patches?

There are small patches in the port itself to detect and incorporate
libsunacl via configure and build vfs_zfsacl module OOTB. As for the
lib itself - it is situated in /usr/ports/sysutils/libsunacl.

With regards,
Timur.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Missing secondary groups

[Timur I. Bakeyev]

Hi, Peter!

Just a wild guess - could it be the result of moving lockdir in
Samba3.5 port from /var/db/samba34 back to /var/db/samba ? Can you
check, that, by renaming appropriate directory?

Regards,
Timur.


On Tue, Nov 30, 2010 at 12:54 PM, Peter Trifonov
 wrote:
> Hi,
>
>> idmapping does not work perfectly for me.   idmap_ad backend means it
>> should use active directory info to determine the unix uid and gid.  It
> may
>> bypass the issues with local tdb files.
> In  my case Samba is able to allocate UID and GID itself.
> However, it seems not to be able to communicate it to the OS properly.
>
> I have the following:
>
> 1. "getent passwd "  and  "getent group"  show only local users and groups.
> 2.  getent recognizes  domain users and groups, if their names or IDs are
> given explicitly. For example:
> heap# getent group "domain users"
> domain users:x:10009
> heap# getent group 10012
> wifi:x:10012
> heap# getent passwd petert
> petert:*:1:10009:Peter V.
> Trifonov:/home/DOMAIN/petert:/usr/local/bin/bash
>
> It can be seen that UID and GID were allocated properly. However, all
> non-primary groups are lost:
> 3.
> heap# wbinfo -r petert
> 10009
> 10010
> 10011
> 10012
> 10013
> 
>
>
>
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Regarding S4 and libnss_winbind.so

[Timur I. Bakeyev]

The wiki suggests to build it out of source3/ which is what samba5x is
based on. So you can install it from there.

On Thu, Jul 8, 2010 at 11:33 PM,   wrote:
> Apparently this didn't/doesn't build on FreeBSD by default...or is it
> "doesn't build at all".
>
> If it is buildable, what should I do to build it, as without it...see wiki:
>
> http://wiki.samba.org/index.php/Samba4/Winbind
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] (no subject)

[Timur I. Bakeyev]

That what happens with those, who don't use FreeBSD ports infrastructure :)

On Tue, Feb 9, 2010 at 11:35 AM, . .  wrote:
> Hi, Anyone!
> Help me get Samba compiled, if you can. Latest Samba, freshest FreeBSD 8.0. 
> So, full steps:
>
> fetch http://www.samba.org/samba/ftp/stable/samba-3.4.5.tar.gz
> tar zxf samba-3.4.5.tar.gz ; cd samba-3.4.5/source3
>
> ./configure --prefix=/usr/local --with-configdir=/usr/local/etc 
> --with-mandir=/usr/share/man --with-libiconv=/usr/local 
> --with-krb5=/usr/local \
>  --enable-swat --enable-shared-libs --with-ads --with-libsmbclient 
> --with-winbind --with-ldap --with-acl-support --enable-cups \
>  --with-libaddns --with-libsmbsharemodes --with-aio-support 
> --with-included-popt --with-quotas
> libsmb/libsmb_cache.c: In function 'SMBC_purge_cached_servers':
> libsmb/libsmb_cache.c:232: error: dereferencing pointer to incomplete type
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] shared files missing after install

[Timur I. Bakeyev]

On Wed, Mar 25, 2009 at 4:30 AM, David Bessell (SuperU)
 wrote:
> I am running samba on a FreeBSD 7 vbox and get the following messages
>
> emma# /usr/local/samba/sbin/smbd -D
> /libexec/ld-elf.so.1: Shared object "libtalloc.so.1" not found, required
> by "smbd"
> emma# /usr/local/samba/sbin/winbindd -D
> /libexec/ld-elf.so.1: Shared object "libtalloc.so.1" not found, required
> by "winbindd"
> emma# /usr/local/samba/sbin/nmbd -D
> /libexec/ld-elf.so.1: Shared object "libtalloc.so.1" not found, required
> by "nmbd"
>
> I have done a default install, configure, make, make install with no
> parameters or switches.
> There clearly needs to be something else installed but I don't know
> what.

Out of curiosity, why would you use FreeBSD without using ports collection?!

Regards,
Timur
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] "winbind enum = yes" ... oreilly samba books says "turn off" ... but things break. confused :-(

[Timur I. Bakeyev]

Hi, Jerry!

On Wed, Aug 15, 2007 at 03:41:54PM -0500, Gerald (Jerry) Carter wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Wilkinson, Alex wrote:
> > 
> > In the Oreilly "Using Samba" book pg 292 it is recommended 
> > to turn off Winbindd(8) user and group enumeration (very
> > expensive operation). However, when doing this on
> > FreeBSD -CURRENT the groups that users are in are not recognised.
> > 
> 
> If this is true, then it is a really bad design in
> FreeBSD.  Timur, can you confirm this?  Does FreeBSD
> rely on set/get/endgrent to to get group memberships?

What do you mean exactly under "get group memberships"? I think, that if
to scratch any of the group related functions, you'll find *grent
functions underneath, in FreeBSD at least.

I assume, you reffer to the getgrouplist(3). It's man page says:

BUGS
 The getgrouplist() function uses the routines based on getgrent(3).  If
 the invoking program uses any of these routines, the group structure will
 be overwritten in the call to getgrouplist().

Another function, getgroups(2), seems, doesn't have such a comment in
the man page, but I can't really imagine, where else it can get user
group list information.

At the top of it, although passwd is shadowed in FreeBSD and stored in
BerkeleyDB file, group is just a plain text file(or ldap, or nis) -
in all cases *grent functions are called.

I thought, that Linux has similar approach, but from your question it
seems it's not. Can you give more details, please?

with best regards,
Timur.
   
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] AD + winbindd(8): group permissions being ignored ? WTF ?

[Timur I. Bakeyev]

Hi!

On Mon, Aug 13, 2007 at 09:10:46PM +0800, Wilkinson, Alex wrote:
> 0n Mon, Aug 13, 2007 at 01:44:19AM -0700, Doug VanLeuven wrote: 
> 
> >Have a look and see if this report is relevant in your case (it's fairly
> >long): >https://bugzilla.samba.org/show_bug.cgi?id=3990
> 
> ===>  Applying FreeBSD patches for samba-3.0.25a_1,1
> 1 out of 5 hunks failed--saving rejects to smbd/sec_ctx.c.rej
> => Patch patch-smbd_sec_ctx.c failed to apply cleanly.

That could be predicted, if you take a look into the content of the port
patch and the patch you tried to apply.

> I *really* need this patch so that I can manage shared data via AD groups.
> Can anyone lend a helping hand in making samba compile in FreeBSD ports with 
> the
> following patch [http://marc.info/?l=samba-technical&m=117976475614078&w=2] ?
> 
> Or can the FreeBSD net/samba3 port maintainer get this patch included into the
> port ASAP ?

I don't see any fundamental difference between:

http://www.freebsd.org/cgi/cvsweb.cgi/~checkout~/ports/net/samba3/files/patch-smbd_sec_ctx.c?rev=1.1;content-type=text%2Fplain

and:

http://marc.info/?l=samba-technical&m=117976475614078&w=2

There is an additional check in the port version that verifies, that
there are any supplimentary groups at all, but besides that code is
identical.

Unless I'm missing something, I'd considere this patch to be already
incorporated into the FreeBSD Samba port.

With regards,
Timur Bakeyev.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 3.0.25a - FreeBSD - permissions problem?

[Timur I. Bakeyev]

Hi, Greg!

On Tue, Jun 12, 2007 at 06:25:13PM +0200, Greg Byshenk wrote:
> I have a problem with the latest Samba (3.0.25a) running under FreeBSD
> (recent STABLE: FreeBSD 6.2-STABLE #41: Mon Jun 11 19:24:30 CEST 2007).
> 
> If anyone has ideas, I would love to hear them.  I've done some searching on
> various mailling lists and have been unable to find anything.  I can provide
> more information if needed.

It still possible that it's FreeBSD Samba3 port fault. There is a patch there,
that addresses the problem with the incorrect handling of the supplimentary
groups, where the bug results with behaviour like you described. Patch aimed
to fix this problem, but lacks upper boundary check. It is in the file:
patch-smbd_sec_ctx.c. You may try to remove this file and recompile the port.

With regards,
Timur Bakeyev.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba 3.x SVN and OS/2 support.

[Timur I. Bakeyev]

Hi all!

On Tue, Apr 05, 2005 at 10:14:56PM +0200, Andrea Venturoli wrote:
> Andrea Venturoli wrote:
> 
> Ok, so this is the situation:
> 
> _ now I tryied 3.0.12_1.1 using the FreeBSD port: the compatibility
> problem is there again. Everything works from the command line, but the
> WorkPlace Shell cannot work with remote shares. Extended Attributes also
> don't seem to work: if I do COPY xxx G:, then COPY G:xxx, they are gone.
> 
> _ then I tryied compiling myself (no patches) samba 3 SVN: if I leave EA
> support off everything works from command line, but not from WPS, as 
> with 3.0.12.
> If I turn on EAs, the WPS can browse shares, directories and read files, 
> but I
> cannot copy any file *to* the server.
> Since FreeBSD EAs support is implemented in a parch in the port, it is 
> possible that the same patch (maybe updated for 3.0.13 or 3.0.14 when it 
> comes out, might fare better.

Basically, EA support is luxiory that let you store DOS attributes in a
nicer way, but it's absence shouldn't prevent you from normal work with
shares. But I guess, this is the question for investigation with Jeremy.

As for the EA support in FreeBSD 5.x itself - I've just send bug:

https://bugzilla.samba.org/show_bug.cgi?id=2576

And hope that it'll go into 3.0.14 as well. You may try to take this patches
and apply them to the SVN code - they apply cleanly on 3.0.13, so the chances
are high that you won't get any problems(with patching). Then try SVN build
again.

As for 3.0.12_1 - I do run it at home and at least with W2K all the attributes
are stored properly on UFS2 partition. BTW, don't forget, you may need this
set of lines in your smb.conf to get things work:

store dos attributes = yes
map hidden = no
map system = no
map archive = no

I'm very interested how this staff works with other client OSes.

Still, I suspect that EA support has minimal impact on the problem you
experience with file operations...

With regards,
Timur.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Hi again timur

[Timur I. Bakeyev]

On Tue, 18 May 2004 13:15:13 -0700
 Tom Skeren <[EMAIL PROTECTED]> wrote:
I am completely frustrated at this point.  The following 
is not meant against you personally, but I'm the ONLY 
I.T. person for 100 users in  6 different offices, and I 
don't know what to do at this point but beg.
That's sad... We have 14 SA on 100 of emplyees...
I finally figured out what Heimdal is, and I believe is 
the main problem.  Installed 5.2.1 on a machine. 
Installed krb5 from ports.  Changed make.conf adding 
KRB5_HOME=/usr/local.  Rebooted.  Got the newest port for 
samba-devel.  Did make, make depends, make install. 
I should admit, that situation with Kerberos not so clear 
in the FreeBSD world at the moment - mainly, cause it's a 
(disablable) part of the base system.

So, the most prefferable way on my opinion for 5.2.x would 
be:

Check, that your system comes with Heimdal in the base 
system - it's there and enabled by default for FreeBSD 5. 
Thus, check in /usr/lib that you have *krb5* libraries. 
Or, alternativelly, grep output of 'ldconfig -r' for krb5.

It's 90% probability, that you already have it there.
If not - check your make.conf does NOT contain:
NO_KERBEROS=   true# do not build and install Kerberos 
5 (KTH Heimdal)

line and recompile the 'world'(If you are using stock 
FreeBSD5.2.1 release, that shouldn't be the case).

Remove Heimdal port - on FreeBSD 5 it's not really 
necessary(unless you have very special requirements).

Set the HEIMDAL_HOME=/usr in make.conf(and for port, if 
you kept it - /usr/local).

Reinstall samba-devel port, taking the latest version of 
it.

Make sure, that you configured it with ADS support, for 
what you issue 'make reconfig' in the port directory 
before compilation and check, that ADS support is actually 
selected...

make; make insall
You may check, that Kerberos libraries are compiled in by 
runnig:

[EMAIL PROTECTED] ldd `which smbd`
And get something like:
/usr/local/sbin/smbd:
libldap.so.2 => /usr/local/lib/libldap.so.2 
(0x4831f000)
liblber.so.2 => /usr/local/lib/liblber.so.2 
(0x4834e000)
libgssapi.so.7 => /usr/lib/libgssapi.so.7 
(0x4835b000)
libkrb5.so.7 => /usr/lib/libkrb5.so.7 
(0x48369000)
libasn1.so.7 => /usr/lib/libasn1.so.7 
(0x483a)
libcrypto.so.3 => /lib/libcrypto.so.3 
(0x483c)
libroken.so.7 => /usr/lib/libroken.so.7 
(0x484b)
libcrypt.so.2 => /lib/libcrypt.so.2 (0x484bd000)
libcom_err.so.2 => /usr/lib/libcom_err.so.2 
(0x484d5000)
libcups.so.2 => /usr/local/lib/libcups.so.2 
(0x484d7000)
libssl.so.3 => /usr/lib/libssl.so.3 (0x484f4000)
libpam.so.2 => /usr/lib/libpam.so.2 (0x48521000)
libpopt.so.0 => /usr/local/lib/libpopt.so.0 
(0x48528000)
libc.so.5 => /lib/libc.so.5 (0x4852f000)

Try 
"net ads testjoin".  Machine responds "ADS support not 
compiled in".  Either I get it compiled in but net ads 
join/testjoin always error out because of some 
incompatibility in Heimdal Kerberos, or this happens.  I 

The steps abouve should make clear, that Kerberos is 
compiled into the binary.

really am getting up against a wall here.  I've gotta get 
this thing working.  It took me three hours to do this on 
a Redhat machine.  I've been trying to do the same thing 
in  FreeBSD for three weeks straight.  I really don't 
want to rebuild all of my servers with Redhat, I don't 
know Redhat very well at all, and that means replacing 4 
production servers.  I could really use a bit of help. 
Unfortunatelly, on the configuration step I can't help too 
much - I don't run AD server in my network at the 
moment... So, asking in the [EMAIL PROTECTED] and in 
[EMAIL PROTECTED] for the advice could be better option...

With best regards,
Timur Bakeyev.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] What libraries libsmbclient needs to be linked to?

[Timur I. Bakeyev]

Hi all!

Quite silly question:

I'm trying to (re)make a separate package for 
libsmbclient, so it can be installed in the system without 
server part of the samba. The thing is, that if you have 
Kerberos and LDAP libraries in the system, they'll be 
linked against libsmbclient.

My question is - is it really necessary? Does libsmbclient 
part actuall use LDAP and Kerberos for it's client 
functions or it's just relict of linking them against the 
server part? I.e. would the functionality of libsmbclient 
be truncated, if  not to link against this libraries :)? 
The same question applies to samba-python :)

With regards,
Timur Bakeyev.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba