Re: [Samba] Samba 3.6 directory ACLs

2010-10-18 Thread Miguel Medalha
I had not realized that the ACL module would store both sets of information. Please note that I *didn't* state that. What I said is that you can use Extended Attributes to *also* store ACL information. ACL information will be stored under a different attribute, which in this case is called

Re: [Samba] Samba 3.6 directory ACLs

2010-10-18 Thread Miguel Medalha
While testing my Samba configuration, I found that permissions are being set to 'special' for directories being copied from Windows instead of the ACL being fully populated. Does Samba 3.6 fully implement ACLS, or are there further configuration steps for storing the ACL information for

Re: [Samba] Procedure number out of range

2010-10-18 Thread Lars Andersson
It seems that Samba in this version is sensitive to local characters in passwd or tdb files (swedish in this case). In Samba 3.2.5 this wasn't an issue AFAIK. Do you have the appropriate charset parameters for Swedish? No, I haven't specified a character set. Just been using default

[Samba] Does not belong to our domain - messages

2010-10-18 Thread Wojciech Giel
Hello, I have samba 3.4.8 sernet PDC and BDC with ldap backend on debian lenny. I have joined a while ago two samba member server on opensolaris (3.0.37 and 3.0.34). Everything worked fine even now is working but from last week after reboot of both samba members in winbind logs appear these

Re: [Samba] samba 4 idmap problem

2010-10-18 Thread Kai Blin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2010-10-06 17:35, Taylor, Jonn wrote: Seems that each system is making up it own id's. Both the centos and fedora systems have the same idmap settings. idmap uid = 300-400 idmap gid = 300-400 That means you're not

Re: [Samba] Broken support for Smart Card Logon in Windows 2003 and XP

2010-10-18 Thread Love Hörnquist Åstrand
6 okt 2010 kl. 02:49 skrev Michael Wood: hx509_cms_create_signed function and make sigctx.cmsidflag always equal CMS_ID_NAME) I think this failed because you are looking at enveloped data and not signed data. try patching fill_CMSIdentifier() in hx509_cms_envelope_1() instead. Love -- To

[Samba] Samba 4 in production?

2010-10-18 Thread Mark Rutherford
I have read many stories and testimonials from people that are running Samba 4 in production. This encouraged me to try it out in a couple of virtual machines and, as expected I encountered no problems that I could not overcome. (mostly DNS setup issues) We are running 3.5 right now just as a

[Samba] Samba 4 Bad password lockout

2010-10-18 Thread Dave Thurston
I have a question about bad password lockout. Net pwsettings has settings for Complexity, Password history Length, Minimum password length, Minimum password age, and Maximum password age. But I can not see how to set a bad password login attempts. Can this be set using a group profile?

[Samba] SAMBA 4 ACL support

2010-10-18 Thread Vaclav Klecanda
Hi all, I am experimenting with samba 4. I have existing data on NTFS partition and want to share them via samba. But I have problems with permissions (ACL). There is an option: ntvfs handler that tells how mapping of permissions between unix and windows world shall behave. But there is lack of

[Samba] Samba - Rejecting auth request debug log

2010-10-18 Thread Martin Hochreiter
Hi there! I set up a test enviroment and did a log level 256 of a domain user log on with a Samba 3.5.5 and a windows 7 machine to deliver more data for that _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client TESTPC1 machine account TESTPC1$

[Samba] Samba 3.5.6 - configure creates Makefile with errors on Solaris 10

2010-10-18 Thread Robert M. Martel - CSU
Greetings, Attempting to build samba 3.5.6 on Solaris 10. Running make after the configure process has completed yields: make: Fatal error in reader: Makefile, line 1396: Extra `:', `::', or `:=' on dependency line Not that I have not had issues of late building Samba, but this id the

[Samba] Unable to compile Samba 3.5.6 on Solaris 9 - more winbind issues

2010-10-18 Thread Robert M. Martel - CSU
Greetings, No helpful hints have been offered to my winbind issues with Samba 3.4.9 and Solaris 9 I started trying to build Samba 3.5.6. Using gcc 3.4.6. I added -lintl to the LIBS option in the Makefile which cleared some earlier linker errors involving libintl_gettext, libintl_textdomain

[Samba] Guest shares in an ADS security model

2010-10-18 Thread Madhusudan Singh
Are these possible ? I am trying to setup a guest access printer attached to a working fileserver that authenticates its users against a Windows AD. I keep getting authentication requests on attempting to connect to the printer. Before I post my smb.conf, I need to know if what I am trying to do

Re: [Samba] Samba 3.6 directory ACLs

2010-10-18 Thread Jeremy Allison
On Sun, Oct 17, 2010 at 04:04:29AM -0700, Derek Lewis wrote: I have ACLs working for files with the following set in my share definitions: inherit permissions = yes inherit acls=yes map acl inherit=yes vfs_objects = acl_tdb While testing my Samba configuration, I found that

Re: [Samba] Samba 3.5.6 - configure creates Makefile with errors on Solaris 10

2010-10-18 Thread Gaiseric Vandal
Have you tried the precompiled samba version from sunfreeware.com? It is only 3.4.2 but should have AD support. It won't have ZFS support (an issue for Solaris 10 but Solaris 9.) the winbind nsswitch stuff may be require a little work to setup. On 10/18/2010 10:05 AM, Robert M. Martel

Re: [Samba] Unable to compile Samba 3.5.6 on Solaris 9 - more winbind issues

2010-10-18 Thread Gaiseric Vandal
I had a lot of trouble with compiling Samba on Solaris 10.(Thumbs down to Sun for abandoning Samba.) The ld command was a problem.Sunfreeware gcc is hard coded to use /usr/ccs/bin/ld. I had set up a symlink so that /usr/ccs/bin/ld actually pointed to gld (e.g. /usr/sfw/bin/gld or

Re: [Samba] winbindd completely stopped responding

2010-10-18 Thread Gaiseric Vandal
idmap and winbind may be caching the entries (use testparm -v to look for cache or timeout values.) windbind or idmap processes may load data when they start, cache it, but when the cache expires they DON'T reload the data. Just a guest. I had this problem with samba 3.0.x but not 3.4.x.

Re: [Samba] Samba 3.5.6 - configure creates Makefile with errors on Solaris 10

2010-10-18 Thread Joe Cammisa
i've had no problem compiling up to 3.4.8 on several solaris10 boxes at varying patch levels; but for some reason i can't get anywhere with 3.5.x. has anyone else been successful in this regard? any tips appreciated--thanks all in advance... -joe On Mon, Oct 18, 2010 at 2:13 PM, Gaiseric Vandal

[Samba] Problem with Winbindd

2010-10-18 Thread Bruno Steven
I have Openfiler box, I am trying integrated base user with Active directory . When start service winbindd show this message The log winbindd tail -n 10 /var/log/samba/winbindd.log [2010/10/18 16:07:05, 0] winbindd/winbindd_util.c:init_domain_list(736) Could not fetch our SID - did we join?

Re: [Samba] Samba 3.6 directory ACLs

2010-10-18 Thread Miguel Medalha
FYI. I've just committed a jumbo ACL patch for v3-6-test (and am currently looking at backporting this to 3.5.x) which I hope will fix several issues with storing ACLs in xattrs and getting full Windows ACL compatibility. That would be *very* nice, especially the backporting to 3.5.x part!

[Samba] Setting up Samba4 - lots of implementation questions esp re. PKI and SSO

2010-10-18 Thread Paul Bradley
I have a LOT of questions!!! This may take a while. I know some of this stuff is at the edge of what Samba4 is just becoming able to do, so if anyone who knows feels this is better posted on samba-technical I'd appreciate a cross-post from someone in a position to know for sure - I did consider

Build status as of Mon Oct 18 06:00:01 2010

2010-10-18 Thread build
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2010-10-17 00:00:09.0 -0600 +++ /home/build/master/cache/broken_results.txt 2010-10-18 00:00:03.0 -0600 @@ -1,4 +1,4 @@ -Build status as of Sun Oct 17 06:00:06 2010 +Build status as of Mon Oct

[SCM] Samba Shared Repository - branch v3-6-test updated

2010-10-18 Thread Volker Lendecke
The branch, v3-6-test has been updated via 1fec543 This is typo fix patch for smbcacls.1.xml . from a733f2e7 Fix double ;; end-of-lines added in error. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test - Log

[SCM] Samba Shared Repository - branch master updated

2010-10-18 Thread Jelmer Vernooij
The branch, master has been updated via d1ca35c heimdal_build: Add dependency on com_err to HEIMDAL_CONFIG. from f397283 This is typo fix patch for smbcacls.1.xml . http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

[SCM] Samba Shared Repository - branch master updated

2010-10-18 Thread Andrew Bartlett
The branch, master has been updated via 034832c s4-ldb Add LDB_REQ_SET_LOCATION to help track handler use via f4c82c6 s4-selftest Make GDB_PROVISION work again via 48c54f9 ldb Ensure we mark ongoing LDAP requests as PENDING via ce01e36 s4-openldap-backend Don't set

[SCM] Samba Shared Repository - branch master updated

2010-10-18 Thread Andreas Schneider
The branch, master has been updated via b615b70 s3-winbind: Fixed init order. via abeef47 librpc: Fixed memory context of dcerpc_binding_from_tower. via d42ddd7 s4-gensec: Add dependency on com_err to GENSEC_KRB5. from 034832c s4-ldb Add LDB_REQ_SET_LOCATION to help

[SCM] Samba Shared Repository - branch master updated

2010-10-18 Thread Stefan Metzmacher
The branch, master has been updated via 20c7e2b s4:libcli/util: add pipe related NT_STATUS_RPC_* codes via 5c82a1b s3:libsmb: add pipe related NT_STATUS_RPC_* codes via 72a8966 libcli/util: add pipe related NT_STATUS_RPC_* codes from b615b70 s3-winbind: Fixed init

[SCM] Samba Shared Repository - branch master updated

2010-10-18 Thread Günther Deschner
The branch, master has been updated via 64e9f79 s3: fix the build of idmap_adex, idmap_tdb2, idmap_hash and several vfs modules. via 5845dae s3-waf: fix the build after libcli/security changes. via 203dc4f s3-waf: fix the build of smbtorture. via 10f95a4 s3-waf:

[SCM] Samba Shared Repository - branch master updated

2010-10-18 Thread Tim Potter
The branch, master has been updated via a10b341 Include misc.idl for policy_handle in srvsvc.idl. from 64e9f79 s3: fix the build of idmap_adex, idmap_tdb2, idmap_hash and several vfs modules. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

[SCM] Samba Shared Repository - branch master updated

2010-10-18 Thread Stefan Metzmacher
The branch, master has been updated via a610ce4 libcli/nbt: we don't need LIBCLI_COMPOSITE anymore via 820ae3d libcli/nbt: convert nbt_name_register_bcast_send/recv to tevent_req via 0b8056d libcli/nbt: s/name_register_bcast_handler/nbt_name_register_bcast_handler

[SCM] Samba Shared Repository - branch master updated

2010-10-18 Thread Matthias Dieter Wallnöfer
The branch, master has been updated via 8556602 ldb:ldb_schema_attribute_by_name_internal - switch back to 32bit counters via 48cd89e ldb:ldb_tdb.c - fix up counter variables via 94a4458 ldb:ldb_tdb.c - improve the error outputs via 3ead246 s4:util_ldb - remove

[SCM] Samba Shared Repository - branch master updated

2010-10-18 Thread Matthieu Patou
The branch, master has been updated via 902e728 selftest: use full path for selftest.pl instead of relative paths via b1a13e5 selftest: correct the import of Time::HighRes from 8556602 ldb:ldb_schema_attribute_by_name_internal - switch back to 32bit counters

[SCM] Samba Shared Repository - branch master updated

2010-10-18 Thread Matthias Dieter Wallnöfer
The branch, master has been updated via 1ac19c1 s4:ldap_server - use error code constant via dcbfcbb ldb: always return PROTOCOL_ERROR if an operation is unsupported from 902e728 selftest: use full path for selftest.pl instead of relative paths

[SCM] Samba Shared Repository - branch master updated

2010-10-18 Thread Andrew Tridgell
The branch, master has been updated via f6a9708 s4-ldb: increase minor version for 2 new functions via 423365d s4-ldap: mark all ldap:// requests as untrusted via 80a4adc s4-dsdb: filter unregistered controls in the rootdse module via d16fe72 s4-ldb: cope with NULL

[SCM] Samba Shared Repository - branch master updated

2010-10-18 Thread Andrew Tridgell
The branch, master has been updated via 640fbf8 s4-dsdb: register the DCPROMO_OID control with the rootdse via 75d57db selftest: terminate selftest if we can't setup the environment from f6a9708 s4-ldb: increase minor version for 2 new functions