[Samba] Re: Write Once Read Many share with samba
Jack Downes wrote: You could handle this outside of Samba with ACLs on your filesystem. Assuming you use ext3 for the filesys, there are some rather good acl tools for that. I don't think POSIX ACLs will do this either. Brian May -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] The specified network name is no longer available 3.0.25 RHEL4
I have a reproducible intermittent error large site - The specified network name is no longer available. This happens when copying large files. Below is part of log level 10 output strace. Sorry for the long posting. I will probably need to put the loglevel 10 attached to a bugzilla - but thought I would try the lists initially. RHEL4 samba-3.0.25b-1.el4_6.4 openldap-2.2.13-8.el4_6.4 Sometime using pdbedit -Lv username reports ldapsam_getgroup: Did not find group I am wondering if this could be related to the problem. In debug level 4 something that stands out to me is string_to_sid: Sid adrians does not start with 'S-'. This is intermittent. smb.conf [global] unix charset = LOCALE workgroup = workgroup netbios aliases = netbios_name server string = PDC interfaces = bond0, lo bind interfaces only = Yes map to guest = Bad Password passdb backend = ldapsam:ldap://localhost username map = /etc/samba/smbusers log level = 2 syslog = 0 max log size = 0 smb ports = 139 name resolve order = wins bcast hosts time server = Yes printcap name = cups add user script = /opt/IDEALX/sbin/smbldap-useradd -m %u delete user script = /opt/IDEALX/sbin/smbldap-userdel %u add group script = /opt/IDEALX/sbin/smbldap-groupadd -p %g delete group script = /opt/IDEALX/sbin/smbldap-groupdel %g add user to group script = /opt/IDEALX/sbin/smbldap-groupmod -m %u %g delete user from group script = /opt/IDEALX/sbin/smbldap-groupmod -x %u %g set primary group script = /opt/IDEALX/sbin/smbldap-usermod -g %g %u add machine script = /opt/IDEALX/sbin/smbldap-useradd -w %u logon script = scripts\dynamic\%U.bat logon path = logon drive = H: logon home = \\localhost\%U domain logons = Yes os level = 65 preferred master = Yes domain master = Yes wins server = winserver ldap admin dn = cn=Manager,dc=something,dc=com ldap group suffix = ou=Groups ldap idmap suffix = ou=Idmap ldap machine suffix = ou=People ldap suffix = dc=something,dc=com ldap ssl = no ldap user suffix = ou=People idmap backend = ldap:ldap://localhost idmap uid = 4-5 idmap gid = 4-5 invalid users = roots, daemon, bin, sys, adm, uucp, nuucp, lpd, imnadm, ipsec, lp, snapp, [netlogon] comment = Network Logon Service path = /smbshare/netlogon admin users = @wheel, @Domain Admins read only = Yes create mask = 0644 directory mask = 0755 browseable = No locking = No [homes] comment = Home directory for %U path = /smbshare/users/%S valid users = %S browseable = No samba debug 10 I have the entire debug log; its difficult sifting out what is meaningful. [2008/05/16 10:49:02, 10] smbd/notify_internal.c:notify_trigger(589) notify_trigger called action=0x2, filter=0x1, path=/smbshare/users/adrians/user_v7.exe [2008/05/16 10:49:02, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (1410, 513) - sec_ctx_stack_ndx = 0 [2008/05/16 10:49:02, 10] smbd/oplock_linux.c:linux_release_kernel_oplock(191) linux_release_kernel_oplock: file user_v7.exe, dev = fd08, inode = 21205163 file_id = 55 has kernel oplock state of 1. [2008/05/16 10:49:02, 10] locking/posix.c:get_windows_lock_ref_count(545) get_windows_lock_count for file user_v7.exe = 0 [2008/05/16 10:49:02, 10] locking/posix.c:delete_windows_lock_ref_count(559) delete_windows_lock_ref_count for file user_v7.exe [2008/05/16 10:49:02, 4] smbd/dosmode.c:set_filetime(604) set_filetime(user_v7.exe) failed: No such file or directory [2008/05/16 10:49:02, 2] smbd/close.c:close_normal_file(399) adrians closed file user_v7.exe (numopen=2) NT_STATUS_OK Strace Output utimes(Fedora-9-i386-DVD.iso, {1210211667, 0}) = 0 fcntl64(7, F_SETLKW64, {type=F_WRLCK, whence=SEEK_SET, start=688, len=1}, 0xbff91fa0) = 0 fcntl64(7, F_SETLKW64, {type=F_UNLCK, whence=SEEK_SET, start=688, len=1}, 0xbff91fa0) = 0 geteuid32() = 1410 getuid32() = 1410 geteuid32() = 1410 setresuid32(0, 0, -1) = 0 geteuid32() = 0 kill(11697, SIGUSR1)= 0 --- SIGUSR1 (User defined signal 1) @ 0 (0) --- write(24, \n, 1) = 1 sigreturn() = ? (mask now [FPE USR2 PIPE]) setresuid32(1410, 1410, -1) = 0 geteuid32() = 1410 getuid32() = 1410 write(5, \0\0\0/\377SMB/\0\0\0\0\210\1\310\0\0\0\0\0\0\0\0\0\0\0..., 51) = 51 fcntl64(7, F_SETLKW64, {type=F_WRLCK, whence=SEEK_SET, start=688, len=1}, 0xbff92400) = 0
[Samba] smbd -i hangs when generating certificates, no dns resolving
Hi, i've worked trough the samba4-howto. Tried to install samba4 on ubuntu 8.04 Desktop (everything running in vmware fusion) . Installed default System plus: libattr1-dev libblkid-dev libgnutls-dev libreadline5-dev python python- dev (build-essential linux-headers for vmwaretools) when starting smbd -i -M single it hangs when trying to generate certificates, if i only start smbd i can connect to the test-share (with my mac) and read file inside, but writing new files will fail: filename to long. i've chmod 777 for /data/test/. Windows XP with correct dns settings will not resolve the realm nor anything. Should i install any further package? Is bind necessary to get name resolution, or is it part of smbd? best regards, Martin Faust -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] SAMBA PDC with LDAP backend syncing unix/samba accounts ...
Hi , Thanks Edmundo and Louis for the input. Edmundo you are absolutely right about three hashes. I figuered that part. I always wondered how will samba generate a hash from my unix hash ;). Now coming back to my question. I will try and be even more specific. IF a user tries to change password on his/her wks, then he/she uses passwd in which case it uses pam and unix password is changed leaving samba password. How do I provide my users a common password sync option on their respective workstation ? Anybody , Thanks in advance, yogesh -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] permissions
Hi, I am trying to run the addsmbcups command which uses: smbclient, rpcclient, adddriver, setdriver commands to do its work. It seems like it expects be be root, since it has to write to various places: /var/spool/cups/tmp/ and /usr/share/cups/drivers. My question is since I am using LDAP as the backend, root can't easily be used; does anyone have any recommendations on how this can be done? Thanks, -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] samba server maxing out cpu, load up to 10
I reboot the server and sometimes it seems to help for a couple days, and sometimes the load immediately comes back and we just have to wait till the next day. We used to have a similar problem - but I've not seen it in a long time. It was always a badly behaved PC and often involved a Publisher document being stuck open. Running top, see if one smbd process is hogging the CPU. You should be able to work that back to a PC using smbstatus, and I think that's where the problem will be... Alex -- Alex Harrington - Network Manager, Longhill High School t: 01273 304086 | e: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Help with Remote Desktop Users group with Samba PDC
Hugo Monteiro [EMAIL PROTECTED] writes: Hello, I have a Samba PDC chugging away, one of the clients is a Windows 2003 Server machine with Remote Desktop enabled. Regular users can log in to the 2003 Server just fine *if they are at the actual computer*. Now, I want people to be able to log on to this machine (authenticated by the Samba PDC) over Remote Desktop. Right now, when I try to log on over Remote Desktop, I get this error from Windows: To log on to this remote computer, you must be granted 'Allow lon on through Terminal Services' right. By defualt, members of the 'Remote Desktop Users' group have this right. If you are not a member of the Remote Desktop Users group or another group ... etc. etc. etc. So... how do I tell my Samba PDC that my users are members of this group? I can add users to the Domain Admins group, Domain Users group, etc., but I *don't have* a Remote Desktop Users group, and am unsure how to add it, what the sambaSID for this group should be, etc. You don't. You add the domain users group to the 2003 server local remote desktop users group. Alternatively, you can create a new group in the Samba PDC, and then add that group to the local Remote Desktop Users group on the Win2003 server. Then you can manage the users using this new group on the Samba PDC. Cheers, Hugo Monteiro. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- Leigh Wedding [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] adding users to group with net rpc
John, here is the information you requested hopes this helps you help me. OK. What is the output of?: pdbedit -Lw root root:0::FD11C5234188D996BAF50904399221E6:[U ]:LCT-4832C5D3: What version of Samba are you running? Version 3.0.28a -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] LDAP Samba Schema
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Juan Asensio Sánchez wrote: | Hi | | I am trying to use Postfix to expand the members of the LDAP Samba | groups. Because of the Samba groups have only the uid of the member | (memberUid), not the full dn (memberdn or uniquemember), the expansion | for use in Postfix cannot be done. Mi question is if Samba (with | smbldap-tools) is able to store the full dn of the members in the | group attributes (i have read about rfc2307bis.schema, or | samba3.schema, but no much information), so Samba, LDAP and Postfix | could live together. A sambaGroup should be able to sit on top of a groupOfName (STRUCTURAL) and the posixGroup (AUXILARY from RFC2307 bis) cheers, jerry - -- = Samba--- http://www.samba.org Likewise Software - http://www.likewisesoftware.com What man is a man who does not make the world better? --Balian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFIMsiPIR7qMdg1EfYRAv/NAKDiHv1lwZwNsF1nqUHeLYcqavC+wQCgkzjI k+Xm6kDiovS8iIYqn9Nvg54= =Y7zB -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Is this even possible
I've got two separate domains one is active directory the other sambe 3. Say I have 5 users. User1.user5. I would like to have the same username and passwords on both domains, but separate profiles for each domain. They are in two separate locations connected with an OpenVPN connection. I was wondering the best way to do this? If I could sync the passwords from AD that would be great. Has anyone else ever done this? Thanks for your help. Jason Waters -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Compatibility question
Hi, I am currently using Samba on Solaris 8 and we are about to migrate to Solaris 10. Does Samba work on Sol 10 and if so what version do I require? Thanks David Nicholls Senior Market Data Analyst RBS Global Banking Markets 135 Bishopsgate, London, EC2M 3UR Office: +44 20 7085 1654 *** The Royal Bank of Scotland plc. Registered in Scotland No 90312. Registered Office: 36 St Andrew Square, Edinburgh EH2 2YB. Authorised and regulated by the Financial Services Authority This e-mail message is confidential and for use by the addressee only. If the message is received by anyone other than the addressee, please return the message to the sender by replying to it and then delete the message from your computer. Internet e-mails are not necessarily secure. The Royal Bank of Scotland plc does not accept responsibility for changes made to this message after it was sent. Whilst all reasonable care has been taken to avoid the transmission of viruses, it is the responsibility of the recipient to ensure that the onward transmission, opening or use of this message and any attachments will not adversely affect its systems or data. No responsibility is accepted by The Royal Bank of Scotland plc in this regard and the recipient should carry out such virus and other checks as it considers appropriate. Visit our websites at: www.rbs.com www.rbs.com/gbm www.rbsgc.com *** __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] LDAP Samba Schema
go setup your samba server for use with ldapadmin http://ldapadmin.sourceforge.net/ FeaturesBrowsing and editing of LDAP directories Recursive operations on directory trees (copy, move and delete) Binary attribute support Schema browsing Renaming of LDAP Entries LDIF export and import Password management (supports crypt, md5, sha1) Management of Posix Groups and Accounts Management of Samba Accounts Postfix MTA Support LDAP SSL support (using Windows API) Template support Louis -Oorspronkelijk bericht- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Namens Gerald (Jerry) Carter Verzonden: dinsdag 20 mei 2008 14:48 Aan: Juan Asensio Sánchez CC: samba@lists.samba.org Onderwerp: Re: [Samba] LDAP Samba Schema -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Juan Asensio Sánchez wrote: | Hi | | I am trying to use Postfix to expand the members of the LDAP Samba | groups. Because of the Samba groups have only the uid of the member | (memberUid), not the full dn (memberdn or uniquemember), the expansion | for use in Postfix cannot be done. Mi question is if Samba (with | smbldap-tools) is able to store the full dn of the members in the | group attributes (i have read about rfc2307bis.schema, or | samba3.schema, but no much information), so Samba, LDAP and Postfix | could live together. A sambaGroup should be able to sit on top of a groupOfName (STRUCTURAL) and the posixGroup (AUXILARY from RFC2307 bis) cheers, jerry - -- = Samba--- http://www.samba.org Likewise Software - http://www.likewisesoftware.com What man is a man who does not make the world better? --Balian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFIMsiPIR7qMdg1EfYRAv/NAKDiHv1lwZwNsF1nqUHeLYcqavC+wQCgkzjI k+Xm6kDiovS8iIYqn9Nvg54= =Y7zB -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] LDAP Samba Schema
and what i forgot. samba support also. ;-) What is LDAP Admin? Ldap Admin is free Win32 administration tool for LDAP directory management. This application lets you browse, search, modify, create and delete objects on LDAP server. It also supports more complex operations such as directory copy and move between remote servers and extends the common edit functions to support specific object types (such as groups and accounts). You can use it to manage Posix groups and accounts, Samba http://www.samba.org/samba/ accounts and it even includes support for Postfix http://www.postfix.org/ MTA. Ldap Admin is free Open Source software distributed under the GNU General Public License http://www.gnu.org/copyleft/gpl.html . Features * Browsing and editing of LDAP directories * Recursive operations on directory trees (copy, move and delete) * Binary attribute support * Schema browsing * Renaming of LDAP Entries * LDIF export and import * Password management (supports crypt, md5, sha1) * Management of Posix Groups and Accounts * Management of Samba Accounts * Postfix MTA Support * LDAP SSL support (using Windows API) * Template support SAMBA Support Ldap Admin supports Samba http://www.samba.org/samba/ v3. It also includes the support for multiple domains in one LDAP directory. This is achieved by providing the possibility to set the domain for each account in LDAP directory individually. Note that, as of version 0.9.8, the support for Samba v2 was abandoned. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Compatibility question
Hi David your are obviously free to compile you own build of SAMBA, but Sun ships a Sun supported build of SAMBA with Solaris 10 which includes Active Directory support. There is some related, and hopefully useful, information in these blogs: http://blogs.sun.com/jurasek/entry/ads_domain_member_server1 http://blogs.sun.com/timthomas/en_GB/category/SAMBA Rgds Tim NICHOLLS, Dave, GBM said the following : Hi, I am currently using Samba on Solaris 8 and we are about to migrate to Solaris 10. Does Samba work on Sol 10 and if so what version do I require? Thanks David Nicholls Senior Market Data Analyst RBS Global Banking Markets 135 Bishopsgate, London, EC2M 3UR Office: +44 20 7085 1654 *** The Royal Bank of Scotland plc. Registered in Scotland No 90312. Registered Office: 36 St Andrew Square, Edinburgh EH2 2YB. Authorised and regulated by the Financial Services Authority This e-mail message is confidential and for use by the addressee only. If the message is received by anyone other than the addressee, please return the message to the sender by replying to it and then delete the message from your computer. Internet e-mails are not necessarily secure. The Royal Bank of Scotland plc does not accept responsibility for changes made to this message after it was sent. Whilst all reasonable care has been taken to avoid the transmission of viruses, it is the responsibility of the recipient to ensure that the onward transmission, opening or use of this message and any attachments will not adversely affect its systems or data. No responsibility is accepted by The Royal Bank of Scotland plc in this regard and the recipient should carry out such virus and other checks as it considers appropriate. Visit our websites at: www.rbs.com www.rbs.com/gbm www.rbsgc.com *** __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email __ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- *Tim Thomas Staff Engineer *Storage Systems Product Group* * Sun Microsystems, Inc. Internal Extension: x(70)18097 Office Direct Dial: +44-161-905-8097 Mobile: +44-7802-212-209 Email: [EMAIL PROTECTED] Blog: http://blogs.sun.com/timthomas -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] necessary to join pdc to domain?
is it necessary for me to join the PDC itself to the domain?? i ask this because the below command is not working for me: root# net rpc testjoin [2008/05/20 11:24:32, 0] rpc_client/cli_pipe.c:get_schannel_session_key_common(2445) get_schannel_session_key: could not fetch trust account password for domain 'LSA' [2008/05/20 11:24:32, 0] utils/net_rpc_join.c:net_rpc_join_ok(70) net_rpc_join_ok: failed to get schannel session key from server GISKARD for domain LSA. Error was NT_STATUS_CANT_ACCESS_DOMAIN_INFO Join to domain 'LSA' is not valid good news is i can join the domain from windows clients without a problem -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] samba server maxing out cpu, load up to 10
-Original Message- From: Alex Harrington Sent: Tuesday, May 20, 2008 5:39 AM We used to have a similar problem - but I've not seen it in a long time. It was always a badly behaved PC and often involved a Publisher document being stuck open. Running top, see if one smbd process is hogging the CPU. You should be able to work that back to a PC using smbstatus, and I think that's where the problem will be... Alex I tried that, but nothing is really sticking at the top of the cpu usage. One pid will be up there using 30-40%, and next refresh something else will be up there using 30-40%. Today, everything is working great. The load is 0.3 and a pgrep shows there are 152 smbd processes running (actually 11 more than when the server was overloaded, yesterday). This just doesn't seem to make any sense. The other thing I notice is the winbind processes. Yesterday, one was using 30% of the cpu and the other was using 5% of the cpu, but today one is using only 1% of the cpu and the other is using 0%. James -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Unable to join Samba
On 5/15/08 Augustin wrote: When I execute net ads join -U Administrator I get the following error /libexec/ld-elf.so.1: /usr/lib/libkrb5.so.8: Undefined symbol init_error_table It sounds like you're missing some libraries. Did you compile krb5 yourself or is it an rpm? If you compiled it yourself, you'll need to modify the configure or makefile scripts to point to the correct libraries. Also make sure you have the necessary devel libraries before you compile. As another check, run ldd on winbind and make sure you have all the library files listed. Matt -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] domain memership and security=domain
I apologise for re-posting, but I'll try summarise just in case my original message was confusing... I have successfully deployed my first Samba 3 PDC with LDAP. I have another Linux PC (separate from the PDC) that is acting as a file server, with it's own shares. This PC has no local user accounts, and I set this with security = domain, passwd server = SambaPDC. It successfully joined it to the domain with net rpc join etc.. On each share I specify which users can access that share (valid users = ) Should security = domain mean that only workstations already joined to the domain can have access to the file server shares? Until now, I can still access the shares even from the non-domain workstations. In other words, can a Samba3 domain member limit access to its shares only to other PCs that are also domain members? Or, even better, can this be specified specifically per share? Thanks and regards Julian -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] domain memership and security=domain
I think security = domain just has that samba box look at the PDC for authentication. I don't think accessing a share has anything to do with if the workstation is a part of the domain or not. If you try to connect to that share \\sambafileserver\testshare it should prompt you for a username and password. If it doesn't that means you are logged in with a valid username already. You can check smsbstatus to see how you are connected. If you have two domain users, user1, user2, you can make a share on available to one user by doing valid users = user1 Are you trying to restrict machine from accessing a share? I'm not sure if you can use the hosts allow per share. Am I understanding you correctly? Jason Waters -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Julian Pace Ross Sent: Tuesday, May 20, 2008 1:18 PM To: samba@lists.samba.org Subject: Re: [Samba] domain memership and security=domain I apologise for re-posting, but I'll try summarise just in case my original message was confusing... I have successfully deployed my first Samba 3 PDC with LDAP. I have another Linux PC (separate from the PDC) that is acting as a file server, with it's own shares. This PC has no local user accounts, and I set this with security = domain, passwd server = SambaPDC. It successfully joined it to the domain with net rpc join etc.. On each share I specify which users can access that share (valid users = ) Should security = domain mean that only workstations already joined to the domain can have access to the file server shares? Until now, I can still access the shares even from the non-domain workstations. In other words, can a Samba3 domain member limit access to its shares only to other PCs that are also domain members? Or, even better, can this be specified specifically per share? Thanks and regards Julian -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Fwd: [Wine] Rosetta Stone again
Yes, I can open d:\ in winefile, and everything looks in order there. In fact, I can click on Autorun.exe, but then it says Unload the debugger and try again. That's a copy protection issue. After some investigating, I discovered that the Rosetta Stone language pack CDs use SafeDisc for copy protection. What is the status of SafeDisc support in wine? I am not sure if this can be officially fixed with wine at all. The problem is that the copy protection (correctly) thinks that wine is a debugger and prevents the application executing under wine. This debugger check is a safegaurd to prevent users from debugging the executable to find a way to remove the protection. John -- John M. Drescher -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: [Wine] Rosetta Stone again
Sorry. I accidentally sent this to the wrong list. John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] domain memership and security=domain
RE: [Samba] domain memership and security=domainThanks guys, it is clearer now and the behaviour now makes sense to me. I was actually already using host allow/deny, but with IP's and globally. Now i'm doing: [share] hosts allow = mymachinename hosts deny = all ..and it works exactly as i want it to. Thanks again Julian -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SAMBA PDC with LDAP backend syncing unix/samba accounts ...
yogi escreveu: Hi , Thanks Edmundo and Louis for the input. Edmundo you are absolutely right about three hashes. I figuered that part. I always wondered how will samba generate a hash from my unix hash ;). Now coming back to my question. I will try and be even more specific. IF a user tries to change password on his/her wks, then he/she uses passwd in which case it uses pam and unix password is changed leaving samba password. How do I provide my users a common password sync option on their respective workstation ? Anybody , Thanks in advance, yogesh You can use smbpasswd -r pdcname. This is the simplest way to change the password. If you really want to use the passwd command, you will need to use winbind in these workstations and the pam_winbind.so pam module to change the password trough it. You could even use smbldap-passwd to change the password directly in the base, but you would need to make some changes in the script first. Regards. Edmundo Valle Neto -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] SAMBA PDC with LDAP backend syncing unix/samba accounts ...
I'm coming into this half way through but won't ldap passwd sync = yes work? Or does that only work when you change your password from samba? Jason Waters -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edmundo Valle Neto Sent: Tuesday, May 20, 2008 2:20 PM To: samba@lists.samba.org Subject: Re: [Samba] SAMBA PDC with LDAP backend syncing unix/samba accounts ... yogi escreveu: Hi , Thanks Edmundo and Louis for the input. Edmundo you are absolutely right about three hashes. I figuered that part. I always wondered how will samba generate a hash from my unix hash ;). Now coming back to my question. I will try and be even more specific. IF a user tries to change password on his/her wks, then he/she uses passwd in which case it uses pam and unix password is changed leaving samba password. How do I provide my users a common password sync option on their respective workstation ? Anybody , Thanks in advance, yogesh You can use smbpasswd -r pdcname. This is the simplest way to change the password. If you really want to use the passwd command, you will need to use winbind in these workstations and the pam_winbind.so pam module to change the password trough it. You could even use smbldap-passwd to change the password directly in the base, but you would need to make some changes in the script first. Regards. Edmundo Valle Neto -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] [samba 3.0.25c] disappearing printers problem
Scenario: Citrix, Win2k3. Solaris 9 Server - latest Solaris patch Samba 3.0.25c Every Monday morning, since applying the latest Solaris patches which upgraded samba from 3.0.21b - 3.0.25c, the following occurs. The Citrix clients can no longer print. Active directory was also switched to 2003 native mode. Sunday night, Citrix servers undergo a weekly reboot. Week 1 and 2:Monday morning start of business the Citrix clients cannot print to the Samba print shares. Restart Samba, service restored. Week 3 and 4: Monday Morning before start of business, restart samba via cron scheduler, Start of business, Citrix clients cannot print.. restart samba again.. service restored. Week 5: Admin on site. Manually restart samba, test user tries to print and cannot, however smbstatus shows the citrix server connects and pulls the data file for formatting the raw print job, but the print share never registers an access. restart samba again, Citrix server pulls file and printer session registers in smbstatus. Week 6: I'm dreading this. Rollback to 3.0.21b? Data points: Printers are individually defined in the smb.conf 'browseable=' is not defined in any section. Joe Greene UNIX Systems Administrator Phone 317-707-2730 Fax 317-707-2397 Hours M-F 7am-4pm -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SAMBA PDC with LDAP backend syncing unix/samba accounts ...
Jason Waters escreveu: I'm coming into this half way through but won't ldap passwd sync = yes work? Or does that only work when you change your password from samba? Jason Waters (...) You can use smbpasswd -r pdcname. This is the simplest way to change the password. If you really want to use the passwd command, you will need to use winbind in these workstations and the pam_winbind.so pam module to change the password trough it. You could even use smbldap-passwd to change the password directly in the base, but you would need to make some changes in the script first. Regards. Edmundo Valle Neto Yes, it will only work for commands that relies on samba itself to change the password. Here passwd is NOT included. Is was shown three approaches, using samba (smbpasswd), using PAM (passwd) and using LDAP directly. Regards. Edmundo Valle Neto -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3 PDC - client unable to join domain
I have a new domain setup (refer below for config) but when I try to add an XP machine to the domain with root ID I get access denied message. At the share level things work fine but keen to get this acting as the PDC and running login scripts etc. -Debian Lenny -Samba Version 3.0.28a I have looked at docs and cannot find the problem's solution keen for input. smb.conf extract [global] workgroup = DOMAIN netbios name = SERVERNAME server string = %h server Debian %a %v %L load printers = yes printing = cups printcap name = cups obey pam restrictions = Yes wins support = yes #socket options = passdb backend = tdbsam passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n *password\supdated\ssuccessfully* . passwd chat debug = yes unix password sync = yes time server = Yes # # Browser settings # domain master = Yes preferred master = yes os level = 64 preferred master = Yes # #PDC Settings and the like # domain logons = Yes logon script = %U.bat logon path = \\SERVERNAME\Profiles\%U logon drive = H: logon home = \\%N\%U add user script = /usr/sbin/useradd -m %u add group script = /usr/sbin/groupadd %g add user to group script = /usr/sbin/usermod -G %g %u delete user from group script = /usr/sbin/gpasswd -d %u %g set primary group script = /usr/sbin/usermod -g %g %u delete user script = /usr/sbin/userdel -r %u delete group script = /usr/sbin/groupdel %g #add machine script = /usr/sbin/useradd -d /dev/null -g machines -s /bin/false /bin/passwd -l %u add machine script = /usr/sbin/useradd -d /dev/null -g machines -s /bin/false # # Logging etc # log level = 3 syslog = 0 log file = /var/log/samba/log.%m max log size = 1000 dns proxy = No panic action = /usr/share/samba/panic-action %d invalid users = root name resolve order = wins lmhosts bcast dns proxy = yes # # Shares etc # [netlogon] comment = Network Logon Service - LogOn for U-%U u-%u at m-%m N-%N path = /home/netlogon admin users = @sambaadmin browseable = No [Profiles] comment = Roaming Profile Share path = /home/profiles read only = No profile acls = Yes [homes] comment = Home Directories valid users = %S read only = No create mask = 0700 directory mask = 0700 browseable = No /smb.conf extract net groupmap list Domain Users (S-1-5-21-1908553111-1112605503-553197678-1003) - users Domain Admins (S-1-5-21-1908553111-1112605503-553197678-512) - sambaadmin Domain Guests (S-1-5-21-1908553111-1112605503-553197678-514) - nogroup /etc/samba/smbusers root = Administrator -- View this message in context: http://www.nabble.com/Samba-3-PDC---client-unable-to-join-domain-tp17309877p17309877.html Sent from the Samba - General mailing list archive at Nabble.com. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] [samba 3.0.25c] disappearing printers problem
On Tue, May 20, 2008 at 02:17:27PM -0400, Greene, Joe wrote: Scenario: Citrix, Win2k3. Solaris 9 Server - latest Solaris patch Samba 3.0.25c Every Monday morning, since applying the latest Solaris patches which upgraded samba from 3.0.21b - 3.0.25c, the following occurs. The Citrix clients can no longer print. Active directory was also switched to 2003 native mode. Sunday night, Citrix servers undergo a weekly reboot. Week 1 and 2:Monday morning start of business the Citrix clients cannot print to the Samba print shares. Restart Samba, service restored. Week 3 and 4: Monday Morning before start of business, restart samba via cron scheduler, Start of business, Citrix clients cannot print.. restart samba again.. service restored. Week 5: Admin on site. Manually restart samba, test user tries to print and cannot, however smbstatus shows the citrix server connects and pulls the data file for formatting the raw print job, but the print share never registers an access. restart samba again, Citrix server pulls file and printer session registers in smbstatus. Week 6: I'm dreading this. Rollback to 3.0.21b? Need more info I'm afraid. What do the debug logs for smbd say ? Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Write Once Read Many share with samba
Jean-Yves Avenard wrote: Hi 2008/5/20 Brian May [EMAIL PROTECTED]: I don't think it is possible with Unix or Samba permissions to: * allow file writes but deny file appends (and other modifications?). * allow creating files but deny creating folders. which appears to be what you have done under windows. This was my thoughts. Samba is running on a FreeBSD 6.3 AMD64 server, filesystem is UFS. I don't know of any ACL tools... How about a VFS module that overrides just open, rmdir, rename and unlink? unlink/rmdir/rename becomes a no-op, open for write fails if the file exists? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] squid + samba error
Hello to all. I´m using squid + samba to authenticate my users with active directory. The error occour only in the first time i authenticate an user. All works fine, but i have this is my logs: == /var/log/samba/log.winbindd == [2008/05/21 00:32:36, 2] nsswitch/winbindd_util.c:add_trusted_domain(171) Added domain BUILTIN S-1-5-32 [2008/05/21 00:32:37, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(615) Doing kerberos session setup [2008/05/21 00:35:56, 1] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(312) Could not get convert sid from string [2008/05/21 00:47:01, 1] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(312) Could not get convert sid from string [2008/05/21 00:48:57, 1] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(312) Could not get convert sid from string == /var/log/samba/log.winbindd-idmap == [2008/05/21 00:47:01, 2] nsswitch/idmap.c:idmap_new_mapping(957) gid allocation failed! Can't create mapping [2008/05/21 00:47:01, 1] nsswitch/idmap_tdb.c:idmap_tdb_allocate_id(470) Fatal Error: GID range full!! (max: 2) [2008/05/21 00:47:01, 2] nsswitch/idmap.c:idmap_new_mapping(957) gid allocation failed! Can't create mapping [2008/05/21 00:47:01, 1] nsswitch/idmap_tdb.c:idmap_tdb_allocate_id(470) Fatal Error: GID range full!! (max: 2) [2008/05/21 00:47:01, 2] nsswitch/idmap.c:idmap_new_mapping(957) gid allocation failed! Can't create mapping my smb.conf workgroup = DIGITALSTORAGESD password server = SERVER2003 realm = DIGITALSTORAGESD.LOCAL security = ADS netbios name = netserver # Definiçs do winbind bind interfaces only = yes winbind separator = / winbind uid = 1-2 winbind gid = 1-2 winbind enum users = yes winbind enum groups = yes winbind enum groups = yes winbind use default domain = yes log file = /var/log/samba/log.%m log level = 2 max log size = 1000 my samba version: samba-3.0.28a-0 What i can to solve that error? Thanks, Wilson Galafassi -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Unable to access linux files from windows using samba configured in linux Vmware
Napster wrote: Hi I had thw same issue with my networkcheck if the DNS translation for the Ip address of the system thats running Samba server.Or there is a work around to get this working... Check if u\you are able to access the files by going to the run option and then entering the ip address start-Run-\\192.168.0.143 Go to c:\windows\system32\drivers\etc\ there you would find a file by the name hosts add the ip address and also the host name for the server there. The file would look like this # Copyright (c) 1993-1999 Microsoft Corp. # # This is a sample HOSTS file used by Microsoft TCP/IP for Windows. # # This file contains the mappings of IP addresses to host names. Each # entry should be kept on an individual line. The IP address should # be placed in the first column followed by the corresponding host name. # The IP address and the host name should be separated by at least one # space. # # Additionally, comments (such as these) may be inserted on individual # lines or following the machine name denoted by a '#' symbol. # # For example: # # 102.54.94.97 rhino.acme.com # source server # 38.25.63.10 x.acme.com # x client host 127.0.0.1 localhost 192.168.0.143 napster-server1 Where 192.168.0.143 is the ip address of the system thats running Samba and napter-Server1 the hostname. If you are running DNS server then check the configuration file of the server. Napster:working: Thanks for the reply Napster, but i dint get exactly what you are telling.. say in my case i am running Vmware linux running Samba of which the IP address is 192.168.248.195 and hostname is just localhost.localdomain.. so i added an entry to the file you have said above in windows hosts file.. but still it is not working. it is telling the same problem.. and can you please tell me where to check the configuratyion file of the DNS Server ? -- View this message in context: http://www.nabble.com/Unable-to-access-linux-files-from-windows-using-samba-configured-in-linux-Vmware-tp16847019p17356339.html Sent from the Samba - General mailing list archive at Nabble.com. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
HP CIFS and ExtAuth Module
Will the HP CIFS and the Patchworks External Authentication modules work together. Basically, I want our VMS system to update UAF passwords from a Windows AD domain. Thanks, Mike Ober. PLEASE READ THIS IMPORTANT ETIQUETTE MESSAGE BEFORE POSTING: http://www.catb.org/~esr/faqs/smart-questions.html
[SCM] Samba Shared Repository - branch v3-2-stable updated - release-3-2-0pre3-95-gbfb9ee0
The branch, v3-2-stable has been updated via bfb9ee0b50e011a9235fb3634c5ba30a6031ed8f (commit) from 2b5a6347ee56aa90df54ecfe94059d9247493beb (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable - Log - commit bfb9ee0b50e011a9235fb3634c5ba30a6031ed8f Author: Jeremy Allison [EMAIL PROTECTED] Date: Mon May 19 13:11:27 2008 -0700 Restructuring of code to fix #5460. Remove search by name code from conn, we were already doing the same check in the dfs_redirect() function, so move it into parse_dfs_path() instead. Jeremy. (cherry picked from commit f1021e4c8d5ace6356c5b2106153288a6eb89a6b) --- Summary of changes: source/smbd/conn.c | 22 -- source/smbd/msdfs.c | 28 2 files changed, 12 insertions(+), 38 deletions(-) Changeset truncated at 500 lines: diff --git a/source/smbd/conn.c b/source/smbd/conn.c index 97861ed..c5a2df4 100644 --- a/source/smbd/conn.c +++ b/source/smbd/conn.c @@ -85,28 +85,6 @@ connection_struct *conn_find(unsigned cnum) } / - Find a conn given a service name. -/ - -connection_struct *conn_find_byname(const char *service) -{ - connection_struct *conn; - - for (conn=Connections;conn;conn=conn-next) { - if (strequal(lp_servicename(SNUM(conn)),service)) { - if (conn != Connections) { - /* Promote if not first. */ - DLIST_PROMOTE(Connections, conn); - } - return conn; - } - } - - return NULL; -} - - -/ find first available connection slot, starting from a random position. The randomisation stops problems with the server dieing and clients thinking the server is still available. diff --git a/source/smbd/msdfs.c b/source/smbd/msdfs.c index eaa66ef..f0dd900 100644 --- a/source/smbd/msdfs.c +++ b/source/smbd/msdfs.c @@ -36,13 +36,17 @@ extern uint32 global_client_caps; SVAL(inbuf,smb_flg2) FLAGS2_DFS_PATHNAMES bit and then send a local path, we have to cope with that too + If conn != NULL then ensure the provided service is + the one pointed to by the connection. + This version does everything using pointers within one copy of the pathname string, talloced on the struct dfs_path pointer (which must be talloced). This may be too clever to live JRA. **/ -static NTSTATUS parse_dfs_path(const char *pathname, +static NTSTATUS parse_dfs_path(connection_struct *conn, + const char *pathname, bool allow_wcards, struct dfs_path *pdp, /* MUST BE TALLOCED */ bool *ppath_contains_wcard) @@ -136,7 +140,10 @@ static NTSTATUS parse_dfs_path(const char *pathname, } /* Is this really our servicename ? */ - if (NULL == conn_find_byname(servicename)) { + if (conn !( strequal(servicename, lp_servicename(SNUM(conn))) + || (strequal(servicename, HOMES_NAME) +strequal(lp_servicename(SNUM(conn)), + get_current_username()) )) ) { DEBUG(10,(parse_dfs_path: %s is not our servicename\n, servicename)); @@ -621,7 +628,7 @@ static NTSTATUS dfs_redirect(TALLOC_CTX *ctx, return NT_STATUS_NO_MEMORY; } - status = parse_dfs_path(path_in, search_wcard_flag, pdp, + status = parse_dfs_path(conn, path_in, search_wcard_flag, pdp, ppath_contains_wcard); if (!NT_STATUS_IS_OK(status)) { TALLOC_FREE(pdp); @@ -662,17 +669,6 @@ static NTSTATUS dfs_redirect(TALLOC_CTX *ctx, return NT_STATUS_OK; } - if (!( strequal(pdp-servicename, lp_servicename(SNUM(conn))) - || (strequal(pdp-servicename, HOMES_NAME) -strequal(lp_servicename(SNUM(conn)), - get_current_username()) )) ) { - - /* The given sharename doesn't match this connection. */ - TALLOC_FREE(pdp); - - return NT_STATUS_OBJECT_PATH_NOT_FOUND; - } - status = dfs_path_lookup(ctx, conn, path_in, pdp, search_wcard_flag, NULL, NULL); if (!NT_STATUS_IS_OK(status)) { @@ -758,7 +754,7 @@ NTSTATUS get_referred_path(TALLOC_CTX *ctx, ZERO_STRUCT(conns); *self_referralp = False; - status =
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2363-gd9db027
The branch, v3-2-test has been updated via d9db027eae260ca53bfb1c687e0e86c97db94dfb (commit) from f1021e4c8d5ace6356c5b2106153288a6eb89a6b (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit d9db027eae260ca53bfb1c687e0e86c97db94dfb Author: Karolin Seeger [EMAIL PROTECTED] Date: Tue May 20 08:51:15 2008 +0200 WHATSNEW: Update changes since 3.2.0pre3. Karolin --- Summary of changes: WHATSNEW.txt |1 + 1 files changed, 1 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index e0a7634..56fca9c 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -234,6 +234,7 @@ o Alexander Bokovoy [EMAIL PROTECTED] o Günther Deschner [EMAIL PROTECTED] * BUG 5465: Fix joining with createcomputer=ou1/ou2/ou3. +* BUG 5461: Fix issue with Citrix on Samba DCs with more than 900 groups. * Fix wins null pointer crash in nss_wins module. * Fix lm session key length in _netr_LogonSamLogon. * Add -f switch for DsGetDCName() example and be more verbose on output. -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-stable updated - release-3-2-0pre3-96-gef8b620
The branch, v3-2-stable has been updated via ef8b620edc77b23a8849ec469768d8f220c4e895 (commit) from bfb9ee0b50e011a9235fb3634c5ba30a6031ed8f (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable - Log - commit ef8b620edc77b23a8849ec469768d8f220c4e895 Author: Karolin Seeger [EMAIL PROTECTED] Date: Tue May 20 08:51:15 2008 +0200 WHATSNEW: Update changes since 3.2.0pre3. Karolin (cherry picked from commit d9db027eae260ca53bfb1c687e0e86c97db94dfb) --- Summary of changes: WHATSNEW.txt |1 + 1 files changed, 1 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index e0a7634..56fca9c 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -234,6 +234,7 @@ o Alexander Bokovoy [EMAIL PROTECTED] o Günther Deschner [EMAIL PROTECTED] * BUG 5465: Fix joining with createcomputer=ou1/ou2/ou3. +* BUG 5461: Fix issue with Citrix on Samba DCs with more than 900 groups. * Fix wins null pointer crash in nss_wins module. * Fix lm session key length in _netr_LogonSamLogon. * Add -f switch for DsGetDCName() example and be more verbose on output. -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2364-gb09f65f
The branch, v3-2-test has been updated via b09f65f9d0b71760cddf42c82eac549ae13d7574 (commit) from d9db027eae260ca53bfb1c687e0e86c97db94dfb (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit b09f65f9d0b71760cddf42c82eac549ae13d7574 Author: Günther Deschner [EMAIL PROTECTED] Date: Fri May 16 13:24:15 2008 +0200 Fix Bug #5461 and implement a very basic _samr_GetDisplayEnumerationIndex(). Citrix PM cannot use a Samba DC when having more then 900 groups as citrix insists on calling _samr_GetDisplayEnumerationIndex() after receiving the first 900 groups via _samr_QueryDisplayInfo() to get the continuation index. Guenther (cherry picked from commit 1c4adc8dda68eae9839bdff843aadf8c98dd9e87) --- Summary of changes: source/rpc_server/srv_samr_nt.c | 159 ++- 1 files changed, 139 insertions(+), 20 deletions(-) Changeset truncated at 500 lines: diff --git a/source/rpc_server/srv_samr_nt.c b/source/rpc_server/srv_samr_nt.c index 0d9dd55..f28c771 100644 --- a/source/rpc_server/srv_samr_nt.c +++ b/source/rpc_server/srv_samr_nt.c @@ -5652,6 +5652,145 @@ NTSTATUS _samr_SetDomainInfo(pipes_struct *p, } / + _samr_GetDisplayEnumerationIndex +/ + +NTSTATUS _samr_GetDisplayEnumerationIndex(pipes_struct *p, + struct samr_GetDisplayEnumerationIndex *r) +{ + struct samr_info *info = NULL; + uint32_t max_entries = (uint32_t) -1; + uint32_t enum_context = 0; + int i; + uint32_t num_account = 0; + struct samr_displayentry *entries = NULL; + + DEBUG(5,(_samr_GetDisplayEnumerationIndex: %d\n, __LINE__)); + + /* find the policy handle. open a policy on it. */ + if (!find_policy_by_hnd(p, r-in.domain_handle, (void **)(void *)info)) { + return NT_STATUS_INVALID_HANDLE; + } + + if ((r-in.level 1) || (r-in.level 3)) { + DEBUG(0,(_samr_GetDisplayEnumerationIndex: + Unknown info level (%u)\n, + r-in.level)); + return NT_STATUS_INVALID_INFO_CLASS; + } + + become_root(); + + /* The following done as ROOT. Don't return without unbecome_root(). */ + + switch (r-in.level) { + case 1: + if (info-disp_info-users == NULL) { + info-disp_info-users = pdb_search_users(ACB_NORMAL); + if (info-disp_info-users == NULL) { + unbecome_root(); + return NT_STATUS_ACCESS_DENIED; + } + DEBUG(10,(_samr_GetDisplayEnumerationIndex: + starting user enumeration at index %u\n, + (unsigned int)enum_context)); + } else { + DEBUG(10,(_samr_GetDisplayEnumerationIndex: + using cached user enumeration at index %u\n, + (unsigned int)enum_context)); + } + num_account = pdb_search_entries(info-disp_info-users, +enum_context, max_entries, +entries); + break; + case 2: + if (info-disp_info-machines == NULL) { + info-disp_info-machines = + pdb_search_users(ACB_WSTRUST|ACB_SVRTRUST); + if (info-disp_info-machines == NULL) { + unbecome_root(); + return NT_STATUS_ACCESS_DENIED; + } + DEBUG(10,(_samr_GetDisplayEnumerationIndex: + starting machine enumeration at index %u\n, + (unsigned int)enum_context)); + } else { + DEBUG(10,(_samr_GetDisplayEnumerationIndex: + using cached machine enumeration at index %u\n, + (unsigned int)enum_context)); + } + num_account = pdb_search_entries(info-disp_info-machines, +enum_context, max_entries, +entries); + break; + case 3: + if (info-disp_info-groups == NULL) { + info-disp_info-groups = pdb_search_groups(); + if (info-disp_info-groups == NULL) { + unbecome_root(); + return
[SCM] Samba Shared Repository - branch v3-2-stable updated - release-3-2-0pre3-99-g1162b4f
The branch, v3-2-stable has been updated via 1162b4f5a16b937ead40ee7787489a22c868875f (commit) via e0e7fae322cdcfe4f2c88c943a954e3da3d91605 (commit) via df97bdf8a29f044e3c21df1fde9ca59652b01d9c (commit) from ef8b620edc77b23a8849ec469768d8f220c4e895 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable - Log - commit 1162b4f5a16b937ead40ee7787489a22c868875f Author: Günther Deschner [EMAIL PROTECTED] Date: Wed Apr 23 10:55:26 2008 +0200 rpcclient: Add tiny fix for cmd_samr_get_dispinfo_idx(). Guenther (cherry picked from commit c15b5d73badafdc93066197aef72e37a8b99) commit e0e7fae322cdcfe4f2c88c943a954e3da3d91605 Author: Günther Deschner [EMAIL PROTECTED] Date: Tue Apr 22 23:11:53 2008 +0200 rpcclient: Add getdispinfoidx command. Guenther (cherry picked from commit 7d8461d080c92a83bd7a8d168fdf1fe98e8bec9a) commit df97bdf8a29f044e3c21df1fde9ca59652b01d9c Author: Volker Lendecke [EMAIL PROTECTED] Date: Tue May 6 15:06:12 2008 +0200 Fix a memleak in construct_printer_info_7() Also fix a ignoring asprintf result warning (cherry picked from commit 64d21f39636019d6a17f84efc6fb9e61e67a235e) --- Summary of changes: source/rpc_server/srv_spoolss_nt.c |7 +++- source/rpcclient/cmd_samr.c| 63 2 files changed, 68 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/source/rpc_server/srv_spoolss_nt.c b/source/rpc_server/srv_spoolss_nt.c index da1528f..a8aa339 100644 --- a/source/rpc_server/srv_spoolss_nt.c +++ b/source/rpc_server/srv_spoolss_nt.c @@ -4361,10 +4361,13 @@ static bool construct_printer_info_7(Printer_entry *print_hnd, PRINTER_INFO_7 *p struct GUID guid; if (is_printer_published(print_hnd, snum, guid)) { - asprintf(guid_str, {%s}, -smb_uuid_string(talloc_tos(), guid)); + if (asprintf(guid_str, {%s}, +smb_uuid_string(talloc_tos(), guid)) == -1) { + return false; + } strupper_m(guid_str); init_unistr(printer-guid, guid_str); + SAFE_FREE(guid_str); printer-action = SPOOL_DS_PUBLISH; } else { init_unistr(printer-guid, ); diff --git a/source/rpcclient/cmd_samr.c b/source/rpcclient/cmd_samr.c index e58354d..5523d2a 100644 --- a/source/rpcclient/cmd_samr.c +++ b/source/rpcclient/cmd_samr.c @@ -2565,6 +2565,68 @@ static NTSTATUS cmd_samr_chgpasswd3(struct rpc_pipe_client *cli, return result; } +static NTSTATUS cmd_samr_get_dispinfo_idx(struct rpc_pipe_client *cli, + TALLOC_CTX *mem_ctx, + int argc, const char **argv) +{ + NTSTATUS status; + struct policy_handle connect_handle; + struct policy_handle domain_handle; + uint16_t level = 1; + struct lsa_String name; + uint32_t idx = 0; + + if (argc 2 || argc 3) { + printf(Usage: %s name level\n, argv[0]); + return NT_STATUS_INVALID_PARAMETER; + } + + init_lsa_String(name, argv[1]); + + if (argc == 3) { + level = atoi(argv[2]); + } + + status = rpccli_try_samr_connects(cli, mem_ctx, + SEC_RIGHTS_MAXIMUM_ALLOWED, + connect_handle); + + if (!NT_STATUS_IS_OK(status)) { + goto done; + } + + status = rpccli_samr_OpenDomain(cli, mem_ctx, + connect_handle, + SEC_RIGHTS_MAXIMUM_ALLOWED, + domain_sid, + domain_handle); + + if (!NT_STATUS_IS_OK(status)) + goto done; + + + status = rpccli_samr_GetDisplayEnumerationIndex(cli, mem_ctx, + domain_handle, + level, + name, + idx); + + if (NT_STATUS_IS_OK(status) || + NT_STATUS_EQUAL(status, NT_STATUS_NO_MORE_ENTRIES)) { + printf(idx: %d (0x%08x)\n, idx, idx); + } + done: + + if (is_valid_policy_hnd(domain_handle)) { + rpccli_samr_Close(cli, mem_ctx, domain_handle); + } + if (is_valid_policy_hnd(connect_handle)) { + rpccli_samr_Close(cli, mem_ctx, connect_handle); + } + + return status; + +} /* List of commands exported by this module */ struct cmd_set samr_commands[] = { @@ -2602,5 +2664,6 @@
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2365-g1257d5c
The branch, v3-2-test has been updated via 1257d5cf2a4fda0143e1ac9c697a971738366067 (commit) from b09f65f9d0b71760cddf42c82eac549ae13d7574 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 1257d5cf2a4fda0143e1ac9c697a971738366067 Author: Günther Deschner [EMAIL PROTECTED] Date: Tue Apr 29 20:13:22 2008 +0200 _netr_LogonSamLogon: fix lm session key length. Thanks Volker for pointing this out. Guenther (cherry picked from commit 7ccca9a004c7a4794781cbd7c703c53a0481bd51) --- Summary of changes: source/rpc_server/srv_netlog_nt.c |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source/rpc_server/srv_netlog_nt.c b/source/rpc_server/srv_netlog_nt.c index 4664e8d..203f538 100644 --- a/source/rpc_server/srv_netlog_nt.c +++ b/source/rpc_server/srv_netlog_nt.c @@ -1109,7 +1109,7 @@ NTSTATUS _netr_LogonSamLogon(pipes_struct *p, } memcpy(pipe_session_key, p-auth.a_u.schannel_auth-sess_key, 16); } - SamOEMhash(lm_session_key.key, pipe_session_key, 16); + SamOEMhash(lm_session_key.key, pipe_session_key, 8); memset(pipe_session_key, '\0', 16); } -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-2516-g48bf0b4
The branch, v3-3-test has been updated via 48bf0b42a7d3829d476a50b4f6f80022279b4e49 (commit) via 1429f3b7cf293994b334052428fcdadcee162dea (commit) via 029875d8c9b2f9448f5299faaa3a48e8bccbca53 (commit) from 54556df561d03d30b2fc21b9eaabe56b8c758301 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test - Log - commit 48bf0b42a7d3829d476a50b4f6f80022279b4e49 Author: Karolin Seeger [EMAIL PROTECTED] Date: Fri May 16 09:27:20 2008 +0200 man pages: Remove man page for 'mangled map'. 'mangled map' has been removed with dee8beba7a92b8a3f68bbcc59fd0a827f68c7736. Karolin (cherry picked from commit d9b4e500675a378daba50d12cd638a245aa78b72) commit 1429f3b7cf293994b334052428fcdadcee162dea Author: Karolin Seeger [EMAIL PROTECTED] Date: Tue May 20 11:09:06 2008 +0200 sesssetup.c: Add debug message. Log when we kill other smbd sessions like when we hit the VC == 0 case. This one fixes BUG #5476. Initial patch from Björn Jacke [EMAIL PROTECTED]. Karolin commit 029875d8c9b2f9448f5299faaa3a48e8bccbca53 Author: Karolin Seeger [EMAIL PROTECTED] Date: Tue May 20 11:03:33 2008 +0200 man pages: Add documentation for new cluster parameters. Karolin --- Summary of changes: docs-xml/smbdotconf/filename/mangledmap.xml | 33 - docs-xml/smbdotconf/misc/clusteraddresses.xml | 17 + docs-xml/smbdotconf/misc/clustering.xml | 17 + docs-xml/smbdotconf/misc/ctdbdsocket.xml | 16 source/smbd/sesssetup.c |3 ++ 5 files changed, 53 insertions(+), 33 deletions(-) delete mode 100644 docs-xml/smbdotconf/filename/mangledmap.xml create mode 100644 docs-xml/smbdotconf/misc/clusteraddresses.xml create mode 100644 docs-xml/smbdotconf/misc/clustering.xml create mode 100644 docs-xml/smbdotconf/misc/ctdbdsocket.xml Changeset truncated at 500 lines: diff --git a/docs-xml/smbdotconf/filename/mangledmap.xml b/docs-xml/smbdotconf/filename/mangledmap.xml deleted file mode 100644 index b4be3a8..000 --- a/docs-xml/smbdotconf/filename/mangledmap.xml +++ /dev/null @@ -1,33 +0,0 @@ -samba:parameter name=mangled map -type=string - context=S - xmlns:samba=http://www.samba.org/samba/DTD/samba-doc; -description - para - This is for those who want to directly map UNIX file names which cannot be represented on - Windows/DOS. The mangling of names is not always what is needed. In particular you may have - documents with file extensions that differ between DOS and UNIX. - For example, under UNIX it is common to use filename moreinfo=none.html/filename - for HTML files, whereas under Windows/DOS filename moreinfo=none.htm/filename - is more commonly used. - /para - - para - So to map filename moreinfo=nonehtml/filename to filename moreinfo=nonehtm/filename - you would use: - /para - - para - smbconfoption name=mangled map(*.html *.htm)/smbconfoption. - /para - - para - One very useful case is to remove the annoying filename moreinfo=none;1/filename off - the ends of filenames on some CDROMs (only visible under some UNIXes). To do this use a map of - (*;1 *;). - /para -/description - -value type=defaultcommentno mangled map/comment/value -value type=example(*;1 *;)/value -/samba:parameter diff --git a/docs-xml/smbdotconf/misc/clusteraddresses.xml b/docs-xml/smbdotconf/misc/clusteraddresses.xml new file mode 100644 index 000..d34d550 --- /dev/null +++ b/docs-xml/smbdotconf/misc/clusteraddresses.xml @@ -0,0 +1,17 @@ +samba:parameter name=cluster addresses +context=G +type=list +developer=1 +xmlns:samba=http://www.samba.org/samba/DTD/samba-doc; +description + paraWith this parameter you can add additional addresses + nmbd will register with a WINS server. These addresses are not + necessarily present on all nodes simultaneously, but they will + be registered with the WINS server so that clients can contact + any of the nodes. + /para +/description + +value type=default/value +value type=example10.0.0.1 10.0.0.2 10.0.0.3/value +/samba:parameter diff --git a/docs-xml/smbdotconf/misc/clustering.xml b/docs-xml/smbdotconf/misc/clustering.xml new file mode 100644 index 000..b85934e --- /dev/null +++ b/docs-xml/smbdotconf/misc/clustering.xml @@ -0,0 +1,17 @@ +samba:parameter name=clustering + context=G +type=boolean + advanced=1 + xmlns:samba=http://www.samba.org/samba/DTD/samba-doc; +description +
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2367-gab83cd9
The branch, v3-2-test has been updated via ab83cd9fc012689191d9a218be5c9f439fa560b5 (commit) via 34a947a7886ee848084b9d88f99f8016892f083f (commit) from 1257d5cf2a4fda0143e1ac9c697a971738366067 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit ab83cd9fc012689191d9a218be5c9f439fa560b5 Author: Karolin Seeger [EMAIL PROTECTED] Date: Sun May 4 06:48:31 2008 +0200 Developer's Guide: Fix typos. Karolin (cherry picked from commit e206ffb8562c82173c9b426d76e49986fefe) commit 34a947a7886ee848084b9d88f99f8016892f083f Author: Karolin Seeger [EMAIL PROTECTED] Date: Tue May 20 11:03:33 2008 +0200 man pages: Add documentation for new cluster parameters. Karolin (cherry picked from commit 029875d8c9b2f9448f5299faaa3a48e8bccbca53) --- Summary of changes: docs-xml/Samba3-Developers-Guide/vfs.xml |4 ++-- docs-xml/smbdotconf/misc/clusteraddresses.xml | 17 + docs-xml/smbdotconf/misc/clustering.xml | 17 + docs-xml/smbdotconf/misc/ctdbdsocket.xml | 16 4 files changed, 52 insertions(+), 2 deletions(-) create mode 100644 docs-xml/smbdotconf/misc/clusteraddresses.xml create mode 100644 docs-xml/smbdotconf/misc/clustering.xml create mode 100644 docs-xml/smbdotconf/misc/ctdbdsocket.xml Changeset truncated at 500 lines: diff --git a/docs-xml/Samba3-Developers-Guide/vfs.xml b/docs-xml/Samba3-Developers-Guide/vfs.xml index 44e0bd6..96d512c 100644 --- a/docs-xml/Samba3-Developers-Guide/vfs.xml +++ b/docs-xml/Samba3-Developers-Guide/vfs.xml @@ -553,7 +553,7 @@ you can set this function pointer to NULL./para/listitem titleUpgrading to the New VFS Interface/title sect2 -titleUpgrading from 2.2.* and 3.0aplha modules/title +titleUpgrading from 2.2.* and 3.0alpha modules/title orderedlist listitempara @@ -833,7 +833,7 @@ static int example_close(vfs_handle_struct *handle, files_struct *fsp, int fd) /para/listitem listitempara -To make it easy to build 3rd party modules it would be usefull to provide +To make it easy to build 3rd party modules it would be useful to provide configure.in, (configure), install.sh and Makefile.in with the module. (Take a look at the example in filenameexamples/VFS/filename.) /para diff --git a/docs-xml/smbdotconf/misc/clusteraddresses.xml b/docs-xml/smbdotconf/misc/clusteraddresses.xml new file mode 100644 index 000..d34d550 --- /dev/null +++ b/docs-xml/smbdotconf/misc/clusteraddresses.xml @@ -0,0 +1,17 @@ +samba:parameter name=cluster addresses +context=G +type=list +developer=1 +xmlns:samba=http://www.samba.org/samba/DTD/samba-doc; +description + paraWith this parameter you can add additional addresses + nmbd will register with a WINS server. These addresses are not + necessarily present on all nodes simultaneously, but they will + be registered with the WINS server so that clients can contact + any of the nodes. + /para +/description + +value type=default/value +value type=example10.0.0.1 10.0.0.2 10.0.0.3/value +/samba:parameter diff --git a/docs-xml/smbdotconf/misc/clustering.xml b/docs-xml/smbdotconf/misc/clustering.xml new file mode 100644 index 000..b85934e --- /dev/null +++ b/docs-xml/smbdotconf/misc/clustering.xml @@ -0,0 +1,17 @@ +samba:parameter name=clustering + context=G +type=boolean + advanced=1 + xmlns:samba=http://www.samba.org/samba/DTD/samba-doc; +description + paraThis parameter specifies whether Samba should contact + ctdb for accessing its tdb files and use ctdb as a backend + for its messaging backend. + /para + + paraSet this parameter to value type=exampleyes/value only if + you have a cluster setup with ctdb running. + /para +/description +value type=defaultno/value +/samba:parameter diff --git a/docs-xml/smbdotconf/misc/ctdbdsocket.xml b/docs-xml/smbdotconf/misc/ctdbdsocket.xml new file mode 100644 index 000..a478553 --- /dev/null +++ b/docs-xml/smbdotconf/misc/ctdbdsocket.xml @@ -0,0 +1,16 @@ +samba:parameter name=ctdbd socket + context=G + advanced=1 +type=string + xmlns:samba=http://www.samba.org/samba/DTD/samba-doc; +synonymdefault/synonym +description + paraIf you set value type=exampleclustering=yes/value, + you need to tell Samba where ctdbd listens on its unix domain + socket. The default path as of ctdb 1.0 is /tmp/ctdb.socket which + you have to explicitly set for Samba in smb.conf. + /para +/description +value type=default/value +value type=example/tmp/ctdb.socket/value +/samba:parameter
[SCM] Samba Shared Repository - branch v3-2-stable updated - release-3-2-0pre3-101-gab07c25
The branch, v3-2-stable has been updated via ab07c252d73534b50101975f742117477c92490e (commit) via 16adac4ea96e2234fd1253d0b866b0654bed9f8e (commit) from 1162b4f5a16b937ead40ee7787489a22c868875f (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable - Log - commit ab07c252d73534b50101975f742117477c92490e Author: Karolin Seeger [EMAIL PROTECTED] Date: Tue May 20 11:03:33 2008 +0200 man pages: Add documentation for new cluster parameters. Karolin (cherry picked from commit 029875d8c9b2f9448f5299faaa3a48e8bccbca53) commit 16adac4ea96e2234fd1253d0b866b0654bed9f8e Author: Karolin Seeger [EMAIL PROTECTED] Date: Sun May 4 06:48:31 2008 +0200 Developer's Guide: Fix typos. Karolin (cherry picked from commit e206ffb8562c82173c9b426d76e49986fefe) --- Summary of changes: docs-xml/Samba3-Developers-Guide/vfs.xml |4 ++-- docs-xml/smbdotconf/misc/clusteraddresses.xml | 17 + docs-xml/smbdotconf/misc/clustering.xml | 17 + docs-xml/smbdotconf/misc/ctdbdsocket.xml | 16 4 files changed, 52 insertions(+), 2 deletions(-) create mode 100644 docs-xml/smbdotconf/misc/clusteraddresses.xml create mode 100644 docs-xml/smbdotconf/misc/clustering.xml create mode 100644 docs-xml/smbdotconf/misc/ctdbdsocket.xml Changeset truncated at 500 lines: diff --git a/docs-xml/Samba3-Developers-Guide/vfs.xml b/docs-xml/Samba3-Developers-Guide/vfs.xml index 44e0bd6..96d512c 100644 --- a/docs-xml/Samba3-Developers-Guide/vfs.xml +++ b/docs-xml/Samba3-Developers-Guide/vfs.xml @@ -553,7 +553,7 @@ you can set this function pointer to NULL./para/listitem titleUpgrading to the New VFS Interface/title sect2 -titleUpgrading from 2.2.* and 3.0aplha modules/title +titleUpgrading from 2.2.* and 3.0alpha modules/title orderedlist listitempara @@ -833,7 +833,7 @@ static int example_close(vfs_handle_struct *handle, files_struct *fsp, int fd) /para/listitem listitempara -To make it easy to build 3rd party modules it would be usefull to provide +To make it easy to build 3rd party modules it would be useful to provide configure.in, (configure), install.sh and Makefile.in with the module. (Take a look at the example in filenameexamples/VFS/filename.) /para diff --git a/docs-xml/smbdotconf/misc/clusteraddresses.xml b/docs-xml/smbdotconf/misc/clusteraddresses.xml new file mode 100644 index 000..d34d550 --- /dev/null +++ b/docs-xml/smbdotconf/misc/clusteraddresses.xml @@ -0,0 +1,17 @@ +samba:parameter name=cluster addresses +context=G +type=list +developer=1 +xmlns:samba=http://www.samba.org/samba/DTD/samba-doc; +description + paraWith this parameter you can add additional addresses + nmbd will register with a WINS server. These addresses are not + necessarily present on all nodes simultaneously, but they will + be registered with the WINS server so that clients can contact + any of the nodes. + /para +/description + +value type=default/value +value type=example10.0.0.1 10.0.0.2 10.0.0.3/value +/samba:parameter diff --git a/docs-xml/smbdotconf/misc/clustering.xml b/docs-xml/smbdotconf/misc/clustering.xml new file mode 100644 index 000..b85934e --- /dev/null +++ b/docs-xml/smbdotconf/misc/clustering.xml @@ -0,0 +1,17 @@ +samba:parameter name=clustering + context=G +type=boolean + advanced=1 + xmlns:samba=http://www.samba.org/samba/DTD/samba-doc; +description + paraThis parameter specifies whether Samba should contact + ctdb for accessing its tdb files and use ctdb as a backend + for its messaging backend. + /para + + paraSet this parameter to value type=exampleyes/value only if + you have a cluster setup with ctdb running. + /para +/description +value type=defaultno/value +/samba:parameter diff --git a/docs-xml/smbdotconf/misc/ctdbdsocket.xml b/docs-xml/smbdotconf/misc/ctdbdsocket.xml new file mode 100644 index 000..a478553 --- /dev/null +++ b/docs-xml/smbdotconf/misc/ctdbdsocket.xml @@ -0,0 +1,16 @@ +samba:parameter name=ctdbd socket + context=G + advanced=1 +type=string + xmlns:samba=http://www.samba.org/samba/DTD/samba-doc; +synonymdefault/synonym +description + paraIf you set value type=exampleclustering=yes/value, + you need to tell Samba where ctdbd listens on its unix domain + socket. The default path as of ctdb 1.0 is /tmp/ctdb.socket which + you have to explicitly set for Samba in smb.conf. + /para +/description +value type=default/value +value type=example/tmp/ctdb.socket/value +/samba:parameter
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2379-ga46ae502
The branch, v3-2-test has been updated via a46ae502eacba4323a1cf6a57afed4a854634af1 (commit) via 86c4db49b91971a023907ce65e9764774fe5a0d5 (commit) via 1916bfa933d7979aefda1f29d469f6a694b91586 (commit) via 7bd026f44412024559f7573f48c9201c2d8c8a64 (commit) via e2f73af845bdda822cffdcd5614fadf8d37cd8de (commit) via 6305d46c8a9262f5bcb9a2a0ac3599a915df27f4 (commit) via 824f590c7ebca0dcde8e57ff0ff4ef21cd7faa8f (commit) via cece7ec384330bf3124723a3d25069d397e27795 (commit) via 22658feaf649d4a053ebe02c0f15c4fb4d83ce3b (commit) via 7b7ec7ab4153a306537bc98289d9d9a9ed63f87c (commit) via cb7b3b5dfe2c240cdf2c0472f05cdd77b49a184b (commit) via e87f4bf6c850c00cb480bb77b288427b8d4685a5 (commit) from ab83cd9fc012689191d9a218be5c9f439fa560b5 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit a46ae502eacba4323a1cf6a57afed4a854634af1 Author: Günther Deschner [EMAIL PROTECTED] Date: Tue May 20 11:44:46 2008 +0200 Revert Re-run make idl. This reverts commit fe7203090c0c51e4561a3b5ce0d5d131d280ba8e. commit 86c4db49b91971a023907ce65e9764774fe5a0d5 Author: Günther Deschner [EMAIL PROTECTED] Date: Tue May 20 11:33:12 2008 +0200 Revert Re-run make idl. This reverts commit 0d8181dab75887231a168f910203e53ec54fa4eb. commit 1916bfa933d7979aefda1f29d469f6a694b91586 Author: Günther Deschner [EMAIL PROTECTED] Date: Tue May 20 11:32:18 2008 +0200 Revert No need to compose CLI_SERVER_NAME_SLASH in net rpc service anymore. This reverts commit b5291d477381521cd4b71674616f8c9899007002. commit 7bd026f44412024559f7573f48c9201c2d8c8a64 Author: Günther Deschner [EMAIL PROTECTED] Date: Tue May 20 11:32:05 2008 +0200 Revert Move svc_status_string() out of rpc_client/cli_svcctl.c This reverts commit 2860ae2eb2cb99b4febb352f516b3fa9fbd2abbb. commit e2f73af845bdda822cffdcd5614fadf8d37cd8de Author: Günther Deschner [EMAIL PROTECTED] Date: Tue May 20 11:29:42 2008 +0200 Revert Fix IDL for svcctl_EnumDependentServicesW(). This reverts commit 46bfded43dcabdd2302d82920fb2a37c41e58126. commit 6305d46c8a9262f5bcb9a2a0ac3599a915df27f4 Author: Günther Deschner [EMAIL PROTECTED] Date: Tue May 20 11:28:17 2008 +0200 Revert Re-run make idl. This reverts commit f67632f9b24487bfaef9cc2ab932fda78b3c. Conflicts: source/librpc/gen_ndr/cli_ntsvcs.c commit 824f590c7ebca0dcde8e57ff0ff4ef21cd7faa8f Author: Günther Deschner [EMAIL PROTECTED] Date: Tue May 20 11:25:56 2008 +0200 Revert Comment out some svcctl headers which are now defined in IDL. This reverts commit 2201a8118c6abae3425dd5728af129bb8f71b564. commit cece7ec384330bf3124723a3d25069d397e27795 Author: Günther Deschner [EMAIL PROTECTED] Date: Tue May 20 11:25:30 2008 +0200 Revert Fill in IDL for PNP_GetDeviceRegProp. This reverts commit b1b6e93aa1f1b6d80969b6e5dd8f723e21ae8ce8. commit 22658feaf649d4a053ebe02c0f15c4fb4d83ce3b Author: Günther Deschner [EMAIL PROTECTED] Date: Tue May 20 11:24:58 2008 +0200 Revert Add svcctl_MgrAccessMask and svcctl_ServiceAccessMask. This reverts commit eeb7c7d9d0c9f7ac171641bc8cafe20db704fdc4. commit 7b7ec7ab4153a306537bc98289d9d9a9ed63f87c Author: Günther Deschner [EMAIL PROTECTED] Date: Tue May 20 11:23:13 2008 +0200 Revert Use pidl for _svcctl_EnumDependentServicesW(). This reverts commit 988291a9c07c055213f8979ebe75bb392811008d. commit cb7b3b5dfe2c240cdf2c0472f05cdd77b49a184b Author: Günther Deschner [EMAIL PROTECTED] Date: Tue May 20 11:22:43 2008 +0200 Revert Remove unused marshalling for SVCCTL_ENUM_DEPENDENT_SERVICES. This reverts commit 5838d81346a51ef1e996bab938533ae2097f7e47. commit e87f4bf6c850c00cb480bb77b288427b8d4685a5 Author: Günther Deschner [EMAIL PROTECTED] Date: Tue May 20 11:21:41 2008 +0200 Revert Add ntsvcs_getdevregprop command to rpcclient. This reverts commit 4abe30fdae511422dccd04d0287d962192beadcb. --- Summary of changes: source/include/rpc_ntsvcs.h|2 + source/include/rpc_secdes.h| 10 +-- source/include/rpc_svcctl.h| 16 source/librpc/gen_ndr/cli_ntsvcs.c | 17 source/librpc/gen_ndr/cli_ntsvcs.h |7 -- source/librpc/gen_ndr/cli_svcctl.c | 12 ++- source/librpc/gen_ndr/cli_svcctl.h |8 +- source/librpc/gen_ndr/ndr_ntsvcs.c | 153 source/librpc/gen_ndr/ndr_svcctl.c | 111 ++ source/librpc/gen_ndr/ndr_svcctl.h |2 - source/librpc/gen_ndr/ntsvcs.h | 14 --- source/librpc/gen_ndr/srv_ntsvcs.c | 10 --- source/librpc/gen_ndr/srv_svcctl.c |2 +- source/librpc/gen_ndr/svcctl.h | 27 +-- source/librpc/idl/ntsvcs.idl
[SCM] Samba Shared Repository - branch v3-2-stable updated - release-3-2-0pre3-102-gdfeeb74
The branch, v3-2-stable has been updated via dfeeb74b00346aea16e69663fbc99f814e793229 (commit) from ab07c252d73534b50101975f742117477c92490e (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable - Log - commit dfeeb74b00346aea16e69663fbc99f814e793229 Author: Günther Deschner [EMAIL PROTECTED] Date: Thu Mar 27 22:55:20 2008 +0100 Make sure to zero the returned handle in _svcctl_CloseServiceHandle(). Guenther (cherry picked from commit 84a079af490cb135dd557091932ea079e1d7ff5b) --- Summary of changes: source/rpc_server/srv_svcctl_nt.c |2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/source/rpc_server/srv_svcctl_nt.c b/source/rpc_server/srv_svcctl_nt.c index 3962626..446fa4b 100644 --- a/source/rpc_server/srv_svcctl_nt.c +++ b/source/rpc_server/srv_svcctl_nt.c @@ -328,6 +328,8 @@ WERROR _svcctl_CloseServiceHandle(pipes_struct *p, struct svcctl_CloseServiceHan if ( !close_policy_hnd( p, r-in.handle ) ) return WERR_BADFID; + ZERO_STRUCTP(r-out.handle); + return WERR_OK; } -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v4-0-test updated - release-4-0-0alpha3-1646-gf72dc52
The branch, v4-0-test has been updated via f72dc52ccc426c8057b91b4699dfeda7d9e9b864 (commit) from e360be0b99b638afdfa789e217bf08f99d09be7a (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test - Log - commit f72dc52ccc426c8057b91b4699dfeda7d9e9b864 Author: Volker Lendecke [EMAIL PROTECTED] Date: Tue May 20 12:59:04 2008 +0200 Change wks password in rpc-bench-schannel1 Prove that a workstation password change does not affect existing schannel connections --- Summary of changes: source/torture/rpc/schannel.c | 64 + 1 files changed, 64 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/source/torture/rpc/schannel.c b/source/torture/rpc/schannel.c index f0279f0..a8f70b2 100644 --- a/source/torture/rpc/schannel.c +++ b/source/torture/rpc/schannel.c @@ -738,6 +738,70 @@ bool torture_rpc_schannel_bench1(struct torture_context *torture) } torture_assert_ntstatus_ok(torture, s-error, Failed establish a connect); + /* +* Change the workstation password after establishing the netlogon +* schannel connections to prove that existing connections are not +* affected by a wks pwchange. +*/ + + { + struct netr_ServerPasswordSet pwset; + char *password = generate_random_str(s-join_ctx1, 8); + struct creds_CredentialState *creds_state; + struct dcerpc_pipe *net_pipe; + + status = dcerpc_pipe_connect_b(s, net_pipe, s-b, + ndr_table_netlogon, + s-wks_creds1, + torture-ev, torture-lp_ctx); + + torture_assert_ntstatus_ok(torture, status, + dcerpc_pipe_connect_b failed); + + pwset.in.server_name = talloc_asprintf( + net_pipe, %s, dcerpc_server_name(net_pipe)); + pwset.in.computer_name = + cli_credentials_get_workstation(s-wks_creds1); + pwset.in.account_name = talloc_asprintf( + net_pipe, %s$, pwset.in.computer_name); + pwset.in.secure_channel_type = SEC_CHAN_WKSTA; + E_md4hash(password, pwset.in.new_password.hash); + + creds_state = cli_credentials_get_netlogon_creds( + s-wks_creds1); + creds_des_encrypt(creds_state, pwset.in.new_password); + creds_client_authenticator(creds_state, pwset.in.credential); + + status = dcerpc_netr_ServerPasswordSet(net_pipe, torture, pwset); + torture_assert_ntstatus_ok(torture, status, + ServerPasswordSet failed); + + if (!creds_client_check(creds_state, + pwset.out.return_authenticator.cred)) { + printf(Credential chaining failed\n); + } + + cli_credentials_set_password(s-wks_creds1, password, +CRED_SPECIFIED); + + talloc_free(net_pipe); + + /* Just as a test, connect with the new creds */ + + talloc_free(s-wks_creds1-netlogon_creds); + s-wks_creds1-netlogon_creds = NULL; + + status = dcerpc_pipe_connect_b(s, net_pipe, s-b, + ndr_table_netlogon, + s-wks_creds1, + torture-ev, torture-lp_ctx); + + torture_assert_ntstatus_ok(torture, status, + dcerpc_pipe_connect_b failed); + + talloc_free(net_pipe); + } + torture_comment(torture, Start looping LogonSamLogonEx on %d connections for %d secs\n, s-nprocs, s-timelimit); for (i=0; i s-nprocs; i++) { -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-stable updated - release-3-2-0pre3-103-gca21a1e
The branch, v3-2-stable has been updated via ca21a1e6eb297f65513139e201cbd212a0bd92d2 (commit) from dfeeb74b00346aea16e69663fbc99f814e793229 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable - Log - commit ca21a1e6eb297f65513139e201cbd212a0bd92d2 Author: Jim McDonough [EMAIL PROTECTED] Date: Tue May 13 16:57:01 2008 -0400 Enable winbind child processes to do something with signals, in particular closing and reopening logs on SIGHUP. Conflicts: source/winbindd/winbindd.c (cherry picked from commit 36c51951c6bca7d9b56b02cd6469e9c5a1c5147f) --- Summary of changes: source/winbindd/winbindd.c | 35 +++ source/winbindd/winbindd_dual.c |4 2 files changed, 27 insertions(+), 12 deletions(-) Changeset truncated at 500 lines: diff --git a/source/winbindd/winbindd.c b/source/winbindd/winbindd.c index 1072f8e..57eee20 100644 --- a/source/winbindd/winbindd.c +++ b/source/winbindd/winbindd.c @@ -795,6 +795,27 @@ static bool remove_idle_client(void) return False; } +/* check if HUP has been received and reload files */ +void winbind_check_sighup(void) +{ + if (do_sighup) { + + DEBUG(3, (got SIGHUP\n)); + + flush_caches(); + reload_services_file(); + + do_sighup = False; + } +} + +/* check if TERM has been received */ +void winbind_check_sigterm(void) +{ + if (do_sigterm) + terminate(); +} + /* Process incoming clients on listen_sock. We use a tricky non-blocking, non-forking, non-threaded model which allows us to handle many simultaneous connections while remaining impervious to many denial of @@ -954,18 +975,8 @@ static void process_loop(void) /* Check signal handling things */ - if (do_sigterm) - terminate(); - - if (do_sighup) { - - DEBUG(3, (got SIGHUP\n)); - - flush_caches(); - reload_services_file(); - - do_sighup = False; - } + winbind_check_sigterm(); + winbind_check_sighup(); if (do_sigusr2) { print_winbindd_status(); diff --git a/source/winbindd/winbindd_dual.c b/source/winbindd/winbindd_dual.c index 88121d2..d465801 100644 --- a/source/winbindd/winbindd_dual.c +++ b/source/winbindd/winbindd_dual.c @@ -1105,6 +1105,10 @@ static bool fork_domain_child(struct winbindd_child *child) struct timeval now; TALLOC_CTX *frame = talloc_stackframe(); + /* check for signals */ + winbind_check_sigterm(); + winbind_check_sighup(); + run_events(winbind_event_context(), 0, NULL, NULL); GetTimeOfDay(now); -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-2529-gf7d0903
The branch, v3-3-test has been updated via f7d0903a58b0b0fc248a613937a101f15baa5311 (commit) via d26681b169a533f838f74d48af072b57afc9f8df (commit) via 2ee3d1aefab8dada5bd05a92b72776554617b7f9 (commit) via 25d4c6f692cf50d675a1de7c6eaeed271f349289 (commit) via 3f10527f79dddff703d31588cad3e9f37176565b (commit) via 0f5ebdf0bc5610bf93a4db67c9f9513683306c66 (commit) via 84a116be9c849900678e6e0a4b012e819e697c78 (commit) via 3ddd9c09e3b51df01ac34a9a1537e8954d2b1167 (commit) via 4ca08a5acc90c77d56f8f3e38443f23f43f034e8 (commit) via d0237a736858a48494583ce7f960ea980768aa6c (commit) via efc863e3758501a4c62dc9762eb0aded2dad01ff (commit) via 1813e545a99545575babe126386c8caca00aab8f (commit) via a8b567aac3b0e39cfe67fb97167b10312ca5e73a (commit) from 48bf0b42a7d3829d476a50b4f6f80022279b4e49 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test - Log - commit f7d0903a58b0b0fc248a613937a101f15baa5311 Author: Kai Blin [EMAIL PROTECTED] Date: Thu May 15 10:14:41 2008 +0200 net: The top level help function for net cmd is always net_cmd_usage commit d26681b169a533f838f74d48af072b57afc9f8df Author: Kai Blin [EMAIL PROTECTED] Date: Wed May 14 15:09:29 2008 +0200 net: Move help for net status to net_status.c commit 2ee3d1aefab8dada5bd05a92b72776554617b7f9 Author: Kai Blin [EMAIL PROTECTED] Date: Wed May 14 14:29:52 2008 +0200 net: Move printer help to net_rpc where it's used. commit 25d4c6f692cf50d675a1de7c6eaeed271f349289 Author: Kai Blin [EMAIL PROTECTED] Date: Wed May 14 14:24:21 2008 +0200 net: Split out net share commit 3f10527f79dddff703d31588cad3e9f37176565b Author: Kai Blin [EMAIL PROTECTED] Date: Wed May 14 09:01:53 2008 +0200 net: Split out net afs commit 0f5ebdf0bc5610bf93a4db67c9f9513683306c66 Author: Kai Blin [EMAIL PROTECTED] Date: Tue May 13 21:18:09 2008 +0200 net: Move more utility functions into net_util.c commit 84a116be9c849900678e6e0a4b012e819e697c78 Author: Kai Blin [EMAIL PROTECTED] Date: Tue May 13 13:52:58 2008 +0200 net: Split out net file commit 3ddd9c09e3b51df01ac34a9a1537e8954d2b1167 Author: Kai Blin [EMAIL PROTECTED] Date: Tue May 13 13:44:28 2008 +0200 net: Split out net group commit 4ca08a5acc90c77d56f8f3e38443f23f43f034e8 Author: Kai Blin [EMAIL PROTECTED] Date: Tue May 13 12:51:09 2008 +0200 net: Split out net user commit d0237a736858a48494583ce7f960ea980768aa6c Author: Kai Blin [EMAIL PROTECTED] Date: Tue May 13 11:11:35 2008 +0200 net: Move net join handling into a separate file. commit efc863e3758501a4c62dc9762eb0aded2dad01ff Author: Kai Blin [EMAIL PROTECTED] Date: Mon May 12 14:38:21 2008 +0200 net: Split out common help functions. commit 1813e545a99545575babe126386c8caca00aab8f Author: Kai Blin [EMAIL PROTECTED] Date: Mon May 12 11:56:18 2008 +0200 net: more whitespace cleanup commit a8b567aac3b0e39cfe67fb97167b10312ca5e73a Author: Kai Blin [EMAIL PROTECTED] Date: Mon May 12 11:53:23 2008 +0200 net: Use true/false instead of True/False. --- Summary of changes: source/Makefile.in | 10 +- source/configure.in |3 + source/utils/net.c | 610 +-- source/utils/net.h |1 + source/utils/net_ads.c | 38 ++-- source/utils/net_afs.c | 101 +++ source/utils/net_afs.h | 29 ++ source/utils/net_dom.c | 20 +- source/utils/net_file.c | 57 source/utils/net_group.c| 65 source/utils/net_groupmap.c | 26 +- source/utils/net_help.c | 220 ++- source/utils/net_help_common.c | 54 source/utils/net_help_common.h | 49 +++ source/utils/net_join.c | 54 source/utils/net_proto.h| 131 + source/utils/net_rap.c | 18 +- source/utils/net_rpc.c | 139 ++ source/utils/net_rpc_join.c |2 +- source/utils/net_rpc_printer.c | 148 +- source/utils/net_rpc_registry.c |8 +- source/utils/net_rpc_rights.c | 10 +- source/utils/net_rpc_samsync.c | 26 +- source/utils/net_rpc_shell.c| 18 +- source/utils/net_sam.c |6 +- source/utils/net_share.c| 77 + source/utils/net_status.c | 24 +- source/utils/net_user.c | 67 + source/utils/net_usershare.c| 18 +- source/utils/net_util.c | 468 ++- source/utils/netlookup.c|8 +- 31 files changed, 1393 insertions(+), 1112 deletions(-) create mode 100644 source/utils/net_afs.c create mode 100644 source/utils/net_afs.h create mode 100644 source/utils/net_file.c create mode 100644 source/utils/net_group.c create mode
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2382-gf299316
The branch, v3-2-test has been updated via f2993160a14ec286627af53b88d6fa535d8c9437 (commit) via 25220356f6998c514ca43ac21abdba67736ba166 (commit) via 988e0f47dcc7920696ceafc451405056ba424bfa (commit) from a46ae502eacba4323a1cf6a57afed4a854634af1 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit f2993160a14ec286627af53b88d6fa535d8c9437 Author: Günther Deschner [EMAIL PROTECTED] Date: Tue May 20 14:32:14 2008 +0200 Revert Actually connect to RPC. This reverts commit 3082534454ff936ac0b78b5a2c72c9b060e21244. Conflicts: source/librpc/rpc/dcerpc.c source/librpc/rpc/dcerpc.h source/rpc_parse/parse_rpc.c commit 25220356f6998c514ca43ac21abdba67736ba166 Author: Günther Deschner [EMAIL PROTECTED] Date: Tue May 20 14:23:23 2008 +0200 Revert Reconcile ndr_syntax_id used by pidl-generated code and Samba3's RFC_IFACE. This reverts commit 7bea00dca1ee08ef731dfa73110ef9c190a29919. commit 988e0f47dcc7920696ceafc451405056ba424bfa Author: Günther Deschner [EMAIL PROTECTED] Date: Tue May 20 14:21:24 2008 +0200 Revert rpc_parse: Use UUIDs from librpc/gen_ndr/ when possible to reduce This reverts commit 428654b473ba44b2f5340eefef0d4fcd51aff558. --- Summary of changes: source/include/rpc_dce.h |9 +- source/rpc_client/cli_pipe.c |6 +- source/rpc_parse/parse_rpc.c | 226 ++--- source/rpc_server/srv_pipe.c |8 +- 4 files changed, 200 insertions(+), 49 deletions(-) Changeset truncated at 500 lines: diff --git a/source/include/rpc_dce.h b/source/include/rpc_dce.h index 9b2044f..33ab365 100644 --- a/source/include/rpc_dce.h +++ b/source/include/rpc_dce.h @@ -157,7 +157,10 @@ enum schannel_direction { #define RPC_MAX_PDU_FRAG_LEN 0x10b8/* this is what w2k sets */ /* RPC_IFACE */ -typedef struct ndr_syntax_id RPC_IFACE; +typedef struct rpc_iface_info { + struct GUID uuid; /* 16 bytes of rpc interface identification */ + uint32 version;/* the interface version number */ +} RPC_IFACE; #define RPC_IFACE_LEN (UUID_SIZE + 4) @@ -165,10 +168,10 @@ struct pipe_id_info { /* the names appear not to matter: the syntaxes _do_ matter */ const char *client_pipe; - const RPC_IFACE *abstr_syntax; /* this one is the abstract syntax id */ + RPC_IFACE abstr_syntax; /* this one is the abstract syntax id */ const char *server_pipe; /* this one is the secondary syntax name */ - const RPC_IFACE *trans_syntax; /* this one is the primary syntax id */ + RPC_IFACE trans_syntax; /* this one is the primary syntax id */ }; /* RPC_HDR - dce rpc header */ diff --git a/source/rpc_client/cli_pipe.c b/source/rpc_client/cli_pipe.c index 2a2b547..71422cd 100644 --- a/source/rpc_client/cli_pipe.c +++ b/source/rpc_client/cli_pipe.c @@ -1656,8 +1656,8 @@ static bool valid_pipe_name(const int pipe_idx, RPC_IFACE *abstract, RPC_IFACE * /* copy the required syntaxes out so we can do the right bind */ - *transfer = *pipe_names[pipe_idx].trans_syntax; - *abstract = *pipe_names[pipe_idx].abstr_syntax; + *transfer = pipe_names[pipe_idx].trans_syntax; + *abstract = pipe_names[pipe_idx].abstr_syntax; return True; } @@ -1690,7 +1690,7 @@ static bool check_bind_response(RPC_HDR_BA *hdr_ba, const int pipe_idx, RPC_IFAC #endif /* JERRY */ /* check the transfer syntax */ - if ((hdr_ba-transfer.if_version != transfer-if_version) || + if ((hdr_ba-transfer.version != transfer-version) || (memcmp(hdr_ba-transfer.uuid, transfer-uuid, sizeof(transfer-uuid)) !=0)) { DEBUG(2,(bind_rpc_pipe: transfer syntax differs\n)); return False; diff --git a/source/rpc_parse/parse_rpc.c b/source/rpc_parse/parse_rpc.c index 3f89721..d4ab8f3 100644 --- a/source/rpc_parse/parse_rpc.c +++ b/source/rpc_parse/parse_rpc.c @@ -29,14 +29,176 @@ interface/version dce/rpc pipe identification / -const struct ndr_syntax_id syntax_spoolss = { - { - 0x12345678, 0x1234, 0xabcd, - { 0xef, 0x00 }, - { 0x01, 0x23, - 0x45, 0x67, 0x89, 0xab } - }, 0x01 -}; +#define TRANS_SYNT_V2 \ +{ \ + { \ + 0x8a885d04, 0x1ceb, 0x11c9, \ + { 0x9f, 0xe8 }, \ + { 0x08, 0x00, \ + 0x2b, 0x10, 0x48, 0x60 } \ + }, 0x02 \ +} + +#define SYNT_NETLOGON_V2\ +{
[SCM] Samba Shared Repository - branch v3-2-stable updated - release-3-2-0pre3-104-gfd5a589
The branch, v3-2-stable has been updated via fd5a58980d4fc2d0f9a8ba81a5ae9490e306b2ba (commit) from ca21a1e6eb297f65513139e201cbd212a0bd92d2 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable - Log - commit fd5a58980d4fc2d0f9a8ba81a5ae9490e306b2ba Author: Simo Sorce [EMAIL PROTECTED] Date: Fri Mar 7 11:33:26 2008 -0500 Enable use of Relocations Read-Only, if supported, for enhanced security. (cherry picked from commit c20c5f082162ff6c0c2931f456897334aa002e83) --- Summary of changes: source/Makefile.in |4 ++-- source/configure.in | 27 +++ 2 files changed, 29 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/source/Makefile.in b/source/Makefile.in index 95e96d5..71b2018 100644 --- a/source/Makefile.in +++ b/source/Makefile.in @@ -43,8 +43,8 @@ CPPFLAGS=-DHAVE_CONFIG_H @CPPFLAGS@ [EMAIL PROTECTED]@ [EMAIL PROTECTED]@ [EMAIL PROTECTED]@ @LDFLAGS@ [EMAIL PROTECTED]@ @LDFLAGS@ [EMAIL PROTECTED]@ @RELRO_LDFLAGS@ @LDFLAGS@ [EMAIL PROTECTED]@ @RELRO_LDFLAGS@ @LDFLAGS@ [EMAIL PROTECTED]@ @LDFLAGS@ [EMAIL PROTECTED]@ diff --git a/source/configure.in b/source/configure.in index ef39d6b..9e17fd1 100644 --- a/source/configure.in +++ b/source/configure.in @@ -73,6 +73,7 @@ AC_SUBST(HOST_OS) AC_SUBST(PICFLAG) AC_SUBST(PIE_CFLAGS) AC_SUBST(PIE_LDFLAGS) +AC_SUBST(RELRO_LDFLAGS) AC_SUBST(SHLIBEXT) AC_SUBST(INSTALLLIBCMD_SH) AC_SUBST(INSTALLLIBCMD_A) @@ -1524,6 +1525,32 @@ EOF fi fi +# Set defaults +RELRO_LDFLAGS= +AC_ARG_ENABLE(relro, [AS_HELP_STRING([--enable-relro], [Turn on Relocations Read-Only (relro) support if available (default=yes)])]) + +if test x$enable_relro != xno +then + AC_CACHE_CHECK([for -Wl,-z,relro], samba_cv_relro, + [ + cat conftest.c EOF +int foo; +main () { return 0;} +EOF + if AC_TRY_COMMAND([${CC-cc} $CFLAGS $CPPFLAGS $LDFLAGS -Wl,-z,relro -o conftest conftest.c 1AS_MESSAGE_LOG_FD]) + then + samba_cv_relro=yes + else + samba_cv_relro=no + fi + rm -f conftest* + ]) + if test x${samba_cv_relro} = xyes + then + RELRO_LDFLAGS=-Wl,-z,relro + fi +fi + # Assume non-shared by default and override below BLDSHARED=false -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2383-gfb0a25d
The branch, v3-2-test has been updated via fb0a25d59ddd28ea1d5af33ec7d9f817fac3fb9d (commit) from f2993160a14ec286627af53b88d6fa535d8c9437 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit fb0a25d59ddd28ea1d5af33ec7d9f817fac3fb9d Author: Volker Lendecke [EMAIL PROTECTED] Date: Tue May 20 17:29:40 2008 +0200 Fix a valgrind error in _samr_LookupNames --- Summary of changes: source/rpc_server/srv_samr_nt.c | 13 - 1 files changed, 8 insertions(+), 5 deletions(-) Changeset truncated at 500 lines: diff --git a/source/rpc_server/srv_samr_nt.c b/source/rpc_server/srv_samr_nt.c index f28c771..42431bd 100644 --- a/source/rpc_server/srv_samr_nt.c +++ b/source/rpc_server/srv_samr_nt.c @@ -1786,8 +1786,8 @@ NTSTATUS _samr_LookupNames(pipes_struct *p, struct samr_LookupNames *r) { NTSTATUS status; - uint32 rid[MAX_SAM_ENTRIES]; - enum lsa_SidType type[MAX_SAM_ENTRIES]; + uint32 *rid; + enum lsa_SidType *type; int i; int num_rids = r-in.num_names; DOM_SID pol_sid; @@ -1796,9 +1796,6 @@ NTSTATUS _samr_LookupNames(pipes_struct *p, DEBUG(5,(_samr_LookupNames: %d\n, __LINE__)); - ZERO_ARRAY(rid); - ZERO_ARRAY(type); - if (!get_lsa_policy_samr_sid(p, r-in.domain_handle, pol_sid, acc_granted, NULL)) { return NT_STATUS_OBJECT_TYPE_MISMATCH; } @@ -1815,6 +1812,12 @@ NTSTATUS _samr_LookupNames(pipes_struct *p, DEBUG(5,(_samr_LookupNames: truncating entries to %d\n, num_rids)); } + rid = talloc_array(p-mem_ctx, uint32, num_rids); + NT_STATUS_HAVE_NO_MEMORY(rid); + + type = talloc_array(p-mem_ctx, enum lsa_SidType, num_rids); + NT_STATUS_HAVE_NO_MEMORY(rid); + DEBUG(5,(_samr_LookupNames: looking name on SID %s\n, sid_string_dbg(pol_sid))); -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2384-gd3dd7ea
The branch, v3-2-test has been updated via d3dd7ea5a77414c0d802668ab5bfbe3487b66926 (commit) from fb0a25d59ddd28ea1d5af33ec7d9f817fac3fb9d (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit d3dd7ea5a77414c0d802668ab5bfbe3487b66926 Author: Günther Deschner [EMAIL PROTECTED] Date: Tue May 20 17:48:39 2008 +0200 Fix typo. Guenther --- Summary of changes: source/rpc_server/srv_samr_nt.c |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source/rpc_server/srv_samr_nt.c b/source/rpc_server/srv_samr_nt.c index 42431bd..a89e00f 100644 --- a/source/rpc_server/srv_samr_nt.c +++ b/source/rpc_server/srv_samr_nt.c @@ -1816,7 +1816,7 @@ NTSTATUS _samr_LookupNames(pipes_struct *p, NT_STATUS_HAVE_NO_MEMORY(rid); type = talloc_array(p-mem_ctx, enum lsa_SidType, num_rids); - NT_STATUS_HAVE_NO_MEMORY(rid); + NT_STATUS_HAVE_NO_MEMORY(type); DEBUG(5,(_samr_LookupNames: looking name on SID %s\n, sid_string_dbg(pol_sid))); -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-2531-g68d6b00
The branch, v3-3-test has been updated via 68d6b0053f3ce63747bc26a2bebb1fb0b46c8ca0 (commit) via 89f87efa2394e99802ca23307e712fc5820a5fc6 (commit) from f7d0903a58b0b0fc248a613937a101f15baa5311 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test - Log - commit 68d6b0053f3ce63747bc26a2bebb1fb0b46c8ca0 Author: Günther Deschner [EMAIL PROTECTED] Date: Tue May 20 17:48:39 2008 +0200 Fix typo. Guenther (cherry picked from commit d3dd7ea5a77414c0d802668ab5bfbe3487b66926) commit 89f87efa2394e99802ca23307e712fc5820a5fc6 Author: Volker Lendecke [EMAIL PROTECTED] Date: Tue May 20 17:29:40 2008 +0200 Fix a valgrind error in _samr_LookupNames (cherry picked from commit fb0a25d59ddd28ea1d5af33ec7d9f817fac3fb9d) --- Summary of changes: source/rpc_server/srv_samr_nt.c | 13 - 1 files changed, 8 insertions(+), 5 deletions(-) Changeset truncated at 500 lines: diff --git a/source/rpc_server/srv_samr_nt.c b/source/rpc_server/srv_samr_nt.c index f28c771..a89e00f 100644 --- a/source/rpc_server/srv_samr_nt.c +++ b/source/rpc_server/srv_samr_nt.c @@ -1786,8 +1786,8 @@ NTSTATUS _samr_LookupNames(pipes_struct *p, struct samr_LookupNames *r) { NTSTATUS status; - uint32 rid[MAX_SAM_ENTRIES]; - enum lsa_SidType type[MAX_SAM_ENTRIES]; + uint32 *rid; + enum lsa_SidType *type; int i; int num_rids = r-in.num_names; DOM_SID pol_sid; @@ -1796,9 +1796,6 @@ NTSTATUS _samr_LookupNames(pipes_struct *p, DEBUG(5,(_samr_LookupNames: %d\n, __LINE__)); - ZERO_ARRAY(rid); - ZERO_ARRAY(type); - if (!get_lsa_policy_samr_sid(p, r-in.domain_handle, pol_sid, acc_granted, NULL)) { return NT_STATUS_OBJECT_TYPE_MISMATCH; } @@ -1815,6 +1812,12 @@ NTSTATUS _samr_LookupNames(pipes_struct *p, DEBUG(5,(_samr_LookupNames: truncating entries to %d\n, num_rids)); } + rid = talloc_array(p-mem_ctx, uint32, num_rids); + NT_STATUS_HAVE_NO_MEMORY(rid); + + type = talloc_array(p-mem_ctx, enum lsa_SidType, num_rids); + NT_STATUS_HAVE_NO_MEMORY(type); + DEBUG(5,(_samr_LookupNames: looking name on SID %s\n, sid_string_dbg(pol_sid))); -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-2532-gf845dbb
The branch, v3-3-test has been updated via f845dbbceeff032cd248117ddf63af3d3736b21c (commit) from 68d6b0053f3ce63747bc26a2bebb1fb0b46c8ca0 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test - Log - commit f845dbbceeff032cd248117ddf63af3d3736b21c Author: Volker Lendecke [EMAIL PROTECTED] Date: Tue May 20 18:35:23 2008 +0200 Fix memcache_flush() I have no idea what I've been smoking when I checked this in :-( Karolin, this fixes the join bug 3.0.28-3.2.0rc1 Thanks, Volker --- Summary of changes: source/lib/memcache.c | 39 ++- 1 files changed, 34 insertions(+), 5 deletions(-) Changeset truncated at 500 lines: diff --git a/source/lib/memcache.c b/source/lib/memcache.c index 6dee61a..e1426bc 100644 --- a/source/lib/memcache.c +++ b/source/lib/memcache.c @@ -120,11 +120,11 @@ static int memcache_compare(struct memcache_element *e, enum memcache_number n, { DATA_BLOB this_key, this_value; - if ((int)e-n (int)n) return -1; - if ((int)e-n (int)n) return 1; + if ((int)e-n (int)n) return 1; + if ((int)e-n (int)n) return -1; - if (e-keylength key.length) return -1; - if (e-keylength key.length) return 1; + if (e-keylength key.length) return 1; + if (e-keylength key.length) return -1; memcache_element_parse(e, this_key, this_value); return memcmp(this_key.data, key.data, key.length); @@ -357,10 +357,18 @@ void memcache_flush(struct memcache *cache, enum memcache_number n) return; } + /* +* First, find *any* element of number n +*/ + while (true) { struct memcache_element *elem = memcache_node2elem(node); struct rb_node *next; + if ((int)elem-n == (int)n) { + break; + } + if ((int)elem-n (int)n) { next = node-rb_right; } @@ -373,15 +381,36 @@ void memcache_flush(struct memcache *cache, enum memcache_number n) node = next; } - node = rb_next(node); if (node == NULL) { return; } + /* +* Then, find the leftmost element with number n +*/ + + while (true) { + struct rb_node *prev = rb_prev(node); + struct memcache_element *elem; + + if (prev == NULL) { + break; + } + elem = memcache_node2elem(prev); + if ((int)elem-n != (int)n) { + break; + } + node = prev; + } + while (node != NULL) { struct memcache_element *e = memcache_node2elem(node); struct rb_node *next = rb_next(node); + if (e-n != n) { + break; + } + memcache_delete_element(cache, e); node = next; } -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2385-g006e45f
The branch, v3-2-test has been updated via 006e45fba01e05c664359e8104d495609d9555f7 (commit) from d3dd7ea5a77414c0d802668ab5bfbe3487b66926 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 006e45fba01e05c664359e8104d495609d9555f7 Author: Volker Lendecke [EMAIL PROTECTED] Date: Tue May 20 18:35:23 2008 +0200 Fix memcache_flush() I have no idea what I've been smoking when I checked this in :-( Karolin, this fixes the join bug 3.0.28-3.2.0rc1 Please merge! Thanks, Volker --- Summary of changes: source/lib/memcache.c | 39 ++- 1 files changed, 34 insertions(+), 5 deletions(-) Changeset truncated at 500 lines: diff --git a/source/lib/memcache.c b/source/lib/memcache.c index 6dee61a..e1426bc 100644 --- a/source/lib/memcache.c +++ b/source/lib/memcache.c @@ -120,11 +120,11 @@ static int memcache_compare(struct memcache_element *e, enum memcache_number n, { DATA_BLOB this_key, this_value; - if ((int)e-n (int)n) return -1; - if ((int)e-n (int)n) return 1; + if ((int)e-n (int)n) return 1; + if ((int)e-n (int)n) return -1; - if (e-keylength key.length) return -1; - if (e-keylength key.length) return 1; + if (e-keylength key.length) return 1; + if (e-keylength key.length) return -1; memcache_element_parse(e, this_key, this_value); return memcmp(this_key.data, key.data, key.length); @@ -357,10 +357,18 @@ void memcache_flush(struct memcache *cache, enum memcache_number n) return; } + /* +* First, find *any* element of number n +*/ + while (true) { struct memcache_element *elem = memcache_node2elem(node); struct rb_node *next; + if ((int)elem-n == (int)n) { + break; + } + if ((int)elem-n (int)n) { next = node-rb_right; } @@ -373,15 +381,36 @@ void memcache_flush(struct memcache *cache, enum memcache_number n) node = next; } - node = rb_next(node); if (node == NULL) { return; } + /* +* Then, find the leftmost element with number n +*/ + + while (true) { + struct rb_node *prev = rb_prev(node); + struct memcache_element *elem; + + if (prev == NULL) { + break; + } + elem = memcache_node2elem(prev); + if ((int)elem-n != (int)n) { + break; + } + node = prev; + } + while (node != NULL) { struct memcache_element *e = memcache_node2elem(node); struct rb_node *next = rb_next(node); + if (e-n != n) { + break; + } + memcache_delete_element(cache, e); node = next; } -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v4-0-test updated - release-4-0-0alpha3-1647-gea3f4b9
The branch, v4-0-test has been updated via ea3f4b93057e85c4ea516cc77dd0f293016d520c (commit) from f72dc52ccc426c8057b91b4699dfeda7d9e9b864 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test - Log - commit ea3f4b93057e85c4ea516cc77dd0f293016d520c Author: James Peach [EMAIL PROTECTED] Date: Tue May 20 10:54:45 2008 -0700 smbtorture: Add RAW-BENCH-TCON benchmark. Add a simple test to benchmark the rate at which a server can accept new tree connections. You can tune the length of time to run the benchmark for and the number of parallel connections to make. --- Summary of changes: source/lib/util/time.c|2 +- source/lib/util/time.h|2 +- source/torture/config.mk |1 + source/torture/raw/raw.c |2 + source/torture/raw/tconrate.c | 201 + 5 files changed, 206 insertions(+), 2 deletions(-) create mode 100644 source/torture/raw/tconrate.c Changeset truncated at 500 lines: diff --git a/source/lib/util/time.c b/source/lib/util/time.c index a181885..978d73c 100644 --- a/source/lib/util/time.c +++ b/source/lib/util/time.c @@ -376,7 +376,7 @@ _PUBLIC_ NTTIME pull_nttime(uint8_t *base, uint16_t offset) /** return (tv1 - tv2) in microseconds */ -_PUBLIC_ int64_t usec_time_diff(struct timeval *tv1, struct timeval *tv2) +_PUBLIC_ int64_t usec_time_diff(const struct timeval *tv1, const struct timeval *tv2) { int64_t sec_diff = tv1-tv_sec - tv2-tv_sec; return (sec_diff * 100) + (int64_t)(tv1-tv_usec - tv2-tv_usec); diff --git a/source/lib/util/time.h b/source/lib/util/time.h index 1ab976c..e4008c5 100644 --- a/source/lib/util/time.h +++ b/source/lib/util/time.h @@ -127,7 +127,7 @@ _PUBLIC_ NTTIME nttime_from_string(const char *s); /** return (tv1 - tv2) in microseconds */ -_PUBLIC_ int64_t usec_time_diff(struct timeval *tv1, struct timeval *tv2); +_PUBLIC_ int64_t usec_time_diff(const struct timeval *tv1, const struct timeval *tv2); /** return a zero timeval diff --git a/source/torture/config.mk b/source/torture/config.mk index e82cb45..2857b99 100644 --- a/source/torture/config.mk +++ b/source/torture/config.mk @@ -70,6 +70,7 @@ TORTURE_RAW_OBJ_FILES = $(addprefix $(torturesrcdir)/raw/, \ pingpong.o \ lockbench.o \ lookuprate.o \ + tconrate.o \ openbench.o \ rename.o \ eas.o \ diff --git a/source/torture/raw/raw.c b/source/torture/raw/raw.c index c613308..0a7fc3e 100644 --- a/source/torture/raw/raw.c +++ b/source/torture/raw/raw.c @@ -35,6 +35,8 @@ NTSTATUS torture_raw_init(void) torture_suite_add_simple_test(suite, BENCH-OPEN, torture_bench_open); torture_suite_add_simple_test(suite, BENCH-LOOKUP, torture_bench_lookup); + torture_suite_add_simple_test(suite, BENCH-TCON, + torture_bench_treeconnect); torture_suite_add_simple_test(suite, OFFLINE, torture_test_offline); torture_suite_add_1smb_test(suite, QFSINFO, torture_raw_qfsinfo); torture_suite_add_1smb_test(suite, QFILEINFO, torture_raw_qfileinfo); diff --git a/source/torture/raw/tconrate.c b/source/torture/raw/tconrate.c new file mode 100644 index 000..6f0ba0d --- /dev/null +++ b/source/torture/raw/tconrate.c @@ -0,0 +1,201 @@ +/* + SMB tree connection rate test + + Copyright (C) 2006-2007 James Peach + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program. If not, see http://www.gnu.org/licenses/. +*/ + +#include includes.h +#include libcli/libcli.h +#include libcli/resolve/resolve.h +#include torture/smbtorture.h +#include lib/cmdline/popt_common.h +#include param/param.h + +#include system/filesys.h +#include system/shmem.h + +#define TIME_LIMIT_SECS 30 +#define usec_to_sec(s) ((s) / 100) +#define sec_to_usec(s) ((s) * 100) + +/* Map a shared memory buffer of at least nelem counters. */ +static void * map_count_buffer(unsigned nelem, size_t elemsz) +{ + void * buf; + size_t bufsz; + size_t pagesz = getpagesize(); + + bufsz = nelem * elemsz; + bufsz = (bufsz + pagesz) % pagesz; /* round up to pagesz */ + +#ifdef MAP_ANON + /* BSD */ + buf = mmap(NULL, bufsz,
[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-2533-g830337f
The branch, v3-3-test has been updated via 830337f054a6c0646d85df33d9958e99283e727a (commit) from f845dbbceeff032cd248117ddf63af3d3736b21c (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test - Log - commit 830337f054a6c0646d85df33d9958e99283e727a Author: Jeremy Allison [EMAIL PROTECTED] Date: Tue May 20 12:09:48 2008 -0700 Fix bug #5477 - recvfile code was broken. Jeremy. --- Summary of changes: source/lib/recvfile.c | 10 ++ source/smbd/process.c | 12 2 files changed, 14 insertions(+), 8 deletions(-) Changeset truncated at 500 lines: diff --git a/source/lib/recvfile.c b/source/lib/recvfile.c index 6e20933..513742c 100644 --- a/source/lib/recvfile.c +++ b/source/lib/recvfile.c @@ -58,6 +58,11 @@ static ssize_t default_sys_recvfile(int fromfd, size_t total_written = 0; char *buffer = NULL; + DEBUG(10,(default_sys_recvfile: from = %d, to = %d, + offset=%.0f, count = %lu\n, + fromfd, tofd, (double)offset, + (unsigned long)count)); + if (count == 0) { return 0; } @@ -143,6 +148,11 @@ ssize_t sys_recvfile(int fromfd, static bool try_splice_call = true; size_t total_written = 0; + DEBUG(10,(sys_recvfile: from = %d, to = %d, + offset=%.0f, count = %lu\n, + fromfd, tofd, (double)offset, + (unsigned long)count)); + if (count == 0) { return 0; } diff --git a/source/smbd/process.c b/source/smbd/process.c index ab737a8..c8ad19d 100644 --- a/source/smbd/process.c +++ b/source/smbd/process.c @@ -252,6 +252,8 @@ static NTSTATUS receive_smb_raw_talloc_partial_read(TALLOC_CTX *mem_ctx, timeout, toread); if (!NT_STATUS_IS_OK(status)) { + DEBUG(10, (receive_smb_raw_talloc_partial_read: %s\n, + nt_errstr(status))); return status; } } @@ -282,14 +284,8 @@ static NTSTATUS receive_smb_raw_talloc(TALLOC_CTX *mem_ctx, int fd, smb_len_large(lenbuf) min_recv_size /* Could be a UNIX large writeX. */ !srv_is_signing_active()) { - status = receive_smb_raw_talloc_partial_read( - mem_ctx, lenbuf, fd, buffer, timeout, p_unread, len); - - if (!NT_STATUS_IS_OK(status)) { - DEBUG(10, (receive_smb_raw: %s\n, - nt_errstr(status))); - return status; - } + return receive_smb_raw_talloc_partial_read( + mem_ctx, lenbuf, fd, buffer, timeout, p_unread, plen); } if (!valid_packet_size(len)) { -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2386-g47eb2e8
The branch, v3-2-test has been updated via 47eb2e8fa858d9f12637eb9a10466271335f61aa (commit) from 006e45fba01e05c664359e8104d495609d9555f7 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 47eb2e8fa858d9f12637eb9a10466271335f61aa Author: Jeremy Allison [EMAIL PROTECTED] Date: Tue May 20 12:10:01 2008 -0700 Fix bug #5477 - recvfile code was broken. Jeremy. --- Summary of changes: source/lib/recvfile.c | 10 ++ source/smbd/process.c | 12 2 files changed, 14 insertions(+), 8 deletions(-) Changeset truncated at 500 lines: diff --git a/source/lib/recvfile.c b/source/lib/recvfile.c index 6e20933..513742c 100644 --- a/source/lib/recvfile.c +++ b/source/lib/recvfile.c @@ -58,6 +58,11 @@ static ssize_t default_sys_recvfile(int fromfd, size_t total_written = 0; char *buffer = NULL; + DEBUG(10,(default_sys_recvfile: from = %d, to = %d, + offset=%.0f, count = %lu\n, + fromfd, tofd, (double)offset, + (unsigned long)count)); + if (count == 0) { return 0; } @@ -143,6 +148,11 @@ ssize_t sys_recvfile(int fromfd, static bool try_splice_call = true; size_t total_written = 0; + DEBUG(10,(sys_recvfile: from = %d, to = %d, + offset=%.0f, count = %lu\n, + fromfd, tofd, (double)offset, + (unsigned long)count)); + if (count == 0) { return 0; } diff --git a/source/smbd/process.c b/source/smbd/process.c index 5946989..2fc88ca 100644 --- a/source/smbd/process.c +++ b/source/smbd/process.c @@ -252,6 +252,8 @@ static NTSTATUS receive_smb_raw_talloc_partial_read(TALLOC_CTX *mem_ctx, timeout, toread); if (!NT_STATUS_IS_OK(status)) { + DEBUG(10, (receive_smb_raw_talloc_partial_read: %s\n, + nt_errstr(status))); return status; } } @@ -282,14 +284,8 @@ static NTSTATUS receive_smb_raw_talloc(TALLOC_CTX *mem_ctx, int fd, smb_len_large(lenbuf) min_recv_size /* Could be a UNIX large writeX. */ !srv_is_signing_active()) { - status = receive_smb_raw_talloc_partial_read( - mem_ctx, lenbuf, fd, buffer, timeout, p_unread, len); - - if (!NT_STATUS_IS_OK(status)) { - DEBUG(10, (receive_smb_raw: %s\n, - nt_errstr(status))); - return status; - } + return receive_smb_raw_talloc_partial_read( + mem_ctx, lenbuf, fd, buffer, timeout, p_unread, plen); } if (!valid_packet_size(len)) { -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-2534-g80e700e
The branch, v3-3-test has been updated via 80e700e3bd73f2ffa38046bdcba7f532e25198ef (commit) from 830337f054a6c0646d85df33d9958e99283e727a (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test - Log - commit 80e700e3bd73f2ffa38046bdcba7f532e25198ef Author: Volker Lendecke [EMAIL PROTECTED] Date: Tue May 20 21:54:36 2008 +0200 Fix nesting tdb_traverse in a transaction Calling tdb_traverse inside a transaction led to the transaction lock being held indefinitely. This was caused by the tdb_transaction_lock/unlock inside tdb_traverse: The transaction code holds the global lock at offset TRANSACTION_LOCK. The call to tdb_transaction_lock does nothing because the transaction_lock is already being held. tdb_transaction_unlock inside tdb_wrap resets tdb-have_transaction_lock but does not release the kernel-level fcntl lock. transaction_commit later on does not release that fcntl lock either, because tdb-have_transaction_lock was already reset by tdb_transaction(). This patch does fix that problem for me. An alternative would be to make tdb-have_transaction_lock a counter that can cope with proper nesting, maybe in other places as well. Volker --- Summary of changes: source/lib/tdb/common/traverse.c | 11 --- 1 files changed, 8 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/source/lib/tdb/common/traverse.c b/source/lib/tdb/common/traverse.c index 07b0c23..5a31742 100644 --- a/source/lib/tdb/common/traverse.c +++ b/source/lib/tdb/common/traverse.c @@ -232,20 +232,25 @@ int tdb_traverse(struct tdb_context *tdb, { struct tdb_traverse_lock tl = { NULL, 0, 0, F_WRLCK }; int ret; + int in_transaction = (tdb-transaction != NULL); if (tdb-read_only || tdb-traverse_read) { return tdb_traverse_read(tdb, fn, private_data); } - if (tdb_transaction_lock(tdb, F_WRLCK)) { - return -1; + if (!in_transaction) { + if (tdb_transaction_lock(tdb, F_WRLCK)) { + return -1; + } } tdb-traverse_write++; ret = tdb_traverse_internal(tdb, fn, private_data, tl); tdb-traverse_write--; - tdb_transaction_unlock(tdb); + if (!in_transaction) { + tdb_transaction_unlock(tdb); + } return ret; } -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-0-test updated - release-3-0-28a-1184-ga39d9ab
The branch, v3-0-test has been updated via a39d9ab9c68932c15f5b42d8539aab6dfbc4d57a (commit) via 41c56ceb7c7b378747c01ffb863cd718f38ea31e (commit) from e3ecb1828791e3e142dd84d7248c4ae70afe5e0c (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-0-test - Log - commit a39d9ab9c68932c15f5b42d8539aab6dfbc4d57a Author: Gerald W. Carter [EMAIL PROTECTED] Date: Tue May 20 11:45:54 2008 -0500 Set version to 3.0.29 for release commit 41c56ceb7c7b378747c01ffb863cd718f38ea31e Author: Gerald W. Carter [EMAIL PROTECTED] Date: Tue May 20 11:45:19 2008 -0500 Updating release notes for 3.0.29 --- Summary of changes: WHATSNEW.txt | 138 ++-- source/VERSION |6 +- 2 files changed, 137 insertions(+), 7 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 71d3c3a..cdb3703 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,12 +1,142 @@ === + Release Notes for Samba 3.0.29 +May 20, 2008 + === + +This is a bug fix release of the Samba 3.0 production series and is the +version that servers should be run for for all current Samba 3.0 bug fixes. + +Major bug fixes included in Samba 3.0.29 are: + + o Problems following domain trusts on a Samba DC. + o SMB Signing errors. + o Interoperability issues with Windows 2008 domains. + + +## +Changes +### + +Changes since 3.0.28a +- + +o Michael Adam [EMAIL PROTECTED] +* Fix build for pam_smbpass. +* Fix a crash in tdb_wrap_log(). + + +o Jeremy Allison [EMAIL PROTECTED] +* BUG 5267: Fix for nmbd termination problems when no interfaces + found. +* BUG 5326: OS/2 servers give strange high word replies for + print jobs. +* Remove MS-DFS check that required the target host be ourself. +* BUG 5372: Fix high CPU usage of cupsd on large print servers + by using more efficient CUPS queries in smbd. +* Rewrite integer wrap checks to deal with gcc 4.x optimizations. +* BUG 5095: Fix the enforcement of the Manage Documents access right. +* Don't free memory from getpass() in mount.cifs. +* BUG 5460: Fix MS-DFS referral problem in server code. +* Fix bug in Winbind that caused the parent to ignore dead children. +* Fix compile warnings. + + +o Alexander Bokovoy [EMAIL PROTECTED] +* Fix build for pam_smbpass. +* Document build fixes. + + +o Kai Blin [EMAIL PROTECTED] +* BUG 4235: Improve compliance to the Squid helper protocol. + Original patch from Pawel Worach [EMAIL PROTECTED]. + + +o Gerald (Jerry) Carter [EMAIL PROTECTED] +* BUG 5107: Fix handling of large DNS replies on AIX and Solaris. + + +o Glenn Curtis [EMAIL PROTECTED] +* Prevent cycle in Wibind's list of children when reaping dead processes. + + +o Steven Danneman [EMAIL PROTECTED] +* BUG 5419: Fix memory leak in ads_do_search_all_args() (merge from v3-2). + + +o Guenther Deschner [EMAIL PROTECTED] +* Fix winbind NETLOGON credential chain on a samba dc for w2k8 trusts. +* Fix client connections and negotiation with Windows 2008 DCs + in member server code. +* Add NT_STATUS_DOWNGRADE_DETECTED error code (merge from v3-2). +* BUG 5430: Fix pam_winbind.so on Solaris (requires -lsocket). +* Re-add samr getdispinfoindex parsing which got lost in the glue commit. +* BUG 5461: Implement a very basic _samr_GetDisplayEnumerationIndex(). + Corrects interop problem between Citrix PM and a Samba DC. + + +o Bryan Kolodziej [EMAIL PROTECTED] +* BUG 3840: Fix smbclient connecting to NetApp filers when using + whitespace in the user's password. + + +o Volker Lendecke [EMAIL PROTECTED] +* BUG 4901: Fix behavior of ldap passwd sync = only. +* BUG 5317: Fix debug output from domain_client_validate(). +* BUG 5338: Fix format string bug in rpcclient. +* Ensure that wbinfo -a trusted\\user%password works correctly + on a Samba DC with trusts. +* BUG 5336: Fix SetUsetrInfo(level 25) to update the pwdLastSet + attribute. +* BUG 5350: Fallback to anonymous sessions if not trust password + could be obtained on Samba DCs and member servers. +* BUG 5366: Fix password chat on Sun OpenSolaris (Nevada). +* Fix signing problem in the client with trans requests. + + +o Björn Jacke [EMAIL PROTECTED] +* Fix alignment bug hitting Solaris with reset in zero vc activated. + + +o Jim McDonough [EMAIL PROTECTED] +* Fix build with glibc 2.8. +* Enable winbind child processes to do something with signals, in + particular closing and reopening
[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-2537-geb28153
The branch, v3-3-test has been updated via eb281532b1721ded39c39bb00c26202080dcd735 (commit) via dbb4d8107a61051d8bcf6c4c69ee976efc50b961 (commit) via 6b189dabc562d86dcaa685419d0cb6ea276f100d (commit) from 80e700e3bd73f2ffa38046bdcba7f532e25198ef (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test - Log - commit eb281532b1721ded39c39bb00c26202080dcd735 Author: Volker Lendecke [EMAIL PROTECTED] Date: Tue May 20 23:08:42 2008 +0200 Fix type error in debug message commit dbb4d8107a61051d8bcf6c4c69ee976efc50b961 Author: Volker Lendecke [EMAIL PROTECTED] Date: Tue May 20 23:06:38 2008 +0200 Fix some signed/unsigned warnings commit 6b189dabc562d86dcaa685419d0cb6ea276f100d Author: Tim Prouty [EMAIL PROTECTED] Date: Tue Apr 29 14:36:24 2008 -0700 Cleanup size_t return values in callers of convert_string_allocate This patch is the second iteration of an inside-out conversion to cleanup functions in charcnv.c returning size_t == -1 to indicate failure. --- Summary of changes: source/include/proto.h | 33 +++-- source/lib/charcnv.c | 267 ++ source/lib/ms_fnmatch.c |5 +- source/lib/smbldap.c | 27 +++- source/lib/util_reg_api.c| 36 +++-- source/lib/util_str.c| 52 --- source/lib/util_unistr.c | 20 ++- source/libads/ldap.c | 63 ++--- source/libads/ldap_printer.c | 19 ++- source/libgpo/gpext/registry.c | 23 ++- source/libgpo/gpo_ini.c | 12 +- source/librpc/ndr/ndr_string.c | 157 ++-- source/libsmb/clikrb5.c |9 +- source/libsmb/clirap.c | 14 +- source/libsmb/smbencrypt.c | 12 +- source/modules/vfs_catia.c |5 +- source/passdb/pdb_ldap.c | 78 +++--- source/passdb/secrets.c |9 +- source/printing/nt_printing.c|5 +- source/rpcclient/cmd_wkssvc.c|7 +- source/smbd/lanman.c |9 +- source/smbd/mangle_hash.c| 11 +- source/smbd/message.c| 13 +- source/smbd/negprot.c|5 +- source/smbd/sesssetup.c |2 +- source/smbd/trans2.c | 24 ++- source/torture/t_push_ucs2.c |5 +- source/utils/ntlm_auth_diagnostics.c |5 +- source/web/statuspage.c |3 +- source/web/swat.c| 14 +- 30 files changed, 541 insertions(+), 403 deletions(-) Changeset truncated at 500 lines: diff --git a/source/include/proto.h b/source/include/proto.h index bf6328d..a0354a3 100644 --- a/source/include/proto.h +++ b/source/include/proto.h @@ -366,9 +366,9 @@ size_t convert_string(charset_t from, charset_t to, bool convert_string_allocate(TALLOC_CTX *ctx, charset_t from, charset_t to, void const *src, size_t srclen, void *dst, size_t *converted_size, bool allow_bad_conv); -size_t convert_string_talloc(TALLOC_CTX *ctx, charset_t from, charset_t to, -void const *src, size_t srclen, void *dst, -bool allow_bad_conv); +bool convert_string_talloc(TALLOC_CTX *ctx, charset_t from, charset_t to, + void const *src, size_t srclen, void *dst, + size_t *converted_size, bool allow_bad_conv); size_t unix_strupper(const char *src, size_t srclen, char *dest, size_t destlen); char *strdup_upper(const char *s); char *talloc_strdup_upper(TALLOC_CTX *ctx, const char *s); @@ -379,16 +379,17 @@ size_t ucs2_align(const void *base_ptr, const void *p, int flags); size_t push_ascii(void *dest, const char *src, size_t dest_len, int flags); size_t push_ascii_fstring(void *dest, const char *src); size_t push_ascii_nstring(void *dest, const char *src); -size_t push_ascii_allocate(char **dest, const char *src); +bool push_ascii_allocate(char **dest, const char *src, size_t *converted_size); size_t pull_ascii(char *dest, const void *src, size_t dest_len, size_t src_len, int flags); size_t pull_ascii_fstring(char *dest, const void *src); size_t pull_ascii_nstring(char *dest, size_t dest_len, const void *src); size_t push_ucs2(const void *base_ptr, void *dest, const char *src, size_t dest_len, int flags); -size_t push_ucs2_talloc(TALLOC_CTX *ctx, smb_ucs2_t **dest, const char *src); -size_t push_ucs2_allocate(smb_ucs2_t **dest, const char *src); +bool push_ucs2_allocate(smb_ucs2_t **dest, const char *src, + size_t *converted_size); size_t push_utf8_fstring(void *dest, const char *src); -size_t push_utf8_talloc(TALLOC_CTX *ctx, char **dest, const char *src); -size_t
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2388-ga0e1d8a
The branch, v3-2-test has been updated via a0e1d8ac4dd9121312fd66ecb2e2942513df5a4b (commit) via fd0b60a9e000f969cf99a8d670080cc7a52d97d8 (commit) from 47eb2e8fa858d9f12637eb9a10466271335f61aa (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit a0e1d8ac4dd9121312fd66ecb2e2942513df5a4b Author: Jeremy Allison [EMAIL PROTECTED] Date: Tue May 20 14:18:58 2008 -0700 Convert in_transaction to a bool. Add the same fix Volker used for tdb_traverse() to tdb_traverse_read(). Jeremy. commit fd0b60a9e000f969cf99a8d670080cc7a52d97d8 Author: Volker Lendecke [EMAIL PROTECTED] Date: Tue May 20 21:54:36 2008 +0200 Fix nesting tdb_traverse in a transaction Calling tdb_traverse inside a transaction led to the transaction lock being held indefinitely. This was caused by the tdb_transaction_lock/unlock inside tdb_traverse: The transaction code holds the global lock at offset TRANSACTION_LOCK. The call to tdb_transaction_lock does nothing because the transaction_lock is already being held. tdb_transaction_unlock inside tdb_wrap resets tdb-have_transaction_lock but does not release the kernel-level fcntl lock. transaction_commit later on does not release that fcntl lock either, because tdb-have_transaction_lock was already reset by tdb_transaction(). This patch does fix that problem for me. An alternative would be to make tdb-have_transaction_lock a counter that can cope with proper nesting, maybe in other places as well. Volker --- Summary of changes: source/lib/tdb/common/traverse.c | 22 -- 1 files changed, 16 insertions(+), 6 deletions(-) Changeset truncated at 500 lines: diff --git a/source/lib/tdb/common/traverse.c b/source/lib/tdb/common/traverse.c index 07b0c23..69c81e6 100644 --- a/source/lib/tdb/common/traverse.c +++ b/source/lib/tdb/common/traverse.c @@ -204,18 +204,23 @@ int tdb_traverse_read(struct tdb_context *tdb, { struct tdb_traverse_lock tl = { NULL, 0, 0, F_RDLCK }; int ret; + bool in_transaction = (tdb-transaction != NULL); /* we need to get a read lock on the transaction lock here to cope with the lock ordering semantics of solaris10 */ - if (tdb_transaction_lock(tdb, F_RDLCK)) { - return -1; + if (!in_transaction) { + if (tdb_transaction_lock(tdb, F_RDLCK)) { + return -1; + } } tdb-traverse_read++; ret = tdb_traverse_internal(tdb, fn, private_data, tl); tdb-traverse_read--; - tdb_transaction_unlock(tdb); + if (!in_transaction) { + tdb_transaction_unlock(tdb); + } return ret; } @@ -232,20 +237,25 @@ int tdb_traverse(struct tdb_context *tdb, { struct tdb_traverse_lock tl = { NULL, 0, 0, F_WRLCK }; int ret; + bool in_transaction = (tdb-transaction != NULL); if (tdb-read_only || tdb-traverse_read) { return tdb_traverse_read(tdb, fn, private_data); } - if (tdb_transaction_lock(tdb, F_WRLCK)) { - return -1; + if (!in_transaction) { + if (tdb_transaction_lock(tdb, F_WRLCK)) { + return -1; + } } tdb-traverse_write++; ret = tdb_traverse_internal(tdb, fn, private_data, tl); tdb-traverse_write--; - tdb_transaction_unlock(tdb); + if (!in_transaction) { + tdb_transaction_unlock(tdb); + } return ret; } -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-2538-gbda0f03
The branch, v3-3-test has been updated via bda0f03fb3fa8a7b14d4f54bee7076d691cad44f (commit) from eb281532b1721ded39c39bb00c26202080dcd735 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test - Log - commit bda0f03fb3fa8a7b14d4f54bee7076d691cad44f Author: Jeremy Allison [EMAIL PROTECTED] Date: Tue May 20 14:18:58 2008 -0700 Convert in_transaction to a bool. Add the same fix Volker used for tdb_traverse() to tdb_traverse_read(). Jeremy. --- Summary of changes: source/lib/tdb/common/traverse.c | 13 + 1 files changed, 9 insertions(+), 4 deletions(-) Changeset truncated at 500 lines: diff --git a/source/lib/tdb/common/traverse.c b/source/lib/tdb/common/traverse.c index 5a31742..69c81e6 100644 --- a/source/lib/tdb/common/traverse.c +++ b/source/lib/tdb/common/traverse.c @@ -204,18 +204,23 @@ int tdb_traverse_read(struct tdb_context *tdb, { struct tdb_traverse_lock tl = { NULL, 0, 0, F_RDLCK }; int ret; + bool in_transaction = (tdb-transaction != NULL); /* we need to get a read lock on the transaction lock here to cope with the lock ordering semantics of solaris10 */ - if (tdb_transaction_lock(tdb, F_RDLCK)) { - return -1; + if (!in_transaction) { + if (tdb_transaction_lock(tdb, F_RDLCK)) { + return -1; + } } tdb-traverse_read++; ret = tdb_traverse_internal(tdb, fn, private_data, tl); tdb-traverse_read--; - tdb_transaction_unlock(tdb); + if (!in_transaction) { + tdb_transaction_unlock(tdb); + } return ret; } @@ -232,7 +237,7 @@ int tdb_traverse(struct tdb_context *tdb, { struct tdb_traverse_lock tl = { NULL, 0, 0, F_WRLCK }; int ret; - int in_transaction = (tdb-transaction != NULL); + bool in_transaction = (tdb-transaction != NULL); if (tdb-read_only || tdb-traverse_read) { return tdb_traverse_read(tdb, fn, private_data); -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v4-0-test updated - release-4-0-0alpha3-1649-ge05ec30
The branch, v4-0-test has been updated via e05ec3047c4fe0cc2e09a812830fc835dc35abea (commit) via 89543005fe2e4934b3c560c937d49304a32a7fc2 (commit) from ea3f4b93057e85c4ea516cc77dd0f293016d520c (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test - Log - commit e05ec3047c4fe0cc2e09a812830fc835dc35abea Author: Jeremy Allison [EMAIL PROTECTED] Date: Tue May 20 14:18:58 2008 -0700 Convert in_transaction to a bool. Add the same fix Volker used for tdb_traverse() to tdb_traverse_read(). Jeremy. commit 89543005fe2e4934b3c560c937d49304a32a7fc2 Author: Volker Lendecke [EMAIL PROTECTED] Date: Tue May 20 21:54:36 2008 +0200 Fix nesting tdb_traverse in a transaction Calling tdb_traverse inside a transaction led to the transaction lock being held indefinitely. This was caused by the tdb_transaction_lock/unlock inside tdb_traverse: The transaction code holds the global lock at offset TRANSACTION_LOCK. The call to tdb_transaction_lock does nothing because the transaction_lock is already being held. tdb_transaction_unlock inside tdb_wrap resets tdb-have_transaction_lock but does not release the kernel-level fcntl lock. transaction_commit later on does not release that fcntl lock either, because tdb-have_transaction_lock was already reset by tdb_transaction(). This patch does fix that problem for me. An alternative would be to make tdb-have_transaction_lock a counter that can cope with proper nesting, maybe in other places as well. Volker --- Summary of changes: source/lib/tdb/common/traverse.c | 22 -- 1 files changed, 16 insertions(+), 6 deletions(-) Changeset truncated at 500 lines: diff --git a/source/lib/tdb/common/traverse.c b/source/lib/tdb/common/traverse.c index 07b0c23..69c81e6 100644 --- a/source/lib/tdb/common/traverse.c +++ b/source/lib/tdb/common/traverse.c @@ -204,18 +204,23 @@ int tdb_traverse_read(struct tdb_context *tdb, { struct tdb_traverse_lock tl = { NULL, 0, 0, F_RDLCK }; int ret; + bool in_transaction = (tdb-transaction != NULL); /* we need to get a read lock on the transaction lock here to cope with the lock ordering semantics of solaris10 */ - if (tdb_transaction_lock(tdb, F_RDLCK)) { - return -1; + if (!in_transaction) { + if (tdb_transaction_lock(tdb, F_RDLCK)) { + return -1; + } } tdb-traverse_read++; ret = tdb_traverse_internal(tdb, fn, private_data, tl); tdb-traverse_read--; - tdb_transaction_unlock(tdb); + if (!in_transaction) { + tdb_transaction_unlock(tdb); + } return ret; } @@ -232,20 +237,25 @@ int tdb_traverse(struct tdb_context *tdb, { struct tdb_traverse_lock tl = { NULL, 0, 0, F_WRLCK }; int ret; + bool in_transaction = (tdb-transaction != NULL); if (tdb-read_only || tdb-traverse_read) { return tdb_traverse_read(tdb, fn, private_data); } - if (tdb_transaction_lock(tdb, F_WRLCK)) { - return -1; + if (!in_transaction) { + if (tdb_transaction_lock(tdb, F_WRLCK)) { + return -1; + } } tdb-traverse_write++; ret = tdb_traverse_internal(tdb, fn, private_data, tl); tdb-traverse_write--; - tdb_transaction_unlock(tdb); + if (!in_transaction) { + tdb_transaction_unlock(tdb); + } return ret; } -- Samba Shared Repository
Build status as of Wed May 21 00:00:02 2008
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2008-05-20 00:00:40.0 + +++ /home/build/master/cache/broken_results.txt 2008-05-21 00:00:23.0 + @@ -1,22 +1,22 @@ -Build status as of Tue May 20 00:00:02 2008 +Build status as of Wed May 21 00:00:02 2008 Build counts: Tree Total Broken Panic build_farm 0 0 0 -ccache 27 5 0 +ccache 29 5 0 ctdb 0 0 0 distcc 1 0 0 -ldb 27 11 0 -libreplace 26 11 0 -lorikeet-heimdal 24 20 0 -pidl 15 11 0 -ppp 10 0 0 -rsync27 11 0 +ldb 29 12 0 +libreplace 28 11 0 +lorikeet-heimdal 26 22 0 +pidl 17 11 0 +ppp 12 0 0 +rsync29 11 0 samba-docs 0 0 0 -samba-gtk3 3 0 -samba_3_2_test 28 19 0 -samba_4_0_test 25 25 2 -smb-build25 6 0 -talloc 27 6 0 -tdb 27 14 0 +samba-gtk4 4 0 +samba_3_2_test 30 18 0 +samba_4_0_test 27 27 2 +smb-build27 6 0 +talloc 29 6 0 +tdb 29 14 0
[SCM] CTDB repository - branch master updated - c8181476748395fe6ec5284c49e9d37b882d15ea
The branch, master has been updated via c8181476748395fe6ec5284c49e9d37b882d15ea (commit) via 1360c2f08a463f288b344d02025e84113743026d (commit) via c66e44d44f8d1142394ce5c6a68ac09fd67211fe (commit) via 56af7df33456bf10d19b97cb005257720ac0b610 (commit) from d32b16a4e5ecc31563c6f2767e7d483f3d980284 (commit) http://gitweb.samba.org/?p=sahlberg/ctdb.git;a=shortlog;h=master - Log - commit c8181476748395fe6ec5284c49e9d37b882d15ea Author: Ronnie Sahlberg [EMAIL PROTECTED] Date: Wed May 21 11:50:41 2008 +1000 lowe the loglevel for the warning that releaseip was called for a non-public address. the address might be a public address on a different node so no need to fiull up the logs with thoise messages commit 1360c2f08a463f288b344d02025e84113743026d Author: Ronnie Sahlberg [EMAIL PROTECTED] Date: Wed May 21 11:44:50 2008 +1000 lower the loglevel for when we have tickles for an ip address that is not a public address on the local node (it may be a public address on other nodes) commit c66e44d44f8d1142394ce5c6a68ac09fd67211fe Author: Ronnie Sahlberg [EMAIL PROTECTED] Date: Wed May 21 11:23:46 2008 +1000 dont emit the can not start transaction with locks held at all. it just pollutes the logs commit 56af7df33456bf10d19b97cb005257720ac0b610 Author: Ronnie Sahlberg [EMAIL PROTECTED] Date: Wed May 21 11:15:14 2008 +1000 lower the debug level for the can not start transaction since we do expect this to happen a few times inside ctdb (since we cant really block and wait for all locks to dissapear before we can write the header, for example when doing a dmaster miration) in those cases we accept that we couldnt get a transaction and then just writes the data unsafely anyway. --- Summary of changes: lib/tdb/common/transaction.c |2 +- server/ctdb_takeover.c |4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/lib/tdb/common/transaction.c b/lib/tdb/common/transaction.c index 4e2127b..5e5260b 100644 --- a/lib/tdb/common/transaction.c +++ b/lib/tdb/common/transaction.c @@ -419,7 +419,7 @@ int tdb_transaction_start(struct tdb_context *tdb) /* the caller must not have any locks when starting a transaction as otherwise we'll be screwed by lack of nested locks in posix */ - TDB_LOG((tdb, TDB_DEBUG_ERROR, tdb_transaction_start: cannot start a transaction with locks held\n)); +// TDB_LOG((tdb, TDB_DEBUG_TRACE, tdb_transaction_start: cannot start a transaction with locks held\n)); tdb-ecode = TDB_ERR_LOCK; return -1; } diff --git a/server/ctdb_takeover.c b/server/ctdb_takeover.c index 517970b..1ff 100644 --- a/server/ctdb_takeover.c +++ b/server/ctdb_takeover.c @@ -323,7 +323,7 @@ int32_t ctdb_control_release_ip(struct ctdb_context *ctdb, /* update our vnn list */ vnn = find_public_ip_vnn(ctdb, pip-sin); if (vnn == NULL) { - DEBUG(DEBUG_ERR,(releaseip called for an ip '%s' that is not a public address\n, + DEBUG(DEBUG_INFO,(releaseip called for an ip '%s' that is not a public address\n, inet_ntoa(pip-sin.sin_addr))); return 0; } @@ -1545,7 +1545,7 @@ int32_t ctdb_control_set_tcp_tickle_list(struct ctdb_context *ctdb, TDB_DATA ind vnn = find_public_ip_vnn(ctdb, list-ip); if (vnn == NULL) { - DEBUG(DEBUG_ERR,(__location__ Could not set tcp tickle list, '%s' is not a public address\n, + DEBUG(DEBUG_INFO,(__location__ Could not set tcp tickle list, '%s' is not a public address\n, inet_ntoa(list-ip.sin_addr))); return 1; } -- CTDB repository
[SCM] CTDB repository - branch master updated - c8181476748395fe6ec5284c49e9d37b882d15ea
The branch, master has been updated via c8181476748395fe6ec5284c49e9d37b882d15ea (commit) via 1360c2f08a463f288b344d02025e84113743026d (commit) via c66e44d44f8d1142394ce5c6a68ac09fd67211fe (commit) via 56af7df33456bf10d19b97cb005257720ac0b610 (commit) via d32b16a4e5ecc31563c6f2767e7d483f3d980284 (commit) via f0b98a32be2043a465d4d0ab42e6c2407d9d60f2 (commit) via 9aa09aee618fa71787c5d0e7c885e83f4d82236c (commit) via 68029894f80804c9f31fc90ed0c1b58f75812c3d (commit) via 2c292039a0139dcf5bb2bd964eb6f8902d094c50 (commit) via f0169ac8166a19d65ce254496e21d095aed87c2f (commit) via 3038d0b74895b51af4f85f2f304508ed16d245f4 (commit) via d5fb4489f83f1f956b2c083cfad1861c5ddde283 (commit) via 406a2a1e364cf71eb15e5aeec3b87c62f825da92 (commit) via 93b98838824fae5f47e4ed6b95ae9e4e7597bec3 (commit) via 6131f4b4fc7b65f83f3d57927b23393c84bd2a2b (commit) via 7f4c7cf6355a88b1a02d3a4d1fa25427106953f9 (commit) via b712762a1b8a3028625085e32136df4458b292c0 (commit) from 788d38812d73729f11d12e9812b16092c0ae4123 (commit) http://gitweb.samba.org/?p=tridge/ctdb.git;a=shortlog;h=master - Log - commit c8181476748395fe6ec5284c49e9d37b882d15ea Author: Ronnie Sahlberg [EMAIL PROTECTED] Date: Wed May 21 11:50:41 2008 +1000 lowe the loglevel for the warning that releaseip was called for a non-public address. the address might be a public address on a different node so no need to fiull up the logs with thoise messages commit 1360c2f08a463f288b344d02025e84113743026d Author: Ronnie Sahlberg [EMAIL PROTECTED] Date: Wed May 21 11:44:50 2008 +1000 lower the loglevel for when we have tickles for an ip address that is not a public address on the local node (it may be a public address on other nodes) commit c66e44d44f8d1142394ce5c6a68ac09fd67211fe Author: Ronnie Sahlberg [EMAIL PROTECTED] Date: Wed May 21 11:23:46 2008 +1000 dont emit the can not start transaction with locks held at all. it just pollutes the logs commit 56af7df33456bf10d19b97cb005257720ac0b610 Author: Ronnie Sahlberg [EMAIL PROTECTED] Date: Wed May 21 11:15:14 2008 +1000 lower the debug level for the can not start transaction since we do expect this to happen a few times inside ctdb (since we cant really block and wait for all locks to dissapear before we can write the header, for example when doing a dmaster miration) in those cases we accept that we couldnt get a transaction and then just writes the data unsafely anyway. commit d32b16a4e5ecc31563c6f2767e7d483f3d980284 Author: Ronnie Sahlberg [EMAIL PROTECTED] Date: Fri May 16 15:14:17 2008 +1000 When ctdb has just been installed on a node, there wont be any persistent databases stored yet. Fix a cosmetic and annoying warning message when running service ctdb start and supress printing out that warning your ls command to find the persistent databases didnt find any ... commit f0b98a32be2043a465d4d0ab42e6c2407d9d60f2 Author: Ronnie Sahlberg [EMAIL PROTECTED] Date: Fri May 16 09:51:42 2008 +1000 new version .38 commit 9aa09aee618fa71787c5d0e7c885e83f4d82236c Author: Ronnie Sahlberg [EMAIL PROTECTED] Date: Fri May 16 09:21:44 2008 +1000 add machinereadable output support to ctdb getmonmode commit 68029894f80804c9f31fc90ed0c1b58f75812c3d Author: Ronnie Sahlberg [EMAIL PROTECTED] Date: Fri May 16 08:20:40 2008 +1000 dont disable/enable monitoring for each eventscript, instead just disable the monitoring during the startrecovery event and enable it again once recovery has completed commit 2c292039a0139dcf5bb2bd964eb6f8902d094c50 Author: Ronnie Sahlberg [EMAIL PROTECTED] Date: Thu May 15 15:01:01 2008 +1000 dont check whether the recovered event was successful or not since this event wont run unless the recovery mode is normal but we can not know what the recovery mode will be in the future on a remote node so since we issue these commands that will execute in the future at some other node it is pointless to try to check if it worked or not in particular if failure to successfully run the eventscript would then trigger a full new recovery which is disruptive and expensive. commit f0169ac8166a19d65ce254496e21d095aed87c2f Author: Ronnie Sahlberg [EMAIL PROTECTED] Date: Thu May 15 13:28:19 2008 +1000 remove some unnessecary tests if -vnn is null or not commit 3038d0b74895b51af4f85f2f304508ed16d245f4 Author: Ronnie Sahlberg [EMAIL PROTECTED] Date: Thu May 15 12:28:52 2008 +1000 Update some debug statements. Dont say that recovery failed if the failed function was invoked from outside of recovery commit d5fb4489f83f1f956b2c083cfad1861c5ddde283 Merge: 406a2a1e364cf71eb15e5aeec3b87c62f825da92 788d38812d73729f11d12e9812b16092c0ae4123 Author: Ronnie Sahlberg [EMAIL PROTECTED]
[SCM] Samba Shared Repository - branch v4-0-test updated - release-4-0-0alpha3-1657-g8e07029
The branch, v4-0-test has been updated via 8e070293cfd522b7464be5bc4d8045572d6d996c (commit) via 1e897b6148407e9921edd2c3db734930d79ccb42 (commit) via f4154846401b31d99c40b2ea53992262095366b0 (commit) via e28790ba4884277f310be1b8bd3fba4fd47dbbdb (commit) via 441b286c00f9a7743cdefeb243545bdbd2c94c5e (commit) via 7594f79db6a0e8a46e2863829e5e050b03dfaec1 (commit) via ef5d1c8d320d45b78a1e709964eaada4f5acda59 (commit) via bf1b99aff2a8feaee5f57c7530bc81d447e5d765 (commit) from e05ec3047c4fe0cc2e09a812830fc835dc35abea (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test - Log - commit 8e070293cfd522b7464be5bc4d8045572d6d996c Author: Andrew Bartlett [EMAIL PROTECTED] Date: Wed May 21 14:29:20 2008 +1000 Fix creation of sockaddr in netlogon datagram generator. The previous code sent uninitialised data, and was the wrong length. Andrew Bartlett commit 1e897b6148407e9921edd2c3db734930d79ccb42 Author: Andrew Bartlett [EMAIL PROTECTED] Date: Wed May 21 14:28:50 2008 +1000 Include flags.h into samdb.h These flags are too useful just to hide away... Andrew Bartlett commit f4154846401b31d99c40b2ea53992262095366b0 Author: Andrew Bartlett [EMAIL PROTECTED] Date: Wed May 21 14:28:17 2008 +1000 Extend the NBT-DGRAM torture test again. Andrew Bartlett commit e28790ba4884277f310be1b8bd3fba4fd47dbbdb Author: Andrew Bartlett [EMAIL PROTECTED] Date: Wed May 21 14:26:38 2008 +1000 Manually handle the NETLOGON_SAM_LOGON_REQUEST too. With the sid structure being both optional and aligned, it was too hard to do this in just IDL. This requried moving some things around, as otherwise we would have a dependency loop. Andrew Bartlett commit 441b286c00f9a7743cdefeb243545bdbd2c94c5e Author: Andrew Bartlett [EMAIL PROTECTED] Date: Wed May 21 12:37:36 2008 +1000 Extend the 'netlogon' CLDAP and NBT implementation. This now handles checking if the user exists, including validating the ACB mask on the user. This would be a nasty security hole, if Kerberos did not already expose this information anonymously... Andrew Bartlett commit 7594f79db6a0e8a46e2863829e5e050b03dfaec1 Merge: ef5d1c8d320d45b78a1e709964eaada4f5acda59 e05ec3047c4fe0cc2e09a812830fc835dc35abea Author: Andrew Bartlett [EMAIL PROTECTED] Date: Wed May 21 12:13:45 2008 +1000 Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local commit ef5d1c8d320d45b78a1e709964eaada4f5acda59 Author: Andrew Bartlett [EMAIL PROTECTED] Date: Wed May 21 10:23:02 2008 +1000 Re-add alignment removed by metze in 0e2f6d481b3e35ed392b2b3340b244c77593819c This manual alignment is required, because the structure is marked as unaligned. Andrew Bartlett commit bf1b99aff2a8feaee5f57c7530bc81d447e5d765 Author: Andrew Bartlett [EMAIL PROTECTED] Date: Wed May 21 10:18:21 2008 +1000 Further tests show NTLOGON and NETLOGON to be identical. I can't tell the difference between the NTLOGON and NETLOGON behaviour on these pipes, and this 'exception' turned out to be alignment dependent, not pipe dependent. Andrew Bartlett --- Summary of changes: source/cldap_server/netlogon.c | 60 +++-- source/dsdb/samdb/samdb.h |1 + source/libcli/config.mk| 12 ++- source/libcli/ndr_netlogon.c | 209 +++ source/libcli/netlogon.c | 112 +++ source/libcli/netlogon.h |1 + source/librpc/config.mk|2 +- source/librpc/idl/nbt.idl | 16 ++- source/nbt_server/dgram/netlogon.c |7 +- source/torture/ldap/cldap.c| 22 +++- source/torture/nbt/dgram.c | 277 +--- 11 files changed, 584 insertions(+), 135 deletions(-) create mode 100644 source/libcli/ndr_netlogon.c Changeset truncated at 500 lines: diff --git a/source/cldap_server/netlogon.c b/source/cldap_server/netlogon.c index b2a034d..f263f33 100644 --- a/source/cldap_server/netlogon.c +++ b/source/cldap_server/netlogon.c @@ -46,6 +46,7 @@ NTSTATUS fill_netlogon_samlogon_response(struct ldb_context *sam_ctx, struct dom_sid *domain_sid, const char *domain_guid, const char *user, +uint32_t acct_control, const char *src_address, uint32_t version, struct loadparm_context *lp_ctx, @@ -53,7 +54,8 @@ NTSTATUS fill_netlogon_samlogon_response(struct ldb_context
[SCM] Samba Shared Repository - branch v4-0-test updated - release-4-0-0alpha3-1661-g0e429dd
The branch, v4-0-test has been updated via 0e429dd1fb15137a2a7c25e051b9af8c4ed8c7f3 (commit) via 0b7a6bfcba1b906dc4d461882b4c3fe3c91c44e0 (commit) via 572efc8e65457a982a8cbb04d3b10e3aae22d574 (commit) via bf217c748a8a0929ffc54be940041100ca5127f2 (commit) from 8e070293cfd522b7464be5bc4d8045572d6d996c (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test - Log - commit 0e429dd1fb15137a2a7c25e051b9af8c4ed8c7f3 Merge: 8e070293cfd522b7464be5bc4d8045572d6d996c 0b7a6bfcba1b906dc4d461882b4c3fe3c91c44e0 Author: Andrew Bartlett [EMAIL PROTECTED] Date: Wed May 21 14:34:43 2008 +1000 Merge branch 'v4-0-local' of git://git.id10ts.net/samba into 4-0-local commit 0b7a6bfcba1b906dc4d461882b4c3fe3c91c44e0 Author: Andrew Kroeger [EMAIL PROTECTED] Date: Sat May 17 23:24:48 2008 -0500 provision: Create instructions for enabling DNS GSS-TSIG updates. Added code to the python provisioning to create the named.conf file that was previously generated by the EJS provisioning. Updated the named.conf template to provide the additional details necessary to get things working. commit 572efc8e65457a982a8cbb04d3b10e3aae22d574 Author: Andrew Kroeger [EMAIL PROTECTED] Date: Sat May 17 23:20:35 2008 -0500 provision: Allow DNS GSS-TSIG updates to work. This change ensures the KVNO of the principal in secrets.ldb (which is also exported to the dns.keytab) matches the KVNO associated with the dns user. Without explicitly setting msDS-KeyVersionNumber, the KVNO exported into the dns.keytab was 0. KVNO needs to be 0, as the client libs (at least MIT libs on Fedora) consider KVNO == 0 as a sign to ignore that particular key. commit bf217c748a8a0929ffc54be940041100ca5127f2 Author: Andrew Kroeger [EMAIL PROTECTED] Date: Thu May 8 12:57:29 2008 -0500 howto: Update git clone command to something that actually works. Made the command consistent with the one presented in the Wiki HOWTO. Thanks to Matthias Wallnöfer [EMAIL PROTECTED] for pointing this one out. --- Summary of changes: howto.txt |2 +- source/scripting/python/samba/provision.py | 32 +-- source/setup/named.conf| 135 ++-- source/setup/secrets_dc.ldif |1 + 4 files changed, 135 insertions(+), 35 deletions(-) Changeset truncated at 500 lines: diff --git a/howto.txt b/howto.txt index d128baa..ae9b0e2 100644 --- a/howto.txt +++ b/howto.txt @@ -27,7 +27,7 @@ There are 2 methods of doing this: method 1: rsync -avz samba.org::ftp/unpacked/samba_4_0_test/ samba4 - method 2: git clone git://git.samba.org/samba.git samba4; cd samba4; git checkout v4-0-test; cd .. + method 2: git clone git://git.samba.org/samba.git samba4; cd samba4 git checkout -b v4-0-test origin/v4-0-test; cd .. both methods will create a directory called samba4 in the current directory. If you don't have rsync or git then install one of them. diff --git a/source/scripting/python/samba/provision.py b/source/scripting/python/samba/provision.py index ad8eb8b..4818a79 100644 --- a/source/scripting/python/samba/provision.py +++ b/source/scripting/python/samba/provision.py @@ -236,6 +236,7 @@ def provision_paths_from_lp(lp, dnsdomain): paths.secrets = os.path.join(paths.private_dir, lp.get(secrets database) or secrets.ldb) paths.templates = os.path.join(paths.private_dir, templates.ldb) paths.dns = os.path.join(paths.private_dir, dnsdomain + .zone) +paths.namedconf = os.path.join(paths.private_dir, named.conf) paths.winsdb = os.path.join(paths.private_dir, wins.ldb) paths.s4_ldapi_path = os.path.join(paths.private_dir, ldapi) paths.phpldapadminconfig = os.path.join(paths.private_dir, @@ -1059,12 +1060,14 @@ def provision(setup_dir, message, session_info, scope=SCOPE_SUBTREE) assert isinstance(hostguid, str) -create_zone_file(paths.dns, setup_path, samdb, +create_zone_file(paths.dns, paths.namedconf, setup_path, samdb, hostname=names.hostname, hostip=hostip, hostip6=hostip6, dnsdomain=names.dnsdomain, domaindn=names.domaindn, dnspass=dnspass, realm=names.realm, - domainguid=domainguid, hostguid=hostguid) + domainguid=domainguid, hostguid=hostguid, + private_dir=paths.private_dir, keytab_name=paths.dns_keytab) message(Please install the zone located in %s into your DNS server % paths.dns) +message(See %s if you want to use secure GSS-TSIG updates % paths.namedconf)
[SCM] Samba Shared Repository - branch v4-0-test updated - release-4-0-0alpha3-1662-gc3eeae2
The branch, v4-0-test has been updated via c3eeae2ea6a7562b43a436f20c110002ca4d1d2b (commit) from 0e429dd1fb15137a2a7c25e051b9af8c4ed8c7f3 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test - Log - commit c3eeae2ea6a7562b43a436f20c110002ca4d1d2b Author: Andrew Bartlett [EMAIL PROTECTED] Date: Wed May 21 14:49:47 2008 +1000 Correct an assertion in the testsuite. Andrew Bartlett --- Summary of changes: source/torture/nbt/dgram.c |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source/torture/nbt/dgram.c b/source/torture/nbt/dgram.c index f8f9eaf..887c6f3 100644 --- a/source/torture/nbt/dgram.c +++ b/source/torture/nbt/dgram.c @@ -246,7 +246,7 @@ static bool nbt_test_netlogon2(struct torture_context *tctx) map_netlogon_samlogon_response(response-samlogon); torture_assert_int_equal(tctx, response-samlogon.nt5_ex.command, LOGON_SAM_LOGON_RESPONSE_EX, Got incorrect netlogon response command); - torture_assert_int_equal(tctx, response-samlogon.nt5_ex.nt_version, NETLOGON_NT_VERSION_5EX_WITH_IP|NETLOGON_NT_VERSION_5EX|NETLOGON_NT_VERSION_5|NETLOGON_NT_VERSION_1, Got incorrect netlogon response command); + torture_assert_int_equal(tctx, response-samlogon.nt5_ex.nt_version, NETLOGON_NT_VERSION_5EX_WITH_IP|NETLOGON_NT_VERSION_5EX|NETLOGON_NT_VERSION_1, Got incorrect netlogon response command); /* setup (another) temporary mailslot listener for replies */ dgmslot = dgram_mailslot_temp(dgmsock, NBT_MAILSLOT_GETDC, -- Samba Shared Repository