Re: [Samba] DO script IF User-Account got locked

2009-02-20 Thread Axel Werner 

Hi and thanks fer reply.

Are u talking about completly droping LDAP Authentication and only 
rely/authenticate against samba ??
whats pam_winbindd all about ? i read its required if my samba is member 
or some native NT or ADS domain for somehow mapping foreign NT Users 
to some Unix users. Is it more than that ? Are there some good 
Docs/Manuals about that a normal Human (Not a C Coder) can understand ?


thanks
Axel




Am 19.02.2009 16:42, François Legal schrieb:

If you want to prevent the user from unlocking its samba account, you can
probably do it with ACL on your directory (only allow modification to samba
attributes by the bind user used by samba).

If you want to prevent the user from logging in Linux when his account is
locked, then you could consider using pam_winbindd instead of pam_ldap

François

On Thu, 19 Feb 2009 13:14:48 +0100, Axel Werner m...@awerner.homeip.net
wrote:
  

Hi Gurus out there!

Is there a Way to have Samba start a script in some way like those 
addnewmachine or addnewuser scripts, that kicks in whenever a samba 
user-account got locked down ?? (through manual lock OR more important, 
through a intruder detection / x failed logon attempts )


My Problem is that whenever a Samba Account got locked because of 
exceeding max. failed logon attempts the corresponding LDAP User Object 
is still unlocked. So when however the user cannot log back in to 
samba, he is still able to log in on linux console (through pam_ldap) 
and reset his password or so more nasty things. So i want to make sure 
that if he fucks up his samba account , his LDAP account will also be 
disabled.


Some Hook for a custom script would be fine. But is there something like 
that ?

Any other Ideas how to manage that ?

greetings
Axel





  

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Fwd: win xp machine disconnected from share and repeated authentication required

2009-02-20 Thread vishesh kumar 
Dear ambasta

Can you try following command on xp

net config server /autodisconnect:0


thanks


On Fri, Feb 20, 2009 at 9:06 AM, Pramathesh Ambasta 
pramathesh.amba...@gmail.com wrote:

 Sorry for posting this again. But i have not been able to find a
 satisfactory resolution to this. I urgently need to attend to this
 issue and would be very grateful for some help on this.
 Regards
 Pramathesh


 -- Forwarded message --
 From: Pramathesh Ambasta pramathesh.amba...@gmail.com
 Date: Wed, Feb 18, 2009 at 8:31 PM
 Subject: win xp machine disconnected from share and repeated
 authentication  required
 To: samba@lists.samba.org


 I have set up a Ubuntu 8.04 server for file and print sharing on a
 small network. The server runs smbd version 3.0.28a.

 The samba server is a standalone server and is used by some users to
 access common data. The scheme is that all users have a Unix account
 on the server. When they want to access the shared service, they are
 asked for a password after which they can work.

 One of the machines on the network is a win xp SP2 machine on which
 the user had already logged in, but in trying to attach a file from
 the server in Outlook Express got an error message that the file could
 not be found. He had to go to Network Neighborhood, click on the
 shared service, authenticate again. This happened quite a few times
 within a fairly short span of time.

 An examination of the log for the machine (log.hpm with IP
 192.168.1.6) shows some connection reset by peer messages. I have
 browsed on the net and come across several people reporting similar
 issues with earlier versions of samba but have not come across a
 definitive solution. Is this an smb ports = 445 issue or a network
 card/connection failure? Why does the log below show a write failure
 on 0.0.0.0? The log also shows some failures to create built in users.

 Will be very grateful on help/pointers on this.

 Below is a cutting of the relevant sections from log.hpm followed by
 the smb.conf file.

 Thanks in advance
 Pramathesh

 *log.hpm*
 [2009/02/18 10:49:57, 1] smbd/service.c:make_connection_snum(1033)
  hpm (192.168.1.6) connect to service DataShare initially as user mih
 (uid=1003, gid=119) (pid 10051)
 
  hpm (192.168.1.6) closed connection to service DataShare
 [2009/02/18 15:20:42, 0]
 auth/auth_util.c:create_builtin_administrators(792)
  create_builtin_administrators: Failed to create Administrators
 [2009/02/18 15:20:42, 0] auth/auth_util.c:create_builtin_users(758)
  create_builtin_users: Failed to create Users
 [2009/02/18 15:20:42, 0]
 auth/auth_util.c:create_builtin_administrators(792)
  create_builtin_administrators: Failed to create Administrators
 [2009/02/18 15:20:42, 0] lib/util_sock.c:write_data(562)
  write_data: write failure in writing to client 192.168.1.6. Error
 Connection reset by peer
 [2009/02/18 15:20:42, 0] lib/util_sock.c:send_smb(761)
  Error writing 4 bytes to client. -1. (Connection reset by peer)
 [2009/02/18 15:20:42, 0] auth/auth_util.c:create_builtin_users(758)
  create_builtin_users: Failed to create Users
 [2009/02/18 15:20:42, 0] lib/util_sock.c:write_data(562)
  write_data: write failure in writing to client 0.0.0.0. Error
 Connection reset by peer
 **

 ***smb.conf*

 [global]
   workgroup = DOMAIN
   server string = SERVER (MAIN)
   dns proxy = no
   log file = /var/log/samba/log.%m
   max log size = 1000
   syslog = 0
   panic action = /usr/share/samba/panic-action %d
   security = user
   passdb backend = tdbsam
   obey pam restrictions = yes
   invalid users = root
   unix password sync = yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\s*\spassword:* %n\n
 *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
   pam password change = yes
   map to guest = bad user
   usershare allow guests = yes
   username map = /etc/samba/smbusers

 [printers]
   comment = All Printers
   browseable = no
   path = /var/spool/samba
   printable = yes
   create mask = 0700

 [print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers

 [DataShare]
   path = /home/core/DataShare
   writeable = yes
 ;browseable = yes
   valid users = specific, valid, user, names, listed, here
   directory mask = 0770
   create mask = 0660
   force group = groupname

 **
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

RE: [Samba] RE: Long printer name in CUPS not appear in Samba

2009-02-20 Thread HB 
 

 -Message d'origine-
 De : 
 samba-bounces+ciradhb.forward=laposte@lists.samba.org 
 [mailto:samba-bounces+ciradhb.forward=laposte@lists.samba.
org] De la part de Andrea Zagli
 Envoyé : mardi 17 février 2009 18:43
 À : samba@lists.samba.org
 Objet : Re: [Samba] RE: Long printer name in CUPS not appear in Samba
 
 
 
 Il giorno lun 16 feb 2009 14:06:47 CET, HB ha scritto:
  Does anyone observe this 15 chars limitation between CUPS 
 and Samba ?
 
 yes, with an old samba version that i don't remember
 
 i didn't try with the current version

In my case , it is Samba 3.2.7, so a not so old release. 

Henri 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Long printer name in CUPS not appear in Samba

2009-02-20 Thread Rob Shinn 
Don't know if this helps, but you _can_ add a description in CUPS and
Samba clients will display it.

On 2/13/09, HB ciradhb.forw...@laposte.net wrote:
 Hi

 I have a Samba 3.2.7 acting as a PDC for files and printers sharing.
 All the print configuration is ok and network printers shared by Samba and
 managed by CUPS are working.
 Except that if I put a printer name longer than 15 characters in CUPS , it
 is not seen at all in samba . With less that 15 chars, it
 is ok, but since this is also the name that appears as the share , it could
 not be very practical for endusers .

 Is this 15 chars limit a normal behavior ? Is there a way to bypass it ?

 Thanks in advance

 Regards

 Henri

 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba


-- 
Sent from my mobile device
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Hide the not allowed to open shared directories in the client

2009-02-20 Thread Emmanuel 

Eero Volotinen a affirmé, Le 2009-02-20 07:42:

Emmanuel kirjoitti:




Would the hide unreadable parameter work for you?



I'm sorry , I don't understand.


hide unreadable = yes
on global config

This parameter is really good for my usage, it hides directories and 
files that user cannot access.


--
Eero,
RHCE


It works like a charm.
Thank you.

--
Emmanuel
http://ebgy.ath.cx
http://ebgy.free.fr
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] The referenced account is currently locked out...

2009-02-20 Thread Scott R. Ehrlich 
I recently changed the subnet of several computers on an isolated LAN, 
that LAN utilizing RHEL 5.0 server (out-of-box, no patches) with Samba and 
several Windows XP w/SP2 systems.


After the subnet change, if I log in as local admin to any of the Windows 
systems, and try Start  Run  \\any_other_host\some_share


I get

\\any_other_host\some_share

The referenced account is currently locked out and may not be logged on 
to.




Doesn't matter if I try to access any available share on the samba server 
or directly to another Windows box on the network.


All systems on the network have been rebooted.  All Windows systems are 
able to log into the samba domain without a problem.   I just can't gain 
UNC access to any other host as local admin on a box.   I was able to do 
so without a problem before the network change.


What am I missing?

Thanks.

Scott
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Over 400 smbd pid's?

2009-02-20 Thread Ed Kasky 

At 03:32 AM Tuesday, 2/17/2009, you wrote -=

On Mon, Feb 16, 2009 at 06:07:28PM -0800, Ed Kasky wrote:

 In this case, if it were acting up, I assume that I would be looking
 for multiple instances of 0xc9292600 correct?

Yes. But this time it seems it's a different fd. You first
need to catch a stuck smbd, see with strace which fd it
wants to write to, then look with lsof for that fd in that
process and then find the other end with grepping for the
corresponding 0x... value.

Volker


Well, somehow things have been corrected and no runaway processes for 
5 days at least.  I wish I could say for sure what was causing the 
problem but the one thing that changed just before it all stopped was 
that we powered off the one mac that was accessing the server.  We 
have since rebooted it and have been using it to access some data 
files with no problems.


I wish I had a better answer than that in case it starts up again but 
that will be the first place I will look if it does.  Thanks again 
for all your help by the way...


Ed

...

Randomly Generated Quote (268 of 1503):
A clever prophet makes sure of the event first.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] samba file server

2009-02-20 Thread yudi shiddiq 

Hello everybody,

I'm really need help, i'm using samba server as file server and using 
samba-3.2.6-1 on my file server.

My pc client using win xp pro and win ME, the problem is when we work using 
open office 2 and want to save our modified document sometimes show error 
message general input/output error i have tried to upgrade open office from 
version 2 to version 3 but the error still happen, this problem happen most on 
pc using win ME, and if the error happen i couldn't save anywhere even on my 
local drive, is there any problem on my configuration or bug on samba version 
3.2.6-1

thx b4..

this is my /etc/samba/smb.conf

[global]
netbios name = BETA
os level = 20
preferred master = no
security = user
workgroup = BETA-SERVER
hosts allow = 10.10.0.0/255.255.0.0
encrypt passwords = yes
ldap passwd sync = yes
passdb backend = ldapsam:ldap://10.10.0.10
lanman auth = yes
smb ports = 139

dos filemode = yes
getwd cache = yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
unix extensions = no
wide links = yes
wins support = no

##
# Defining logging facility  #
##
log file = /var/log/samba/%m.log
log level = 1 vfs:0
# log level = 4


### These enable symlinks ###
# follow symlinks = yes

##
# OpenLDAP stuff is defined here #
##

ldap ssl = no
ldap suffix = dc=beta,dc=ind
ldap admin dn = cn=Manager,dc=beta,dc=ind
ldap user suffix = ou=Users
ldap machine suffix = ou=Computers
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Users
   idmap uid = 1-2
   idmap gid = 1-2

   template shell = /bin/false
   winbind use default domain = no
### Autodesk/Autocad things ###
csc policy = disable
force security mode = 777
nt acl support = no

[sys]
path = /alpha
comment = beta
#   level2 oplocks = no
#   oplocks = no
browseable = yes
read only = no
create mode = 0775
directory mode = 0777
vfs objects = full_audit
full_audit:failure = none
full_audit:success = mkdir rename unlink rmdir pwrite write open
full_audit:prefix = %u|%I|%m

[data]
path = /data
comment = beta
read only = no
browseable = no





  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] samba file server

2009-02-20 Thread Walter Mautner 
Am Saturday 21 February 2009 05:51:39 schrieb yudi shiddiq:
 Hello everybody,

 I'm really need help, i'm using samba server as file server and using
 samba-3.2.6-1 on my file server.

 My pc client using win xp pro and win ME, the problem is when we work using
 open office 2 and want to save our modified document sometimes show error
 message general input/output error i have tried to upgrade open office
 from version 2 to version 3 but the error still happen, this problem happen
 most on pc using win ME, and if the error happen i couldn't save anywhere
 even on my local drive, is there any problem on my configuration or bug on
 samba version 3.2.6-1

This can be anything from a dying harddrive to a flakey (network) 
switch/router or a broken cable.
Without debugging basic network functions and viewing samba logs we are just 
as clueless ...

 thx b4..

 this is my /etc/samba/smb.conf

 [global]
 netbios name = BETA
 os level = 20
 preferred master = no
 security = user
 workgroup = BETA-SERVER
 hosts allow = 10.10.0.0/255.255.0.0
 encrypt passwords = yes
 ldap passwd sync = yes
 passdb backend = ldapsam:ldap://10.10.0.10
 lanman auth = yes
 smb ports = 139

 dos filemode = yes
 getwd cache = yes
 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
 unix extensions = no
 wide links = yes
 wins support = no

 ##
 # Defining logging facility  #
 ##
 log file = /var/log/samba/%m.log
 log level = 1 vfs:0
 # log level = 4


 ### These enable symlinks ###
 # follow symlinks = yes

 ##
 # OpenLDAP stuff is defined here #
 ##

 ldap ssl = no
 ldap suffix = dc=beta,dc=ind
 ldap admin dn = cn=Manager,dc=beta,dc=ind
 ldap user suffix = ou=Users
 ldap machine suffix = ou=Computers
 ldap group suffix = ou=Groups
 ldap idmap suffix = ou=Users
idmap uid = 1-2
idmap gid = 1-2

template shell = /bin/false
winbind use default domain = no
 ### Autodesk/Autocad things ###
 csc policy = disable
 force security mode = 777
 nt acl support = no

Streamline your samba config file. I doubt you are actually using ldap and 
winbind both together?

 [sys]
 path = /alpha
 comment = beta
 #   level2 oplocks = no
 #   oplocks = no
 browseable = yes
 read only = no
 create mode = 0775
 directory mode = 0777
 vfs objects = full_audit

Full audit takes a performance hit.

 full_audit:failure = none
 full_audit:success = mkdir rename unlink rmdir pwrite write open
 full_audit:prefix = %u|%I|%m

 [data]
 path = /data
 comment = beta
 read only = no
 browseable = no


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-4991-gea6f99d

2009-02-20 Thread Karolin Seeger 
The branch, v3-3-test has been updated
   via  ea6f99daeb6bb720ef0b0b1439a96d24e87973f2 (commit)
  from  ea256b2d6d35327d63038554bf0a67d986c8e594 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test


- Log -
commit ea6f99daeb6bb720ef0b0b1439a96d24e87973f2
Author: Karolin Seeger ksee...@samba.org
Date:   Fri Feb 20 08:58:58 2009 +0100

WHATSNEW: Update changes since 3.3.0.

Karolin

---

Summary of changes:
 WHATSNEW.txt |6 ++
 1 files changed, 6 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index cdce940..74e8767 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -42,6 +42,9 @@ o   Jeremy Allison j...@samba.org
 * Correctly use chroot().
 * Parameterize in local.h the MAX_RPC_DATA_SIZE, and ensure that offered
   read from the rpc packet in spoolss is under that size.
+* Backport the semantics of when to delete alternate data streams on a file
+  truncate.
+* Fix printf warnings.
 
 
 o   Michael Adam ob...@samba.org
@@ -55,6 +58,7 @@ o   Michael Adam ob...@samba.org
 
 
 o   Guenther Deschner g...@samba.org
+* Fix Coverity ID 848.
 * Remove unused ENUM_HND from 'net'.
 * Fix getform command asprintf return code in rpcclient.
 * Fix memleak in get_remote_printer_publishing_data().
@@ -85,6 +89,8 @@ o   Volker Lendecke v...@samba.org
 * Avoid valgrind errors.
 * Fix 'net rpc join' for users with the SeMachineAccountPrivilege.
 * Fix resume handle for _samr_EnumDomainGroups.
+* Fix a buffer handling bug when adding lots of registry keys.
+* Fix a O(n^2) algorithm in regdb_fetch_keys().
 
 
 o   Jeff Layton jlay...@redhat.com


-- 
Samba Shared Repository

[SCM] Samba Shared Repository - branch v3-3-stable updated - release-3-3-0-121-gb93bb7a

2009-02-20 Thread Karolin Seeger 
The branch, v3-3-stable has been updated
   via  b93bb7a251cef874eb2d872718f845f00726a8bc (commit)
   via  b054455edc927a2a031173b2e9bcb2583ea0cffb (commit)
   via  6681d9066f462e5f403498eaa6066a2b7bd7f08c (commit)
   via  9034f373d433b5f15f1c2966a69b4092456af625 (commit)
   via  9f5ab2af11fbef878956e3e6ef6a1c5c511c707e (commit)
   via  7480b88af9bd1ed36abb816c85f69746d444dadc (commit)
   via  924e5aee5e73a7b54061193a274f2ad662c6b230 (commit)
  from  0523f2463423067e36fb975cba891f25a87ee2fe (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-stable


- Log -
commit b93bb7a251cef874eb2d872718f845f00726a8bc
Author: Karolin Seeger ksee...@samba.org
Date:   Fri Feb 20 08:58:58 2009 +0100

WHATSNEW: Update changes since 3.3.0.

Karolin
(cherry picked from commit ea6f99daeb6bb720ef0b0b1439a96d24e87973f2)

commit b054455edc927a2a031173b2e9bcb2583ea0cffb
Author: Jeremy Allison j...@samba.org
Date:   Thu Feb 19 13:36:45 2009 -0800

Fix printf warnings found on systems where time_t  long int.
Jeremy.
(cherry picked from commit ea256b2d6d35327d63038554bf0a67d986c8e594)

commit 6681d9066f462e5f403498eaa6066a2b7bd7f08c
Author: Jeremy Allison j...@samba.org
Date:   Thu Feb 19 13:09:45 2009 -0800

Fix printf type warning.
Jeremy.
(cherry picked from commit aaba9a7b9a39bd899a748c45502fb8103c863eb9)

commit 9034f373d433b5f15f1c2966a69b4092456af625
Author: Volker Lendecke v...@samba.org
Date:   Thu Feb 19 20:03:06 2009 +0100

Fix a O(n^2) algorithm in regdb_fetch_keys()
(cherry picked from commit d98c43982c56ef788144a3fd67cdd65a9f95f2be)

commit 9f5ab2af11fbef878956e3e6ef6a1c5c511c707e
Author: Jeremy Allison j...@samba.org
Date:   Thu Feb 19 11:19:10 2009 -0800

Backport the semantics of when to delete alternate data streams on a file 
truncate.
Needed to fully support stream semantics.
Jeremy.
(cherry picked from commit 5a68f1e2c1fd16d315b1e303a90eb6475bbe7b15)

commit 7480b88af9bd1ed36abb816c85f69746d444dadc
Author: Volker Lendecke v...@samba.org
Date:   Thu Feb 19 14:16:44 2009 +0100

Fix a buffer handling bug when adding lots of registry keys

This is *ancient*... From 2002, and nobody noticed until someone added lots 
of
shares using net conf... :-)
(cherry picked from commit 36ae846d15027df5e3a02ffabb08183dad9f6517)
(cherry picked from commit 13f0a2903257677cc107f861e4ed2b58e52a1e21)

commit 924e5aee5e73a7b54061193a274f2ad662c6b230
Author: Günther Deschner g...@samba.org
Date:   Thu Feb 19 02:35:20 2009 +0100

s3-libnet: fix coverity #848 (UNINIT).

Guenther
(cherry picked from commit e9d5405948e35a8eec0b49cc6c066278cb523397)
(cherry picked from commit 3d13df93f0ffaa518a576191a0715add878a7635)

---

Summary of changes:
 WHATSNEW.txt  |6 +++
 source/include/proto.h|1 +
 source/libnet/libnet_samsync_keytab.c |2 +-
 source/passdb/pdb_ldap.c  |   16 
 source/registry/reg_backend_db.c  |   65 ++---
 source/smbd/close.c   |2 +-
 source/smbd/open.c|   14 +++
 source/utils/smbget.c |3 +-
 8 files changed, 84 insertions(+), 25 deletions(-)


Changeset truncated at 500 lines:

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index cdce940..74e8767 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -42,6 +42,9 @@ o   Jeremy Allison j...@samba.org
 * Correctly use chroot().
 * Parameterize in local.h the MAX_RPC_DATA_SIZE, and ensure that offered
   read from the rpc packet in spoolss is under that size.
+* Backport the semantics of when to delete alternate data streams on a file
+  truncate.
+* Fix printf warnings.
 
 
 o   Michael Adam ob...@samba.org
@@ -55,6 +58,7 @@ o   Michael Adam ob...@samba.org
 
 
 o   Guenther Deschner g...@samba.org
+* Fix Coverity ID 848.
 * Remove unused ENUM_HND from 'net'.
 * Fix getform command asprintf return code in rpcclient.
 * Fix memleak in get_remote_printer_publishing_data().
@@ -85,6 +89,8 @@ o   Volker Lendecke v...@samba.org
 * Avoid valgrind errors.
 * Fix 'net rpc join' for users with the SeMachineAccountPrivilege.
 * Fix resume handle for _samr_EnumDomainGroups.
+* Fix a buffer handling bug when adding lots of registry keys.
+* Fix a O(n^2) algorithm in regdb_fetch_keys().
 
 
 o   Jeff Layton jlay...@redhat.com
diff --git a/source/include/proto.h b/source/include/proto.h
index 716f177..edb0009 100644
--- a/source/include/proto.h
+++ b/source/include/proto.h
@@ -8690,6 +8690,7 @@ void msg_close_file(struct messaging_context *msg_ctx,
uint32_t msg_type,
struct server_id server_id,
DATA_BLOB *data);
+NTSTATUS

[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha6-1025-g54dbb03

2009-02-20 Thread Karolin Seeger 
The branch, master has been updated
   via  54dbb030e2c6fed0abd0a3a89d08dad9b8a201a1 (commit)
  from  73d5f14c04f2487f67695ce2e9ff025e25b2b026 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 54dbb030e2c6fed0abd0a3a89d08dad9b8a201a1
Author: Karolin Seeger ksee...@samba.org
Date:   Fri Feb 20 09:20:16 2009 +0100

s3/docs: Fix several typos.

This fixes bug #6127.
Thanks to Justin T Pryzby justinpryzby [at] users.sourceforge.net
for the review!

Karolin

---

Summary of changes:
 docs-xml/archives/THANKS   |2 +-
 docs-xml/smbdotconf/browse/enhancedbrowsing.xml|2 +-
 docs-xml/smbdotconf/locking/strictlocking.xml  |2 +-
 docs-xml/smbdotconf/misc/remoteannounce.xml|4 ++--
 docs-xml/smbdotconf/misc/usershareallowguests.xml  |2 +-
 .../smbdotconf/misc/usershareprefixallowlist.xml   |4 ++--
 .../smbdotconf/misc/usersharetemplateshare.xml |2 +-
 docs-xml/smbdotconf/printing/useclientdriver.xml   |2 +-
 .../smbdotconf/protocol/aclcheckpermissions.xml|2 +-
 docs-xml/smbdotconf/protocol/enableasusupport.xml  |2 +-
 docs-xml/smbdotconf/security/clientlanmanauth.xml  |2 +-
 docs-xml/smbdotconf/security/clientsigning.xml |3 +--
 docs-xml/smbdotconf/security/lanmanauth.xml|2 +-
 docs-xml/smbdotconf/security/passwordserver.xml|2 +-
 docs-xml/smbdotconf/security/security.xml  |6 +++---
 docs-xml/smbdotconf/security/serverschannel.xml|2 +-
 docs-xml/smbdotconf/security/serversigning.xml |3 +--
 docs-xml/smbdotconf/security/smbencrypt.xml|3 +--
 docs-xml/smbdotconf/security/updateencrypted.xml   |4 ++--
 19 files changed, 24 insertions(+), 27 deletions(-)


Changeset truncated at 500 lines:

diff --git a/docs-xml/archives/THANKS b/docs-xml/archives/THANKS
index 789042f..37ecc99 100644
--- a/docs-xml/archives/THANKS
+++ b/docs-xml/archives/THANKS
@@ -86,7 +86,7 @@ Tom Haapanen (t...@metrics.com)
 consulting firm located in Waterloo, Ontario, Canada.  We work
 with a variety of environments (such as Windows, Windows NT and
 Unix), tools and application areas, and can provide assistance for
-development work ranging from a few days to to multiple man-year
+development work ranging from a few days to multiple man-year
 projects.  You can find more information at http://www.metrics.com/.
 
 
diff --git a/docs-xml/smbdotconf/browse/enhancedbrowsing.xml 
b/docs-xml/smbdotconf/browse/enhancedbrowsing.xml
index 13f2cd6..7f85616 100644
--- a/docs-xml/smbdotconf/browse/enhancedbrowsing.xml
+++ b/docs-xml/smbdotconf/browse/enhancedbrowsing.xml
@@ -17,7 +17,7 @@
 
paraYou may wish to disable this option if you have a problem with 
empty
workgroups not disappearing from browse lists. Due to the restrictions
-   of the browse protocols these enhancements can cause a empty workgroup
+   of the browse protocols, these enhancements can cause a empty workgroup
to stay around forever which can be annoying./para
 
paraIn general you should leave this option enabled as it makes
diff --git a/docs-xml/smbdotconf/locking/strictlocking.xml 
b/docs-xml/smbdotconf/locking/strictlocking.xml
index e3a0ed7..15ad0ad 100644
--- a/docs-xml/smbdotconf/locking/strictlocking.xml
+++ b/docs-xml/smbdotconf/locking/strictlocking.xml
@@ -12,7 +12,7 @@
para
When strict locking is set to Auto (the default), the server performs 
file lock checks only on non-oplocked files.
As most Windows redirectors perform file locking checks locally on 
oplocked files this is a good trade off for
-   inproved performance.
+   improved performance.
/para
 
para
diff --git a/docs-xml/smbdotconf/misc/remoteannounce.xml 
b/docs-xml/smbdotconf/misc/remoteannounce.xml
index f23968b..a6bf0c5 100644
--- a/docs-xml/smbdotconf/misc/remoteannounce.xml
+++ b/docs-xml/smbdotconf/misc/remoteannounce.xml
@@ -6,7 +6,7 @@
 description
para
This option allows you to setup 
citerefentryrefentrytitlenmbd/refentrytitle
-   manvolnum8/manvolnum/citerefentryto periodically announce itself 
+   manvolnum8/manvolnum/citerefentry to periodically announce itself 
to arbitrary IP addresses with an arbitrary workgroup name.
/para
 
@@ -23,7 +23,7 @@
 /programlisting
the above line would cause command moreinfo=nonenmbd/command to 
announce itself 
to the two given IP addresses using the given workgroup names. If you 
leave out the 
-   workgroup name then the one given in the smbconfoption 
name=workgroup/ parameter 
+   workgroup name, then the one given in the smbconfoption 
name=workgroup/ parameter 
is used instead.
/para
 
diff --git

[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-4992-ga4548e4

2009-02-20 Thread Karolin Seeger 
The branch, v3-3-test has been updated
   via  a4548e41c6f12e4703249c53ad3dc727d2839931 (commit)
  from  ea6f99daeb6bb720ef0b0b1439a96d24e87973f2 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test


- Log -
commit a4548e41c6f12e4703249c53ad3dc727d2839931
Author: Karolin Seeger ksee...@samba.org
Date:   Fri Feb 20 09:20:16 2009 +0100

s3/docs: Fix several typos.

This fixes bug #6127.
Thanks to Justin T Pryzby justinpryzby [at] users.sourceforge.net
for the review!

Karolin
(cherry picked from commit 54dbb030e2c6fed0abd0a3a89d08dad9b8a201a1)

---

Summary of changes:
 docs-xml/archives/THANKS   |2 +-
 docs-xml/smbdotconf/browse/enhancedbrowsing.xml|2 +-
 docs-xml/smbdotconf/locking/strictlocking.xml  |2 +-
 docs-xml/smbdotconf/misc/remoteannounce.xml|4 ++--
 docs-xml/smbdotconf/misc/usershareallowguests.xml  |2 +-
 .../smbdotconf/misc/usershareprefixallowlist.xml   |4 ++--
 .../smbdotconf/misc/usersharetemplateshare.xml |2 +-
 docs-xml/smbdotconf/printing/useclientdriver.xml   |2 +-
 .../smbdotconf/protocol/aclcheckpermissions.xml|2 +-
 docs-xml/smbdotconf/protocol/enableasusupport.xml  |2 +-
 docs-xml/smbdotconf/security/clientlanmanauth.xml  |2 +-
 docs-xml/smbdotconf/security/clientsigning.xml |3 +--
 docs-xml/smbdotconf/security/lanmanauth.xml|2 +-
 docs-xml/smbdotconf/security/passwordserver.xml|2 +-
 docs-xml/smbdotconf/security/security.xml  |6 +++---
 docs-xml/smbdotconf/security/serverschannel.xml|2 +-
 docs-xml/smbdotconf/security/serversigning.xml |3 +--
 docs-xml/smbdotconf/security/smbencrypt.xml|3 +--
 docs-xml/smbdotconf/security/updateencrypted.xml   |4 ++--
 19 files changed, 24 insertions(+), 27 deletions(-)


Changeset truncated at 500 lines:

diff --git a/docs-xml/archives/THANKS b/docs-xml/archives/THANKS
index 789042f..37ecc99 100644
--- a/docs-xml/archives/THANKS
+++ b/docs-xml/archives/THANKS
@@ -86,7 +86,7 @@ Tom Haapanen (t...@metrics.com)
 consulting firm located in Waterloo, Ontario, Canada.  We work
 with a variety of environments (such as Windows, Windows NT and
 Unix), tools and application areas, and can provide assistance for
-development work ranging from a few days to to multiple man-year
+development work ranging from a few days to multiple man-year
 projects.  You can find more information at http://www.metrics.com/.
 
 
diff --git a/docs-xml/smbdotconf/browse/enhancedbrowsing.xml 
b/docs-xml/smbdotconf/browse/enhancedbrowsing.xml
index 13f2cd6..7f85616 100644
--- a/docs-xml/smbdotconf/browse/enhancedbrowsing.xml
+++ b/docs-xml/smbdotconf/browse/enhancedbrowsing.xml
@@ -17,7 +17,7 @@
 
paraYou may wish to disable this option if you have a problem with 
empty
workgroups not disappearing from browse lists. Due to the restrictions
-   of the browse protocols these enhancements can cause a empty workgroup
+   of the browse protocols, these enhancements can cause a empty workgroup
to stay around forever which can be annoying./para
 
paraIn general you should leave this option enabled as it makes
diff --git a/docs-xml/smbdotconf/locking/strictlocking.xml 
b/docs-xml/smbdotconf/locking/strictlocking.xml
index e3a0ed7..15ad0ad 100644
--- a/docs-xml/smbdotconf/locking/strictlocking.xml
+++ b/docs-xml/smbdotconf/locking/strictlocking.xml
@@ -12,7 +12,7 @@
para
When strict locking is set to Auto (the default), the server performs 
file lock checks only on non-oplocked files.
As most Windows redirectors perform file locking checks locally on 
oplocked files this is a good trade off for
-   inproved performance.
+   improved performance.
/para
 
para
diff --git a/docs-xml/smbdotconf/misc/remoteannounce.xml 
b/docs-xml/smbdotconf/misc/remoteannounce.xml
index f23968b..a6bf0c5 100644
--- a/docs-xml/smbdotconf/misc/remoteannounce.xml
+++ b/docs-xml/smbdotconf/misc/remoteannounce.xml
@@ -6,7 +6,7 @@
 description
para
This option allows you to setup 
citerefentryrefentrytitlenmbd/refentrytitle
-   manvolnum8/manvolnum/citerefentryto periodically announce itself 
+   manvolnum8/manvolnum/citerefentry to periodically announce itself 
to arbitrary IP addresses with an arbitrary workgroup name.
/para
 
@@ -23,7 +23,7 @@
 /programlisting
the above line would cause command moreinfo=nonenmbd/command to 
announce itself 
to the two given IP addresses using the given workgroup names. If you 
leave out the 
-   workgroup name then the one given in the smbconfoption 
name=workgroup/ parameter 
+   workgroup name, then the one given in the smbconfoption 
name=workgroup/

[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-3480-g0d68e3d

2009-02-20 Thread Karolin Seeger 
The branch, v3-2-test has been updated
   via  0d68e3d54b8f0bf2861edc7ac3b26c2f48f242eb (commit)
  from  d5069c916a729698957dd5f828b1bad5bf17971e (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test


- Log -
commit 0d68e3d54b8f0bf2861edc7ac3b26c2f48f242eb
Author: Karolin Seeger ksee...@samba.org
Date:   Fri Feb 20 09:20:16 2009 +0100

s3/docs: Fix several typos.

This fixes bug #6127.
Thanks to Justin T Pryzby justinpryzby [at] users.sourceforge.net
for the review!

Karolin
(cherry picked from commit 54dbb030e2c6fed0abd0a3a89d08dad9b8a201a1)
(cherry picked from commit a4548e41c6f12e4703249c53ad3dc727d2839931)

---

Summary of changes:
 docs-xml/archives/THANKS   |2 +-
 docs-xml/smbdotconf/browse/enhancedbrowsing.xml|2 +-
 docs-xml/smbdotconf/locking/strictlocking.xml  |2 +-
 docs-xml/smbdotconf/misc/remoteannounce.xml|4 ++--
 docs-xml/smbdotconf/misc/usershareallowguests.xml  |2 +-
 .../smbdotconf/misc/usershareprefixallowlist.xml   |4 ++--
 .../smbdotconf/misc/usersharetemplateshare.xml |2 +-
 docs-xml/smbdotconf/printing/useclientdriver.xml   |2 +-
 .../smbdotconf/protocol/aclcheckpermissions.xml|2 +-
 docs-xml/smbdotconf/protocol/enableasusupport.xml  |2 +-
 docs-xml/smbdotconf/security/clientlanmanauth.xml  |2 +-
 docs-xml/smbdotconf/security/clientsigning.xml |3 +--
 docs-xml/smbdotconf/security/lanmanauth.xml|2 +-
 docs-xml/smbdotconf/security/passwordserver.xml|2 +-
 docs-xml/smbdotconf/security/security.xml  |6 +++---
 docs-xml/smbdotconf/security/serverschannel.xml|2 +-
 docs-xml/smbdotconf/security/serversigning.xml |3 +--
 docs-xml/smbdotconf/security/smbencrypt.xml|3 +--
 docs-xml/smbdotconf/security/updateencrypted.xml   |4 ++--
 19 files changed, 24 insertions(+), 27 deletions(-)


Changeset truncated at 500 lines:

diff --git a/docs-xml/archives/THANKS b/docs-xml/archives/THANKS
index 789042f..37ecc99 100644
--- a/docs-xml/archives/THANKS
+++ b/docs-xml/archives/THANKS
@@ -86,7 +86,7 @@ Tom Haapanen (t...@metrics.com)
 consulting firm located in Waterloo, Ontario, Canada.  We work
 with a variety of environments (such as Windows, Windows NT and
 Unix), tools and application areas, and can provide assistance for
-development work ranging from a few days to to multiple man-year
+development work ranging from a few days to multiple man-year
 projects.  You can find more information at http://www.metrics.com/.
 
 
diff --git a/docs-xml/smbdotconf/browse/enhancedbrowsing.xml 
b/docs-xml/smbdotconf/browse/enhancedbrowsing.xml
index 13f2cd6..7f85616 100644
--- a/docs-xml/smbdotconf/browse/enhancedbrowsing.xml
+++ b/docs-xml/smbdotconf/browse/enhancedbrowsing.xml
@@ -17,7 +17,7 @@
 
paraYou may wish to disable this option if you have a problem with 
empty
workgroups not disappearing from browse lists. Due to the restrictions
-   of the browse protocols these enhancements can cause a empty workgroup
+   of the browse protocols, these enhancements can cause a empty workgroup
to stay around forever which can be annoying./para
 
paraIn general you should leave this option enabled as it makes
diff --git a/docs-xml/smbdotconf/locking/strictlocking.xml 
b/docs-xml/smbdotconf/locking/strictlocking.xml
index e3a0ed7..15ad0ad 100644
--- a/docs-xml/smbdotconf/locking/strictlocking.xml
+++ b/docs-xml/smbdotconf/locking/strictlocking.xml
@@ -12,7 +12,7 @@
para
When strict locking is set to Auto (the default), the server performs 
file lock checks only on non-oplocked files.
As most Windows redirectors perform file locking checks locally on 
oplocked files this is a good trade off for
-   inproved performance.
+   improved performance.
/para
 
para
diff --git a/docs-xml/smbdotconf/misc/remoteannounce.xml 
b/docs-xml/smbdotconf/misc/remoteannounce.xml
index f23968b..a6bf0c5 100644
--- a/docs-xml/smbdotconf/misc/remoteannounce.xml
+++ b/docs-xml/smbdotconf/misc/remoteannounce.xml
@@ -6,7 +6,7 @@
 description
para
This option allows you to setup 
citerefentryrefentrytitlenmbd/refentrytitle
-   manvolnum8/manvolnum/citerefentryto periodically announce itself 
+   manvolnum8/manvolnum/citerefentry to periodically announce itself 
to arbitrary IP addresses with an arbitrary workgroup name.
/para
 
@@ -23,7 +23,7 @@
 /programlisting
the above line would cause command moreinfo=nonenmbd/command to 
announce itself 
to the two given IP addresses using the given workgroup names. If you 
leave out the 
-   workgroup name then the one given in the smbconfoption 
name=workgroup/ parameter 
+

[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha6-1027-g0fd1d4c

2009-02-20 Thread Karolin Seeger 
The branch, master has been updated
   via  0fd1d4c0906158bab55871d53396bdc7ae533220 (commit)
   via  3b0114c0ba676dec2ece96983aff29257399f378 (commit)
  from  54dbb030e2c6fed0abd0a3a89d08dad9b8a201a1 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 0fd1d4c0906158bab55871d53396bdc7ae533220
Author: Karolin Seeger ksee...@samba.org
Date:   Fri Feb 20 13:32:44 2009 +0100

s3/docs: Add man vfs_acl_tdb.

Karolin

commit 3b0114c0ba676dec2ece96983aff29257399f378
Author: Karolin Seeger ksee...@samba.org
Date:   Fri Feb 20 13:32:22 2009 +0100

s3/docs: Add man vfs_acl_xattr.

Karolin

---

Summary of changes:
 docs-xml/manpages-3/vfs_acl_tdb.8.xml   |   66 +++
 docs-xml/manpages-3/vfs_acl_xattr.8.xml |   61 
 2 files changed, 127 insertions(+), 0 deletions(-)
 create mode 100644 docs-xml/manpages-3/vfs_acl_tdb.8.xml
 create mode 100644 docs-xml/manpages-3/vfs_acl_xattr.8.xml


Changeset truncated at 500 lines:

diff --git a/docs-xml/manpages-3/vfs_acl_tdb.8.xml 
b/docs-xml/manpages-3/vfs_acl_tdb.8.xml
new file mode 100644
index 000..086b86f
--- /dev/null
+++ b/docs-xml/manpages-3/vfs_acl_tdb.8.xml
@@ -0,0 +1,66 @@
+?xml version=1.0 encoding=iso-8859-1?
+!DOCTYPE refentry PUBLIC -//Samba-Team//DTD DocBook V4.2-Based Variant 
V1.0//EN http://www.samba.org/samba/DTD/samba-doc;
+refentry id=vfs_acl_tdb.8
+
+refmeta
+   refentrytitlevfs_acl_tdb/refentrytitle
+   manvolnum8/manvolnum
+   refmiscinfo class=sourceSamba/refmiscinfo
+   refmiscinfo class=manualSystem Administration tools/refmiscinfo
+   refmiscinfo class=version3.3/refmiscinfo
+/refmeta
+
+
+refnamediv
+   refnamevfs_acl_tdb/refname
+   refpurposeSave NTFS-ACLs in a tdb file/refpurpose
+/refnamediv
+
+refsynopsisdiv
+   cmdsynopsis
+   commandvfs objects = acl_tdb/command
+   /cmdsynopsis
+/refsynopsisdiv
+
+refsect1
+   titleDESCRIPTION/title
+
+   paraThis VFS module is part of the
+   citerefentryrefentrytitlesamba/refentrytitle
+   manvolnum7/manvolnum/citerefentry suite./para
+
+   paraThe commandvfs_acl_tdb/command VFS module stores
+   NTFS Access Control Lists (ACLs) in a tdb file.
+   This enables the full mapping of Windows ACLs on Samba
+   servers.
+   /para
+
+   para
+   The ACL settings are stored in
+   filename$LOCKDIR/file_ntacls.tdb/filename.
+   /para
+
+   paraPlease note that this module is
+   emphasisexperimental/emphasis!
+   /para
+
+   paraThis module is stackable./para
+/refsect1
+
+refsect1
+   titleOPTIONS/title
+   para
+   There are no options for commandvfs_acl_tdb/command.
+   /para
+/refsect1
+
+refsect1
+   titleAUTHOR/title
+
+   paraThe original Samba software and related utilities
+   were created by Andrew Tridgell. Samba is now developed
+   by the Samba Team as an Open Source project similar
+   to the way the Linux kernel is developed./para
+/refsect1
+
+/refentry
diff --git a/docs-xml/manpages-3/vfs_acl_xattr.8.xml 
b/docs-xml/manpages-3/vfs_acl_xattr.8.xml
new file mode 100644
index 000..b9377b2
--- /dev/null
+++ b/docs-xml/manpages-3/vfs_acl_xattr.8.xml
@@ -0,0 +1,61 @@
+?xml version=1.0 encoding=iso-8859-1?
+!DOCTYPE refentry PUBLIC -//Samba-Team//DTD DocBook V4.2-Based Variant 
V1.0//EN http://www.samba.org/samba/DTD/samba-doc;
+refentry id=vfs_acl_xattr.8
+
+refmeta
+   refentrytitlevfs_acl_xattr/refentrytitle
+   manvolnum8/manvolnum
+   refmiscinfo class=sourceSamba/refmiscinfo
+   refmiscinfo class=manualSystem Administration tools/refmiscinfo
+   refmiscinfo class=version3.3/refmiscinfo
+/refmeta
+
+
+refnamediv
+   refnamevfs_acl_xattr/refname
+   refpurposeSave NTFS-ACLs in Extended Attributes (EAs)/refpurpose
+/refnamediv
+
+refsynopsisdiv
+   cmdsynopsis
+   commandvfs objects = acl_xattr/command
+   /cmdsynopsis
+/refsynopsisdiv
+
+refsect1
+   titleDESCRIPTION/title
+
+   paraThis VFS module is part of the
+   citerefentryrefentrytitlesamba/refentrytitle
+   manvolnum7/manvolnum/citerefentry suite./para
+
+   paraThe commandvfs_acl_xattr/command VFS module stores
+   NTFS Access Control Lists (ACLs) in Extended Attributes (EAs).
+   This enables the full mapping of Windows ACLs on Samba
+   servers.
+   /para
+
+   paraPlease note that this module is
+   emphasisexperimental/emphasis!
+   /para
+
+   paraThis module is stackable./para
+/refsect1
+
+refsect1
+   titleOPTIONS/title
+   para
+   There are no options for commandvfs_acl_xattr/command.
+   /para
+/refsect1
+
+refsect1
+   titleAUTHOR/title
+
+   paraThe original Samba software and related utilities
+

[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-4994-gb6c900d

2009-02-20 Thread Karolin Seeger 
The branch, v3-3-test has been updated
   via  b6c900db66481f10d9acbc7fc6a3cbf6b537b486 (commit)
   via  7e3b9564af4ff2a9fa2de6a7ef2dd1ae16bc3d6a (commit)
  from  a4548e41c6f12e4703249c53ad3dc727d2839931 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test


- Log -
commit b6c900db66481f10d9acbc7fc6a3cbf6b537b486
Author: Karolin Seeger ksee...@samba.org
Date:   Fri Feb 20 13:32:44 2009 +0100

s3/docs: Add man vfs_acl_tdb.

Karolin
(cherry picked from commit 0fd1d4c0906158bab55871d53396bdc7ae533220)

commit 7e3b9564af4ff2a9fa2de6a7ef2dd1ae16bc3d6a
Author: Karolin Seeger ksee...@samba.org
Date:   Fri Feb 20 13:32:22 2009 +0100

s3/docs: Add man vfs_acl_xattr.

Karolin
(cherry picked from commit 3b0114c0ba676dec2ece96983aff29257399f378)

---

Summary of changes:
 .../{vfs_xattr_tdb.8.xml = vfs_acl_tdb.8.xml} |   45 +--
 .../{vfs_xattr_tdb.8.xml = vfs_acl_xattr.8.xml}   |   40 +++--
 2 files changed, 37 insertions(+), 48 deletions(-)
 copy docs-xml/manpages-3/{vfs_xattr_tdb.8.xml = vfs_acl_tdb.8.xml} (58%)
 copy docs-xml/manpages-3/{vfs_xattr_tdb.8.xml = vfs_acl_xattr.8.xml} (58%)


Changeset truncated at 500 lines:

diff --git a/docs-xml/manpages-3/vfs_xattr_tdb.8.xml 
b/docs-xml/manpages-3/vfs_acl_tdb.8.xml
similarity index 58%
copy from docs-xml/manpages-3/vfs_xattr_tdb.8.xml
copy to docs-xml/manpages-3/vfs_acl_tdb.8.xml
index de60f3d..086b86f 100644
--- a/docs-xml/manpages-3/vfs_xattr_tdb.8.xml
+++ b/docs-xml/manpages-3/vfs_acl_tdb.8.xml
@@ -1,9 +1,9 @@
 ?xml version=1.0 encoding=iso-8859-1?
 !DOCTYPE refentry PUBLIC -//Samba-Team//DTD DocBook V4.2-Based Variant 
V1.0//EN http://www.samba.org/samba/DTD/samba-doc;
-refentry id=vfs_xattr_tdb.8
+refentry id=vfs_acl_tdb.8
 
 refmeta
-   refentrytitlevfs_xattr_tdb/refentrytitle
+   refentrytitlevfs_acl_tdb/refentrytitle
manvolnum8/manvolnum
refmiscinfo class=sourceSamba/refmiscinfo
refmiscinfo class=manualSystem Administration tools/refmiscinfo
@@ -12,13 +12,13 @@
 
 
 refnamediv
-   refnamevfs_xattr_tdb/refname
-   refpurposeSave Extended Attributes (EAs) in a tdb file/refpurpose
+   refnamevfs_acl_tdb/refname
+   refpurposeSave NTFS-ACLs in a tdb file/refpurpose
 /refnamediv
 
 refsynopsisdiv
cmdsynopsis
-   commandvfs objects = xattr_tdb/command
+   commandvfs objects = acl_tdb/command
/cmdsynopsis
 /refsynopsisdiv
 
@@ -29,11 +29,19 @@
citerefentryrefentrytitlesamba/refentrytitle
manvolnum7/manvolnum/citerefentry suite./para
 
-   paraThe commandvfs_xattr_tdb/command VFS module stores
-   Extended Attributes (EAs) in a tdb file. 
-   This enables the usage of Extended Attributes on OS and 
-   filesystems which do not support Extended Attributes 
-   by themselves.  
+   paraThe commandvfs_acl_tdb/command VFS module stores
+   NTFS Access Control Lists (ACLs) in a tdb file.
+   This enables the full mapping of Windows ACLs on Samba
+   servers.
+   /para
+
+   para
+   The ACL settings are stored in
+   filename$LOCKDIR/file_ntacls.tdb/filename.
+   /para
+
+   paraPlease note that this module is
+   emphasisexperimental/emphasis!
/para
 
paraThis module is stackable./para
@@ -41,19 +49,9 @@
 
 refsect1
titleOPTIONS/title
-
-   variablelist
-   varlistentry
-   termxattr_tdb:file = PATH/term
-   listitem
-   paraName of the tdb file the EAs are stored in.
-   If this option is not set, the default filename 
-   filenamexattr.tdb/filename is used./para
-   /listitem
-   /varlistentry
-   /variablelist
-
-   
+   para
+   There are no options for commandvfs_acl_tdb/command.
+   /para
 /refsect1
 
 refsect1
@@ -63,7 +61,6 @@
were created by Andrew Tridgell. Samba is now developed
by the Samba Team as an Open Source project similar
to the way the Linux kernel is developed./para
-
 /refsect1
 
 /refentry
diff --git a/docs-xml/manpages-3/vfs_xattr_tdb.8.xml 
b/docs-xml/manpages-3/vfs_acl_xattr.8.xml
similarity index 58%
copy from docs-xml/manpages-3/vfs_xattr_tdb.8.xml
copy to docs-xml/manpages-3/vfs_acl_xattr.8.xml
index de60f3d..b9377b2 100644
--- a/docs-xml/manpages-3/vfs_xattr_tdb.8.xml
+++ b/docs-xml/manpages-3/vfs_acl_xattr.8.xml
@@ -1,9 +1,9 @@
 ?xml version=1.0 encoding=iso-8859-1?
 !DOCTYPE refentry PUBLIC -//Samba-Team//DTD DocBook V4.2-Based Variant 
V1.0//EN http://www.samba.org/samba/DTD/samba-doc;
-refentry id=vfs_xattr_tdb.8
+refentry id=vfs_acl_xattr.8
 
 refmeta
-   refentrytitlevfs_xattr_tdb/refentrytitle
+   refentrytitlevfs_acl_xattr/refentrytitle
manvolnum8/manvolnum

[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha6-1028-g27307be

2009-02-20 Thread Karolin Seeger 
The branch, master has been updated
   via  27307be0f726c899c0e8a0edfdf200650037bb61 (commit)
  from  0fd1d4c0906158bab55871d53396bdc7ae533220 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 27307be0f726c899c0e8a0edfdf200650037bb61
Author: Karolin Seeger ksee...@samba.org
Date:   Fri Feb 20 14:14:54 2009 +0100

s3/docs: Add hint about getfattr in man vfs_acl_xattr.

Karolin

---

Summary of changes:
 docs-xml/manpages-3/vfs_acl_xattr.8.xml |9 +
 1 files changed, 9 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/docs-xml/manpages-3/vfs_acl_xattr.8.xml 
b/docs-xml/manpages-3/vfs_acl_xattr.8.xml
index b9377b2..7387824 100644
--- a/docs-xml/manpages-3/vfs_acl_xattr.8.xml
+++ b/docs-xml/manpages-3/vfs_acl_xattr.8.xml
@@ -35,6 +35,15 @@
servers.
/para
 
+   paraThe ACLs are stored in the Extended Attribute
+   parametersecurity.NTACL/parameter of a file or directory.
+   This Attribute is emphasisnot/emphasis listed by
+   commandgetfattr -d filenamefilename/filename/command.
+   To show the current value, the name of the EA must be specified
+   (e.g. commandgetfattr -n security.NTACL filenamefilename/filename
+   /command).
+   /para
+
paraPlease note that this module is
emphasisexperimental/emphasis!
/para


-- 
Samba Shared Repository

[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-4995-g8c978a6

2009-02-20 Thread Karolin Seeger 
The branch, v3-3-test has been updated
   via  8c978a66168fd22c817e0710d7a70daf7d07b1ab (commit)
  from  b6c900db66481f10d9acbc7fc6a3cbf6b537b486 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test


- Log -
commit 8c978a66168fd22c817e0710d7a70daf7d07b1ab
Author: Karolin Seeger ksee...@samba.org
Date:   Fri Feb 20 14:14:54 2009 +0100

s3/docs: Add hint about getfattr in man vfs_acl_xattr.

Karolin
(cherry picked from commit 27307be0f726c899c0e8a0edfdf200650037bb61)

---

Summary of changes:
 docs-xml/manpages-3/vfs_acl_xattr.8.xml |9 +
 1 files changed, 9 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/docs-xml/manpages-3/vfs_acl_xattr.8.xml 
b/docs-xml/manpages-3/vfs_acl_xattr.8.xml
index b9377b2..7387824 100644
--- a/docs-xml/manpages-3/vfs_acl_xattr.8.xml
+++ b/docs-xml/manpages-3/vfs_acl_xattr.8.xml
@@ -35,6 +35,15 @@
servers.
/para
 
+   paraThe ACLs are stored in the Extended Attribute
+   parametersecurity.NTACL/parameter of a file or directory.
+   This Attribute is emphasisnot/emphasis listed by
+   commandgetfattr -d filenamefilename/filename/command.
+   To show the current value, the name of the EA must be specified
+   (e.g. commandgetfattr -n security.NTACL filenamefilename/filename
+   /command).
+   /para
+
paraPlease note that this module is
emphasisexperimental/emphasis!
/para


-- 
Samba Shared Repository

[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-4997-gf84fd04

2009-02-20 Thread Derrell Lipman 
The branch, v3-3-test has been updated
   via  f84fd046fcff6c3310ef595fb3e4cbe774703d2a (commit)
   via  8457e7bba4ef2ba479340829bb89a3a8772f958b (commit)
  from  8c978a66168fd22c817e0710d7a70daf7d07b1ab (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test


- Log -
commit f84fd046fcff6c3310ef595fb3e4cbe774703d2a
Author: Derrell Lipman derrell.lip...@unwireduniverse.com
Date:   Fri Feb 20 10:03:55 2009 -0500

variable grouping: just my OCD desire to keep similar things together

commit 8457e7bba4ef2ba479340829bb89a3a8772f958b
Author: Bo Yang boy...@novell.com
Date:   Fri Feb 20 12:21:52 2009 +0800

Make libsmbclient work with DFS

Signed-off-by: Derrell Lipman derrell.lip...@unwireduniverse.com

---

Summary of changes:
 source/include/libsmbclient.h  |   12 
 source/libsmb/libsmb_context.c |   39 +++
 source/libsmb/libsmb_dir.c |   27 +--
 source/libsmb/libsmb_file.c|2 +-
 source/libsmb/libsmb_path.c|   15 ++-
 source/libsmb/libsmb_server.c  |   19 ++-
 source/libsmb/libsmb_stat.c|2 +-
 7 files changed, 110 insertions(+), 6 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/include/libsmbclient.h b/source/include/libsmbclient.h
index f8a6c8a..efc471c 100644
--- a/source/include/libsmbclient.h
+++ b/source/include/libsmbclient.h
@@ -2683,6 +2683,18 @@ smbc_set_credentials(char *workgroup,
  smbc_bool use_kerberos,
  char *signing_state);
 
+/*
+ * Wrapper around smbc_set_credentials.
+ * Used to set correct credentials that will
+ * be used to connect to DFS target share 
+ * in libsmbclient
+ */
+
+void
+smbc_set_credentials_with_fallback(SMBCCTX *ctx,
+  char *workgroup,
+  char *user,
+  char *password);
 
 /**
  * @ingroup structure
diff --git a/source/libsmb/libsmb_context.c b/source/libsmb/libsmb_context.c
index 3f8e0c5..489cc01 100644
--- a/source/libsmb/libsmb_context.c
+++ b/source/libsmb/libsmb_context.c
@@ -646,3 +646,42 @@ smbc_set_credentials(char *workgroup,
 set_global_myworkgroup(workgroup);
 cli_cm_set_credentials();
 }
+
+void smbc_set_credentials_with_fallback(SMBCCTX *context,
+   char *workgroup,
+   char *user,
+   char *password)
+{
+   smbc_bool use_kerberos = false;
+   const char *signing_state = off;
+   
+   if (!context ||
+   ! workgroup || ! *workgroup ||
+   ! user || ! *user ||
+   ! password || ! *password) {
+   
+   return;
+   }
+
+   if (smbc_getOptionUseKerberos(context)) {
+   use_kerberos = True;
+   }
+
+   if (lp_client_signing()) {
+   signing_state = on;
+   }
+
+   if (lp_client_signing() == Required) {
+   signing_state = force;
+   }
+
+   smbc_set_credentials(workgroup,
+user,
+password,
+use_kerberos,
+(char *)signing_state);
+
+   if (smbc_getOptionFallbackAfterKerberos(context)) {
+   cli_cm_set_fallback_after_kerberos();
+   }
+}
diff --git a/source/libsmb/libsmb_dir.c b/source/libsmb/libsmb_dir.c
index 761b805..610cfcd 100644
--- a/source/libsmb/libsmb_dir.c
+++ b/source/libsmb/libsmb_dir.c
@@ -1501,6 +1501,8 @@ SMBC_chmod_ctx(SMBCCTX *context,
 char *user = NULL;
 char *password = NULL;
 char *workgroup = NULL;
+   char *targetpath = NULL;
+   struct cli_state *targetcli = NULL;
char *path = NULL;
uint16 mode;
TALLOC_CTX *frame = talloc_stackframe();
@@ -1551,6 +1553,14 @@ SMBC_chmod_ctx(SMBCCTX *context,
TALLOC_FREE(frame);
return -1;  /* errno set by SMBC_server */
}
+   
+   /*d_printf(unlink: resolving %s\n, path);*/
+   if (!cli_resolve_path(frame, , srv-cli, path,
+  targetcli, targetpath)) {
+   d_printf(Could not resolve %s\n, path);
+   TALLOC_FREE(frame);
+   return -1;
+   }
 
mode = 0;
 
@@ -1559,8 +1569,8 @@ SMBC_chmod_ctx(SMBCCTX *context,
if ((newmode  S_IXGRP)  lp_map_system(-1)) mode |= aSYSTEM;
if ((newmode  S_IXOTH)  lp_map_hidden(-1)) mode |= aHIDDEN;
 
-   if (!cli_setatr(srv-cli, path, mode, 0)) {
-   errno = SMBC_errno(context, srv-cli);
+   if (!cli_setatr(targetcli, targetpath, mode, 0)) {
+   errno = SMBC_errno(context, targetcli);
TALLOC_FREE(frame);

[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha6-1030-g45630c4

2009-02-20 Thread Derrell Lipman 
The branch, master has been updated
   via  45630c47fcc1ab96264d816313475af405079db3 (commit)
   via  e256d72f0cd66c374f14a122623668de888aa5e7 (commit)
  from  27307be0f726c899c0e8a0edfdf200650037bb61 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 45630c47fcc1ab96264d816313475af405079db3
Author: Derrell Lipman derrell.lip...@unwireduniverse.com
Date:   Fri Feb 20 09:51:36 2009 -0500

variable grouping: just my OCD desire to keep similar things together

commit e256d72f0cd66c374f14a122623668de888aa5e7
Author: Bo Yang boy...@novell.com
Date:   Fri Feb 20 12:00:46 2009 +0800

Make libsmbclient work with DFS

Signed-off-by: Derrell Lipman derrell.lip...@unwireduniverse.com

---

Summary of changes:
 source3/include/libsmbclient.h  |   12 
 source3/libsmb/libsmb_context.c |   39 +++
 source3/libsmb/libsmb_dir.c |   27 +--
 source3/libsmb/libsmb_file.c|2 +-
 source3/libsmb/libsmb_path.c|   15 ++-
 source3/libsmb/libsmb_server.c  |   19 ++-
 source3/libsmb/libsmb_stat.c|2 +-
 7 files changed, 110 insertions(+), 6 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/include/libsmbclient.h b/source3/include/libsmbclient.h
index f8a6c8a..efc471c 100644
--- a/source3/include/libsmbclient.h
+++ b/source3/include/libsmbclient.h
@@ -2683,6 +2683,18 @@ smbc_set_credentials(char *workgroup,
  smbc_bool use_kerberos,
  char *signing_state);
 
+/*
+ * Wrapper around smbc_set_credentials.
+ * Used to set correct credentials that will
+ * be used to connect to DFS target share 
+ * in libsmbclient
+ */
+
+void
+smbc_set_credentials_with_fallback(SMBCCTX *ctx,
+  char *workgroup,
+  char *user,
+  char *password);
 
 /**
  * @ingroup structure
diff --git a/source3/libsmb/libsmb_context.c b/source3/libsmb/libsmb_context.c
index c1af485..e4df7fc 100644
--- a/source3/libsmb/libsmb_context.c
+++ b/source3/libsmb/libsmb_context.c
@@ -652,3 +652,42 @@ smbc_set_credentials(char *workgroup,
 cli_cm_set_credentials(auth_info);
TALLOC_FREE(auth_info);
 }
+
+void smbc_set_credentials_with_fallback(SMBCCTX *context,
+   char *workgroup,
+   char *user,
+   char *password)
+{
+   smbc_bool use_kerberos = false;
+   const char *signing_state = off;
+   
+   if (! context ||
+   ! workgroup || ! *workgroup ||
+   ! user || ! *user ||
+   ! password || ! *password) {
+
+   return;
+   }
+
+   if (smbc_getOptionUseKerberos(context)) {
+   use_kerberos = True;
+   }
+
+   if (lp_client_signing()) {
+   signing_state = on;
+   }
+
+   if (lp_client_signing() == Required) {
+   signing_state = force;
+   }
+
+   smbc_set_credentials(workgroup,
+user,
+password,
+use_kerberos,
+(char *)signing_state);
+
+   if (smbc_getOptionFallbackAfterKerberos(context)) {
+   cli_cm_set_fallback_after_kerberos();
+   }
+}
diff --git a/source3/libsmb/libsmb_dir.c b/source3/libsmb/libsmb_dir.c
index e9b7b4f..1843fe2 100644
--- a/source3/libsmb/libsmb_dir.c
+++ b/source3/libsmb/libsmb_dir.c
@@ -1500,6 +1500,8 @@ SMBC_chmod_ctx(SMBCCTX *context,
 char *user = NULL;
 char *password = NULL;
 char *workgroup = NULL;
+   char *targetpath = NULL;
+   struct cli_state *targetcli = NULL;
char *path = NULL;
uint16 mode;
TALLOC_CTX *frame = talloc_stackframe();
@@ -1550,6 +1552,14 @@ SMBC_chmod_ctx(SMBCCTX *context,
TALLOC_FREE(frame);
return -1;  /* errno set by SMBC_server */
}
+   
+   /*d_printf(unlink: resolving %s\n, path);*/
+   if (!cli_resolve_path(frame, , srv-cli, path,
+  targetcli, targetpath)) {
+   d_printf(Could not resolve %s\n, path);
+   TALLOC_FREE(frame);
+   return -1;
+   }
 
mode = 0;
 
@@ -1558,8 +1568,8 @@ SMBC_chmod_ctx(SMBCCTX *context,
if ((newmode  S_IXGRP)  lp_map_system(-1)) mode |= aSYSTEM;
if ((newmode  S_IXOTH)  lp_map_hidden(-1)) mode |= aHIDDEN;
 
-   if (!cli_setatr(srv-cli, path, mode, 0)) {
-   errno = SMBC_errno(context, srv-cli);
+   if (!cli_setatr(targetcli, targetpath, mode, 0)) {
+   errno = SMBC_errno(context, targetcli);
TALLOC_FREE(frame);

[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-4998-g7df6339

2009-02-20 Thread Jeremy Allison 
The branch, v3-3-test has been updated
   via  7df63394aff2a15d96112378a9e3b0acd9edc56a (commit)
  from  f84fd046fcff6c3310ef595fb3e4cbe774703d2a (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test


- Log -
commit 7df63394aff2a15d96112378a9e3b0acd9edc56a
Author: Jeremy Allison j...@samba.org
Date:   Fri Feb 20 08:22:57 2009 -0800

Fix bug #6133 - Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL 
filesystem.
As the NFSv4 ACL mapping code doesn't map write directory into the 
DELETE_CHILD
permission bit (which we require before allowing a delete) no one can delete
files without an explicit DELETE_CHILD bit set on the directory. Add this 
mapping.
Jeremy.

---

Summary of changes:
 source/modules/nfs4_acls.c |8 +++-
 1 files changed, 7 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/modules/nfs4_acls.c b/source/modules/nfs4_acls.c
index 556dad6..ba03847 100644
--- a/source/modules/nfs4_acls.c
+++ b/source/modules/nfs4_acls.c
@@ -198,6 +198,7 @@ static int smbacl4_fGetFileOwner(files_struct *fsp, 
SMB_STRUCT_STAT *psbuf)
 static bool smbacl4_nfs42win(TALLOC_CTX *mem_ctx, SMB4ACL_T *acl, /* in */
DOM_SID *psid_owner, /* in */
DOM_SID *psid_group, /* in */
+   bool is_directory, /* in */
SEC_ACE **ppnt_ace_list, /* out */
int *pgood_aces /* out */
 )
@@ -256,6 +257,10 @@ static bool smbacl4_nfs42win(TALLOC_CTX *mem_ctx, 
SMB4ACL_T *acl, /* in */
DEBUG(10, (mapped %d to %s\n, ace-who.id,
   sid_string_dbg(sid)));
 
+   if (is_directory  (ace-aceMask  SMB_ACE4_ADD_FILE)) {
+   ace-aceMask |= SMB_ACE4_DELETE_CHILD;
+   }
+
mask = ace-aceMask;
init_sec_ace(nt_ace_list[good_aces++], sid,
ace-aceType, mask,
@@ -287,7 +292,8 @@ static NTSTATUS smb_get_nt_acl_nfs4_common(const 
SMB_STRUCT_STAT *sbuf,
uid_to_sid(sid_owner, sbuf-st_uid);
gid_to_sid(sid_group, sbuf-st_gid);
 
-   if (smbacl4_nfs42win(mem_ctx, acl, sid_owner, sid_group, 
nt_ace_list, good_aces)==False) {
+   if (smbacl4_nfs42win(mem_ctx, acl, sid_owner, sid_group, 
S_ISDIR(sbuf-st_mode),
+   nt_ace_list, good_aces)==False) {
DEBUG(8,(smbacl4_nfs42win failed\n));
return map_nt_error_from_unix(errno);
}


-- 
Samba Shared Repository

[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha6-1031-ge6a5f11

2009-02-20 Thread Jeremy Allison 
The branch, master has been updated
   via  e6a5f11865a55e9644292ae92e4a4b5ec0662ccd (commit)
  from  45630c47fcc1ab96264d816313475af405079db3 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit e6a5f11865a55e9644292ae92e4a4b5ec0662ccd
Author: Jeremy Allison j...@samba.org
Date:   Fri Feb 20 08:23:52 2009 -0800

Fix bug #6133 - Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL 
filesystem.
As the NFSv4 ACL mapping code doesn't map write directory into the 
DELETE_CHILD
permission bit (which we require before allowing a delete) no one can delete
files without an explicit DELETE_CHILD bit set on the directory. Add this 
mapping.
Jeremy.

---

Summary of changes:
 source3/modules/nfs4_acls.c |8 +++-
 1 files changed, 7 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/modules/nfs4_acls.c b/source3/modules/nfs4_acls.c
index 556dad6..ba03847 100644
--- a/source3/modules/nfs4_acls.c
+++ b/source3/modules/nfs4_acls.c
@@ -198,6 +198,7 @@ static int smbacl4_fGetFileOwner(files_struct *fsp, 
SMB_STRUCT_STAT *psbuf)
 static bool smbacl4_nfs42win(TALLOC_CTX *mem_ctx, SMB4ACL_T *acl, /* in */
DOM_SID *psid_owner, /* in */
DOM_SID *psid_group, /* in */
+   bool is_directory, /* in */
SEC_ACE **ppnt_ace_list, /* out */
int *pgood_aces /* out */
 )
@@ -256,6 +257,10 @@ static bool smbacl4_nfs42win(TALLOC_CTX *mem_ctx, 
SMB4ACL_T *acl, /* in */
DEBUG(10, (mapped %d to %s\n, ace-who.id,
   sid_string_dbg(sid)));
 
+   if (is_directory  (ace-aceMask  SMB_ACE4_ADD_FILE)) {
+   ace-aceMask |= SMB_ACE4_DELETE_CHILD;
+   }
+
mask = ace-aceMask;
init_sec_ace(nt_ace_list[good_aces++], sid,
ace-aceType, mask,
@@ -287,7 +292,8 @@ static NTSTATUS smb_get_nt_acl_nfs4_common(const 
SMB_STRUCT_STAT *sbuf,
uid_to_sid(sid_owner, sbuf-st_uid);
gid_to_sid(sid_group, sbuf-st_gid);
 
-   if (smbacl4_nfs42win(mem_ctx, acl, sid_owner, sid_group, 
nt_ace_list, good_aces)==False) {
+   if (smbacl4_nfs42win(mem_ctx, acl, sid_owner, sid_group, 
S_ISDIR(sbuf-st_mode),
+   nt_ace_list, good_aces)==False) {
DEBUG(8,(smbacl4_nfs42win failed\n));
return map_nt_error_from_unix(errno);
}


-- 
Samba Shared Repository

[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-3481-g44e0e83

2009-02-20 Thread Jeremy Allison 
The branch, v3-2-test has been updated
   via  44e0e830c4c413054bdb30a62629993c4391c492 (commit)
  from  0d68e3d54b8f0bf2861edc7ac3b26c2f48f242eb (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test


- Log -
commit 44e0e830c4c413054bdb30a62629993c4391c492
Author: Jeremy Allison j...@samba.org
Date:   Fri Feb 20 08:25:29 2009 -0800

Fix bug #6133 - Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL 
filesystem.
As the NFSv4 ACL mapping code doesn't map write directory into the 
DELETE_CHILD
permission bit (which we require before allowing a delete) no one can delete
files without an explicit DELETE_CHILD bit set on the directory. Add this 
mapping.
Jeremy.

---

Summary of changes:
 source/modules/nfs4_acls.c |7 ++-
 1 files changed, 6 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/modules/nfs4_acls.c b/source/modules/nfs4_acls.c
index bf25c45..5c7700e 100644
--- a/source/modules/nfs4_acls.c
+++ b/source/modules/nfs4_acls.c
@@ -203,6 +203,7 @@ static int smbacl4_fGetFileOwner(files_struct *fsp, 
SMB_STRUCT_STAT *psbuf)
 static bool smbacl4_nfs42win(TALLOC_CTX *mem_ctx, SMB4ACL_T *acl, /* in */
DOM_SID *psid_owner, /* in */
DOM_SID *psid_group, /* in */
+   bool is_directory, /* in */
SEC_ACE **ppnt_ace_list, /* out */
int *pgood_aces /* out */
 )
@@ -261,6 +262,9 @@ static bool smbacl4_nfs42win(TALLOC_CTX *mem_ctx, SMB4ACL_T 
*acl, /* in */
DEBUG(10, (mapped %d to %s\n, ace-who.id,
   sid_string_dbg(sid)));
 
+   if (is_directory  (ace-aceMask  SMB_ACE4_ADD_FILE)) {
+   ace-aceMask |= SMB_ACE4_DELETE_CHILD;
+   }
init_sec_access(mask, ace-aceMask);
init_sec_ace(nt_ace_list[good_aces++], sid,
ace-aceType, mask,
@@ -292,7 +296,8 @@ static NTSTATUS smb_get_nt_acl_nfs4_common(const 
SMB_STRUCT_STAT *sbuf,
uid_to_sid(sid_owner, sbuf-st_uid);
gid_to_sid(sid_group, sbuf-st_gid);
 
-   if (smbacl4_nfs42win(mem_ctx, acl, sid_owner, sid_group, 
nt_ace_list, good_aces)==False) {
+   if (smbacl4_nfs42win(mem_ctx, acl, sid_owner, sid_group, 
S_ISDIR(sbuf-st_mode),
+   nt_ace_list, good_aces)==False) {
DEBUG(8,(smbacl4_nfs42win failed\n));
return map_nt_error_from_unix(errno);
}


-- 
Samba Shared Repository

[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha6-1035-g5bd7f9c

2009-02-20 Thread Steven Danneman 
The branch, master has been updated
   via  5bd7f9c61bb2fea1867ac6657c9b30799ba49d8f (commit)
   via  9a90cbea83548bffb224151a24005cb916f238f5 (commit)
   via  b329ea1cf35cfe151ac026eefc8ff82b2dfd711c (commit)
   via  1a0aed36c0fc3815c832be1086a3a66256426414 (commit)
  from  e6a5f11865a55e9644292ae92e4a4b5ec0662ccd (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 5bd7f9c61bb2fea1867ac6657c9b30799ba49d8f
Author: Steven Danneman steven.danne...@isilon.com
Date:   Fri Feb 20 13:25:17 2009 -0800

s3: OneFS implementation of change notify

The OneFS Samba implementation of change notify is modeled after the
usage of Linux's inotify kernel subsystem.  A single call is made
into the onefs.so VFS module to initialize kernel tracking of certain
file change events.  When these events occur a kernel notification is
sent to smbd and the notification event is translated and given to the
general Samba Change Notify layer through a callback function.

The most difficult aspect is converting an SMB CompletionFilter to
a matching ifs_event mask, and then back to an appropriate change
notify action.  Currently, not all possible cases are handled by the
this module, but the most prevalent ones, which are tested by
smbtorture, are implemented.

commit 9a90cbea83548bffb224151a24005cb916f238f5
Author: Steven Danneman steven.danne...@isilon.com
Date:   Tue Feb 17 16:20:18 2009 -0800

s3: Make change notify immediately return a catch-all packet on underlying 
error

* This allows a problem in the underlying CN backend to be bubbled up
  to the general CN layer so a catch-all reply can be returned
* We now also return a catch-all response immediately if the server-side
  event queue becomes too big

commit b329ea1cf35cfe151ac026eefc8ff82b2dfd711c
Author: Steven Danneman steven.danne...@isilon.com
Date:   Fri Feb 20 13:23:53 2009 -0800

s3: Modifications to generic notify structures to allow implementation of 
OneFS notify.

The OneFS kernel based change notify system takes an fd of the directory
to watch in it's initialization syscall.  Since we already have this
directory open, this commit plumbs that fd down to the VFS layer via the
notify_entry struct.

We also need to know if the watch is taken out on a snapshot directory.
The full file_id struct is also passed down to make this determination.
The file_id marshalling wrappers are hand written here, but should
eventually be auto-generated by moving the struct file_id into the idl.

commit 1a0aed36c0fc3815c832be1086a3a66256426414
Author: Steven Danneman steven.danne...@isilon.com
Date:   Thu Feb 19 17:06:27 2009 -0800

Added torture tests to RAW-NOTIFY

* This adds a test to check the change notify behavior of the SMB server
  when more events have been generated than can be returned in a single
  change notify response.

* Second test makes sure the server doesn't return notification events
  for changes to the watched directory itself

---

Summary of changes:
 source3/Makefile.in |5 +-
 source3/include/proto.h |3 +
 source3/librpc/gen_ndr/ndr_notify.c |8 +
 source3/librpc/gen_ndr/notify.h |2 +
 source3/librpc/idl/notify.idl   |2 +
 source3/librpc/ndr/util.c   |   39 ++
 source3/modules/onefs.h |9 +
 source3/modules/onefs_notify.c  |  680 +++
 source3/modules/vfs_onefs.c |2 +
 source3/smbd/notify.c   |   17 +-
 source4/torture/raw/notify.c|  152 -
 11 files changed, 914 insertions(+), 5 deletions(-)
 create mode 100644 source3/modules/onefs_notify.c


Changeset truncated at 500 lines:

diff --git a/source3/Makefile.in b/source3/Makefile.in
index 6ff90fc..2df995f 100644
--- a/source3/Makefile.in
+++ b/source3/Makefile.in
@@ -621,7 +621,8 @@ PROFILES_OBJ = utils/profiles.o \
$(LIB_OBJ) $(LIB_DUMMY_OBJ) \
$(POPT_LIB_OBJ)
 
-OPLOCK_OBJ = smbd/oplock.o smbd/oplock_irix.o smbd/oplock_linux.o 
smbd/oplock_onefs.o
+OPLOCK_OBJ = smbd/oplock.o smbd/oplock_irix.o smbd/oplock_linux.o \
+smbd/oplock_onefs.o
 
 NOTIFY_OBJ = smbd/notify.o smbd/notify_inotify.o smbd/notify_internal.o
 
@@ -666,7 +667,7 @@ VFS_ACL_TDB_OBJ = modules/vfs_acl_tdb.o
 VFS_SMB_TRAFFIC_ANALYZER_OBJ = modules/vfs_smb_traffic_analyzer.o
 VFS_ONEFS_OBJ = modules/vfs_onefs.o modules/onefs_acl.o modules/onefs_system.o 
\
modules/onefs_open.o modules/onefs_streams.o 
modules/onefs_dir.c \
-   modules/onefs_cbrl.o
+   modules/onefs_cbrl.o modules/onefs_notify.o
 VFS_ONEFS_SHADOW_COPY_OBJ = modules/vfs_onefs_shadow_copy.o 
modules/onefs_shadow_copy.o

Build status as of Sat Feb 21 00:00:02 2009

2009-02-20 Thread build 
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2009-02-20 
00:00:18.0 +
+++ /home/build/master/cache/broken_results.txt 2009-02-21 00:00:39.0 
+
@@ -1,23 +1,23 @@
-Build status as of Fri Feb 20 00:00:02 2009
+Build status as of Sat Feb 21 00:00:02 2009
 
 Build counts:
 Tree Total  Broken Panic 
 build_farm   0  0  0 
-ccache   28 5  0 
+ccache   29 5  0 
 ctdb 0  0  0 
 distcc   0  0  0 
-ldb  28 28 0 
+ldb  29 28 0 
 libreplace   29 11 0 
 lorikeet-heimdal 26 14 0 
 pidl 20 3  0 
 ppp  12 0  0 
-rsync29 8  0 
+rsync29 9  0 
 samba-docs   0  0  0 
 samba-gtk5  5  0 
-samba_3_X_devel 28 26 2 
+samba_3_X_devel 28 27 2 
 samba_3_X_test 27 25 3 
 samba_4_0_test 29 26 1 
-smb-build28 6  0 
+smb-build27 6  0 
 talloc   29 28 0 
 tdb  27 9  0

[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha6-1037-g193be43

2009-02-20 Thread Steven Danneman 
The branch, master has been updated
   via  193be432a224918bf0fbecfb6705146476c15c07 (commit)
   via  116ce19b10a1fd60776764974ad50776ff7c4714 (commit)
  from  5bd7f9c61bb2fea1867ac6657c9b30799ba49d8f (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 193be432a224918bf0fbecfb6705146476c15c07
Author: Steven Danneman steven.danne...@isilon.com
Date:   Fri Feb 20 16:24:08 2009 -0800

s3: Refactor of madvise() usage in c441f58d

* move to reinit_after_fork() to protect all Samba daemons
* only protect parent processes

commit 116ce19b10a1fd60776764974ad50776ff7c4714
Author: Steven Danneman steven.danne...@isilon.com
Date:   Fri Feb 20 15:10:21 2009 -0800

Moved become_daemon() and close_low_fds() to shared util lib

---

Summary of changes:
 lib/util/become_daemon.c |   22 +++---
 lib/util/util.h  |9 --
 source3/Makefile.in  |3 +-
 source3/include/proto.h  |2 -
 source3/lib/util.c   |   74 -
 source3/smbd/server.c|7 
 source4/smbd/server.c|2 +-
 7 files changed, 27 insertions(+), 92 deletions(-)


Changeset truncated at 500 lines:

diff --git a/lib/util/become_daemon.c b/lib/util/become_daemon.c
index 034114e..5a97b65 100644
--- a/lib/util/become_daemon.c
+++ b/lib/util/become_daemon.c
@@ -28,14 +28,15 @@
 /***
  Close the low 3 fd's and open dev/null in their place.
 /
-static void close_low_fds(bool stderr_too)
+
+_PUBLIC_ void close_low_fds(bool stderr_too)
 {
 #ifndef VALGRIND
int fd;
int i;
 
close(0);
-   close(1); 
+   close(1);
 
if (stderr_too)
close(2);
@@ -61,11 +62,11 @@ static void close_low_fds(bool stderr_too)
 #endif
 }
 
-/**
+/
  Become a daemon, discarding the controlling terminal.
-**/
+/
 
-_PUBLIC_ void become_daemon(bool Fork)
+_PUBLIC_ void become_daemon(bool Fork, bool no_process_group)
 {
if (Fork) {
if (fork()) {
@@ -73,14 +74,14 @@ _PUBLIC_ void become_daemon(bool Fork)
}
}
 
-  /* detach from the terminal */
+   /* detach from the terminal */
 #ifdef HAVE_SETSID
-   setsid();
+   if (!no_process_group) setsid();
 #elif defined(TIOCNOTTY)
-   {
-   int i = open(/dev/tty, O_RDWR, 0);
+   if (!no_process_group) {
+   int i = sys_open(/dev/tty, O_RDWR, 0);
if (i != -1) {
-   ioctl(i, (int) TIOCNOTTY, (char *)0);  
+   ioctl(i, (int) TIOCNOTTY, (char *)0);
close(i);
}
}
@@ -90,4 +91,3 @@ _PUBLIC_ void become_daemon(bool Fork)
close_low_fds(false);  /* Don't close stderr, let the debug system
  attach it to the logfile */
 }
-
diff --git a/lib/util/util.h b/lib/util/util.h
index 7873f0e..4d4df21 100644
--- a/lib/util/util.h
+++ b/lib/util/util.h
@@ -724,12 +724,15 @@ _PUBLIC_ int idr_remove(struct idr_context *idp, int id);
 
 /* The following definitions come from lib/util/become_daemon.c  */
 
-#if _SAMBA_BUILD_ == 4
+/**
+ Close the low 3 fd's and open dev/null in their place
+**/
+_PUBLIC_ void close_low_fds(bool stderr_too);
+
 /**
  Become a daemon, discarding the controlling terminal.
 **/
-_PUBLIC_ void become_daemon(bool fork);
-#endif
+_PUBLIC_ void become_daemon(bool fork, bool no_process_group);
 
 /**
  * Load a ini-style file.
diff --git a/source3/Makefile.in b/source3/Makefile.in
index 2df995f..98ed810 100644
--- a/source3/Makefile.in
+++ b/source3/Makefile.in
@@ -338,7 +338,8 @@ UTIL_OBJ = ../lib/util/rbtree.o ../lib/util/signal.o 
../lib/util/time.o \
   ../lib/util/util_file.o ../lib/util/data_blob.o \
   ../lib/util/util.o ../lib/util/fsusage.o \
   ../lib/util/params.o ../lib/util/talloc_stack.o \
-  ../lib/util/genrand.o ../lib/util/util_net.o
+  ../lib/util/genrand.o ../lib/util/util_net.o \
+  ../lib/util/become_daemon.o
 
 CRYPTO_OBJ = ../lib/crypto/crc32.o ../lib/crypto/md5.o \
 ../lib/crypto/hmacmd5.o ../lib/crypto/arcfour.o \
diff --git a/source3/include/proto.h b/source3/include/proto.h
index 1ac2ac2..587bb29 100644
--- a/source3/include/proto.h
+++ b/source3/include/proto.h
@@ -1139,11 +1139,9 @@ int set_message_bcc(char *buf,int num_bytes);
 ssize_t message_push_blob(uint8 **outbuf, DATA_BLOB blob);
 char *unix_clean_name(TALLOC_CTX *ctx, const char *s);
 char

[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha6-1038-gd9a842b

2009-02-20 Thread Steven Danneman 
The branch, master has been updated
   via  d9a842b26f306a6328e0fb4f226ed8292a8c221a (commit)
  from  193be432a224918bf0fbecfb6705146476c15c07 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit d9a842b26f306a6328e0fb4f226ed8292a8c221a
Author: todd stecher todd.stec...@gmail.com
Date:   Thu Feb 19 09:33:30 2009 -0800

S3: Detect max_open_files from system
- Attempt to use syscalls to determine max-open-files value.
- Add in periodic logging when max file limit reached

---

Summary of changes:
 source3/configure.in |   19 +++
 source3/param/loadparm.c |   38 +-
 source3/smbd/open.c  |   12 
 3 files changed, 68 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/configure.in b/source3/configure.in
index b163a9d..624862f 100644
--- a/source3/configure.in
+++ b/source3/configure.in
@@ -837,6 +837,25 @@ if test x$samba_cv_msghdr_msg_control = xyes; then
 fi
 
 #
+# check for sysctlbyname
+AC_CACHE_CHECK([for sysctlbyname],samba_cv_sysctlbyname, [
+AC_TRY_COMPILE([
+#include sys/types.h
+#include sys/sysctl.h
+#include stdlib.h
+#include stddef.h],
+[
+   int sysctl_max;
+   size_t size = sizeof(sysctl_max);
+   sysctlbyname(test, sysctl_max, size, NULL, 0);
+],
+   samba_cv_sysctlbyname=yes,samba_cv_sysctlbyname=no)])
+if test x$samba_cv_msghdr_msg_control = xyes; then
+AC_DEFINE(HAVE_SYSCTLBYNAME,1,
+[If we support sysctlbyname api])
+fi
+
+#
 # check for fd passing struct via msg_acctrights
 AC_CACHE_CHECK([for fd passing via msg_acctrights],
samba_cv_msghdr_msg_acctrights, [
diff --git a/source3/param/loadparm.c b/source3/param/loadparm.c
index 37af703..cb56825 100644
--- a/source3/param/loadparm.c
+++ b/source3/param/loadparm.c
@@ -4657,6 +4657,42 @@ static void init_printer_values(struct service *pService)
 
}
 }
+/**
+ *  Function to return the default value for the maximum number of open
+ *  file descriptors permitted.  This function tries to consult the
+ *  kernel-level (sysctl) and ulimit (getrlimit()) values and goes
+ *  the smaller of those.
+ */
+static int max_open_files(void)
+{
+   int sysctl_max;
+   struct rlimit rl;
+   bool sysctl_worked = false, rlimit_worked = false;
+
+#ifdef HAVE_SYSCTLBYNAME
+   size_t size = sizeof(sysctl_max);
+   if (sysctlbyname(kern.maxfilesperproc, sysctl_max, size, NULL,0)==0)
+   sysctl_worked = true;
+#endif
+
+   if (getrlimit(RLIMIT_NOFILE, rl) == 0)
+   rlimit_worked = true;
+
+   if (sysctl_worked) {
+   if ((!rlimit_worked) ||
+   (rl.rlim_cur == RLIM_INFINITY) ||
+   (rl.rlim_cur  sysctl_max))
+   return sysctl_max;
+   else
+   return rl.rlim_cur;
+   } else {
+   if ((!rlimit_worked) ||
+   (rl.rlim_cur == RLIM_INFINITY))
+   return MAX_OPEN_FILES;
+   else
+   return rl.rlim_cur;
+   }
+}
 
 /**
  * Common part of freeing allocated data for one parameter.
@@ -4880,7 +4916,7 @@ static void init_globals(bool first_time_only)
Globals.getwd_cache = true;
Globals.bLargeReadwrite = True;
Globals.max_log_size = 5000;
-   Globals.max_open_files = MAX_OPEN_FILES;
+   Globals.max_open_files = max_open_files();
Globals.open_files_db_hash_size = SMB_OPEN_DATABASE_TDB_HASH_SIZE;
Globals.maxprotocol = PROTOCOL_NT1;
Globals.minprotocol = PROTOCOL_CORE;
diff --git a/source3/smbd/open.c b/source3/smbd/open.c
index 239d4ff..ac7c35c 100644
--- a/source3/smbd/open.c
+++ b/source3/smbd/open.c
@@ -132,6 +132,18 @@ static NTSTATUS fd_open(struct connection_struct *conn,
fsp-fh-fd = SMB_VFS_OPEN(conn,fname,fsp,flags,mode);
if (fsp-fh-fd == -1) {
status = map_nt_error_from_unix(errno);
+   if (errno == EMFILE) {
+   static time_t last_warned = 0L;
+
+   if (time((time_t *) NULL)  last_warned) {
+   DEBUG(0,(Too many open files, unable 
+   to open more!  smbd's max 
+   open files = %d\n,
+   lp_max_open_files()));
+   last_warned = time((time_t *) NULL);
+   }
+   }
+
}
 
DEBUG(10,(fd_open: name %s, flags = 0%o mode = 0%o, fd = %d. %s\n,


-- 
Samba Shared Repository

[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-4999-g07c7085

2009-02-20 Thread Jeremy Allison 
The branch, v3-3-test has been updated
   via  07c7085f25718915cda07e38a87a008a72abbf4f (commit)
  from  7df63394aff2a15d96112378a9e3b0acd9edc56a (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test


- Log -
commit 07c7085f25718915cda07e38a87a008a72abbf4f
Author: Jeremy Allison j...@samba.org
Date:   Fri Feb 20 16:40:00 2009 -0800

Change smbc_set_credentials_with_fallback() (unreleased) to use
const approptiately.
Jeremy.

---

Summary of changes:
 source/include/libsmbclient.h  |6 +++---
 source/libsmb/libsmb_context.c |   21 ++---
 2 files changed, 17 insertions(+), 10 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/include/libsmbclient.h b/source/include/libsmbclient.h
index efc471c..8c642b1 100644
--- a/source/include/libsmbclient.h
+++ b/source/include/libsmbclient.h
@@ -2692,9 +2692,9 @@ smbc_set_credentials(char *workgroup,
 
 void
 smbc_set_credentials_with_fallback(SMBCCTX *ctx,
-  char *workgroup,
-  char *user,
-  char *password);
+  const char *workgroup,
+  const char *user,
+  const char *password);
 
 /**
  * @ingroup structure
diff --git a/source/libsmb/libsmb_context.c b/source/libsmb/libsmb_context.c
index 489cc01..90f18ac 100644
--- a/source/libsmb/libsmb_context.c
+++ b/source/libsmb/libsmb_context.c
@@ -648,9 +648,9 @@ smbc_set_credentials(char *workgroup,
 }
 
 void smbc_set_credentials_with_fallback(SMBCCTX *context,
-   char *workgroup,
-   char *user,
-   char *password)
+   const char *workgroup,
+   const char *user,
+   const char *password)
 {
smbc_bool use_kerberos = false;
const char *signing_state = off;
@@ -675,11 +675,18 @@ void smbc_set_credentials_with_fallback(SMBCCTX *context,
signing_state = force;
}
 
-   smbc_set_credentials(workgroup,
-user,
-password,
+   /* Using CONST_DISCARD here is ugly, but
+* we know that smbc_set_credentials() doesn't
+* actually modify the strings, and should have
+* been const from the start. We're constrained
+* by the ABI here.
+*/
+
+   smbc_set_credentials(CONST_DISCARD(char *,workgroup),
+CONST_DISCARD(char *,user),
+CONST_DISCARD(char *,password),
 use_kerberos,
-(char *)signing_state);
+CONST_DISCARD(char *,signing_state));
 
if (smbc_getOptionFallbackAfterKerberos(context)) {
cli_cm_set_fallback_after_kerberos();


-- 
Samba Shared Repository

[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha6-1039-g87a4c09

2009-02-20 Thread Jeremy Allison 
The branch, master has been updated
   via  87a4c09b9bd37a967abcf874888a5d5161e7434f (commit)
  from  d9a842b26f306a6328e0fb4f226ed8292a8c221a (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 87a4c09b9bd37a967abcf874888a5d5161e7434f
Author: Jeremy Allison j...@samba.org
Date:   Fri Feb 20 16:41:41 2009 -0800

Change smbc_set_credentials_with_fallback() (unreleased) to use
const approptiately.
Jeremy.

---

Summary of changes:
 source3/include/libsmbclient.h  |6 +++---
 source3/libsmb/libsmb_context.c |   21 ++---
 2 files changed, 17 insertions(+), 10 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/include/libsmbclient.h b/source3/include/libsmbclient.h
index efc471c..8c642b1 100644
--- a/source3/include/libsmbclient.h
+++ b/source3/include/libsmbclient.h
@@ -2692,9 +2692,9 @@ smbc_set_credentials(char *workgroup,
 
 void
 smbc_set_credentials_with_fallback(SMBCCTX *ctx,
-  char *workgroup,
-  char *user,
-  char *password);
+  const char *workgroup,
+  const char *user,
+  const char *password);
 
 /**
  * @ingroup structure
diff --git a/source3/libsmb/libsmb_context.c b/source3/libsmb/libsmb_context.c
index e4df7fc..c7c9903 100644
--- a/source3/libsmb/libsmb_context.c
+++ b/source3/libsmb/libsmb_context.c
@@ -654,9 +654,9 @@ smbc_set_credentials(char *workgroup,
 }
 
 void smbc_set_credentials_with_fallback(SMBCCTX *context,
-   char *workgroup,
-   char *user,
-   char *password)
+   const char *workgroup,
+   const char *user,
+   const char *password)
 {
smbc_bool use_kerberos = false;
const char *signing_state = off;
@@ -681,11 +681,18 @@ void smbc_set_credentials_with_fallback(SMBCCTX *context,
signing_state = force;
}
 
-   smbc_set_credentials(workgroup,
-user,
-password,
+   /* Using CONST_DISCARD here is ugly, but
+* we know that smbc_set_credentials() doesn't
+* actually modify the strings, and should have
+* been const from the start. We're constrained
+* by the ABI here.
+*/
+
+   smbc_set_credentials(CONST_DISCARD(char *,workgroup),
+CONST_DISCARD(char *,user),
+CONST_DISCARD(char *,password),
 use_kerberos,
-(char *)signing_state);
+CONST_DISCARD(char *,signing_state));
 
if (smbc_getOptionFallbackAfterKerberos(context)) {
cli_cm_set_fallback_after_kerberos();


-- 
Samba Shared Repository

[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha6-1042-g2539d67

2009-02-20 Thread Tim Prouty 
The branch, master has been updated
   via  2539d678f54d09577d5c86fae1d6d43175bfca96 (commit)
   via  a04bb5f9a267c6945db6ff25e16d15f7f813aaaf (commit)
   via  5300dc62888dfd36479353f4a6ea5cb52728c754 (commit)
  from  87a4c09b9bd37a967abcf874888a5d5161e7434f (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 2539d678f54d09577d5c86fae1d6d43175bfca96
Author: Zack Kirsch zack.kir...@isilon.com
Date:   Fri Feb 20 15:29:29 2009 -0800

s4 torture: Add comment to clarify test

commit a04bb5f9a267c6945db6ff25e16d15f7f813aaaf
Author: Zack Kirsch zack.kir...@isilon.com
Date:   Fri Feb 20 15:22:15 2009 -0800

s3 BRL: Add more clarifying comments and add implied logic to make 
conditional more clear

commit 5300dc62888dfd36479353f4a6ea5cb52728c754
Author: Zack Kirsch zack.kir...@isilon.com
Date:   Fri Feb 20 15:20:39 2009 -0800

s3 OneFS: Add debugging for createfile_flags

---

Summary of changes:
 source3/locking/brlock.c |8 ++--
 source3/modules/onefs_system.c   |   27 +++
 source4/torture/raw/samba3misc.c |3 +++
 3 files changed, 24 insertions(+), 14 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/locking/brlock.c b/source3/locking/brlock.c
index d12c4af..aa522ac 100644
--- a/source3/locking/brlock.c
+++ b/source3/locking/brlock.c
@@ -74,6 +74,7 @@ bool brl_same_context(const struct lock_context *ctx1,
 static bool brl_overlap(const struct lock_struct *lck1,
 const struct lock_struct *lck2)
 {
+   /* XXX Remove for Win7 compatibility. */
/* this extra check is not redundent - it copes with locks
   that go beyond the end of 64 bit file space */
if (lck1-size != 0 
@@ -105,8 +106,11 @@ static bool brl_conflict(const struct lock_struct *lck1,
return False;
}
 
-   if (brl_same_context(lck1-context, lck2-context) 
-   lck2-lock_type == READ_LOCK  lck1-fnum == lck2-fnum) {
+   /* A READ lock can stack on top of a WRITE lock if they have the same
+* context  fnum. */
+   if (lck1-lock_type == WRITE_LOCK  lck2-lock_type == READ_LOCK 
+   brl_same_context(lck1-context, lck2-context) 
+   lck1-fnum == lck2-fnum) {
return False;
}
 
diff --git a/source3/modules/onefs_system.c b/source3/modules/onefs_system.c
index 6f93d9f..3a86b4b 100644
--- a/source3/modules/onefs_system.c
+++ b/source3/modules/onefs_system.c
@@ -123,17 +123,29 @@ int onefs_sys_create_file(connection_struct *conn,
/* Convert samba dos flags to UF_DOS_* attributes. */
onefs_dos_attributes = dos_attributes_to_stat_dos_flags(dos_flags);
 
+   /**
+* Deal with kernel creating Default ACLs. (Isilon bug 47447.)
+*
+* 1) nt acl support = no, default_acl = no
+* 2) inherit permissions = yes, default_acl = no
+*/
+   if (lp_nt_acl_support(SNUM(conn))  !lp_inherit_perms(SNUM(conn)))
+   cf_flags = cf_flags_or(cf_flags, CF_FLAGS_DEFAULT_ACL);
+
DEBUG(10,(onefs_sys_create_file: base_fd = %d, 
- open_access_mask = 0x%x, flags = 0x%x, mode = 0x%x, 
+ open_access_mask = 0x%x, flags = 0x%x, mode = 0%o, 
  desired_oplock = %s, id = 0x%x, secinfo = 0x%x, sd = %p, 
- dos_attributes = 0x%x, path = %s\n, base_fd,
+ dos_attributes = 0x%x, path = %s, 
+ default_acl=%s\n, base_fd,
  (unsigned int)open_access_mask,
  (unsigned int)flags,
  (unsigned int)mode,
  onefs_oplock_str(onefs_oplock),
  (unsigned int)id,
  (unsigned int)secinfo, sd,
- (unsigned int)onefs_dos_attributes, path));
+ (unsigned int)onefs_dos_attributes, path,
+ cf_flags_and_bool(cf_flags, CF_FLAGS_DEFAULT_ACL) ?
+ true : false));
 
/* Initialize smlock struct for files/dirs but not internal opens */
if (!(oplock_request  INTERNAL_OPEN_ONLY)) {
@@ -144,15 +156,6 @@ int onefs_sys_create_file(connection_struct *conn,
 
smlock_dump(10, psml);
 
-   /**
-* Deal with kernel creating Default ACLs. (Isilon bug 47447.)
-*
-* 1) nt acl support = no, default_acl = no
-* 2) inherit permissions = yes, default_acl = no
-*/
-   if (lp_nt_acl_support(SNUM(conn))  !lp_inherit_perms(SNUM(conn)))
-   cf_flags = cf_flags_or(cf_flags, CF_FLAGS_DEFAULT_ACL);
-
ret_fd = ifs_createfile(base_fd, path,
(enum ifs_ace_rights)open_access_mask, flags  ~O_ACCMODE, mode,
onefs_oplock, id, psml, secinfo, pifs_sd, onefs_dos_attributes,
diff --git a/source4/torture/raw/samba3misc.c

Re: [SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-4999-g07c7085

2009-02-20 Thread Derrell Lipman 
On Fri, Feb 20, 2009 at 7:41 PM, Jeremy Allison j...@samba.org wrote:


 -   smbc_set_credentials(workgroup,
 -user,
 -password,
 +   /* Using CONST_DISCARD here is ugly, but
 +* we know that smbc_set_credentials() doesn't
 +* actually modify the strings, and should have
 +* been const from the start. We're constrained
 +* by the ABI here.
 +*/
 +
 +   smbc_set_credentials(CONST_DISCARD(char *,workgroup),
 +CONST_DISCARD(char *,user),
 +CONST_DISCARD(char *,password),
 use_kerberos,
 -(char *)signing_state);
 +CONST_DISCARD(char *,signing_state));


Jeremy, this is fugly. Would you please either convince me that changing
smbc_set_credentials to have const parameters would, in fact, change the ABI
(it is my contention that it does not), or let's remove this crap and add
const to the smbc_set_credentials parameters.

Thanks.

Derrell

[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha6-1045-gfc02c3b0

2009-02-20 Thread Steven Danneman 
The branch, master has been updated
   via  fc02c3b0890a9549989bb0aba16588026c6d6b43 (commit)
   via  c383022f89a34b83039502cc58178498cc06370e (commit)
   via  e311dcff2272968959b4268c2e7aad351443b191 (commit)
  from  2539d678f54d09577d5c86fae1d6d43175bfca96 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit fc02c3b0890a9549989bb0aba16588026c6d6b43
Author: Dan Sledz dan.sl...@isilon.com
Date:   Fri Feb 13 12:28:57 2009 -0800

Introduce a new passdb backend: pdb_onefs_sam

Implements a custom backend for onefs that exclusively uses the wbclient
interface for all passdb calls.
It lacks some features of a standard passdb.
In particular it's a read only interface and doesn't implement privileges.

commit c383022f89a34b83039502cc58178498cc06370e
Author: Dan Sledz dan.sl...@isilon.com
Date:   Fri Feb 13 12:24:22 2009 -0800

Introduce a new authentication backend auth_onefs_wb

This new backend is custom tailored to onefs' unique requirements:
1) No fallback logic
2) Does not validate the domain of the user
3) Handles unencrypted passwords

commit e311dcff2272968959b4268c2e7aad351443b191
Author: Dan Sledz dan.sl...@isilon.com
Date:   Tue Dec 9 08:29:26 2008 +

Allow building with an external libwbclient library

Introduce a new configure option --with-wbclient which specifies a
location to find a compatible libwbclient library to link against.  This
options is overwritten by --with-winbind

---

Summary of changes:
 source3/Makefile.in|9 +
 source3/auth/auth_onefs_wb.c   |  134 +
 source3/configure.in   |   80 ++--
 source3/passdb/pdb_onefs_sam.c |  433 
 4 files changed, 636 insertions(+), 20 deletions(-)
 create mode 100644 source3/auth/auth_onefs_wb.c
 create mode 100644 source3/passdb/pdb_onefs_sam.c


Changeset truncated at 500 lines:

diff --git a/source3/Makefile.in b/source3/Makefile.in
index 98ed810..6087fa0 100644
--- a/source3/Makefile.in
+++ b/source3/Makefile.in
@@ -685,6 +685,7 @@ AUTH_SAM_OBJ = auth/auth_sam.o
 AUTH_SERVER_OBJ = auth/auth_server.o
 AUTH_UNIX_OBJ = auth/auth_unix.o
 AUTH_WINBIND_OBJ = auth/auth_winbind.o
+AUTH_ONEFS_WB_OBJ = auth/auth_onefs_wb.o
 AUTH_SCRIPT_OBJ = auth/auth_script.o
 AUTH_NETLOGOND_OBJ = auth/auth_netlogond.o
 
@@ -2343,6 +2344,10 @@ bin/winbi...@shlibext@: $(BINARY_PREREQS) 
$(AUTH_WINBIND_OBJ)
@echo Building plugin $@
@$(SHLD_MODULE) $(AUTH_WINBIND_OBJ)
 
+bin/onefs_...@shlibext@: $(BINARY_PREREQS) $(AUTH_ONEFS_WB_OBJ)
+   @echo Building plugin $@
+   @$(SHLD_MODULE) $(AUTH_ONEFS_WB_OBJ)
+
 bin/un...@shlibext@: $(BINARY_PREREQS) $(AUTH_UNIX_OBJ)
@echo Building plugin $@
@$(SHLD_MODULE) $(AUTH_UNIX_OBJ)
@@ -2359,6 +2364,10 @@ bin/tdbs...@shlibext@: $(BINARY_PREREQS) passdb/pdb_tdb.o
@echo Building plugin $@
@$(SHLD_MODULE) passdb/pdb_tdb.o
 
+bin/onefs_s...@shlibext@: $(BINARY_PREREQS) passdb/pdb_onefs_sam.o
+   @echo Building plugin $@
+   @$(SHLD_MODULE) passdb/pdb_onefs_sam.o
+
 bin/smbpass...@shlibext@: $(BINARY_PREREQS) passdb/pdb_smbpasswd.o
@echo Building plugin $@
@$(SHLD_MODULE) passdb/pdb_smbpasswd.o
diff --git a/source3/auth/auth_onefs_wb.c b/source3/auth/auth_onefs_wb.c
new file mode 100644
index 000..49de696
--- /dev/null
+++ b/source3/auth/auth_onefs_wb.c
@@ -0,0 +1,134 @@
+/*
+   Unix SMB/CIFS implementation.
+
+   Winbind authentication mechnism, customized for onefs
+
+   Copyright (C) Tim Potter 2000
+   Copyright (C) Andrew Bartlett 2001 - 2002
+   Copyright (C) Dan Sledz 2009
+
+   This program is free software; you can redistribute it and/or modify
+   it under the terms of the GNU General Public License as published by
+   the Free Software Foundation; either version 3 of the License, or
+   (at your option) any later version.
+
+   This program is distributed in the hope that it will be useful,
+   but WITHOUT ANY WARRANTY; without even the implied warranty of
+   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+   GNU General Public License for more details.
+
+   You should have received a copy of the GNU General Public License
+   along with this program.  If not, see http://www.gnu.org/licenses/.
+*/
+
+#include includes.h
+
+#undef DBGC_CLASS
+#define DBGC_CLASS DBGC_AUTH
+
+/* Authenticate a user with a challenge/response */
+
+static NTSTATUS check_onefs_wb_security(const struct auth_context 
*auth_context,
+  void *my_private_data,
+  TALLOC_CTX *mem_ctx,
+  const auth_usersupplied_info *user_info,
+  auth_serversupplied_info **server_info)
+{
+   NTSTATUS

[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha6-1046-gc207fe4

2009-02-20 Thread Steven Danneman 
The branch, master has been updated
   via  c207fe42a796cf33f1901caeb2c4c1e493b94471 (commit)
  from  fc02c3b0890a9549989bb0aba16588026c6d6b43 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit c207fe42a796cf33f1901caeb2c4c1e493b94471
Author: Steven Danneman steven.danne...@isilon.com
Date:   Fri Feb 20 23:25:49 2009 -0800

s3: Fix build break in d9a842b2

* actually check for existance of sysctlbyname()

---

Summary of changes:
 source3/configure.in |   22 +++---
 1 files changed, 3 insertions(+), 19 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/configure.in b/source3/configure.in
index 7fe824c..bd3d4af 100644
--- a/source3/configure.in
+++ b/source3/configure.in
@@ -837,25 +837,6 @@ if test x$samba_cv_msghdr_msg_control = xyes; then
 fi
 
 #
-# check for sysctlbyname
-AC_CACHE_CHECK([for sysctlbyname],samba_cv_sysctlbyname, [
-AC_TRY_COMPILE([
-#include sys/types.h
-#include sys/sysctl.h
-#include stdlib.h
-#include stddef.h],
-[
-   int sysctl_max;
-   size_t size = sizeof(sysctl_max);
-   sysctlbyname(test, sysctl_max, size, NULL, 0);
-],
-   samba_cv_sysctlbyname=yes,samba_cv_sysctlbyname=no)])
-if test x$samba_cv_msghdr_msg_control = xyes; then
-AC_DEFINE(HAVE_SYSCTLBYNAME,1,
-[If we support sysctlbyname api])
-fi
-
-#
 # check for fd passing struct via msg_acctrights
 AC_CACHE_CHECK([for fd passing via msg_acctrights],
samba_cv_msghdr_msg_acctrights, [
@@ -1063,6 +1044,9 @@ AC_SEARCH_LIBS(backtrace_symbols, [execinfo])
 AC_CHECK_FUNCS(backtrace_symbols)
 AC_CHECK_LIB(exc, trace_back_stack)
 
+# check for sysctlbyname for BSD systems
+AC_CHECK_FUNCS(sysctlbyname)
+
 printf %s checking for GPFS GPL libs... 
 save_LIBS=$LIBS
 LIBS=$LIBS -lgpfs_gpl


-- 
Samba Shared Repository