Re: [Samba] Deploying apps via policy

2009-07-20 Thread Christian Rost
Btw having GPO at place reduces much of the hand work you have to to
for client PC setup.

Hi,

IMHO currently the only way to deploy GPOs with Samba is by using Nitrobit 
Group Policy [http://www.nitrobit.com/].

Cheers,

Christian



===
Christian Rost
roCon - Informationstechnologie
Glatzer Weg 4

44534 Lünen

fon: +49 (0) 2306 910 658
fax: +49 (0) 2306 910 664
url: http://www.rocon-it.de

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] samba ldap problem

2009-07-20 Thread Mischa Diehm
Hi,

we had this setup working for quite some time but after upgrading the
samba package things look different:

we now have the following samba/ldap setup:

samba-3.0.34p1-cups-ldap
openldap-server-2.3.43

the samba-ldap configuration is:
doing parameter ldap suffix = dc=foo,dc=ch
doing parameter ldap machine suffix = ou=Computers,ou=Samba,ou=system
doing parameter ldap user suffix = ou=Users,ou=Samba,ou=system
doing parameter ldap group suffix = ou=Groups,ou=Samba,ou=system
doing parameter ldap admin dn =
cn=SambaAdmin,ou=Users,ou=OpenLDAP,ou=system,dc=foo,dc=ch
doing parameter ldap delete dn = no
doing parameter ldap passwd sync = no
doing parameter ldap replication sleep = 6000
doing parameter ldap timeout = 120
doing parameter ldap ssl = No

when starting the smbd things look ok:
Attempting to find an passdb backend to match ldapsam:ldap://localhost/
(ldapsam)
Found pdb backend ldapsam
smbldap_search_domain_info: Searching
for:[((objectClass=sambaDomain)(sambaDomainName=EDUBS))]
smbldap_search_ext: base = [dc=edubs,dc=ch], filter =
[((objectClass=sambaDomain)(sambaDomainName=EDUBS))], scope = [2]
The connection to the LDAP server was closed
smb_ldap_setup_connection: ldap://localhost/
smbldap_open_connection: connection opened
ldap_connect_system: Binding to ldap server ldap://localhost/ as
cn=SambaAdmin,ou=Users,ou=OpenLDAP,ou=system,dc=edubs,dc=ch
ldap_connect_system: successful connection to the LDAP server
ldap_connect_system: LDAP server does support paged results
The LDAP server is successfully connected
smbldap_get_single_attribute: [sambaAlgorithmicRidBase] = [does not
exist]
pdb backend ldapsam:ldap://localhost/ has a valid init


it seems the first connection works:
root:195# smbclient -L localhost -U foo.bar
Password: 
Anonymous login successful
Domain=[EDUBS] OS=[Unix] Server=[Samba 3.0.34]

Sharename   Type  Comment
-     ---
IPC$IPC   IPC Service (ICT Fileserver)
read_socket_with_timeout: timeout read. read error = Connection reset by peer.
Receiving SMB: Server stopped responding
session request to LOCALHOST failed (Read error: Connection reset by peer)
Error connecting to 127.0.0.1 (Connection refused)
Connection to localhost failed (Error NT_STATUS_CONNECTION_REFUSED)
NetBIOS over TCP disabled -- no workgroup available


but any connection afterwards fails with this:
root:199# smbclient -L localhost -U foo.bar
Password: 
Receiving SMB: Server stopped responding
session setup failed: Call returned zero bytes

in this state we don't see any packets going to the ldap server anymore.
Have you seen this behaviour or do you have any hints how we could debug
this better?

Thanks in advance,
Mischa Diehm
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] How to migrate samba to new box

2009-07-20 Thread Gary Greene
On Sunday 19 July 2009 09:23:05 am Norberto Bensa wrote:
 PS: list admins. Can you please modify the reply-to header to point to
 the list? Thanks.

No, please don't. See this link for why:

http://www.unicom.com/pw/reply-to-harmful.html

If you're having problems with mailing list handling, please use a better mail 
client that understands and uses the list-id and friends headers.

-- 
Gary L. Greene, Jr.
Sent from: peorth.tolharadys.net
 00:53:23 up 76 days, 17:19,  4 users,  load average: 0.12, 0.25, 0.22
==
Developer and Project Lead for the AltimatOS open source project
Volunteer Developer for the KDE open source project
See http://www.altimatos.com/ and http://www.kde.org/ for more information
==

Please avoid sending me Word or PowerPoint attachments.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] can't get Samba users from Window s

2009-07-20 Thread Kirill Brilliantov
Hello!
I have install samba 3.2.5 on Debian Lenny from repository.
Then I try get Samba users from Windows, tabs Security in the directory 
properties, I get error:
Next error don't allow look any elements: Many connects to server or share 
dont't allow. Please disconnect preview and try again.

In the samba log I find next line:
[2009/07/08 14:19:19,  1] smbd/service.c:make_connection_snum(1115)
  srv1c (192.168.10.240) connect to service develop initially as user test 
(uid=0, gid=1003) (pid 5057)
[2009/07/08 14:20:38,  1] smbd/service.c:close_cnum(1327)
  srv1c (192.168.10.240) closed connection to service develop
[2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_open(853)
  tdbsam_open: unknown version = 4
[2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_getsampwnam(903)
  tdbsam_getsampwnam: failed to open /var/lib/samba/passdb.tdb!
[2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_open(853)
  tdbsam_open: unknown version = 4
[2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_getsampwnam(903)
  tdbsam_getsampwnam: failed to open /var/lib/samba/passdb.tdb!
[2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_open(853)
  tdbsam_open: unknown version = 4
[2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_getsampwnam(903)
  tdbsam_getsampwnam: failed to open /var/lib/samba/passdb.tdb!
[2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_open(853)
  tdbsam_open: unknown version = 4
[2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_getsampwnam(903)
  tdbsam_getsampwnam: failed to open /var/lib/samba/passdb.tdb!
[2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_open(853)
  tdbsam_open: unknown version = 4
[2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_getsampwnam(903)
  tdbsam_getsampwnam: failed to open /var/lib/samba/passdb.tdb!
[2009/07/08 14:23:53,  0] passdb/pdb_tdb.c:tdbsam_open(853)
  tdbsam_open: unknown version = 4
[2009/07/08 14:23:53,  0] passdb/pdb_tdb.c:tdbsam_getsampwnam(903)
  tdbsam_getsampwnam: failed to open /var/lib/samba/passdb.tdb!
[2009/07/08 14:24:00,  0] passdb/pdb_tdb.c:tdbsam_open(853)
  tdbsam_open: unknown version = 4
[2009/07/08 14:24:00,  0] passdb/pdb_tdb.c:tdbsam_getsampwnam(903)
  tdbsam_getsampwnam: failed to open /var/lib/samba/passdb.tdb!

Can you help me?
Thanks.




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Deploying apps via policy

2009-07-20 Thread Mister Olli
Hi,


No just use Samba4, it brings server side GPO support.

If you miss some config options from samba3 you really need, you can try
compile samba with --enable-merged-build to enable building samba3
+samba4.
- samba3 then takes care of file sharing stuff
- samba4 handles the AD stuff.

see http://wiki.samba.org/index.php/Franky.


Regards,
---
Mr. Olli

 On Mon, 2009-07-20 at 09:23 +0200, Christian Rost wrote:
 Btw having GPO at place reduces much of the hand work you have to to
 for client PC setup.
 
 Hi,
 
 IMHO currently the only way to deploy GPOs with Samba is by using Nitrobit 
 Group Policy [http://www.nitrobit.com/].
 
 Cheers,
 
 Christian
 
 
 
 ===
 Christian Rost
 roCon - Informationstechnologie
 Glatzer Weg 4
 
 44534 Lünen
 
 fon: +49 (0) 2306 910 658
 fax: +49 (0) 2306 910 664
 url: http://www.rocon-it.de
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Deploying apps via policy

2009-07-20 Thread Christian Rost
No just use Samba4, it brings server side GPO support.

If you miss some config options from samba3 you really need, you can try
compile samba with --enable-merged-build to enable building samba3
+samba4.
- samba3 then takes care of file sharing stuff
- samba4 handles the AD stuff.

see http://wiki.samba.org/index.php/Franky.

Well, you're right and I am looking forward to it, but is it ready for an 
production environment yet?

Cherrs, Christian


===
Christian Rost
roCon - Informationstechnologie
Glatzer Weg 4

44534 Lünen

fon: +49 (0) 2306 910 658
fax: +49 (0) 2306 910 664
url: http://www.rocon-it.de


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] can not read file permissions via samba over gpfs

2009-07-20 Thread David
Hi again,

Just an update, my production servers switched to work with this settings
for several days now, and all seems OK.
I didn't found any reason why not using this this setting (vfs objects =
fileid) while working with gpfs and posix acl's so I'll keep it that way.
If I notice problems, I'll updateI hope not.

Thanks,
David


On Wed, Jul 15, 2009 at 2:57 PM, David david.p...@gmail.com wrote:

 So if you don't see any problems with this solution, I'll give it a try on
 the first chance that I have and update.

 Thanks for help and prompt replies!
 David


 On Wed, Jul 15, 2009 at 2:47 PM, Volker Lendecke 
 volker.lende...@sernet.de wrote:

 On Wed, Jul 15, 2009 at 02:37:09PM +0300, David wrote:
  Thanks for all your help and I'm sorry if I'm being a nag, but I have to
  check all my options before moving on using nfsv4 authorization.
  I quickly setup a test server with the same configuration like on my
 prod
  environment, and I found that if remove gpfs module from the vfs
 object
  option line, I can see the permissions and get the proper permissions
 from
  the acls entries. (just like in example I sent at the begging)
 
  If this resolves my problem, is there a reason why not using this
 solution?
  It also don't come up with what you wrote before which totally make
 sense to
  me...

 I never used GPFS with posix ACLs, and I *thought* from the
 mere existence of the special ACL API in gpfs.h that these
 calls are required.

 If it works fine now, perfect. Sorry for the noise, just
 ignore me.

 Volker

 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.9 (GNU/Linux)

 iEYEARECAAYFAkpdwe4ACgkQbsgDfmnSbrb4jwCggx7+RqxCcQjBk9ZWpjLBHdlD
 +wgAnj8Xg6yZdBvXAo4tbWs6bcHZK6Ol
 =wKTS
 -END PGP SIGNATURE-



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Deploying apps via policy

2009-07-20 Thread Mister Olli
Hi,

works quite well for me. haven't found any problems until now.

Regards
---
Mr. Olli


On Mon, 2009-07-20 at 12:54 +0200, Christian Rost wrote:
 No just use Samba4, it brings server side GPO support.
 
 If you miss some config options from samba3 you really need, you can try
 compile samba with --enable-merged-build to enable building samba3
 +samba4.
 - samba3 then takes care of file sharing stuff
 - samba4 handles the AD stuff.
 
 see http://wiki.samba.org/index.php/Franky.
 
 Well, you're right and I am looking forward to it, but is it ready for an 
 production environment yet?
 
 Cherrs, Christian
 
 
 ===
 Christian Rost
 roCon - Informationstechnologie
 Glatzer Weg 4
 
 44534 Lünen
 
 fon: +49 (0) 2306 910 658
 fax: +49 (0) 2306 910 664
 url: http://www.rocon-it.de
 
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] How to migrate samba to new box

2009-07-20 Thread Norberto Bensa
On Mon, Jul 20, 2009 at 4:55 AM, Gary Greenegree...@altimatos.com wrote:
 If you're having problems with mailing list handling,

I'm not. But I have tens of emails in my in-box that *should* be on the list.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Difference in Samba and CIFS interms of keeping the deleted files opened

2009-07-20 Thread Nikhil
 Hi,

We have a CIFS server running on a NetApp server and a Solaris host running
Samba-3.3.2.

When we mount both the filesystems to a Drive on a Windows using the net use
command and then try to run a java program which basically does nothing but
continuosly writes a data chunk to a file. On a side note, these same
filesystems are accessible on a Solaris (unix) host too.

When the java program is run and a file is being generated, I go to my unix
terminal and happen to delete the file generated by the java program.
Interestingly, there is an IOexception caught in the java program running on
the Windows machine, when the file is deleted on the CIFS based filesystem
(available on Solaris as a NFS filesystems) but there is no exception caught
when the filesystem happens to be Samba (available on Solaris as /var , a
regular partition).

I delete the file from Unix as the process demands, but also there is no way
to delete a in-use-file in Windows.

I would like to understand the differences in Samba and CIFS in this context
especially why is that so there is an IOexception for a CIFS based
filesystem but not on the samba filesystem. This is reproducible at will.
What could be wrong? What could be made to make samba filesystem also behave
the same way to throw exceptions (Exceptions are good than that not at all
knowing there is a file that is deleted but being still written onto.)

I would be willing to work and share the procedure to reproduce this
behaviour with anyone aware of the Samba/CIFS protocols.

-- 
Nikhil
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even though I do; -)

2009-07-20 Thread Glenn T. Arnold
Jeremy, 

I do not think you got my log files, because I went through the log and I did 
not see the error you are referencing. When I went through the logs I did see 
references to print$ in the logs. What is a the proper way to post a log? I got 
bounced by the Samba List server when I paste the information in a post. I sent 
the log gziped did not get a bounce message, but I am not sure you got the log 
files. The file that I sent gzip was named print$level10.tar.gz Here is what I 
found under the two log files for print$ 

[2009/07/16 16:33:14, 2] param/loadparm.c:do_section(7498) 
Processing section [print$] 
[2009/07/16 16:33:14, 8] param/loadparm.c:add_a_service(5830) 
add_a_service: Creating snum = 1 for print$ 
[2009/07/16 16:33:14, 10] param/loadparm.c:hash_a_service(5877) 
hash_a_service: hashing index 1 for service name print$ 




-Glenn 

- Original Message - 
From: Jeremy Allison j...@samba.org 
To: Glenn T. Arnold garn...@unrealsolutions.com 
Cc: Jeremy Allison j...@samba.org, samba@lists.samba.org 
Sent: Thursday, July 16, 2009 6:01:44 PM GMT -05:00 US/Canada Eastern 
Subject: Re: [Samba] Ubuntu Jaunty samba 3.3.2 print$ no write rights even 
though I do; -) 

On Thu, Jul 16, 2009 at 05:31:21PM -0400, Glenn T. Arnold wrote: 
 Here is the level 10 log files I sent the first one as attachments which look 
 like did not make it through. 

I don't see any attempts to open the print$ share in these logs. 

I do see an error : 

netlogon_creds_server_check: challenge : 14D0450551344C93 
calculated: BAB7D8066C1D3129 
netlogon_creds_server_check: credentials check failed. 
_netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting 
auth request from client WIN7 machine account WIN7$ 

Is this a Win7 machine ? 3.3.2 doesn't have the fixes 
for Win7 netlogon credentials in it (hardly suprising 
as Win7 wasn't even a twinkle in Microsoft's release 
schedule when 3.3.2 was shipped :-). 

Jeremy. 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba is deleting samba-passwords out of ldap-tree

2009-07-20 Thread Daniel Spannbauer

Hello,

I try to install a PDC with Samba 3.0.23 and openldap 2.3.27.
I can join the domain with a win-xp-Machine, the User-Accounts are in 
ldap and looks like the following:


dn: uid=ds,ou=people,dc=marco,dc=de
userPassword: {crypt}RVp32Kd9mkUek
sambaLogonTime: 0
sambaLogoffTime: 0
sambaPwdLastSet: 0
sambaProfilePath: \\homedirs\ds\.ntprofile
sambaPwdCanChange: 0
sambaSID: S-1-5-21-2539381339-996027264-670411106-2015
sambaHomePath: \\homedirs\ds
uid: ds
cn: Daniel Spannbauer
telephoneNumber: 27
roomNumber: bab
givenName: Daniel
sn: Spannbauer
mail: d...@marco.de
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: sambaSamAccount
objectClass: shadowAccount
objectClass: posixAccount
objectClass: top
businessCategory: Software Entwicklung
street: Rechbergstr. 4 - 6
postalCode: 87727
registeredAddress: Babenhausen
loginShell: /usr/uti/bash
uidNumber: 2015
gidNumber: 52
homeDirectory: /node/test/ds
gecos: Daniel Spannbauer,bab,27
sambaAcctFlags: [U  ]
sambaHomeDrive: H:
sambaKickoffTime: 2147483647
sambaPwdMustChange: 2147483647
sambaLMPassword: 590C5C5A8C08D6692CC208E556B42461
sambaNTPassword: 5B43D9E033AF01F1AC8AAA97751AE14E


Each time I try to login on the xp-machine both, sambaLMPassword and 
sambaNTPassword are deleted from the ldaptree.

I increased the loglevel, but can't find anything that gives me a hint.


Any clues how to find the error?
Loglevel etc.?

Regards

Daniel



--
Daniel Spannbauer Software Entwicklung
marco Systemanalyse und Entwicklung GmbH  Tel   +49 8333 9233-27 Fax -11
Rechbergstr. 4 - 6, D 87727 Babenhausen   Mobil +49 171 4033220
http://www.marco.de/  Email d...@marco.de
Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] can't get Samba users from Windows

2009-07-20 Thread Jeremy Allison
On Mon, Jul 20, 2009 at 01:31:21PM +0400, Kirill Brilliantov wrote:
 Hello!
 I have install samba 3.2.5 on Debian Lenny from repository.
 Then I try get Samba users from Windows, tabs Security in the directory 
 properties, I get error:
 Next error don't allow look any elements: Many connects to server or share 
 dont't allow. Please disconnect preview and try again.
 
 In the samba log I find next line:
 [2009/07/08 14:19:19,  1] smbd/service.c:make_connection_snum(1115)
   srv1c (192.168.10.240) connect to service develop initially as user test 
 (uid=0, gid=1003) (pid 5057)
 [2009/07/08 14:20:38,  1] smbd/service.c:close_cnum(1327)
   srv1c (192.168.10.240) closed connection to service develop
 [2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_open(853)
   tdbsam_open: unknown version = 4
 [2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_getsampwnam(903)
   tdbsam_getsampwnam: failed to open /var/lib/samba/passdb.tdb!
 [2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_open(853)
   tdbsam_open: unknown version = 4
 [2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_getsampwnam(903)
   tdbsam_getsampwnam: failed to open /var/lib/samba/passdb.tdb!
 [2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_open(853)
   tdbsam_open: unknown version = 4
 [2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_getsampwnam(903)
   tdbsam_getsampwnam: failed to open /var/lib/samba/passdb.tdb!
 [2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_open(853)
   tdbsam_open: unknown version = 4
 [2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_getsampwnam(903)
   tdbsam_getsampwnam: failed to open /var/lib/samba/passdb.tdb!
 [2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_open(853)
   tdbsam_open: unknown version = 4
 [2009/07/08 14:23:49,  0] passdb/pdb_tdb.c:tdbsam_getsampwnam(903)
   tdbsam_getsampwnam: failed to open /var/lib/samba/passdb.tdb!
 [2009/07/08 14:23:53,  0] passdb/pdb_tdb.c:tdbsam_open(853)
   tdbsam_open: unknown version = 4
 [2009/07/08 14:23:53,  0] passdb/pdb_tdb.c:tdbsam_getsampwnam(903)
   tdbsam_getsampwnam: failed to open /var/lib/samba/passdb.tdb!
 [2009/07/08 14:24:00,  0] passdb/pdb_tdb.c:tdbsam_open(853)
   tdbsam_open: unknown version = 4
 [2009/07/08 14:24:00,  0] passdb/pdb_tdb.c:tdbsam_getsampwnam(903)
   tdbsam_getsampwnam: failed to open /var/lib/samba/passdb.tdb!
 
 Can you help me?
 Thanks.

Looks like you've run Samba 3.4.0, which has upgraded yout
passdb.tdb database to version 4 (the most recent database
version). In order to run 3.2.x (which uses version 3)
you'll need to restore the passdb.tdb from a backup from
before you ran Samba 3.4.0.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] can't get Samba users from Window s

2009-07-20 Thread Kirill Brilliantov
 
 Looks like you've run Samba 3.4.0, which has upgraded yout
 passdb.tdb database to version 4 (the most recent database
 version). In order to run 3.2.x (which uses version 3)
 you'll need to restore the passdb.tdb from a backup from
 before you ran Samba 3.4.0.
 
 Jeremy.
 

Hello and thank you for your answer!
I don't install samba 3.4. I have installed packages only from repository. I 
try package from backports.org (samba 3.3.6), but it don't solve my problem and 
I deinstall package and purge configuration.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba is deleting samba-passwords out of ldap-tree

2009-07-20 Thread Jonathon Doran

Could you be running an out of data samba.schema?

Quoting Daniel Spannbauer d...@marco.de:


Hello,

I try to install a PDC with Samba 3.0.23 and openldap 2.3.27.
I can join the domain with a win-xp-Machine, the User-Accounts are in
ldap and looks like the following:

dn: uid=ds,ou=people,dc=marco,dc=de
userPassword: {crypt}RVp32Kd9mkUek
sambaLogonTime: 0
sambaLogoffTime: 0
sambaPwdLastSet: 0
sambaProfilePath: \\homedirs\ds\.ntprofile
sambaPwdCanChange: 0
sambaSID: S-1-5-21-2539381339-996027264-670411106-2015
sambaHomePath: \\homedirs\ds
uid: ds
cn: Daniel Spannbauer
telephoneNumber: 27
roomNumber: bab
givenName: Daniel
sn: Spannbauer
mail: d...@marco.de
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: sambaSamAccount
objectClass: shadowAccount
objectClass: posixAccount
objectClass: top
businessCategory: Software Entwicklung
street: Rechbergstr. 4 - 6
postalCode: 87727
registeredAddress: Babenhausen
loginShell: /usr/uti/bash
uidNumber: 2015
gidNumber: 52
homeDirectory: /node/test/ds
gecos: Daniel Spannbauer,bab,27
sambaAcctFlags: [U  ]
sambaHomeDrive: H:
sambaKickoffTime: 2147483647
sambaPwdMustChange: 2147483647
sambaLMPassword: 590C5C5A8C08D6692CC208E556B42461
sambaNTPassword: 5B43D9E033AF01F1AC8AAA97751AE14E


Each time I try to login on the xp-machine both, sambaLMPassword and
sambaNTPassword are deleted from the ldaptree.
I increased the loglevel, but can't find anything that gives me a hint.


Any clues how to find the error?
Loglevel etc.?

Regards

Daniel



--
Daniel Spannbauer Software Entwicklung
marco Systemanalyse und Entwicklung GmbH  Tel   +49 8333 9233-27 Fax -11
Rechbergstr. 4 - 6, D 87727 Babenhausen   Mobil +49 171 4033220
http://www.marco.de/  Email d...@marco.de
Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba is deleting samba-passwords out of ldap-tree

2009-07-20 Thread Daniel Spannbauer



Jonathon Doran schrieb:

Could you be running an out of data samba.schema?



Hmmm, don't think so. It runned with this schema on a test a while ago.

Regards

Daniel





Quoting Daniel Spannbauer d...@marco.de:


Hello,

I try to install a PDC with Samba 3.0.23 and openldap 2.3.27.
I can join the domain with a win-xp-Machine, the User-Accounts are in
ldap and looks like the following:

dn: uid=ds,ou=people,dc=marco,dc=de
userPassword: {crypt}RVp32Kd9mkUek
sambaLogonTime: 0
sambaLogoffTime: 0
sambaPwdLastSet: 0
sambaProfilePath: \\homedirs\ds\.ntprofile
sambaPwdCanChange: 0
sambaSID: S-1-5-21-2539381339-996027264-670411106-2015
sambaHomePath: \\homedirs\ds
uid: ds
cn: Daniel Spannbauer
telephoneNumber: 27
roomNumber: bab
givenName: Daniel
sn: Spannbauer
mail: d...@marco.de
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: sambaSamAccount
objectClass: shadowAccount
objectClass: posixAccount
objectClass: top
businessCategory: Software Entwicklung
street: Rechbergstr. 4 - 6
postalCode: 87727
registeredAddress: Babenhausen
loginShell: /usr/uti/bash
uidNumber: 2015
gidNumber: 52
homeDirectory: /node/test/ds
gecos: Daniel Spannbauer,bab,27
sambaAcctFlags: [U  ]
sambaHomeDrive: H:
sambaKickoffTime: 2147483647
sambaPwdMustChange: 2147483647
sambaLMPassword: 590C5C5A8C08D6692CC208E556B42461
sambaNTPassword: 5B43D9E033AF01F1AC8AAA97751AE14E


Each time I try to login on the xp-machine both, sambaLMPassword and
sambaNTPassword are deleted from the ldaptree.
I increased the loglevel, but can't find anything that gives me a hint.


Any clues how to find the error?
Loglevel etc.?

Regards

Daniel



--
Daniel Spannbauer Software Entwicklung
marco Systemanalyse und Entwicklung GmbH  Tel   +49 8333 9233-27 Fax -11
Rechbergstr. 4 - 6, D 87727 Babenhausen   Mobil +49 171 4033220
http://www.marco.de/  Email d...@marco.de
Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba




--
Daniel Spannbauer Software Entwicklung
marco Systemanalyse und Entwicklung GmbH  Tel   +49 8333 9233-27 Fax -11
Rechbergstr. 4 - 6, D 87727 Babenhausen   Mobil +49 171 4033220
http://www.marco.de/  Email d...@marco.de
Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba is deleting samba-passwords out of ldap-tree

2009-07-20 Thread Jonathon Doran

...

and my apologies for the top post.  I wasn't planning on quoting anything.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] can't get Samba users from Windows

2009-07-20 Thread Jeremy Allison
On Mon, Jul 20, 2009 at 10:13:20PM +0400, Kirill Brilliantov wrote:
  
  Looks like you've run Samba 3.4.0, which has upgraded yout
  passdb.tdb database to version 4 (the most recent database
  version). In order to run 3.2.x (which uses version 3)
  you'll need to restore the passdb.tdb from a backup from
  before you ran Samba 3.4.0.
  
  Jeremy.
  
 
 Hello and thank you for your answer!
 I don't install samba 3.4. I have installed packages only from repository. I 
 try package from backports.org (samba 3.3.6), but it don't solve my problem 
 and I deinstall package and purge configuration.

3.3.x also uses a version 4 passdb backend. You'll need
to restore from backup or go back to 3.3.x.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] can't get Samba users from Windows

2009-07-20 Thread Dale Schroeder


Kirill Brilliantov wrote:

Looks like you've run Samba 3.4.0, which has upgraded yout
passdb.tdb database to version 4 (the most recent database
version). In order to run 3.2.x (which uses version 3)
you'll need to restore the passdb.tdb from a backup from
before you ran Samba 3.4.0.

Jeremy.




Hello and thank you for your answer!
I don't install samba 3.4. I have installed packages only from repository. I 
try package from backports.org (samba 3.3.6), but it don't solve my problem and 
I deinstall package and purge configuration.
  


I saw in your original email that the user connecting had uid = 0, same 
as root.

Do you have invalid users = root in your smb.conf?

Dale
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Differences in Samba and CIFS in terms of keeping the deleted files open?

2009-07-20 Thread Nikhil
I see there are some bugzilla links open but not really sure if they conform
to the same behaviour what I see.

http://www.mail-archive.com/samba@lists.samba.org/msg94854.html
 https://bugzilla.samba.org/show_bug.cgi?id=5315
http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6213298
http://bugs.sun.com/bugdatabase/view_bug.do;jsessionid=991fdfd56a9fccbbb8cdf50d6de3?bug_id=4313887
http://jcp.org/en/jsr/detail?id=203






On Mon, Jul 20, 2009 at 9:59 PM, Nikhil mnik...@gmail.com wrote:

 Hi,

 We have a CIFS server running on a NetApp server and a Solaris host running
 Samba-3.3.2.

 When we mount both the filesystems to a Drive on a Windows using the net
 use command and then try to run a java program which basically does nothing
 but continuosly writes a data chunk to a file. On a side note, these same
 filesystems are accessible on a Solaris (unix) host too.

 When the java program is run and a file is being generated, I go to my unix
 terminal and happen to delete the file generated by the java program.
 Interestingly, there is an IOexception caught in the java program running on
 the Windows machine, when the file is deleted on the CIFS based filesystem
 (available on Solaris as a NFS filesystems) but there is no exception caught
 when the filesystem happens to be Samba (available on Solaris as /var , a
 regular partition).

 I delete the file from Unix as the process demands, but also there is no
 way to delete a in-use-file in Windows.

 I would like to understand the differences in Samba and CIFS in this
 context especially why is that so there is an IOexception for a CIFS based
 filesystem but not on the samba filesystem. This is reproducible at will.
 What could be wrong? What could be made to make samba filesystem also
 behave the same way to throw exceptions (Exceptions are good than that not
 at all knowing there is a file that is deleted but being still written
 onto.)

 I would be willing to work and share the procedure to reproduce this
 behaviour with anyone aware of the Samba/CIFS protocols.

 --
 Nikhil




-- 
Nikhil

Google is Great !
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Difference in Samba and CIFS interms of keeping the deleted files opened

2009-07-20 Thread Jeremy Allison
On Mon, Jul 20, 2009 at 10:14:49PM +0530, Nikhil wrote:
  Hi,
 
 We have a CIFS server running on a NetApp server and a Solaris host running
 Samba-3.3.2.
 
 When we mount both the filesystems to a Drive on a Windows using the net use
 command and then try to run a java program which basically does nothing but
 continuosly writes a data chunk to a file. On a side note, these same
 filesystems are accessible on a Solaris (unix) host too.
 
 When the java program is run and a file is being generated, I go to my unix
 terminal and happen to delete the file generated by the java program.
 Interestingly, there is an IOexception caught in the java program running on
 the Windows machine, when the file is deleted on the CIFS based filesystem
 (available on Solaris as a NFS filesystems) but there is no exception caught
 when the filesystem happens to be Samba (available on Solaris as /var , a
 regular partition).
 
 I delete the file from Unix as the process demands, but also there is no way
 to delete a in-use-file in Windows.
 
 I would like to understand the differences in Samba and CIFS in this context
 especially why is that so there is an IOexception for a CIFS based
 filesystem but not on the samba filesystem. This is reproducible at will.
 What could be wrong? What could be made to make samba filesystem also behave
 the same way to throw exceptions (Exceptions are good than that not at all
 knowing there is a file that is deleted but being still written onto.)

Ok, I think the reason that you're having this problem is that
you're running Samba on Solaris in this case, sad to say.

I don't believe Sun have exposed kernel level oplock (lease) capability
to user space processes, so Samba on Solaris has no way of knowing
that a unix user deleted the file.

Samba running on Linux, (or SGI Irix) has kernel level oplocks,
so can detect access from the local filesystem. As the NetApp
runs a custom kernel (derived a long time ago from FreeBSD I
believe) then their CIFS implementation (like Samba on Linux)
knows when a NFS user has modified the file.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Winbind keeps failing after a week

2009-07-20 Thread Kevin Blackwell
Hello,

Currently I'm running FC11 with samba 3.0.STABLE15.

I'm using samba with squid to log NTLM authentication.

Well, just about every week, my /var/log/samba/log.wb-$DOMAIN file
starts to get full with these lines.

[2009/07/09 07:11:24,  0]
rpc_client/cli_netlogon.c:rpccli_netlogon_set_trust_password(597)
  rpccli_netr_ServerPasswordSet2 failed: NT_STATUS_WRONG_PASSWORD

If i issue a

net ads join -U Administrator%password,

everything returns to normal. What i can't figure out is why the
authentication keeps falling over on a weekly basis.

Anyone have any ideas?

Kevin
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] can't get Samba users from Window s

2009-07-20 Thread Kirill Brilliantov

 
 I saw in your original email that the user connecting had uid = 0, same 
 as root.
 Do you have invalid users = root in your smb.conf?
 

Yes, I have used this parametr.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] can't get Samba users from Window s

2009-07-20 Thread Kirill Brilliantov
 
 3.3.x also uses a version 4 passdb backend. You'll need
 to restore from backup or go back to 3.3.x.
 
 Jeremy.
 

Thank you. I try you suggestion, but why I successfully logon on the server?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Deploying apps via policy

2009-07-20 Thread Marcio Merlone

Mister Olli escreveu:

No just use Samba4, it brings server side GPO support.

If you miss some config options from samba3 you really need, you can try
compile samba with --enable-merged-build to enable building samba3
+samba4.
- samba3 then takes care of file sharing stuff
- samba4 handles the AD stuff.

see http://wiki.samba.org/index.php/Franky.
  


At this point of samba4 devel, is it possible to run a small network 
without the Frank stuff, i.e. a pure samba4 setup without samba3? I just 
need an AD, file sharing and a couple of Windows server members, no 
printers, no nothing fancy.


Best regards.

--
Marcio Merlone

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Only administrator works in ldapsam:editposix domain

2009-07-20 Thread Kyle Schmitt
I tried setting up a samba/ldap domain using the ldapsam:editposix
feature, using the brief instructions at
http://wiki.samba.org/index.php/Ldapsam_Editposix.

Everything goes rather smoothly, and I can add XP machines and log
into them as the Administrative user.

I added a user to the server, then to samba/ldap using smbpasswd -a newuser
ldapsearch -x shows the user  encrypted password, so I figure I'm good to go.

When log in with my new (non admin) user, I get an error about
catastrophic failure,
Unable to complete the requested operation because of either a
catastrophic media failure or a data structure corruption on the
disk.

Hu, maybe the user isn't in the domain users group yet?

net rpc group addmem Domain Users newuser
Could not add newuser  to Domain Users: NT_STATUS_NO_SUCH_MEMBER
I tried a bunch of variations with the domain before one part or
another, and got pretty much the same error messages over and over.

What am I doing wrong?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Deploying apps via policy

2009-07-20 Thread Norberto Bensa
On Mon, Jul 20, 2009 at 5:27 PM, Marcio Merlonemarcio.merl...@a1.ind.br wrote:
 Mister Olli escreveu:

 see http://wiki.samba.org/index.php/Franky.


 At this point of samba4 devel, is it possible to run a small network without
 the Frank stuff, i.e. a pure samba4 setup without samba3? I just need an AD,
 file sharing and a couple of Windows server members, no printers, no nothing
 fancy.

I've just tried samba4 in a small virtualized environment (3 vms)
using ubuntu karmic (9.10 alpha) as server and windows 2k and xp as
clients.

I could add machines and users to the domain, access shares in the
server, but I couldn't browse the network. smbclient doesn't work for
browsing either, it shows a REWRITE: browsing not implemented or
something like that.

HTH,
Norberto
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Crazied NTLM_AUTH on samba 3.4.0

2009-07-20 Thread Gabriel Cavalcante
Hello,

For these days i'm trying to update the samba PDC of the network of the
version 3.0.28a to 3.4.0. I'm configured the ldap pass, winbind and the all
services, when they have sucess of update. But now i have a problem with the
ntlm_auth: he take and show random messages on auth. For example: 1 time
return 0xc0c3 ( NT_STATUS_INVALID_NETWORK_RESPONSE) or 0x1c010002 (???)
and much others. I realized one thing: when the response is Broken Pipe
the ntlm responds OK on first after try and back to the errors after this
warning...

try and the logs:


RESULT OF NTLM_AUTH COMMAND:

insight-lin01 bin # ./ntlm_auth --username=gabriel -d10 --diagnostics
password:
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test LM failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test LM and NTLM failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test NTLM failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test NTLM in LM failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test NTLM in both failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test NTLMv2 failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test NTLMv2 and LMv2 failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test LMv2 failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test NTLMv2 and LMv2, LMv2 broken failed!
NT code 0x1c010002 (0x1c010002)
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test NTLM and LM, LM broken failed!
NT code 0x1c010002 (0x1c010002)
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test Plaintext failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test Plaintext LM broken failed!
NT code 0x1c010002 (0x1c010002)
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test Plaintext NT only failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test Plaintext LM only failed!

2 times after:

insight-lin01 bin # ./ntlm_auth --username=gabriel
password:
NT_STATUS_INVALID_NETWORK_RESPONSE: NT_STATUS_INVALID_NETWORK_RESPONSE
(0xc0c3)
insight-lin01 bin # ./ntlm_auth --username=gabriel
password:
NT code 0x1c010002: NT code 0x1c010002 (0x1c010002)
insight-lin01 bin #
insight-lin01 bin # ./ntlm_auth --username=gabriel
password:
NT code 0x1c010002: NT code 0x1c010002 (0x1c010002)
insight-lin01 bin # ./ntlm_auth --username=gabriel
password:
NT code 0x1c010002: NT code 0x1c010002 (0x1c010002)
insight-lin01 bin # ./ntlm_auth --username=gabriel
password:
NT code 0x1c010002: NT code 0x1c010002 (0x1c010002)
insight-lin01 bin # ./ntlm_auth --username=gabriel
password:
NT code 0x1c010002: NT code 0x1c010002 (0x1c010002)
insight-lin01 bin # ./ntlm_auth --username=gabriel
password:
NT code 0x1c010002: NT code 0x1c010002 (0x1c010002)
insight-lin01 bin # ./ntlm_auth --username=gabriel
password:
NT code 0x1c010002: NT code 0x1c010002 (0x1c010002)
insight-lin01 bin #

I've realized when the error occurs the samba don't log the auth (or the try
of auth). PLEASE SOMEONE CAN HELP ME:? ITS a BuG?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Using NetWkstaGetInfo / NetWkstaUserEnum with sambaserver

2009-07-20 Thread Ian Puleston
 -Original Message-
 From: Volker Lendecke
 Sent: Friday, July 17, 2009 8:57 PM
 
 On Fri, Jul 17, 2009 at 02:04:19PM -0700, Ian Puleston wrote:
  I'm trying to run a program on a Windows server that sends the
  NetWkstaGetInfo and/or NetWkstaUserEnum NetAPI requests to 
  Samba server on a Linux machine, being logged in
  to that Windows server as the domain administrator. NetWkstaGetInfo
  has 3 levels (100 to 102) with 100 requiring only guest access.
Level
  100 works OK, but levels 101/102 return error 124 (invalid level).
  NetWkstaUserEnum returns error 1745 (RPC_S_PROCNUM_OUT_OF_RANGE).
 
  I have samba logging turned on with log level set to 3, and it logs
  successfully authenticating the domain administrator
  (sd80\administrator) and receiving the NetWksta... command in both
  cases (see below), so any idea why it may be returning these errors?
  On authenticating the user I do see get_privileges: No privileges
  assigned to SID logged - could this be the reason, the account does
  not have the privilege to run these commands on the Linux machine?
If
  so is there a way to give the account that privilege?
 
  Here is the samba log of an attempt to run NetWkstaUserEnum:
 
 Probably we just don't support some calls or some infolevels that we
 haven't come across yet. Can you please file a bug at
bugzilla.samba.org
 and upload network traces?
 Maybe also a snippet of your Win32 code that you're trying to get to
 run.

That is possible but at
http://lists.samba.org/archive/samba-technical/2006-September/049406.htm
l I found the comment As I see at [smbd/lanman.c] smbd will reply to
NetWkstaGetInfo request with username (at field 2). But MSDN
specification doesn't says about username, just about number of users
who are logged on to the local computer (level = 102) which implies
that it should support the NetWkstaGetInfo request at all 3 levels.

I thought I might have found the problem as mentioned at
http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/rights.html
which says that for the domain admin to get root privilege on the Linux
PC the SID for root needs to be set to the value for the domain admin.
But I haven't been able to get the command that is given to do that to
work (its under The Administrator Domain SID down near the bottom of
that page):

[r...@ian-linuxtest samba]# net getlocalsid sd80
SID for domain sd80 is: S-1-5-21-4023909512-3739307249-2032274589
[r...@ian-linuxtest samba]# pdbedit -U
S-1-5-21-4023909512-3739307249-2032274589-500 -u root -r
tdb_update_sam: struct samu (root) with no RID!
Unable to modify entry!

Any ideas on that?

The Win32 code I am using is simply the Microsoft code sample at
http://msdn.microsoft.com/en-us/library/aa370663(VS.85).aspx with a
small hack to allow the level to be given on the command line.

Ian

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Deploying apps via policy

2009-07-20 Thread Mister Olli
Hi,

depends on what your config should look like, as some parameters aren't
implemented.

AD stuff works great. for the rest I would recommend installing samba4,
creating config and let 'testparm' have a look at it.

It tell's you whenever there's an unknown parameter. if it's something
you really can't live without you know that you need franky ;-))

I didn't test franky, but from my understanding you only have one config
file, so IMHO it seems as the best (full working) solution right now.

Regards,
---
Mr. Olli


On Mon, 2009-07-20 at 17:27 -0300, Marcio Merlone wrote:
 Mister Olli escreveu:
  No just use Samba4, it brings server side GPO support.
 
  If you miss some config options from samba3 you really need, you can try
  compile samba with --enable-merged-build to enable building samba3
  +samba4.
  - samba3 then takes care of file sharing stuff
  - samba4 handles the AD stuff.
 
  see http://wiki.samba.org/index.php/Franky.

 
 At this point of samba4 devel, is it possible to run a small network 
 without the Frank stuff, i.e. a pure samba4 setup without samba3? I just 
 need an AD, file sharing and a couple of Windows server members, no 
 printers, no nothing fancy.
 
 Best regards.
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Deploying apps via policy

2009-07-20 Thread Mister Olli
Hi,

yes I've seen quite the same that network browsing does not show the
server.
This is kind of 'uncomfortable' but my users just live with it, as they
don't really have another choice.

Could you manage to try if a franky build would fix that? I'm curious
but horrible out of time to play with samba right now :-((

Regards,
---
Mr. Olli



On Mon, 2009-07-20 at 18:12 -0300, Norberto Bensa wrote:
 On Mon, Jul 20, 2009 at 5:27 PM, Marcio Merlonemarcio.merl...@a1.ind.br 
 wrote:
  Mister Olli escreveu:
 
  see http://wiki.samba.org/index.php/Franky.
 
 
  At this point of samba4 devel, is it possible to run a small network without
  the Frank stuff, i.e. a pure samba4 setup without samba3? I just need an AD,
  file sharing and a couple of Windows server members, no printers, no nothing
  fancy.
 
 I've just tried samba4 in a small virtualized environment (3 vms)
 using ubuntu karmic (9.10 alpha) as server and windows 2k and xp as
 clients.
 
 I could add machines and users to the domain, access shares in the
 server, but I couldn't browse the network. smbclient doesn't work for
 browsing either, it shows a REWRITE: browsing not implemented or
 something like that.
 
 HTH,
 Norberto

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Build status as of Mon Jul 20 06:00:02 2009

2009-07-20 Thread build
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2009-07-19 
00:00:03.0 -0600
+++ /home/build/master/cache/broken_results.txt 2009-07-20 00:00:08.0 
-0600
@@ -1,22 +1,22 @@
-Build status as of Sun Jul 19 06:00:02 2009
+Build status as of Mon Jul 20 06:00:02 2009
 
 Build counts:
 Tree Total  Broken Panic 
 build_farm   0  0  0 
-ccache   6  2  0 
+ccache   3  1  0 
 distcc   0  0  0 
 ldb  33 33 0 
-libreplace   4  2  0 
+libreplace   29 12 0 
 lorikeet 0  0  0 
-pidl 3  0  0 
-ppp  3  0  0 
+pidl 20 2  0 
+ppp  2  0  0 
 rsync1  1  0 
 samba-docs   0  0  0 
 samba-web0  0  0 
-samba_3_current 2  0  0 
+samba_3_current 1  0  0 
 samba_3_master 32 27 6 
 samba_3_next 32 30 1 
-samba_4_0_test 33 26 2 
-talloc   7  7  0 
-tdb  6  6  0 
+samba_4_0_test 33 26 3 
+talloc   29 29 0 
+tdb  26 26 0 
 


[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha8-529-gc80783e

2009-07-20 Thread Jelmer Vernooij
The branch, master has been updated
   via  c80783eafd28bb3d749761cbbed80423c908d247 (commit)
  from  09135ee5a09a8b6aabf88c1bdf9280065c8b35e7 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit c80783eafd28bb3d749761cbbed80423c908d247
Author: Jelmer Vernooij jel...@samba.org
Date:   Mon Jul 20 10:25:25 2009 +0200

Re-add accidently removed shares test.

---

Summary of changes:
 source4/scripting/python/samba/tests/shares.py |   74 
 1 files changed, 74 insertions(+), 0 deletions(-)
 create mode 100644 source4/scripting/python/samba/tests/shares.py


Changeset truncated at 500 lines:

diff --git a/source4/scripting/python/samba/tests/shares.py 
b/source4/scripting/python/samba/tests/shares.py
new file mode 100644
index 000..9130c36
--- /dev/null
+++ b/source4/scripting/python/samba/tests/shares.py
@@ -0,0 +1,74 @@
+#!/usr/bin/python
+
+# Unix SMB/CIFS implementation. Tests for shares
+# Copyright (C) Jelmer Vernooij jel...@samba.org 2009
+#   
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 3 of the License, or
+# (at your option) any later version.
+#   
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#   
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see http://www.gnu.org/licenses/.
+#
+from samba.shares import SharesContainer
+from unittest import TestCase
+
+
+class MockService(object):
+
+def __init__(self, data):
+self.data = data
+
+def __getitem__(self, name):
+return self.data[name]
+
+
+class MockLoadParm(object):
+
+def __init__(self, data):
+self.data = data
+
+def __getitem__(self, name):
+return MockService(self.data[name])
+
+def __contains__(self, name):
+return name in self.data
+
+def __len__(self):
+return len(self.data)
+
+def services(self):
+return self.data.keys()
+
+
+class ShareTests(TestCase):
+
+def _get_shares(self, conf):
+return SharesContainer(MockLoadParm(conf))
+
+def test_len_no_global(self):
+shares = self._get_shares({})
+self.assertEquals(0, len(shares))
+
+def test_iter(self):
+self.assertEquals([], list(self._get_shares({})))
+self.assertEquals([], list(self._get_shares({global:{}})))
+self.assertEquals([bla], list(self._get_shares({global:{}, 
bla:{}})))
+
+def test_len(self):
+shares = self._get_shares({global: {}})
+self.assertEquals(0, len(shares))
+
+def test_getitem_nonexistant(self):
+shares = self._get_shares({global: {}})
+self.assertRaises(KeyError, shares.__getitem__, bla)
+
+def test_getitem_global(self):
+shares = self._get_shares({global: {}})
+self.assertRaises(KeyError, shares.__getitem__, global)


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha8-530-g54a5183

2009-07-20 Thread Michael Adam
The branch, master has been updated
   via  54a51839ea65aa788b18fce8de0ae4f9ba63e4e7 (commit)
  from  c80783eafd28bb3d749761cbbed80423c908d247 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 54a51839ea65aa788b18fce8de0ae4f9ba63e4e7
Author: Rusty Russell ru...@rustcorp.com.au
Date:   Sat Jul 18 15:28:58 2009 +0930

Make tdb transaction lock recursive (samba version)

This patch replaces 6ed27edbcd3ba1893636a8072c8d7a621437daf7 and
1a416ff13ca7786f2e8d24c66addf00883e9cb12, which fixed the bug where 
traversals
inside transactions would release the transaction lock early.

This solution is more general, and solves the more minor symptom that nested
traversals would also release the transaction lock early.  (It was also 
suggestd in
Volker's comment in 6ed27ed).

This patch also applies to ctdb, if the traverse.c part is removed (ctdb's 
tdb
code never received the previous two fixes).

Tested using the testsuite from ccan (adapted to the samba code).  Thanks to
Michael Adam for feedback.

Signed-off-by: Rusty Russell ru...@rustcorp.com.au
Signed-off-by: Michael Adam ob...@samba.org

---

Summary of changes:
 lib/tdb/common/lock.c|   17 +
 lib/tdb/common/tdb_private.h |2 +-
 lib/tdb/common/traverse.c|   22 ++
 3 files changed, 20 insertions(+), 21 deletions(-)


Changeset truncated at 500 lines:

diff --git a/lib/tdb/common/lock.c b/lib/tdb/common/lock.c
index f156c0f..d812fbf 100644
--- a/lib/tdb/common/lock.c
+++ b/lib/tdb/common/lock.c
@@ -301,16 +301,21 @@ int tdb_unlock(struct tdb_context *tdb, int list, int 
ltype)
  */
 int tdb_transaction_lock(struct tdb_context *tdb, int ltype)
 {
-   if (tdb-have_transaction_lock || tdb-global_lock.count) {
+   if (tdb-global_lock.count) {
+   return 0;
+   }
+   if (tdb-transaction_lock_count  0) {
+   tdb-transaction_lock_count++;
return 0;
}
+
if (tdb-methods-tdb_brlock(tdb, TRANSACTION_LOCK, ltype, 
 F_SETLKW, 0, 1) == -1) {
TDB_LOG((tdb, TDB_DEBUG_ERROR, tdb_transaction_lock: failed to 
get transaction lock\n));
tdb-ecode = TDB_ERR_LOCK;
return -1;
}
-   tdb-have_transaction_lock = 1;
+   tdb-transaction_lock_count++;
return 0;
 }
 
@@ -320,12 +325,16 @@ int tdb_transaction_lock(struct tdb_context *tdb, int 
ltype)
 int tdb_transaction_unlock(struct tdb_context *tdb)
 {
int ret;
-   if (!tdb-have_transaction_lock) {
+   if (tdb-global_lock.count) {
+   return 0;
+   }
+   if (tdb-transaction_lock_count  0) {
+   tdb-transaction_lock_count--;
return 0;
}
ret = tdb-methods-tdb_brlock(tdb, TRANSACTION_LOCK, F_UNLCK, 
F_SETLKW, 0, 1);
if (ret == 0) {
-   tdb-have_transaction_lock = 0;
+   tdb-transaction_lock_count = 0;
}
return ret;
 }
diff --git a/lib/tdb/common/tdb_private.h b/lib/tdb/common/tdb_private.h
index ffac89f..45b85f4 100644
--- a/lib/tdb/common/tdb_private.h
+++ b/lib/tdb/common/tdb_private.h
@@ -166,7 +166,7 @@ struct tdb_context {
struct tdb_transaction *transaction;
int page_size;
int max_dead_records;
-   bool have_transaction_lock;
+   int transaction_lock_count;
volatile sig_atomic_t *interrupt_sig_ptr;
 };
 
diff --git a/lib/tdb/common/traverse.c b/lib/tdb/common/traverse.c
index 69c81e6..07b0c23 100644
--- a/lib/tdb/common/traverse.c
+++ b/lib/tdb/common/traverse.c
@@ -204,23 +204,18 @@ int tdb_traverse_read(struct tdb_context *tdb,
 {
struct tdb_traverse_lock tl = { NULL, 0, 0, F_RDLCK };
int ret;
-   bool in_transaction = (tdb-transaction != NULL);
 
/* we need to get a read lock on the transaction lock here to
   cope with the lock ordering semantics of solaris10 */
-   if (!in_transaction) {
-   if (tdb_transaction_lock(tdb, F_RDLCK)) {
-   return -1;
-   }
+   if (tdb_transaction_lock(tdb, F_RDLCK)) {
+   return -1;
}
 
tdb-traverse_read++;
ret = tdb_traverse_internal(tdb, fn, private_data, tl);
tdb-traverse_read--;
 
-   if (!in_transaction) {
-   tdb_transaction_unlock(tdb);
-   }
+   tdb_transaction_unlock(tdb);
 
return ret;
 }
@@ -237,25 +232,20 @@ int tdb_traverse(struct tdb_context *tdb,
 {
struct tdb_traverse_lock tl = { NULL, 0, 0, F_WRLCK };
int ret;
-   bool in_transaction = (tdb-transaction != NULL);
 
if (tdb-read_only || tdb-traverse_read) {
return tdb_traverse_read(tdb, fn, 

[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha8-531-g9357049

2009-07-20 Thread Jeremy Allison
The branch, master has been updated
   via  93570491712bf42b5c8dba825e7d2a40e71c0378 (commit)
  from  54a51839ea65aa788b18fce8de0ae4f9ba63e4e7 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 93570491712bf42b5c8dba825e7d2a40e71c0378
Author: Jeremy Allison j...@samba.org
Date:   Mon Jul 20 15:15:08 2009 -0700

Make cli_send_mailslot() static. Preparing to do away with 
unexpected.tdb
Jeremy.

---

Summary of changes:
 source3/include/proto.h   |7 ---
 source3/libsmb/clidgram.c |3 +--
 2 files changed, 1 insertions(+), 9 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/include/proto.h b/source3/include/proto.h
index d68aa4b..695e14b 100644
--- a/source3/include/proto.h
+++ b/source3/include/proto.h
@@ -2270,13 +2270,6 @@ bool cli_resolve_path(TALLOC_CTX *ctx,
 
 /* The following definitions come from libsmb/clidgram.c  */
 
-bool cli_send_mailslot(struct messaging_context *msg_ctx,
-  bool unique, const char *mailslot,
-  uint16 priority,
-  char *buf, int len,
-  const char *srcname, int src_type,
-  const char *dstname, int dest_type,
-  const struct sockaddr_storage *dest_ss);
 bool send_getdc_request(TALLOC_CTX *mem_ctx,
struct messaging_context *msg_ctx,
struct sockaddr_storage *dc_ss,
diff --git a/source3/libsmb/clidgram.c b/source3/libsmb/clidgram.c
index 349a833..f5dbd72 100644
--- a/source3/libsmb/clidgram.c
+++ b/source3/libsmb/clidgram.c
@@ -25,7 +25,7 @@
  * cli_send_mailslot, send a mailslot for client code ...
  */
 
-bool cli_send_mailslot(struct messaging_context *msg_ctx,
+static bool cli_send_mailslot(struct messaging_context *msg_ctx,
   bool unique, const char *mailslot,
   uint16 priority,
   char *buf, int len,
@@ -309,4 +309,3 @@ bool receive_getdc_response(TALLOC_CTX *mem_ctx,
 
return True;
 }
-


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha8-532-g04c3dfd

2009-07-20 Thread Tim Prouty
The branch, master has been updated
   via  04c3dfde0f0bc12daf0922a0fe578e3bde587fc8 (commit)
  from  93570491712bf42b5c8dba825e7d2a40e71c0378 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 04c3dfde0f0bc12daf0922a0fe578e3bde587fc8
Author: Tim Prouty tpro...@samba.org
Date:   Mon Jul 20 15:37:18 2009 -0700

lib util: Fix const warning

---

Summary of changes:
 lib/util/genrand.c |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/lib/util/genrand.c b/lib/util/genrand.c
index c51f938..5b84565 100644
--- a/lib/util/genrand.c
+++ b/lib/util/genrand.c
@@ -294,7 +294,7 @@ _PUBLIC_ uint32_t generate_random(void)
 _PUBLIC_ bool check_password_quality(const char *s)
 {
int has_digit=0, has_capital=0, has_lower=0, has_special=0, has_high=0;
-   char* reals = s;
+   const char* reals = s;
while (*s) {
if (isdigit((unsigned char)*s)) {
has_digit |= 1;


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated - release-4-0-0alpha8-540-g8e04c69

2009-07-20 Thread Tim Prouty
The branch, master has been updated
   via  8e04c69e027260e7e1f0a4cf3e58e31ed4084d8b (commit)
   via  f4530f6d2a0688e350c3c7be23f256ebceffa636 (commit)
   via  841efce8b5e931a7ec910afb7d0d8b6a123c6900 (commit)
   via  82c3f505fe2e50022b5102e6388dc3b830d235da (commit)
   via  c9b8a017147211d86662f40dcf835b152ab90cf4 (commit)
   via  5a8d70d465f28ae02f4df7a3c2905e028c2e3142 (commit)
   via  635e5e7ff038378d28c52bd5f81d24db99a77a76 (commit)
   via  12a5db45e2814b6992210d8f30908ab3e8b6bc65 (commit)
  from  04c3dfde0f0bc12daf0922a0fe578e3bde587fc8 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 8e04c69e027260e7e1f0a4cf3e58e31ed4084d8b
Author: Tim Prouty tpro...@samba.org
Date:   Mon Jul 20 14:32:32 2009 -0700

s3: Add some asserts to the filename util functions

In the smb_filename struct stream_name must equal NULL if there
is no stream name.  These asserts should catch any future offenders
of this invariant early.

commit f4530f6d2a0688e350c3c7be23f256ebceffa636
Author: Tim Prouty tpro...@samba.org
Date:   Fri Jul 10 15:43:21 2009 -0700

s3: Plumb smb_filename through open_fake_file

commit 841efce8b5e931a7ec910afb7d0d8b6a123c6900
Author: Tim Prouty tpro...@samba.org
Date:   Fri Jul 10 15:35:08 2009 -0700

s3: Separate out a new file: filename_utils.c

This is to ease the linking pain of everything that links LOCKING_OBJ

commit 82c3f505fe2e50022b5102e6388dc3b830d235da
Author: Tim Prouty tpro...@samba.org
Date:   Fri Jul 10 15:10:35 2009 -0700

s3: Move is_ntfs_stream*() to filename.c

commit c9b8a017147211d86662f40dcf835b152ab90cf4
Author: Tim Prouty tpro...@samba.org
Date:   Fri Jul 10 18:11:32 2009 -0700

s3: Finish plumbing the fsp-fsp_name smb_fname conversion through the 
modules.

commit 5a8d70d465f28ae02f4df7a3c2905e028c2e3142
Author: Tim Prouty tpro...@samba.org
Date:   Fri Jul 10 14:50:37 2009 -0700

s3: Change fsp-fsp_name to be an smb_filename struct!

commit 635e5e7ff038378d28c52bd5f81d24db99a77a76
Author: Tim Prouty tpro...@samba.org
Date:   Fri Jul 10 11:50:30 2009 -0700

s3 onefs oplocks: Replace static fstring with talloc'd dbg_ctx()

commit 12a5db45e2814b6992210d8f30908ab3e8b6bc65
Author: Tim Prouty tpro...@samba.org
Date:   Fri Jul 10 10:38:56 2009 -0700

s3: Change file_structs to be allocated with talloc instead of malloc

---

Summary of changes:
 source3/Makefile.in|   14 +-
 source3/include/proto.h|   52 ---
 source3/include/smb.h  |2 +-
 source3/locking/brlock.c   |4 +-
 source3/locking/locking.c  |   29 ++--
 source3/locking/posix.c|   37 +++--
 source3/modules/nfs4_acls.c|   34 ++--
 source3/modules/onefs_acl.c|   51 +++---
 source3/modules/onefs_open.c   |   18 +-
 source3/modules/onefs_streams.c|   10 +-
 source3/modules/vfs_acl_tdb.c  |   98 +--
 source3/modules/vfs_acl_xattr.c|   60 ---
 source3/modules/vfs_afsacl.c   |   35 +++--
 source3/modules/vfs_aixacl2.c  |   16 +-
 source3/modules/vfs_audit.c|4 +-
 source3/modules/vfs_cacheprime.c   |2 +-
 source3/modules/vfs_default.c  |4 +-
 source3/modules/vfs_extd_audit.c   |8 +-
 source3/modules/vfs_full_audit.c   |   93 ++-
 source3/modules/vfs_gpfs.c |   33 +++-
 source3/modules/vfs_hpuxacl.c  |   20 ++-
 source3/modules/vfs_hpuxacl.h  |2 +-
 source3/modules/vfs_shadow_copy2.c |4 +-
 source3/modules/vfs_smb_traffic_analyzer.c |   18 +-
 source3/modules/vfs_streams_xattr.c|   25 +--
 source3/modules/vfs_tsmsm.c|6 +-
 source3/modules/vfs_zfsacl.c   |   11 +-
 source3/printing/printfsp.c|   10 +-
 source3/smbd/aio.c |   28 ++--
 source3/smbd/blocking.c|   15 +-
 source3/smbd/close.c   |  163 ---
 source3/smbd/dosmode.c |2 +-
 source3/smbd/fake_file.c   |   29 +++-
 source3/smbd/fileio.c  |   57 +++
 source3/smbd/filename.c|  195 --
 source3/smbd/filename_util.c   |  206 +++
 source3/smbd/files.c   |   89 +++---
 source3/smbd/ipc.c |2 +-
 source3/smbd/notify.c  |7 +-
 source3/smbd/nttrans.c |   44 ++
 source3/smbd/open.c|   87 +--
 source3/smbd/oplock.c  |   24 ++-
 source3/smbd/oplock_irix.c   

[SCM] Samba Shared Repository - branch v3-4-test updated - release-4-0-0alpha7-1188-ge7c5f7c

2009-07-20 Thread Karolin Seeger
The branch, v3-4-test has been updated
   via  e7c5f7c924ae40ce3f36d352d55a92a906d92181 (commit)
  from  94303584b942135355f99d138f8dc375d8dfacfb (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-4-test


- Log -
commit e7c5f7c924ae40ce3f36d352d55a92a906d92181
Author: Jeremy Allison j...@samba.org
Date:   Wed Jul 15 14:00:41 2009 -0700

Fix bug #6551 - win98 clients cannot connect after server upgrade to 
samba-3.4.0. The values of vuid and tid were not being correctly updated in the 
struct smb_request when passed to chain_reply inside sessionsetupX and tconX. 
Jeremy.

---

Summary of changes:
 source3/smbd/reply.c |2 ++
 source3/smbd/sesssetup.c |1 +
 2 files changed, 3 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/smbd/reply.c b/source3/smbd/reply.c
index 4944d87..285056c 100644
--- a/source3/smbd/reply.c
+++ b/source3/smbd/reply.c
@@ -759,6 +759,7 @@ void reply_tcon_and_X(struct smb_request *req)
 
END_PROFILE(SMBtconX);
 
+   req-tid = conn-cnum;
chain_reply(req);
return;
 }
@@ -1924,6 +1925,7 @@ void reply_ulogoffX(struct smb_request *req)
DEBUG( 3, ( ulogoffX vuid=%d\n, req-vuid ) );
 
END_PROFILE(SMBulogoffX);
+   req-vuid = UID_FIELD_INVALID;
chain_reply(req);
 }
 
diff --git a/source3/smbd/sesssetup.c b/source3/smbd/sesssetup.c
index 2c92c41..044e398 100644
--- a/source3/smbd/sesssetup.c
+++ b/source3/smbd/sesssetup.c
@@ -1805,6 +1805,7 @@ void reply_sesssetup_and_X(struct smb_request *req)
 
SSVAL(req-outbuf,smb_uid,sess_vuid);
SSVAL(req-inbuf,smb_uid,sess_vuid);
+   req-vuid = sess_vuid;
 
if (!done_sesssetup)
max_send = MIN(max_send,smb_bufsize);


-- 
Samba Shared Repository