Re: [Samba] windows 7 share and smbclient

2010-01-25 Thread Luca Ferrari
In the case it can be useful, this is a debug trace of the session to the 
windows 7 share (maybe the final message SPNEGO login failed: Invalid 
parameter can lead to a solution):

smbclient -d 7 //s28/backupinfook -U backup 
 
INFO: Current debug levels: 
 
  all: True/7   
 
  tdb: False/0  
 
  printdrivers: False/0 
 
  lanman: False/0   
 
  smb: False/0  
 
  rpc_parse: False/0
 
  rpc_srv: False/0  
 
  rpc_cli: False/0  
 
  passdb: False/0   
 
  sam: False/0  
 
  auth: False/0 
 
  winbind: False/0  
 
  vfs: False/0  
 
  idmap: False/0
 
  quota: False/0
 
  acls: False/0 
 
  locking: False/0  
 
  msdfs: False/0
 
  dmapi: False/0
 
  registry: False/0 
 
lp_load_ex: refreshing parameters   
 
Initialising global parameters  
 
params.c:pm_process() - Processing configuration file /etc/samba/smb.conf 
 
Processing section [global]   
 
doing parameter workgroup = WORKGROUP   
 
doing parameter server string = %h server (Samba, Ubuntu)   
 
doing parameter dns proxy = no  
 
doing parameter log file = /var/log/samba/log.%m
 
doing parameter max log size = 1000 
 
doing parameter syslog = 0  
 
doing parameter panic action = /usr/share/samba/panic-action %d 
 
doing parameter encrypt passwords = true
 
doing parameter passdb backend = tdbsam 
 
doing parameter obey pam restrictions = yes 
 
doing parameter unix password sync = yes
 
doing parameter 

[Samba] Testparm: rlimit_max: rlimit_max (8192) below minimum Windows limit (16384)

2010-01-25 Thread Miguel Medalha


I just installed samba on a new server, 3.4.5-42, 64 bit version from 
Sernet, over CentOS 5.4.


When running testparm, I get the following warning:

rlimit_max: rlimit_max (8192) below minimum Windows limit (16384)

I searched Google for some answer but I couldn't find a satisfactory 
one. What should I do to solve this?

Can someone from the Samba team enlighten me on this?

Thank you!

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Vista clients having Issues Copying files from SambaServer

2010-01-25 Thread Anthony Giggins


 -Original Message-
 From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
 On Behalf Of Moray Henderson
 Sent: Tuesday, 15 December 2009 8:21 PM
 To: samba@lists.samba.org
 Subject: Re: [Samba] Vista clients having Issues Copying files from
 SambaServer
 
 Anthony wrote:
  Please update to Samba 3.4.3 or later. Many Vista and Windows 7
 support
  related issues have been addressed during the 3.4.x series.
 
  Firstly, if the Samba logs note an invalid function all, that may
 mean
  an upgrade to a more recent version of Samba is needed.  When a
 Windows
  client notes an invalid function call or an invalid file handle the
  cause may be problems in the network transport layer.
 
  Secondly, note what the Samba server log message says. Short
 translation
  is: I was taking to the client, but the client went away and did not
  respond!   The client dropped the connection.  In all likeliness
 this
  is not a Samba problem and may actually be a network problem.  It is
 a
  problem regularly seen with low-cost ethernet interfaces and cheap
  ether-switches.
 
  Kindest,
  John T.
 
 
 
 I think I already know the answer to this but do you know of any 3rd
 party
 repos that would have packages for samba 3.4.x on Centos 5.4?
 
 Cheers,
 
 Anthony
 
 ftp://ftp.sernet.de/pub/samba/experimental/centos/5/
 
 The 3.4 series should make its way into their recent and tested
 repositories eventually.

Finally got around to upgrading this to 3.4.5 from the sernet repo 
above, but I'm still seeing the same issues, I'm guessing this is 
pointing to a Switch issue? But is there anything else it could be 
before going down this route?

Cheers,

Anthony



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Documents in home folder 'Read Only'

2010-01-25 Thread Matthew Dickinson
On 1/14/10 6:28 AM, Dave Coventry dgcoven...@gmail.com wrote:

 The user seems to be logging on okay (I can't check that she's using
 her own login because I'm off-site).
 
 However, I'm still getting this in the /var/log/samba/log.reception
 
 
 server:~# tail /var/log/samba/log.reception
 [2010/01/14 14:23:40,  0] param/loadparm.c:process_usershare_file(8287)
   process_usershare_file: stat of /var/lib/samba/usershares/patienc
 failed. Permission denied
 [2010/01/14 14:23:40,  0] param/loadparm.c:process_usershare_file(8287)
   process_usershare_file: stat of /var/lib/samba/usershares/patienc
 failed. No such file or directory
 [2010/01/14 14:23:40,  0] smbd/service.c:make_connection(1370)
   reception (:::192.168.1.7) couldn't find service patienc
 [2010/01/14 14:23:40,  0] param/loadparm.c:process_usershare_file(8287)
   process_usershare_file: stat of /var/lib/samba/usershares/patienc
 failed. No such file or directory
 [2010/01/14 14:23:40,  0] smbd/service.c:make_connection(1370)
   reception (:::192.168.1.7) couldn't find service patienc


Notice how the last character of the lines are truncated? Shouldn't there be
an 'e' on the end the username?

I'm seeing a lot of that the truncation too (see
https://bugzilla.samba.org/show_bug.cgi?id=6782)

Matthew


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Testparm: rlimit_max: rlimit_max (8192) below minimum Windows limit (16384)

2010-01-25 Thread Martin Hochreiter

Am 2010-01-25 12:44, schrieb Miguel Medalha:


I just installed samba on a new server, 3.4.5-42, 64 bit version from 
Sernet, over CentOS 5.4.


When running testparm, I get the following warning:

rlimit_max: rlimit_max (8192) below minimum Windows limit (16384)

I searched Google for some answer but I couldn't find a satisfactory 
one. What should I do to solve this?

Can someone from the Samba team enlighten me on this?

Thank you!


Hi, I am not from the samba team but I stepped into the same situation:

you have to set the ulimit -n to the windows limit
 ulimit -n 16384 
(Max open files)

That is valid for the console you are in

regards
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba 3.4.5 on ubuntu 8.04 64 bit - Core dumps

2010-01-25 Thread Martin Hochreiter

I recently installed Samba 3.4.5 on Ubuntu 8.04 64 bit and
had to downgrad again because of massive core panics:

I can't really tell you what caused that (maybe while printing via 
samba-cups) - can
somebody give me a hint or tell me what information you need to analyze 
that please?


[2010/01/25 13:46:52,  0] lib/fault.c:46(fault_report)
  ===
[2010/01/25 13:46:52,  0] lib/fault.c:47(fault_report)
  INTERNAL ERROR: Signal 11 in pid 7553 (3.4.5)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2010/01/25 13:46:52,  0] lib/fault.c:49(fault_report)

  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2010/01/25 13:46:52,  0] lib/fault.c:50(fault_report)
  ===
[2010/01/25 13:46:52,  0] lib/util.c:1480(smb_panic)
  PANIC (pid 7553): internal error
[2010/01/25 13:46:52,  0] lib/util.c:1584(log_stack_trace)
  BACKTRACE: 25 stack frames:
   #0 /opt/samba345/sbin/smbd(log_stack_trace+0x1a) [0x6bc42b]
   #1 /opt/samba345/sbin/smbd(smb_panic+0x55) [0x6bc52a]
   #2 /opt/samba345/sbin/smbd [0x6ad1ae]
   #3 /lib/libpthread.so.0 [0x7fa381cb77d0]
   #4 /etc/samba/libtalloc.so.1 [0x7fa380da9761]
   #5 /etc/samba/libtalloc.so.1(talloc_free+0x1cc) [0x7fa380dab92e]
   #6 /opt/samba345/sbin/smbd [0x6249ca]
   #7 /opt/samba345/sbin/smbd(api_pipe_request+0x3ac) [0x656ef5]
   #8 /opt/samba345/sbin/smbd [0x650b46]
   #9 /opt/samba345/sbin/smbd(np_write_send+0x912) [0x651a13]
   #10 /opt/samba345/sbin/smbd [0x4a7456]
   #11 /opt/samba345/sbin/smbd [0x4a79d9]
   #12 /opt/samba345/sbin/smbd(reply_trans+0x6b7) [0x4a85af]
   #13 /opt/samba345/sbin/smbd [0x4fee33]
   #14 /opt/samba345/sbin/smbd [0x5012e8]
   #15 /opt/samba345/sbin/smbd [0x501a6c]
   #16 /opt/samba345/sbin/smbd(run_events+0x131) [0x6cb350]
   #17 /opt/samba345/sbin/smbd(smbd_process+0x790) [0x500cb7]
   #18 /opt/samba345/sbin/smbd [0x947e15]
   #19 /opt/samba345/sbin/smbd(run_events+0x131) [0x6cb350]
   #20 /opt/samba345/sbin/smbd [0x6cb5b0]
   #21 /opt/samba345/sbin/smbd(_tevent_loop_once+0x84) [0x6cb929]
   #22 /opt/samba345/sbin/smbd(main+0xf17) [0x947b99]
   #23 /lib/libc.so.6(__libc_start_main+0xf4) [0x7fa3806481c4]
   #24 /opt/samba345/sbin/smbd [0x48e629]
[2010/01/25 13:46:52,  0] lib/fault.c:326(dump_core)
  dumping core in /var/log/samba/cores/smbd

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.4.5 on ubuntu 8.04 64 bit - Core dumps

2010-01-25 Thread Volker Lendecke
On Mon, Jan 25, 2010 at 03:25:46PM +0100, Martin Hochreiter wrote:
 I recently installed Samba 3.4.5 on Ubuntu 8.04 64 bit and
 had to downgrad again because of massive core panics:

Can you try to reproduce that under valgrind?

Thanks,

Volker
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.4.5 on ubuntu 8.04 64 bit - Core dumps

2010-01-25 Thread Martin Hochreiter

Am 2010-01-25 15:41, schrieb Volker Lendecke:

On Mon, Jan 25, 2010 at 03:25:46PM +0100, Martin Hochreiter wrote:
   

I recently installed Samba 3.4.5 on Ubuntu 8.04 64 bit and
had to downgrad again because of massive core panics:
 

Can you try to reproduce that under valgrind?

   

Volker, I am afraid I don't have any clue what valgrind is  :-[
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.4.5 on ubuntu 8.04 64 bit - Core dumps

2010-01-25 Thread Volker Lendecke
On Mon, Jan 25, 2010 at 03:53:07PM +0100, Martin Hochreiter wrote:
 Am 2010-01-25 15:41, schrieb Volker Lendecke:
 On Mon, Jan 25, 2010 at 03:25:46PM +0100, Martin Hochreiter wrote:

 I recently installed Samba 3.4.5 on Ubuntu 8.04 64 bit and
 had to downgrad again because of massive core panics:
  
 Can you try to reproduce that under valgrind?
 

 Volker, I am afraid I don't have any clue what valgrind is  :-[

Look under www.valgrind.org. It's a memory check tool.

Volker


pgp3mG86G5CLL.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba Serving NFS Mounted Directories

2010-01-25 Thread Jon Forrest

On 1/23/2010 5:19 AM, Nicholas Brealey wrote:

The Sun 7310 is a storage appliance. It is not running Solaris 10 but
runs an OS based on Open Solaris with CIFS and Windows style
authentication integrated in the kernel.


I lied a little. I do know how to login to this box, but
that's only because a Sun support person told me how.
This was necessary to fix a non-Samba related problem.
It sure looks like Solaris to me. In any case,
I had to promise I wouldn't make any changes
that weren't authorized by Sun. I intend on keeping
this promise.


Installing Samba is not an option.


I agree 100%.


You really should be using the integrated CIFs server.
It is probably simpler to set up than Samba but is probably not as
flexible (has fewer configuration options).


I'm not sure how simple it is to setup. For example,
I couldn't even figure out what share name it
generates. Although the performance and price of the 7310
are excellent, its documentation is not.


There is a simulator you can play with to learn how to set it up.


I know. I used it when I was deciding whether to buy the 7310.

 The manual is available on the Internet or from the storage device.

The manual is just the help system on the device, as you say.
It says very little about how to set up CIFS shares.


There is a forum where these devices are discussed. You almost certainly
got a support contract when you bough the device.


I didn't know about a support forum. I'll check into that.
I do have a support contract but if it's necessary to
call support for something as simple as this, then somebody
has blown it - either Sun or me.


If you cannot use its CIFS server (ie if you are using a NT 4 style
domain or a Samba PDC) perhaps using iSCSI to the Linux box and sharing
with Samba is the next best option.


None of these apply.

Besides, I'd still like to understand the fundamental issue,
which is why Samba behaves differently when it server NFS
mounts than it does when it serves local files.


http://forums.sun.com/forum.jspa?forumID=831


I'll check there. Thanks.

Cordially,
--
Jon Forrest
Research Computing Support
College of Chemistry
173 Tan Hall
University of California Berkeley
Berkeley, CA
94720-1460
510-643-1032
jlforr...@berkeley.edu

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba Serving NFS Mounted Directories

2010-01-25 Thread Jon Forrest

On 1/23/2010 12:48 AM, Volker Lendecke wrote:


You need to get over that. Running Samba on NFS imports is a
really bad idea. At least every month people report strange
lockups, timeouts and other weird things on this list that
can be attributed to NFS imports.


I'm not doubting that what you say is
true, since I've seen it myself, but
whenever possible I try to get deeper
understanding of what causes these
strange problems. That's one
of the reasons why I posted my
question.

So, I'll restate the question - what is it
about NFS exports that gives Samba trouble
that doesn't occur when serving local files?

Cordially,
--
Jon Forrest
Research Computing Support
College of Chemistry
173 Tan Hall
University of California Berkeley
Berkeley, CA
94720-1460
510-643-1032
jlforr...@berkeley.edu

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] problems with cp -a to a samba share

2010-01-25 Thread B.Wiggert
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Hi @ samba,

I have running two machines:

PC1 Samba Server @ ubuntu v9.10
PC2 Samba Client @ ubuntu v9.10

Anything works well and as expected, but...

when I copy files from PC2 to a share on PC1 for backup, i.e.

cp -a /home/user1 /media/share/backup/user1

then all data get copied but the file-permissons wouldnt be set

cp reports an error on each file it copies:

cp: preserving permissions for `/media/share/backup/user1/file1':
Permission denied

The samba-share DATEN of PC2 is mounted at /media/share


How can _i setup the samba-server that a user can cp -a files to a
share?

The samba server runs in secuirty-mode=user

looking forward for any help

regards

Bjoern

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAktc8wsACgkQhLA53l6XA/3FtgCfUprWqpABcZUBmOLg8PMWwsO9
xKAAn225uy5EwFJKhTpPPvPaPVaO0pZa
=zFrY
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] smbd not talking to winbindd?

2010-01-25 Thread David Magda
Hello,

I'm running a compiled-from-source instance of Samba 3.4.5 on RHEL AS 4u2,
and am having some flakiness with AD-Unix mappings. We're talking to a
Windows 2008R2 server, with AD in 2003 mode I believe.

What the issue appears to be is that smbd does not seem to want to talk
with winbindd. One moment my account worked:

[2010/01/25 08:13:07,  3] libsmb/ntlmssp.c:745(ntlmssp_server_auth)
  Got user=[dmagda] domain=[ADS] workstation=[TOR123] len1=24 len2=24
[2010/01/25 08:13:07,  3] auth/auth.c:222(check_ntlm_password)
  check_ntlm_password:  Checking password for unmapped user
[ads]\[dmag...@[tor123] with the new password interface
[2010/01/25 08:13:07,  3] auth/auth.c:225(check_ntlm_password)
  check_ntlm_password:  mapped user is: [ads]\[dmag...@[tor123]
[...]
[2010/01/25 08:13:07,  3] auth/auth.c:225(check_ntlm_password)
  check_ntlm_password:  mapped user is: [ads]\[dmag...@[tor123]
[2010/01/25 08:13:07,  3] auth/auth.c:271(check_ntlm_password)
  check_ntlm_password: winbind authentication for user [dmagda] succeeded
[2010/01/25 08:13:07,  2] auth/auth.c:310(check_ntlm_password)
  check_ntlm_password:  authentication for user [dmagda] - [dmagda] -
[ADS+dmagda] succeeded
[2010/01/25 08:13:07,  3] smbd/password.c:269(register_existing_vuid)
  register_existing_vuid: User name: ADS+dmagda Real name:
[2010/01/25 08:13:07,  3] smbd/password.c:279(register_existing_vuid)
  register_existing_vuid: UNIX uid 16777216 is UNIX user ADS+dmagda, and
will be vuid 100
[2010/01/25 08:13:07,  3] smbd/password.c:211(register_homes_share)
  Adding homes service for user 'ADS+dmagda' using home directory:
'/var/empty/sshd'
[2010/01/25 08:13:07,  3] smbd/service.c:1047(make_connection_snum)
  tor123 (:::10.aaa.bbb.ccc) connect to service IPC$ initially as user
ADS+dmagda (uid=16777216, gid=16777218) (pid 22758)

I then uncommented a share in smb.conf and restarted smbd:

[2010/01/25 08:13:54,  3] param/loadparm.c:9040(lp_load_ex)
  lp_load_ex: refreshing parameters
Initialising global parameters
[2010/01/25 08:13:54,  3] ../lib/util/params.c:550(pm_process)
  params.c:pm_process() - Processing configuration file /etc/samb/smb.conf
[2010/01/25 08:13:54,  3] param/loadparm.c:7727(do_section)
  Processing section [global]
[...]

And suddenly I no longer get a mapping:

[2010/01/25 08:14:08,  3] smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego)
  Doing spnego session setup
[2010/01/25 08:14:08,  3] smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego)
  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002
5.1] PrimaryDomain=[]
[2010/01/25 08:14:08,  3] libsmb/ntlmssp.c:745(ntlmssp_server_auth)
  Got user=[dmagda] domain=[ADS] workstation=[TOR123] len1=24 len2=24
[2010/01/25 08:14:08,  3] auth/auth.c:222(check_ntlm_password)
  check_ntlm_password:  Checking password for unmapped user
[ads]\[dmag...@[tor123] with the new password interface
[2010/01/25 08:14:08,  3] auth/auth.c:225(check_ntlm_password)
  check_ntlm_password:  mapped user is: [ads]\[dmag...@[tor123]
[...]
[2010/01/25 08:14:08,  2] auth/auth.c:320(check_ntlm_password)
  check_ntlm_password:  Authentication for user [dmagda] - [dmagda]
FAILED with error NT_STATUS_NO_SUCH_USER
[2010/01/25 08:14:08,  3] smbd/error.c:60(error_packet_set)
  error packet at smbd/sesssetup.c(122) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE

Reverting the change (i.e., re-commenting out that the share and
restarting) didn't work: things still stayed broken.

If I try putting my account into /etc/passwd, then all of a sudden things
work again. Also, if I add a username map entry to my smb.conf (and
comment out all the uidmap/winbind stuff), and have the following line in
/etc/samba/smbusers:

nobody = *

Things generally work again as well.

Is there any particular reason why smbd would stop talking with winbindd?

I don't necessarily mind using a generic 'smbusers' file, as access is 
read-only, but are there any real differences between mapping to the Unix
nobody account and getting a random UID from winbind?



My sanitized smb.conf file:

[global]
server string = fileserv (File Server)
netbios name = FILESERV

workgroup = ADS
security = domain
password server = adchost1, adchost2, adshost3

wins server = 111.222.333.444, 222.333.444.555
domain master = no
local master = no
unix password sync = false

lock directory = /var/spool/locks
max log size = 0
log level = 1
socket options = SO_KEEPALIVE
deadtime = 15
kernel oplocks = yes
aio read size = 1

disable spoolss = yes
show add printer wizard = no
printing = bsd
client schannel = no   # doesn't help, with or without this line

passdb backend = tdbsam
idmap backend = tdb
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
template shell = /bin/false
template homedir = /var/empty/sshd

   

Re: [Samba] Samba 3.4 Panic in Debian

2010-01-25 Thread Dale Schroeder


On 01/18/2010 9:16 AM, Christian Perrier wrote:

Dale Schroeder a écrit :

   

I've suspected that ever since reading Karolin's release notes for
3.4.4.  Debian has not yet released 3.4.4
to testing, but I'll gladly try it as soon as it's available.  For the
 

That should happen in about one week, assuming that no dependency chain
is blocking it.

(roughly speaking, releasing to testing is automated and happens after
10 days in unstable, if no RC bug appeared *and* if the dependecies can
be satisfied in testing)

   

interim, all winbind systems are reverted
back to stable (3.2.5-4lenny7).  The ldap and standalone systems run
perfectly well under 3.4.3.
 

I think you can anyway safely (but manually) install 3.4.4 packages on
testing systems with dpkg (better try it with --dry-run before).
   
Things got worse today, as winbind on stable (3.2.5) now ceases to 
work.  It appears the join is no longer valid, and a testjoin yields 
errors concerning encryption (as does net ads join):

0] libads/sasl.c:ads_sasl_spnego_bind(819)
kinit succeeded but ads_sasl_spnego_krb5_bind failed: Program lacks 
support for encryption type


Upgrade to unstable (3.4.5) yields the same error message.  To cover all 
the bases, I also tried testing 3.4.3, and it also has the same error, 
although the order of the 1st line is slightly different:

0] libads/sasl.c:819 (ads_sasl_spegno_bind)

This time, it seems to be an ADS specific winbind error.

I have attempted with the current kernel - 2.6.32-trunk-686 and the 
previous kernel - 2.6.30-2-686.


What kind of encryption change has occurred, and which program is it 
referring to as lacking the encryption type - samba or krb5?




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Testparm: rlimit_max: rlimit_max (8192) below minimum Windows limit (16384)

2010-01-25 Thread Jeremy Allison
On Mon, Jan 25, 2010 at 11:44:03AM +, Miguel Medalha wrote:

 I just installed samba on a new server, 3.4.5-42, 64 bit version from  
 Sernet, over CentOS 5.4.

 When running testparm, I get the following warning:

 rlimit_max: rlimit_max (8192) below minimum Windows limit (16384)

 I searched Google for some answer but I couldn't find a satisfactory  
 one. What should I do to solve this?
 Can someone from the Samba team enlighten me on this?

It's a warning, you can safely ignore it. Windows 7 clients need to
have exactly the same number of open handles available as Windows
servers, else it fails in some file copy situations with a out of
handles message. Samba has taken care of it for you, but it's just
letting you know your fd limit is set a bit low.

Jeremy
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba Serving NFS Mounted Directories

2010-01-25 Thread Jon Forrest

On 1/22/2010 5:00 PM, Ray Van Dolson wrote:


First of all, you really don't want to re-export NFS mounts via Samba.


I can't argue with this since I've felt the pain.
However, I still can't say that I understand its fundamental
cause. Here's my current understanding.

Assuming that network bandwidth isn't an issue,
which it isn't in my case, then, the lockups, timeouts, and
other weird things that occur must be because related to
how Samba emulates Windows' locking behavior on top of NFS mounts,
which have their own locking semantics.

Although I'd be the first to admit that what
I'm doing isn't very common, and probably
doesn't deserve much, if any, attention from the Samba
developers, I think that this should work - at least
it should work better than it currently does.


Secondly, if you absolutely must do it, I recommend the following
settings:



[global]
 # your other options here...
 oplocks = No
 level2 oplocks = No

On certain shares, you may want to set:

 posix locking = No


These settings seem to do the trick.

I sincerely appreciate the comments that I received on this
issue. I hope bring this up helps other people facing this
problem, if any.

Cordially,
--
Jon Forrest
Research Computing Support
College of Chemistry
173 Tan Hall
University of California Berkeley
Berkeley, CA
94720-1460
510-643-1032
jlforr...@berkeley.edu

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] single stream performance issue, Win2K, WinXP, Samba 3.2.5-4lenny7 (Debian Lenny)

2010-01-25 Thread Stan Hoeppner
Volker Lendecke put forth on 1/25/2010 1:28 AM:
 On Mon, Jan 25, 2010 at 12:14:36AM -0600, Stan Hoeppner wrote:
 Volker Lendecke put forth on 1/24/2010 6:51 AM:
 On Sun, Jan 24, 2010 at 02:09:51PM +0200, Michael Wood wrote:
 Except that he said I can copy files between the Win2K and WinXP
 machines at just over 10MB/s in a single stream and max out the 11MB/s
 with two streams.  I am assuming he used the same client in that test
 as he did with the test against Samba.  So from what he's said it
 seems that he gets more speed with a Windows server than with Samba
 for the same client.

 So what we need is a full network trace of both cases.

 Actually I'll give you something slightly different, and more to the original
 question.  I've taken two tcp captures on the Samba server machine.  Both
 transfers were performed using the Windows 2000 cli copy command pulling a
 36MB avi file from a share on the Samba server.  The first test was a single
 stream copy.  The second test was a dual stream copy of the same file
 concurrently to two different destination directories.  I also had iftop 
 running
 during the tests.  The single stream transfer maxed out at just over 64Mb/s.
 The dual stream test maxed out at 92Mb/s.  Following are the two tcpdump 
 output
 files using tcpdump -p -s 0 -w FILE port 445:

 http://www.hardwarefreak.com/smb_single_stream
 http://www.hardwarefreak.com/smb_dual_stream
 
 The dual-stream one is kindof limited help. The interesting
 piece is how Win-Win does its thing faster, so we need to
 see that one.

I think something is wrong.  I downloaded Wireshark Win32.  When running

tshark -p -w smb-winwin-single-stream port 445

the transfer rate is half what it is without Wireshark running.  What am I doing
wrong?

Thanks.

-- 
Stan
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Upgrade from 3.0.4 to 3.4.5 gotchas?

2010-01-25 Thread Joe

I'm about to install 3.4.5 over 3.0.4 on an old FreeBSD 5.2.1 server from
source.  The server is backed up to tape.

Could I make life easier by backing up some files by hand to another directory?

In theory should make install be all I have to do?  (yes I ran configure and 
make)

Will the old smb.conf need modified?

Anything else to watch out for?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Upgrade from 3.0.4 to 3.4.5 gotchas?

2010-01-25 Thread John Drescher
On Mon, Jan 25, 2010 at 1:03 PM, Joe j...@freakyacres.com wrote:
 I'm about to install 3.4.5 over 3.0.4 on an old FreeBSD 5.2.1 server from
 source.  The server is backed up to tape.

 Could I make life easier by backing up some files by hand to another
 directory?

 In theory should make install be all I have to do?  (yes I ran configure
 and make)

 Will the old smb.conf need modified?


Yes definitely. You are going ahead 6 years of development.

Normally you are supposed to take a look at the change logs between
versions to determine what parameters have been changed or removed but
that would be very painful for that type of move.

I would run

testparm

before starting samba and fix any thing it complains about.

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba Serving NFS Mounted Directories

2010-01-25 Thread Helmut Hullen
Hallo, Jon,

Du meintest am 25.01.10:

 First of all, you really don't want to re-export NFS mounts via
 Samba.

 I can't argue with this since I've felt the pain.

I have tried it (NFS mount as share). Sometimes it run, sometimes it  
creeped, sometimes it was dead.
All oplocks were set as recommended - wasn't enough to cure the system.

Mounting per cifs: no more problems.

Viele Gruesse!
Helmut
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] problems with cp -a to a samba share

2010-01-25 Thread Helmut Hullen
Hallo, B.Wiggert,

Du meintest am 25.01.10:


 I have running two machines:

 PC1 Samba Server @ ubuntu v9.10
 PC2 Samba Client @ ubuntu v9.10

 Anything works well and as expected, but...

 when I copy files from PC2 to a share on PC1 for backup, i.e.

 cp -a /home/user1 /media/share/backup/user1

 then all data get copied but the file-permissons wouldnt be set

 cp reports an error on each file it copies:

 cp: preserving permissions for `/media/share/backup/user1/file1':
 Permission denied

I see this message most times when I try to copy from e2fs oder e3fs to  
vfat (from Linux to DOS/Windows).

What kind of filesystem is on /media/share/backup/user1 ?

Viele Gruesse!
Helmut
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba+LDAP + Primary GIDs

2010-01-25 Thread Kris Lou
PDC Results:
SID for local machine KIF is: S-1-5-21-1297059763-2273326489-166094
SID for domain MLC is: S-1-5-21-957249707-1866601452-441284377

Openfiler Results:
SID for local machine VADER is: S-1-5-21-2859034502-3981372097-2611941478
SID for domain MLC is: S-1-5-21-957249707-1866601452-441284377

As you can see, the domain SIDs match.

Also, here's the global portion of the Openfiler smb.conf and an example
share (portions edited). About this - I can obviously edit the smb.conf, but
it gets overwritten by the Openfiler gui whenever changes are made.  Looking
at the file, I'm not understanding where the group security settings are
being placed.  It looks like Openfiler runs with Samba 3.2.13

# Global settings
[global]

workgroup = MLC
server string = Openfiler NAS
netbios name = VADER
wins server = pdc.ip.add.ress  //edited
password server = pdc.ip.add.ress   //edited
realm =
; interfaces = 192.168.12.2/24 192.168.13.2/24
; remote announce = 92.168.1.255 192.168.2.44
; domain logons = yes
log file = /var/log/samba/%m.log
max log size = 0
; hosts deny = all
map to guest = Bad User
guest account = ofguest
display charset = LOCALE
unix charset = UTF-8
dos charset = CP850
ldap ssl = no
ldap admin dn =
 //edited
ldap suffix =
 //edited
encrypt passwords = yes
security = user
passdb backend = ldapsam:ldap://pdc.ip.add.ress  //edited
ldap user suffix = ou=People
ldap group suffix = ou=Group
smb passwd file = /etc/samba/smbpasswd
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
pam password change = yes
; username map = /etc/samba/smbusers
obey pam restrictions = yes
load printers = no
domain master = no
local master = no
preferred master = no
os level = 0

[Purchasing]
comment = Purchasing Share
path = /mnt/fileshare/Purchasing/Purchasing
read only = no
writeable = yes
oplocks = yes
level2 oplocks = yes
force security mode = 0
dos filemode = yes
dos filetime resolution = yes
dos filetimes = yes
fake directory create times = yes
browseable = yes
csc policy = manual
share modes = yes
veto oplock files = /*.mdb/*.MDB/*.dbf/*.DBF/
veto files = /*:Zone.Identifier:*/
create mode = 0770
directory mode = 2770
printable = no
guest ok = no
hosts allow =  23.23.23.0/24
hosts readonly allow =
store dos attributes = yes
map acl inherit = yes
vfs objects = shadow_copy




Kris Lou
k...@themusiclink.net


On Sat, Jan 23, 2010 at 3:34 PM, Rob Shinn mor...@tuxedo.darktech.orgwrote:

  What does your 'net getdomainsid' or 'net getlocalsid' output look like?


 Kris Lou wrote:

 Hi Rob,

 Thanks for the quick reply - Here it is (mostly with some cut and paste).

 CentOS 5.4
 Samba  3.2.15

 dn: cn=Domain Admins,ou=Group,dc=themusiclink,dc=net
 description: Netbios Domain Administrators
 sambaSID: S-1-5-21-957249707-1866601452-441284377-512
 sambaGroupType: 2
 displayName: Domain Admins
 structuralObjectClass: posixGroup
 entryUUID: 1a60146c-cfad-102d-96b0-6fd9fc452718
 creatorsName: cn=Manager,dc=themusiclink,dc=net
 createTimestamp: 20090507234700Z
 gidNumber: 512
 cn: Domain Admins
 userPassword:: e2NyeXB0fXg=
 objectClass: posixGroup
 objectClass: top
 objectClass: sambaGroupMapping
 memberUid:
 memberUid:
 memberUid:
 entryCSN: 20091028001757Z#01#00#00
 modifiersName: cn=Manager,dc=themusiclink,dc=net
 modifyTimestamp: 20091028001757Z

 dn: cn=Domain Users,ou=Group,dc=themusiclink,dc=net
 description: Netbios Domain Users
 sambaSID: S-1-5-21-957249707-1866601452-441284377-513
 sambaGroupType: 2
 displayName: Domain Users
 structuralObjectClass: posixGroup
 entryUUID: 1a7ebb60-cfad-102d-96b1-6fd9fc452718
 creatorsName: cn=Manager,dc=themusiclink,dc=net
 createTimestamp: 20090507234700Z
 gidNumber: 513
 cn: Domain Users
 userPassword:: e2NyeXB0fXg=
 objectClass: posixGroup
 objectClass: top
 objectClass: sambaGroupMapping
 memberUid:
 memberUid:
 entryCSN: 20091215225639Z#01#00#00
 modifiersName: cn=Manager,dc=themusiclink,dc=net
 modifyTimestamp: 20091215225639Z

 dn: cn=Domain Guests,ou=Group,dc=themusiclink,dc=net
 description: Netbios Domain Guests Users
 sambaSID: S-1-5-21-957249707-1866601452-441284377-514
 sambaGroupType: 2
 displayName: Domain Guests
 structuralObjectClass: posixGroup
 entryUUID: 1a845502-cfad-102d-96b2-6fd9fc452718
 creatorsName: cn=Manager,dc=themusiclink,dc=net
 createTimestamp: 20090507234700Z
 objectClass: posixGroup
 objectClass: top
 objectClass: sambaGroupMapping
 gidNumber: 514
 cn: Domain Guests
 userPassword:: e2NyeXB0fXg=
 memberUid: design
 memberUid: fedex
 memberUid: infobox
 memberUid: mailbox
 memberUid: test
 entryCSN: 20090521203023Z#02#00#00
 modifiersName: 

[Samba] don't show Wrong Password message

2010-01-25 Thread moshe levi
Hi all,

I notice that when a user is entering a wrong password on a domain user.
I get a message
Wrong Password
Incorrect Login.

Is there a way to configure pam_winbind.so not to show Wrong Password
message?

I tried pam_winbind.so silent but is didn't work.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Getting Error More data is available

2010-01-25 Thread Ganju Yadav
All, I am not sure if this has already been discussed, as I can;t find any
searchable archive for this list.

I recently added a new Samba server running 3.4.5 on RedHat AS 5.4. However
when I try to map shares on my Windows XP client, I get error More data is
available.

- I can browse the Samba server fine, but can;r map to them.
- Same smb.conf file works just fine on another Solaris 8 Samba server
running version 3.0.27.

Any help will be appreciated.

Regards.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] single stream performance issue, Win2K, WinXP, Samba 3.2.5-4lenny7 (Debian Lenny)

2010-01-25 Thread Stan Hoeppner
Stan Hoeppner put forth on 1/25/2010 12:07 PM:
 Volker Lendecke put forth on 1/25/2010 1:28 AM:
 On Mon, Jan 25, 2010 at 12:14:36AM -0600, Stan Hoeppner wrote:
 Volker Lendecke put forth on 1/24/2010 6:51 AM:
 On Sun, Jan 24, 2010 at 02:09:51PM +0200, Michael Wood wrote:
 Except that he said I can copy files between the Win2K and WinXP
 machines at just over 10MB/s in a single stream and max out the 11MB/s
 with two streams.  I am assuming he used the same client in that test
 as he did with the test against Samba.  So from what he's said it
 seems that he gets more speed with a Windows server than with Samba
 for the same client.

 So what we need is a full network trace of both cases.

 Actually I'll give you something slightly different, and more to the 
 original
 question.  I've taken two tcp captures on the Samba server machine.  Both
 transfers were performed using the Windows 2000 cli copy command pulling a
 36MB avi file from a share on the Samba server.  The first test was a single
 stream copy.  The second test was a dual stream copy of the same file
 concurrently to two different destination directories.  I also had iftop 
 running
 during the tests.  The single stream transfer maxed out at just over 64Mb/s.
 The dual stream test maxed out at 92Mb/s.  Following are the two tcpdump 
 output
 files using tcpdump -p -s 0 -w FILE port 445:

 http://www.hardwarefreak.com/smb_single_stream
 http://www.hardwarefreak.com/smb_dual_stream

 The dual-stream one is kindof limited help. The interesting
 piece is how Win-Win does its thing faster, so we need to
 see that one.
 
 I think something is wrong.  I downloaded Wireshark Win32.  When running
 
 tshark -p -w smb-winwin-single-stream port 445
 
 the transfer rate is half what it is without Wireshark running.  What am I 
 doing
 wrong?

This is rather interesting, and disheartening.  I've just spent 30 minutes
playing with tshark and windump.  For small file transfers, the presence of the
capture tools running cuts the network interface performance in half.  If I copy
a 600MB file, the rate gradually increases to 10MB/s but only after about 45
seconds.  Given my limited outbound, I doubt anyone wishes to try to download a
600MB file from my server, nor analyze the contents of such a behemoth.

What Windows capture tool is available that does not itself *cause* a further
performance problem in the act of capturing the data to solve one?  This is a
ridiculous situation.  This machine has a 2GHz AthlonXP CPU, 1GB RAM, and a
120GB 7200RPM IDE disk.  CPU for tshark or windump never exceeds 25%.  Why are
these capture tools doing this?  They've created a catch 22.  I can't report the
data without the capture, but the capture ruins the data.

This is very, very frustrating.  tcpdump on Debian has no such problems, and
that machine is a lowly dual 550 with only 384MB of PC100.  However, it's Linux
instead of Windows, which helps tremendously.  And, it's got an Intel Pro 100
server adapter in it whereas the workstation has an integrated nVidia nForce2
MCP 10/100 motherboard down NIC.

Please help alleviate the frustration here and get me back on the path to
solving this performance issue.

Thanks.

-- 
Stan
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Testparm: rlimit_max: rlimit_max (8192) below minimum Windows limit (16384) - SOLVED

2010-01-25 Thread Miguel Medalha


I just installed samba on a new server, 3.4.5-42, 64 bit version from 
Sernet, over CentOS 5.4.


When running testparm, I get the following warning:

rlimit_max: rlimit_max (8192) below minimum Windows limit (16384)



In order to make the necessary change permanent, I entered the following 
line in /etc/security/limits.conf:


* - nofile 16384

The warning previously given by testparm is now gone.

From limits.conf's header:

«Quote:

- the wildcard *, for default entry
- nofile - max number of open files

End of quote»

Thanks to those who answered my question.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Getting Error More data is available

2010-01-25 Thread Ganju Yadav
One more thing to add, test parm does not return any error message. Here is
Global section of smb.conf:

[global]
workgroup = SAMBASERVERS
netbios name = TSTSMB
security = SHARE
encrypt passwords = No
guest account = EMCNT
username map = /opt/samba-3.4.5/lib/test-username-map
password level = 4
log level = 1
log file = /opt/samba-3.4.5/log/%m.%a
max log size = 20
max xmit = 65535
name resolve order = hosts wins bcast lmhosts
deadtime = 30
socket options = TCP_NODELAY IPTOS_LOWDELAY
load printers = No
os level = 40

As I said earlier, same smb.conf works just fine on another Samba server
running older version 3.0.27 on a Solaris 8 server.

Any help will be appreciated.

Regards.

On Mon, Jan 25, 2010 at 2:41 PM, Ganju Yadav ganju...@gmail.com wrote:

 All, I am not sure if this has already been discussed, as I can;t find any
 searchable archive for this list.

 I recently added a new Samba server running 3.4.5 on RedHat AS 5.4. However
 when I try to map shares on my Windows XP client, I get error More data is
 available.

 - I can browse the Samba server fine, but can;r map to them.
 - Same smb.conf file works just fine on another Solaris 8 Samba server
 running version 3.0.27.

 Any help will be appreciated.

 Regards.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] single stream performance issue, Win2K, WinXP, Samba 3.2.5-4lenny7 (Debian Lenny)

2010-01-25 Thread Michael Wood
2010/1/25 Stan Hoeppner s...@hardwarefreak.com:
[...]
 This is rather interesting, and disheartening.  I've just spent 30 minutes
 playing with tshark and windump.  For small file transfers, the presence of 
 the
 capture tools running cuts the network interface performance in half.  If I 
 copy
 a 600MB file, the rate gradually increases to 10MB/s but only after about 45
 seconds.  Given my limited outbound, I doubt anyone wishes to try to download 
 a
 600MB file from my server, nor analyze the contents of such a behemoth.

 What Windows capture tool is available that does not itself *cause* a further
 performance problem in the act of capturing the data to solve one?  This is a
 ridiculous situation.  This machine has a 2GHz AthlonXP CPU, 1GB RAM, and a
 120GB 7200RPM IDE disk.  CPU for tshark or windump never exceeds 25%.  Why are
 these capture tools doing this?  They've created a catch 22.  I can't report 
 the
 data without the capture, but the capture ruins the data.
[...]

If you can find a spare box with two NICs in it, you could set up a
Linux box as a bridge (even running from a live CD) and run tcpdump on
that.

Otherwise, maybe this helps:
http://support.microsoft.com/kb/812953

Wireshark seems to be able to load Microsoft NetMon captures, so I
think that should work too and might not cause the performance drop
that tshark/windump (winpcap) do.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Upgrade from 3.0.4 to 3.4.5 gotchas?

2010-01-25 Thread Michael Wood
2010/1/25 John Drescher dresche...@gmail.com:
 On Mon, Jan 25, 2010 at 1:03 PM, Joe j...@freakyacres.com wrote:
 I'm about to install 3.4.5 over 3.0.4 on an old FreeBSD 5.2.1 server from
 source.  The server is backed up to tape.

 Could I make life easier by backing up some files by hand to another
 directory?

 In theory should make install be all I have to do?  (yes I ran configure
 and make)

 Will the old smb.conf need modified?


 Yes definitely. You are going ahead 6 years of development.

 Normally you are supposed to take a look at the change logs between
 versions to determine what parameters have been changed or removed but
 that would be very painful for that type of move.

 I would run

 testparm

 before starting samba and fix any thing it complains about.

Would it also help to run testparm -sv with the old version and then
again after the upgrade to see what defaults have changed?  Or would
there be too many differences?

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Upgrade from 3.0.4 to 3.4.5 gotchas?

2010-01-25 Thread John Drescher
On Mon, Jan 25, 2010 at 4:38 PM, Joe j...@freakyacres.com wrote:
 On 1/25/2010 1:53 PM, John Drescher wrote:

 On Mon, Jan 25, 2010 at 1:03 PM, Joej...@freakyacres.com  wrote:

 I'm about to install 3.4.5 over 3.0.4 on an old FreeBSD 5.2.1 server from
 source.  The server is backed up to tape.

 Could I make life easier by backing up some files by hand to another
 directory?

 In theory should make install be all I have to do?  (yes I ran
 configure
 and make)

 Will the old smb.conf need modified?


 Yes definitely. You are going ahead 6 years of development.

 Normally you are supposed to take a look at the change logs between
 versions to determine what parameters have been changed or removed but
 that would be very painful for that type of move.

 I would run

 testparm

 before starting samba and fix any thing it complains about.

 John


 I didn't make install yet but ran testparm from the compile directory.

 It complains...

 /libexec/ld-elf.so.1: Shared object libtalloc.so.1 not found

 So I expect samba may have trouble starting also.  Any tips?


libtalloc.so.1 is part of samba

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Debian Lenny - Samba 3.2.5 + OpenLDAP (slapd) 2.4.11

2010-01-25 Thread Henrik Dige Semark
I have a serous problem.

I have for some time now tried to get an SAMBA based Domain Controller
working.
I have tried with OpenLDAP and tdbsam as backend, but I get the same
error every time.

I wood prefer to use LDAP as my backend.
I have read tons of how-to SAMBA + LDAP, but non of the seams to work
for my, is there someone that maybe can see what I have done rung in
my config.?

I have attached my samba conf and LDAP conf.

Samba is connected to OpenLDAP, and LDAP is running fine.
But when I try to join my Windows XP Pro SP3 I takes about one Min and
it tells my that Username and/or Password maybe rung, ore not existing.

There is no doubt that Samba and Ldap is talking together (samba have
updated the SID and RID's), cause when I try to join the domain LDAP
is activated, but the return value is somehow disappearing on the way
back to my client

I have some wireshark dump that I can provide if its necessary.
I can provide LOGS, DUMPS, and everything needed if its necessary.

System info:
Clean installed Debian Lenny (5.0.3)
Clean installed Samba 3.2.5 + Winbind 3.2.5
Clean installed OpenLDAP 2.4.11 (slapd)
Debian default smbldap-tools (smbldap-populate is working and have
populated LDAP without problems)
if there is something I have forgotten please just ask for it, I'm
close to be desperate.!

---
Med Venlig Hilsen / Best regards
Henrik Dige Semark

# Defining domain name, hostname

[global]
dns proxy = no
netbios name = pdc
wins support = Yes
workgroup = semarktest
include = /etc/samba/dhcp.conf
server string = Debian Lenny (5.0.3) PDC
name resolve order = host lmhosts bcast wins

# Netwok-settings

hosts deny = ALL
hosts allow = 192.168.1.0/24 127.

# Specifying passwd backend database

#username map = /etc/samba/smbusers
#smb passwd file = /etc/samba/smbpasswd
#passdb backend = tdbsam:/etc/samba/userdatabase.tdb
passdb backend = ldapsam:ldap://127.0.0.1

# LDAPSMB-CONFIG - SMBLDAP-TOOLS

# LDAPSMB-CONFIG
#   add user script = /usr/sbin/ldapsmb -a -u %u
#   add machine script = /usr/sbin/ldapsmb -a -w %u
#   add group script = /usr/sbin/ldapsmb -a -g %g
#   add user to group script = /usr/sbin/ldapsmb -j -u %u -g %g
#   delete user script = /usr/sbin/ldapsmb -d -u %u
#   delete group script = /usr/sbin/ldapsmb -d -g %g
#   delete user from group script = /usr/sbin/ldapsmb -r -u %u -g %g
#   set primary group script = /usr/sbin/ldapsmb -m -u %u -g %g

# SMBLDAP-TOOLS
add user script = /usr/sbin/smbldap-useradd -a -m %u -M %u
add machine script = /usr/sbin/smbldap-useradd -w %u
add group script = /usr/sbin/smbldap-groupadd -p %g
add user to group script = /usr/sbin/smbldap-groupmod -m %u %g
delete user script = /usr/sbin/smbldap-userdel %u
delete group script = /usr/sbin/smbldap-groupdel %g
delete user from group script = /usr/sbin/smbldap-groupmod -x %u %g
set primary group script = /usr/sbin/smbldap-usermod -g %g %u

# TDBSAM
#   add user script = /usr/sbin/useradd -m %u 
#   delete user script = /usr/sbin/userdel -r %u 
#   add group script = /usr/sbin/groupadd %g  
#   delete group script = /usr/sbin/groupdel %g  
#   add user to group script = /usr/sbin/usermod -G %g %u 
#   add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null  -g 
machines %u 


# Various other directives ( man smb.conf )
###
logon drive = H:
logon home = \\%L\%U
#logon path = \\%L\profile\%U
logon script = scripts/logon.bat
os level = 65
time server = Yes
domain master = Yes
domain logons = Yes
preferred master = Yes
enable privileges = yes
show add printer wizard = yes
dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd

# Windbind
##
winbind separator = %
winbind cache time = 10
winbind enum users = Yes
winbind uid = 1000-21000
winbind gid = 1000-21000
winbind enum groups = Yes
template shell = /bin/bash
template homedir = /home/%U
winbind use default domain = Yes

# OpenLDAP stuff is defined here
###
ldap ssl = no
ldap delete dn = Yes
ldap passwd sync = Yes
ldap user suffix = ou=Users
ldap idmap suffix = ou=Users
ldap group suffix = ou=Groups
ldap machine suffix = ou=Computers
ldap suffix = dc=semark-testing,dc=dk
ldap admin dn = cn=admin,dc=semark-testing,dc=dk
idmap uid = 1000-21000
idmap 

Re: [Samba] Upgrade from 3.0.4 to 3.4.5 gotchas?

2010-01-25 Thread Joe

On 1/25/2010 4:47 PM, John Drescher wrote:

On Mon, Jan 25, 2010 at 4:38 PM, Joej...@freakyacres.com  wrote:

On 1/25/2010 1:53 PM, John Drescher wrote:


On Mon, Jan 25, 2010 at 1:03 PM, Joej...@freakyacres.comwrote:


I'm about to install 3.4.5 over 3.0.4 on an old FreeBSD 5.2.1 server from
source.  The server is backed up to tape.

Could I make life easier by backing up some files by hand to another
directory?

In theory should make install be all I have to do?  (yes I ran
configure
and make)

Will the old smb.conf need modified?



Yes definitely. You are going ahead 6 years of development.

Normally you are supposed to take a look at the change logs between
versions to determine what parameters have been changed or removed but
that would be very painful for that type of move.

I would run

testparm

before starting samba and fix any thing it complains about.

John



I didn't make install yet but ran testparm from the compile directory.

It complains...

/libexec/ld-elf.so.1: Shared object libtalloc.so.1 not found

So I expect samba may have trouble starting also.  Any tips?



libtalloc.so.1 is part of samba

John



So is there any way to run the new version of testparm before the
actual installation?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Upgrade from 3.0.4 to 3.4.5 gotchas?

2010-01-25 Thread John Drescher
On Mon, Jan 25, 2010 at 4:54 PM, Joe j...@freakyacres.com wrote:
 On 1/25/2010 4:47 PM, John Drescher wrote:

 On Mon, Jan 25, 2010 at 4:38 PM, Joej...@freakyacres.com  wrote:

 On 1/25/2010 1:53 PM, John Drescher wrote:

 On Mon, Jan 25, 2010 at 1:03 PM, Joej...@freakyacres.com    wrote:

 I'm about to install 3.4.5 over 3.0.4 on an old FreeBSD 5.2.1 server
 from
 source.  The server is backed up to tape.

 Could I make life easier by backing up some files by hand to another
 directory?

 In theory should make install be all I have to do?  (yes I ran
 configure
 and make)

 Will the old smb.conf need modified?


 Yes definitely. You are going ahead 6 years of development.

 Normally you are supposed to take a look at the change logs between
 versions to determine what parameters have been changed or removed but
 that would be very painful for that type of move.

 I would run

 testparm

 before starting samba and fix any thing it complains about.

 John


 I didn't make install yet but ran testparm from the compile directory.

 It complains...

 /libexec/ld-elf.so.1: Shared object libtalloc.so.1 not found

 So I expect samba may have trouble starting also.  Any tips?


 libtalloc.so.1 is part of samba

 John


 So is there any way to run the new version of testparm before the
 actual installation?

Possibly by running ldconfig for the folder that contains  libtalloc.so.1

-- 
John M. Drescher
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Upgrade from 3.0.4 to 3.4.5 gotchas?

2010-01-25 Thread Joe

On 1/25/2010 1:53 PM, John Drescher wrote:

On Mon, Jan 25, 2010 at 1:03 PM, Joej...@freakyacres.com  wrote:

I'm about to install 3.4.5 over 3.0.4 on an old FreeBSD 5.2.1 server from
source.  The server is backed up to tape.

Could I make life easier by backing up some files by hand to another
directory?

In theory should make install be all I have to do?  (yes I ran configure
and make)

Will the old smb.conf need modified?



Yes definitely. You are going ahead 6 years of development.

Normally you are supposed to take a look at the change logs between
versions to determine what parameters have been changed or removed but
that would be very painful for that type of move.

I would run

testparm

before starting samba and fix any thing it complains about.

John



I didn't make install yet but ran testparm from the compile directory.

It complains...

/libexec/ld-elf.so.1: Shared object libtalloc.so.1 not found

So I expect samba may have trouble starting also.  Any tips?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Fwd: Re: Change AD user password from Linux

2010-01-25 Thread gregorcy
whoops should have also sent to list.



 Original Message 
Subject: Re: [Samba] Change AD user password from Linux
Date: Mon, 25 Jan 2010 15:00:59 -0700
From: gregorcy brian.grego...@utah.edu
To: Masao Garcia mas...@fshac.com



On 01/20/10 16:25, Masao Garcia wrote:
 John,
 
 Still no go on the password change.  I'm going to set up a fresh Ubuntu 8.04
 installI'm thinking maybe because my test LTSP server was set up to
 authenticate to a SambaPDC, maybe something is tainted and is causing the
 problem.  Thank you for your help.


Hi Masao,

Hey if you figure out how to get it too work will you post it to the list.  I 
have also been trying for a bit to get
passwd to work.

--Brian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Problem Samba Share

2010-01-25 Thread Robert Steinmetz AIA

I'm running out of things to check.

I have two servers running Samba 2.3.3, one as a Domain Controller one 
as a Member Server.
Both are running Ubuntu 8.10. smbd, nmbd and winbindd using the tdb back 
end are running on both.


On the Member Server when I access the [Projects] share everything works 
as expected. When I access the [Windows] share I get prompted for a user 
name and  password but no combination works
If I comment out the force group then [Windows] mostly works but not 
there are issues with one application which will gives error indication 
it cant create files.


I have worked through a number of issues eventually finding that pam was 
not configured correctly, now it seems to be correct, getent now 
includes the domain users and groups.


I can find no difference between the two shares but one works as 
expected and one doesn't. The only significant apparent difference is 
that [Windows] is much larger.

[Projects]
comment = Project Specific Data
path = /files/Lucretia/Projects
force group = ATLANTA\domain users
read only = No
create mask = 0764
directory mask = 0775

[Windows]
comment = Atlanta Windows Files
path = /files/Lucretia/Windows
force group = ATLANTA\domain users
read only = No
create mask = 0764
directory mask = 0775

A list of the directory

r...@louise:/files/Lucretia#
drwxrwsr-x  36 trish domain users  1608 2010-01-20 15:53 Projects
drwxrwsrwx 291 trish domain users 23600 2010-01-25 15:15 Windows

There are no acl's set on either directory.

--
Robert Steinmetz, AIA
Principal
Steinmetz  Associates
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Fwd: Re: Change AD user password from Linux

2010-01-25 Thread john
Hi Gregorcy,

Here's what I sent along to Masao. I didn't cc the list either :-( So
here it comes now.
Hope it may be useful.



On Thu, Jan 21, 2010 at 12:05 PM, Masao Garcia mas...@fshac.com wrote:
 John,

 Yes, with my config, I can see all the domain users and groups with both
 wbinfo and getent.  I can log in via SSH and also from an LTSP terminal (I
 had to chown the test user's home directory because the user IDs didn't
 match from the old system) but when it comes to password changes, it just
 won't work.

Did you have a legacy /var/lib/samba/winbindd_idmap.tdb  lying around
from a previous active directory membership? If this computer had a
windows user called jdoe whos uid-sid mapping was stored in that
account, and you rejoined AD later on, you might cause yourself
problems when trying to change the new jdoe's passwd (e.g. his unix
uid would be mapped to a different windows SID as I understand it). I
am a bit fuzzy on this, others could be of more help. I get around
this because I use a static rid mapping (e.g. idmap backend =
rid:VANGUARD=1-20) so that I can scale AD accross servers and
uid-sid mappings stay consistent.




 I tried changing my pam.d config files with your settings and I can't SSH in
 with AD accounts.  wbinfo and getent still works.

Here's what my ssh entry in /etc/pam.d looks like (note the entry for winbind)

auth   required pam_env.so # [1]
auth   required pam_env.so envfile=/etc/default/locale
auth   sufficient   /lib/security/pam_winbind.so
@include common-auth
accountrequired pam_nologin.so
accountsufficient   /lib/security/pam_winbind.so
@include common-account
@include common-session
sessionoptional pam_motd.so # [1]
sessionoptional pam_mail.so standard noenv # [1]
sessionrequired pam_limits.so
@include common-password


 I use krb5 because according to the guide, Kerberos and Winbind are required
 for authentication and session information when interfacing with AD.

I believe you need krb5 to join AD but you don't need entries in
pam.d/common-* unless you are trying
to refresh kerberos tickets for various domain services. Again, others
would know more.

 I messed
around with automatically refreshing users kerberos tickets, but I
couldn't get it working well, so users
just have to present credentials when they want to get a windows share
for example. I really should revisit this. :-)


 Can I ask what version of Samba you're running and what your domain
 functional level is?

winbind  3.0.28a-1ubuntu4.9
samba-common   3.0.28a-1ubuntu4.9

Our functional level is windows 2003

 Did you install the Unix services on the DCs?

No I decided I didn't want to mess with the DC's in any way.

 tried both with and without the Unix services and I get the same errors
 about the users not being in /etc/passwd in both cases.  It's got to be a
 pam.d or nsswitch configuration problem, but I can't find any answers on
 Google.  Somehow I have to tell the client to look for the users in AD when
 changing passwords, but from my understanding that's handled by
 nsswitch.conf, which looks right.

I think you are on the right track. Have you tried turning up the
verbosity on the logging? You can do that in the smb.conf file and
then try your transaction and check for messages in /var/log/samba

Here's a little blurb from O'reilly

http://oreilly.com/catalog/samba/chapter/book/ch09_01.html


 Anyway, I just got word from management that I need to raise the domain and
 forest functional levels to 2008R2, and from what I've read, you need Samba
 3.2 for AD authentication to work right in that environment so now I'm
 messing with Ubuntu 9.10.  I appreciate your help.  I'll let you know how
 things turn out in the new environment.

I'll be interested to hear what you find out. I'm planning on
migrating to Lucid (the next LTS) sometime in the next 6 months, and I
would guess Karmic (9.10) and Lucid will be very similar with regards
to winbind and samba.

Btw, as an aside, I found out as long as I am only joining my servers
to AD and not actually hosting shares via samba on my Linux server, I
only need the winbind package on LTSP. Winbind installs a minimal
subset of the samba packages and doesn't run the samba daemon.

Good luck!

John


On Mon, Jan 25, 2010 at 2:02 PM, gregorcy brian.grego...@utah.edu wrote:
 whoops should have also sent to list.


 Hi Masao,

 Hey if you figure out how to get it too work will you post it to the list.  I 
 have also been trying for a bit to get
 passwd to work.

 --Brian
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] single stream performance issue, Win2K, WinXP, Samba 3.2.5-4lenny7 (Debian Lenny)

2010-01-25 Thread Stan Hoeppner
Volker Lendecke put forth on 1/25/2010 1:28 AM:
 On Mon, Jan 25, 2010 at 12:14:36AM -0600, Stan Hoeppner wrote:
 Volker Lendecke put forth on 1/24/2010 6:51 AM:
 On Sun, Jan 24, 2010 at 02:09:51PM +0200, Michael Wood wrote:
 Except that he said I can copy files between the Win2K and WinXP
 machines at just over 10MB/s in a single stream and max out the 11MB/s
 with two streams.  I am assuming he used the same client in that test
 as he did with the test against Samba.  So from what he's said it
 seems that he gets more speed with a Windows server than with Samba
 for the same client.

 So what we need is a full network trace of both cases.

 Actually I'll give you something slightly different, and more to the original
 question.  I've taken two tcp captures on the Samba server machine.  Both
 transfers were performed using the Windows 2000 cli copy command pulling a
 36MB avi file from a share on the Samba server.  The first test was a single
 stream copy.  The second test was a dual stream copy of the same file
 concurrently to two different destination directories.  I also had iftop 
 running
 during the tests.  The single stream transfer maxed out at just over 64Mb/s.
 The dual stream test maxed out at 92Mb/s.  Following are the two tcpdump 
 output
 files using tcpdump -p -s 0 -w FILE port 445:

 http://www.hardwarefreak.com/smb_single_stream
 http://www.hardwarefreak.com/smb_dual_stream
 
 The dual-stream one is kindof limited help. The interesting
 piece is how Win-Win does its thing faster, so we need to
 see that one.

I've been busting my but trying to get you something meaningful.  This dump is
less than optimal for two reasons, but it's the best I can get you thus far.

1.  Running tshark on Win2K creates a huge network performance hit and thus b/w
numbers for small file (250MB) transfers don't come close to accurately
describing the real world.  With tshark running the b/w is less than half of
normal with small files.

2.  Because of this I had to do a huge file copy to allow time for the client to
level off at peak performance, which is still ~500KB/s lower than normal due to
tshark overhead.

Anyway, the file is over 400MB.  It'll take quite a while to grab off my server.

http://www.hardwarefreak.com/smb-winwin-single-stream

Hope you are able to glean something meaningful from it.

-- 
Stan
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Fwd: Re: Change AD user password from Linux

2010-01-25 Thread Masao Garcia
Gregorcy,

I ended up installing Ubuntu 9.10 and using Likewise-open and that worked
without issue.  I'm able to change passwords on my LTSP server (which I
still need to rebuild) but initial testing shows I can change my password on
first logon (though if I don't meet the password complexity, I get a generic
token error).  The only thing I don't like about Likewise-open is that I
seem to need to include the domain with the username (i.e. domain\username
or usern...@domain).  I'm not sure if that's configurable, but it's also not
a show stopper for me if it's not.

I still have my old 8.04 setup and John was kind enough to give me some more
settings I could check that I have not followed up on.  If I get the chance,
I'll go back and check and post an update if I get it working. 


-Original Message-
From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
On Behalf Of gregorcy
Sent: Monday, January 25, 2010 4:02 PM
To: samba
Subject: [Samba] Fwd: Re: Change AD user password from Linux

Hi Masao,

Hey if you figure out how to get it too work will you post it to the list.
I have also been trying for a bit to get
passwd to work.

--Brian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Pb using printer share with Vista

2010-01-25 Thread Didier Brison
Hi,

On a Debian Lenny
I try to make working samba 3.4.3-1 backports printer drivers auto install for 
Vista and of course it doesn't work.
It start install the driver on the server, but stop and tell 
_spoolss_AddPrinterDriverEx: level 8 not yet implemented

Someone can help me?

Here is a part of my Syslog

Jan 25 19:27:57 toto smbd[13437]: [2010/01/25 19:27:57,  0] 
rpc_server/srv_spoolss_nt.c:7646(_spoolss_AddPrinterDriver)
Jan 25 19:27:57 toto smbd[13437]:   _spoolss_AddPrinterDriverEx: level 8 not 
yet implemented
Jan 25 19:28:11 toto smbd[13437]: [2010/01/25 19:28:11,  1] 
smbd/service.c:1226(close_cnum)
Jan 25 19:28:11 toto smbd[13437]:   ibis-inf-2 (:::132.203.160.8) closed 
connection to service print$

Regards.
Didier
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.4.5 on ubuntu 8.04 64 bit - Core dumps

2010-01-25 Thread Jeremy Allison
On Mon, Jan 25, 2010 at 03:25:46PM +0100, Martin Hochreiter wrote:
 I recently installed Samba 3.4.5 on Ubuntu 8.04 64 bit and
 had to downgrad again because of massive core panics:

 I can't really tell you what caused that (maybe while printing via  
 samba-cups) - can
 somebody give me a hint or tell me what information you need to analyze  
 that please?

 [2010/01/25 13:46:52,  0] lib/fault.c:46(fault_report)
   ===
 [2010/01/25 13:46:52,  0] lib/fault.c:47(fault_report)
   INTERNAL ERROR: Signal 11 in pid 7553 (3.4.5)
   Please read the Trouble-Shooting section of the Samba3-HOWTO
 [2010/01/25 13:46:52,  0] lib/fault.c:49(fault_report)

   From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
 [2010/01/25 13:46:52,  0] lib/fault.c:50(fault_report)
   ===
 [2010/01/25 13:46:52,  0] lib/util.c:1480(smb_panic)
   PANIC (pid 7553): internal error
 [2010/01/25 13:46:52,  0] lib/util.c:1584(log_stack_trace)
   BACKTRACE: 25 stack frames:
#0 /opt/samba345/sbin/smbd(log_stack_trace+0x1a) [0x6bc42b]
#1 /opt/samba345/sbin/smbd(smb_panic+0x55) [0x6bc52a]
#2 /opt/samba345/sbin/smbd [0x6ad1ae]
#3 /lib/libpthread.so.0 [0x7fa381cb77d0]
#4 /etc/samba/libtalloc.so.1 [0x7fa380da9761]
#5 /etc/samba/libtalloc.so.1(talloc_free+0x1cc) [0x7fa380dab92e]
#6 /opt/samba345/sbin/smbd [0x6249ca]
#7 /opt/samba345/sbin/smbd(api_pipe_request+0x3ac) [0x656ef5]
#8 /opt/samba345/sbin/smbd [0x650b46]
#9 /opt/samba345/sbin/smbd(np_write_send+0x912) [0x651a13]
#10 /opt/samba345/sbin/smbd [0x4a7456]
#11 /opt/samba345/sbin/smbd [0x4a79d9]
#12 /opt/samba345/sbin/smbd(reply_trans+0x6b7) [0x4a85af]
#13 /opt/samba345/sbin/smbd [0x4fee33]
#14 /opt/samba345/sbin/smbd [0x5012e8]
#15 /opt/samba345/sbin/smbd [0x501a6c]
#16 /opt/samba345/sbin/smbd(run_events+0x131) [0x6cb350]
#17 /opt/samba345/sbin/smbd(smbd_process+0x790) [0x500cb7]
#18 /opt/samba345/sbin/smbd [0x947e15]
#19 /opt/samba345/sbin/smbd(run_events+0x131) [0x6cb350]
#20 /opt/samba345/sbin/smbd [0x6cb5b0]
#21 /opt/samba345/sbin/smbd(_tevent_loop_once+0x84) [0x6cb929]
#22 /opt/samba345/sbin/smbd(main+0xf17) [0x947b99]
#23 /lib/libc.so.6(__libc_start_main+0xf4) [0x7fa3806481c4]
#24 /opt/samba345/sbin/smbd [0x48e629]
 [2010/01/25 13:46:52,  0] lib/fault.c:326(dump_core)
   dumping core in /var/log/samba/cores/smbd

Can you install the debug symbols, and try and
reproduce the problem please ? Open a bug at bugzilla.samba.org
and add the line:

panic action = /bin/sleep 9

to the [global] section of your smb.conf. Once the crash
re-occurs, attach to the parent process of the sleep using
gdb, and then type bt to get a full backtrace with symbols.

Attach this to the bug report please.

Thanks !

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Pb using printer share with Vista

2010-01-25 Thread Jeremy Allison
On Mon, Jan 25, 2010 at 07:46:56PM -0500, Didier Brison wrote:
 Hi,
 
 On a Debian Lenny
 I try to make working samba 3.4.3-1 backports printer drivers auto install 
 for Vista and of course it doesn't work.
 It start install the driver on the server, but stop and tell 
 _spoolss_AddPrinterDriverEx: level 8 not yet implemented
 
 Someone can help me?
 
 Here is a part of my Syslog
 
 Jan 25 19:27:57 toto smbd[13437]: [2010/01/25 19:27:57,  0] 
 rpc_server/srv_spoolss_nt.c:7646(_spoolss_AddPrinterDriver)
 Jan 25 19:27:57 toto smbd[13437]:   _spoolss_AddPrinterDriverEx: level 8 not 
 yet implemented
 Jan 25 19:28:11 toto smbd[13437]: [2010/01/25 19:28:11,  1] 
 smbd/service.c:1226(close_cnum)
 Jan 25 19:28:11 toto smbd[13437]:   ibis-inf-2 (:::132.203.160.8) closed 
 connection to service print$

Can you log a bug at bugzilla.samba.org. We have an explicit comment in
the code that assumes that returning WERR_UNKNOWN_LEVEL causes the
client to silently downgrade to a supported level. If this isn't
working, we need to track the issue.

Thanks,

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.4 Panic in Debian

2010-01-25 Thread Jeremy Allison
On Mon, Jan 25, 2010 at 11:14:31AM -0600, Dale Schroeder wrote:

 This time, it seems to be an ADS specific winbind error.

 I have attempted with the current kernel - 2.6.32-trunk-686 and the  
 previous kernel - 2.6.30-2-686.

 What kind of encryption change has occurred, and which program is it  
 referring to as lacking the encryption type - samba or krb5?

This is a krb5 error. Try upgrading the krb5 libraries ?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] single stream performance issue, Win2K, WinXP, Samba 3.2.5-4lenny7 (Debian Lenny)

2010-01-25 Thread Linda Walsh

Stan Hoeppner wrote:

For raw bandwidth maximization, what port and protocol are used won't
make much difference, if any.  In fact it shouldn't make _any_
difference in raw b/w.  Communications between the Samba server and
Win2K client appear to be exclusively over TCP 139 at this point
according to netstat, instead I'm misreading or looking in the wrong
place.


--- I haven't read the rest of the thread yet, so forgive me if I am
  covering things that have already been covered.

  139 AFAIK, uses UDP, that means one packet up, it gets ACKED, (packet
send back to sender) then another packet goes up.

  445 uses TCP, which can have multiple packets sent without waiting for
an ACK.  Suppose round trip for an 'empty packet is 2 ms.  For round
numbers use 1000B/packet. So you send 1000B on a 1MB/s line (yeah, it's
an odd flaver of ethernet).  But for each 1000 bytes sent, it takes
1000/10^6(B/s)  = 1ms.  So it would take 2 seconds to send.  Now the
other side could wait for the response to come back and that would take
another 1ms for an empty packet (which can include an 'ACK'.  So round
trip time for 1000 bytes would be 3m.  Now your 1MB line has dropped to
1000B / 3ms.

Instead of nearly 1000 packets/second, you only see a throughput of 
300k on our 1MB line : 33%.  Yuck!


Now tcp doesn't require nearly the overhead for single packets.  Opening
the TCP connection takes extra long -- maybe in our example it would take
5ms.  But then further packets can be sent with .05ms overhead instead of
1ms. (these figures are illustrative, not accurate!) But now you send 30
packets at 1ms+.5 each, and they all travel and are received in 30.30 ms.
The ack back takes another .5 (as it's within the TCP stream, where you
only need send packet# and ack -- no addressing or port or security info.
That 'intro stuff' is only done once at the begining of each stream open
(which in Samba is only once/ session -- not once/connection).
Additonally, the Ack back takes place AS the next packet is being sent.
Most implementations will allow the next one-to-several packets to be
sent WITHOUT having heard back.  That's important. 


So the total wait time -- is 1.5*30 or 45ms+ + the last ack has to waited
for -- so 45.5 ms. to send your 30,000 bytes.  Now we're talking 659k on
our 1MB line.  Not perfect, but maybe as perfect as less than ideal
hardware allows due to overhead (or maybe OS overhead/packet...whatever).
But in this *bogus*, (but representative in a relative sense) example TCP
bought over 100% more throughput.  In real life, might add 10-30%.
Depends on hardward and OS implementation.

Do you see why TCP=better? (for large packet sizes).  For small, sparse
amounts of data, UDP might be better.

The penalty of per-packet overhead RTT times goes *up* with the faster
networking equipment you use.  At 1GB, 1ms is a loss of a million bits!

That make sense?

So a UDP connection is much more inefficient and may show as busy but
some of that is spent constructing/sending headers while other parts are
waiting on ACKS.

-linda

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Problem Samba Share

2010-01-25 Thread Michael Wood
2010/1/26 Robert Steinmetz AIA r...@steinmetznet.com:
 I'm running out of things to check.

 I have two servers running Samba 2.3.3, one as a Domain Controller one as a

Sorry, I don't know what's causing your problems, but I suspect you
mean version 3.2.3, which is what Ubuntu 8.10 ships with.

http://packages.ubuntu.com/intrepid/samba

The 2: is not part of the Samba version number.  It's an epoch,
which is explained in Debian's policy manual as follows:

It is provided to allow mistakes in the version numbers of older
versions of a package, and also a package's previous version numbering
schemes, to be left behind.

http://www.debian.org/doc/debian-policy/ch-controlfields.html#s-f-Version

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] single stream performance issue, Win2K, WinXP, Samba 3.2.5-4lenny7 (Debian Lenny)

2010-01-25 Thread Michael Wood
Hi

2010/1/26 Linda Walsh sa...@tlinx.org:
 Stan Hoeppner wrote:

 For raw bandwidth maximization, what port and protocol are used won't
 make much difference, if any.  In fact it shouldn't make _any_
 difference in raw b/w.  Communications between the Samba server and
 Win2K client appear to be exclusively over TCP 139 at this point
 according to netstat, instead I'm misreading or looking in the wrong
 place.

 --- I haven't read the rest of the thread yet, so forgive me if I am
  covering things that have already been covered.

  139 AFAIK, uses UDP, that means one packet up, it gets ACKED, (packet
 send back to sender) then another packet goes up.

I'm pretty sure you're wrong about port 139 necessarily using UDP, and
Stan said further up the thread that he was using TCP on port 139.  He
later changed to port 445 anyway and was still having the same
problem.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.4 Panic in Debian

2010-01-25 Thread Christian PERRIER
Quoting Jeremy Allison (j...@samba.org):
 On Mon, Jan 25, 2010 at 11:14:31AM -0600, Dale Schroeder wrote:
 
  This time, it seems to be an ADS specific winbind error.
 
  I have attempted with the current kernel - 2.6.32-trunk-686 and the  
  previous kernel - 2.6.30-2-686.
 
  What kind of encryption change has occurred, and which program is it  
  referring to as lacking the encryption type - samba or krb5?
 
 This is a krb5 error. Try upgrading the krb5 libraries ?

Dale, can you send the output of dpkg -s libkrb5-3

Sam Hartman is working hardly on krb5 these days. I can't check right
now but it's highly probable that Debian testing hasn't the same
version than unstable (1.7 in testing, 1.8 in unstable).

So, Jeremy's advice is probably worth it if you have 1.7 version of
krb5 and if that solves your problems, then we might need to update
dependencies in samba packages.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.4.5 on ubuntu 8.04 64 bit - Core dumps

2010-01-25 Thread Martin Hochreiter



Can you install the debug symbols, and try and
reproduce the problem please ? Open a bug at bugzilla.samba.org
and add the line:

panic action = /bin/sleep 9

to the [global] section of your smb.conf. Once the crash
re-occurs, attach to the parent process of the sleep using
gdb, and then type bt to get a full backtrace with symbols.

Attach this to the bug report please.

Thanks !

Jeremy.

   

Unfortunately it is a production system I did the upgrade
(I compiled 3.4.5 in parallel to 3.0.28 did the necessary changes and 
tried to run in it

during lunchtime)

I'll try to reproduce it during lunchtime again ...

BUT

I read the 3.4 Panic in Debian thread and Ubuntu 8.04 is shipped with
libkrb53 - 1.6.dfsg.3~beta1-2ubuntu1.3

May that hit my problem too?


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[SCM] Samba Shared Repository - branch v3-5-stable updated

2010-01-25 Thread Karolin Seeger
The branch, v3-5-stable has been updated
   via  9956693... WHATSNEW: Update changes since 3.5.0rc1.
   via  adcd1a8... s3: Fix bug 7052: DFS broken on AIX (maybe others) 
(cherry picked from commit c531d00abdb19ff6ba4c60ebdcc8319949c6) (cherry 
picked from commit f21796955e7aa2e84a1c810612f2fdee2bde611c)
   via  e172365... s3:pdb_ldap: Fix large paged search.
   via  f13a516... s3-docs: Fix typos.
   via  e9a4ae7... s3 net/i18n: Update .po files (cherry picked from commit 
add4edcd063591839111d474543ceea847413f6f)
   via  e088c3e... s3 net: Fix compile warnings (cherry picked from commit 
66de52c4f4527ef43cfaf11c55616ec7602cce85)
   via  5fd4066... s3 net/i18n: update .po files (cherry picked from commit 
6d33bb25e1aab72bb3e12a0824a758bacba32672)
   via  a94daec... s3 net/i18n: Use only one spelling for Usage: (cherry 
picked from commit 09bc13728fc76cf784914a4066c793c297e50cff)
   via  f1bc012... s3 net: Fix compile error with WITH_DNS_UPDATES
   via  8aed2be... s3/net: split up some printable stings to ease i18n
   via  bb7070d... ѕ3/i18n/de: fix typo (cherry picked from commit 
fb7a4621134b9054f33ccb48d7d8c1e4e4960b9a)
   via  8dd3a22... s3/i18n/de: improve some German translations (cherry 
picked from commit c3ef7a3d96763719de1df679d50fb8a00d1f7391)
   via  798a172... net: Add German translation, specially for the command 
listing
   via  f06c47c... WHATSNEW: Update release notes.
   via  4e65f5e... s3:pdb_ldap: restore Samba 3.0.x behavior and use the 
first uid value.
   via  89c572a... s3:smbldap: add smbldap_talloc_first_attribute()
   via  6a82616... s3-docs: Adapt version number in man vfs_scannedonly.
   via  dd61c89... s3-docs: Add man page for vfs_scannedonly.
   via  ab0032d... s3: Fix a crash in libsmbclient used against the 
OpenSolaris CIFS server
   via  5e83ccd... Fix bug 7045 - Bad (non memory copying) interfaces in 
smbc_set calls.
   via  60de807... Modification of fix for bug 6876 - Delete of an object 
whose parent folder does not have delete rights fails even if the delete right 
is set on the object
   via  7fb2c6f... Fix bug #6876 - Delete of an object whose parent folder 
does not have delete rights fails even if the delete right is set on the object.
   via  70975e2... WHATSNEW: Start 3.5.0rc2 release notes.
   via  06cacc7... VERSION: Raise version number up to 3.5.0rc2.
   via  2be6999... s3-libsmbclient: Fix crash bug in SMBC_parse_path().
   via  73710b5... docs: fix xml tag in the pdbedit manpage
   via  a075b47... s3-docs: mention -K option in pdbedit manpage.
   via  b8bda6b... Fix bug #7036 - net rpc getsid fails in hardened windows 
environments.
   via  9d33a91... s3-lanman: Allow a level2 descriptor for a level1 
NetShareGetInfo
   via  b906f49... Part 4 of bug #7028 - include scannedonly VFS module
   via  f2c873f... Fix two uses of strncat - strlcat. Ensure proper use of 
strncpy when setting socket name.
   via  3b9fe52... s3: Lift the version of the scannedonly VFS module 
(cherry picked from commit 2d4dda0688d5c88fb73ae17db970afe9d0f77f6a) (cherry 
picked from commit f692d27c9edc187ebdc080ff71fc5df24b607c55)
   via  2cf7a4f... Bug #7028 part1
   via  a587879... Fix bug #7033 - SMBrmdir call always returns true, even 
on failure to delete a directory.
   via  946a865... s3: Fix a winbind segfault in trusted_domains
   via  e5d8180... Fix bug #7034 - vfs_cap causes signal 11 (SIGSEGV) 
(cherry picked from commit ca847952054f5bbde1d40ad4260589b6fcc9721d) (cherry 
picked from commit dbbe7c5949f2e5728577e1a1146c0b72b1b482c0)
   via  3476f79... s3: Fix a segfault in winbindd_dual_ccache_ntlm_auth()
   via  6d79f25... Re-fix bug 5202 - cannot change ACLs on writable file 
with dos filemode=yes
   via  e685d43... s3: Lock down some srvsvc calls according to what w2k3 
seems to do (cherry picked from commit ea7d2995f383e183ef4d8a21705a343581e71f4a)
  from  b097212... WHATSNEW: Update changes.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable


- Log -
commit 9956693e89c11f04366453801778e069049ed55f
Author: Karolin Seeger ksee...@samba.org
Date:   Mon Jan 25 11:28:46 2010 +0100

WHATSNEW: Update changes since 3.5.0rc1.

Karolin
(cherry picked from commit b3f2d34b54bc06e7d1d0c47e89dc8f2dcc782890)

commit adcd1a81b1d21e32824edd083bf8e053613992a3
Author: William Jojo w.j...@hvcc.edu
Date:   Thu Jan 21 14:21:03 2010 +0100

s3: Fix bug 7052: DFS broken on AIX (maybe others)
(cherry picked from commit c531d00abdb19ff6ba4c60ebdcc8319949c6)
(cherry picked from commit f21796955e7aa2e84a1c810612f2fdee2bde611c)

commit e17236586cc836f997666c6c8a9633940152c006
Author: Volker Lendecke v...@samba.org
Date:   Mon May 18 16:04:04 2009 +0200

s3:pdb_ldap: Fix large paged search.

Fix bug #6981 (Paged 

[SCM] Samba Shared Repository - branch v3-5-test updated

2010-01-25 Thread Karolin Seeger
The branch, v3-5-test has been updated
   via  b3f2d34... WHATSNEW: Update changes since 3.5.0rc1.
  from  f217969... s3: Fix bug 7052: DFS broken on AIX (maybe others) 
(cherry picked from commit c531d00abdb19ff6ba4c60ebdcc8319949c6)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-test


- Log -
commit b3f2d34b54bc06e7d1d0c47e89dc8f2dcc782890
Author: Karolin Seeger ksee...@samba.org
Date:   Mon Jan 25 11:28:46 2010 +0100

WHATSNEW: Update changes since 3.5.0rc1.

Karolin

---

Summary of changes:
 WHATSNEW.txt |   53 +
 1 files changed, 53 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 84b1cae..e71ffce 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -114,6 +114,59 @@ o   Stefan Metzmacher me...@samba.org
 Changes since 3.5.0rc1
 --
 
+
+o   Jeremy Allison j...@samba.org
+* BUG 5202: Fix changing of ACLs on writable file with dos filemode=yes.
+* BUG 6876: Fix deletion of an object whose parent folder does not have 
delete
+  rights fails even if the delete right is set on the object in
+  vfs_acl_xattr and vfs_acl_tdb.
+* BUG 7033: Fix SMBrmdir error message when deleting a directory fails.
+* BUG 7036: Fix 'net rpc getsid' in hardened Windows environments.
+* BUG 7045: Fix bad (non memory copying) interfaces in smbc_set calls.
+
+
+o   Giovanni Bajo ra...@develer.com
+* BUG 7029: Disable sanity check in NetShareEnum for better compatibility
+  with Windows.
+
+
+o   Kai Blin k...@samba.org
+* BUG 7039: Fix compile error with WITH_DNS_UPDATE. Update .po files.
+
+
+o   Günther Deschner g...@samba.org
+* BUG 7043: Fix crash bug in libsmbclient.
+
+
+o   André Hentschel n...@dawncrow.de
+* BUG 7039: Complete German translation of 'net'.
+
+
+o   Björn Jacke b...@sernet.de
+* BUG 7039: Improve some German translations in 'net'.
+
+
+o   William Jojo w.j...@hvcc.edu
+* BUG 7052: Fix DFS on AIX.
+
+
+o   Volker Lendecke v...@samba.org
+* BUG 6981: Fix large paged search with DirX LDAP servers.
+* BUG 7027: Fix a segfault in winbindd_dual_ccache_ntlm_auth().
+* BUG 7037: Fix a Winbind segfault in trusted_domains.
+* BUG 7046: Fix libsmbclient crash against OpenSolaris CIFS server.
+* Lock down some srvsvc calls according to what w2k3 seems to do.
+
+
+o   Stefan Metzmacher me...@samba.org
+* BUG 6157: Restore Samba 3.0.x behavior and use the first uid value in
+  pdb_ldap.
+
+
+o   SASAJIMA Toshihiro sasajim...@jp.fujitsu.com
+* BUG 7034: Fix segfault in vfs_cap.
+
+
 o   Olivier Sessink oliviersess...@gmail.com
 * BUG 7028: Add new scannedonly VFS module.
 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-01-25 Thread Volker Lendecke
The branch, master has been updated
   via  a53a8ec... Revert libcli/security: Prohibit SID formats like 
S-1-5-32-+545
  from  b5d4726... s4-smbtorture: test 
wbcResolveWinsByName/wbcResolveWinsByIP in WINBIND-WBCLIENT testsuite.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit a53a8ec45245353d978e6f845c41d76b2e12a3c6
Author: Volker Lendecke v...@samba.org
Date:   Mon Jan 25 12:39:47 2010 +0100

Revert libcli/security: Prohibit SID formats like S-1-5-32-+545

This reverts commit 1fbeae41655b8305834f2149b1268077eba8633d.

Apparently this breaks the build of Samba4

---

Summary of changes:
 libcli/security/dom_sid.c |   13 -
 1 files changed, 0 insertions(+), 13 deletions(-)


Changeset truncated at 500 lines:

diff --git a/libcli/security/dom_sid.c b/libcli/security/dom_sid.c
index 8a2ed1f..6a046cd 100644
--- a/libcli/security/dom_sid.c
+++ b/libcli/security/dom_sid.c
@@ -96,20 +96,12 @@ bool dom_sid_parse(const char *sidstr, struct dom_sid *ret)
 
sidstr += 2;
 
-   if (!isdigit(sidstr[0])) {
-   return false;
-   }
-
rev = strtoul(sidstr, p, 10);
if (*p != '-') {
return false;
}
sidstr = p+1;
 
-   if (!isdigit(sidstr[0])) {
-   return false;
-   }
-
ia = strtoul(sidstr, p, 10);
if (p == sidstr) {
return false;
@@ -139,11 +131,6 @@ bool dom_sid_parse(const char *sidstr, struct dom_sid *ret)
return false;
}
sidstr++;
-
-   if (!isdigit(sidstr[0])) {
-   return false;
-   }
-
ret-sub_auths[i] = strtoul(sidstr, p, 10);
if (p == sidstr) {
return false;


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-01-25 Thread Volker Lendecke
The branch, master has been updated
   via  2024d4f... Revert s3: Make string_to_sid a wrapper around 
dom_sid_parse
  from  a53a8ec... Revert libcli/security: Prohibit SID formats like 
S-1-5-32-+545

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 2024d4fb27514869d78e9bb39085f98e80413529
Author: Volker Lendecke v...@samba.org
Date:   Mon Jan 25 12:41:48 2010 +0100

Revert s3: Make string_to_sid a wrapper around dom_sid_parse

This reverts commit dff03b61fd5d923562711b38cc7dbe996dc07283.

---

Summary of changes:
 source3/lib/util_sid.c |   57 ++--
 1 files changed, 50 insertions(+), 7 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/lib/util_sid.c b/source3/lib/util_sid.c
index ea66dbf..20c2663 100644
--- a/source3/lib/util_sid.c
+++ b/source3/lib/util_sid.c
@@ -23,7 +23,6 @@
 */
 
 #include includes.h
-#include libcli/security/dom_sid.h
 
 /*
  * Some useful sids, more well known sids can be found at
@@ -218,14 +217,58 @@ char *sid_string_tos(const DOM_SID *sid)
  Convert a string to a SID. Returns True on success, False on fail.
 */  
 
-bool string_to_sid(struct dom_sid *sidout, const char *sidstr)
+bool string_to_sid(DOM_SID *sidout, const char *sidstr)
 {
-   if (!dom_sid_parse(sidstr, sidout)) {
-   DEBUG(3, (string_to_sid: Sid %s is not in a valid format.\n,
- sidstr));
-   return false;
+   const char *p;
+   char *q;
+   /* BIG NOTE: this function only does SIDS where the identauth is not = 
2^32 */
+   uint32 conv;
+
+   if ((sidstr[0] != 'S'  sidstr[0] != 's') || sidstr[1] != '-') {
+   DEBUG(3,(string_to_sid: Sid %s does not start with 'S-'.\n, 
sidstr));
+   return False;
}
-   return true;
+
+   ZERO_STRUCTP(sidout);
+
+   /* Get the revision number. */
+   p = sidstr + 2;
+   conv = (uint32) strtoul(p, q, 10);
+   if (!q || (*q != '-')) {
+   DEBUG(3,(string_to_sid: Sid %s is not in a valid format.\n, 
sidstr));
+   return False;
+   }
+   sidout-sid_rev_num = (uint8) conv;
+   q++;
+
+   /* get identauth */
+   conv = (uint32) strtoul(q, q, 10);
+   if (!q || (*q != '-')) {
+   DEBUG(0,(string_to_sid: Sid %s is not in a valid format.\n, 
sidstr));
+   return False;
+   }
+   /* identauth in decimal should be   2^32 */
+   /* NOTE - the conv value is in big-endian format. */
+   sidout-id_auth[0] = 0;
+   sidout-id_auth[1] = 0;
+   sidout-id_auth[2] = (conv  0xff00)  24;
+   sidout-id_auth[3] = (conv  0x00ff)  16;
+   sidout-id_auth[4] = (conv  0xff00)  8;
+   sidout-id_auth[5] = (conv  0x00ff);
+
+   q++;
+   sidout-num_auths = 0;
+
+   for(conv = (uint32) strtoul(q, q, 10);
+   q  (*q =='-' || *q =='\0')  (sidout-num_auths  MAXSUBAUTHS);
+   conv = (uint32) strtoul(q, q, 10)) {
+   sid_append_rid(sidout, conv);
+   if (*q == '\0')
+   break;
+   q++;
+   }
+
+   return True;
 }
 
 /*


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-5-test updated

2010-01-25 Thread Karolin Seeger
The branch, v3-5-test has been updated
   via  5eb9b66... s3:auth: fix account unlock regression introduced with 
fix for bug #4347
   via  fcadc52... s3:auth: don't update the bad pw count if pw is among 
last 2 history entries
   via  0d6ad51... s3:auth:check_sam_security: introduce a bool var to 
control pad_pw_count incrementation
   via  d909861... s3:passdb: store the plain nt passwords hashes in 
history, not salted md5
   via  f260d6a... s3:smbd:password_in_history: treat entry with 0 salt as 
0 + plain nt hash
   via  640dfa8... s3:auth:check_sam_security: improve calling and logging 
of pdb_update_sam_account
   via  093607e... s3:auth:check_sam_security: fix a leading tab/ws mixup
   via  10a847f... s3:auth:check_sam_security: create (and use) a common 
exit point
   via  1bb4a2c... s3:auth:check_sam_security: null out sampass after it 
has been stolen.
   via  2925209... s3:auth:sam_password_ok: take username, acct_ctrl and 
nt/lm hashes, not sampass
   via  c9e05e1... s3:auth: use data_blob_null instead of data_blob(NULL, 
0) in sam_password_ok()
   via  c3bd0b5... s3:auth:sam_password_ok: fix allocation of a data blob.
   via  761a8b8... s3:auth:sam_password_ok: enhance readability (imho) by 
adding some pointers
   via  232602e... s3:check_sam_security: untangle assignment from statement
   via  a92102c... s3: Factor password_in_history() out of 
check_passwd_history()
   via  7e430f3... Simplify E_md5hash a bit
   via  2042f49... s3: Simplify pdb_set_plaintext_passwd: pwhistory==NULL 
can not happen anymore
   via  bfa814b... s3: Simplify pdb_set_plaintext_passwd: pwHistLen==0 was 
checked above
   via  58b2f41... s3: Add a paranoia check to pdb_set_plaintext_passwd()
   via  76a9af7... s3: Simplify pdb_set_plaintext_passwd() by removing a 
redundant condition
   via  8a4463c... s3: Simplify pdb_set_plaintext_passwd: memcpy deals fine 
with 0 bytes
   via  501dd6f... s3: Simplify pdb_set_plaintext_passwd by using 
talloc_zero_array
   via  a5a4776... s3: Make use of talloc_array in 
pdb_set_plaintext_passwd()
   via  7097be6... s3: Simplify pdb_set_plaintext_passwd() a bit
   via  0630fdc... s3: Simplify pdb_set_plaintext_passwd() slightly
   via  53e9ffb... s3: Fix a typo
   via  7758648... s3: Avoid a memset(, 0, ) call
  from  b3f2d34... WHATSNEW: Update changes since 3.5.0rc1.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-test


- Log -
commit 5eb9b66de0fd0adc59339a944f02f5fe25868568
Author: Michael Adam ob...@samba.org
Date:   Thu Jan 14 14:24:35 2010 +0100

s3:auth: fix account unlock regression introduced with fix for bug #4347

By an oversight, the patchset for #4347 made the unlocking of a locked
account after the lockout duration ineffective.
Thanks to Björn for finding this!

Michael

commit fcadc524779a50ee379fb4feb02448944dc174dc
Author: Michael Adam ob...@samba.org
Date:   Wed Jan 6 17:29:04 2010 +0100

s3:auth: don't update the bad pw count if pw is among last 2 history entries

This conforms to the behaviour of Windows 2003:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/bpactlck.mspx

This is supposed to fixes Bug #4347 .

Michael

commit 0d6ad513e27e83b6a460954f3120395f13f65088
Author: Michael Adam ob...@samba.org
Date:   Wed Jan 6 16:35:44 2010 +0100

s3:auth:check_sam_security: introduce a bool var to control pad_pw_count 
incrementation

This is a preparatory patch for the last part in fixing bug #4347 .

Michael

commit d909861c64cf874b1625039b0e1eace507a29b28
Author: Michael Adam ob...@samba.org
Date:   Tue Jan 5 18:28:48 2010 +0100

s3:passdb: store the plain nt passwords hashes in history, not salted md5

This is in order to be able to do challenge response with the history,
so that this can be checked when an invalid password was entered:
If the given password is wrong but in the history, then the bad password
count should not be updated...

The lucky bit here is that the md5 has and the nt hash (md4) both are
16 bytes long.

This is part of the fix for bug #4347 .

Michael

commit f260d6a48dce32208424aa9bfbf2b1e293e48045
Author: Michael Adam ob...@samba.org
Date:   Tue Jan 5 16:58:30 2010 +0100

s3:smbd:password_in_history: treat entry with 0 salt as 0 + plain nt hash

This is to introduce a new format of the password history, maintaining 
backwards
compatibility: The old format was 16 byte hash + 16 byte md5(salt + nt 
hash).
The new format is 16 zero bytes and 16 bytes nt hash.

This will allow us to respect the last X entries of the nt password history
when deciding whether to increment the bad password count.

This is part of the fix for bug #4347 .

Michael


[SCM] Samba Shared Repository - branch v3-5-test updated

2010-01-25 Thread Karolin Seeger
The branch, v3-5-test has been updated
   via  0585054... WHATSNEW: Update changes.
  from  5eb9b66... s3:auth: fix account unlock regression introduced with 
fix for bug #4347

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-test


- Log -
commit 05850542df7c9c6e15bbc609df59c7177d3ab996
Author: Karolin Seeger ksee...@samba.org
Date:   Mon Jan 25 12:51:41 2010 +0100

WHATSNEW: Update changes.

Karolin

---

Summary of changes:
 WHATSNEW.txt |4 
 1 files changed, 4 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index e71ffce..ac82c51 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -115,6 +115,10 @@ Changes since 3.5.0rc1
 --
 
 
+o   Michael Adam ob...@samba.org
+* BUG 4347: Check password history before increasing badPasswordCount.
+
+
 o   Jeremy Allison j...@samba.org
 * BUG 5202: Fix changing of ACLs on writable file with dos filemode=yes.
 * BUG 6876: Fix deletion of an object whose parent folder does not have 
delete


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-5-stable updated

2010-01-25 Thread Karolin Seeger
The branch, v3-5-stable has been updated
   via  3389f40... WHATSNEW: Update changes.
   via  f81ef95... s3:auth: fix account unlock regression introduced with 
fix for bug #4347
   via  8725300... s3:auth: don't update the bad pw count if pw is among 
last 2 history entries
   via  bfc4bcc... s3:auth:check_sam_security: introduce a bool var to 
control pad_pw_count incrementation
   via  e6397be... s3:passdb: store the plain nt passwords hashes in 
history, not salted md5
   via  2fcfdd1... s3:smbd:password_in_history: treat entry with 0 salt as 
0 + plain nt hash
   via  624285b... s3:auth:check_sam_security: improve calling and logging 
of pdb_update_sam_account
   via  d23ad60... s3:auth:check_sam_security: fix a leading tab/ws mixup
   via  5deb3e2... s3:auth:check_sam_security: create (and use) a common 
exit point
   via  35f158e... s3:auth:check_sam_security: null out sampass after it 
has been stolen.
   via  079a5fe... s3:auth:sam_password_ok: take username, acct_ctrl and 
nt/lm hashes, not sampass
   via  47b0b19... s3:auth: use data_blob_null instead of data_blob(NULL, 
0) in sam_password_ok()
   via  cd774ba... s3:auth:sam_password_ok: fix allocation of a data blob.
   via  14b75a1... s3:auth:sam_password_ok: enhance readability (imho) by 
adding some pointers
   via  e0bf3de... s3:check_sam_security: untangle assignment from statement
   via  478e00c... s3: Factor password_in_history() out of 
check_passwd_history() (cherry picked from commit 
a92102cf3044ad3be49d6f746ed3f95c49d30412)
   via  7f5220c... Simplify E_md5hash a bit (cherry picked from commit 
7e430f3093c5bc06d8ca1186f982fe51af8c5637)
   via  674550c... s3: Simplify pdb_set_plaintext_passwd: pwhistory==NULL 
can not happen anymore (cherry picked from commit 
2042f4937db80939ca3d70816d864b4d762d46fb)
   via  d3a1cc9... s3: Simplify pdb_set_plaintext_passwd: pwHistLen==0 was 
checked above (cherry picked from commit 
bfa814be469e5a7c22e45ff8261de749e51414b2)
   via  7e26397... s3: Add a paranoia check to pdb_set_plaintext_passwd() 
(cherry picked from commit 58b2f41c14e590724e2cb45f23ff7e75d5d2e7ab)
   via  0101bdf... s3: Simplify pdb_set_plaintext_passwd() by removing a 
redundant condition
   via  d579138... s3: Simplify pdb_set_plaintext_passwd: memcpy deals fine 
with 0 bytes (cherry picked from commit 
8a4463c61292872e9a294a6b026ec6d65d2219b8)
   via  02d23ee... s3: Simplify pdb_set_plaintext_passwd by using 
talloc_zero_array (cherry picked from commit 
501dd6fe17e72d8e487a622c0e66cb5938e66731)
   via  e267e7c... s3: Make use of talloc_array in 
pdb_set_plaintext_passwd() (cherry picked from commit 
a5a477648f301b9c435609b0c6f4d76d4229b9ae)
   via  0567a76... s3: Simplify pdb_set_plaintext_passwd() a bit
   via  b3ad0c2... s3: Simplify pdb_set_plaintext_passwd() slightly
   via  d1bff7b... s3: Fix a typo (cherry picked from commit 
53e9ffb3a66acfa9af2bf4c616b2b83daf723f49)
   via  4e7b5be... s3: Avoid a memset(, 0, ) call (cherry picked from 
commit 7758648556aba5242f913d6cc0f46a2d9f1cfaa9)
  from  9956693... WHATSNEW: Update changes since 3.5.0rc1.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable


- Log -
commit 3389f40817fbde52c8b1da480f5cda0428a1b7ed
Author: Karolin Seeger ksee...@samba.org
Date:   Mon Jan 25 12:51:41 2010 +0100

WHATSNEW: Update changes.

Karolin
(cherry picked from commit 05850542df7c9c6e15bbc609df59c7177d3ab996)

commit f81ef95f5110fea275519bd93b17642789d95dcf
Author: Michael Adam ob...@samba.org
Date:   Thu Jan 14 14:24:35 2010 +0100

s3:auth: fix account unlock regression introduced with fix for bug #4347

By an oversight, the patchset for #4347 made the unlocking of a locked
account after the lockout duration ineffective.
Thanks to Björn for finding this!

Michael
(cherry picked from commit 5eb9b66de0fd0adc59339a944f02f5fe25868568)

commit 872530076011593c1116c16b02e1fa9f0a85f5a8
Author: Michael Adam ob...@samba.org
Date:   Wed Jan 6 17:29:04 2010 +0100

s3:auth: don't update the bad pw count if pw is among last 2 history entries

This conforms to the behaviour of Windows 2003:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/bpactlck.mspx

This is supposed to fixes Bug #4347 .

Michael
(cherry picked from commit fcadc524779a50ee379fb4feb02448944dc174dc)

commit bfc4bccf00bf3a17bd3cf12337953425f0fcc471
Author: Michael Adam ob...@samba.org
Date:   Wed Jan 6 16:35:44 2010 +0100

s3:auth:check_sam_security: introduce a bool var to control pad_pw_count 
incrementation

This is a preparatory patch for the last part in fixing bug #4347 .

Michael
(cherry picked from commit 0d6ad513e27e83b6a460954f3120395f13f65088)

commit e6397bef88675acc61c1020ac0d5dc848a99beeb
Author: 

[SCM] Samba Shared Repository - branch master updated

2010-01-25 Thread Kai Blin
The branch, master has been updated
   via  b35dcd7... s4 includes: Include system/locale.h to get access to 
ctype.h
  from  2024d4f... Revert s3: Make string_to_sid a wrapper around 
dom_sid_parse

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit b35dcd7a1811c6151469fc023e6a40616ca83497
Author: Kai Blin k...@samba.org
Date:   Mon Jan 25 12:51:35 2010 +0100

s4 includes: Include system/locale.h to get access to ctype.h

---

Summary of changes:
 source4/include/includes.h |1 +
 1 files changed, 1 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/include/includes.h b/source4/include/includes.h
index babef87..8d28808 100644
--- a/source4/include/includes.h
+++ b/source4/include/includes.h
@@ -32,6 +32,7 @@
 
 #include system/time.h
 #include system/wait.h
+#include system/locale.h
 
 /* only do the C++ reserved word check when we compile
to include --with-developer since too many systems


-- 
Samba Shared Repository


[SCM] SAMBA-CTDB repository - branch v3-2-ctdb updated - 3.2.11-ctdb-69-6-g1025a26

2010-01-25 Thread Michael Adam
The branch, v3-2-ctdb has been updated
   via  1025a2611688afbe8ce461e476989c7740dd2cb3 (commit)
   via  90d25c1785a456a66cc7319f7857750546e028ab (commit)
  from  221c557f1fa0709cb5fc0c46ca5abcc480553a23 (commit)

http://gitweb.samba.org/?p=obnox/samba-ctdb.git;a=shortlog;h=v3-2-ctdb


- Log -
commit 1025a2611688afbe8ce461e476989c7740dd2cb3
Author: Christian Ambach christian.amb...@de.ibm.com
Date:   Mon Jan 25 11:09:15 2010 +0100

bump the ctdb vendor patch level to 70

Signed-off-by: Christian Ambach christian.amb...@de.ibm.com

commit 90d25c1785a456a66cc7319f7857750546e028ab
Author: Volker Lendecke v...@samba.org
Date:   Thu Jan 14 18:26:01 2010 +0100

v3-4-ctdb: Do not do any logrotation

Signed-off-by: Christian Ambach christian.amb...@de.ibm.com

---

Summary of changes:
 packaging/RHEL-CTDB/samba.spec.tmpl |7 ++-
 source/VERSION  |2 +-
 2 files changed, 3 insertions(+), 6 deletions(-)


Changeset truncated at 500 lines:

diff --git a/packaging/RHEL-CTDB/samba.spec.tmpl 
b/packaging/RHEL-CTDB/samba.spec.tmpl
index 09f86e4..9e7c0f9 100644
--- a/packaging/RHEL-CTDB/samba.spec.tmpl
+++ b/packaging/RHEL-CTDB/samba.spec.tmpl
@@ -24,7 +24,6 @@ Prereq: fileutils sed /etc/init.d
 
 Requires: pam = 0.64 %{auth} 
 Requires: samba-common = %{version}-%{release}
-Requires: logrotate = 3.4 initscripts = 5.54-1
 Provides: samba = %{version}
 
 Prefix: /usr
@@ -289,8 +288,8 @@ mkdir -p $RPM_BUILD_ROOT%{_mandir}
 mkdir -p $RPM_BUILD_ROOT%{_prefix}/{bin,sbin}
 mkdir -p $RPM_BUILD_ROOT%{_prefix}/lib
 mkdir -p $RPM_BUILD_ROOT/sbin
-mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/{logrotate.d,pam.d,samba}
-mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/{pam.d,logrotate.d}
+mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/{pam.d,samba}
+mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/{pam.d}
 mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/rc.d/init.d
 mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/{samba,sysconfig}
 mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/xinetd.d
@@ -343,7 +342,6 @@ rm -rf %{_32bit_tmp_dir}
 # Install the miscellany
 echo 127.0.0.1 localhost  $RPM_BUILD_ROOT%{_sysconfdir}/samba/lmhosts
 
-install -m644 setup/samba.log $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/samba
 install -m644 setup/swat $RPM_BUILD_ROOT%{_sysconfdir}/xinetd.d/swat
 install -m644 setup/samba.sysconfig 
$RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/samba
 install -m755 setup/smb.init $RPM_BUILD_ROOT%{initdir}/smb
@@ -442,7 +440,6 @@ exit 0
 %config(noreplace) %{_sysconfdir}/sysconfig/samba
 %config(noreplace) %{_sysconfdir}/samba/smbusers
 %attr(755,root,root) %config %{initdir}/smb
-%config(noreplace) %{_sysconfdir}/logrotate.d/samba
 %config(noreplace) %{_sysconfdir}/pam.d/samba
 
 %attr(0755,root,root) %dir /var/log/samba
diff --git a/source/VERSION b/source/VERSION
index 7878d20..1c77ce2 100644
--- a/source/VERSION
+++ b/source/VERSION
@@ -96,4 +96,4 @@ SAMBA_VERSION_IS_GIT_SNAPSHOT=
 #  -  CVS 3.0.0rc2-VendorVersion#
 
 SAMBA_VERSION_VENDOR_SUFFIX=ctdb
-SAMBA_VERSION_VENDOR_PATCH=69
+SAMBA_VERSION_VENDOR_PATCH=70


-- 
SAMBA-CTDB repository


[SCM] Samba Shared Repository - branch master updated

2010-01-25 Thread Jelmer Vernooij
The branch, master has been updated
   via  4291e28... s4-python: Fix formatting.
   via  0b7910b... upgrade_from_s3: Remove unused imports.
   via  8562bbd... pyxattr: Move to the same directory as the xattr code.
  from  b35dcd7... s4 includes: Include system/locale.h to get access to 
ctype.h

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 4291e28a938695593dd90a30d3c2e49defba3e8b
Author: Jelmer Vernooij jel...@samba.org
Date:   Mon Jan 25 15:17:56 2010 +0100

s4-python: Fix formatting.

commit 0b7910b8bf32ba983d1b8e35d3eef8a73d7dd1e6
Author: Jelmer Vernooij jel...@samba.org
Date:   Fri Jan 22 12:05:18 2010 +1300

upgrade_from_s3: Remove unused imports.

commit 8562bbdce5fd2711f527c3922b684f651f68c7f7
Author: Jelmer Vernooij jel...@samba.org
Date:   Fri Jan 22 12:02:51 2010 +1300

pyxattr: Move to the same directory as the xattr code.

---

Summary of changes:
 source4/ntvfs/posix/config.mk  |   11 +
 .../posix}/python/pyxattr_native.c |0 
 .../posix}/python/pyxattr_tdb.c|0 
 source4/scripting/python/config.mk |   21 --
 source4/scripting/python/samba/provision.py|   41 +---
 source4/scripting/python/samba/provisionbackend.py |   13 +++---
 source4/scripting/python/samba/upgrade.py  |6 +-
 source4/setup/upgrade_from_s3  |2 -
 8 files changed, 38 insertions(+), 56 deletions(-)
 rename source4/{scripting = ntvfs/posix}/python/pyxattr_native.c (100%)
 rename source4/{scripting = ntvfs/posix}/python/pyxattr_tdb.c (100%)


Changeset truncated at 500 lines:

diff --git a/source4/ntvfs/posix/config.mk b/source4/ntvfs/posix/config.mk
index 1aaef3f..bf8b573 100644
--- a/source4/ntvfs/posix/config.mk
+++ b/source4/ntvfs/posix/config.mk
@@ -77,3 +77,14 @@ ntvfs_posix_OBJ_FILES = $(addprefix $(ntvfssrcdir)/posix/, \
 
 $(eval $(call 
proto_header_template,$(ntvfssrcdir)/posix/vfs_posix_proto.h,$(ntvfs_posix_OBJ_FILES:.o=.c)))
 
+[PYTHON::python_xattr_native]
+LIBRARY_REALNAME = samba/xattr_native.$(SHLIBEXT)
+PRIVATE_DEPENDENCIES = LIBNDR LIBLDB SAMDB CREDENTIALS python_dcerpc_security 
pyparam_util WRAP_XATTR
+
+python_xattr_native_OBJ_FILES = $(ntvfssrcdir)/posix/python/pyxattr_native.o
+
+[PYTHON::python_xattr_tdb]
+LIBRARY_REALNAME = samba/xattr_tdb.$(SHLIBEXT)
+PRIVATE_DEPENDENCIES = LIBNDR LIBLDB python_dcerpc_security pyparam_util share
+
+python_xattr_tdb_OBJ_FILES = $(ntvfssrcdir)/posix/python/pyxattr_tdb.o 
$(ntvfssrcdir)/posix/xattr_tdb.o
diff --git a/source4/scripting/python/pyxattr_native.c 
b/source4/ntvfs/posix/python/pyxattr_native.c
similarity index 100%
rename from source4/scripting/python/pyxattr_native.c
rename to source4/ntvfs/posix/python/pyxattr_native.c
diff --git a/source4/scripting/python/pyxattr_tdb.c 
b/source4/ntvfs/posix/python/pyxattr_tdb.c
similarity index 100%
rename from source4/scripting/python/pyxattr_tdb.c
rename to source4/ntvfs/posix/python/pyxattr_tdb.c
diff --git a/source4/scripting/python/config.mk 
b/source4/scripting/python/config.mk
index 2aae592..3d255de 100644
--- a/source4/scripting/python/config.mk
+++ b/source4/scripting/python/config.mk
@@ -23,27 +23,6 @@ python_glue_OBJ_FILES = $(pyscriptsrcdir)/pyglue.o
 
 $(python_glue_OBJ_FILES): CFLAGS+=-I$(ldbsrcdir)
 
-[PYTHON::python_xattr_native]
-LIBRARY_REALNAME = samba/xattr_native.$(SHLIBEXT)
-PRIVATE_DEPENDENCIES = LIBNDR LIBLDB SAMDB CREDENTIALS  python_dcerpc_security 
pyparam_util WRAP_XATTR
-
-python_xattr_native_OBJ_FILES = $(pyscriptsrcdir)/pyxattr_native.o
-
-$(python_xattr_native_OBJ_FILES): CFLAGS+=-I$(ldbsrcdir)
-
-#ntvfs_common pvfs_acl
-#$(ntvfs_posix_OBJ_FILES)
-[PYTHON::python_xattr_tdb]
-LIBRARY_REALNAME = samba/xattr_tdb.$(SHLIBEXT)
-PRIVATE_DEPENDENCIES = LIBNDR LIBLDB python_dcerpc_security pyparam_util share
-#dcerpc_server
-
-python_xattr_tdb_OBJ_FILES = $(pyscriptsrcdir)/pyxattr_tdb.o  
$(ntvfssrcdir)/posix/xattr_tdb.o
-#{$(ntvfssrcdir)/ntvfs_interface.o
-#$(ntvfs_posix_OBJ_FILES)
-
-$(python_xattr_tdb_OBJ_FILES): CFLAGS+=-I$(ldbsrcdir)
-
 _PY_FILES = $(shell find $(pyscriptsrcdir)/samba ../lib/subunit/python -name 
*.py)
 
 $(eval $(foreach pyfile, $(_PY_FILES),$(call 
python_py_module_template,$(patsubst $(pyscriptsrcdir)/%,%,$(subst 
../lib/subunit/python,,$(pyfile))),$(pyfile
diff --git a/source4/scripting/python/samba/provision.py 
b/source4/scripting/python/samba/provision.py
index 036890d..58c172f 100644
--- a/source4/scripting/python/samba/provision.py
+++ b/source4/scripting/python/samba/provision.py
@@ -27,36 +27,31 @@
 
 from base64 import b64encode
 import os
-import sys
 import pwd
 import grp
 import time
-import uuid, glue
+import uuid
 import socket
 import param
 import registry
-import samba
-import subprocess
-import ldb
+import urllib
 

[SCM] SAMBA-CTDB repository - branch v3-2-ctdb updated - 3.2.11-ctdb-69-7-gaf1e35a

2010-01-25 Thread Michael Adam
The branch, v3-2-ctdb has been updated
   via  af1e35a613fbd4b8671bffbd848493911ef5a7f4 (commit)
  from  1025a2611688afbe8ce461e476989c7740dd2cb3 (commit)

http://gitweb.samba.org/?p=obnox/samba-ctdb.git;a=shortlog;h=v3-2-ctdb


- Log -
commit af1e35a613fbd4b8671bffbd848493911ef5a7f4
Author: Jeremy Allison j...@samba.org
Date:   Mon Sep 28 13:52:57 2009 +0200

Fix for CVE-2009-2813.

===
== Subject: Misconfigured /etc/passwd file may share folders 
unexpectedly
==
== CVE ID#: CVE-2009-2813
==
== Versions:All versions of Samba later than 3.0.11
==
== Summary: If a user in /etc/passwd is misconfigured to have
==  an empty home directory then connecting to the home
==  share of this user will use the root of the filesystem
==  as the home directory.
===

---

Summary of changes:
 source/param/loadparm.c |7 ++-
 source/smbd/service.c   |6 +-
 2 files changed, 11 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/param/loadparm.c b/source/param/loadparm.c
index 441fc62..ddb7181 100644
--- a/source/param/loadparm.c
+++ b/source/param/loadparm.c
@@ -5831,6 +5831,11 @@ bool lp_add_home(const char *pszHomename, int 
iDefaultService,
 {
int i;
 
+   if (pszHomename == NULL || user == NULL || pszHomedir == NULL ||
+   pszHomedir[0] == '\0') {
+   return false;
+   }
+
i = add_a_service(ServicePtrs[iDefaultService], pszHomename);
 
if (i  0)
@@ -7823,7 +7828,7 @@ static void lp_add_auto_services(char *str)
 
home = get_user_home_dir(talloc_tos(), p);
 
-   if (home  homes = 0)
+   if (home  home[0]  homes = 0)
lp_add_home(p, homes, p, home);
 
TALLOC_FREE(home);
diff --git a/source/smbd/service.c b/source/smbd/service.c
index ffd63ac..a7eb70b 100644
--- a/source/smbd/service.c
+++ b/source/smbd/service.c
@@ -55,6 +55,10 @@ bool set_conn_connectpath(connection_struct *conn, const 
char *connectpath)
const char *s = connectpath;
 bool start_of_name_component = true;
 
+   if (connectpath == NULL || connectpath[0] == '\0') {
+   return false;
+   }
+
destname = SMB_STRDUP(connectpath);
if (!destname) {
return false;
@@ -260,7 +264,7 @@ int add_home_service(const char *service, const char 
*username, const char *home
 {
int iHomeService;
 
-   if (!service || !homedir)
+   if (!service || !homedir || homedir[0] == '\0')
return -1;
 
if ((iHomeService = lp_servicenumber(HOMES_NAME))  0) {


-- 
SAMBA-CTDB repository


[SCM] Samba Shared Repository - branch master updated

2010-01-25 Thread Volker Lendecke
The branch, master has been updated
   via  005bbd0... Revert libcli/security: Remove a call to strncasecmp
   via  d86d5be... Revert libcli/security: Convert some strtol calls to 
strtoul
   via  fa47dbb... Revert libcli/security: Fix a valgrind error in 
dom_sid_parse
  from  4291e28... s4-python: Fix formatting.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 005bbd0826f05794562a772e6fa05fd5ba9a43e7
Author: Volker Lendecke v...@samba.org
Date:   Mon Jan 25 16:44:38 2010 +0100

Revert libcli/security: Remove a call to strncasecmp

This reverts commit 7c687665eaf16b0c6f83c130f6d9e5459e0b2a32.

commit d86d5be63692220bc2ad5fb84eaeb70a7a03dca2
Author: Volker Lendecke v...@samba.org
Date:   Mon Jan 25 16:44:27 2010 +0100

Revert libcli/security: Convert some strtol calls to strtoul

This reverts commit 7fe66e06c4df575c410d4d70ff38f120c2f4363b.

commit fa47dbb57ad43a97aaf03b371b0dd8addc4a5c47
Author: Volker Lendecke v...@samba.org
Date:   Mon Jan 25 16:42:49 2010 +0100

Revert libcli/security: Fix a valgrind error in dom_sid_parse

This reverts commit f1c889a4e61d6d751cbabd8014b4345b8051b97c.

---

Summary of changes:
 libcli/security/dom_sid.c |   14 +++---
 1 files changed, 7 insertions(+), 7 deletions(-)


Changeset truncated at 500 lines:

diff --git a/libcli/security/dom_sid.c b/libcli/security/dom_sid.c
index 6a046cd..0c88900 100644
--- a/libcli/security/dom_sid.c
+++ b/libcli/security/dom_sid.c
@@ -85,24 +85,28 @@ bool dom_sid_equal(const struct dom_sid *sid1, const struct 
dom_sid *sid2)
return dom_sid_compare(sid1, sid2) == 0;
 }
 
+/* Yes, I did think about multibyte issues here, and for all I can see there's
+ * none of those for parsing a SID. */
+#undef strncasecmp
+
 bool dom_sid_parse(const char *sidstr, struct dom_sid *ret)
 {
uint_t rev, ia, num_sub_auths, i;
char *p;
 
-   if ((sidstr[0] != 'S'  sidstr[0] != 's') || sidstr[1] != '-') {
+   if (strncasecmp(sidstr, S-, 2)) {
return false;
}
 
sidstr += 2;
 
-   rev = strtoul(sidstr, p, 10);
+   rev = strtol(sidstr, p, 10);
if (*p != '-') {
return false;
}
sidstr = p+1;
 
-   ia = strtoul(sidstr, p, 10);
+   ia = strtol(sidstr, p, 10);
if (p == sidstr) {
return false;
}
@@ -113,10 +117,6 @@ bool dom_sid_parse(const char *sidstr, struct dom_sid *ret)
if (sidstr[i] == '-') num_sub_auths++;
}
 
-   if (num_sub_auths  ARRAY_SIZE(ret-sub_auths)) {
-   return false;
-   }
-
ret-sid_rev_num = rev;
ret-id_auth[0] = 0;
ret-id_auth[1] = 0;


-- 
Samba Shared Repository


[SCM] SAMBA-CTDB repository - branch v3-4-ctdb updated - 3.4.2-ctdb-18-3-g83ca499

2010-01-25 Thread Michael Adam
The branch, v3-4-ctdb has been updated
   via  83ca4995b1afb9ee57ef5c3610b35ee05af8fbf1 (commit)
   via  2b8ad811f1679659753be763684f379e20f2a142 (commit)
   via  67ffcac02fb8d4ffc2a22e061bc01fd1b62296cb (commit)
  from  3495e4ab6b911e5c6777c62a51ad94a2b6e9d323 (commit)

http://gitweb.samba.org/?p=obnox/samba-ctdb.git;a=shortlog;h=v3-4-ctdb


- Log -
commit 83ca4995b1afb9ee57ef5c3610b35ee05af8fbf1
Author: Michael Adam ob...@samba.org
Date:   Sat Jan 23 01:17:06 2010 +0100

s3:g_lock: remove a nested event loop, replacing the inner loop by select

This made smbd crash in g_lock_lock() when trying to start a
transaction on a db with an already started transaction,
e.g. in a tcon_and_X where the share_info.tdb was not yet
initialized but share_info.tdb was already locked by another
process or writing acces to the winreg rpc pipe where the
registry tdb was already locked by another process.

What we really _want_ to do here by design is to react to
MSG_DBWRAP_G_LOCK_RETRY messages that are either sent
by a client doing g_lock_unlock or by ourselves when
we receive a CTDB_SRVID_SAMBA_NOTIFY or
CTDB_SRVID_RECONFIGURE message from ctdbd, i.e. when
either a client holding a lock or a complete node
has died.

Doing this properly involves calling tevent_loop_once(),
but doing this here with the main ctdbd messaging context
creates a nested event loop when g_lock_lock() is called
from the main event loop.

So as a quick fix, we act a little corasely here: we do
a select on the ctdb connection fd and when it is readable
or we get EINTR, then we retry without actually parsing
any ctdb packages or dispatching messages. This means that
we retry more often than necessary and intended by design,
but this does not harm and it is unobtrusive. When we have
finished, the main loop will pick up all the messages and
ctdb packets. The only extra twist is that we cannot use
timed events here but have to handcode a timeout for select.

Michael

commit 2b8ad811f1679659753be763684f379e20f2a142
Author: Michael Adam ob...@samba.org
Date:   Sat Jan 23 00:05:15 2010 +0100

s3:ctdb_conn: add ctdbd_conn_get_fd() to get the fd out of the ctdb 
connection

Michael

commit 67ffcac02fb8d4ffc2a22e061bc01fd1b62296cb
Author: Michael Adam ob...@samba.org
Date:   Fri Jan 22 15:56:28 2010 +0100

s3:g_lock: remove an unreached code path.

Michael

---

Summary of changes:
 source3/include/ctdbd_conn.h |2 +
 source3/lib/ctdbd_conn.c |5 ++
 source3/lib/g_lock.c |  141 +
 3 files changed, 107 insertions(+), 41 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/include/ctdbd_conn.h b/source3/include/ctdbd_conn.h
index 71516c7..c5ba572 100644
--- a/source3/include/ctdbd_conn.h
+++ b/source3/include/ctdbd_conn.h
@@ -33,6 +33,8 @@ NTSTATUS ctdbd_register_msg_ctx(struct ctdbd_connection *conn,
struct messaging_context *msg_ctx);
 struct messaging_context *ctdb_conn_msg_ctx(struct ctdbd_connection *conn);
 
+int ctdbd_conn_get_fd(struct ctdbd_connection *conn);
+
 NTSTATUS ctdbd_messaging_send(struct ctdbd_connection *conn,
  uint32 dst_vnn, uint64 dst_srvid,
  struct messaging_rec *msg);
diff --git a/source3/lib/ctdbd_conn.c b/source3/lib/ctdbd_conn.c
index a00c510..3983b3d 100644
--- a/source3/lib/ctdbd_conn.c
+++ b/source3/lib/ctdbd_conn.c
@@ -578,6 +578,11 @@ struct messaging_context *ctdb_conn_msg_ctx(struct 
ctdbd_connection *conn)
return conn-msg_ctx;
 }
 
+int ctdbd_conn_get_fd(struct ctdbd_connection *conn)
+{
+   return packet_get_fd(conn-pkt);
+}
+
 /*
  * Packet handler to receive and handle a ctdb message
  */
diff --git a/source3/lib/g_lock.c b/source3/lib/g_lock.c
index 3905a80..9971d71 100644
--- a/source3/lib/g_lock.c
+++ b/source3/lib/g_lock.c
@@ -266,7 +266,9 @@ NTSTATUS g_lock_lock(struct g_lock_ctx *ctx, const char 
*name,
struct tevent_timer *te = NULL;
NTSTATUS status;
bool retry = false;
-   bool timedout = false;
+   struct timeval timeout_end;
+   struct timeval timeout_remaining;
+   struct timeval time_now;
 
DEBUG(10, (Trying to acquire lock %d for %s\n, (int)lock_type,
   name));
@@ -295,56 +297,113 @@ NTSTATUS g_lock_lock(struct g_lock_ctx *ctx, const char 
*name,
   nt_errstr(status)));
return status;
}
-again:
-   retry = false;
 
-   status = g_lock_trylock(ctx, name, lock_type);
-   if (NT_STATUS_IS_OK(status)) {
-   DEBUG(10, (Got lock %s\n, name));
-   goto done;
-   }
-   if 

[SCM] Samba Shared Repository - branch master updated

2010-01-25 Thread Karolin Seeger
The branch, master has been updated
   via  9ce9fdd... s3/registry: Fix typo in comment.
  from  005bbd0... Revert libcli/security: Remove a call to strncasecmp

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 9ce9fdd9f451a4d7b4b6cce454657eb2b00fbb7c
Author: Karolin Seeger ksee...@samba.org
Date:   Mon Jan 25 19:50:21 2010 +0100

s3/registry: Fix typo in comment.

Karolin

---

Summary of changes:
 source3/registry/reg_backend_shares.c |4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/registry/reg_backend_shares.c 
b/source3/registry/reg_backend_shares.c
index 22b8fd7..9582398 100644
--- a/source3/registry/reg_backend_shares.c
+++ b/source3/registry/reg_backend_shares.c
@@ -25,10 +25,10 @@
 #define DBGC_CLASS DBGC_REGISTRY
 
 /**
- It is safe to assume that every registry path passed into on of 
+ It is safe to assume that every registry path passed into one of
  the exported functions here begins with KEY_SHARES else
  these functions would have never been called.  This is a small utility
- function to strip the beginning of the path and make a copy that the 
+ function to strip the beginning of the path and make a copy that the
  caller can modify.  Note that the caller is responsible for releasing
  the memory allocated here.
  **/


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-01-25 Thread Karolin Seeger
The branch, master has been updated
   via  463aa06... lib/popt: Fix typo in README.
   via  a3420bf... s3/docs: Fix typo.
  from  9ce9fdd... s3/registry: Fix typo in comment.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 463aa06442f1d6c7088c5d47f003b82e4293b70d
Author: Karolin Seeger ksee...@samba.org
Date:   Mon Jan 25 19:54:24 2010 +0100

lib/popt: Fix typo in README.

Karolin

commit a3420bf7a52c3d9fa6cba75aa88d1f4087c0e3aa
Author: Karolin Seeger ksee...@samba.org
Date:   Mon Jan 25 19:53:42 2010 +0100

s3/docs: Fix typo.

Karolin

---

Summary of changes:
 docs-xml/Samba3-HOWTO/TOSHARG-Install.xml |2 +-
 lib/popt/README   |2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/docs-xml/Samba3-HOWTO/TOSHARG-Install.xml 
b/docs-xml/Samba3-HOWTO/TOSHARG-Install.xml
index d13f6ee..673ba93 100644
--- a/docs-xml/Samba3-HOWTO/TOSHARG-Install.xml
+++ b/docs-xml/Samba3-HOWTO/TOSHARG-Install.xml
@@ -197,7 +197,7 @@
entrypara
Exists only when the tdbsam passwd backend is 
used. This file stores the
SambaSAMAccount information. Note: This file 
requires that user POSIX account information is
-   availble from either the /etc/passwd file, or 
from an alternative system source.
+   available from either the /etc/passwd file, or 
from an alternative system source.
/para/entry
/row
row
diff --git a/lib/popt/README b/lib/popt/README
index 0b5205b..95f8f8d 100644
--- a/lib/popt/README
+++ b/lib/popt/README
@@ -12,7 +12,7 @@ popt is used by rpm, the Red Hat install program, and many 
other Red Hat
 utilities, all of which provide excellent examples of how to use popt. 
 Complete documentation on popt is available in popt.ps (included in this
 tarball), which is excerpted with permission from the book Linux
-Application Development by Michael K. Johnson and Erik Troan (availble
+Application Development by Michael K. Johnson and Erik Troan (available
 from Addison Wesley in May, 1998).
 
 Comments on popt should be addressed to e...@redhat.com.


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-5-test updated

2010-01-25 Thread Karolin Seeger
The branch, v3-5-test has been updated
   via  007dbc5... lib/popt: Fix typo in README.
   via  7e4dd20... s3/docs: Fix typo.
  from  0585054... WHATSNEW: Update changes.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-test


- Log -
commit 007dbc57a954e3eea6db191b34f3be9ab3c4a9b6
Author: Karolin Seeger ksee...@samba.org
Date:   Mon Jan 25 19:54:24 2010 +0100

lib/popt: Fix typo in README.

Karolin
(cherry picked from commit 463aa06442f1d6c7088c5d47f003b82e4293b70d)

commit 7e4dd20a6bb7ae44f2137ca9f914e09a15f00110
Author: Karolin Seeger ksee...@samba.org
Date:   Mon Jan 25 19:53:42 2010 +0100

s3/docs: Fix typo.

Karolin
(cherry picked from commit a3420bf7a52c3d9fa6cba75aa88d1f4087c0e3aa)

---

Summary of changes:
 docs-xml/Samba3-HOWTO/TOSHARG-Install.xml |2 +-
 lib/popt/README   |2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/docs-xml/Samba3-HOWTO/TOSHARG-Install.xml 
b/docs-xml/Samba3-HOWTO/TOSHARG-Install.xml
index d13f6ee..673ba93 100644
--- a/docs-xml/Samba3-HOWTO/TOSHARG-Install.xml
+++ b/docs-xml/Samba3-HOWTO/TOSHARG-Install.xml
@@ -197,7 +197,7 @@
entrypara
Exists only when the tdbsam passwd backend is 
used. This file stores the
SambaSAMAccount information. Note: This file 
requires that user POSIX account information is
-   availble from either the /etc/passwd file, or 
from an alternative system source.
+   available from either the /etc/passwd file, or 
from an alternative system source.
/para/entry
/row
row
diff --git a/lib/popt/README b/lib/popt/README
index 0b5205b..95f8f8d 100644
--- a/lib/popt/README
+++ b/lib/popt/README
@@ -12,7 +12,7 @@ popt is used by rpm, the Red Hat install program, and many 
other Red Hat
 utilities, all of which provide excellent examples of how to use popt. 
 Complete documentation on popt is available in popt.ps (included in this
 tarball), which is excerpted with permission from the book Linux
-Application Development by Michael K. Johnson and Erik Troan (availble
+Application Development by Michael K. Johnson and Erik Troan (available
 from Addison Wesley in May, 1998).
 
 Comments on popt should be addressed to e...@redhat.com.


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-5-stable updated

2010-01-25 Thread Karolin Seeger
The branch, v3-5-stable has been updated
   via  43c03a6... lib/popt: Fix typo in README.
   via  331ff17... s3/docs: Fix typo.
  from  3389f40... WHATSNEW: Update changes.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-stable


- Log -
commit 43c03a668850082c0b21d63eef1d7bd9c0777135
Author: Karolin Seeger ksee...@samba.org
Date:   Mon Jan 25 19:54:24 2010 +0100

lib/popt: Fix typo in README.

Karolin
(cherry picked from commit 463aa06442f1d6c7088c5d47f003b82e4293b70d)
(cherry picked from commit 007dbc57a954e3eea6db191b34f3be9ab3c4a9b6)

commit 331ff1776be27ac1193b70f33ff3058aeea9bfa1
Author: Karolin Seeger ksee...@samba.org
Date:   Mon Jan 25 19:53:42 2010 +0100

s3/docs: Fix typo.

Karolin
(cherry picked from commit a3420bf7a52c3d9fa6cba75aa88d1f4087c0e3aa)
(cherry picked from commit 7e4dd20a6bb7ae44f2137ca9f914e09a15f00110)

---

Summary of changes:
 docs-xml/Samba3-HOWTO/TOSHARG-Install.xml |2 +-
 lib/popt/README   |2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/docs-xml/Samba3-HOWTO/TOSHARG-Install.xml 
b/docs-xml/Samba3-HOWTO/TOSHARG-Install.xml
index d13f6ee..673ba93 100644
--- a/docs-xml/Samba3-HOWTO/TOSHARG-Install.xml
+++ b/docs-xml/Samba3-HOWTO/TOSHARG-Install.xml
@@ -197,7 +197,7 @@
entrypara
Exists only when the tdbsam passwd backend is 
used. This file stores the
SambaSAMAccount information. Note: This file 
requires that user POSIX account information is
-   availble from either the /etc/passwd file, or 
from an alternative system source.
+   available from either the /etc/passwd file, or 
from an alternative system source.
/para/entry
/row
row
diff --git a/lib/popt/README b/lib/popt/README
index 0b5205b..95f8f8d 100644
--- a/lib/popt/README
+++ b/lib/popt/README
@@ -12,7 +12,7 @@ popt is used by rpm, the Red Hat install program, and many 
other Red Hat
 utilities, all of which provide excellent examples of how to use popt. 
 Complete documentation on popt is available in popt.ps (included in this
 tarball), which is excerpted with permission from the book Linux
-Application Development by Michael K. Johnson and Erik Troan (availble
+Application Development by Michael K. Johnson and Erik Troan (available
 from Addison Wesley in May, 1998).
 
 Comments on popt should be addressed to e...@redhat.com.


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-01-25 Thread Jeremy Allison
The branch, master has been updated
   via  2fff1e1... Revert s3: remove unused Variable
  from  e87adf5... Revert libreplace: fix unused varibale warning on IRIX

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 2fff1e13f1d0f450a1efc771e209a3b3f94fb7c4
Author: Jeremy Allison j...@samba.org
Date:   Mon Jan 25 17:06:54 2010 -0800

Revert s3: remove unused Variable

This reverts commit 9536d94d5478b63fc05047964b40d8786a7246c4.

Bjorn, your change removed the ndr_decoding of the dos attribute.
Not a good idea :-).

Jeremy.

---

Summary of changes:
 source3/smbd/dosmode.c |4 
 1 files changed, 4 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/smbd/dosmode.c b/source3/smbd/dosmode.c
index bc39e02..aaef09b 100644
--- a/source3/smbd/dosmode.c
+++ b/source3/smbd/dosmode.c
@@ -226,6 +226,7 @@ static bool get_ea_dos_attribute(connection_struct *conn,
 uint32 *pattr)
 {
struct xattr_DOSATTRIB dosattrib;
+   enum ndr_err_code ndr_err;
DATA_BLOB blob;
ssize_t sizeret;
fstring attrstr;
@@ -260,6 +261,9 @@ static bool get_ea_dos_attribute(connection_struct *conn,
blob.data = (uint8_t *)attrstr;
blob.length = sizeret;
 
+   ndr_err = ndr_pull_struct_blob(blob, talloc_tos(), NULL, dosattrib,
+   (ndr_pull_flags_fn_t)ndr_pull_xattr_DOSATTRIB);
+
DEBUG(10,(get_ea_dos_attribute: %s attr = %s\n,
  smb_fname_str_dbg(smb_fname), dosattrib.attrib_hex));
 


-- 
Samba Shared Repository


Build status as of Tue Jan 26 07:00:07 2010

2010-01-25 Thread build
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2010-01-25 
00:00:06.0 -0700
+++ /home/build/master/cache/broken_results.txt 2010-01-26 00:00:07.0 
-0700
@@ -1,22 +1,22 @@
-Build status as of Mon Jan 25 07:00:05 2010
+Build status as of Tue Jan 26 07:00:07 2010
 
 Build counts:
 Tree Total  Broken Panic 
 build_farm   0  0  0 
 ccache   1  0  0 
 distcc   0  0  0 
-ldb  30 30 0 
-libreplace   28 12 0 
+ldb  27 27 0 
+libreplace   27 12 0 
 lorikeet 0  0  0 
-pidl 5  5  0 
+pidl 0  0  0 
 ppp  0  0  0 
 rsync0  0  0 
 samba-docs   0  0  0 
 samba-web0  0  0 
-samba_3_current 27 27 0 
-samba_3_master 27 26 3 
-samba_3_next 27 27 3 
-samba_4_0_test 30 29 0 
-talloc   30 10 0 
-tdb  26 17 0 
+samba_3_current 26 26 0 
+samba_3_master 26 25 3 
+samba_3_next 26 25 3 
+samba_4_0_test 28 27 0 
+talloc   27 10 0 
+tdb  25 17 0