Re: [Samba] How can Samba both work, and, suddenly stop working, simultaneously?
Quoting Paul Branon (paulbra...@googlemail.com): I can only interact with the server from the local command line. (I haven't altered the allow hosts in the config file. I haven't changed anything) I used to be able to reach it from all the machines on my network with windows \\10.10.10.1 ERROR: the network path \\10.10.10.1 was not found A few more information might help getting the whole picture. For instance, the ouput of testparm -s (better that just sending out smb.conf as it skips settings that have their default value). Also, you should check what's appearing in samba log files when you're trying to connect to the server. As of now, it is more sounding like you have an external cause and your problem looks like a browsing problem. Didn't one of the windows machines steal the samba server IP address? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] preferred file system
Chris Smith wrote: Is there a preferred file system (ext4, xfs, reiserfs, etc.) for hosting Samba shares used by Windows clients? What do the devs use? I don't know about Samba preferences, but in the current Fedora/RedHat world, reiserfs does not appear to be a preferred filesystem: there's a thread on the Anaconda list at the moment discussing removing the reiserfs code from the installer. Moray. To err is human. To purr, feline -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] xls file locked for editing by unknown user
Dave Coventry wrote: I'm not sure that this is the right place to ask about this, but one of my users is having a problem with her files,specifically excel files which she is editing with openoffice. I suspect that she is closing down her PC without logging out or something and so appears to be still logged in. She is using Vista and the server is a Debian Lenny box. Whenever she tries to access the files on the server the file is apparently locked for editing by unknown user. I cannot find any .~ lockfiles and rebooting both machines does not resolve this. The permissions are set to 777 and the owner of the files is this particular user. As I say, I'm assuming this is a Samba issue. Can anyone suggest a way to resolve this? ~ Dave Which version of Samba? Does smbstatus(1) list the file as being locked? If so, it should give a pid you can examine. The fuser(1) and lsof(8) commands can track which process has a file open. If rebooting the server does not clear the lock, there's either a lock file or a cached lock record somewhere. Try /var/lib/samba/locking.tdb. Although it's binary, you can grep(1) it for the filename, or use tdbdump(8) to display the contents. According to http://wiki.samba.org/index.php/Frequently_Asked_Questions#What_are_tdb_ files.3F, locking.tdb is not required to persist across restarts. I wouldn't try deleting this when Samba is running; even with Samba shut down I would rename it rather than deleting it. However, there has got to be a better solution to stale locks than restarting Samba and deleting a tdb file every time it happens. Does the lock clear automatically after a time? There may be lock tuning parameters that could help - see smb.conf(5) for details. Moray. To err is human. To purr, feline -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] xls file locked for editing by unknown user
Hi Moray, thanks for the assistance! On 29 June 2010 10:41, Moray Henderson (ICT) moray.hender...@ict.om.org wrote: Which version of Samba? Samba version 3.2.5 Does smbstatus(1) list the file as being locked? If so, it should give a pid you can examine. The fuser(1) and lsof(8) commands can track which process has a file open. No. smbstatus returns No locked files If rebooting the server does not clear the lock, there's either a lock file or a cached lock record somewhere. Try /var/lib/samba/locking.tdb. Although it's binary, you can grep(1) it for the filename, or use tdbdump(8) to display the contents. According to http://wiki.samba.org/index.php/Frequently_Asked_Questions#What_are_tdb_files.3F, locking.tdb is not required to persist across restarts. I wouldn't try deleting this when Samba is running; even with Samba shut down I would rename it rather than deleting it. There is no file in /var/lib/samba/ called 'locking.tdb' The only files in that directory bearing a date later than 14th Dec 2009 are these three: passdb.tdb registry.tdb wins.dat -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] How can Samba both work, and, suddenly stop working, simultaneously?
testparm -s Load smb config files from /usr/local/samba/lib/smb.conf Processing section [tmp] Loaded services file OK. [global] workgroup = WORKGROUP server string = Samba Server security = SHARE log file = /usr/local/samba/var/log.%m [tmp] comment = Temporary data On Samba Server path = /tmp read only = No guest ok = Yes Thanks for getting back to me guys. No, it's not an ipaddress conflict issue. I can ssh onto the server, I can access the server on port 80, etc. It's not a cabling issue. Samba has just stopped exporting its file systems. It's running on the server itself and I can access the share(s) but only locally. I can't understand it. I have no access/deny restrictions in the config. (You can see the config above.) === As for logfiles [2010/06/20 22:31:24, 0] nmbd/nmbd.c:main(718) Netbios nameserver version 3.0.20 started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2010/06/20 22:37:02, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(396) * Samba name server SambaServer1 is now a local master browser for workgroup WORKGROUP on subnet 10.10.10.22 * [2010/06/20 22:37:02, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(396) * Samba name server SambaServer1 is now a local master browser for workgroup WORKGROUP on subnet 192.168.1.22 * [2010/06/20 23:51:34, 0] nmbd/nmbd.c:terminate(58) Got SIGTERM: going down... [2010/06/21 12:41:12, 0] nmbd/nmbd.c:main(718) Netbios nameserver version 3.0.20 started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2010/06/21 12:46:50, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(396) * Samba name server SambaServer1 is now a local master browser for workgroup WORKGROUP on subnet 10.10.10.22 * [2010/06/21 12:46:50, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(396) * Samba name server SambaServer1 is now a local master browser for workgroup WORKGROUP on subnet 192.168.1.22 * -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] xls file locked for editing by unknown user
Hello Dave, `lsof | grep your-file-name` If it locked with any of smbd process, try `kill PID`, where `pid` - smbd pid you've got previously. --- wbr, Denis. 2010/6/29 Dave Coventry dgcoven...@gmail.com Hi Moray, thanks for the assistance! On 29 June 2010 10:41, Moray Henderson (ICT) moray.hender...@ict.om.org wrote: Which version of Samba? Samba version 3.2.5 Does smbstatus(1) list the file as being locked? If so, it should give a pid you can examine. The fuser(1) and lsof(8) commands can track which process has a file open. No. smbstatus returns No locked files If rebooting the server does not clear the lock, there's either a lock file or a cached lock record somewhere. Try /var/lib/samba/locking.tdb. Although it's binary, you can grep(1) it for the filename, or use tdbdump(8) to display the contents. According to http://wiki.samba.org/index.php/Frequently_Asked_Questions#What_are_tdb_files.3F , locking.tdb is not required to persist across restarts. I wouldn't try deleting this when Samba is running; even with Samba shut down I would rename it rather than deleting it. There is no file in /var/lib/samba/ called 'locking.tdb' The only files in that directory bearing a date later than 14th Dec 2009 are these three: passdb.tdb registry.tdb wins.dat -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Using pdbedit to list users - inconsistent result?
Hello, I am using Samba on Debian 5.0 (Lenny) - Samba version 3.2.5. The smb.conf defines the user database in the standard way : passdb backend = tdbsam:/etc/samba/private/passdb.tdb If I use pdbedit to list all users in the user database, user drew does not appear : # pdbedit -L|grep drew # If I query user drew on the pdbedit command-line, he appears : # pdbedit drew drew:1054:Drew Smith,,, # Why is there this discrepancy and is it a problem? Cheers, Alastair -- Alastair Sherringham http://www.sherringham.net -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] How can Samba both work, and, suddenly stop working, simultaneously?
Hello Paul, I think, `/tmp` in your filesystem is not not a good place to hold and share your files anyway. Try with another place. By the way, you have an old samba version (`3.0.20`), probably it's better to update it at first. As I know, there are a lot of issues with old `3.0.x` branch and Vista / Seven. It's very old version that isn't supported currently. --- wbr, Denis. 2010/6/29 Paul Branon paulbra...@googlemail.com testparm -s Load smb config files from /usr/local/samba/lib/smb.conf Processing section [tmp] Loaded services file OK. [global] workgroup = WORKGROUP server string = Samba Server security = SHARE log file = /usr/local/samba/var/log.%m [tmp] comment = Temporary data On Samba Server path = /tmp read only = No guest ok = Yes Thanks for getting back to me guys. No, it's not an ipaddress conflict issue. I can ssh onto the server, I can access the server on port 80, etc. It's not a cabling issue. Samba has just stopped exporting its file systems. It's running on the server itself and I can access the share(s) but only locally. I can't understand it. I have no access/deny restrictions in the config. (You can see the config above.) === As for logfiles [2010/06/20 22:31:24, 0] nmbd/nmbd.c:main(718) Netbios nameserver version 3.0.20 started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2010/06/20 22:37:02, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(396) * Samba name server SambaServer1 is now a local master browser for workgroup WORKGROUP on subnet 10.10.10.22 * [2010/06/20 22:37:02, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(396) * Samba name server SambaServer1 is now a local master browser for workgroup WORKGROUP on subnet 192.168.1.22 * [2010/06/20 23:51:34, 0] nmbd/nmbd.c:terminate(58) Got SIGTERM: going down... [2010/06/21 12:41:12, 0] nmbd/nmbd.c:main(718) Netbios nameserver version 3.0.20 started. Copyright Andrew Tridgell and the Samba Team 1994-2004 [2010/06/21 12:46:50, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(396) * Samba name server SambaServer1 is now a local master browser for workgroup WORKGROUP on subnet 10.10.10.22 * [2010/06/21 12:46:50, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(396) * Samba name server SambaServer1 is now a local master browser for workgroup WORKGROUP on subnet 192.168.1.22 * -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Using pdbedit to list users - inconsistent result?
Is this for all users or just some users? If for some users and not others, does pdbedit -Lv someuser show anything different? What happens if you delete and recreate a samba account e.g. smbpasswd -x drew smbpasswd -a drew On 06/29/2010 06:06 AM, Alastair Sherringham wrote: Hello, I am using Samba on Debian 5.0 (Lenny) - Samba version 3.2.5. The smb.conf defines the user database in the standard way : passdb backend = tdbsam:/etc/samba/private/passdb.tdb If I use pdbedit to list all users in the user database, user drew does not appear : # pdbedit -L|grep drew # If I query user drew on the pdbedit command-line, he appears : # pdbedit drew drew:1054:Drew Smith,,, # Why is there this discrepancy and is it a problem? Cheers, Alastair -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] winbindd GETGRENT results in trusted domains environment
Good day. 1. We have configured two domain controllers on Windows 2003 R2. We named them TEST.LOCAL and CHILD.TEST.LOCAL respectively and made a trust relationships between them. 2. We have installed Samba 3.5.3 on Ubuntu 9.10, kernel 2.6.31-14 and configured it for using winbindd. We have encountered a problem with results that winbind returns upon a command GETGRENT. We have obtained those results with the command getent group. In a case if both domain controllers are turned on everything works well and we can get groups of users from both domains, for example: r...@ubuntu:/home/user# getent group root:x:0: daemon:x:1: bin:x:2: sys:x:3: adm:x:4:user tty:x:5: disk:x:6: lp:x:7: mail:x:8: news:x:9: uucp:x:10: man:x:12: proxy:x:13: kmem:x:15: dialout:x:20:user fax:x:21: voice:x:22: cdrom:x:24:user floppy:x:25: tape:x:26: sudo:x:27: audio:x:29:pulse dip:x:30: www-data:x:33: backup:x:34: operator:x:37: list:x:38: irc:x:39: src:x:40: gnats:x:41: shadow:x:42: utmp:x:43: video:x:44: sasl:x:45: plugdev:x:46:user staff:x:50: games:x:60: users:x:100: nogroup:x:65534: libuuid:x:101: syslog:x:102: fuse:x:103: lpadmin:x:104:user ssl-cert:x:105: messagebus:x:106: crontab:x:107: mlocate:x:108: ssh:x:109: avahi-autoipd:x:110: avahi:x:111: netdev:x:112: couchdb:x:113: haldaemon:x:114: admin:x:115:user saned:x:116: pulse:x:117: pulse-access:x:118: gdm:x:119: user:x:1000: sambashare:x:120:user winbindd_priv:x:121: TEST\helpservicesgroup:x:13:TEST\support_388945a0 TEST\telnetclients:x:14: TEST\domain computers:x:15: TEST\domain controllers:x:16: TEST\schema admins:x:17:TEST\administrator TEST\enterprise admins:x:18:TEST\administrator TEST\cert publishers:x:19: TEST\domain admins:x:100010:TEST\administrator TEST\domain users:x:100011: TEST\domain guests:x:100012: TEST\group policy creator owners:x:100013:TEST\administrator TEST\ras and ias servers:x:100014: TEST\dnsadmins:x:100015: TEST\dnsupdateproxy:x:100016: TEST\group1:x:100017: TEST\group2:x:100018: TEST\group3:x:100019: TEST\group4:x:100020: TEST\group5:x:100021: TEST\group6:x:100022: TEST\group7:x:100023: TEST\group8:x:100024: TEST\group9:x:100025: TEST\group10:x:100026: TEST\group11:x:100027: CHILD\domain computers:x:100030: CHILD\domain controllers:x:100031: CHILD\domain admins:x:100032:CHILD\administrator CHILD\domain users:x:100033: CHILD\domain guests:x:100034: CHILD\group policy creator owners:x:100035:CHILD\administrator If we turn off the domain CHILD.TEST.LOCAL then getent group doesn't return any groups from neither domains, even from TEST.LOCAL. r...@ubuntu:/home/user# getent group root:x:0: daemon:x:1: bin:x:2: sys:x:3: adm:x:4:user tty:x:5: disk:x:6: lp:x:7: mail:x:8: news:x:9: uucp:x:10: man:x:12: proxy:x:13: kmem:x:15: dialout:x:20:user fax:x:21: voice:x:22: cdrom:x:24:user floppy:x:25: tape:x:26: sudo:x:27: audio:x:29:pulse dip:x:30: www-data:x:33: backup:x:34: operator:x:37: list:x:38: irc:x:39: src:x:40: gnats:x:41: shadow:x:42: utmp:x:43: video:x:44: sasl:x:45: plugdev:x:46:user staff:x:50: games:x:60: users:x:100: nogroup:x:65534: libuuid:x:101: syslog:x:102: fuse:x:103: lpadmin:x:104:user ssl-cert:x:105: messagebus:x:106: crontab:x:107: mlocate:x:108: ssh:x:109: avahi-autoipd:x:110: avahi:x:111: netdev:x:112: couchdb:x:113: haldaemon:x:114: admin:x:115:user saned:x:116: pulse:x:117: pulse-access:x:118: gdm:x:119: user:x:1000: sambashare:x:120:user winbindd_priv:x:121: But Samba 3.2.15 returned groups from TEST domain in both cases. The configuration files we used in a test environment for Samba, Nsswitch and PAM are listed below. #/etc/smb.conf [global] security = ads encrypt passwords = yes password server = ws2003.test.local workgroup = test realm = CHILD.LOCAL netbios name = ubuntu allow trusted domains = yes passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n . winbind separator = + winbind uid = 10-200 winbind gid = 10-200 winbind enum users = yes winbind enum groups = yes template homedir = /home/winnt/%D/%U template shell = /bin/bash server string = %h server log file = /var/log/samba/log.%m max log size = 1000 syslog = 0 debug level = 11 [public] comment = Public path=/home/public browsable=yes writable=yes admin users=user # /etc/nsswitch.conf passwd: files winbind group: files winbind shadow: compat hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4 networks: files protocols: db files services: db files ethers: db files rpc: db files netgroup: nis # /etc/pam.d/samba auth sufficient pam_winbind.so account sufficient pam_winbind.so session sufficient pam_winbind.so @include common-auth @include common-account @include common-session It is important for us to get group
[Samba] Forcing umask for other users , or remapping POSIX to ACL
Hello, How can I instruct Samba, so public files (755/644) are not public anymore when published by samba. I publish some folders users ACLs. I want them to preserve the POSIX persmission to 644, however, I don't want the files to be readable to Everyone when accessed through Samba. So I want to either: * force an umask * remap the Other permission to a chosen group. Can you help me on that? thanks, Franklin -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] samba winbind is not showing full list
Hi all, i came to know the difference between DL and Security group . previously i was searching for a DL with wbonfo -g .:) wbinfo -g is showing corrrect results . now i am having the only problem that samba is not accessible with hostname and it works with IP address.. i have added following lines in smb.conf with no luck:( wins server = wins ip addy remote announce = wins ip addy/netbios workgroup name remore browse sync = wins ip addy Follwing is the log when i access with hostname. [2010/06/29 17:42:28.120075, 3] smbd/oplock.c:894(init_oplocks) init_oplocks: initializing messages. [2010/06/29 17:42:28.120931, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/06/29 17:42:28.121240, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 137 (0 toread) [2010/06/29 17:42:28.121287, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 5003) conn 0x0 [2010/06/29 17:42:28.121327, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/06/29 17:42:28.121692, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2010/06/29 17:42:28.121723, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2010/06/29 17:42:28.121742, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Windows for Workgroups 3.1a] [2010/06/29 17:42:28.121759, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2010/06/29 17:42:28.121776, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2010/06/29 17:42:28.121793, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2010/06/29 17:42:28.122652, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2010/06/29 17:42:28.122682, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LM 0.12 [2010/06/29 17:42:28.127754, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 2976 (0 toread) [2010/06/29 17:42:28.127845, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 5003) conn 0x0 [2010/06/29 17:42:28.127867, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/06/29 17:42:28.127933, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc807 [2010/06/29 17:42:28.128076, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/06/29 17:42:28.128106, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Windows Server 2003 3790 Service Pack 2] NativeLanMan=[] PrimaryDomain=[Windows Server 2003 5.2] [2010/06/29 17:42:28.128224, 3] smbd/sesssetup.c:805(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 2714 [2010/06/29 17:42:28.131398, 3] libads/kerberos_verify.c:378(ads_secrets_verify_ticket) ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed [2010/06/29 17:42:28.131704, 3] libads/kerberos_verify.c:568(ads_verify_ticket) ads_verify_ticket: krb5_rd_req with auth failed (Bad encryption type) [2010/06/29 17:42:28.131805, 1] smbd/sesssetup.c:332(reply_spnego_kerberos) Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE! [2010/06/29 17:42:28.131946, 3] smbd/error.c:80(error_packet_set) error packet at smbd/sesssetup.c(334) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2010/06/29 17:42:28.146821, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/06/29 17:42:28.146926, 3] smbd/connection.c:31(yield_connection) Yielding connection to [2010/06/29 17:42:28.147258, 3] smbd/server.c:902(exit_server_common) Server exit (failed to receive smb request) -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] xls file locked for editing by unknown user
Hi Klaus, On 29 June 2010 14:04, Klaus Ruebsam k.rueb...@gmx.net wrote: Hi Dave, I´m not at all an expert on Samba, but might it be something quite simple as the ampersand-sign () within your directory name ?!? There are other directories which do not have the ampersand, but which also demonstrate the same behaviour, so I don't think it's the ampersand. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Using pdbedit to list users - inconsistent result?
On 29 June 2010 13:40, Gaiseric Vandal gaiseric.van...@gmail.com wrote: Is this for all users or just some users? Just one user (out of ~15). If for some users and not others, does pdbedit -Lv someuser show anything different? Nothing much different at all (except obvious, user name, id, home etc.) What happens if you delete and recreate a samba account e.g. smbpasswd -x drew smbpasswd -a drew I have not tried that yet, I was a little worried about breaking something. I found this problem when listing users grep'ing for Drew, seeing he was not there and trying to make the account - and getting an error (Unable to add user! (does it already exist?)). I'll probably try the delete and re-create shortly. Cheers, -- Alastair Sherringham http://www.sherringham.net -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] preferred file system
Moray Henderson (ICT) put forth on 6/29/2010 3:54 AM: Chris Smith wrote: Is there a preferred file system (ext4, xfs, reiserfs, etc.) for hosting Samba shares used by Windows clients? What do the devs use? I don't know about Samba preferences, but in the current Fedora/RedHat world, reiserfs does not appear to be a preferred filesystem: there's a thread on the Anaconda list at the moment discussing removing the reiserfs code from the installer. Given the myriad of negative issues surrounding Hans Reiser, ReiserFS and successors, it's not surprising that vendors, devs, and end users have been fleeing in droves to other filesystems. I personally use XFS on Debian Stable but with far more current self rolled kernels using kernel.org source. XFS sees constant consistent development, its dev community being very active. Patches seem to be submitted almost daily. It includes a sizable set of management tools including an online filesystem defragger. I've been very pleased with it. There aren't a lot of filesystem benchmark results published for any of the Linux filesystems, but of those I've read, XFS proves to have the best mix of all around performance. I suggest you post your question to x...@oss.sgi.com. You can post without being a subscriber, but if you do, make that clear so people reply to you as well as the list. -- Stan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] xls file locked for editing by unknown user
On 29 June 2010 14:12, Denis Fateyev de...@fateyev.com wrote: Did you have these locks immediately after you restarted the samba service? Yes. If not, I suggest you to deploy `3.4 - 3.5` samba branch on test machine and check it out with vista again. The funny thing is it was working fine before. I don't have a test machine(well, not ons site anyway) As I know, there is recommended to use samba version greater than 3.3, if you're planning to use it with vista. With test machine, you won't break anything in working configuration and will check it's compatibility with new windows versions. I personally use `3.5.3` with windows xp and seven in my local network. The server with samba acts as domain controller and there are no any issues with xp nor seven. Okay, I'll look into installing a backports version,then... -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] file time-to-live
Hi everyone, There is a way to make files being automatically deleted some time after they have been created? I know that, with some scripting wizardry i could achieve this, but i wanna know if samba has this kind of feature. I have a temp folder that users insist in use like a backup folder, so i want to files to be deleted 24 hours after they have been created. I cannot just delete everything at midnight because this folder is used in full time, so if a user create a file at 23h59, it would be deleted a minute later. Sorry for my poor english and tks in advance. -- Leonardo Carneiro -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] file time-to-live
Hi Brian, tks for your answer. I'm confident that my goal could be achieved through the use of some third-party tool, like a script or something like it, like you sugested. But what i really need to know is if there is some feature in samba that would allow me to do just that. But tks anyway for your answer. On 06/29/2010 11:49 AM, Brian Cuttler wrote: You could write something to check file create times and delete files older than 36 hours, and run if from cron several times per day. I'd suggest # find, but it doesn't have the granularity you are looking for, you could run it at 00:01 and remove files there where 2 days old. I did somethign similar on a VMS system I was managing, worked well until some enterprising student found (I don't believe they wrote it themselves) a program to reset the time stamp on their files (which your users may start doing as well, perhaps using # touch). At which point I started looking for files with creation dates in the future... many users of the date reset program wheren't quite as smart as they thought they where. On Tue, Jun 29, 2010 at 11:32:52AM -0300, Leonardo Carneiro - Veltrac wrote: Hi everyone, There is a way to make files being automatically deleted some time after they have been created? I know that, with some scripting wizardry i could achieve this, but i wanna know if samba has this kind of feature. I have a temp folder that users insist in use like a backup folder, so i want to files to be deleted 24 hours after they have been created. I cannot just delete everything at midnight because this folder is used in full time, so if a user create a file at 23h59, it would be deleted a minute later. Sorry for my poor english and tks in advance. -- Leonardo Carneiro -- --- Brian R Cuttler brian.cutt...@wadsworth.org Computer Systems Support(v) 518 486-1697 Wadsworth Center(f) 518 473-6384 NYS Department of HealthHelp Desk 518 473-077 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] file time-to-live
Leonardo Carneiro - Veltrac writes: There is a way to make files being automatically deleted some time after they have been created? Yes, the tmpwatch utility can do this, but it is not part of the samba suite. It is probably already part of your distribution, but if not, you can get it from https://fedorahosted.org/tmpwatch/ Regards, roel -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] file time-to-live
You could write something to check file create times and delete files older than 36 hours, and run if from cron several times per day. I'd suggest # find, but it doesn't have the granularity you are looking for, you could run it at 00:01 and remove files there where 2 days old. I did somethign similar on a VMS system I was managing, worked well until some enterprising student found (I don't believe they wrote it themselves) a program to reset the time stamp on their files (which your users may start doing as well, perhaps using # touch). At which point I started looking for files with creation dates in the future... many users of the date reset program wheren't quite as smart as they thought they where. On Tue, Jun 29, 2010 at 11:32:52AM -0300, Leonardo Carneiro - Veltrac wrote: Hi everyone, There is a way to make files being automatically deleted some time after they have been created? I know that, with some scripting wizardry i could achieve this, but i wanna know if samba has this kind of feature. I have a temp folder that users insist in use like a backup folder, so i want to files to be deleted 24 hours after they have been created. I cannot just delete everything at midnight because this folder is used in full time, so if a user create a file at 23h59, it would be deleted a minute later. Sorry for my poor english and tks in advance. -- Leonardo Carneiro -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba --- Brian R Cuttler brian.cutt...@wadsworth.org Computer Systems Support(v) 518 486-1697 Wadsworth Center(f) 518 473-6384 NYS Department of HealthHelp Desk 518 473-0773 IMPORTANT NOTICE: This e-mail and any attachments may contain confidential or sensitive information which is, or may be, legally privileged or otherwise protected by law from further disclosure. It is intended only for the addressee. If you received this in error or from someone who was not authorized to send it to you, please do not distribute, copy or use it or any attachments. Please notify the sender immediately by reply e-mail and delete this from your system. Thank you for your cooperation. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] file time-to-live
On Tue, 29 Jun 2010, Brian Cuttler might have said: You could write something to check file create times and delete files older than 36 hours, and run if from cron several times per day. I'd suggest # find, but it doesn't have the granularity you are looking for, you could run it at 00:01 and remove files there where 2 days old. I did somethign similar on a VMS system I was managing, worked well until some enterprising student found (I don't believe they wrote it themselves) a program to reset the time stamp on their files (which your users may start doing as well, perhaps using # touch). At which point I started looking for files with creation dates in the future... many users of the date reset program wheren't quite as smart as they thought they where. (not tested and for GNU/linux) #!/bin/sh # $Id$ # $Log$ # delete files older than yesterday # globals dir=/tmp tf=$dir/.$$ # create a temporary file touch -d yesterday $tf # find all older files find $dir ! -newer $tf -print $tf # delete older files xargs rm -rf $tf # clean up rm -f $tf -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] file time-to-live
On Tue, Jun 29, 2010 at 10:55 AM, Leonardo Carneiro - Veltrac lscarne...@veltrac.com.br wrote: Hi Brian, tks for your answer. I'm confident that my goal could be achieved through the use of some third-party tool, like a script or something like it, like you sugested. But what i really need to know is if there is some feature in samba that would allow me to do just that. Samba does not have this builtin. John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] file time-to-live
You could write a bash script like this: #!/bin/bash find /some/temp/dir/ -name * -atime 1 -delete Where atime* indictates file was modified 1 * 24 hours ago. (*There are loads of time based operators for find) See http://unixhelp.ed.ac.uk/CGI/man-cgi?find for the find man page. You may also want to use -P to never follow symbolic links. Then once the batch file is created, chmod it to something like 750, and make it a cron job to run every hour. Kind Regards, Benedict White Tel: 01444 238070 Tech: 01444 238080 Fax: 01444 238099 Web: http://www.cse-ltd.co.uk Registered in England and Wales No: 3066242 27 Victoria Gardens, Burgess Hill, West Sussex, RH15 9NB Legal Disclaimer: This message and any attachment may be confidential and privileged. If you are not the intended recipient please notify the sender and delete this e-mail and any attachment from your system. Any unauthorised copying, disclosure or distribution of the material in this e-mail is strictly forbidden. All information given in this e-mail is provided in good faith but not binding for legal reasons. -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Leonardo Carneiro - Veltrac Sent: 29 June 2010 15:33 To: samba@lists.samba.org Subject: [Samba] file time-to-live Hi everyone, There is a way to make files being automatically deleted some time after they have been created? I know that, with some scripting wizardry i could achieve this, but i wanna know if samba has this kind of feature. I have a temp folder that users insist in use like a backup folder, so i want to files to be deleted 24 hours after they have been created. I cannot just delete everything at midnight because this folder is used in full time, so if a user create a file at 23h59, it would be deleted a minute later. Sorry for my poor english and tks in advance. -- Leonardo Carneiro -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] file time-to-live
On Tue, 29 Jun 2010, Leonardo Carneiro - Veltrac might have said: Hi everyone, There is a way to make files being automatically deleted some time after they have been created? I know that, with some scripting wizardry i could achieve this, but i wanna know if samba has this kind of feature. I have a temp folder that users insist in use like a backup folder, so i want to files to be deleted 24 hours after they have been created. I cannot just delete everything at midnight because this folder is used in full time, so if a user create a file at 23h59, it would be deleted a minute later. Sorry for my poor english and tks in advance. #!/usr/bin/perl # $Id$ # $Log$ # delete files that are 24 hours old use Getopt::Std; use strict; # globals my $dir = '/tmp'; my $oldest = time - 86400; # get the files opendir(DIR, $dir) or die $0: cannot open dir '$dir': $!; my @files = readdir(DIR); closedir(DIR) or die $0: cannot close dir '$dir': $!; # decide which files to delete my @deletefiles; foreach my $file (@files) { next if $file eq '.'; next if $file eq '..'; next if $file eq 'lost+found'; my @st = stat($dir . '/' . $file); push(@deletefiles, $file) if $st[9] $oldest; } # delete the files map { unlink($dir . '/' . $_) or warn $0: cannot remove file '$dir/$_': $! } @deletefiles; -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] file time-to-live
On Tue, 29 Jun 2010, Benedict White might have said: You could write a bash script like this: #!/bin/bash find /some/temp/dir/ -name * -atime 1 -delete Duh, you can also do it with mtime and not a time find $dir -mtime 1 -exec /bin/rm -f {} \; You don't have to give a name if you want all files. Mike -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] limit access to folder without mapping a new drive
Hi, Under our file structure, we have /files/all/departments/. We want everyone to have access to all the folders under files, but there are couple of folders in the departments directory/folder that need to limit access to only one person. Is it possible without mapping a new drive? Thanks! -- [files] comment = files # hosts allow = path = /files public = yes writable = yes printable = no create mask = 0644 directory mask = 0755 available = yes guest only = no browseable = yes only user = no -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] limit access to folder without mapping a new drive
Change the file permissions, either via Windows or with unix chmod, chown etc on the server.. The share perms will not override the file system permissions. On 06/29/2010 12:19 PM, c cc wrote: Hi, Under our file structure, we have /files/all/departments/. We want everyone to have access to all the folders under files, but there are couple of folders in the departments directory/folder that need to limit access to only one person. Is it possible without mapping a new drive? Thanks! -- [files] comment = files # hosts allow = path = /files public = yes writable = yes printable = no create mask = 0644 directory mask = 0755 available = yes guest only = no browseable = yes only user = no -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] limit access to folder without mapping a new drive
Under our file structure, we have /files/all/departments/. We want everyone to have access to all the folders under files, but there are couple of folders in the departments directory/folder that need to limit access to only one person. Is it possible without mapping a new drive? Thanks! The way I prefer to do this is to set proper posix acls. John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba3 to samba4 migration
Hi, I'm testing samba 4 in my organization. I have a samba3 domain with LDAP backend. I'm trying migrate workstations and users from old samba to samba4. Is this possible? Thanks, Luciano luci...@multitasknet.com.br -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] New user need help - AD/Krb/Smb
I'm trying to put my Samba Server in AD Win2008, as I did in the past with Win2003. I'm using smbd Version 3.2.5, winbindd Version 3.2.5, MIT Kerberos 1.6.1-1 and ntpdate synchronized with AD, I follow this howto http://wiki.samba.org/index.php/Samba_%26_Active_Directory and this https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto All my tests demonstrate the successful when I run the following commands: # net ads testjoin Join is OK # net ads info LDAP server: 10.215.1.201 LDAP server name: GSCPSVMAD01.gransapore.corp.dc Realm: GRANSAPORE.CORP.DC Bind Path: dc=GRANSAPORE,dc=CORP,dc=DC LDAP port: 389 Server time: Tue, 29 Jun 2010 14:02:24 BRT KDC server: 10.215.1.201 Server time offset: 4 # net ads status -UAdministrator%Password # wbinfo -K thiago.ferreira%password plaintext kerberos password authentication for [thiago.ferreira] succeeded (requesting cctype: FILE) credentials were put in: FILE:/tmp/krb5cc_0 # wbinfo -u # wbinfo -g # wbinfo -m # wbinfo -t # net ads user # net ads group # getent passwd # getent group But I would like to open a share this Samba using a desktop WinXP and I can't to do, stay asking login and password to open, however I put the login and password correct and don't work. I before to joining the Samba in AD put an entry in DNS with the name fqnd from my Server samba, stayded cpsmonitor.gransapore.corp.dc with a PTR also, my file hosts e my resolv.conf is all right. Bellow follows my smb.conf, my krb5.conf and my logs for analyze. if someone can help me with any hint... #less krb5.conf [libdefaults] default_realm = GRANSAPORE.CORP.DC ticket_lifetime = 24000 [realms] GRANSAPORE.CORP.DC = { kdc = gscpsvmad01.gransapore.corp.dc admin_server = gscpsvmad01.gransapore.corp.dc default_domain = gransapore.corp.dc } [domain_realm] .gransapore.corp.dc = GRANSAPORE.CORP.DC gransapore.corp.dc = GRANSAPORE.CORP.DC [login] krb4_convert = true krb4_get_tickets = false #less smb.conf [global] workgroup = GRANSAPORE realm = GRANSAPORE.CORP.DC security = ADS auth methods = winbind password server = gscpsvmad01.gransapore.corp.dc passdb backend = tdbsam restrict anonymous = 2 client NTLMv2 auth = Yes syslog = 2 log file = /var/log/samba/log.%m max log size = 1000 panic action = /usr/share/samba/panic-action %d idmap uid = 1-2 idmap gid = 1-2 template shell = /bin/bash winbind separator = + winbind enum users = Yes winbind enum groups = Yes winbind use default domain = Yes winbind trusted domains only = Yes [share01] comment = Network Share path = /var/spool/samba/share01 valid users = @Domain Users force group = Domain Users read only = No create mask = 0664 directory mask = 0775 guest ok = Yes Samba Logs: #less log.wb-GRANSAPORE [2010/06/29 13:38:18, 1] libads/authdata.c:kerberos_return_pac(398) kinit failed for 'thiago.ferre...@gransapore.corp.dc' with: Preauthentication failed (-1765328360) [2010/06/29 13:38:34, 1] libads/kerberos.c:smb_krb5_get_ntstatus_from_krb5_error_init_creds_opt(159) no krb5_error [2010/06/29 13:38:34, 1] libads/authdata.c:kerberos_return_pac(398) kinit failed for 'gransapore\thiago.ferre...@gransapore.corp.dc' with: Client not found in Kerberos database (-1765328378) [2010/06/29 13:38:47, 1] libads/kerberos.c:smb_krb5_get_ntstatus_from_krb5_error_init_creds_opt(159) no krb5_error [2010/06/29 13:38:47, 1] libads/authdata.c:kerberos_return_pac(398) kinit failed for 'gransapore\thiago.ferre...@gransapore.corp.dc' with: Client not found in Kerberos database (-1765328378) [2010/06/29 13:38:55, 1] libads/kerberos.c:smb_krb5_get_ntstatus_from_krb5_error_init_creds_opt(159) no krb5_error [2010/06/29 13:38:55, 1] libads/authdata.c:kerberos_return_pac(398) kinit failed for 'gransapore.corp.dc\thiago.ferre...@gransapore.corp.dc' with: Client not found in Kerberos database (-1765328378) [2010/06/29 13:39:05, 1] libads/kerberos.c:smb_krb5_get_ntstatus_from_krb5_error_init_creds_opt(159) no krb5_error [2010/06/29 13:39:05, 1] libads/authdata.c:kerberos_return_pac(398) kinit failed for 'thiago.ferre...@gransapore.corp.dc' with: Preauthentication failed (-1765328360) [2010/06/29 13:57:37, 1] libsmb/clikrb5.c:ads_krb5_mk_req(680) ads_krb5_mk_req: krb5_get_credentials failed for gscpsvmad...@gransapore (Cannot resolve network address for KDC in requested realm) [2010/06/29 13:57:37, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(626) cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Cannot resolve network address for KDC in requested realm #less log.winbindd [2010/06/29 15:24:40, 0] winbindd/winbindd_cache.c:initialize_winbindd_cache(2374) initialize_winbindd_cache: clearing cache and re-creating with version number 1 [2010/06/29 15:24:40, 1]
[Samba] Samba Forum vs. Mailing List?`!
Hello everyone, I wanted to ask if there is an official Samba Forum, because I could not find any on the Project Page. If there isn't any, is there a particular reason for this not-existance? Best regards Tom H. Lautenbacher -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba Forum vs. Mailing List?`!
Tom H. Lautenbacher wrote: Hello everyone, I wanted to ask if there is an official Samba Forum, because I could not find any on the Project Page. If there isn't any, is there a particular reason for this not-existance? --- No need? Why do you need a forum with a mailing list? Forums are non-standard. Mailing lists have software to process them in many ways. Many are archived -- not something you get with forums. Forums seems to be a 'windows' thing for users when companies want to be able to ignore their user base. Emails cause the companies too much headache because the user's emails end up in employee inboxes and cause distractions from doing real work, so they try to put users in forums, so they won't distract the companies' employees. -l -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba Forum vs. Mailing List?`!
Hi Linda! I wanted to ask if there is an official Samba Forum No need? Why do you need a forum with a mailing list? Because a forum IMHO has certain advantages over a mailing list. Forums are non-standard. Mailing lists have software to process them in many ways. Many are archived -- not something you get with forums. @Standard: Yes, I agree. This is a disadvantage for forums in comparison to other means of communication, such as mailing lists or usenet-news. @Software: What software is there and in which ways can you process mails? @Archive: Anybody running a forum can decide on his own, if he wants to archive things or not. Forums seems to be a 'windows' thing for users when companies want to be able to ignore their user base. Emails cause the companies too much headache because the user's emails end up in employee inboxes and cause distractions from doing real work, so they try to put users in forums, so they won't distract the companies' employees. U, well.. I am self employed and feel distracted and annoyed by all those useless emails from all those mailing-lists that I have to attend, too. My opinion is: Every means of communication has it's functional range. Mailing lists are existing since many years. They were perfect in those pioneer years, when a small group of people worked together on a small thing: Everyone needed to be informed about everything and everybody had to discuss everything. Until today mailing lists serve such small development groups very good. But as projects grow bigger and the group of users with them, IMHO there arises the need for further means of communication. Speaking for me: I am a Samba user since about 2002, using Samba as Administrator of some small-midsized Networks. I do not contribute code or help developing. From time to time I am having a problem with implementing Samba and need quick advice and help. For me now to get help, I needed to subscribe to this mailing list. From this moment on I received approx. 20 emails which do not concern me or my problem. I do not know the answer to all of those questions either, so I can't help anybody. I am just annoyed and bothered by my mailbox getting literally spammed. Since Samba is not the only open source community who's mailing list I am attending, I am receiving daily approx. 30-40 of those emails. For my case a forum would server much better. I could go there, post my question and subscribe to my thread, getting email-notification just about my question. Furthermore I could quickly browse the forum to see, if there are any open topics where I think that I could help someone else out. Given that the forum settings are saving all postings for ever, the whole forum would serve everybody as a very valuable knowledge base, making it easy to find answers for common problems, without bugging anybody or spamming everybody with the 10,000 versions of the same question. Both means of communication can easily live in harmony! Developers or hard core members, who need to stay in touch very intensively and want to participate to ALL communication can continue participating at the mailing list (although it would be easily possible to just subscribe to an analogue topic in the forum and get automatically all messages, but anyway..). Another great plus of Forums is the possibility to use HTML and other functionality. Well I know guys, all hardcore old-school guys among you roll their eyes, because you love plain text stuff. But the reality is that it does make sense and does bring communication again to a much higher level of productivity, when you are able e.g. to implement screenshots or diagrams to your answers, instead of having to e.g. draw a network diagram with ASCII art... Well there are many pros and cons to everything. Fact is, that I am having a problem with Samba to that I can't find any information, but instead get spammed with 30 emails that do not really concern me. Fact is that although Windows 7 is out for a long time now, I had to find all the information about the needed registry patches in some other forums or spread over some archived mailing-list fragments, hard to read and difficult to find. A decent userforum/knowledgebase would have served in a much more efficient way! So my final question: If I would help making a Samba-Forum, would there be anybody here who would appreciate and would like to use it? Would the official guys among you want to implement it to the samba-homepage? All the best Tom H. Lautenbacher -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba Forum vs. Mailing List?`!
Tom H. Lautenbacher wrote: U, well.. I am self employed and feel distracted and annoyed by all those useless emails from all those mailing-lists that I have to attend, too. That's because you don't use the software and tools available to process email. Try procmail. Sort your email into mailboxes -- including your samba email. Then read that email box when you want to. Write a shell script or use mozilla to auto-expire unread email in those folders. You'll have all the features you might want in a forum. You can ignore everyone to your heart's content! :-) My opinion is: Every means of communication has it's functional range. --- nope -- forums can't deliver themselves to my email system automatically. They are proprietary solutions that don't fit any standard. Mailing lists are existing since many years. They were perfect in those pioneer years, when a small group of people worked together on a small thing: Everyone needed to be informed about everything and everybody had to discuss everything. Until today mailing lists serve such small development groups very good. They serve development groups fine today -- small and large... The linux kernel runs off of a mail list. There is no larger open source project than that. But as projects grow bigger and the group of users with them, IMHO there arises the need for further means of communication. --- Not forums. Tell me one thing you can do with forums that you can't do with email. Speaking for me: I am a Samba user since about 2002, using Samba as Administrator of some small-midsized Networks. I do not contribute code or help developing. From time to time I am having a problem with implementing Samba and need quick advice and help. For me now to get help, I needed to subscribe to this mailing list. From this moment on I received approx. 20 emails which do not concern me or my problem. Because you don't use the tools that are available to you. I wrote my own perl script to process and sort my email in .. the early 90's -- using perl2 or perl3. I could throw it at you, but unless you've grown up with it, it wouldn't be that useful to you. Go get procmail. I do not know the answer to all of those questions either, so I can't help anybody. I am just annoyed and bothered by my mailbox getting literally spammed. Since Samba is not the only open source community who's mailing list I am attending, I am receiving daily approx. 30-40 of those emails. Not a problem -- you are not alone! I have well over 50 groups I' am subscribed to -- because I use the software -- like you -- I can't begin to read all of them. But I have all of them come into separate boxes where I have them auto-expire in a way that I keep the last few-several months depending on the group. Then I can read them at my leisure. My main inbox gets less than 5 emails a day. Overall I receive maybe 1000 emails a day (about 30-40% are spam that get filtered out by spamassassin -- ANOTHER tool you can't use in a forum!). For my case a forum would server much better. I could go there, post my question and subscribe to my thread, getting email-notification just about my question. Furthermore I could quickly browse the forum to see, if there are any open topics where I think that I could help someone else out. Given that the forum settings are saving all postings for ever, the whole forum would serve everybody as a very valuable knowledge base, making it easy to find answers for common problems, without bugging anybody or spamming everybody with the 10,000 versions of the same question. If you want to see archives of the newsgroups, you can search them with google. Different groups have different archives, but most forums are not easily accessible with google -- you have to have logins and sign up and login...all sorts of messing stuff. If you put all the postings into a folder, -- use thunderbird or something that threads the conversations. You can browse by discussion, topic/subject, person...etc. Anything you could do in a forum, you can do in email. So my final question: If I would help making a Samba-Forum, would there be anybody here who would appreciate and would like to use it? Would the official guys among you want to implement it to the samba-homepage? --- Tell us one thing you can do in a forum that you can't do in email. Everything you want can be done in email with free tools! Seriously, procmail will let you filter all your email by group person, subject...etc. I'm sure there are others (I don't use procmail, but it's been around about as long as my perl script I use!). If you need more suggestions, check google for email filtering programs -- try spamassassin to weed out spam. I am NOT a member of the samba development team, so my opinion is my own. They may
Re: [Samba] Samba Forum vs. Mailing List?`!
Forums almost without exception style themselves to annoy or even prevent use by any but those with the best vision, rarely, if ever, styling so that users by default get to see their preferred font size instead of having to jump through hoops to do it. Email from mailing lists, even when originally styled by the sender, usually has styling stripped, so that subscribers get plain text only, which renders legibly if not comfortably in the size the reader prefers. After more than a dozen years samping forums and subscribing to many mailing lists and newsgroups, I find those with the most to contribute gravitate to mailing lists, whereas forums tend to be dominated by unanswered and poorly answered questions. -- The wise are known for their understanding, and pleasant words are persuasive. Proverbs 16:21 (New Living Translation) Team OS/2 ** Reg. Linux User #211409 Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Long delays when launching programs for the first time in my Windows 7 Profile (Samba 3.4.3 as PDC)
I don't know about the program delays, but the long time delay for the Win7 users sounds like it is copying the profile from your PDC to the user's workstation the first time. YES -- win7 is inordinately slow copying profiles. I've had it take 45 minutes just to log out. But it would take a long time the first time while it downloaded their profile to their workstation. On subsequent logins, everything is already local, so login should go much faster. It's considered a standard 'microsoft' feature and I also need to solve the similar problem of it taking too long to synchronize at logoff -- when it tries to synchronize the server and workstation profiles. It takes 'forever'and there's no way for me to know if it has hung or not -- one time that I let it go, it finished after 45 minutes of slow (100K) synchronization activity. That's about 1/1000th of my network bandwidth! MS suggest having small profiles and/or preloading users' profiles on their workstation to minimize the 'first logon' to a domain. I.e. they suggest making poor use of the domain synchronization feature! If you find a solution, would be interested in finding out... My next step is to hit up the windows forums, but I rarely get answer there from anyone who knows anything, so I dread bothering to ask. -linda -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba 3.3 ldap tools
I am currently trying to setup my Samba server to act as a samba PDC, with ldap as a backend. I have a selfsigned CA, that has signed the certificates to my ldap server. Starting my smbd, i keep getting the message smb_ldap_setup_connection: ldap://ldap.streetgeek.lan/ Failed to issue the StartTLS instruction: Connect error Connection to LDAP server failed for the 1 try! smbldap_open: already connected to the LDAP server Failed search for base: dc=dev,dc=gamersalliance,dc=net,dc=au, error: -1 (Can't contact LDAP server) (error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed (self signed certificate in certificate chain)) I have set in smbldap-tools.conf to verify=allow, as well as in ldap.conf to TLS_REQCERT = allow, so i dont understand why this is happening. All of my systems are pointed to the same cacert file so i doubt that it is confusing certificates. Are there any other options i should be considering? Thanks William -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba Forum vs. Mailing List?`!
Hallo, Tom, Du meintest am 30.06.10: I wanted to ask if there is an official Samba Forum No need? Why do you need a forum with a mailing list? Because a forum IMHO has certain advantages over a mailing list. But you should first try to use the possibilities of a mailing list - beginning with reply to when you answer to Linda's mail. It's no good behaviour starting a new thread instead. Viele Gruesse! Helmut -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Build status as of Tue Jun 29 06:00:01 2010
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2010-06-28 00:00:03.0 -0600 +++ /home/build/master/cache/broken_results.txt 2010-06-29 00:00:02.0 -0600 @@ -1,4 +1,4 @@ -Build status as of Mon Jun 28 06:00:01 2010 +Build status as of Tue Jun 29 06:00:01 2010 Build counts: Tree Total Broken Panic @@ -16,7 +16,7 @@ samba_3_master 28 28 1 samba_3_next 28 28 3 samba_4_0_test 30 30 0 -samba_4_0_waf 30 30 0 +samba_4_0_waf 30 30 1 talloc 30 7 0 tdb 28 7 0
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via cc7c572... s4:secrets Ensure secrets.ldb uses the same hooks as the rest of Samba via 48c8896... s4:selftest Split out PKINIT tests from test_kinit.sh and test enc types via d76e485... s4:kdc Rework the 'allowed enc types' calculation via f41e711... s4:auth Query LDB for msds-SupportedEncryptionTypes for the KDC via 5167b97... s4:kerberos Add functions to convert msDS-SupportedEncryptionTypes via 9fc3f81... s4:libnet_join Fix typo in msDS-SupportedEncryptionTypes via 94637e5... s4:provision Add an msDS-SupportedEncryptionTypes entry to our DC from 30dc87d... build: only use git when found by configure http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit cc7c572b3d87d2bd16cd7ec939a2d8a81bf36ef9 Author: Andrew Bartlett abart...@samba.org Date: Wed Jun 23 21:15:43 2010 +1000 s4:secrets Ensure secrets.ldb uses the same hooks as the rest of Samba This ensures that, for example, the utf8 functions are the same, the GUID handler is the same and the NOSYNC flag is applied. Andrew Bartlett commit 48c8896f2ede1c441a1448c2e45106a317b64832 Author: Andrew Bartlett abart...@samba.org Date: Thu Jun 24 09:42:40 2010 +1000 s4:selftest Split out PKINIT tests from test_kinit.sh and test enc types This allows us to run the PKINIT tests only against the main DC (for which the certificates were generated), while testing the available encryption types in each functional level. In particular, we need to assert that AES encryption is available in the 2008 functional level. Andrew Bartlett commit d76e4852ebf6ebaaa0e59b481c4b17ac15310aec Author: Andrew Bartlett abart...@samba.org Date: Thu Jun 24 09:40:16 2010 +1000 s4:kdc Rework the 'allowed enc types' calculation This changes the calculation to apply the allowed enc types to all uses of the key (no point allowing a weak kinit to a key the server wanted strongly protected). It also ensures that all the non-DES keys are available on the krbtgt in particular, even as it does not have a msds-SupportedEncryptionTypes attributes. Andrew Bartlett commit f41e71109744cbacfcbf6b8cf545e1f322d68494 Author: Andrew Bartlett abart...@samba.org Date: Thu Jun 24 10:03:29 2010 +1000 s4:auth Query LDB for msds-SupportedEncryptionTypes for the KDC The KDC needs this to determine what encryption types an entry supports Andrew Bartlett commit 5167b97ff2d77ef28c59bb36988835ae421f027b Author: Andrew Bartlett abart...@samba.org Date: Mon Jun 28 23:19:16 2010 +1000 s4:kerberos Add functions to convert msDS-SupportedEncryptionTypes This will allow us to interpret this attibute broadly in Samba. Andrew Bartlett commit 9fc3f8194d55c20e1d5404301a0663888c4a0ba5 Author: Andrew Bartlett abart...@samba.org Date: Mon Jun 28 23:17:28 2010 +1000 s4:libnet_join Fix typo in msDS-SupportedEncryptionTypes commit 94637e5fe4724261f1cd5f48d8641e82f4b776ae Author: Andrew Bartlett abart...@samba.org Date: Mon Jun 28 23:14:23 2010 +1000 s4:provision Add an msDS-SupportedEncryptionTypes entry to our DC This ensures that our DC will use all the available encyption types. (The KDC reads this entry to determine what the server supports) Andrew Bartlett --- Summary of changes: source4/auth/kerberos/kerberos.h|6 ++ source4/auth/kerberos/kerberos_util.c | 57 source4/auth/sam.c |1 + source4/dsdb/pydsdb.c | 17 ++- source4/kdc/db-glue.c | 76 -- source4/lib/ldb-samba/ldb_wrap.c| 16 -- source4/libnet/libnet_join.c|2 +- source4/param/secrets.c | 43 +-- source4/scripting/python/samba/provision.py | 17 ++- source4/selftest/tests.sh |5 ++- testprogs/blackbox/test_kinit.sh| 28 +- testprogs/blackbox/test_pkinit.sh | 65 +++ 12 files changed, 228 insertions(+), 105 deletions(-) create mode 100755 testprogs/blackbox/test_pkinit.sh Changeset truncated at 500 lines: diff --git a/source4/auth/kerberos/kerberos.h b/source4/auth/kerberos/kerberos.h index 96c11a4..b4422b5 100644 --- a/source4/auth/kerberos/kerberos.h +++ b/source4/auth/kerberos/kerberos.h @@ -53,6 +53,9 @@ struct keytab_container { #define KRB5_KEY_DATA(k) ((k)-contents) #endif /* HAVE_KRB5_KEYBLOCK_KEYVALUE */ +#define ENC_ALL_TYPES (ENC_CRC32 | ENC_RSA_MD5 | ENC_RC4_HMAC_MD5 |\ + ENC_HMAC_SHA1_96_AES128 | ENC_HMAC_SHA1_96_AES256) + #ifndef HAVE_KRB5_SET_REAL_TIME
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 845e7a6... Fixed incorrect use of cn instead of lDAPDisplayName from cc7c572... s4:secrets Ensure secrets.ldb uses the same hooks as the rest of Samba http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 845e7a609d23677539d9439b941e0dffb53f6bc9 Author: Nadezhda Ivanova nivan...@samba.org Date: Tue Jun 29 11:46:22 2010 +0300 Fixed incorrect use of cn instead of lDAPDisplayName --- Summary of changes: source4/dsdb/samdb/ldb_modules/acl.c |4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/source4/dsdb/samdb/ldb_modules/acl.c b/source4/dsdb/samdb/ldb_modules/acl.c index bd788d4..e823b1e 100644 --- a/source4/dsdb/samdb/ldb_modules/acl.c +++ b/source4/dsdb/samdb/ldb_modules/acl.c @@ -724,7 +724,7 @@ static int acl_check_self_membership(struct ldb_module *module, if (ret != LDB_SUCCESS) { return ret; } - member_el = ldb_msg_find_element(req-op.mod.message, Member); + member_el = ldb_msg_find_element(req-op.mod.message, member); if (!member_el) { return LDB_ERR_OPERATIONS_ERROR; } @@ -844,7 +844,7 @@ static int acl_modify(struct ldb_module *module, struct ldb_request *req) if (ldb_attr_cmp(nTSecurityDescriptor, req-op.mod.message-elements[i].name) == 0) { modify_sd = true; } - else if (ldb_attr_cmp(Member, req-op.mod.message-elements[i].name) == 0) { + else if (ldb_attr_cmp(member, req-op.mod.message-elements[i].name) == 0) { ret = acl_check_self_membership(module, req, sd, -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via ee01fe8... s3-client: Make sure we only write to an opened file. via f324036... s3-winbind: Make sure we crash if domain is really not found. via eb7bf9d... s3-net: Make sure we don't call free on garbage. via 1db7356... s3-net: Use talloc_asprintf and return if file is in wrong format. via e52f3d8... s3-librpc: Fixed GUID_from_data_blob() with length of 32. from 845e7a6... Fixed incorrect use of cn instead of lDAPDisplayName http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit ee01fe8c5bd450c82db3f7a7e8c783ac32b0812d Author: Andreas Schneider a...@samba.org Date: Tue Jun 29 10:42:36 2010 +0200 s3-client: Make sure we only write to an opened file. Found by clang-analyzer. commit f324036e76abb0b572fb65c4c403e7ede259682a Author: Andreas Schneider a...@samba.org Date: Tue Jun 29 10:34:17 2010 +0200 s3-winbind: Make sure we crash if domain is really not found. Found by clang-analyzer. commit eb7bf9d7309914fb2207f822e8017e1c1001de46 Author: Andreas Schneider a...@samba.org Date: Tue Jun 29 10:07:22 2010 +0200 s3-net: Make sure we don't call free on garbage. Found by clang-analyzer. commit 1db7356fa17cb3aeffcf4aff2149eaceaa5a62ea Author: Andreas Schneider a...@samba.org Date: Mon Jun 28 13:20:18 2010 +0200 s3-net: Use talloc_asprintf and return if file is in wrong format. Found by clang-analyzer. commit e52f3d8637c7af2f0ea57954c7f13389f5a1e125 Author: Andreas Schneider a...@samba.org Date: Mon Jun 28 21:00:30 2010 +0200 s3-librpc: Fixed GUID_from_data_blob() with length of 32. If we hit the case that the blob length is 32. The code goes to the end of the function and generates a GUID with garbage. So try to convert the blob to the GUID and return. --- Summary of changes: librpc/ndr/uuid.c | 10 +- nsswitch/pam_winbind.c |2 +- source3/client/clitar.c | 14 ++ source3/utils/net_ads_gpo.c |2 +- source3/utils/net_rpc_printer.c | 35 --- 5 files changed, 33 insertions(+), 30 deletions(-) Changeset truncated at 500 lines: diff --git a/librpc/ndr/uuid.c b/librpc/ndr/uuid.c index d46da09..33a7eee 100644 --- a/librpc/ndr/uuid.c +++ b/librpc/ndr/uuid.c @@ -117,12 +117,12 @@ _PUBLIC_ NTSTATUS GUID_from_data_blob(const DATA_BLOB *s, struct GUID *guid) { size_t rlen = strhex_to_str((char *)blob16.data, blob16.length, (const char *)s-data, s-length); - if (rlen == blob16.length) { - /* goto the ndr_pull_struct_blob() path */ - status = NT_STATUS_OK; - s = blob16; + if (rlen != blob16.length) { + return NT_STATUS_INVALID_PARAMETER; } - break; + + s = blob16; + return GUID_from_ndr_blob(s, guid); } case 16: return GUID_from_ndr_blob(s, guid); diff --git a/nsswitch/pam_winbind.c b/nsswitch/pam_winbind.c index f13e365..b2d74de 100644 --- a/nsswitch/pam_winbind.c +++ b/nsswitch/pam_winbind.c @@ -2422,7 +2422,7 @@ static char* winbind_upn_to_username(struct pwb_context *ctx, wbcErr wbc_status = WBC_ERR_UNKNOWN_FAILURE; struct wbcDomainSid sid; enum wbcSidType type; - char *domain; + char *domain = NULL; char *name; char *p; diff --git a/source3/client/clitar.c b/source3/client/clitar.c index fc98fa8..0a1adb4 100644 --- a/source3/client/clitar.c +++ b/source3/client/clitar.c @@ -998,16 +998,22 @@ static int skip_file(int skipsize) static int get_file(file_info2 finfo) { - uint16_t fnum; + uint16_t fnum = (uint16_t) -1; int pos = 0, dsize = 0, bpos = 0; uint64_t rsize = 0; + NTSTATUS status; DEBUG(5, (get_file: file: %s, size %.0f\n, finfo.name, (double)finfo.size)); - if (ensurepath(finfo.name) - (!NT_STATUS_IS_OK(cli_open(cli, finfo.name, O_RDWR|O_CREAT|O_TRUNC, DENY_NONE,fnum { + if (!ensurepath(finfo.name)) { DEBUG(0, (abandoning restore\n)); - return(False); + return False; + } + + status = cli_open(cli, finfo.name, O_RDWR|O_CREAT|O_TRUNC, DENY_NONE, fnum); + if (!NT_STATUS_IS_OK(status)) { + DEBUG(0, (abandoning restore\n)); + return False; } /* read the blocks from the tar file and write to the remote file */ diff --git a/source3/utils/net_ads_gpo.c b/source3/utils/net_ads_gpo.c index b120ca5..3d89045 100644 --- a/source3/utils/net_ads_gpo.c +++
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via bf07bf2... winreg: fix winreg_QueryMultipleValues() IDL and torture tests. from ee01fe8... s3-client: Make sure we only write to an opened file. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit bf07bf2857517b0972f47f5e9b46b7bde80c041b Author: Günther Deschner g...@samba.org Date: Tue Jun 29 11:40:24 2010 +0200 winreg: fix winreg_QueryMultipleValues() IDL and torture tests. Guenther --- Summary of changes: librpc/idl/winreg.idl| 13 +++-- source4/torture/ndr/winreg.c | 34 +- source4/torture/rpc/winreg.c | 12 ++-- 3 files changed, 30 insertions(+), 29 deletions(-) Changeset truncated at 500 lines: diff --git a/librpc/idl/winreg.idl b/librpc/idl/winreg.idl index ce00b8e..19f309b 100644 --- a/librpc/idl/winreg.idl +++ b/librpc/idl/winreg.idl @@ -371,17 +371,18 @@ import lsa.idl, security.idl, misc.idl; ); typedef struct { - winreg_String *name; - winreg_Type type; - uint32 offset; - uint32 length; + winreg_ValNameBuf *ve_valuename; + uint32 ve_valuelen; + uint32 *ve_valueptr; + winreg_Type ve_type; } QueryMultipleValue; - + /**/ /* Function: 0x1d */ [public] WERROR winreg_QueryMultipleValues( [in,ref] policy_handle *key_handle, - [in,out,ref,size_is(num_values),length_is(num_values)] QueryMultipleValue *values, + [in,ref,size_is(num_values),length_is(num_values)] QueryMultipleValue *values_in, + [out,ref,size_is(num_values),length_is(num_values)] QueryMultipleValue *values_out, [in] uint32 num_values, [in,out,unique,size_is(*buffer_size),length_is(*buffer_size)] uint8 *buffer, [in,out,ref] uint32 *buffer_size diff --git a/source4/torture/ndr/winreg.c b/source4/torture/ndr/winreg.c index 14ee844..2bd28f0 100644 --- a/source4/torture/ndr/winreg.c +++ b/source4/torture/ndr/winreg.c @@ -242,14 +242,16 @@ static const uint8_t querymultiplevalues_in_data[] = { static bool querymultiplevalues_in_check(struct torture_context *tctx, struct winreg_QueryMultipleValues *r) { + torture_assert_mem_equal(tctx, r-in.key_handle, querymultiplevalues_in_data, sizeof(struct policy_handle), key handle); torture_assert_int_equal(tctx, r-in.num_values, 1, num values); - torture_assert_str_equal(tctx, r-in.values[0].name-name, HOMEPATH, -name); - - torture_assert_int_equal(tctx, r-in.values[0].type, 0, type); - torture_assert_int_equal(tctx, r-in.values[0].offset, 0, offset); - torture_assert_int_equal(tctx, r-in.values[0].length, 0, length); - torture_assert_int_equal(tctx, *r-in.buffer_size, 76, buffer size); + torture_assert_str_equal(tctx, r-in.values_in[0].ve_valuename-name, HOMEPATH, name); + torture_assert_int_equal(tctx, r-in.values_in[0].ve_valuename-length, 18, name len); + torture_assert_int_equal(tctx, r-in.values_in[0].ve_valuename-size, 18, name size); + torture_assert_int_equal(tctx, r-in.values_in[0].ve_valuelen, 0, length); + torture_assert(tctx, (r-in.values_in[0].ve_valueptr == NULL), ve_valueptr); + torture_assert_int_equal(tctx, r-in.values_in[0].ve_type, 0, type); + torture_assert_mem_equal(tctx, r-in.buffer, querymultiplevalues_in_data+0x6C, *r-in.buffer_size, buffer); + torture_assert_int_equal(tctx, *r-in.buffer_size, 32, buffer size); return true; } @@ -274,16 +276,12 @@ static const uint8_t querymultiplevalues_out_data[] = { static bool querymultiplevalues_out_check(struct torture_context *tctx, struct winreg_QueryMultipleValues *r) { - torture_assert_str_equal(tctx, r-out.values[0].name-name, HOMEPATH, -name); - - torture_assert_int_equal(tctx, r-out.values[0].type, 0, type); - torture_assert_int_equal(tctx, r-out.values[0].offset, 0, offset); - torture_assert_int_equal(tctx, r-out.values[0].length, 0, length); + torture_assert_str_equal(tctx, r-out.values_out[0].ve_valuename-name, HOMEPATH, name); + torture_assert_int_equal(tctx, r-out.values_out[0].ve_type, 0, type); + torture_assert_int_equal(tctx, r-out.values_out[0].ve_valuelen, 0, length); /* FIXME: r-out.buffer */ torture_assert_int_equal(tctx, *r-out.buffer_size, 76, buffer size); - torture_assert_werr_equal(tctx, r-out.result, WERR_MORE_DATA, -
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 1662e38... s4-smbtorture: add NDR torture test for winreg_QueryMultipleValues2. via 7ae7750... s4-smbtorture: add RPC torture test for winreg_QueryMultipleValues2. via c02cbaa... winreg: fix winreg_QueryMultipleValues2 IDL. from bf07bf2... winreg: fix winreg_QueryMultipleValues() IDL and torture tests. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 1662e383dd890d48e0e1207a51d4b3f9fb12ab65 Author: Günther Deschner g...@samba.org Date: Tue Jun 29 12:26:24 2010 +0200 s4-smbtorture: add NDR torture test for winreg_QueryMultipleValues2. Guenther commit 7ae7750c4085b2d95b46fa4433586e9a68d593ae Author: Günther Deschner g...@samba.org Date: Tue Jun 29 12:14:02 2010 +0200 s4-smbtorture: add RPC torture test for winreg_QueryMultipleValues2. Guenther commit c02cbaae34bd27826ba13f98fc40a396b0e1530d Author: Günther Deschner g...@samba.org Date: Tue Jun 29 12:04:56 2010 +0200 winreg: fix winreg_QueryMultipleValues2 IDL. Guenther --- Summary of changes: librpc/idl/winreg.idl|9 --- source4/torture/ndr/winreg.c | 47 ++ source4/torture/rpc/winreg.c | 41 3 files changed, 93 insertions(+), 4 deletions(-) Changeset truncated at 500 lines: diff --git a/librpc/idl/winreg.idl b/librpc/idl/winreg.idl index 19f309b..784cb33 100644 --- a/librpc/idl/winreg.idl +++ b/librpc/idl/winreg.idl @@ -430,12 +430,13 @@ import lsa.idl, security.idl, misc.idl; /**/ /* Function: 0x22 */ - WERROR winreg_QueryMultipleValues2( + [public] WERROR winreg_QueryMultipleValues2( [in,ref] policy_handle *key_handle, - [in,out,ref,size_is(num_values),length_is(num_values)] QueryMultipleValue *values, + [in,ref,size_is(num_values),length_is(num_values)] QueryMultipleValue *values_in, + [out,ref,size_is(num_values),length_is(num_values)] QueryMultipleValue *values_out, [in] uint32 num_values, - [in,out,unique,size_is(offered),length_is(offered)] uint8 *buffer, - [in] uint32 offered, + [in,out,unique,size_is(*offered),length_is(*offered)] uint8 *buffer, + [in,ref] uint32 *offered, [out,ref] uint32 *needed ); diff --git a/source4/torture/ndr/winreg.c b/source4/torture/ndr/winreg.c index 2bd28f0..3b5766a 100644 --- a/source4/torture/ndr/winreg.c +++ b/source4/torture/ndr/winreg.c @@ -286,6 +286,48 @@ static bool querymultiplevalues_out_check(struct torture_context *tctx, return true; } +const uint8_t querymultiplevalues2_in_data[] = { + 0x00, 0x00, 0x00, 0x00, 0x98, 0xe4, 0xdf, 0x3c, 0x70, 0xde, 0x69, 0x4a, + 0x90, 0xb4, 0x85, 0x36, 0x33, 0x79, 0x89, 0x32, 0x01, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x0a, 0x00, 0x0a, 0x00, 0x04, 0x00, 0x02, 0x00, 0x05, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x05, 0x00, 0x00, 0x00, 0x54, 0x00, 0x45, 0x00, + 0x4d, 0x00, 0x50, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 +}; + +static bool querymultiplevalues2_in_check(struct torture_context *tctx, + struct winreg_QueryMultipleValues2 *r) +{ + torture_assert_mem_equal(tctx, r-in.key_handle, querymultiplevalues2_in_data, sizeof(struct policy_handle), key handle); + torture_assert_int_equal(tctx, r-in.num_values, 1, num values); + torture_assert_str_equal(tctx, r-in.values_in[0].ve_valuename-name, TEMP, name); + torture_assert_int_equal(tctx, r-in.values_in[0].ve_valuename-length, 10, name len); + torture_assert_int_equal(tctx, r-in.values_in[0].ve_valuename-size, 10, name size); + torture_assert_int_equal(tctx, r-in.values_in[0].ve_valuelen, 0, length); + torture_assert(tctx, (r-in.values_in[0].ve_valueptr == NULL), ve_valueptr); + torture_assert_int_equal(tctx, r-in.values_in[0].ve_type, 0, type); + torture_assert_int_equal(tctx, *r-in.offered, 0, buffer size); + + return true; +} + +const uint8_t querymultiplevalues2_out_data[] = { + 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x00, 0x00, 0x00, 0x00, 0x08, 0x00, 0x0a, 0x00, 0x04, 0x00, 0x02, 0x00, + 0x05, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x04, 0x00, 0x00, 0x00, + 0x54, 0x00, 0x45, 0x00, 0x4d, 0x00, 0x50, 0x00, 0x00, 0x00, 0x00, 0x00, + 0x42,
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 0e21b4f... Revert s4/dsdb: Fixed partition_search() not to pass special DN's to LDAP backend. via 2198831... Revert s4/auth: Fixed authsam_expand_nested_groups() to find entry SID if not available in the DN. from 1662e38... s4-smbtorture: add NDR torture test for winreg_QueryMultipleValues2. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 0e21b4ffa067237ed2c3037216c14a955f339e51 Author: Matthias Dieter Wallnöfer m...@samba.org Date: Tue Jun 29 14:48:25 2010 +0200 Revert s4/dsdb: Fixed partition_search() not to pass special DN's to LDAP backend. This reverts commit ed4c107bc1eac8531fdd8d09f7698efcbc7ecb14. See post Endi's Bug 7530 patches (LDAP backend) on samba-technical. commit 2198831e6b7c112b8f7551fccb25305742636df2 Author: Matthias Dieter Wallnöfer m...@samba.org Date: Tue Jun 29 14:52:43 2010 +0200 Revert s4/auth: Fixed authsam_expand_nested_groups() to find entry SID if not available in the DN. This reverts commit fa9557fee3ca546878d99b77f1ff37f724c37024. See post Endi's Bug 7530 patches (LDAP backend) on samba-technical. --- Summary of changes: source4/auth/sam.c | 25 - source4/dsdb/samdb/ldb_modules/partition.c | 14 ++ 2 files changed, 10 insertions(+), 29 deletions(-) Changeset truncated at 500 lines: diff --git a/source4/auth/sam.c b/source4/auth/sam.c index cf2e219..7a776b9 100644 --- a/source4/auth/sam.c +++ b/source4/auth/sam.c @@ -305,7 +305,7 @@ NTSTATUS authsam_expand_nested_groups(struct ldb_context *sam_ctx, struct ldb_dn *dn; struct dom_sid sid; TALLOC_CTX *tmp_ctx; - struct ldb_result *res = NULL; + struct ldb_result *res; NTSTATUS status; const struct ldb_message_element *el; @@ -321,22 +321,9 @@ NTSTATUS authsam_expand_nested_groups(struct ldb_context *sam_ctx, return NT_STATUS_INTERNAL_DB_CORRUPTION; } - /* We expect an extended DN with the SID included but we can fallback -* to search the extended components if they weren't provided. */ status = dsdb_get_extended_dn_sid(dn, sid, SID); if (!NT_STATUS_IS_OK(status)) { - ret = dsdb_search_dn(sam_ctx, tmp_ctx, res, dn, attrs, -DSDB_SEARCH_SHOW_EXTENDED_DN); - if (ret != LDB_SUCCESS) { - talloc_free(tmp_ctx); - return NT_STATUS_INTERNAL_DB_CORRUPTION; - } - dn = res-msgs[0]-dn; - status = dsdb_get_extended_dn_sid(dn, sid, SID); - } - - if (!NT_STATUS_IS_OK(status)) { - DEBUG(0, (__location__ : when parsing DN %s we failed to find or SID component, so we cannot calculate the group token: %s\n, + DEBUG(0, (__location__ : when parsing DN %s we failed to find our SID component, so we cannot calculate the group token: %s\n, ldb_dn_get_extended_linearized(tmp_ctx, dn, 1), nt_errstr(status))); talloc_free(tmp_ctx); @@ -344,12 +331,8 @@ NTSTATUS authsam_expand_nested_groups(struct ldb_context *sam_ctx, } if (only_childs) { - /* If we didn't get the SID as extended DN then we already have -* performed exactly this search. */ - if (res == NULL) { - ret = dsdb_search_dn(sam_ctx, tmp_ctx, res, dn, attrs, -DSDB_SEARCH_SHOW_EXTENDED_DN); - } + ret = dsdb_search_dn(sam_ctx, tmp_ctx, res, dn, attrs, +DSDB_SEARCH_SHOW_EXTENDED_DN); } else { /* This is an O(n^2) linear search */ already_there = sids_contains_sid((const struct dom_sid**) *res_sids, diff --git a/source4/dsdb/samdb/ldb_modules/partition.c b/source4/dsdb/samdb/ldb_modules/partition.c index d022d12..ba695d2 100644 --- a/source4/dsdb/samdb/ldb_modules/partition.c +++ b/source4/dsdb/samdb/ldb_modules/partition.c @@ -470,14 +470,12 @@ static int partition_search(struct ldb_module *module, struct ldb_request *req) return ret; } - if (!ldb_dn_is_special(req-op.search.base)) { - p = find_partition(data, NULL, req); - if (p != NULL) { - /* the caller specified what partition they want the - * search - just pass it on - */ - return ldb_next_request(p-module, req); - } + p = find_partition(data, NULL, req); + if (p != NULL) { + /* the caller specified what partition they
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 62e2d4a... s3-utils: remove rpccheck. from 0e21b4f... Revert s4/dsdb: Fixed partition_search() not to pass special DN's to LDAP backend. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 62e2d4a504e69d4d1038fa158277783dafddefac Author: Günther Deschner g...@samba.org Date: Tue Jun 29 14:54:43 2010 +0200 s3-utils: remove rpccheck. Impossible to get this to compile after the conversion to pidl. Guenther --- Summary of changes: source3/utils/rpccheck.c | 62 -- 1 files changed, 0 insertions(+), 62 deletions(-) delete mode 100644 source3/utils/rpccheck.c Changeset truncated at 500 lines: diff --git a/source3/utils/rpccheck.c b/source3/utils/rpccheck.c deleted file mode 100644 index 87632db..000 --- a/source3/utils/rpccheck.c +++ /dev/null @@ -1,62 +0,0 @@ -/* - Unix SMB/CIFS implementation. - - Copyright (C) Jean François Micouleau 2001 - - This program is free software; you can redistribute it and/or modify - it under the terms of the GNU General Public License as published by - the Free Software Foundation; either version 3 of the License, or - (at your option) any later version. - - This program is distributed in the hope that it will be useful, - but WITHOUT ANY WARRANTY; without even the implied warranty of - MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the - GNU General Public License for more details. - - You should have received a copy of the GNU General Public License - along with this program. If not, see http://www.gnu.org/licenses/. -*/ - -#include includes.h - -main() -{ - char filter[]=0123456789ABCDEF; - - char s[128]; - char d=0; - int x=0; - prs_struct ps; - TALLOC_CTX *ctx; - - /* change that struct */ - SAMR_R_QUERY_USERINFO rpc_stub; - - ZERO_STRUCT(rpc_stub); - - setup_logging(, True); - DEBUGLEVEL=10; - - ctx=talloc_init(main); - if (!ctx) exit(1); - - if (!prs_init(ps, 1600, 4, ctx, MARSHALL)) - exit(1); - - while (scanf(%s, s)!=-1) { - if (strlen(s)==2 strchr_m(filter, *s)!=NULL strchr_m(filter, *(s+1))!=NULL) { - d=strtol(s, NULL, 16); - if(!prs_append_data(ps, d, 1)) - printf(error while reading data\n); - } - } - - prs_switch_type(ps, UNMARSHALL); - prs_set_offset(ps, 0); - - /* change that call */ - if(!samr_io_r_query_userinfo(, rpc_stub, ps, 0)) - printf(error while UNMARSHALLING the data\n); - - printf(\n); -} -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via b31ff05... s4-smbtorture: add netr_GetForestTrustInformation test to RPC-NETLOGON. from 62e2d4a... s3-utils: remove rpccheck. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit b31ff0537a22ec35bc457066002709dcfc9d66ae Author: Günther Deschner g...@samba.org Date: Tue Jun 29 17:13:01 2010 +0200 s4-smbtorture: add netr_GetForestTrustInformation test to RPC-NETLOGON. Guenther --- Summary of changes: source4/selftest/knownfail |1 + source4/torture/rpc/netlogon.c | 39 +++ 2 files changed, 40 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/source4/selftest/knownfail b/source4/selftest/knownfail index a1f383e..674501f 100644 --- a/source4/selftest/knownfail +++ b/source4/selftest/knownfail @@ -34,6 +34,7 @@ samba4.rpc.netlogon.*.GetPassword samba4.rpc.netlogon.*.GetTrustPasswords samba4.rpc.netlogon.*.DatabaseRedo samba4.rpc.netlogon.*.ServerGetTrustInfo +samba4.rpc.netlogon.*.GetForestTrustInformation samba4.rpc.samr.passwords.badpwdcount # Not provided by Samba 4 yet samba4.rpc.samr.passwords.lockout samba4.rpc.spoolss # Not provided by Samba 4 yet diff --git a/source4/torture/rpc/netlogon.c b/source4/torture/rpc/netlogon.c index 09b2882..02e60a9 100644 --- a/source4/torture/rpc/netlogon.c +++ b/source4/torture/rpc/netlogon.c @@ -2057,6 +2057,44 @@ static bool test_LogonControl2Ex(struct torture_context *tctx, return true; } +static bool test_netr_GetForestTrustInformation(struct torture_context *tctx, + struct dcerpc_pipe *p, + struct cli_credentials *machine_credentials) +{ + struct netr_GetForestTrustInformation r; + struct netlogon_creds_CredentialState *creds; + struct netr_Authenticator a; + struct netr_Authenticator return_authenticator; + struct lsa_ForestTrustInformation *forest_trust_info; + struct dcerpc_binding_handle *b = p-binding_handle; + + if (!test_SetupCredentials3(p, tctx, NETLOGON_NEG_AUTH2_ADS_FLAGS, + machine_credentials, creds)) { + return false; + } + + netlogon_creds_client_authenticator(creds, a); + + r.in.server_name = talloc_asprintf(tctx, %s, dcerpc_server_name(p)); + r.in.computer_name = ; + r.in.credential = a; + r.in.flags = 0; + r.out.return_authenticator = return_authenticator; + r.out.forest_trust_info = forest_trust_info; + + torture_assert_ntstatus_ok(tctx, + dcerpc_netr_GetForestTrustInformation_r(b, tctx, r), + netr_GetForestTrustInformation failed); + torture_assert_ntstatus_ok(tctx, r.out.result, + netr_GetForestTrustInformation failed); + + torture_assert(tctx, + netlogon_creds_client_check(creds, return_authenticator.cred), + Credential chaining failed); + + return true; +} + static bool test_netr_DsRGetForestTrustInformation(struct torture_context *tctx, struct dcerpc_pipe *p, const char *trusted_domain_name) { @@ -3397,6 +3435,7 @@ struct torture_suite *torture_rpc_netlogon(TALLOC_CTX *mem_ctx) torture_rpc_tcase_add_test(tcase, DsRAddressToSitenamesW, test_netr_DsRAddressToSitenamesW); torture_rpc_tcase_add_test(tcase, DsRAddressToSitenamesExW, test_netr_DsRAddressToSitenamesExW); torture_rpc_tcase_add_test_creds(tcase, ServerGetTrustInfo, test_netr_ServerGetTrustInfo); + torture_rpc_tcase_add_test_creds(tcase, GetForestTrustInformation, test_netr_GetForestTrustInformation); return suite; } -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 5bc77c8... s4-smbtorture: use TEST_MACHINE_NAME in test_netr_GetForestTrustInformation(). from b31ff05... s4-smbtorture: add netr_GetForestTrustInformation test to RPC-NETLOGON. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 5bc77c8778dda8e688c1eff0167c67fa19b31d75 Author: Günther Deschner g...@samba.org Date: Tue Jun 29 17:16:25 2010 +0200 s4-smbtorture: use TEST_MACHINE_NAME in test_netr_GetForestTrustInformation(). Guenther --- Summary of changes: source4/torture/rpc/netlogon.c |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source4/torture/rpc/netlogon.c b/source4/torture/rpc/netlogon.c index 02e60a9..b3901bd 100644 --- a/source4/torture/rpc/netlogon.c +++ b/source4/torture/rpc/netlogon.c @@ -2076,7 +2076,7 @@ static bool test_netr_GetForestTrustInformation(struct torture_context *tctx, netlogon_creds_client_authenticator(creds, a); r.in.server_name = talloc_asprintf(tctx, %s, dcerpc_server_name(p)); - r.in.computer_name = ; + r.in.computer_name = TEST_MACHINE_NAME; r.in.credential = a; r.in.flags = 0; r.out.return_authenticator = return_authenticator; -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 92f3e14... s4-smbtorture: handle NT_STATUS_NOT_IMPLEMENTED in GetForestTrustInformation test. from 5bc77c8... s4-smbtorture: use TEST_MACHINE_NAME in test_netr_GetForestTrustInformation(). http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 92f3e143b7b89ce25b996d6e68f130bbd7142af5 Author: Günther Deschner g...@samba.org Date: Tue Jun 29 17:19:28 2010 +0200 s4-smbtorture: handle NT_STATUS_NOT_IMPLEMENTED in GetForestTrustInformation test. When skipping over it, we can at least verify the credential chain. Guenther --- Summary of changes: source4/torture/rpc/netlogon.c |8 ++-- 1 files changed, 6 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/source4/torture/rpc/netlogon.c b/source4/torture/rpc/netlogon.c index b3901bd..32c16f9 100644 --- a/source4/torture/rpc/netlogon.c +++ b/source4/torture/rpc/netlogon.c @@ -2085,8 +2085,12 @@ static bool test_netr_GetForestTrustInformation(struct torture_context *tctx, torture_assert_ntstatus_ok(tctx, dcerpc_netr_GetForestTrustInformation_r(b, tctx, r), netr_GetForestTrustInformation failed); - torture_assert_ntstatus_ok(tctx, r.out.result, - netr_GetForestTrustInformation failed); + if (NT_STATUS_EQUAL(r.out.result, NT_STATUS_NOT_IMPLEMENTED)) { + torture_comment(tctx, not considering NT_STATUS_NOT_IMPLEMENTED as an error\n); + } else { + torture_assert_ntstatus_ok(tctx, r.out.result, + netr_GetForestTrustInformation failed); + } torture_assert(tctx, netlogon_creds_client_check(creds, return_authenticator.cred), -- Samba Shared Repository
[SCM] Samba Website Repository - branch master updated
The branch, master has been updated via 6cc1424... Fix another typo in the mailto URL. from 3446ca0... Announce Samba 3.5.4. http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master - Log - commit 6cc14244af3b4ea10e2e9d2a4f8afa4651009796 Author: John H Terpstra j...@samba.org Date: Tue Jun 29 11:53:13 2010 -0500 Fix another typo in the mailto URL. --- Summary of changes: support/uk.html |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/support/uk.html b/support/uk.html index 46d7ebc..2afaa9f 100644 --- a/support/uk.html +++ b/support/uk.html @@ -38,7 +38,7 @@ CV21 3PY a href=www.blue-horse.co.ukwww.blue-horse.co.uk/a 0845 658 6261 -a href=mailto:off...@blue-horse.co.uk;ff...@blue-horse.co.uk/a +a href=mailto:off...@blue-horse.co.uk;off...@blue-horse.co.uk/a Barnie Giltrap /small/pre p -- Samba Website Repository
[SCM] Samba Website Repository - branch master updated
The branch, master has been updated via a604d59... Another typo in a web URL for a support listing. Now fixed by adding the http:// part of the URL. from 6cc1424... Fix another typo in the mailto URL. http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master - Log - commit a604d597be885b45f6c1ba6dd1bde06dbaebcdda Author: John H Terpstra j...@samba.org Date: Tue Jun 29 12:00:26 2010 -0500 Another typo in a web URL for a support listing. Now fixed by adding the http:// part of the URL. --- Summary of changes: support/uk.html |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/support/uk.html b/support/uk.html index 2afaa9f..03f9e14 100644 --- a/support/uk.html +++ b/support/uk.html @@ -36,7 +36,7 @@ WARWICKSHIRE UNITED KINGDOM CV21 3PY -a href=www.blue-horse.co.ukwww.blue-horse.co.uk/a +a href=http://www.blue-horse.co.uk;www.blue-horse.co.uk/a 0845 658 6261 a href=mailto:off...@blue-horse.co.uk;off...@blue-horse.co.uk/a Barnie Giltrap -- Samba Website Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via be7bff5... s4-smbtorture: remove some pointless mem_equal tests in LOCAL-NDR-WINREG testsuite. from 92f3e14... s4-smbtorture: handle NT_STATUS_NOT_IMPLEMENTED in GetForestTrustInformation test. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit be7bff5eb59f903fdf8ea35f4dd330ec4313df76 Author: Günther Deschner g...@samba.org Date: Tue Jun 29 19:57:06 2010 +0200 s4-smbtorture: remove some pointless mem_equal tests in LOCAL-NDR-WINREG testsuite. Guenther --- Summary of changes: source4/torture/ndr/winreg.c |3 --- 1 files changed, 0 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/source4/torture/ndr/winreg.c b/source4/torture/ndr/winreg.c index 3b5766a..cc6321f 100644 --- a/source4/torture/ndr/winreg.c +++ b/source4/torture/ndr/winreg.c @@ -242,7 +242,6 @@ static const uint8_t querymultiplevalues_in_data[] = { static bool querymultiplevalues_in_check(struct torture_context *tctx, struct winreg_QueryMultipleValues *r) { - torture_assert_mem_equal(tctx, r-in.key_handle, querymultiplevalues_in_data, sizeof(struct policy_handle), key handle); torture_assert_int_equal(tctx, r-in.num_values, 1, num values); torture_assert_str_equal(tctx, r-in.values_in[0].ve_valuename-name, HOMEPATH, name); torture_assert_int_equal(tctx, r-in.values_in[0].ve_valuename-length, 18, name len); @@ -250,7 +249,6 @@ static bool querymultiplevalues_in_check(struct torture_context *tctx, torture_assert_int_equal(tctx, r-in.values_in[0].ve_valuelen, 0, length); torture_assert(tctx, (r-in.values_in[0].ve_valueptr == NULL), ve_valueptr); torture_assert_int_equal(tctx, r-in.values_in[0].ve_type, 0, type); - torture_assert_mem_equal(tctx, r-in.buffer, querymultiplevalues_in_data+0x6C, *r-in.buffer_size, buffer); torture_assert_int_equal(tctx, *r-in.buffer_size, 32, buffer size); return true; @@ -300,7 +298,6 @@ const uint8_t querymultiplevalues2_in_data[] = { static bool querymultiplevalues2_in_check(struct torture_context *tctx, struct winreg_QueryMultipleValues2 *r) { - torture_assert_mem_equal(tctx, r-in.key_handle, querymultiplevalues2_in_data, sizeof(struct policy_handle), key handle); torture_assert_int_equal(tctx, r-in.num_values, 1, num values); torture_assert_str_equal(tctx, r-in.values_in[0].ve_valuename-name, TEMP, name); torture_assert_int_equal(tctx, r-in.values_in[0].ve_valuename-length, 10, name len); -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via f6f2120... s4:ntvfs/ipc/vfs_ipc.c - remove unused code via 146dad1... s4:ntvfs/ipc/vfs_ipc.c - add casts to suppress warnings on Solaris 10 via 645c3d2... s4:ntp_signd/ntp_signd.c - add casts to suppress warnings on Solaris 10 via 95127b3... s4:rpc_server/browser.c - remove unused code via 06bafb7... s4:smb_server/smb2/find.c - remove unused code via 00f189f... s4:smb_server/blob.c - remove unused code via 4f029f6... s4:dsdb/new_partition.c - remove the ldb_next_request call which we find also below the if block via 17a5c87... ldb:ldb_map_outbound.c - ldb_parse_tree_collect_attrs - remove unneeded return value via 8e9d7e8... ldb:ldb_modules.c - ldb_dso_load_symbol - remove unneeded caste before dlsym via 657045c... s4:ldb - ldb_dn_update_components - fix free of invalid DN parts via f1e92c9... ldb:ldb_dn.c - ldb_dn_set_extended_component - free the linearized string when the components change via 0f0d9aa... s4:ldb_dn.c - make the code parts which free extended components consistent via 1e04f49... ldb:ldb_dn - ldb_dn_explode - move the dn-comp_num initalisation upwards and use LDB_FREE for freeing dn-components from be7bff5... s4-smbtorture: remove some pointless mem_equal tests in LOCAL-NDR-WINREG testsuite. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit f6f21202ebecc82832e10353bdf967cf7920a753 Author: Matthias Dieter Wallnöfer m...@samba.org Date: Tue Jun 29 22:30:05 2010 +0200 s4:ntvfs/ipc/vfs_ipc.c - remove unused code Spotted by the Solaris 10 compiler commit 146dad103bac0488f8bacc45dfbb2ea099e852ee Author: Matthias Dieter Wallnöfer m...@samba.org Date: Tue Jun 29 22:33:32 2010 +0200 s4:ntvfs/ipc/vfs_ipc.c - add casts to suppress warnings on Solaris 10 commit 645c3d200cd015597896d77fd4c22bc01a8b7da3 Author: Matthias Dieter Wallnöfer m...@samba.org Date: Tue Jun 29 22:33:32 2010 +0200 s4:ntp_signd/ntp_signd.c - add casts to suppress warnings on Solaris 10 commit 95127b3f5f253ce5df6ec27972c456d0859d23c4 Author: Matthias Dieter Wallnöfer m...@samba.org Date: Tue Jun 29 22:30:05 2010 +0200 s4:rpc_server/browser.c - remove unused code Spotted by the Solaris 10 compiler commit 06bafb75965983601f9afd08b70c9f7463d4c5f3 Author: Matthias Dieter Wallnöfer m...@samba.org Date: Tue Jun 29 22:30:05 2010 +0200 s4:smb_server/smb2/find.c - remove unused code Spotted by the Solaris 10 compiler commit 00f189f78ca5dcaf9917e231ddaef2b4398db0b5 Author: Matthias Dieter Wallnöfer m...@samba.org Date: Tue Jun 29 22:30:05 2010 +0200 s4:smb_server/blob.c - remove unused code Spotted by the Solaris 10 compiler commit 4f029f6f1b443db0762c3bac275415b385c26435 Author: Matthias Dieter Wallnöfer m...@samba.org Date: Tue Jun 29 22:23:15 2010 +0200 s4:dsdb/new_partition.c - remove the ldb_next_request call which we find also below the if block commit 17a5c876a69156843a8f4acca0e52e08845511fd Author: Matthias Dieter Wallnöfer m...@samba.org Date: Tue Jun 29 22:21:22 2010 +0200 ldb:ldb_map_outbound.c - ldb_parse_tree_collect_attrs - remove unneeded return value commit 8e9d7e84f6d4a0cdc4ed6d1a8a20c1fc88cefb76 Author: Matthias Dieter Wallnöfer m...@samba.org Date: Tue Jun 29 22:16:15 2010 +0200 ldb:ldb_modules.c - ldb_dso_load_symbol - remove unneeded caste before dlsym commit 657045ca9aa4abe11088127a05d697e5ae99a5c9 Author: Matthias Dieter Wallnöfer m...@samba.org Date: Tue Jun 29 22:10:14 2010 +0200 s4:ldb - ldb_dn_update_components - fix free of invalid DN parts Use LDB_FREE for such free operations and in addition wipe also the casefolded DN out. commit f1e92c91b21b354802b8e342e414d62368820b43 Author: Matthias Dieter Wallnöfer m...@samba.org Date: Tue Jun 29 22:07:51 2010 +0200 ldb:ldb_dn.c - ldb_dn_set_extended_component - free the linearized string when the components change commit 0f0d9aa9b5959a12385c2b79d7dd35e9d081033c Author: Matthias Dieter Wallnöfer m...@samba.org Date: Tue Jun 29 22:04:24 2010 +0200 s4:ldb_dn.c - make the code parts which free extended components consistent Cosmetic commit 1e04f49ddbfaa002ba930f2b79883ed3688e1ea8 Author: Matthias Dieter Wallnöfer m...@samba.org Date: Tue Jun 29 21:59:37 2010 +0200 ldb:ldb_dn - ldb_dn_explode - move the dn-comp_num initalisation upwards and use LDB_FREE for freeing dn-components Mostly cosmetic - no behaviour change --- Summary of changes: source4/dsdb/samdb/ldb_modules/new_partition.c |4 +-- source4/lib/ldb/common/ldb_dn.c| 35 +++ source4/lib/ldb/common/ldb_modules.c |3 +- source4/lib/ldb/ldb_map/ldb_map_outbound.c
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 1fb8e19... s4-smbtorture: add more sophisticated tests for winreg_QueryMultipleValues{2}. from f6f2120... s4:ntvfs/ipc/vfs_ipc.c - remove unused code http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 1fb8e192cad7de58586645ca915a8934320bac70 Author: Günther Deschner g...@samba.org Date: Tue Jun 29 21:53:00 2010 +0200 s4-smbtorture: add more sophisticated tests for winreg_QueryMultipleValues{2}. Guenther --- Summary of changes: source4/torture/rpc/winreg.c | 221 ++ 1 files changed, 221 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/source4/torture/rpc/winreg.c b/source4/torture/rpc/winreg.c index c039143..0960440 100644 --- a/source4/torture/rpc/winreg.c +++ b/source4/torture/rpc/winreg.c @@ -1645,6 +1645,146 @@ static bool test_QueryMultipleValues(struct dcerpc_binding_handle *b, return true; } +static bool test_QueryMultipleValues_full(struct dcerpc_binding_handle *b, + struct torture_context *tctx, + struct policy_handle *handle, + uint32_t num_values, + const char **valuenames, + bool existing_value) +{ + struct winreg_QueryMultipleValues r; + uint32_t bufsize = 0; + int i; + + torture_comment(tctx, Testing QueryMultipleValues\n); + + ZERO_STRUCT(r); + + r.in.key_handle = handle; + r.in.values_in = r.out.values_out = talloc_zero_array(tctx, struct QueryMultipleValue, 0); + r.in.buffer_size = r.out.buffer_size = bufsize; + + torture_assert_ntstatus_ok(tctx, + dcerpc_winreg_QueryMultipleValues_r(b, tctx, r), + QueryMultipleValues failed); + torture_assert_werr_ok(tctx, r.out.result, + QueryMultipleValues failed); + + /* this test crashes w2k8 remote registry */ +#if 0 + r.in.num_values = num_values; + r.in.values_in = r.out.values_out = talloc_zero_array(tctx, struct QueryMultipleValue, num_values); + + torture_assert_ntstatus_ok(tctx, + dcerpc_winreg_QueryMultipleValues_r(b, tctx, r), + QueryMultipleValues failed); + torture_assert_werr_ok(tctx, r.out.result, + QueryMultipleValues failed); +#endif + r.in.num_values = num_values; + r.in.values_in = r.out.values_out = talloc_zero_array(tctx, struct QueryMultipleValue, num_values); + for (i=0; i r.in.num_values; i++) { + r.in.values_in[i].ve_valuename = talloc_zero(tctx, struct winreg_ValNameBuf); + r.in.values_in[i].ve_valuename-name = talloc_strdup(tctx, valuenames[i]); + r.in.values_in[i].ve_valuename-size = strlen_m_term(r.in.values_in[i].ve_valuename-name)*2; + } + + torture_assert_ntstatus_ok(tctx, + dcerpc_winreg_QueryMultipleValues_r(b, tctx, r), + QueryMultipleValues failed); + torture_assert_werr_equal(tctx, r.out.result, existing_value ? WERR_MORE_DATA : WERR_BADFILE, + QueryMultipleValues failed); + + if (W_ERROR_EQUAL(r.out.result, WERR_BADFILE)) { + return true; + } + + if (W_ERROR_EQUAL(r.out.result, WERR_MORE_DATA)) { + *r.in.buffer_size = 0xff; + r.in.buffer = r.out.buffer = talloc_zero_array(tctx, uint8_t, *r.in.buffer_size); + + torture_assert_ntstatus_ok(tctx, + dcerpc_winreg_QueryMultipleValues_r(b, tctx, r), + QueryMultipleValues failed); + } + + torture_assert_werr_ok(tctx, r.out.result, + QueryMultipleValues failed); + + return true; +} + + +static bool test_QueryMultipleValues2_full(struct dcerpc_binding_handle *b, + struct torture_context *tctx, + struct policy_handle *handle, + uint32_t num_values, + const char **valuenames, + bool existing_value) +{ + struct winreg_QueryMultipleValues2 r; + uint32_t offered = 0, needed; + int i; + + torture_comment(tctx, Testing QueryMultipleValues2\n); + + ZERO_STRUCT(r); + + r.in.key_handle = handle; + r.in.offered = offered; + r.in.values_in = r.out.values_out = talloc_zero_array(tctx, struct QueryMultipleValue, 0); + r.out.needed = needed; + + torture_assert_ntstatus_ok(tctx, + dcerpc_winreg_QueryMultipleValues2_r(b, tctx, r), + QueryMultipleValues2
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via cc8d6d9... s4-smbtorture: fix incorrect IDL for QueryMultipleValue (aka RVALENT). from 1fb8e19... s4-smbtorture: add more sophisticated tests for winreg_QueryMultipleValues{2}. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit cc8d6d99df7f13e5396ec3d8e4943511cbe20cc3 Author: Günther Deschner g...@samba.org Date: Tue Jun 29 23:10:47 2010 +0200 s4-smbtorture: fix incorrect IDL for QueryMultipleValue (aka RVALENT). Found by torture test. Guenther --- Summary of changes: librpc/idl/winreg.idl |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/librpc/idl/winreg.idl b/librpc/idl/winreg.idl index 784cb33..c3e5279 100644 --- a/librpc/idl/winreg.idl +++ b/librpc/idl/winreg.idl @@ -373,7 +373,7 @@ import lsa.idl, security.idl, misc.idl; typedef struct { winreg_ValNameBuf *ve_valuename; uint32 ve_valuelen; - uint32 *ve_valueptr; + uint32 ve_valueptr; winreg_Type ve_type; } QueryMultipleValue; -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 73fbc9c... s4-smbtorture: remove duplicate torture_assert_sid_equal macro. from cc8d6d9... s4-smbtorture: fix incorrect IDL for QueryMultipleValue (aka RVALENT). http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 73fbc9c1791c2391ccb59a2a02df009cbd2fdc7e Author: Günther Deschner g...@samba.org Date: Tue Jun 29 23:35:45 2010 +0200 s4-smbtorture: remove duplicate torture_assert_sid_equal macro. Guenther --- Summary of changes: source4/torture/rpc/spoolss.c | 11 +-- 1 files changed, 1 insertions(+), 10 deletions(-) Changeset truncated at 500 lines: diff --git a/source4/torture/rpc/spoolss.c b/source4/torture/rpc/spoolss.c index 930556e..7e15728 100644 --- a/source4/torture/rpc/spoolss.c +++ b/source4/torture/rpc/spoolss.c @@ -37,6 +37,7 @@ #include libcli/resolve/resolve.h #include lib/cmdline/popt_common.h #include system/filesys.h +#include torture/ndr/ndr.h #define TORTURE_WELLKNOWN_PRINTER torture_wkn_printer #define TORTURE_PRINTERtorture_printer @@ -1767,16 +1768,6 @@ static bool test_PrinterInfo(struct torture_context *tctx, return ret; } -#define torture_assert_sid_equal(torture_ctx,got,expected,cmt)\ - do { struct dom_sid *__got = (got), *__expected = (expected); \ - if (!dom_sid_equal(__got, __expected)) { \ - torture_result(torture_ctx, TORTURE_FAIL, \ - __location__: #got was %s, expected %s: %s, \ - dom_sid_string(torture_ctx, __got), dom_sid_string(torture_ctx, __expected), cmt); \ - return false; \ - } \ - } while(0) - static bool test_security_descriptor_equal(struct torture_context *tctx, const struct security_descriptor *sd1, const struct security_descriptor *sd2) -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 32b8b40... s4:dsdb Fix possible schema segfaults for DRS-replication based schema from 73fbc9c... s4-smbtorture: remove duplicate torture_assert_sid_equal macro. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 32b8b401d6de27caa02a258fd540a208c486d1d6 Author: Andrew Bartlett abart...@samba.org Date: Wed Jun 30 10:20:11 2010 +1000 s4:dsdb Fix possible schema segfaults for DRS-replication based schema The problem here is that if the schema has been modified on the source domain, there may be attributes that appear over DRS with 0 values (to indicate that any existing values on the target should be deleted). This would confuse the previous version of this macro. Andrew Bartlett --- Summary of changes: source4/dsdb/schema/schema_init.c | 30 +- 1 files changed, 13 insertions(+), 17 deletions(-) Changeset truncated at 500 lines: diff --git a/source4/dsdb/schema/schema_init.c b/source4/dsdb/schema/schema_init.c index 2cf5af6..bb22df1 100644 --- a/source4/dsdb/schema/schema_init.c +++ b/source4/dsdb/schema/schema_init.c @@ -471,17 +471,13 @@ static int dsdb_schema_setup_ldb_schema_attribute(struct ldb_context *ldb, } \ } while (0) -#define GET_STRING_LIST_LDB(msg, attr, mem_ctx, p, elem, strict) do { \ +#define GET_STRING_LIST_LDB(msg, attr, mem_ctx, p, elem) do { \ int get_string_list_counter;\ struct ldb_message_element *get_string_list_el = ldb_msg_find_element(msg, attr); \ - if (get_string_list_el == NULL) { \ - if (strict) { \ - d_printf(%s: %s == NULL\n, __location__, attr); \ - return WERR_INVALID_PARAM; \ - } else {\ - (p)-elem = NULL; \ - break; \ - } \ + /* We may get empty attributes over the replication channel */ \ + if (get_string_list_el == NULL || get_string_list_el-num_values == 0) {\ + (p)-elem = NULL; \ + break; \ } \ (p)-elem = talloc_array(mem_ctx, const char *, get_string_list_el-num_values + 1); \ for (get_string_list_counter=0; \ @@ -683,16 +679,16 @@ WERROR dsdb_class_from_ldb(struct dsdb_schema *schema, GET_STRING_LDB(msg, subClassOf, obj, obj, subClassOf, true); - GET_STRING_LIST_LDB(msg, systemAuxiliaryClass, obj, obj, systemAuxiliaryClass, false); - GET_STRING_LIST_LDB(msg, auxiliaryClass, obj, obj, auxiliaryClass, false); + GET_STRING_LIST_LDB(msg, systemAuxiliaryClass, obj, obj, systemAuxiliaryClass); + GET_STRING_LIST_LDB(msg, auxiliaryClass, obj, obj, auxiliaryClass); - GET_STRING_LIST_LDB(msg, systemMustContain, obj, obj, systemMustContain, false); - GET_STRING_LIST_LDB(msg, systemMayContain, obj, obj, systemMayContain, false); - GET_STRING_LIST_LDB(msg, mustContain, obj, obj, mustContain, false); - GET_STRING_LIST_LDB(msg, mayContain, obj, obj, mayContain, false); + GET_STRING_LIST_LDB(msg, systemMustContain, obj, obj, systemMustContain); + GET_STRING_LIST_LDB(msg, systemMayContain, obj, obj, systemMayContain); + GET_STRING_LIST_LDB(msg, mustContain, obj, obj, mustContain); + GET_STRING_LIST_LDB(msg, mayContain, obj, obj, mayContain); - GET_STRING_LIST_LDB(msg, systemPossSuperiors, obj, obj, systemPossSuperiors, false); - GET_STRING_LIST_LDB(msg, possSuperiors, obj, obj, possSuperiors, false); + GET_STRING_LIST_LDB(msg, systemPossSuperiors, obj, obj, systemPossSuperiors); + GET_STRING_LIST_LDB(msg, possSuperiors, obj, obj, possSuperiors); GET_STRING_LDB(msg, defaultSecurityDescriptor, obj, obj, defaultSecurityDescriptor, false); -- Samba Shared Repository
[SCM] Samba Website Repository - branch master updated
The branch, master has been updated via d6710ff... Added ICE Systems at request of Neil Smith neil.sm...@icesystems.com.au.. from a604d59... Another typo in a web URL for a support listing. Now fixed by adding the http:// part of the URL. http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master - Log - commit d6710ff851ac69823e27c48a89269a9967e80889 Author: John H Terpstra j...@samba.org Date: Tue Jun 29 22:12:55 2010 -0500 Added ICE Systems at request of Neil Smith neil.sm...@icesystems.com.au.. --- Summary of changes: support/australia.html | 22 +- 1 files changed, 21 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/support/australia.html b/support/australia.html index 5289346..88daf93 100644 --- a/support/australia.html +++ b/support/australia.html @@ -16,12 +16,32 @@ Richmond, Victoria +61 3 9428 6922 a href=mailto:i...@cybersource.com.au;i...@cybersource.com.au/a Con Zymaris -/pre/small +/small/pre p Cybersource has 15+ years of experience of deploying and supporting Samba in heteregenous networked environments, in corporate, governement and commercial sectors. /p +!-- Added JHT 20100629 at request of icesytems -- +hr / +h3ICE Systems Pty Ltd/h3 +presmall +ICE Systems Pty Ltd +2-12 Foveaux Street +Surry Hills, NSW, 2010 +Australia + +a href=http://www.icesystems.com.au;http://www.icesystems.com.au/a +Tel: +61 2 9906 1592 +Fax: +61 2 9906 1596 +a href=mailto:sa...@icesystems.com.au;sa...@icesystems.com.au/a +Neil Smith +/small/pre +p +ICE Systems is an Australian systems integrator specialising in the design, procurement and deployment of systems and solutions for corporate Australia. ICE Systems provides commercial Linux support and is a Red Hat Advanced Partner and Red Hat Advanced Training Reseller. +/p + + !-- Added JHT 20100222 -- hr / h3Loftus IT/h3 -- Samba Website Repository