Re: [Samba] How can Samba both work, and, suddenly stop working, simultaneously?

2010-06-29 Thread Christian PERRIER
Quoting Paul Branon (paulbra...@googlemail.com):

 I can only interact with the server from the local command line. (I
 haven't altered the allow hosts in the config file. I haven't changed
 anything) I used to be able to reach it from all the machines on my
 network with windows \\10.10.10.1
 ERROR: the network path \\10.10.10.1 was not found


A few more information might help getting the whole picture. For
instance, the ouput of testparm -s  (better that just sending out
smb.conf as it skips settings that have their default value).

Also, you should check what's appearing in samba log files when you're
trying to connect to the server.

As of now, it is more sounding like you have an external cause and
your problem looks like a browsing problem. Didn't one of the windows
machines steal the samba server IP address?


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] preferred file system

2010-06-29 Thread Moray Henderson (ICT)
Chris Smith wrote:
Is there a preferred file system (ext4, xfs, reiserfs, etc.) for
hosting Samba shares used by Windows clients? What do the devs use?

I don't know about Samba preferences, but in the current Fedora/RedHat world, 
reiserfs does not appear to be a preferred filesystem: there's a thread on the 
Anaconda list at the moment discussing removing the reiserfs code from the 
installer.


Moray.
To err is human.  To purr, feline



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] xls file locked for editing by unknown user

2010-06-29 Thread Moray Henderson (ICT)
Dave Coventry wrote:
I'm not sure that this is the right place to ask about this, but one
of my users is having a problem with her files,specifically excel
files which she is editing with openoffice.

I suspect that she is closing down her PC without logging out or
something and so appears to be still logged in.

She is using Vista and the server is a Debian Lenny box.

Whenever she tries to access the files on the server the file is
apparently locked for editing by unknown user.

I cannot find any .~ lockfiles and rebooting both machines does not
resolve this.

The permissions are set to 777 and the owner of the files is this
particular user.

As I say, I'm assuming this is a Samba issue.

Can anyone suggest a way to resolve this?

~ Dave

Which version of Samba?

Does smbstatus(1) list the file as being locked?  If so, it should give
a pid you can examine.  The fuser(1) and lsof(8) commands can track
which process has a file open.

If rebooting the server does not clear the lock, there's either a lock
file or a cached lock record somewhere.  Try /var/lib/samba/locking.tdb.
Although it's binary, you can grep(1) it for the filename, or use
tdbdump(8) to display the contents.  According to
http://wiki.samba.org/index.php/Frequently_Asked_Questions#What_are_tdb_
files.3F, locking.tdb is not required to persist across restarts.  I
wouldn't try deleting this when Samba is running; even with Samba shut
down I would rename it rather than deleting it.

However, there has got to be a better solution to stale locks than
restarting Samba and deleting a tdb file every time it happens.  Does
the lock clear automatically after a time?  There may be lock tuning
parameters that could help - see smb.conf(5) for details.


Moray.
To err is human.  To purr, feline


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] xls file locked for editing by unknown user

2010-06-29 Thread Dave Coventry
Hi Moray, thanks for the assistance!

On 29 June 2010 10:41, Moray Henderson (ICT) moray.hender...@ict.om.org wrote:
 Which version of Samba?

Samba version 3.2.5

 Does smbstatus(1) list the file as being locked?  If so, it should give a pid 
 you can examine.  The fuser(1) and lsof(8) commands can track which process 
 has a file open.

No. smbstatus returns No locked files

 If rebooting the server does not clear the lock, there's either a lock file
 or a cached lock record somewhere.  Try /var/lib/samba/locking.tdb.
 Although it's binary, you can grep(1) it for the filename, or use
 tdbdump(8) to display the contents.  According to
 http://wiki.samba.org/index.php/Frequently_Asked_Questions#What_are_tdb_files.3F,
 locking.tdb is not required to persist across restarts.  I wouldn't try 
 deleting
 this when Samba is running; even with Samba shut down I would rename it
 rather than deleting it.

There is no file in /var/lib/samba/ called 'locking.tdb'
The only files in that directory bearing a date later than 14th Dec
2009 are these three:
passdb.tdb
registry.tdb
wins.dat
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] How can Samba both work, and, suddenly stop working, simultaneously?

2010-06-29 Thread Paul Branon
testparm -s

Load smb config files from /usr/local/samba/lib/smb.conf
Processing section [tmp]
Loaded services file OK.
[global]
workgroup = WORKGROUP
server string =  Samba Server
security = SHARE
log file = /usr/local/samba/var/log.%m

[tmp]
comment = Temporary data On Samba Server
path = /tmp
read only = No
guest ok = Yes




Thanks for getting back to me guys. No, it's not an ipaddress conflict
issue. I can ssh onto the server, I can access the server on port 80, etc.
It's not a cabling issue. Samba has just stopped exporting its file systems.
It's running on the server itself and I can access the share(s) but only
locally. I can't understand it. I have no access/deny restrictions in the
config. (You can see the config above.)

===
As for logfiles
[2010/06/20 22:31:24, 0] nmbd/nmbd.c:main(718)
  Netbios nameserver version 3.0.20 started.
  Copyright Andrew Tridgell and the Samba Team 1994-2004
[2010/06/20 22:37:02, 0]
nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
  *

  Samba name server SambaServer1 is now a local master browser for workgroup
WORKGROUP on subnet 10.10.10.22

  *
[2010/06/20 22:37:02, 0]
nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
  *

  Samba name server SambaServer1 is now a local master browser for workgroup
WORKGROUP on subnet 192.168.1.22

  *
[2010/06/20 23:51:34, 0] nmbd/nmbd.c:terminate(58)
  Got SIGTERM: going down...
[2010/06/21 12:41:12, 0] nmbd/nmbd.c:main(718)
  Netbios nameserver version 3.0.20 started.
  Copyright Andrew Tridgell and the Samba Team 1994-2004
[2010/06/21 12:46:50, 0]
nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
  *

  Samba name server SambaServer1 is now a local master browser for workgroup
WORKGROUP on subnet 10.10.10.22

  *
[2010/06/21 12:46:50, 0]
nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
  *

  Samba name server SambaServer1 is now a local master browser for workgroup
WORKGROUP on subnet 192.168.1.22

  *
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] xls file locked for editing by unknown user

2010-06-29 Thread Denis Fateyev
Hello Dave,

`lsof | grep your-file-name`

If it locked with any of smbd process, try `kill PID`, where `pid` - smbd
pid you've got previously.

---
wbr, Denis.


2010/6/29 Dave Coventry dgcoven...@gmail.com

 Hi Moray, thanks for the assistance!

 On 29 June 2010 10:41, Moray Henderson (ICT) moray.hender...@ict.om.org
 wrote:
  Which version of Samba?

 Samba version 3.2.5

  Does smbstatus(1) list the file as being locked?  If so, it should give a
 pid you can examine.  The fuser(1) and lsof(8) commands can track which
 process has a file open.

 No. smbstatus returns No locked files

  If rebooting the server does not clear the lock, there's either a lock
 file
  or a cached lock record somewhere.  Try /var/lib/samba/locking.tdb.
  Although it's binary, you can grep(1) it for the filename, or use
  tdbdump(8) to display the contents.  According to
 
 http://wiki.samba.org/index.php/Frequently_Asked_Questions#What_are_tdb_files.3F
 ,
  locking.tdb is not required to persist across restarts.  I wouldn't try
 deleting
  this when Samba is running; even with Samba shut down I would rename it
  rather than deleting it.

 There is no file in /var/lib/samba/ called 'locking.tdb'
 The only files in that directory bearing a date later than 14th Dec
 2009 are these three:
 passdb.tdb
 registry.tdb
 wins.dat
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Using pdbedit to list users - inconsistent result?

2010-06-29 Thread Alastair Sherringham
Hello,

I am using Samba on Debian 5.0 (Lenny) - Samba version 3.2.5. The
smb.conf defines the user database in the standard way :

passdb backend = tdbsam:/etc/samba/private/passdb.tdb

If I use pdbedit to list all users in the user database, user drew
does not appear :

# pdbedit -L|grep drew
#

If I query user drew on the pdbedit command-line, he appears :

# pdbedit drew
drew:1054:Drew Smith,,,
#

Why is there this discrepancy and is it a problem?

Cheers,

Alastair


-- 
Alastair Sherringham
http://www.sherringham.net
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] How can Samba both work, and, suddenly stop working, simultaneously?

2010-06-29 Thread Denis Fateyev
Hello Paul,

I think, `/tmp` in your filesystem is not not a good place to hold and share
your files anyway. Try with another place.

By the way, you have an old samba version (`3.0.20`), probably it's better
to update it at first.
As I know, there are a lot of issues with old `3.0.x` branch and Vista /
Seven. It's very old version that isn't supported currently.

---
wbr, Denis.


2010/6/29 Paul Branon paulbra...@googlemail.com

 testparm -s

 Load smb config files from /usr/local/samba/lib/smb.conf
 Processing section [tmp]
 Loaded services file OK.
 [global]
workgroup = WORKGROUP
server string =  Samba Server
security = SHARE
log file = /usr/local/samba/var/log.%m

 [tmp]
comment = Temporary data On Samba Server
path = /tmp
read only = No
guest ok = Yes



 
 Thanks for getting back to me guys. No, it's not an ipaddress conflict
 issue. I can ssh onto the server, I can access the server on port 80, etc.
 It's not a cabling issue. Samba has just stopped exporting its file
 systems.
 It's running on the server itself and I can access the share(s) but only
 locally. I can't understand it. I have no access/deny restrictions in the
 config. (You can see the config above.)

 ===
 As for logfiles
 [2010/06/20 22:31:24, 0] nmbd/nmbd.c:main(718)
  Netbios nameserver version 3.0.20 started.
  Copyright Andrew Tridgell and the Samba Team 1994-2004
 [2010/06/20 22:37:02, 0]
 nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
  *

  Samba name server SambaServer1 is now a local master browser for workgroup
 WORKGROUP on subnet 10.10.10.22

  *
 [2010/06/20 22:37:02, 0]
 nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
  *

  Samba name server SambaServer1 is now a local master browser for workgroup
 WORKGROUP on subnet 192.168.1.22

  *
 [2010/06/20 23:51:34, 0] nmbd/nmbd.c:terminate(58)
  Got SIGTERM: going down...
 [2010/06/21 12:41:12, 0] nmbd/nmbd.c:main(718)
  Netbios nameserver version 3.0.20 started.
  Copyright Andrew Tridgell and the Samba Team 1994-2004
 [2010/06/21 12:46:50, 0]
 nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
  *

  Samba name server SambaServer1 is now a local master browser for workgroup
 WORKGROUP on subnet 10.10.10.22

  *
 [2010/06/21 12:46:50, 0]
 nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
  *

  Samba name server SambaServer1 is now a local master browser for workgroup
 WORKGROUP on subnet 192.168.1.22

  *
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Using pdbedit to list users - inconsistent result?

2010-06-29 Thread Gaiseric Vandal

Is this for all users or just some users?

If for some users and not others, does pdbedit -Lv someuser show 
anything different?


What happens if you delete and recreate a samba account
e.g.
smbpasswd -x drew
smbpasswd -a drew




On 06/29/2010 06:06 AM, Alastair Sherringham wrote:

Hello,

I am using Samba on Debian 5.0 (Lenny) - Samba version 3.2.5. The
smb.conf defines the user database in the standard way :

passdb backend = tdbsam:/etc/samba/private/passdb.tdb

If I use pdbedit to list all users in the user database, user drew
does not appear :

# pdbedit -L|grep drew
#

If I query user drew on the pdbedit command-line, he appears :

# pdbedit drew
drew:1054:Drew Smith,,,
#

Why is there this discrepancy and is it a problem?

Cheers,

Alastair


   


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] winbindd GETGRENT results in trusted domains environment

2010-06-29 Thread Sergey Tashkinov
 Good day.
   1. We have configured two domain controllers on Windows 2003 R2. We
   named them TEST.LOCAL and CHILD.TEST.LOCAL respectively and made a
   trust relationships between them. 2. We have installed Samba 3.5.3 on
   Ubuntu 9.10, kernel 2.6.31-14 and configured it for using winbindd.
 We have encountered a problem with results that winbind returns
 upon a command GETGRENT. We have obtained those results with the
 command getent group.
   In a case if both domain controllers are turned on everything works
   well and we can get groups of users from both domains, for example:
   r...@ubuntu:/home/user# getent group root:x:0: daemon:x:1: bin:x:2:
   sys:x:3: adm:x:4:user tty:x:5: disk:x:6: lp:x:7: mail:x:8: news:x:9:
   uucp:x:10: man:x:12: proxy:x:13: kmem:x:15: dialout:x:20:user
   fax:x:21: voice:x:22: cdrom:x:24:user floppy:x:25: tape:x:26:
   sudo:x:27: audio:x:29:pulse dip:x:30: www-data:x:33: backup:x:34:
   operator:x:37: list:x:38: irc:x:39: src:x:40: gnats:x:41: shadow:x:42:
   utmp:x:43: video:x:44: sasl:x:45: plugdev:x:46:user staff:x:50:
   games:x:60: users:x:100: nogroup:x:65534: libuuid:x:101: syslog:x:102:
   fuse:x:103: lpadmin:x:104:user ssl-cert:x:105: messagebus:x:106:
   crontab:x:107: mlocate:x:108: ssh:x:109: avahi-autoipd:x:110:
   avahi:x:111: netdev:x:112: couchdb:x:113: haldaemon:x:114:
   admin:x:115:user saned:x:116: pulse:x:117: pulse-access:x:118:
   gdm:x:119: user:x:1000: sambashare:x:120:user winbindd_priv:x:121:
   TEST\helpservicesgroup:x:13:TEST\support_388945a0
   TEST\telnetclients:x:14: TEST\domain computers:x:15:
   TEST\domain controllers:x:16: TEST\schema
   admins:x:17:TEST\administrator TEST\enterprise
   admins:x:18:TEST\administrator TEST\cert publishers:x:19:
   TEST\domain admins:x:100010:TEST\administrator TEST\domain
   users:x:100011: TEST\domain guests:x:100012: TEST\group policy creator
   owners:x:100013:TEST\administrator TEST\ras and ias servers:x:100014:
   TEST\dnsadmins:x:100015: TEST\dnsupdateproxy:x:100016:
   TEST\group1:x:100017: TEST\group2:x:100018: TEST\group3:x:100019:
   TEST\group4:x:100020: TEST\group5:x:100021: TEST\group6:x:100022:
   TEST\group7:x:100023: TEST\group8:x:100024: TEST\group9:x:100025:
   TEST\group10:x:100026: TEST\group11:x:100027: CHILD\domain
   computers:x:100030: CHILD\domain controllers:x:100031: CHILD\domain
   admins:x:100032:CHILD\administrator CHILD\domain users:x:100033:
   CHILD\domain guests:x:100034: CHILD\group policy creator
   owners:x:100035:CHILD\administrator
   If we turn off the domain CHILD.TEST.LOCAL then getent group doesn't
   return any groups from neither domains, even from TEST.LOCAL.
   r...@ubuntu:/home/user# getent group root:x:0: daemon:x:1: bin:x:2:
   sys:x:3: adm:x:4:user tty:x:5: disk:x:6: lp:x:7: mail:x:8: news:x:9:
   uucp:x:10: man:x:12: proxy:x:13: kmem:x:15: dialout:x:20:user
   fax:x:21: voice:x:22: cdrom:x:24:user floppy:x:25: tape:x:26:
   sudo:x:27: audio:x:29:pulse dip:x:30: www-data:x:33: backup:x:34:
   operator:x:37: list:x:38: irc:x:39: src:x:40: gnats:x:41: shadow:x:42:
   utmp:x:43: video:x:44: sasl:x:45: plugdev:x:46:user staff:x:50:
   games:x:60: users:x:100: nogroup:x:65534: libuuid:x:101: syslog:x:102:
   fuse:x:103: lpadmin:x:104:user ssl-cert:x:105: messagebus:x:106:
   crontab:x:107: mlocate:x:108: ssh:x:109: avahi-autoipd:x:110:
   avahi:x:111: netdev:x:112: couchdb:x:113: haldaemon:x:114:
   admin:x:115:user saned:x:116: pulse:x:117: pulse-access:x:118:
   gdm:x:119: user:x:1000: sambashare:x:120:user winbindd_priv:x:121:
   But Samba 3.2.15 returned groups from TEST domain in both cases.
   The configuration files we used in a test environment for Samba,
   Nsswitch and PAM are listed below.
   #/etc/smb.conf [global] security = ads encrypt passwords = yes
   password server = ws2003.test.local workgroup = test realm =
   CHILD.LOCAL netbios name = ubuntu allow trusted domains = yes
   passwd program = /usr/bin/passwd %u passwd chat =
   *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n
   .
   winbind separator = + winbind uid = 10-200 winbind gid =
   10-200 winbind enum users = yes winbind enum groups = yes
   template homedir = /home/winnt/%D/%U template shell = /bin/bash
   server string = %h server log file = /var/log/samba/log.%m max log
   size = 1000 syslog = 0
   debug level = 11
   [public] comment = Public path=/home/public browsable=yes writable=yes
   admin users=user
   # /etc/nsswitch.conf passwd: files winbind group:  files winbind
   shadow: compat
   hosts:  files mdns4_minimal [NOTFOUND=return] dns mdns4 networks:
   files
   protocols:  db files services: db files ethers: db files rpc:  db
   files
   netgroup: nis
   # /etc/pam.d/samba auth sufficient pam_winbind.so account sufficient
pam_winbind.so session sufficient pam_winbind.so
   @include common-auth @include common-account @include common-session

   It is important for us to get group 

[Samba] Forcing umask for other users , or remapping POSIX to ACL

2010-06-29 Thread Frank Lin PIAT
Hello,

How can I instruct Samba, so public files (755/644) are not public anymore
when published by samba.

I publish some folders users ACLs. I want them to preserve the POSIX
persmission to 644, however, I don't want the files to be readable to
Everyone when accessed through Samba. So I want to either:

 * force an umask
 * remap the Other permission to a chosen group.

Can you help me on that?

thanks,

Franklin

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba winbind is not showing full list

2010-06-29 Thread *...@ppu
Hi all,

i came to know the difference between DL and Security group . previously i
was searching for a DL with wbonfo -g .:) wbinfo -g is showing corrrect
results .

now i am having the only problem that samba is not accessible with hostname
and it works with IP address.. i have added following lines in smb.conf with
no luck:(

wins server = wins ip addy
remote announce = wins ip addy/netbios workgroup name
remore browse sync = wins ip addy



Follwing is the log when i access with hostname.

[2010/06/29 17:42:28.120075,  3] smbd/oplock.c:894(init_oplocks)
  init_oplocks: initializing messages.
[2010/06/29 17:42:28.120931,  3]
smbd/oplock_linux.c:224(linux_init_kernel_oplocks)
  Linux kernel oplocks enabled
[2010/06/29 17:42:28.121240,  3] smbd/process.c:1485(process_smb)
  Transaction 0 of length 137 (0 toread)
[2010/06/29 17:42:28.121287,  3] smbd/process.c:1294(switch_message)
  switch message SMBnegprot (pid 5003) conn 0x0
[2010/06/29 17:42:28.121327,  3] smbd/sec_ctx.c:310(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/06/29 17:42:28.121692,  3] smbd/negprot.c:586(reply_negprot)
  Requested protocol [PC NETWORK PROGRAM 1.0]
[2010/06/29 17:42:28.121723,  3] smbd/negprot.c:586(reply_negprot)
  Requested protocol [LANMAN1.0]
[2010/06/29 17:42:28.121742,  3] smbd/negprot.c:586(reply_negprot)
  Requested protocol [Windows for Workgroups 3.1a]
[2010/06/29 17:42:28.121759,  3] smbd/negprot.c:586(reply_negprot)
  Requested protocol [LM1.2X002]
[2010/06/29 17:42:28.121776,  3] smbd/negprot.c:586(reply_negprot)
  Requested protocol [LANMAN2.1]
[2010/06/29 17:42:28.121793,  3] smbd/negprot.c:586(reply_negprot)
  Requested protocol [NT LM 0.12]
[2010/06/29 17:42:28.122652,  3] smbd/negprot.c:404(reply_nt1)
  using SPNEGO
[2010/06/29 17:42:28.122682,  3] smbd/negprot.c:691(reply_negprot)
  Selected protocol NT LM 0.12
[2010/06/29 17:42:28.127754,  3] smbd/process.c:1485(process_smb)
  Transaction 1 of length 2976 (0 toread)
[2010/06/29 17:42:28.127845,  3] smbd/process.c:1294(switch_message)
  switch message SMBsesssetupX (pid 5003) conn 0x0
[2010/06/29 17:42:28.127867,  3] smbd/sec_ctx.c:310(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/06/29 17:42:28.127933,  3]
smbd/sesssetup.c:1435(reply_sesssetup_and_X)
  wct=12 flg2=0xc807
[2010/06/29 17:42:28.128076,  3]
smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego)
  Doing spnego session setup
[2010/06/29 17:42:28.128106,  3]
smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego)
  NativeOS=[Windows Server 2003 3790 Service Pack 2] NativeLanMan=[]
PrimaryDomain=[Windows Server 2003 5.2]
[2010/06/29 17:42:28.128224,  3]
smbd/sesssetup.c:805(reply_spnego_negotiate)
  reply_spnego_negotiate: Got secblob of size 2714
[2010/06/29 17:42:28.131398,  3]
libads/kerberos_verify.c:378(ads_secrets_verify_ticket)
  ads_secrets_verify_ticket: enc type [23] failed to decrypt with error
Decrypt integrity check failed
[2010/06/29 17:42:28.131704,  3]
libads/kerberos_verify.c:568(ads_verify_ticket)
  ads_verify_ticket: krb5_rd_req with auth failed (Bad encryption type)
[2010/06/29 17:42:28.131805,  1] smbd/sesssetup.c:332(reply_spnego_kerberos)
  Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!
[2010/06/29 17:42:28.131946,  3] smbd/error.c:80(error_packet_set)
  error packet at smbd/sesssetup.c(334) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2010/06/29 17:42:28.146821,  3] smbd/sec_ctx.c:310(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/06/29 17:42:28.146926,  3] smbd/connection.c:31(yield_connection)
  Yielding connection to
[2010/06/29 17:42:28.147258,  3] smbd/server.c:902(exit_server_common)
  Server exit (failed to receive smb request)










-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] xls file locked for editing by unknown user

2010-06-29 Thread Dave Coventry
Hi Klaus,

On 29 June 2010 14:04, Klaus Ruebsam k.rueb...@gmx.net wrote:
 Hi Dave,

 I´m not at all an expert on Samba, but might it be something quite
 simple as the ampersand-sign () within your directory name ?!?

There are other directories which do not have the ampersand, but which
also demonstrate the same behaviour, so I don't think it's the
ampersand.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Using pdbedit to list users - inconsistent result?

2010-06-29 Thread Alastair Sherringham
On 29 June 2010 13:40, Gaiseric Vandal gaiseric.van...@gmail.com wrote:
 Is this for all users or just some users?

Just one user (out of ~15).

 If for some users and not others, does pdbedit -Lv someuser show anything
 different?

Nothing much different at all (except obvious, user name, id, home etc.)

 What happens if you delete and recreate a samba account
    e.g.
    smbpasswd -x drew
    smbpasswd -a drew

I have not tried that yet, I was a little worried about breaking something.

I found this problem when listing users  grep'ing for Drew, seeing
he was not there and trying to make the account - and getting an error
(Unable to add user! (does it already exist?)). I'll probably try
the delete and re-create shortly.

Cheers,


-- 
Alastair Sherringham
http://www.sherringham.net
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] preferred file system

2010-06-29 Thread Stan Hoeppner
Moray Henderson (ICT) put forth on 6/29/2010 3:54 AM:
 Chris Smith wrote:
 Is there a preferred file system (ext4, xfs, reiserfs, etc.) for
 hosting Samba shares used by Windows clients? What do the devs use?
 
 I don't know about Samba preferences, but in the current Fedora/RedHat world, 
 reiserfs does not appear to be a preferred filesystem: there's a thread on 
 the Anaconda list at the moment discussing removing the reiserfs code from 
 the installer.

Given the myriad of negative issues surrounding Hans Reiser, ReiserFS and
successors, it's not surprising that vendors, devs, and end users have been
fleeing in droves to other filesystems.

I personally use XFS on Debian Stable but with far more current self rolled
kernels using kernel.org source.  XFS sees constant consistent development,
its dev community being very active.  Patches seem to be submitted almost
daily.  It includes a sizable set of management tools including an online
filesystem defragger.  I've been very pleased with it.

There aren't a lot of filesystem benchmark results published for any of the
Linux filesystems, but of those I've read, XFS proves to have the best mix of
all around performance.

I suggest you post your question to x...@oss.sgi.com.  You can post without
being a subscriber, but if you do, make that clear so people reply to you as
well as the list.

-- 
Stan
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] xls file locked for editing by unknown user

2010-06-29 Thread Dave Coventry
On 29 June 2010 14:12, Denis Fateyev de...@fateyev.com wrote:
 Did you have these locks immediately after you restarted the samba service?

Yes.

 If not, I suggest you to deploy `3.4 - 3.5` samba branch on test machine and
 check it out with vista again.

The funny thing is it was working fine before. I don't have a test
machine(well, not ons site anyway)

 As I know, there is recommended to use samba version greater than 3.3, if
 you're planning to use it with vista.
 With test machine, you won't break anything in working configuration and
 will check it's compatibility with new windows versions.

 I personally use `3.5.3` with windows xp and seven in my local network. The
 server with samba acts as domain controller and there are no any issues with
 xp nor seven.

Okay, I'll look into installing a backports version,then...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] file time-to-live

2010-06-29 Thread Leonardo Carneiro - Veltrac

Hi everyone,

There is a way to make files being automatically deleted some time after 
they have been created?
I know that, with some scripting wizardry i could achieve this, but i 
wanna know if samba has this kind of feature.


I have a temp folder that users insist in use like a backup folder, so i 
want to files to be deleted 24 hours after they have been created.


I cannot just delete everything at midnight because this folder is used 
in full time, so if a user create a file at 23h59, it would be deleted a 
minute later.


Sorry for my poor english and tks in advance.
--
Leonardo Carneiro
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] file time-to-live

2010-06-29 Thread Leonardo Carneiro - Veltrac
Hi Brian, tks for your answer. I'm confident that my goal could be 
achieved through the use of some third-party tool, like a script or 
something like it, like you sugested. But what i really need to know is 
if there is some feature in samba that would allow me to do just that.


But tks anyway for your answer.


On 06/29/2010 11:49 AM, Brian Cuttler wrote:

You could write something to check file create times and
delete files older than 36 hours, and run if from cron
several times per day.

I'd suggest # find, but it doesn't have the granularity
you are looking for, you could run it at 00:01 and remove
files there where 2 days old.

I did somethign similar on a VMS system I was managing, worked
well until some enterprising student found (I don't believe
they wrote it themselves) a program to reset the time stamp
on their files (which your users may start doing as well, perhaps
using # touch). At which point I started looking for files with
creation dates in the future... many users of the date reset
program wheren't quite as smart as they thought they where.




On Tue, Jun 29, 2010 at 11:32:52AM -0300, Leonardo Carneiro - Veltrac wrote:
   

Hi everyone,

There is a way to make files being automatically deleted some time after
they have been created?
I know that, with some scripting wizardry i could achieve this, but i
wanna know if samba has this kind of feature.

I have a temp folder that users insist in use like a backup folder, so i
want to files to be deleted 24 hours after they have been created.

I cannot just delete everything at midnight because this folder is used
in full time, so if a user create a file at 23h59, it would be deleted a
minute later.

Sorry for my poor english and tks in advance.
--
Leonardo Carneiro
--
 

---
Brian R Cuttler brian.cutt...@wadsworth.org
Computer Systems Support(v) 518 486-1697
Wadsworth Center(f) 518 473-6384
NYS Department of HealthHelp Desk 518 473-077

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] file time-to-live

2010-06-29 Thread Roel van Meer

Leonardo Carneiro - Veltrac writes:

There is a way to make files being automatically deleted some time after 
they have been created?


Yes, the tmpwatch utility can do this, but it is not part of the samba 
suite. It is probably already part of your distribution, but if not, you 
can get it from https://fedorahosted.org/tmpwatch/


Regards,

roel

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] file time-to-live

2010-06-29 Thread Brian Cuttler

You could write something to check file create times and
delete files older than 36 hours, and run if from cron
several times per day.

I'd suggest # find, but it doesn't have the granularity
you are looking for, you could run it at 00:01 and remove
files there where 2 days old.

I did somethign similar on a VMS system I was managing, worked
well until some enterprising student found (I don't believe
they wrote it themselves) a program to reset the time stamp
on their files (which your users may start doing as well, perhaps
using # touch). At which point I started looking for files with
creation dates in the future... many users of the date reset
program wheren't quite as smart as they thought they where.




On Tue, Jun 29, 2010 at 11:32:52AM -0300, Leonardo Carneiro - Veltrac wrote:
 Hi everyone,
 
 There is a way to make files being automatically deleted some time after 
 they have been created?
 I know that, with some scripting wizardry i could achieve this, but i 
 wanna know if samba has this kind of feature.
 
 I have a temp folder that users insist in use like a backup folder, so i 
 want to files to be deleted 24 hours after they have been created.
 
 I cannot just delete everything at midnight because this folder is used 
 in full time, so if a user create a file at 23h59, it would be deleted a 
 minute later.
 
 Sorry for my poor english and tks in advance.
 -- 
 Leonardo Carneiro
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba
---
   Brian R Cuttler brian.cutt...@wadsworth.org
   Computer Systems Support(v) 518 486-1697
   Wadsworth Center(f) 518 473-6384
   NYS Department of HealthHelp Desk 518 473-0773



IMPORTANT NOTICE: This e-mail and any attachments may contain
confidential or sensitive information which is, or may be, legally
privileged or otherwise protected by law from further disclosure.  It
is intended only for the addressee.  If you received this in error or
from someone who was not authorized to send it to you, please do not
distribute, copy or use it or any attachments.  Please notify the
sender immediately by reply e-mail and delete this from your
system. Thank you for your cooperation.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] file time-to-live

2010-06-29 Thread Mike Eggleston
On Tue, 29 Jun 2010, Brian Cuttler might have said:

 
 You could write something to check file create times and
 delete files older than 36 hours, and run if from cron
 several times per day.
 
 I'd suggest # find, but it doesn't have the granularity
 you are looking for, you could run it at 00:01 and remove
 files there where 2 days old.
 
 I did somethign similar on a VMS system I was managing, worked
 well until some enterprising student found (I don't believe
 they wrote it themselves) a program to reset the time stamp
 on their files (which your users may start doing as well, perhaps
 using # touch). At which point I started looking for files with
 creation dates in the future... many users of the date reset
 program wheren't quite as smart as they thought they where.

(not tested and for GNU/linux)

#!/bin/sh

# $Id$
# $Log$

# delete files older than yesterday

# globals
dir=/tmp
tf=$dir/.$$

# create a temporary file
touch -d yesterday $tf

# find all older files
find $dir ! -newer $tf -print  $tf

# delete older files
xargs rm -rf  $tf

# clean up
rm -f $tf
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] file time-to-live

2010-06-29 Thread John Drescher
On Tue, Jun 29, 2010 at 10:55 AM, Leonardo Carneiro - Veltrac
lscarne...@veltrac.com.br wrote:
 Hi Brian, tks for your answer. I'm confident that my goal could be achieved
 through the use of some third-party tool, like a script or something like
 it, like you sugested. But what i really need to know is if there is some
 feature in samba that would allow me to do just that.

Samba does not have this builtin.

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] file time-to-live

2010-06-29 Thread Benedict White
You could write a bash script like this:

#!/bin/bash
find /some/temp/dir/ -name * -atime 1 -delete

Where atime* indictates file was modified 1 * 24 hours ago.

(*There are loads of time based operators for find)

See http://unixhelp.ed.ac.uk/CGI/man-cgi?find for the find man page.

You may also want to use -P to never follow symbolic links.

Then once the batch file is created, chmod it to something like 750, and make 
it a cron job to run every hour.

Kind Regards,
Benedict White

Tel:
01444 238070
Tech:
01444 238080
Fax:
01444 238099
Web:
http://www.cse-ltd.co.uk
Registered in England and Wales No: 3066242
27 Victoria Gardens, Burgess Hill, West Sussex, RH15 9NB



Legal Disclaimer: This message and any attachment may be confidential and 
privileged. If you are not the intended recipient please notify the sender and 
delete this e-mail and any attachment from your system. Any unauthorised 
copying, disclosure or distribution of the material in this e-mail is strictly 
forbidden. All information given in this e-mail is provided in good faith but 
not binding for legal reasons.



-Original Message-
From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On 
Behalf Of Leonardo Carneiro - Veltrac
Sent: 29 June 2010 15:33
To: samba@lists.samba.org
Subject: [Samba] file time-to-live

Hi everyone,

There is a way to make files being automatically deleted some time after
they have been created?
I know that, with some scripting wizardry i could achieve this, but i
wanna know if samba has this kind of feature.

I have a temp folder that users insist in use like a backup folder, so i
want to files to be deleted 24 hours after they have been created.

I cannot just delete everything at midnight because this folder is used
in full time, so if a user create a file at 23h59, it would be deleted a
minute later.

Sorry for my poor english and tks in advance.
--
Leonardo Carneiro
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] file time-to-live

2010-06-29 Thread Mike Eggleston
On Tue, 29 Jun 2010, Leonardo Carneiro - Veltrac might have said:

 Hi everyone,
 
 There is a way to make files being automatically deleted some time after 
 they have been created?
 I know that, with some scripting wizardry i could achieve this, but i 
 wanna know if samba has this kind of feature.
 
 I have a temp folder that users insist in use like a backup folder, so i 
 want to files to be deleted 24 hours after they have been created.
 
 I cannot just delete everything at midnight because this folder is used 
 in full time, so if a user create a file at 23h59, it would be deleted a 
 minute later.
 
 Sorry for my poor english and tks in advance.

#!/usr/bin/perl

# $Id$
# $Log$

# delete files that are 24 hours old

use Getopt::Std;
use strict;

# globals
my $dir = '/tmp';
my $oldest = time - 86400;

# get the files
opendir(DIR, $dir) or die $0: cannot open dir '$dir': $!;
my @files = readdir(DIR);
closedir(DIR) or die $0: cannot close dir '$dir': $!;

# decide which files to delete
my @deletefiles;
foreach my $file (@files) {
next if $file eq '.';
next if $file eq '..';
next if $file eq 'lost+found';
my @st = stat($dir . '/' . $file);
push(@deletefiles, $file) if $st[9]  $oldest;
}

# delete the files
map { unlink($dir . '/' . $_) or warn $0: cannot remove file '$dir/$_': $! } 
@deletefiles;

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] file time-to-live

2010-06-29 Thread Mike Eggleston
On Tue, 29 Jun 2010, Benedict White might have said:

 You could write a bash script like this:
 
 #!/bin/bash
 find /some/temp/dir/ -name * -atime 1 -delete

Duh, you can also do it with mtime and not a time

find $dir -mtime 1 -exec /bin/rm -f {} \;

You don't have to give a name if you want all files.

Mike
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] limit access to folder without mapping a new drive

2010-06-29 Thread c cc
Hi,
Under our file structure, we have /files/all/departments/. We want
everyone to have access to all the folders under files, but there are
couple of folders in the departments directory/folder that need to
limit access to only one person. Is it possible without mapping a new
drive? Thanks!

--
[files]
   comment = files
#  hosts allow =
path = /files
public = yes
writable = yes
printable = no
create mask = 0644
directory mask = 0755
available = yes
guest only = no
browseable = yes
only user = no
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] limit access to folder without mapping a new drive

2010-06-29 Thread Gaiseric Vandal
Change the file permissions, either via Windows or with unix chmod, 
chown etc on the server..  The share perms will not override the file 
system permissions.


On 06/29/2010 12:19 PM, c cc wrote:

Hi,
Under our file structure, we have /files/all/departments/. We want
everyone to have access to all the folders under files, but there are
couple of folders in the departments directory/folder that need to
limit access to only one person. Is it possible without mapping a new
drive? Thanks!

--
[files]
comment = files
#  hosts allow =
 path = /files
 public = yes
 writable = yes
 printable = no
 create mask = 0644
 directory mask = 0755
 available = yes
 guest only = no
 browseable = yes
 only user = no
   


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] limit access to folder without mapping a new drive

2010-06-29 Thread John Drescher
 Under our file structure, we have /files/all/departments/. We want
 everyone to have access to all the folders under files, but there are
 couple of folders in the departments directory/folder that need to
 limit access to only one person. Is it possible without mapping a new
 drive? Thanks!


The way I prefer to do this is to set proper posix acls.

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba3 to samba4 migration

2010-06-29 Thread Luciano Andre Baramarchi
Hi,

I'm testing samba 4 in my organization. I have a samba3 domain with LDAP 
backend. I'm trying migrate workstations and users 
from old samba to samba4. Is this possible?

Thanks,

Luciano
luci...@multitasknet.com.br



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] New user need help - AD/Krb/Smb

2010-06-29 Thread Thiago Ferreira
I'm trying to put my Samba Server in AD Win2008, as I did in the past with
Win2003.
I'm using smbd Version 3.2.5,  winbindd Version 3.2.5, MIT Kerberos 1.6.1-1
and ntpdate synchronized with AD, I follow this howto
http://wiki.samba.org/index.php/Samba_%26_Active_Directory and this
https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto

All my tests demonstrate the successful when I run the following commands:

# net ads testjoin
Join is OK


# net ads info
LDAP server: 10.215.1.201
LDAP server name: GSCPSVMAD01.gransapore.corp.dc
Realm: GRANSAPORE.CORP.DC
Bind Path: dc=GRANSAPORE,dc=CORP,dc=DC
LDAP port: 389
Server time: Tue, 29 Jun 2010 14:02:24 BRT
KDC server: 10.215.1.201
Server time offset: 4


# net ads status -UAdministrator%Password

# wbinfo -K thiago.ferreira%password
plaintext kerberos password authentication for [thiago.ferreira] succeeded
(requesting cctype: FILE)
credentials were put in: FILE:/tmp/krb5cc_0


# wbinfo -u
# wbinfo -g
# wbinfo -m
# wbinfo -t


# net ads user
# net ads group

# getent passwd
# getent group



But I would like to open a share this Samba using a desktop WinXP and I
can't to do, stay asking login and password to open, however I put the login
and password correct and don't work.
I before to joining the Samba in AD put an entry in DNS with the name fqnd
from my Server samba, stayded cpsmonitor.gransapore.corp.dc with a PTR also,
my file hosts e my resolv.conf is all right.

Bellow follows my smb.conf, my krb5.conf and my logs for analyze. if someone
can help me with any hint...

#less krb5.conf
[libdefaults]
default_realm = GRANSAPORE.CORP.DC
ticket_lifetime = 24000

[realms]
GRANSAPORE.CORP.DC = {
kdc = gscpsvmad01.gransapore.corp.dc
admin_server = gscpsvmad01.gransapore.corp.dc
default_domain = gransapore.corp.dc
}

[domain_realm]
.gransapore.corp.dc = GRANSAPORE.CORP.DC
gransapore.corp.dc = GRANSAPORE.CORP.DC

[login]
krb4_convert = true
krb4_get_tickets = false


#less smb.conf
[global]
workgroup = GRANSAPORE
realm = GRANSAPORE.CORP.DC
security = ADS
auth methods = winbind
password server = gscpsvmad01.gransapore.corp.dc
passdb backend = tdbsam
restrict anonymous = 2
client NTLMv2 auth = Yes
syslog = 2
log file = /var/log/samba/log.%m
max log size = 1000
panic action = /usr/share/samba/panic-action %d
idmap uid = 1-2
idmap gid = 1-2
template shell = /bin/bash
winbind separator = +
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
winbind trusted domains only = Yes

[share01]
comment = Network Share
path = /var/spool/samba/share01
valid users = @Domain Users
force group = Domain Users
read only = No
create mask = 0664
directory mask = 0775
guest ok = Yes


Samba Logs:

#less log.wb-GRANSAPORE
[2010/06/29 13:38:18,  1] libads/authdata.c:kerberos_return_pac(398)
  kinit failed for 'thiago.ferre...@gransapore.corp.dc' with:
Preauthentication failed (-1765328360)
[2010/06/29 13:38:34,  1]
libads/kerberos.c:smb_krb5_get_ntstatus_from_krb5_error_init_creds_opt(159)
  no krb5_error
[2010/06/29 13:38:34,  1] libads/authdata.c:kerberos_return_pac(398)
  kinit failed for 'gransapore\thiago.ferre...@gransapore.corp.dc' with:
Client not found in Kerberos database (-1765328378)
[2010/06/29 13:38:47,  1]
libads/kerberos.c:smb_krb5_get_ntstatus_from_krb5_error_init_creds_opt(159)
  no krb5_error
[2010/06/29 13:38:47,  1] libads/authdata.c:kerberos_return_pac(398)
  kinit failed for 'gransapore\thiago.ferre...@gransapore.corp.dc' with:
Client not found in Kerberos database (-1765328378)
[2010/06/29 13:38:55,  1]
libads/kerberos.c:smb_krb5_get_ntstatus_from_krb5_error_init_creds_opt(159)
  no krb5_error
[2010/06/29 13:38:55,  1] libads/authdata.c:kerberos_return_pac(398)
  kinit failed for 'gransapore.corp.dc\thiago.ferre...@gransapore.corp.dc'
with: Client not found in Kerberos database (-1765328378)
[2010/06/29 13:39:05,  1]
libads/kerberos.c:smb_krb5_get_ntstatus_from_krb5_error_init_creds_opt(159)
  no krb5_error
[2010/06/29 13:39:05,  1] libads/authdata.c:kerberos_return_pac(398)
  kinit failed for 'thiago.ferre...@gransapore.corp.dc' with:
Preauthentication failed (-1765328360)
[2010/06/29 13:57:37,  1] libsmb/clikrb5.c:ads_krb5_mk_req(680)
  ads_krb5_mk_req: krb5_get_credentials failed for gscpsvmad...@gransapore
(Cannot resolve network address for KDC in requested realm)
[2010/06/29 13:57:37,  1]
libsmb/cliconnect.c:cli_session_setup_kerberos(626)
  cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Cannot resolve
network address for KDC in requested realm

#less log.winbindd
[2010/06/29 15:24:40,  0]
winbindd/winbindd_cache.c:initialize_winbindd_cache(2374)
  initialize_winbindd_cache: clearing cache and re-creating with version
number 1
[2010/06/29 15:24:40,  1] 

[Samba] Samba Forum vs. Mailing List?`!

2010-06-29 Thread Tom H. Lautenbacher
Hello everyone,

 

I wanted to ask if there is an official Samba Forum, because I could not
find any on the Project Page. If there isn't any, is there a particular
reason for this not-existance?

 

Best regards

Tom H. Lautenbacher

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba Forum vs. Mailing List?`!

2010-06-29 Thread Linda W

Tom H. Lautenbacher wrote:

Hello everyone,

 


I wanted to ask if there is an official Samba Forum, because I could not
find any on the Project Page. If there isn't any, is there a particular
reason for this not-existance?

---
No need?
Why do you need a forum with a mailing list?

Forums are non-standard.  Mailing lists have software to process
them in many ways.  Many are archived -- not something you get with forums.

Forums seems to be a 'windows' thing for users when companies want
to be able to ignore their user base.

Emails cause the companies too much headache because the user's emails
end up in employee inboxes and cause distractions from doing real work, so 
they
try to put users in forums, so they won't distract the companies' employees.


-l
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba Forum vs. Mailing List?`!

2010-06-29 Thread Tom H. Lautenbacher
Hi Linda!

 

  I wanted to ask if there is an official Samba Forum

 

 No need?

 Why do you need a forum with a mailing list?

 

Because a forum IMHO has certain advantages over a mailing list.

 

 Forums are non-standard.  Mailing lists have software to process them 

 in many ways.  Many are archived -- not something you get with forums.

 

@Standard: Yes, I agree. This is a disadvantage for forums in comparison to
other means of communication, such as mailing lists or usenet-news.

@Software: What software is there and in which ways can you process mails?

@Archive: Anybody running a forum can decide on his own, if he wants to
archive things or not.

 

 Forums seems to be a 'windows' thing for users when companies want to 

 be able to ignore their user base.

 Emails cause the companies too much headache because the user's emails 

 end up in employee inboxes and cause distractions from doing real 

 work, so they try to put users in forums, so they won't distract the 

 companies'

 employees.

 

U, well.. I am self employed and feel distracted and annoyed by all
those useless emails from all those mailing-lists that I have to attend,
too.

 

My opinion is:

Every means of communication has it's functional range.

 

Mailing lists are existing since many years. They were perfect in those
pioneer years, when a small group of people worked together on a small
thing: Everyone needed to be informed about everything and everybody had to
discuss everything. Until today mailing lists serve such small development
groups very good.

 

But as projects grow bigger and the group of users with them, IMHO there
arises the need for further means of communication.

 

Speaking for me: I am a Samba user since about 2002, using Samba as
Administrator of some small-midsized Networks. I do not contribute code or
help developing. From time to time I am having a problem with implementing
Samba and need quick advice and help.

 

For me now to get help, I needed to subscribe to this mailing list. From
this moment on I received approx. 20 emails which do not concern me or my
problem. I do not know the answer to all of those questions either, so I
can't help anybody. I am just annoyed and bothered by my mailbox getting
literally spammed. Since Samba is not the only open source community who's
mailing list I am attending, I am receiving daily approx. 30-40 of those
emails.

 

For my case a forum would server much better. I could go there, post my
question and subscribe to my thread, getting email-notification just about
my question. Furthermore I could quickly browse the forum to see, if there
are any open topics where I think that I could help someone else out.

Given that the forum settings are saving all postings for ever, the whole
forum would serve everybody as a very valuable knowledge base, making it
easy to find answers for common problems, without bugging anybody or
spamming everybody with the 10,000 versions of the same question.

 

Both means of communication can easily live in harmony! Developers or hard
core members, who need to stay in touch very intensively and want to
participate to ALL communication can continue participating at the mailing
list (although it would be easily possible to just subscribe to an analogue
topic in the forum and get automatically all messages, but anyway..).

 

Another great plus of Forums is the possibility to use HTML and other
functionality. Well I know guys, all hardcore old-school guys among you
roll their eyes, because you love plain text stuff.

 

But the reality is that it does make sense and does bring communication
again to a much higher level of productivity, when you are able e.g. to
implement screenshots or diagrams to your answers, instead of having to e.g.
draw a network diagram with ASCII art...

 

 

Well there are many pros and cons to everything.

 

Fact is, that I am having a problem with Samba to that I can't find any
information, but instead get spammed with 30 emails that do not really
concern me. Fact is that although Windows 7 is out for a long time now, I
had to find all the information about the needed registry patches in some
other forums or spread over some archived mailing-list fragments, hard to
read and difficult to find. A decent userforum/knowledgebase would have
served in a much more efficient way!

 

So my final question:

If I would help making a Samba-Forum, would there be anybody here who would
appreciate and would like to use it? Would the official guys among you
want to implement it to the samba-homepage?

 

All the best

Tom H. Lautenbacher

 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba Forum vs. Mailing List?`!

2010-06-29 Thread Linda W

Tom H. Lautenbacher wrote:


U, well.. I am self employed and feel distracted and annoyed by all
those useless emails from all those mailing-lists that I have to attend,
too.


That's because you don't use the software and tools available
to process email.

Try procmail.

Sort your email into mailboxes -- including your samba
email.

	Then read that email box when you want to.  
Write a shell script or use mozilla to auto-expire unread email in those

folders.

You'll have all the features you might want in a forum.
You can ignore everyone to your heart's content! :-)




My opinion is:
Every means of communication has it's functional range.

---
nope -- forums can't deliver themselves to my email system
automatically.  They are proprietary solutions that don't fit any
standard.  






Mailing lists are existing since many years. They were perfect in those
pioneer years, when a small group of people worked together on a small
thing: Everyone needed to be informed about everything and everybody had to
discuss everything. Until today mailing lists serve such small development
groups very good.


They serve development groups fine today -- small and large...
The linux kernel runs off of a mail list.  There is no larger open source
project than that.




But as projects grow bigger and the group of users with them, IMHO there
arises the need for further means of communication.

---
Not forums.  Tell me one thing you can do with forums that you
can't do with email.





Speaking for me: I am a Samba user since about 2002, using Samba as
Administrator of some small-midsized Networks. I do not contribute code or
help developing. From time to time I am having a problem with implementing
Samba and need quick advice and help.

For me now to get help, I needed to subscribe to this mailing list. From
this moment on I received approx. 20 emails which do not concern me or my
problem.


Because you don't use the tools that are available to you.

I wrote my own perl script to process and sort my email in .. the
early 90's -- using perl2 or perl3.  I could throw it at you, but unless
you've grown up with it, it wouldn't be that useful to you.  Go get 
procmail.




I do not know the answer to all of those questions either, so I
can't help anybody. I am just annoyed and bothered by my mailbox getting
literally spammed. Since Samba is not the only open source community who's
mailing list I am attending, I am receiving daily approx. 30-40 of those
emails.


Not a problem -- you are not alone!  I have well over 50 groups I'
am subscribed to -- because I use the software -- like you -- I can't begin
to read all of them.  But I have all of them come into separate boxes where
I have them auto-expire in a way that I keep the last few-several months 
depending on the group.  Then I can read them at my leisure.  My main inbox

gets less than 5 emails a day.  Overall I receive maybe 1000 emails a day
(about 30-40% are spam that get filtered out by spamassassin -- ANOTHER 
tool you can't use in a forum!).






For my case a forum would server much better. I could go there, post my
question and subscribe to my thread, getting email-notification just about
my question. Furthermore I could quickly browse the forum to see, if there
are any open topics where I think that I could help someone else out.
Given that the forum settings are saving all postings for ever, the whole
forum would serve everybody as a very valuable knowledge base, making it
easy to find answers for common problems, without bugging anybody or
spamming everybody with the 10,000 versions of the same question.


If you want to see archives of the newsgroups, you can search them
with google.  Different groups have different archives, but most forums
are not easily accessible with google -- you have to have logins and sign
up and login...all sorts of messing stuff.

If you put all the postings into a folder, -- use thunderbird
or something that threads the conversations.  You can browse by discussion,
topic/subject, person...etc.  Anything you could do in a forum, you can
do in email.




So my final question:
If I would help making a Samba-Forum, would there be anybody here who would
appreciate and would like to use it? Would the official guys among you
want to implement it to the samba-homepage?

---
Tell us one thing you can do in a forum that you can't do in email.

Everything you want can be done in email with free tools!

Seriously, procmail will let you filter all your email by group
person, subject...etc.  I'm sure there are others (I don't use procmail,
but it's been around about as long as my perl script I use!).

	If you need more suggestions, check google for 
email filtering programs -- try spamassassin to weed out spam.


I am NOT a member of the samba development team, so my opinion
is my own.  They may 

Re: [Samba] Samba Forum vs. Mailing List?`!

2010-06-29 Thread Felix Miata
Forums almost without exception style themselves to annoy or even prevent use
by any but those with the best vision, rarely, if ever, styling so that users
by default get to see their preferred font size instead of having to jump
through hoops to do it.

Email from mailing lists, even when originally styled by the sender, usually
has styling stripped, so that subscribers get plain text only, which renders
legibly if not comfortably in the size the reader prefers.

After more than a dozen years samping forums and subscribing to many mailing
lists and newsgroups, I find those with the most to contribute gravitate to
mailing lists, whereas forums tend to be dominated by unanswered and poorly
answered questions.
-- 
The wise are known for their understanding, and pleasant
words are persuasive. Proverbs 16:21 (New Living Translation)

 Team OS/2 ** Reg. Linux User #211409

Felix Miata  ***  http://fm.no-ip.com/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Long delays when launching programs for the first time in my Windows 7 Profile (Samba 3.4.3 as PDC)

2010-06-29 Thread Linda W

I don't know about the program delays, but the long time
delay for the Win7 users sounds like it is copying the profile
from your PDC to the user's workstation the first time.

YES -- win7 is inordinately slow copying profiles.  I've
had it take 45 minutes just to log out.


But it would take a long time the first time while it downloaded
their profile to their workstation.

On subsequent logins, everything is already local, so login should
go much faster.

It's considered a standard 'microsoft' feature and I also
need to solve the similar problem of it taking too long to
synchronize at logoff -- when it tries to synchronize the
server and workstation profiles.

It takes 'forever'and there's no way for me to know if
it has hung or not -- one time that I let it go, it finished
after 45 minutes of slow (100K) synchronization activity.

That's about 1/1000th of my network bandwidth!

MS suggest having small profiles and/or preloading
users' profiles on their workstation to minimize the
'first logon' to a domain.

I.e. they suggest making poor use of the domain synchronization
feature!  


If you find a solution, would be interested  in finding out...
My next step is to hit up the windows forums, but I rarely get
answer there from anyone who knows anything, so I dread bothering
to ask.

-linda

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba 3.3 ldap tools

2010-06-29 Thread Indexer
I am currently trying to setup my Samba server to act as a samba PDC, with ldap 
as a backend. I have a selfsigned CA, that has signed the certificates to my 
ldap server. 

Starting my smbd, i keep getting the message

smb_ldap_setup_connection: ldap://ldap.streetgeek.lan/
Failed to issue the StartTLS instruction: Connect error
Connection to LDAP server failed for the 1 try!
smbldap_open: already connected to the LDAP server
Failed search for base: dc=dev,dc=gamersalliance,dc=net,dc=au, error: -1 (Can't 
contact LDAP server) (error:14090086:SSL 
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed (self signed 
certificate in certificate chain))

I have set in smbldap-tools.conf to verify=allow, as well as in ldap.conf to 
TLS_REQCERT = allow, so i dont understand why this is happening. All of my 
systems are pointed to the same cacert file so i doubt that it is confusing 
certificates. Are there any other options i should be considering?

Thanks

William
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba Forum vs. Mailing List?`!

2010-06-29 Thread Helmut Hullen
Hallo, Tom,

Du meintest am 30.06.10:

 I wanted to ask if there is an official Samba Forum



 No need?

 Why do you need a forum with a mailing list?



 Because a forum IMHO has certain advantages over a mailing list.

But you should first try to use the possibilities of a mailing list -  
beginning with reply to when you answer to Linda's mail.

It's no good behaviour starting a new thread instead.

Viele Gruesse!
Helmut
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Build status as of Tue Jun 29 06:00:01 2010

2010-06-29 Thread build
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2010-06-28 
00:00:03.0 -0600
+++ /home/build/master/cache/broken_results.txt 2010-06-29 00:00:02.0 
-0600
@@ -1,4 +1,4 @@
-Build status as of Mon Jun 28 06:00:01 2010
+Build status as of Tue Jun 29 06:00:01 2010
 
 Build counts:
 Tree Total  Broken Panic 
@@ -16,7 +16,7 @@
 samba_3_master 28 28 1 
 samba_3_next 28 28 3 
 samba_4_0_test 30 30 0 
-samba_4_0_waf 30 30 0 
+samba_4_0_waf 30 30 1 
 talloc   30 7  0 
 tdb  28 7  0 
 


[SCM] Samba Shared Repository - branch master updated

2010-06-29 Thread Andrew Bartlett
The branch, master has been updated
   via  cc7c572... s4:secrets Ensure secrets.ldb uses the same hooks as the 
rest of Samba
   via  48c8896... s4:selftest Split out PKINIT tests from test_kinit.sh 
and test enc types
   via  d76e485... s4:kdc Rework the 'allowed enc types' calculation
   via  f41e711... s4:auth Query LDB for msds-SupportedEncryptionTypes for 
the KDC
   via  5167b97... s4:kerberos Add functions to convert 
msDS-SupportedEncryptionTypes
   via  9fc3f81... s4:libnet_join Fix typo in msDS-SupportedEncryptionTypes
   via  94637e5... s4:provision Add an msDS-SupportedEncryptionTypes entry 
to our DC
  from  30dc87d... build: only use git when found by configure

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit cc7c572b3d87d2bd16cd7ec939a2d8a81bf36ef9
Author: Andrew Bartlett abart...@samba.org
Date:   Wed Jun 23 21:15:43 2010 +1000

s4:secrets Ensure secrets.ldb uses the same hooks as the rest of Samba

This ensures that, for example, the utf8 functions are the same,
the GUID handler is the same and the NOSYNC flag is applied.

Andrew Bartlett

commit 48c8896f2ede1c441a1448c2e45106a317b64832
Author: Andrew Bartlett abart...@samba.org
Date:   Thu Jun 24 09:42:40 2010 +1000

s4:selftest Split out PKINIT tests from test_kinit.sh and test enc types

This allows us to run the PKINIT tests only against the main DC (for
which the certificates were generated), while testing the available
encryption types in each functional level.

In particular, we need to assert that AES encryption is available in
the 2008 functional level.

Andrew Bartlett

commit d76e4852ebf6ebaaa0e59b481c4b17ac15310aec
Author: Andrew Bartlett abart...@samba.org
Date:   Thu Jun 24 09:40:16 2010 +1000

s4:kdc Rework the 'allowed enc types' calculation

This changes the calculation to apply the allowed enc types to all
uses of the key (no point allowing a weak kinit to a key the server
wanted strongly protected).  It also ensures that all the non-DES keys
are available on the krbtgt in particular, even as it does not have a
msds-SupportedEncryptionTypes attributes.

Andrew Bartlett

commit f41e71109744cbacfcbf6b8cf545e1f322d68494
Author: Andrew Bartlett abart...@samba.org
Date:   Thu Jun 24 10:03:29 2010 +1000

s4:auth Query LDB for msds-SupportedEncryptionTypes for the KDC

The KDC needs this to determine what encryption types an entry supports

Andrew Bartlett

commit 5167b97ff2d77ef28c59bb36988835ae421f027b
Author: Andrew Bartlett abart...@samba.org
Date:   Mon Jun 28 23:19:16 2010 +1000

s4:kerberos Add functions to convert msDS-SupportedEncryptionTypes

This will allow us to interpret this attibute broadly in Samba.

Andrew Bartlett

commit 9fc3f8194d55c20e1d5404301a0663888c4a0ba5
Author: Andrew Bartlett abart...@samba.org
Date:   Mon Jun 28 23:17:28 2010 +1000

s4:libnet_join Fix typo in msDS-SupportedEncryptionTypes

commit 94637e5fe4724261f1cd5f48d8641e82f4b776ae
Author: Andrew Bartlett abart...@samba.org
Date:   Mon Jun 28 23:14:23 2010 +1000

s4:provision Add an msDS-SupportedEncryptionTypes entry to our DC

This ensures that our DC will use all the available encyption types.

(The KDC reads this entry to determine what the server supports)

Andrew Bartlett

---

Summary of changes:
 source4/auth/kerberos/kerberos.h|6 ++
 source4/auth/kerberos/kerberos_util.c   |   57 
 source4/auth/sam.c  |1 +
 source4/dsdb/pydsdb.c   |   17 ++-
 source4/kdc/db-glue.c   |   76 --
 source4/lib/ldb-samba/ldb_wrap.c|   16 --
 source4/libnet/libnet_join.c|2 +-
 source4/param/secrets.c |   43 +--
 source4/scripting/python/samba/provision.py |   17 ++-
 source4/selftest/tests.sh   |5 ++-
 testprogs/blackbox/test_kinit.sh|   28 +-
 testprogs/blackbox/test_pkinit.sh   |   65 +++
 12 files changed, 228 insertions(+), 105 deletions(-)
 create mode 100755 testprogs/blackbox/test_pkinit.sh


Changeset truncated at 500 lines:

diff --git a/source4/auth/kerberos/kerberos.h b/source4/auth/kerberos/kerberos.h
index 96c11a4..b4422b5 100644
--- a/source4/auth/kerberos/kerberos.h
+++ b/source4/auth/kerberos/kerberos.h
@@ -53,6 +53,9 @@ struct keytab_container {
 #define KRB5_KEY_DATA(k)   ((k)-contents)
 #endif /* HAVE_KRB5_KEYBLOCK_KEYVALUE */
 
+#define ENC_ALL_TYPES (ENC_CRC32 | ENC_RSA_MD5 | ENC_RC4_HMAC_MD5 |\
+  ENC_HMAC_SHA1_96_AES128 | ENC_HMAC_SHA1_96_AES256)
+
 #ifndef HAVE_KRB5_SET_REAL_TIME
 

[SCM] Samba Shared Repository - branch master updated

2010-06-29 Thread Nadezhda Ivanova
The branch, master has been updated
   via  845e7a6... Fixed incorrect use of cn instead of lDAPDisplayName
  from  cc7c572... s4:secrets Ensure secrets.ldb uses the same hooks as the 
rest of Samba

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 845e7a609d23677539d9439b941e0dffb53f6bc9
Author: Nadezhda Ivanova nivan...@samba.org
Date:   Tue Jun 29 11:46:22 2010 +0300

Fixed incorrect use of cn instead of lDAPDisplayName

---

Summary of changes:
 source4/dsdb/samdb/ldb_modules/acl.c |4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/dsdb/samdb/ldb_modules/acl.c 
b/source4/dsdb/samdb/ldb_modules/acl.c
index bd788d4..e823b1e 100644
--- a/source4/dsdb/samdb/ldb_modules/acl.c
+++ b/source4/dsdb/samdb/ldb_modules/acl.c
@@ -724,7 +724,7 @@ static int acl_check_self_membership(struct ldb_module 
*module,
if (ret != LDB_SUCCESS) {
return ret;
}
-   member_el = ldb_msg_find_element(req-op.mod.message, Member);
+   member_el = ldb_msg_find_element(req-op.mod.message, member);
if (!member_el) {
return LDB_ERR_OPERATIONS_ERROR;
}
@@ -844,7 +844,7 @@ static int acl_modify(struct ldb_module *module, struct 
ldb_request *req)
if (ldb_attr_cmp(nTSecurityDescriptor, 
req-op.mod.message-elements[i].name) == 0) {
modify_sd = true;
}
-   else if (ldb_attr_cmp(Member, 
req-op.mod.message-elements[i].name) == 0) {
+   else if (ldb_attr_cmp(member, 
req-op.mod.message-elements[i].name) == 0) {
ret = acl_check_self_membership(module,
req,
sd,


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-06-29 Thread Andreas Schneider
The branch, master has been updated
   via  ee01fe8... s3-client: Make sure we only write to an opened file.
   via  f324036... s3-winbind: Make sure we crash if domain is really not 
found.
   via  eb7bf9d... s3-net: Make sure we don't call free on garbage.
   via  1db7356... s3-net: Use talloc_asprintf and return if file is in 
wrong format.
   via  e52f3d8... s3-librpc: Fixed GUID_from_data_blob() with length of 32.
  from  845e7a6... Fixed incorrect use of cn instead of lDAPDisplayName

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit ee01fe8c5bd450c82db3f7a7e8c783ac32b0812d
Author: Andreas Schneider a...@samba.org
Date:   Tue Jun 29 10:42:36 2010 +0200

s3-client: Make sure we only write to an opened file.

Found by clang-analyzer.

commit f324036e76abb0b572fb65c4c403e7ede259682a
Author: Andreas Schneider a...@samba.org
Date:   Tue Jun 29 10:34:17 2010 +0200

s3-winbind: Make sure we crash if domain is really not found.

Found by clang-analyzer.

commit eb7bf9d7309914fb2207f822e8017e1c1001de46
Author: Andreas Schneider a...@samba.org
Date:   Tue Jun 29 10:07:22 2010 +0200

s3-net: Make sure we don't call free on garbage.

Found by clang-analyzer.

commit 1db7356fa17cb3aeffcf4aff2149eaceaa5a62ea
Author: Andreas Schneider a...@samba.org
Date:   Mon Jun 28 13:20:18 2010 +0200

s3-net: Use talloc_asprintf and return if file is in wrong format.

Found by clang-analyzer.

commit e52f3d8637c7af2f0ea57954c7f13389f5a1e125
Author: Andreas Schneider a...@samba.org
Date:   Mon Jun 28 21:00:30 2010 +0200

s3-librpc: Fixed GUID_from_data_blob() with length of 32.

If we hit the case that the blob length is 32. The code goes to the end
of the function and generates a GUID with garbage.
So try to convert the blob to the GUID and return.

---

Summary of changes:
 librpc/ndr/uuid.c   |   10 +-
 nsswitch/pam_winbind.c  |2 +-
 source3/client/clitar.c |   14 ++
 source3/utils/net_ads_gpo.c |2 +-
 source3/utils/net_rpc_printer.c |   35 ---
 5 files changed, 33 insertions(+), 30 deletions(-)


Changeset truncated at 500 lines:

diff --git a/librpc/ndr/uuid.c b/librpc/ndr/uuid.c
index d46da09..33a7eee 100644
--- a/librpc/ndr/uuid.c
+++ b/librpc/ndr/uuid.c
@@ -117,12 +117,12 @@ _PUBLIC_ NTSTATUS GUID_from_data_blob(const DATA_BLOB *s, 
struct GUID *guid)
{
size_t rlen = strhex_to_str((char *)blob16.data, blob16.length,
(const char *)s-data, s-length);
-   if (rlen == blob16.length) {
-   /* goto the ndr_pull_struct_blob() path */
-   status = NT_STATUS_OK;
-   s = blob16;
+   if (rlen != blob16.length) {
+   return NT_STATUS_INVALID_PARAMETER;
}
-   break;
+
+   s = blob16;
+   return GUID_from_ndr_blob(s, guid);
}
case 16:
return GUID_from_ndr_blob(s, guid);
diff --git a/nsswitch/pam_winbind.c b/nsswitch/pam_winbind.c
index f13e365..b2d74de 100644
--- a/nsswitch/pam_winbind.c
+++ b/nsswitch/pam_winbind.c
@@ -2422,7 +2422,7 @@ static char* winbind_upn_to_username(struct pwb_context 
*ctx,
wbcErr wbc_status = WBC_ERR_UNKNOWN_FAILURE;
struct wbcDomainSid sid;
enum wbcSidType type;
-   char *domain;
+   char *domain = NULL;
char *name;
char *p;
 
diff --git a/source3/client/clitar.c b/source3/client/clitar.c
index fc98fa8..0a1adb4 100644
--- a/source3/client/clitar.c
+++ b/source3/client/clitar.c
@@ -998,16 +998,22 @@ static int skip_file(int skipsize)
 
 static int get_file(file_info2 finfo)
 {
-   uint16_t fnum;
+   uint16_t fnum = (uint16_t) -1;
int pos = 0, dsize = 0, bpos = 0;
uint64_t rsize = 0;
+   NTSTATUS status;
 
DEBUG(5, (get_file: file: %s, size %.0f\n, finfo.name, 
(double)finfo.size));
 
-   if (ensurepath(finfo.name) 
-   (!NT_STATUS_IS_OK(cli_open(cli, finfo.name, 
O_RDWR|O_CREAT|O_TRUNC, DENY_NONE,fnum {
+   if (!ensurepath(finfo.name)) {
DEBUG(0, (abandoning restore\n));
-   return(False);
+   return False;
+   }
+
+   status = cli_open(cli, finfo.name, O_RDWR|O_CREAT|O_TRUNC, DENY_NONE, 
fnum);
+   if (!NT_STATUS_IS_OK(status)) {
+   DEBUG(0, (abandoning restore\n));
+   return False;
}
 
/* read the blocks from the tar file and write to the remote file */
diff --git a/source3/utils/net_ads_gpo.c b/source3/utils/net_ads_gpo.c
index b120ca5..3d89045 100644
--- a/source3/utils/net_ads_gpo.c
+++ 

[SCM] Samba Shared Repository - branch master updated

2010-06-29 Thread Günther Deschner
The branch, master has been updated
   via  bf07bf2... winreg: fix winreg_QueryMultipleValues() IDL and torture 
tests.
  from  ee01fe8... s3-client: Make sure we only write to an opened file.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit bf07bf2857517b0972f47f5e9b46b7bde80c041b
Author: Günther Deschner g...@samba.org
Date:   Tue Jun 29 11:40:24 2010 +0200

winreg: fix winreg_QueryMultipleValues() IDL and torture tests.

Guenther

---

Summary of changes:
 librpc/idl/winreg.idl|   13 +++--
 source4/torture/ndr/winreg.c |   34 +-
 source4/torture/rpc/winreg.c |   12 ++--
 3 files changed, 30 insertions(+), 29 deletions(-)


Changeset truncated at 500 lines:

diff --git a/librpc/idl/winreg.idl b/librpc/idl/winreg.idl
index ce00b8e..19f309b 100644
--- a/librpc/idl/winreg.idl
+++ b/librpc/idl/winreg.idl
@@ -371,17 +371,18 @@ import lsa.idl, security.idl, misc.idl;
);
 
typedef struct {
-   winreg_String *name;
-   winreg_Type type;
-   uint32 offset;
-   uint32 length;
+   winreg_ValNameBuf *ve_valuename;
+   uint32 ve_valuelen;
+   uint32 *ve_valueptr;
+   winreg_Type ve_type;
} QueryMultipleValue;
-   
+
/**/
/* Function: 0x1d */
[public] WERROR winreg_QueryMultipleValues(
[in,ref] policy_handle *key_handle, 
-   [in,out,ref,size_is(num_values),length_is(num_values)] 
QueryMultipleValue *values,
+   [in,ref,size_is(num_values),length_is(num_values)] 
QueryMultipleValue *values_in,
+   [out,ref,size_is(num_values),length_is(num_values)] 
QueryMultipleValue *values_out,
[in] uint32 num_values,
[in,out,unique,size_is(*buffer_size),length_is(*buffer_size)] 
uint8 *buffer,
[in,out,ref] uint32 *buffer_size
diff --git a/source4/torture/ndr/winreg.c b/source4/torture/ndr/winreg.c
index 14ee844..2bd28f0 100644
--- a/source4/torture/ndr/winreg.c
+++ b/source4/torture/ndr/winreg.c
@@ -242,14 +242,16 @@ static const uint8_t querymultiplevalues_in_data[] = {
 static bool querymultiplevalues_in_check(struct torture_context *tctx, 
 struct winreg_QueryMultipleValues *r)
 {
+   torture_assert_mem_equal(tctx, r-in.key_handle, 
querymultiplevalues_in_data, sizeof(struct policy_handle), key handle);
torture_assert_int_equal(tctx, r-in.num_values, 1, num values);
-   torture_assert_str_equal(tctx, r-in.values[0].name-name, HOMEPATH, 
-name);
-
-   torture_assert_int_equal(tctx, r-in.values[0].type, 0, type);
-   torture_assert_int_equal(tctx, r-in.values[0].offset, 0, offset);
-   torture_assert_int_equal(tctx, r-in.values[0].length, 0, length);
-   torture_assert_int_equal(tctx, *r-in.buffer_size, 76, buffer size);
+   torture_assert_str_equal(tctx, r-in.values_in[0].ve_valuename-name, 
HOMEPATH, name);
+   torture_assert_int_equal(tctx, r-in.values_in[0].ve_valuename-length, 
18, name len);
+   torture_assert_int_equal(tctx, r-in.values_in[0].ve_valuename-size, 
18, name size);
+   torture_assert_int_equal(tctx, r-in.values_in[0].ve_valuelen, 0, 
length);
+   torture_assert(tctx, (r-in.values_in[0].ve_valueptr == NULL), 
ve_valueptr);
+   torture_assert_int_equal(tctx, r-in.values_in[0].ve_type, 0, type);
+   torture_assert_mem_equal(tctx, r-in.buffer, 
querymultiplevalues_in_data+0x6C, *r-in.buffer_size, buffer);
+   torture_assert_int_equal(tctx, *r-in.buffer_size, 32, buffer size);
 
return true;
 }
@@ -274,16 +276,12 @@ static const uint8_t querymultiplevalues_out_data[] = {
 static bool querymultiplevalues_out_check(struct torture_context *tctx, 
  struct winreg_QueryMultipleValues *r)
 {
-   torture_assert_str_equal(tctx, r-out.values[0].name-name, HOMEPATH, 
-name);
-
-   torture_assert_int_equal(tctx, r-out.values[0].type, 0, type);
-   torture_assert_int_equal(tctx, r-out.values[0].offset, 0, offset);
-   torture_assert_int_equal(tctx, r-out.values[0].length, 0, length);
+   torture_assert_str_equal(tctx, r-out.values_out[0].ve_valuename-name, 
HOMEPATH, name);
+   torture_assert_int_equal(tctx, r-out.values_out[0].ve_type, 0, type);
+   torture_assert_int_equal(tctx, r-out.values_out[0].ve_valuelen, 0, 
length);
/* FIXME: r-out.buffer */
torture_assert_int_equal(tctx, *r-out.buffer_size, 76, buffer size);
-   torture_assert_werr_equal(tctx, r-out.result, WERR_MORE_DATA, 
-  

[SCM] Samba Shared Repository - branch master updated

2010-06-29 Thread Günther Deschner
The branch, master has been updated
   via  1662e38... s4-smbtorture: add NDR torture test for 
winreg_QueryMultipleValues2.
   via  7ae7750... s4-smbtorture: add RPC torture test for 
winreg_QueryMultipleValues2.
   via  c02cbaa... winreg: fix winreg_QueryMultipleValues2 IDL.
  from  bf07bf2... winreg: fix winreg_QueryMultipleValues() IDL and torture 
tests.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 1662e383dd890d48e0e1207a51d4b3f9fb12ab65
Author: Günther Deschner g...@samba.org
Date:   Tue Jun 29 12:26:24 2010 +0200

s4-smbtorture: add NDR torture test for winreg_QueryMultipleValues2.

Guenther

commit 7ae7750c4085b2d95b46fa4433586e9a68d593ae
Author: Günther Deschner g...@samba.org
Date:   Tue Jun 29 12:14:02 2010 +0200

s4-smbtorture: add RPC torture test for winreg_QueryMultipleValues2.

Guenther

commit c02cbaae34bd27826ba13f98fc40a396b0e1530d
Author: Günther Deschner g...@samba.org
Date:   Tue Jun 29 12:04:56 2010 +0200

winreg: fix winreg_QueryMultipleValues2 IDL.

Guenther

---

Summary of changes:
 librpc/idl/winreg.idl|9 ---
 source4/torture/ndr/winreg.c |   47 ++
 source4/torture/rpc/winreg.c |   41 
 3 files changed, 93 insertions(+), 4 deletions(-)


Changeset truncated at 500 lines:

diff --git a/librpc/idl/winreg.idl b/librpc/idl/winreg.idl
index 19f309b..784cb33 100644
--- a/librpc/idl/winreg.idl
+++ b/librpc/idl/winreg.idl
@@ -430,12 +430,13 @@ import lsa.idl, security.idl, misc.idl;
 
/**/
/* Function: 0x22 */
-   WERROR winreg_QueryMultipleValues2(
+   [public] WERROR winreg_QueryMultipleValues2(
[in,ref] policy_handle *key_handle,
-   [in,out,ref,size_is(num_values),length_is(num_values)] 
QueryMultipleValue *values,
+   [in,ref,size_is(num_values),length_is(num_values)] 
QueryMultipleValue *values_in,
+   [out,ref,size_is(num_values),length_is(num_values)] 
QueryMultipleValue *values_out,
[in] uint32 num_values,
-   [in,out,unique,size_is(offered),length_is(offered)] uint8 
*buffer,
-   [in] uint32 offered,
+   [in,out,unique,size_is(*offered),length_is(*offered)] uint8 
*buffer,
+   [in,ref] uint32 *offered,
[out,ref] uint32 *needed
);
 
diff --git a/source4/torture/ndr/winreg.c b/source4/torture/ndr/winreg.c
index 2bd28f0..3b5766a 100644
--- a/source4/torture/ndr/winreg.c
+++ b/source4/torture/ndr/winreg.c
@@ -286,6 +286,48 @@ static bool querymultiplevalues_out_check(struct 
torture_context *tctx,
return true;
 }
 
+const uint8_t querymultiplevalues2_in_data[] = {
+   0x00, 0x00, 0x00, 0x00, 0x98, 0xe4, 0xdf, 0x3c, 0x70, 0xde, 0x69, 0x4a,
+   0x90, 0xb4, 0x85, 0x36, 0x33, 0x79, 0x89, 0x32, 0x01, 0x00, 0x00, 0x00,
+   0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x00,
+   0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+   0x0a, 0x00, 0x0a, 0x00, 0x04, 0x00, 0x02, 0x00, 0x05, 0x00, 0x00, 0x00,
+   0x00, 0x00, 0x00, 0x00, 0x05, 0x00, 0x00, 0x00, 0x54, 0x00, 0x45, 0x00,
+   0x4d, 0x00, 0x50, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00,
+   0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
+};
+
+static bool querymultiplevalues2_in_check(struct torture_context *tctx,
+ struct winreg_QueryMultipleValues2 *r)
+{
+   torture_assert_mem_equal(tctx, r-in.key_handle, 
querymultiplevalues2_in_data, sizeof(struct policy_handle), key handle);
+   torture_assert_int_equal(tctx, r-in.num_values, 1, num values);
+   torture_assert_str_equal(tctx, r-in.values_in[0].ve_valuename-name, 
TEMP, name);
+   torture_assert_int_equal(tctx, r-in.values_in[0].ve_valuename-length, 
10, name len);
+   torture_assert_int_equal(tctx, r-in.values_in[0].ve_valuename-size, 
10, name size);
+   torture_assert_int_equal(tctx, r-in.values_in[0].ve_valuelen, 0, 
length);
+   torture_assert(tctx, (r-in.values_in[0].ve_valueptr == NULL), 
ve_valueptr);
+   torture_assert_int_equal(tctx, r-in.values_in[0].ve_type, 0, type);
+   torture_assert_int_equal(tctx, *r-in.offered, 0, buffer size);
+
+   return true;
+}
+
+const uint8_t querymultiplevalues2_out_data[] = {
+   0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00,
+   0x00, 0x00, 0x02, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+   0x00, 0x00, 0x00, 0x00, 0x08, 0x00, 0x0a, 0x00, 0x04, 0x00, 0x02, 0x00,
+   0x05, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x04, 0x00, 0x00, 0x00,
+   0x54, 0x00, 0x45, 0x00, 0x4d, 0x00, 0x50, 0x00, 0x00, 0x00, 0x00, 0x00,
+   0x42, 

[SCM] Samba Shared Repository - branch master updated

2010-06-29 Thread Matthias Dieter Wallnöfer
The branch, master has been updated
   via  0e21b4f... Revert s4/dsdb: Fixed partition_search() not to pass 
special DN's to LDAP backend.
   via  2198831... Revert s4/auth: Fixed authsam_expand_nested_groups() to 
find entry SID if not available in the DN.
  from  1662e38... s4-smbtorture: add NDR torture test for 
winreg_QueryMultipleValues2.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 0e21b4ffa067237ed2c3037216c14a955f339e51
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Tue Jun 29 14:48:25 2010 +0200

Revert s4/dsdb: Fixed partition_search() not to pass special DN's to LDAP 
backend.

This reverts commit ed4c107bc1eac8531fdd8d09f7698efcbc7ecb14.

See post Endi's Bug 7530 patches (LDAP backend) on samba-technical.

commit 2198831e6b7c112b8f7551fccb25305742636df2
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Tue Jun 29 14:52:43 2010 +0200

Revert s4/auth: Fixed authsam_expand_nested_groups() to find entry SID if 
not available in the DN.

This reverts commit fa9557fee3ca546878d99b77f1ff37f724c37024.

See post Endi's Bug 7530 patches (LDAP backend) on samba-technical.

---

Summary of changes:
 source4/auth/sam.c |   25 -
 source4/dsdb/samdb/ldb_modules/partition.c |   14 ++
 2 files changed, 10 insertions(+), 29 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/auth/sam.c b/source4/auth/sam.c
index cf2e219..7a776b9 100644
--- a/source4/auth/sam.c
+++ b/source4/auth/sam.c
@@ -305,7 +305,7 @@ NTSTATUS authsam_expand_nested_groups(struct ldb_context 
*sam_ctx,
struct ldb_dn *dn;
struct dom_sid sid;
TALLOC_CTX *tmp_ctx;
-   struct ldb_result *res = NULL;
+   struct ldb_result *res;
NTSTATUS status;
const struct ldb_message_element *el;
 
@@ -321,22 +321,9 @@ NTSTATUS authsam_expand_nested_groups(struct ldb_context 
*sam_ctx,
return NT_STATUS_INTERNAL_DB_CORRUPTION;
}
 
-   /* We expect an extended DN with the SID included but we can fallback
-* to search the extended components if they weren't provided. */
status = dsdb_get_extended_dn_sid(dn, sid, SID);
if (!NT_STATUS_IS_OK(status)) {
-   ret = dsdb_search_dn(sam_ctx, tmp_ctx, res, dn, attrs,
-DSDB_SEARCH_SHOW_EXTENDED_DN);
-   if (ret != LDB_SUCCESS) {
-   talloc_free(tmp_ctx);
-   return NT_STATUS_INTERNAL_DB_CORRUPTION;
-   }
-   dn = res-msgs[0]-dn;
-   status = dsdb_get_extended_dn_sid(dn, sid, SID);
-   }
-
-   if (!NT_STATUS_IS_OK(status)) {
-   DEBUG(0, (__location__ : when parsing DN %s we failed to find 
or SID component, so we cannot calculate the group token: %s\n,
+   DEBUG(0, (__location__ : when parsing DN %s we failed to find 
our SID component, so we cannot calculate the group token: %s\n,
  ldb_dn_get_extended_linearized(tmp_ctx, dn, 1), 
  nt_errstr(status)));
talloc_free(tmp_ctx);
@@ -344,12 +331,8 @@ NTSTATUS authsam_expand_nested_groups(struct ldb_context 
*sam_ctx,
}
 
if (only_childs) {
-   /* If we didn't get the SID as extended DN then we already have
-* performed exactly this search. */
-   if (res == NULL) {
-   ret = dsdb_search_dn(sam_ctx, tmp_ctx, res, dn, attrs,
-DSDB_SEARCH_SHOW_EXTENDED_DN);
-   }
+   ret = dsdb_search_dn(sam_ctx, tmp_ctx, res, dn, attrs,
+DSDB_SEARCH_SHOW_EXTENDED_DN);
} else {
/* This is an O(n^2) linear search */
already_there = sids_contains_sid((const struct dom_sid**) 
*res_sids,
diff --git a/source4/dsdb/samdb/ldb_modules/partition.c 
b/source4/dsdb/samdb/ldb_modules/partition.c
index d022d12..ba695d2 100644
--- a/source4/dsdb/samdb/ldb_modules/partition.c
+++ b/source4/dsdb/samdb/ldb_modules/partition.c
@@ -470,14 +470,12 @@ static int partition_search(struct ldb_module *module, 
struct ldb_request *req)
return ret;
}
 
-   if (!ldb_dn_is_special(req-op.search.base)) {
-   p = find_partition(data, NULL, req);
-   if (p != NULL) {
-   /* the caller specified what partition they want the
-   * search - just pass it on
-   */
-   return ldb_next_request(p-module, req);
-   }
+   p = find_partition(data, NULL, req);
+   if (p != NULL) {
+   /* the caller specified what partition they 

[SCM] Samba Shared Repository - branch master updated

2010-06-29 Thread Günther Deschner
The branch, master has been updated
   via  62e2d4a... s3-utils: remove rpccheck.
  from  0e21b4f... Revert s4/dsdb: Fixed partition_search() not to pass 
special DN's to LDAP backend.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 62e2d4a504e69d4d1038fa158277783dafddefac
Author: Günther Deschner g...@samba.org
Date:   Tue Jun 29 14:54:43 2010 +0200

s3-utils: remove rpccheck.

Impossible to get this to compile after the conversion to pidl.

Guenther

---

Summary of changes:
 source3/utils/rpccheck.c |   62 --
 1 files changed, 0 insertions(+), 62 deletions(-)
 delete mode 100644 source3/utils/rpccheck.c


Changeset truncated at 500 lines:

diff --git a/source3/utils/rpccheck.c b/source3/utils/rpccheck.c
deleted file mode 100644
index 87632db..000
--- a/source3/utils/rpccheck.c
+++ /dev/null
@@ -1,62 +0,0 @@
-/* 
-   Unix SMB/CIFS implementation.
-   
-   Copyright (C) Jean François Micouleau 2001
-   
-   This program is free software; you can redistribute it and/or modify
-   it under the terms of the GNU General Public License as published by
-   the Free Software Foundation; either version 3 of the License, or
-   (at your option) any later version.
-   
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-   GNU General Public License for more details.
-   
-   You should have received a copy of the GNU General Public License
-   along with this program.  If not, see http://www.gnu.org/licenses/.
-*/
-
-#include includes.h
-
-main()
-{
-   char filter[]=0123456789ABCDEF;
-
-   char s[128];
-   char d=0;
-   int x=0;
-   prs_struct ps;
-   TALLOC_CTX *ctx;
-
-   /* change that struct */
-   SAMR_R_QUERY_USERINFO rpc_stub;
-   
-   ZERO_STRUCT(rpc_stub);
-
-   setup_logging(, True);
-   DEBUGLEVEL=10;
-
-   ctx=talloc_init(main);
-   if (!ctx) exit(1);
-
-   if (!prs_init(ps, 1600, 4, ctx, MARSHALL))
-   exit(1);
-
-   while (scanf(%s, s)!=-1) {
-   if (strlen(s)==2  strchr_m(filter, *s)!=NULL  
strchr_m(filter, *(s+1))!=NULL) {
-   d=strtol(s, NULL, 16);
-   if(!prs_append_data(ps, d, 1))
-   printf(error while reading data\n);
-   }
-   }
-   
-   prs_switch_type(ps, UNMARSHALL);
-   prs_set_offset(ps, 0);
-   
-   /* change that call */  
-   if(!samr_io_r_query_userinfo(, rpc_stub, ps, 0))
-   printf(error while UNMARSHALLING the data\n);
-
-   printf(\n);
-}


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-06-29 Thread Günther Deschner
The branch, master has been updated
   via  b31ff05... s4-smbtorture: add netr_GetForestTrustInformation test 
to RPC-NETLOGON.
  from  62e2d4a... s3-utils: remove rpccheck.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit b31ff0537a22ec35bc457066002709dcfc9d66ae
Author: Günther Deschner g...@samba.org
Date:   Tue Jun 29 17:13:01 2010 +0200

s4-smbtorture: add netr_GetForestTrustInformation test to RPC-NETLOGON.

Guenther

---

Summary of changes:
 source4/selftest/knownfail |1 +
 source4/torture/rpc/netlogon.c |   39 +++
 2 files changed, 40 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/selftest/knownfail b/source4/selftest/knownfail
index a1f383e..674501f 100644
--- a/source4/selftest/knownfail
+++ b/source4/selftest/knownfail
@@ -34,6 +34,7 @@ samba4.rpc.netlogon.*.GetPassword
 samba4.rpc.netlogon.*.GetTrustPasswords
 samba4.rpc.netlogon.*.DatabaseRedo
 samba4.rpc.netlogon.*.ServerGetTrustInfo
+samba4.rpc.netlogon.*.GetForestTrustInformation
 samba4.rpc.samr.passwords.badpwdcount # Not provided by Samba 4 yet
 samba4.rpc.samr.passwords.lockout
 samba4.rpc.spoolss # Not provided by Samba 4 yet
diff --git a/source4/torture/rpc/netlogon.c b/source4/torture/rpc/netlogon.c
index 09b2882..02e60a9 100644
--- a/source4/torture/rpc/netlogon.c
+++ b/source4/torture/rpc/netlogon.c
@@ -2057,6 +2057,44 @@ static bool test_LogonControl2Ex(struct torture_context 
*tctx,
return true;
 }
 
+static bool test_netr_GetForestTrustInformation(struct torture_context *tctx,
+   struct dcerpc_pipe *p,
+   struct cli_credentials 
*machine_credentials)
+{
+   struct netr_GetForestTrustInformation r;
+   struct netlogon_creds_CredentialState *creds;
+   struct netr_Authenticator a;
+   struct netr_Authenticator return_authenticator;
+   struct lsa_ForestTrustInformation *forest_trust_info;
+   struct dcerpc_binding_handle *b = p-binding_handle;
+
+   if (!test_SetupCredentials3(p, tctx, NETLOGON_NEG_AUTH2_ADS_FLAGS,
+   machine_credentials, creds)) {
+   return false;
+   }
+
+   netlogon_creds_client_authenticator(creds, a);
+
+   r.in.server_name = talloc_asprintf(tctx, %s, 
dcerpc_server_name(p));
+   r.in.computer_name = ;
+   r.in.credential = a;
+   r.in.flags = 0;
+   r.out.return_authenticator = return_authenticator;
+   r.out.forest_trust_info = forest_trust_info;
+
+   torture_assert_ntstatus_ok(tctx,
+   dcerpc_netr_GetForestTrustInformation_r(b, tctx, r),
+   netr_GetForestTrustInformation failed);
+   torture_assert_ntstatus_ok(tctx, r.out.result,
+   netr_GetForestTrustInformation failed);
+
+   torture_assert(tctx,
+   netlogon_creds_client_check(creds, return_authenticator.cred),
+   Credential chaining failed);
+
+   return true;
+}
+
 static bool test_netr_DsRGetForestTrustInformation(struct torture_context 
*tctx, 
   struct dcerpc_pipe *p, const 
char *trusted_domain_name) 
 {
@@ -3397,6 +3435,7 @@ struct torture_suite *torture_rpc_netlogon(TALLOC_CTX 
*mem_ctx)
torture_rpc_tcase_add_test(tcase, DsRAddressToSitenamesW, 
test_netr_DsRAddressToSitenamesW);
torture_rpc_tcase_add_test(tcase, DsRAddressToSitenamesExW, 
test_netr_DsRAddressToSitenamesExW);
torture_rpc_tcase_add_test_creds(tcase, ServerGetTrustInfo, 
test_netr_ServerGetTrustInfo);
+   torture_rpc_tcase_add_test_creds(tcase, GetForestTrustInformation, 
test_netr_GetForestTrustInformation);
 
return suite;
 }


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-06-29 Thread Günther Deschner
The branch, master has been updated
   via  5bc77c8... s4-smbtorture: use TEST_MACHINE_NAME in 
test_netr_GetForestTrustInformation().
  from  b31ff05... s4-smbtorture: add netr_GetForestTrustInformation test 
to RPC-NETLOGON.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 5bc77c8778dda8e688c1eff0167c67fa19b31d75
Author: Günther Deschner g...@samba.org
Date:   Tue Jun 29 17:16:25 2010 +0200

s4-smbtorture: use TEST_MACHINE_NAME in 
test_netr_GetForestTrustInformation().

Guenther

---

Summary of changes:
 source4/torture/rpc/netlogon.c |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/torture/rpc/netlogon.c b/source4/torture/rpc/netlogon.c
index 02e60a9..b3901bd 100644
--- a/source4/torture/rpc/netlogon.c
+++ b/source4/torture/rpc/netlogon.c
@@ -2076,7 +2076,7 @@ static bool test_netr_GetForestTrustInformation(struct 
torture_context *tctx,
netlogon_creds_client_authenticator(creds, a);
 
r.in.server_name = talloc_asprintf(tctx, %s, 
dcerpc_server_name(p));
-   r.in.computer_name = ;
+   r.in.computer_name = TEST_MACHINE_NAME;
r.in.credential = a;
r.in.flags = 0;
r.out.return_authenticator = return_authenticator;


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-06-29 Thread Günther Deschner
The branch, master has been updated
   via  92f3e14... s4-smbtorture: handle NT_STATUS_NOT_IMPLEMENTED in 
GetForestTrustInformation test.
  from  5bc77c8... s4-smbtorture: use TEST_MACHINE_NAME in 
test_netr_GetForestTrustInformation().

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 92f3e143b7b89ce25b996d6e68f130bbd7142af5
Author: Günther Deschner g...@samba.org
Date:   Tue Jun 29 17:19:28 2010 +0200

s4-smbtorture: handle NT_STATUS_NOT_IMPLEMENTED in 
GetForestTrustInformation test.

When skipping over it, we can at least verify the credential chain.

Guenther

---

Summary of changes:
 source4/torture/rpc/netlogon.c |8 ++--
 1 files changed, 6 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/torture/rpc/netlogon.c b/source4/torture/rpc/netlogon.c
index b3901bd..32c16f9 100644
--- a/source4/torture/rpc/netlogon.c
+++ b/source4/torture/rpc/netlogon.c
@@ -2085,8 +2085,12 @@ static bool test_netr_GetForestTrustInformation(struct 
torture_context *tctx,
torture_assert_ntstatus_ok(tctx,
dcerpc_netr_GetForestTrustInformation_r(b, tctx, r),
netr_GetForestTrustInformation failed);
-   torture_assert_ntstatus_ok(tctx, r.out.result,
-   netr_GetForestTrustInformation failed);
+   if (NT_STATUS_EQUAL(r.out.result, NT_STATUS_NOT_IMPLEMENTED)) {
+   torture_comment(tctx, not considering 
NT_STATUS_NOT_IMPLEMENTED as an error\n);
+   } else {
+   torture_assert_ntstatus_ok(tctx, r.out.result,
+   netr_GetForestTrustInformation failed);
+   }
 
torture_assert(tctx,
netlogon_creds_client_check(creds, return_authenticator.cred),


-- 
Samba Shared Repository


[SCM] Samba Website Repository - branch master updated

2010-06-29 Thread John Terpstra
The branch, master has been updated
   via  6cc1424... Fix another typo in the mailto URL.
  from  3446ca0... Announce Samba 3.5.4.

http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master


- Log -
commit 6cc14244af3b4ea10e2e9d2a4f8afa4651009796
Author: John H Terpstra j...@samba.org
Date:   Tue Jun 29 11:53:13 2010 -0500

Fix another typo in the mailto URL.

---

Summary of changes:
 support/uk.html |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/support/uk.html b/support/uk.html
index 46d7ebc..2afaa9f 100644
--- a/support/uk.html
+++ b/support/uk.html
@@ -38,7 +38,7 @@ CV21 3PY
 
 a href=www.blue-horse.co.ukwww.blue-horse.co.uk/a
 0845 658 6261
-a href=mailto:off...@blue-horse.co.uk;ff...@blue-horse.co.uk/a
+a href=mailto:off...@blue-horse.co.uk;off...@blue-horse.co.uk/a
 Barnie Giltrap
 /small/pre
 p


-- 
Samba Website Repository


[SCM] Samba Website Repository - branch master updated

2010-06-29 Thread John Terpstra
The branch, master has been updated
   via  a604d59... Another typo in a web URL for a support listing. Now 
fixed by adding the http:// part of the URL.
  from  6cc1424... Fix another typo in the mailto URL.

http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master


- Log -
commit a604d597be885b45f6c1ba6dd1bde06dbaebcdda
Author: John H Terpstra j...@samba.org
Date:   Tue Jun 29 12:00:26 2010 -0500

Another typo in a web URL for a support listing. Now fixed by adding the 
http:// part of the URL.

---

Summary of changes:
 support/uk.html |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/support/uk.html b/support/uk.html
index 2afaa9f..03f9e14 100644
--- a/support/uk.html
+++ b/support/uk.html
@@ -36,7 +36,7 @@ WARWICKSHIRE
 UNITED KINGDOM
 CV21 3PY
 
-a href=www.blue-horse.co.ukwww.blue-horse.co.uk/a
+a href=http://www.blue-horse.co.uk;www.blue-horse.co.uk/a
 0845 658 6261
 a href=mailto:off...@blue-horse.co.uk;off...@blue-horse.co.uk/a
 Barnie Giltrap


-- 
Samba Website Repository


[SCM] Samba Shared Repository - branch master updated

2010-06-29 Thread Günther Deschner
The branch, master has been updated
   via  be7bff5... s4-smbtorture: remove some pointless mem_equal tests in 
LOCAL-NDR-WINREG testsuite.
  from  92f3e14... s4-smbtorture: handle NT_STATUS_NOT_IMPLEMENTED in 
GetForestTrustInformation test.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit be7bff5eb59f903fdf8ea35f4dd330ec4313df76
Author: Günther Deschner g...@samba.org
Date:   Tue Jun 29 19:57:06 2010 +0200

s4-smbtorture: remove some pointless mem_equal tests in LOCAL-NDR-WINREG 
testsuite.

Guenther

---

Summary of changes:
 source4/torture/ndr/winreg.c |3 ---
 1 files changed, 0 insertions(+), 3 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/torture/ndr/winreg.c b/source4/torture/ndr/winreg.c
index 3b5766a..cc6321f 100644
--- a/source4/torture/ndr/winreg.c
+++ b/source4/torture/ndr/winreg.c
@@ -242,7 +242,6 @@ static const uint8_t querymultiplevalues_in_data[] = {
 static bool querymultiplevalues_in_check(struct torture_context *tctx, 
 struct winreg_QueryMultipleValues *r)
 {
-   torture_assert_mem_equal(tctx, r-in.key_handle, 
querymultiplevalues_in_data, sizeof(struct policy_handle), key handle);
torture_assert_int_equal(tctx, r-in.num_values, 1, num values);
torture_assert_str_equal(tctx, r-in.values_in[0].ve_valuename-name, 
HOMEPATH, name);
torture_assert_int_equal(tctx, r-in.values_in[0].ve_valuename-length, 
18, name len);
@@ -250,7 +249,6 @@ static bool querymultiplevalues_in_check(struct 
torture_context *tctx,
torture_assert_int_equal(tctx, r-in.values_in[0].ve_valuelen, 0, 
length);
torture_assert(tctx, (r-in.values_in[0].ve_valueptr == NULL), 
ve_valueptr);
torture_assert_int_equal(tctx, r-in.values_in[0].ve_type, 0, type);
-   torture_assert_mem_equal(tctx, r-in.buffer, 
querymultiplevalues_in_data+0x6C, *r-in.buffer_size, buffer);
torture_assert_int_equal(tctx, *r-in.buffer_size, 32, buffer size);
 
return true;
@@ -300,7 +298,6 @@ const uint8_t querymultiplevalues2_in_data[] = {
 static bool querymultiplevalues2_in_check(struct torture_context *tctx,
  struct winreg_QueryMultipleValues2 *r)
 {
-   torture_assert_mem_equal(tctx, r-in.key_handle, 
querymultiplevalues2_in_data, sizeof(struct policy_handle), key handle);
torture_assert_int_equal(tctx, r-in.num_values, 1, num values);
torture_assert_str_equal(tctx, r-in.values_in[0].ve_valuename-name, 
TEMP, name);
torture_assert_int_equal(tctx, r-in.values_in[0].ve_valuename-length, 
10, name len);


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-06-29 Thread Matthias Dieter Wallnöfer
The branch, master has been updated
   via  f6f2120... s4:ntvfs/ipc/vfs_ipc.c - remove unused code
   via  146dad1... s4:ntvfs/ipc/vfs_ipc.c - add casts to suppress warnings 
on Solaris 10
   via  645c3d2... s4:ntp_signd/ntp_signd.c - add casts to suppress 
warnings on Solaris 10
   via  95127b3... s4:rpc_server/browser.c - remove unused code
   via  06bafb7... s4:smb_server/smb2/find.c - remove unused code
   via  00f189f... s4:smb_server/blob.c - remove unused code
   via  4f029f6... s4:dsdb/new_partition.c - remove the ldb_next_request 
call which we find also below the if block
   via  17a5c87... ldb:ldb_map_outbound.c - ldb_parse_tree_collect_attrs 
- remove unneeded return value
   via  8e9d7e8... ldb:ldb_modules.c - ldb_dso_load_symbol - remove 
unneeded caste before dlsym
   via  657045c... s4:ldb - ldb_dn_update_components - fix free of 
invalid DN parts
   via  f1e92c9... ldb:ldb_dn.c - ldb_dn_set_extended_component - free 
the linearized string when the components change
   via  0f0d9aa... s4:ldb_dn.c - make the code parts which free extended 
components consistent
   via  1e04f49... ldb:ldb_dn - ldb_dn_explode - move the dn-comp_num 
initalisation upwards and use LDB_FREE for freeing dn-components
  from  be7bff5... s4-smbtorture: remove some pointless mem_equal tests in 
LOCAL-NDR-WINREG testsuite.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit f6f21202ebecc82832e10353bdf967cf7920a753
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Tue Jun 29 22:30:05 2010 +0200

s4:ntvfs/ipc/vfs_ipc.c - remove unused code

Spotted by the Solaris 10 compiler

commit 146dad103bac0488f8bacc45dfbb2ea099e852ee
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Tue Jun 29 22:33:32 2010 +0200

s4:ntvfs/ipc/vfs_ipc.c - add casts to suppress warnings on Solaris 10

commit 645c3d200cd015597896d77fd4c22bc01a8b7da3
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Tue Jun 29 22:33:32 2010 +0200

s4:ntp_signd/ntp_signd.c - add casts to suppress warnings on Solaris 10

commit 95127b3f5f253ce5df6ec27972c456d0859d23c4
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Tue Jun 29 22:30:05 2010 +0200

s4:rpc_server/browser.c - remove unused code

Spotted by the Solaris 10 compiler

commit 06bafb75965983601f9afd08b70c9f7463d4c5f3
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Tue Jun 29 22:30:05 2010 +0200

s4:smb_server/smb2/find.c - remove unused code

Spotted by the Solaris 10 compiler

commit 00f189f78ca5dcaf9917e231ddaef2b4398db0b5
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Tue Jun 29 22:30:05 2010 +0200

s4:smb_server/blob.c - remove unused code

Spotted by the Solaris 10 compiler

commit 4f029f6f1b443db0762c3bac275415b385c26435
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Tue Jun 29 22:23:15 2010 +0200

s4:dsdb/new_partition.c - remove the ldb_next_request call which we find 
also below the if block

commit 17a5c876a69156843a8f4acca0e52e08845511fd
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Tue Jun 29 22:21:22 2010 +0200

ldb:ldb_map_outbound.c - ldb_parse_tree_collect_attrs - remove unneeded 
return value

commit 8e9d7e84f6d4a0cdc4ed6d1a8a20c1fc88cefb76
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Tue Jun 29 22:16:15 2010 +0200

ldb:ldb_modules.c - ldb_dso_load_symbol - remove unneeded caste before 
dlsym

commit 657045ca9aa4abe11088127a05d697e5ae99a5c9
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Tue Jun 29 22:10:14 2010 +0200

s4:ldb - ldb_dn_update_components - fix free of invalid DN parts

Use LDB_FREE for such free operations and in addition wipe also the 
casefolded
DN out.

commit f1e92c91b21b354802b8e342e414d62368820b43
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Tue Jun 29 22:07:51 2010 +0200

ldb:ldb_dn.c - ldb_dn_set_extended_component - free the linearized string 
when the components change

commit 0f0d9aa9b5959a12385c2b79d7dd35e9d081033c
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Tue Jun 29 22:04:24 2010 +0200

s4:ldb_dn.c - make the code parts which free extended components consistent

Cosmetic

commit 1e04f49ddbfaa002ba930f2b79883ed3688e1ea8
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Tue Jun 29 21:59:37 2010 +0200

ldb:ldb_dn - ldb_dn_explode - move the dn-comp_num initalisation 
upwards and use LDB_FREE for freeing dn-components

Mostly cosmetic - no behaviour change

---

Summary of changes:
 source4/dsdb/samdb/ldb_modules/new_partition.c |4 +--
 source4/lib/ldb/common/ldb_dn.c|   35 +++
 source4/lib/ldb/common/ldb_modules.c   |3 +-
 source4/lib/ldb/ldb_map/ldb_map_outbound.c   

[SCM] Samba Shared Repository - branch master updated

2010-06-29 Thread Günther Deschner
The branch, master has been updated
   via  1fb8e19... s4-smbtorture: add more sophisticated tests for 
winreg_QueryMultipleValues{2}.
  from  f6f2120... s4:ntvfs/ipc/vfs_ipc.c - remove unused code

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 1fb8e192cad7de58586645ca915a8934320bac70
Author: Günther Deschner g...@samba.org
Date:   Tue Jun 29 21:53:00 2010 +0200

s4-smbtorture: add more sophisticated tests for 
winreg_QueryMultipleValues{2}.

Guenther

---

Summary of changes:
 source4/torture/rpc/winreg.c |  221 ++
 1 files changed, 221 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/torture/rpc/winreg.c b/source4/torture/rpc/winreg.c
index c039143..0960440 100644
--- a/source4/torture/rpc/winreg.c
+++ b/source4/torture/rpc/winreg.c
@@ -1645,6 +1645,146 @@ static bool test_QueryMultipleValues(struct 
dcerpc_binding_handle *b,
return true;
 }
 
+static bool test_QueryMultipleValues_full(struct dcerpc_binding_handle *b,
+ struct torture_context *tctx,
+ struct policy_handle *handle,
+ uint32_t num_values,
+ const char **valuenames,
+ bool existing_value)
+{
+   struct winreg_QueryMultipleValues r;
+   uint32_t bufsize = 0;
+   int i;
+
+   torture_comment(tctx, Testing QueryMultipleValues\n);
+
+   ZERO_STRUCT(r);
+
+   r.in.key_handle = handle;
+   r.in.values_in = r.out.values_out = talloc_zero_array(tctx, struct 
QueryMultipleValue, 0);
+   r.in.buffer_size = r.out.buffer_size = bufsize;
+
+   torture_assert_ntstatus_ok(tctx,
+   dcerpc_winreg_QueryMultipleValues_r(b, tctx, r),
+   QueryMultipleValues failed);
+   torture_assert_werr_ok(tctx, r.out.result,
+   QueryMultipleValues failed);
+
+   /* this test crashes w2k8 remote registry */
+#if 0
+   r.in.num_values = num_values;
+   r.in.values_in = r.out.values_out = talloc_zero_array(tctx, struct 
QueryMultipleValue, num_values);
+
+   torture_assert_ntstatus_ok(tctx,
+   dcerpc_winreg_QueryMultipleValues_r(b, tctx, r),
+   QueryMultipleValues failed);
+   torture_assert_werr_ok(tctx, r.out.result,
+   QueryMultipleValues failed);
+#endif
+   r.in.num_values = num_values;
+   r.in.values_in = r.out.values_out = talloc_zero_array(tctx, struct 
QueryMultipleValue, num_values);
+   for (i=0; i  r.in.num_values; i++) {
+   r.in.values_in[i].ve_valuename = talloc_zero(tctx, struct 
winreg_ValNameBuf);
+   r.in.values_in[i].ve_valuename-name = talloc_strdup(tctx, 
valuenames[i]);
+   r.in.values_in[i].ve_valuename-size = 
strlen_m_term(r.in.values_in[i].ve_valuename-name)*2;
+   }
+
+   torture_assert_ntstatus_ok(tctx,
+   dcerpc_winreg_QueryMultipleValues_r(b, tctx, r),
+   QueryMultipleValues failed);
+   torture_assert_werr_equal(tctx, r.out.result, existing_value ? 
WERR_MORE_DATA : WERR_BADFILE,
+   QueryMultipleValues failed);
+
+   if (W_ERROR_EQUAL(r.out.result, WERR_BADFILE)) {
+   return true;
+   }
+
+   if (W_ERROR_EQUAL(r.out.result, WERR_MORE_DATA)) {
+   *r.in.buffer_size = 0xff;
+   r.in.buffer = r.out.buffer = talloc_zero_array(tctx, uint8_t, 
*r.in.buffer_size);
+
+   torture_assert_ntstatus_ok(tctx,
+   dcerpc_winreg_QueryMultipleValues_r(b, tctx, r),
+   QueryMultipleValues failed);
+   }
+
+   torture_assert_werr_ok(tctx, r.out.result,
+   QueryMultipleValues failed);
+
+   return true;
+}
+
+
+static bool test_QueryMultipleValues2_full(struct dcerpc_binding_handle *b,
+  struct torture_context *tctx,
+  struct policy_handle *handle,
+  uint32_t num_values,
+  const char **valuenames,
+  bool existing_value)
+{
+   struct winreg_QueryMultipleValues2 r;
+   uint32_t offered = 0, needed;
+   int i;
+
+   torture_comment(tctx, Testing QueryMultipleValues2\n);
+
+   ZERO_STRUCT(r);
+
+   r.in.key_handle = handle;
+   r.in.offered = offered;
+   r.in.values_in = r.out.values_out = talloc_zero_array(tctx, struct 
QueryMultipleValue, 0);
+   r.out.needed = needed;
+
+   torture_assert_ntstatus_ok(tctx,
+   dcerpc_winreg_QueryMultipleValues2_r(b, tctx, r),
+   QueryMultipleValues2 

[SCM] Samba Shared Repository - branch master updated

2010-06-29 Thread Günther Deschner
The branch, master has been updated
   via  cc8d6d9... s4-smbtorture: fix incorrect IDL for QueryMultipleValue 
(aka RVALENT).
  from  1fb8e19... s4-smbtorture: add more sophisticated tests for 
winreg_QueryMultipleValues{2}.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit cc8d6d99df7f13e5396ec3d8e4943511cbe20cc3
Author: Günther Deschner g...@samba.org
Date:   Tue Jun 29 23:10:47 2010 +0200

s4-smbtorture: fix incorrect IDL for QueryMultipleValue (aka RVALENT).

Found by torture test.

Guenther

---

Summary of changes:
 librpc/idl/winreg.idl |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/librpc/idl/winreg.idl b/librpc/idl/winreg.idl
index 784cb33..c3e5279 100644
--- a/librpc/idl/winreg.idl
+++ b/librpc/idl/winreg.idl
@@ -373,7 +373,7 @@ import lsa.idl, security.idl, misc.idl;
typedef struct {
winreg_ValNameBuf *ve_valuename;
uint32 ve_valuelen;
-   uint32 *ve_valueptr;
+   uint32 ve_valueptr;
winreg_Type ve_type;
} QueryMultipleValue;
 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-06-29 Thread Günther Deschner
The branch, master has been updated
   via  73fbc9c... s4-smbtorture: remove duplicate torture_assert_sid_equal 
macro.
  from  cc8d6d9... s4-smbtorture: fix incorrect IDL for QueryMultipleValue 
(aka RVALENT).

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 73fbc9c1791c2391ccb59a2a02df009cbd2fdc7e
Author: Günther Deschner g...@samba.org
Date:   Tue Jun 29 23:35:45 2010 +0200

s4-smbtorture: remove duplicate torture_assert_sid_equal macro.

Guenther

---

Summary of changes:
 source4/torture/rpc/spoolss.c |   11 +--
 1 files changed, 1 insertions(+), 10 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/torture/rpc/spoolss.c b/source4/torture/rpc/spoolss.c
index 930556e..7e15728 100644
--- a/source4/torture/rpc/spoolss.c
+++ b/source4/torture/rpc/spoolss.c
@@ -37,6 +37,7 @@
 #include libcli/resolve/resolve.h
 #include lib/cmdline/popt_common.h
 #include system/filesys.h
+#include torture/ndr/ndr.h
 
 #define TORTURE_WELLKNOWN_PRINTER  torture_wkn_printer
 #define TORTURE_PRINTERtorture_printer
@@ -1767,16 +1768,6 @@ static bool test_PrinterInfo(struct torture_context 
*tctx,
return ret;
 }
 
-#define torture_assert_sid_equal(torture_ctx,got,expected,cmt)\
-   do { struct dom_sid *__got = (got), *__expected = (expected); \
-   if (!dom_sid_equal(__got, __expected)) { \
-   torture_result(torture_ctx, TORTURE_FAIL, \
-  __location__: #got was %s, 
expected %s: %s, \
-  dom_sid_string(torture_ctx, __got), 
dom_sid_string(torture_ctx, __expected), cmt); \
-   return false; \
-   } \
-   } while(0)
-
 static bool test_security_descriptor_equal(struct torture_context *tctx,
   const struct security_descriptor 
*sd1,
   const struct security_descriptor 
*sd2)


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2010-06-29 Thread Andrew Bartlett
The branch, master has been updated
   via  32b8b40... s4:dsdb Fix possible schema segfaults for 
DRS-replication based schema
  from  73fbc9c... s4-smbtorture: remove duplicate torture_assert_sid_equal 
macro.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 32b8b401d6de27caa02a258fd540a208c486d1d6
Author: Andrew Bartlett abart...@samba.org
Date:   Wed Jun 30 10:20:11 2010 +1000

s4:dsdb Fix possible schema segfaults for DRS-replication based schema

The problem here is that if the schema has been modified on the source
domain, there may be attributes that appear over DRS with 0 values (to
indicate that any existing values on the target should be deleted).
This would confuse the previous version of this macro.

Andrew Bartlett

---

Summary of changes:
 source4/dsdb/schema/schema_init.c |   30 +-
 1 files changed, 13 insertions(+), 17 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/dsdb/schema/schema_init.c 
b/source4/dsdb/schema/schema_init.c
index 2cf5af6..bb22df1 100644
--- a/source4/dsdb/schema/schema_init.c
+++ b/source4/dsdb/schema/schema_init.c
@@ -471,17 +471,13 @@ static int dsdb_schema_setup_ldb_schema_attribute(struct 
ldb_context *ldb,
}   \
 } while (0)
 
-#define GET_STRING_LIST_LDB(msg, attr, mem_ctx, p, elem, strict) do {  \
+#define GET_STRING_LIST_LDB(msg, attr, mem_ctx, p, elem) do {  \
int get_string_list_counter;\
struct ldb_message_element *get_string_list_el = 
ldb_msg_find_element(msg, attr); \
-   if (get_string_list_el == NULL) {   \
-   if (strict) {   \
-   d_printf(%s: %s == NULL\n, __location__, attr); \
-   return WERR_INVALID_PARAM;  \
-   } else {\
-   (p)-elem = NULL;   \
-   break;  \
-   }   \
+   /* We may get empty attributes over the replication channel */  \
+   if (get_string_list_el == NULL || get_string_list_el-num_values == 0) 
{\
+   (p)-elem = NULL;   \
+   break;  \
}   \
(p)-elem = talloc_array(mem_ctx, const char *, 
get_string_list_el-num_values + 1); \
 for (get_string_list_counter=0;
\
@@ -683,16 +679,16 @@ WERROR dsdb_class_from_ldb(struct dsdb_schema *schema,
  
GET_STRING_LDB(msg, subClassOf, obj, obj, subClassOf, true);
 
-   GET_STRING_LIST_LDB(msg, systemAuxiliaryClass, obj, obj, 
systemAuxiliaryClass, false);
-   GET_STRING_LIST_LDB(msg, auxiliaryClass, obj, obj, auxiliaryClass, 
false);
+   GET_STRING_LIST_LDB(msg, systemAuxiliaryClass, obj, obj, 
systemAuxiliaryClass);
+   GET_STRING_LIST_LDB(msg, auxiliaryClass, obj, obj, auxiliaryClass);
 
-   GET_STRING_LIST_LDB(msg, systemMustContain, obj, obj, 
systemMustContain, false);
-   GET_STRING_LIST_LDB(msg, systemMayContain, obj, obj, 
systemMayContain, false);
-   GET_STRING_LIST_LDB(msg, mustContain, obj, obj, mustContain, false);
-   GET_STRING_LIST_LDB(msg, mayContain, obj, obj, mayContain, false);
+   GET_STRING_LIST_LDB(msg, systemMustContain, obj, obj, 
systemMustContain);
+   GET_STRING_LIST_LDB(msg, systemMayContain, obj, obj, 
systemMayContain);
+   GET_STRING_LIST_LDB(msg, mustContain, obj, obj, mustContain);
+   GET_STRING_LIST_LDB(msg, mayContain, obj, obj, mayContain);
 
-   GET_STRING_LIST_LDB(msg, systemPossSuperiors, obj, obj, 
systemPossSuperiors, false);
-   GET_STRING_LIST_LDB(msg, possSuperiors, obj, obj, possSuperiors, 
false);
+   GET_STRING_LIST_LDB(msg, systemPossSuperiors, obj, obj, 
systemPossSuperiors);
+   GET_STRING_LIST_LDB(msg, possSuperiors, obj, obj, possSuperiors);
 
GET_STRING_LDB(msg, defaultSecurityDescriptor, obj, obj, 
defaultSecurityDescriptor, false);
 


-- 
Samba Shared Repository


[SCM] Samba Website Repository - branch master updated

2010-06-29 Thread John Terpstra
The branch, master has been updated
   via  d6710ff... Added ICE Systems at request of Neil Smith 
neil.sm...@icesystems.com.au..
  from  a604d59... Another typo in a web URL for a support listing. Now 
fixed by adding the http:// part of the URL.

http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master


- Log -
commit d6710ff851ac69823e27c48a89269a9967e80889
Author: John H Terpstra j...@samba.org
Date:   Tue Jun 29 22:12:55 2010 -0500

Added ICE Systems at request of Neil Smith neil.sm...@icesystems.com.au..

---

Summary of changes:
 support/australia.html |   22 +-
 1 files changed, 21 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/support/australia.html b/support/australia.html
index 5289346..88daf93 100644
--- a/support/australia.html
+++ b/support/australia.html
@@ -16,12 +16,32 @@ Richmond, Victoria
 +61 3 9428 6922
 a href=mailto:i...@cybersource.com.au;i...@cybersource.com.au/a
 Con Zymaris
-/pre/small
+/small/pre
 p
 Cybersource has 15+ years of experience of deploying and supporting Samba in 
heteregenous networked environments, in corporate, governement and commercial 
sectors.
 /p
 
 
+!-- Added JHT 20100629 at request of icesytems --
+hr /
+h3ICE Systems Pty Ltd/h3
+presmall
+ICE Systems Pty Ltd
+2-12 Foveaux Street
+Surry Hills, NSW, 2010
+Australia
+
+a href=http://www.icesystems.com.au;http://www.icesystems.com.au/a
+Tel: +61 2 9906 1592
+Fax: +61 2 9906 1596
+a href=mailto:sa...@icesystems.com.au;sa...@icesystems.com.au/a
+Neil Smith
+/small/pre
+p
+ICE Systems is an Australian systems integrator specialising in the design, 
procurement and deployment of systems and solutions for corporate Australia. 
ICE Systems provides commercial Linux support and is a Red Hat Advanced Partner 
and Red Hat Advanced Training Reseller.
+/p
+
+
 !-- Added JHT 20100222 --
 hr /
 h3Loftus IT/h3


-- 
Samba Website Repository