Re: [Samba] wbinfo -g gives no output , ndr_pull_error

2010-10-29 Thread Dietrich Streifert

Hello,

sorry for the noise, I accidently hit the send button.

Here is what I wanted to ask:

I'm hitting the same problem on solaris 9 x86 and sparc with samba 3.5.6 
(active directory on windows 2003 R2 SP2 with rfc2307 schema extension, 
openssl 0.9.8o, libiconv 1.13.1, heimdal 1.4, openldap 2.4.23) for both 
wbinfo -g and wbinfo -u.


wbinfo -t and net ads testjoin give positive results.

The same testbed except of using samba 3.4.9 does not show the problem. 
wbinfo -g and wbinfo -u work as expected. Names services using 
nss_winbind.so are working.


The ndr_pull_error line seems to be a subsequent unable to display the 
error message error.


The relevant lines in log.winbindd are

[2010/10/28 17:51:31.512980,  6] winbindd/winbindd.c:768(new_connection)
  accepted socket 23
[2010/10/28 17:51:31.513254,  3] 
winbindd/winbindd_lookupsid.c:51(winbindd_lookupsid_send)

  lookupsid S-1-5-21-XX-YY-ZZ-513
[2010/10/28 17:51:31.513468,  1] ../librpc/ndr/ndr.c:395(ndr_pull_error)
  ndr_pull_error(1): String terminator not present or outside string 
boundaries
[2010/10/28 17:51:31.513536,  5] 
winbindd/winbindd_lookupsid.c:94(winbindd_lookupsid_recv)
  Could not lookup sid S-1-5-21-XX-YY-ZZ-513: 
NT_STATUS_ARRAY_BOUNDS_EXCEEDED
[2010/10/28 17:51:31.513729,  6] 
winbindd/winbindd.c:816(winbind_client_request_read)

  closing socket 22, client exited


Did you get any feedback or further understandment on this issue?

Regards...

Am 26.10.2010 13:26, schrieb Dietrich Streifert:

Hello,

Am 06.07.2010 14:54, schrieb Alexander Muth:

Hello,

after upgrade Samba from 3.4.3 to 3.5.4 wbinfo -g gives no output.

Log Entry:

[2010/07/06 14:48:49.086377,  3] 
winbindd/winbindd_list_groups.c:58(winbindd_list_groups_send)

  list_groups
[2010/07/06 14:48:49.086504,  1] ../librpc/ndr/ndr.c:395(ndr_pull_error)
  ndr_pull_error(1): String terminator not present or outside string 
boundaries


wbinfo -u is working as expected.

 # net ads testjoin
Join is OK

# wbinfo -t
checking the trust secret for domain GLA-RLP via RPC calls succeeded


any Ideas how to get wbinfo -g working again?

thanks

Alexander



--
Mit freundlichen Grüßen
Dietrich Streifert
--
Visionet GmbH
Firmensitz: Am Weichselgarten 7, 91058 Erlangen
Registergericht: Handelsregister Fürth, HRB 6573
Geschäftsführer: Stefan Lindner




--
Mit freundlichen Grüßen
Dietrich Streifert
--
Visionet GmbH
Firmensitz: Am Weichselgarten 7, 91058 Erlangen
Registergericht: Handelsregister Fürth, HRB 6573
Geschäftsführer: Stefan Lindner



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Windows XP and SAMBA: file changed popup

2010-10-29 Thread Jochen Hebbrecht
Following issue only occurs on a Windows XP system (it doesn't happen on
Windows 7)

I have Ubuntu 10.10 (Maverick) server with samba 3.5.4. The server has a
samba share and another PC (which has Windows XP as operating system) is
connected to that share through a network drive. On the share, there are PHP
files which can be changed by a developer. The files are also available by
HTTP using an Apache HTTPD VirtualHost.

So, the developer has some PHP files open in PHPDesigner 7. He makes a
change and he wants to see his change in the browser (e.g.: Firefox). He
refreshes the page and he sees the result. Now, he returns to PHPDesigner
... but ... PHPDesigner is telling him: This file has changed, do you want
to reload it?.

The problem is: the file hasn't been changed, but the access time of the
file has. I had a look at this issue and I noticed there's no creation date
on Unix level. So in Windows, creation date is access time ... which makes
Windows XP thinks the file has been changed as it was accessed ...

Any idea's how we can solve this?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.5.6 jumbo patch

2010-10-29 Thread Derek Lewis
Okay,

I selected the origin/v3-5-test and tested the patch with git apply --check.
I see the same error message as before.  I also confirmed that the new
branch I created for the build is the current branch via git branch.

Derek

-Original Message-
From: Jeremy Allison [mailto:j...@samba.org] 
Sent: Thursday, October 28, 2010 10:26 AM
To: Derek Lewis
Cc: samba@lists.samba.org
Subject: Re: [Samba] Samba 3.5.6 jumbo patch

On Wed, Oct 27, 2010 at 10:14:48PM -0700, Derek Lewis wrote:
 I have cloned the samba git file and selected the version with the tag:
 release-3-5-6.  I tested the patch with git apply -check, and I get the
 following error:
 
 Error: patch failed: source3/smbd/posix_acls.c:3856
 
 Error: source3/smbd/posix_acls.c: patch does not apply.

Hmmm. Try v3-5-test, not the release branch. The v3-5-test
branch is what becomes the next release.

Jeremy.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Windows XP and SAMBA: file changed popup

2010-10-29 Thread Marcello Romani

Il 29/10/2010 09:37, Jochen Hebbrecht ha scritto:

Following issue only occurs on a Windows XP system (it doesn't happen on
Windows 7)

I have Ubuntu 10.10 (Maverick) server with samba 3.5.4. The server has a
samba share and another PC (which has Windows XP as operating system) is
connected to that share through a network drive. On the share, there are PHP
files which can be changed by a developer. The files are also available by
HTTP using an Apache HTTPD VirtualHost.

So, the developer has some PHP files open in PHPDesigner 7. He makes a
change and he wants to see his change in the browser (e.g.: Firefox). He
refreshes the page and he sees the result. Now, he returns to PHPDesigner
... but ... PHPDesigner is telling him: This file has changed, do you want
to reload it?.

The problem is: the file hasn't been changed, but the access time of the
file has. I had a look at this issue and I noticed there's no creation date
on Unix level. So in Windows, creation date is access time ... which makes
Windows XP thinks the file has been changed as it was accessed ...

Any idea's how we can solve this?


I have a very similar issue: MPLAB IDE code editor says source file xxx 
has changed, do you want to reload it ? every time I build a project, 
even though no modification has been made to the source file. The entire 
project is hosted on a mapped drive on a debian system. The MPLAB IDE is 
installed on Windows XP SP3.


There are no other problems a part from this annoying popup alert.

fileserver:~# cat /etc/debian_version
5.0.6

fileserver:~# smbd --version
Version 3.2.5

I belive windows is reading file atime as if it was mtime, thus thinking 
file has changed.


Thanks for any hints.

--
Marcello Romani
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.5.6 jumbo patch

2010-10-29 Thread Volker Lendecke
On Fri, Oct 29, 2010 at 01:17:30AM -0700, Derek Lewis wrote:
 I selected the origin/v3-5-test and tested the patch with git apply --check.
 I see the same error message as before.  I also confirmed that the new
 branch I created for the build is the current branch via git branch.

Just tried the following

git am -3 /tmp/samba-3-5-x-acl-jumbo-patch/*

in a git checkout of v3-5-test. Works fine. I've also
uploaded a summary patch against 3.5.6 at

http://www.samba.org/~vlendec/jumbo-patch-3-5-6.diff

that you should be able to apply with 

patch -p1  jumbo-patch-3-5-6.diff

Hope that helps.

Volker
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Cannot save profile of a windows 7 user.

2010-10-29 Thread d_lemaitre
Hi,

I have a strange problem.
When I log on with USERNAME1 on Windows7 part of a domain, a Windows 
profile is created.
When I do the same with USERNAME2, the profile is not saved on the PC... 
The default profile is always used when USERNAME2 connects.
The same problem occurs on other PC with USERNAME2.
How to solve that?

Regards
 
Daniel


*** See our disclaimer at 
http://www.cpbourg.com/documents/legal/disclaimer.pdf ***


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] samba 3.4 and 3.5 bug or misconfig: why is idmap uid and idmap gid needed for an AD only idmap config?

2010-10-29 Thread Dietrich Streifert

Hello list,

I'm currently struggling in creating a running config for  samba 3.4.9 
and 3.5.6 on solaris 9


(active directory on windows 2003 R2 SP2 with rfc2307 schema extension, 
openssl

0.9.8o, libiconv 1.13.1, heimdal 1.4, cyrus-sasl 2.1.23, openldap 2.4.23)

The relevant part in smb.conf is in

[global]
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
winbind expand groups = 3
winbind nss info = rfc2307

idmap backend = tdb

idmap config DOMAIN:readonly = yes
idmap config DOMAIN:backend = ad
idmap config DOMAIN:default = yes
idmap config DOMAIN:schema_mode = rfc2307
idmap config DOMAIN:range = 1-65535

idmap uid = 65536 - 65537
idmap gid = 65536 - 65537

The setup basicly works, but some group ids are spotted into the group 
list which do not belong to gid numbers in AD. This seems to happen for 
users being members in nested groups while some of the groups have gid 
numbers assigned in AD and some group don't.


A given user (testuser) is in 3 groups and additionally in the group 
domain-users. domain-users is member of four other groups without a gid 
number assigned.


After su to testuser it depends on how id is called:

srv{testuser}[/home/testuser]: id -a
uid=10309(testuser) gid=11007(testgroup) 
groups=11007(testgroup),65536,65537,10010(domain-users),11009(testgroup3),11008(testgroup2)

srv{testuser}[/home/testuser]: id -a testuser
uid=10309(testuser) gid=11007(testgroup) 
groups=10010(domain-users),11008(testgroup2),11008(testgroup2),11009(testgroup3),11009(testgroup3)


The additional ids show up as group id 65536 and 65537 in id -a but 
not in id -a testuser.


Retreiving the groups of the user testuser via wbinfo -r gives:

./wbinfo -r testuser
11007
65536
65537
10010
11009
11008

also showing the non existing ad group ids (65536,65537) which 
correspond to the settings in idmap uid and idmap gid.


I think the idmap default tdb backend is trying to map somehow ids to 
the groups which do not have gid numbers assigned in AD.


So how can I get rid of this unwanted mappings? Why do they occus

Any help would be great!.

Regards...

--
Mit freundlichen Grüßen
Dietrich Streifert
--
Visionet GmbH
Firmensitz: Am Weichselgarten 7, 91058 Erlangen
Registergericht: Handelsregister Fürth, HRB 6573
Geschäftsführer: Stefan Lindner



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.5.6, Solaris 10, pam_winbind.so will not link

2010-10-29 Thread Robert M. Martel - CSU



On 10/27/2010 06:04 PM, Christopher Chan wrote:

On Wednesday, October 27, 2010 09:50 PM, Robert M. Martel - CSU wrote:

Still no progress trying to get Samba 3.5.6 built on Solaris 10, using
gcc 3.4.6.



Isn't it bad to use gcc for this? pam_winbind and nss_winbind would be
using gcc ABI while the rest of the system using Sun Studio ABI...


I have not had an issue before in years of Solaris 8, 9, and 10 using 
gcc to build samba, and everything else.



Linking shared library bin/pam_winbind.so
Undefined first referenced
symbol in file
libintl_bindtextdomain ../nsswitch/pam_winbind.o
libintl_dgettext ../nsswitch/pam_winbind.o
ld: fatal: Symbol referencing errors. No output written to
bin/pam_winbind.so
collect2: ld returned 1 exit status
make: *** [bin/pam_winbind.so] Error 1



DO you have libintl somewhere?



Yes, in /usr/local/lib.  The prior parts of the samba build process can 
find it once I add -lintl to the LIBS line 25 of the Makefile. 
Running the make without that modification yields problems earlier in 
the build process. I found I was not the only one with that issue:

http://forums.sun.com/thread.jspa?threadID=5445706

-Bob

--
***
Robert M. Martel I met someone who looks a lot like you
System Administrator She does the things you do
Levin College of Urban Affairs   But she is an IBM
Cleveland State University   -Jeff Lynne
(216) 687-2214
r.mar...@csuohio.edu
***
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Modify permission not available unless group permissions are set to write.

2010-10-29 Thread Andrew Masterton
I've been wrestling with a problem on newer versions of samba with a
configuration that used to work in samba 3.0.33 (RedHat Enterpise 5
packages) This maybe due to changes in the may samba maps NT permissions,
but i'm not sure so I thought I would ask.

I have a samba 3.3.8 (RedHat Enterprise 5.5 Samba3x packages) and samba
3.4.4 (Redhat Enterprise 6 beta packages) installation both connected to
active directory with samba/windbind set-up as below (slightly adjusted from
the true workgroup/server names):

workgroup = WORK-GROUP
password server = server.ac.uk
realm = TEST.AC.UK
security = ads
idmap backend = tdb
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431

template shell = /bin/bash
template homedir = /home/%U
winbind use default domain = true
winbind offline logon = false
winbind separator = +

And a share set-up as below:

[blah]
path = /home/blah
writeable = yes
force user = %D+andy
force group = apache
valid users = %D+andy

I have the folder blah set with the following permissions:

drwxrwxr-x. 4 andy apache 4096 Oct 29 11:56 /home/blah

Inside the folder I have 2 additional folders one with group write bit set
and one without

drwxrwxr-x. 3 andy apache   4096 Oct 29 15:44 withgroupperm
drwxr-xr-x. 3 andy apache 4096 Oct 29 15:50 withoutgroupperm

With this configuration I can create files and folders no problem in either
of the subfolders by connecting as myself (andy), I can also modifiy the
contents of files, but I cannot change the name of files/folders in the
subdirectory that doesn't have the group write permission set. According to
Windows I don't have the modify permission.

In Samba 3.0.33 on RedHat Enterprise 5 this worked although it would appear
that even under 3.0.33 you do not have the modify permission set. I don't
know if this was a bug that was fixed, but I would've thought as the owner
of the folder and the rwx permission bits set for myself and the files
also having rwx permissions for myself I should be able to change the
names of files/folders that I have created within that folder via samba?

Am I going mad?

Here is a samba log extract at loglevel 10 that shows the ACL check and the
eventual access denied (on 3.4.4)

[2010/10/29 16:51:22, 10] smbd/open.c:2896(create_file_unixpath)
  create_file_unixpath: access_mask = 0x110080 file_attributes = 0x0,
share_access = 0x7, create_disposition = 0x1 create_options = 0x20
oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname =
withoutgroupperm/New Text Document.txt
[2010/10/29 16:51:22, 10] smbd/posix_acls.c:3369(posix_get_nt_acl)
  posix_get_nt_acl: called for file withoutgroupperm
[2010/10/29 16:51:22, 10] smbd/posix_acls.c:2519(canonicalise_acl)
  canonicalise_acl: Access ace entries before arrange :
[2010/10/29 16:51:22, 10] smbd/posix_acls.c:2532(canonicalise_acl)
  canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER
ace_flags = 0x0 perms r-x
[2010/10/29 16:51:22, 10] smbd/posix_acls.c:2532(canonicalise_acl)
  canon_ace index 1. Type = allow SID = S-1-22-2-495 gid 495 (apache)
SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x
[2010/10/29 16:51:22, 10] smbd/posix_acls.c:2532(canonicalise_acl)
  canon_ace index 2. Type = allow SID =
S-1-5-21-2118997552-836320393-1615622311-6605 uid 16777216 (andy)
SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx
[2010/10/29 16:51:22, 10] smbd/posix_acls.c:838(print_canon_ace_list)
  print_canon_ace_list: canonicalise_acl: ace entries after arrange
  canon_ace index 0. Type = allow SID =
S-1-5-21-2118997552-836320393-1615622311-6605 uid 16777216 (andy)
SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx
  canon_ace index 1. Type = allow SID = S-1-22-2-495 gid 495 (apache)
SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x
  canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER
ace_flags = 0x0 perms r-x
[2010/10/29 16:51:22, 10] smbd/posix_acls.c:1113(map_canon_ace_perms)
  map_canon_ace_perms: Mapped (UNIX) 1c0 to (NT) 1f01ff
[2010/10/29 16:51:22, 10] smbd/posix_acls.c:1113(map_canon_ace_perms)
  map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9
[2010/10/29 16:51:22, 10] smbd/posix_acls.c:1113(map_canon_ace_perms)
  map_canon_ace_perms: Mapped (UNIX) 140 to (NT) 1200a9
[2010/10/29 16:51:22, 10] smbd/posix_acls.c:3369(posix_get_nt_acl)
  posix_get_nt_acl: called for file withoutgroupperm/New Text Document.txt
[2010/10/29 16:51:22, 10] smbd/posix_acls.c:2519(canonicalise_acl)
  canonicalise_acl: Access ace entries before arrange :
[2010/10/29 16:51:22, 10] smbd/posix_acls.c:2532(canonicalise_acl)
  canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER
ace_flags = 0x0 perms r--
[2010/10/29 16:51:22, 10] smbd/posix_acls.c:2532(canonicalise_acl)
  canon_ace index 1. Type = allow SID = S-1-22-2-495 gid 495 (apache)
SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r--
[2010/10/29 16:51:22, 10] smbd/posix_acls.c:2532(canonicalise_acl)
  canon_ace index 2. Type = allow SID =
S-1-5-21-2118997552-836320393-1615622311-6605 uid 16777216 

Re: [Samba] Workgroup compared to Domain

2010-10-29 Thread Gaiseric Vandal
You may want to read up on some of the Microsoft documentation.  The
fundamental difference is that with a domain, the user and computer accounts
are centralized, not maintained separately on each computer.  

My experience is that once you get before 5 machines managing a workgroup
gets impractical.

-Original Message-
From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
On Behalf Of Robert Moskowitz
Sent: Thursday, October 28, 2010 9:17 PM
To: samba@lists.samba.org
Subject: [Samba] Workgroup compared to Domain

Are there any good articles comparing features/functions of a Workgroup 
compared to a Domain?

I am trying to put something together for the Amahi project and so far 
my searches have been rather slim pickins.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Winbind behaviour odd in 3.4.9 and 3.5.6 vs 3.2.14 (Samba domain with Samba member servers)

2010-10-29 Thread Alex Crow

Anyone,

I have registered a bug for this, #7763.

I am also now suffering from #7066, have followed all the suggestions 
and have no resolution.


Is it the case that Samba in as a domain controller with member server 
in NT4-style domains  should only be used with 3.2.x (which is not 
ostensibly unsupported)? I find this quite mysterious as surely others 
are still waiting for Samba 4 to stabilise so they can move to an AD 
infrastructure.


If I am barking up the wrong tree, can anyone point me to any docs that 
will help me correct my configuration for Samba =3.4? It seems there is 
nothing out there that answers my questions, or those that have 
helpfully replied to my query.


To start, can I ask if this simple config that worked in 3.2.x is now 
unworkable?:

idmap backend = ldap:ldap://127.0.0.1
idmap uid = 1-2
idmap gid = 1-2
winbind nested groups = yes
winbind trusted domains only = yes
winbind use default domain = no
winbind enum users = yes
winbind enum groups = yes
allow trusted domains = yes

Thanks

Alex

--
This message is intended only for the addressee and may contain
confidential information.  Unless you are that person, you may not
disclose its contents or use it in any way and are requested to delete
the message along with any attachments and notify us immediately.

Transact is operated by Integrated Financial Arrangements plc
Domain House, 5-7 Singer Street, London  EC2A 4BQ
Tel: (020) 7608 4900 Fax: (020) 7608 1200
(Registered office: as above; Registered in England and Wales under number: 
3727592)
Authorised and regulated by the Financial Services Authority (entered on the 
FSA Register; number: 190856)

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Workgroup compared to Domain

2010-10-29 Thread Bruce Richardson
On Thu, Oct 28, 2010 at 09:16:43PM -0400, Robert Moskowitz wrote:
 Are there any good articles comparing features/functions of a
 Workgroup compared to a Domain?

If you don't want the centralised control of a Windows domain, leave
Workgroups well alone; they are fragilel overly complex for what they do
and quite obsolete.  Better to look at Zero Configuration networking.

http://en.wikipedia.org/wiki/Zero_configuration_networking

-- 
Bruce

Remember you're a Womble.


signature.asc
Description: Digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Book suggestion?

2010-10-29 Thread Ken D'Ambrosio
Hi, all.  I haven't really been deep into Samba for a couple of years, and
a co-worker just asked me for a Samba book suggestion.  Well... I ain't
got one.  I mean, God bless Samba-3 By Example, but even that's five years
old.  Any suggestions of something relatively new -- perhaps with focus on
AD integration?

Thanks!

-Ken


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Book suggestion?

2010-10-29 Thread Donny Brooks

On 10/29/2010 4:27 PM, Ken D'Ambrosio wrote:

Hi, all.  I haven't really been deep into Samba for a couple of years, and
a co-worker just asked me for a Samba book suggestion.  Well... I ain't
got one.  I mean, God bless Samba-3 By Example, but even that's five years
old.  Any suggestions of something relatively new -- perhaps with focus on
AD integration?

Thanks!

-Ken


The problem with standard books and technology is that by the time the 
book is written, goes to press, and makes it to the retailer the 
contents are usually out of date. Samba3 by example is a good reference 
to cut your teeth on. Other than that it is mostly reading documentation 
online.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Workgroup compared to Domain

2010-10-29 Thread John H Terpstra
On 10/29/2010 03:15 PM, Bruce Richardson wrote:
 On Thu, Oct 28, 2010 at 09:16:43PM -0400, Robert Moskowitz wrote:
 Are there any good articles comparing features/functions of a
 Workgroup compared to a Domain?
 
 If you don't want the centralised control of a Windows domain, leave
 Workgroups well alone; they are fragilel overly complex for what they do
 and quite obsolete.  Better to look at Zero Configuration networking.
 
 http://en.wikipedia.org/wiki/Zero_configuration_networking
 
 
Please help use to understand exactly how ZeroConf helps with user and
group management.  Confused by your answer!

- John T.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Workgroup compared to Domain

2010-10-29 Thread Bruce Richardson
On Fri, Oct 29, 2010 at 06:50:08PM -0500, John H Terpstra wrote:
  
 Please help use to understand exactly how ZeroConf helps with user and
 group management.  Confused by your answer!

Are you one of the original posters alternate personalities?  Otherwise,
I'm a little confused by yours.  The OP has said almost nothing about
about what he's actually looking for; I think you're making some
unwarranted assumptions about what those needs are.  Did you even
research the Amahi project?  For a lot of it's common uses, UPnP-style
solutions are actually appropriate.  If the OP has something else in
mind, maybe you could ask.

-- 
Bruce

Explota!: miles de lemmings no pueden estar equivocados.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Workgroup compared to Domain

2010-10-29 Thread John H Terpstra
On 10/29/2010 07:41 PM, Bruce Richardson wrote:
 On Fri, Oct 29, 2010 at 06:50:08PM -0500, John H Terpstra wrote:

 Please help use to understand exactly how ZeroConf helps with user and
 group management.  Confused by your answer!
 
 Are you one of the original posters alternate personalities?  

No, I am not an alternate personality for the OP. The OP asked for
documentation regarding MS Windows workgroups and domains to help him
write documentation for the Amahi project.

If I understood your reply correctly, you believe UPnP and ZeroConf
solves the problem of MS Windows workgroup management.  While that may
be an option it does not answer the OP request very well - or does it?
It certainly does not help him to document the use of Samba which  I
understood as the nature of his request for assistance.

 Otherwise, I'm a little confused by yours.  The OP has said almost nothing 
 about
 about what he's actually looking for; I think you're making some
 unwarranted assumptions about what those needs are.  

Maybe I am making too many assumptions, in which case mea culpa.

 Did you even research the Amahi project? 

Yes!  I might know a little bit about UPnP and the use of avahi
(zeroconf) - but that is way off topic for questions regarding Samba's
workgroup and domain security models.

 For a lot of it's common uses, UPnP-style
 solutions are actually appropriate.  If the OP has something else in
 mind, maybe you could ask.
 

If the OP feels inclined perhaps he will respond and clarify.

Cheers,
John T.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Build status as of Fri Oct 29 06:00:02 2010

2010-10-29 Thread build
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2010-10-28 
00:00:04.0 -0600
+++ /home/build/master/cache/broken_results.txt 2010-10-29 00:00:03.0 
-0600
@@ -1,4 +1,4 @@
-Build status as of Thu Oct 28 06:00:02 2010
+Build status as of Fri Oct 29 06:00:02 2010
 
 Build counts:
 Tree Total  Broken Panic 
@@ -15,8 +15,8 @@
 samba-web0  0  0 
 samba_3_current 32 30 3 
 samba_3_master 32 19 0 
-samba_3_next 32 31 0 
-samba_4_0_test 37 28 0 
+samba_3_next 32 30 0 
+samba_4_0_test 37 30 0 
 talloc   32 9  0 
 tdb  30 11 0 
 


[SCM] Samba Shared Repository - branch master updated

2010-10-29 Thread Kamen Mazdrashki
The branch, master has been updated
   via  c5c6935 s4-drs_tests: drs_util_DsAttributeId_to_string() is not 
used anymore
   via  07240e9 s4-resolve_oids: Remove redundant check - 
resolve_oids_need_value() handle this
   via  6b188fb s4-schema_init: we should be able to resolve Syntax OIDs 
with prefixMap we have
   via  72189ae s4-pfm_test: Use single instance of global testing data to 
test with
   via  fbc3fc2 s4-pfm-test: Enrich and fix comment primary for testing data
  from  4a11cad build: add the -fno-common flags to fix the link pb on mac 
os X

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit c5c69359d9d18c9b9be29b0442567cf19f7810a0
Author: Kamen Mazdrashki kame...@samba.org
Date:   Fri Oct 29 01:54:51 2010 +0300

s4-drs_tests: drs_util_DsAttributeId_to_string() is not used anymore

Autobuild-User: Kamen Mazdrashki kame...@samba.org
Autobuild-Date: Fri Oct 29 09:54:01 UTC 2010 on sn-devel-104

commit 07240e97f859e2b46c1fc19c2fa7f5254ee05ccb
Author: Kamen Mazdrashki kame...@samba.org
Date:   Fri Oct 29 01:18:31 2010 +0300

s4-resolve_oids: Remove redundant check - resolve_oids_need_value() handle 
this

commit 6b188fbad47f04f3a9b8979a04a0f70d10b4ada9
Author: Kamen Mazdrashki kame...@samba.org
Date:   Wed Oct 27 22:29:40 2010 +0300

s4-schema_init: we should be able to resolve Syntax OIDs with prefixMap we 
have

If Syntax OID is not in the prefixMap then we are getting
an unknown Attribute Syntax (which we can't handle anyway)

commit 72189aef8d4c898b0537e1fb5a1493454feaef57
Author: Kamen Mazdrashki kame...@samba.org
Date:   Wed Oct 27 22:21:50 2010 +0300

s4-pfm_test: Use single instance of global testing data to test with

commit fbc3fc2e5f2910aa2ce324de541ca98d72b6f702
Author: Kamen Mazdrashki kame...@samba.org
Date:   Wed Oct 27 22:12:11 2010 +0300

s4-pfm-test: Enrich and fix comment primary for testing data

---

Summary of changes:
 source4/dsdb/samdb/ldb_modules/resolve_oids.c |4 -
 source4/dsdb/schema/schema_init.c |6 +-
 source4/torture/drs/drs_util.c|   74 
 source4/torture/drs/unit/prefixmap_tests.c|   93 ++---
 4 files changed, 39 insertions(+), 138 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/dsdb/samdb/ldb_modules/resolve_oids.c 
b/source4/dsdb/samdb/ldb_modules/resolve_oids.c
index 350364b..4f5c35e 100644
--- a/source4/dsdb/samdb/ldb_modules/resolve_oids.c
+++ b/source4/dsdb/samdb/ldb_modules/resolve_oids.c
@@ -156,10 +156,6 @@ static int resolve_oids_parse_tree_need(struct ldb_context 
*ldb,
return LDB_ERR_COMPARE_FALSE;
}
 
-   if (a-syntax-oMSyntax != 6) {
-   return LDB_ERR_COMPARE_FALSE;
-   }
-
return resolve_oids_need_value(ldb, schema, a, valp);
 }
 
diff --git a/source4/dsdb/schema/schema_init.c 
b/source4/dsdb/schema/schema_init.c
index 4e1c14d..836b2ae 100644
--- a/source4/dsdb/schema/schema_init.c
+++ b/source4/dsdb/schema/schema_init.c
@@ -594,9 +594,9 @@ WERROR dsdb_attribute_from_ldb(struct ldb_context *ldb,
/* set an invalid value */
attr-attributeSyntax_id = 0x;
} else {
-   status = dsdb_schema_pfm_make_attid(schema-prefixmap,
-   attr-attributeSyntax_oid,
-   attr-attributeSyntax_id);
+   status = dsdb_schema_pfm_attid_from_oid(schema-prefixmap,
+   
attr-attributeSyntax_oid,
+   
attr-attributeSyntax_id);
if (!W_ERROR_IS_OK(status)) {
DEBUG(0,(%s: '%s': unable to map attributeSyntax_ %s: 
%s\n,
__location__, attr-lDAPDisplayName, 
attr-attributeSyntax_oid,
diff --git a/source4/torture/drs/drs_util.c b/source4/torture/drs/drs_util.c
index ba90cde..6de758e 100644
--- a/source4/torture/drs/drs_util.c
+++ b/source4/torture/drs/drs_util.c
@@ -94,80 +94,6 @@ bool drs_util_oid_from_attid(struct torture_context *tctx,
return true;
 }
 
-/**
- * Utility function to convert drsuapi_DsAttributeId to String
- */
-const char * drs_util_DsAttributeId_to_string(enum drsuapi_DsAttributeId r)
-{
-   const char *val = NULL;
-
-   switch (r) {
-   case DRSUAPI_ATTRIBUTE_objectClass: val = 
DRSUAPI_ATTRIBUTE_objectClass; break;
-   case DRSUAPI_ATTRIBUTE_description: val = 
DRSUAPI_ATTRIBUTE_description; break;
-   case DRSUAPI_ATTRIBUTE_member: val = DRSUAPI_ATTRIBUTE_member; break;
-   case DRSUAPI_ATTRIBUTE_instanceType: val = 
DRSUAPI_ATTRIBUTE_instanceType; break;
-   case DRSUAPI_ATTRIBUTE_whenCreated: val = 

[SCM] Samba Shared Repository - branch master updated

2010-10-29 Thread Matthias Dieter Wallnöfer
The branch, master has been updated
   via  606a447 s4:torture/rpc/samr.c - fix NTTIME warnings by casts
   via  25301b7 s4:torture/rpc/samr.c - test the ReplicaSourceNodeName 
only against s3
   via  af4c9cc s4:samr RPC server - fix trailing whitespaces
   via  5d835c8 s4:samr RPC server - fix indentation of function parameters
   via  fc6f8be s4:samr RPC server - DomainGeneralInformation - never 
return NULL on the oem name
   via  ebe78c4 s4:samr RPC server - provide the right 
ReplicaSourceNodeName
   via  45cd2e4 s4:samr RPC server - remove wrong implementation of 
ReplicaSourceNodeName
  from  c5c6935 s4-drs_tests: drs_util_DsAttributeId_to_string() is not 
used anymore

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 606a447503defdeddc84ae03e06b392517c840c5
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Fri Oct 29 11:26:47 2010 +0200

s4:torture/rpc/samr.c - fix NTTIME warnings by casts

And also the format specifier is wrong since NTTIME is uint64_t and
therefore unsigned.

Autobuild-User: Matthias Dieter Wallnöfer m...@samba.org
Autobuild-Date: Fri Oct 29 10:36:46 UTC 2010 on sn-devel-104

commit 25301b7bf926c5f6f1e688e201d9dc9eee9f60ee
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Sun Sep 19 10:54:29 2010 +0200

s4:torture/rpc/samr.c - test the ReplicaSourceNodeName only against s3

AD handles this differently (see MS-SAMR 2.2.4.1)

commit af4c9cc7c24fad8ccd96d0e2cb0c0cd0138eea9d
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Fri Oct 29 10:55:07 2010 +0200

s4:samr RPC server - fix trailing whitespaces

commit 5d835c8a29cc2cf184412ca91fe48e28da2521d4
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Fri Oct 29 10:53:39 2010 +0200

s4:samr RPC server - fix indentation of function parameters

commit fc6f8be523de65bbcf0586d56bbccd27069ad852
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Fri Oct 29 11:03:26 2010 +0200

s4:samr RPC server - DomainGeneralInformation - never return NULL on the 
oem name

As far as I can tell Windows SAMR never returns NULL on unknown values in 
this
call.

commit ebe78c444c1220829f34488aa5d7f11437785f54
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Fri Oct 29 10:45:47 2010 +0200

s4:samr RPC server - provide the right ReplicaSourceNodeName

It's the content of the domainReplica attribute if it exists and has only 
a
meaning on interim/mixed domain function levels (with NT4 dcs).

commit 45cd2e445d75429fbd84a95ff4a0fa0852279cd3
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Sun Sep 19 10:50:28 2010 +0200

s4:samr RPC server - remove wrong implementation of ReplicaSourceNodeName

This should represent a replication partner - never the DC iself

---

Summary of changes:
 source4/dsdb/common/util.c  |   22 --
 source4/rpc_server/samr/dcesrv_samr.c   |  562 +++
 source4/rpc_server/samr/dcesrv_samr.h   |8 +-
 source4/rpc_server/samr/samr_password.c |   74 ++--
 source4/torture/rpc/samr.c  |   35 ++-
 5 files changed, 340 insertions(+), 361 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/dsdb/common/util.c b/source4/dsdb/common/util.c
index 39589e5..39fcc4d 100644
--- a/source4/dsdb/common/util.c
+++ b/source4/dsdb/common/util.c
@@ -1347,28 +1347,6 @@ failed:
return false;
 }
 
-/* Obtain the short name of the flexible single master operator
- * (FSMO), such as the PDC Emulator */
-const char *samdb_result_fsmo_name(struct ldb_context *ldb, TALLOC_CTX 
*mem_ctx, const struct ldb_message *msg, 
-const char *attr)
-{
-   /* Format is cn=NTDS Settings,cn=NETBIOS name of FSMO, */
-   struct ldb_dn *fsmo_dn = ldb_msg_find_attr_as_dn(ldb, mem_ctx, msg, 
attr);
-   const struct ldb_val *val = ldb_dn_get_component_val(fsmo_dn, 1);
-   const char *name = ldb_dn_get_component_name(fsmo_dn, 1);
-
-   if (!name || (ldb_attr_cmp(name, cn) != 0)) {
-   /* Ensure this matches the format.  This gives us a
-* bit more confidence that a 'cn' value will be a
-* ascii string */
-   return NULL;
-   }
-   if (val) {
-   return (char *)val-data;
-   }
-   return NULL;
-}
-
 /*
   work out the ntds settings dn for the current open ldb
 */
diff --git a/source4/rpc_server/samr/dcesrv_samr.c 
b/source4/rpc_server/samr/dcesrv_samr.c
index e419485..3c08851 100644
--- a/source4/rpc_server/samr/dcesrv_samr.c
+++ b/source4/rpc_server/samr/dcesrv_samr.c
@@ -1,4 +1,4 @@
-/* 
+/*
Unix SMB/CIFS implementation.
 
endpoint server for the samr pipe
@@ -7,17 +7,17 @@
Copyright (C) Volker Lendecke 2004
Copyright (C) Andrew 

[SCM] Samba Shared Repository - branch master updated

2010-10-29 Thread Jeremy Allison
The branch, master has been updated
   via  14ff2e8 Fix bug #7700 - Improvement of return code of smbclient
  from  606a447 s4:torture/rpc/samr.c - fix NTTIME warnings by casts

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 14ff2e8de9bd8d0064762234555260f5eea643fe
Author: Jeremy Allison j...@samba.org
Date:   Fri Oct 29 11:56:51 2010 -0700

Fix bug #7700 - Improvement of return code of smbclient

Based on an initial patch from H Hasegawa 
hasegawa.hiroy...@fujixerox.co.jp.
Convert cli_list and associated functions to take calls that return 
NTSTATUS.

Jeremy.

Autobuild-User: Jeremy Allison j...@samba.org
Autobuild-Date: Fri Oct 29 19:40:16 UTC 2010 on sn-devel-104

---

Summary of changes:
 source3/client/client.c   |  148 +++--
 source3/client/client_proto.h |4 +-
 source3/client/clitar.c   |   45 -
 source3/include/proto.h   |6 +-
 source3/libgpo/gpo_filesync.c |   30 
 source3/libsmb/clilist.c  |   21 --
 source3/libsmb/libsmb_dir.c   |   21 +++---
 source3/torture/masktest.c|   13 +++-
 source3/torture/nbio.c|   18 --
 source3/torture/torture.c |   26 +--
 source3/utils/net_rpc.c   |   33 +
 11 files changed, 229 insertions(+), 136 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/client/client.c b/source3/client/client.c
index d69e55c..9c02879 100644
--- a/source3/client/client.c
+++ b/source3/client/client.c
@@ -527,14 +527,15 @@ static bool do_this_one(struct file_info *finfo)
  Display info about a file.
 /
 
-static void display_finfo(struct cli_state *cli_state, struct file_info *finfo,
+static NTSTATUS display_finfo(struct cli_state *cli_state, struct file_info 
*finfo,
  const char *dir)
 {
time_t t;
TALLOC_CTX *ctx = talloc_tos();
+   NTSTATUS status = NT_STATUS_OK;
 
if (!do_this_one(finfo)) {
-   return;
+   return NT_STATUS_OK;
}
 
t = finfo-mtime_ts.tv_sec; /* the time is assumed to be passed as GMT 
*/
@@ -548,11 +549,10 @@ static void display_finfo(struct cli_state *cli_state, 
struct file_info *finfo,
} else {
char *afname = NULL;
uint16_t fnum;
-   NTSTATUS status;
 
/* skip if this is . or .. */
if ( strequal(finfo-name,..) || strequal(finfo-name,.) )
-   return;
+   return NT_STATUS_OK;
/* create absolute filename for cli_ntcreate() FIXME */
afname = talloc_asprintf(ctx,
%s%s%s,
@@ -560,7 +560,7 @@ static void display_finfo(struct cli_state *cli_state, 
struct file_info *finfo,
CLI_DIRSEP_STR,
finfo-name);
if (!afname) {
-   return;
+   return NT_STATUS_NO_MEMORY;
}
/* print file meta date header */
d_printf( FILENAME:%s\n, finfo-name);
@@ -581,6 +581,7 @@ static void display_finfo(struct cli_state *cli_state, 
struct file_info *finfo,
DEBUG( 0, (display_finfo() failed to 
get security descriptor: %s,
cli_errstr(cli_state)));
+   status = cli_nt_error(cli_state);
} else {
display_sec_desc(sd);
}
@@ -588,18 +589,20 @@ static void display_finfo(struct cli_state *cli_state, 
struct file_info *finfo,
}
TALLOC_FREE(afname);
}
+   return status;
 }
 
 /
  Accumulate size of a file.
 /
 
-static void do_du(struct cli_state *cli_state, struct file_info *finfo,
+static NTSTATUS do_du(struct cli_state *cli_state, struct file_info *finfo,
  const char *dir)
 {
if (do_this_one(finfo)) {
dir_total += finfo-size;
}
+   return NT_STATUS_OK;
 }
 
 static bool do_list_recurse;
@@ -608,7 +611,7 @@ static char *do_list_queue = 0;
 static long do_list_queue_size = 0;
 static long do_list_queue_start = 0;
 static long do_list_queue_end = 0;
-static void (*do_list_fn)(struct cli_state *cli_state, struct file_info *,
+static NTSTATUS (*do_list_fn)(struct cli_state *cli_state, struct file_info *,
  const char *dir);
 
 

[SCM] Samba Shared Repository - branch v3-6-test updated

2010-10-29 Thread Jeremy Allison
The branch, v3-6-test has been updated
   via  29fc7ae Fix bug #7700 - Improvement of return code of smbclient
  from  6e7e7bb s3:registry: move regio.h from include/ to registry/

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test


- Log -
commit 29fc7ae50fa10481425b32dea779474da4c0fc33
Author: Jeremy Allison j...@samba.org
Date:   Fri Oct 29 13:11:26 2010 -0700

Fix bug #7700 - Improvement of return code of smbclient

Based on an initial patch from H Hasegawa 
hasegawa.hiroy...@fujixerox.co.jp.
Convert cli_list and associated functions to take calls that return 
NTSTATUS.

Note that this is different from the code that went into master
as many of the changes that were made to cli_list in master have
not been back-ported to v3-6-test.

Jeremy.

---

Summary of changes:
 source3/client/client.c   |  152 +++--
 source3/client/client_proto.h |4 +-
 source3/client/clitar.c   |   45 
 source3/include/proto.h   |6 +-
 source3/libgpo/gpo_filesync.c |   32 
 source3/libsmb/clilist.c  |6 +-
 source3/libsmb/libsmb_dir.c   |   21 +++---
 source3/torture/masktest.c|3 +-
 source3/torture/nbio.c|   18 +++--
 source3/torture/torture.c |   27 +---
 source3/utils/net_rpc.c   |   34 +
 11 files changed, 214 insertions(+), 134 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/client/client.c b/source3/client/client.c
index 2731c03..9de5b12 100644
--- a/source3/client/client.c
+++ b/source3/client/client.c
@@ -518,14 +518,15 @@ static bool do_this_one(struct file_info *finfo)
  Display info about a file.
 /
 
-static void display_finfo(struct cli_state *cli_state, struct file_info *finfo,
+static NTSTATUS display_finfo(struct cli_state *cli_state, struct file_info 
*finfo,
  const char *dir)
 {
time_t t;
TALLOC_CTX *ctx = talloc_tos();
+   NTSTATUS status = NT_STATUS_OK;
 
if (!do_this_one(finfo)) {
-   return;
+   return NT_STATUS_OK;
}
 
t = finfo-mtime_ts.tv_sec; /* the time is assumed to be passed as GMT 
*/
@@ -542,7 +543,7 @@ static void display_finfo(struct cli_state *cli_state, 
struct file_info *finfo,
 
/* skip if this is . or .. */
if ( strequal(finfo-name,..) || strequal(finfo-name,.) )
-   return;
+   return NT_STATUS_OK;
/* create absolute filename for cli_ntcreate() FIXME */
afname = talloc_asprintf(ctx,
%s%s%s,
@@ -550,7 +551,7 @@ static void display_finfo(struct cli_state *cli_state, 
struct file_info *finfo,
CLI_DIRSEP_STR,
finfo-name);
if (!afname) {
-   return;
+   return NT_STATUS_NO_MEMORY;
}
/* print file meta date header */
d_printf( FILENAME:%s\n, finfo-name);
@@ -570,6 +571,7 @@ static void display_finfo(struct cli_state *cli_state, 
struct file_info *finfo,
DEBUG( 0, (display_finfo() failed to 
get security descriptor: %s,
cli_errstr(cli_state)));
+   status = cli_nt_error(cli_state);
} else {
display_sec_desc(sd);
}
@@ -577,18 +579,20 @@ static void display_finfo(struct cli_state *cli_state, 
struct file_info *finfo,
}
TALLOC_FREE(afname);
}
+   return status;
 }
 
 /
  Accumulate size of a file.
 /
 
-static void do_du(struct cli_state *cli_state, struct file_info *finfo,
+static NTSTATUS do_du(struct cli_state *cli_state, struct file_info *finfo,
  const char *dir)
 {
if (do_this_one(finfo)) {
dir_total += finfo-size;
}
+   return NT_STATUS_OK;
 }
 
 static bool do_list_recurse;
@@ -597,7 +601,7 @@ static char *do_list_queue = 0;
 static long do_list_queue_size = 0;
 static long do_list_queue_start = 0;
 static long do_list_queue_end = 0;
-static void (*do_list_fn)(struct cli_state *cli_state, struct file_info *,
+static NTSTATUS (*do_list_fn)(struct cli_state *cli_state, struct file_info *,
  const char *dir);
 
 /
@@ -715,18