Re: [Samba] Windows XP Profile-Samba 3
Have a look at: http://wiki.samba.org/index.php/Implementing_System_Policies_with_Samba On Sat, Dec 11, 2010 at 6:46 PM, hemanth kumar hemant...@gmail.com wrote: Hi Takahasi, Tks for spending your valuable time for replying, We dont have any NT DC here.Samba is going to be the first DC.So is there any way do creat policies without NT? tks Hemanth Kumar M On Fri, Dec 10, 2010 at 9:25 PM, TAKAHASHI Motonobu mo...@monyo.com wrote: 2010/12/10 hemanth kumar hemant...@gmail.com: We are setting up a samba PDC with rhcl 5.I made some restrictions in XP box using GPEDIT like restricting the access to control panel,desktop properties, registry and etc. (snip) how can we setup the profile for xp users Samba domain is compatible with NT domain, so you need to use system policy instead of GPO. --- TAKAHASHI Motonobu mo...@samba.gr.jp -- KEEP SMILING KEEP MAILING -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- REGARDS, Andy -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Windows XP Profile-Samba 3
On Fri, Dec 10, 2010 at 11:43 AM, hemanth kumar hemant...@gmail.com wrote: Hi, We are setting up a samba PDC with rhcl 5.I made some restrictions in XP box using GPEDIT like restricting the access to control panel,desktop properties, registry and etc. ,then i copied the DEFAULT USER folder frm that XP box to netlogon share of samba server.(thought it would act as baseprofile for all users and this profile policy will be copied to all new users).But what ever the policy i have set is only active in that XP box only ,if a user logs on from any other system its not taking the policy frm the base profile.Am i following the right way? or how can we setup the profile for xp users when copying the default user's profile, did you grant permission to 'everyone' to use the profile? Otherwise it does not work. See: http://support.microsoft.com/kb/168475 -- natxo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba4 LDAP LDB Indexes
I have a system running Samba 4 Alpha 11, and I seem to have a corrupted LDB file in my directory. (Probably the result of taking a backup without using tdbbackup). Right now, running tdbbackup on the file produces an error message similar to the following: Failed to insert into DC=WWW,DC=EXAMPLE,DC=COM.ldb.bak.tmp failed to copy DC=WWW,DC=EXAMPLE,DC=COM.ldb If I run ldbsearch -H DC=WWW,DC=EXAMPLE,DC=COM.ldb -a www.example.com.ldif I get a text file containing a text dump of my directory. I can reload this into a new tdb file using ldbadd, but only if I remove the one object called @INDEXLIST. Without removing this object, ldbadd simply hangs, and then eventually dies with the following error: ltdb: tdb(newfile.ldb): tdb_transaction_cancel: no transaction Failed to commit transaction: Failed to store index records in transaction commit: Other So, my question is: am I on the right track in rebuilding this LDB file? I know I should have kept a good backup, but right now I would really like to recover the file, and it seems that all (or most) of my data is still there, if it can only be made accessible. It seems that this should work, but it doesn't seem to be importing any indexes, and if the file is not indexed I fear that performance will not be acceptable (if it even works at all). Any suggestions would be appreciated! ~Daniel -- View this message in context: http://samba.2283325.n4.nabble.com/Samba4-LDAP-LDB-Indexes-tp3075866p3075866.html Sent from the Samba - General mailing list archive at Nabble.com. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba4 LDAP LDB Indexes
As a quick followup--it seems that the ldbadd command WILL work, if I isolate the @INDEXLIST object and add it first to the newly created ldb file, and then load the remaining ldif. -- View this message in context: http://samba.2283325.n4.nabble.com/Samba4-LDAP-LDB-Indexes-tp3075866p3075890.html Sent from the Samba - General mailing list archive at Nabble.com. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] PDC (CentOS 5.5, Samba 3.5.6): no domain group names sent to Windows 2003 members
Hello, After setting up Samba 3.5.6 on CentOS 5.5 (built from sources) I have noticed a strange problem. Windows 2003 servers participating in this Samba domain do not receive domain groups list when I, say, try to assign security credentials for a file/folder. When I choose domain as source, search reveals only technical group names and individual domain users names. No domain group names at all. However, if I type domain group name manually (i.e. DOMAIN\Domain Admins), it is recognized and displayed correctly in security credentials. May I ask for hints on wherethe source of this problem can be and how to fix it? The PDC of smb.conf follows. == PDC smb.conf below [global] unix charset = UTF8 workgroup = DOMAIN netbios name = PDC server string = Samba PDC passdb backend =ldapsam:ldap://10.10.10.1 ldap://10.10.10.10; username map = /etc/samba/smbusers interfaces = eth0 lo bind interfaces only = yes log level = 1 syslog = 0 log file = /var/log/samba/%m max log size = 0 name resolve order = wins bcast hosts time server = Yes printcap name = CUPS add user script = /usr/sbin/smbldap-useradd -m '%u' delete user script = /usr/sbin/smbldap-userdel '%u' add group script = /usr/sbin/smbldap-groupadd -p '%g' delete group script = /usr/sbin/smbldap-groupdel '%g' add user to group script = /usr/sbin/smbldap-groupmod -m '%g' '%u' delete user from group script = /usr/sbin/smbldap-groupmod -x '%g' '%u' set primary group script = /usr/sbin/smbldap-usermod -g '%g' '%u' add machine script = /usr/sbin/smbldap-useradd -w '%u' shutdown script = /var/lib/samba/scripts/shutdown.sh abort shutdown script = /sbin/shutdown -c logon script = %u.bat logon drive = W: logon home = \\%L\%u logon path = \\%L\profiles\%u domain logons = Yes domain master = Yes wins support = Yes # peformance optimization all users stored in ldap ldapsam:trusted = yes ldap ssl = off ldap suffix = dc=itelsib,dc=com ldap machine suffix = ou=Computers ldap user suffix = ou=Users ldap group suffix = ou=Groups ldap idmap suffix = ou=Idmap ldap admin dn = cn=sambaadmin,dc=itelsib,dc=com idmap backend = ldap://10.10.10.1 idmap uid = 1-2 idmap gid = 1-2 printer admin = root printing = cups == PDC smb.conf above Sincerely, Konstantin -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Linux, Windows AD domain, and IDs
You should read up on the following smb.conf directives: idmap uid idmap gid idmap domains idmap config [domain]:backend idmap config [domain]:default idmap config [domain]:schema_mode idmap config [domain]:range Might be able to solve you problems. On 12/06/10 22:27, Scott Ehrlich wrote: I have a Windows 200x AD Server and have a Linux box as a client connected to the Windows domain having modified the native Kerberos, smb.conf, and other files (not using Likewise). It logs in to the domain fine and everything is happy. There are NO local accounts in /etc/passwd except for the defaults out of the box. Authentication relies on the accounts of the Windows server. I have no authority on the server except to add or remove computers. Login accounts take the form, for example, initials and a number: se123456 I want my uid to reflect 123456. I spent about an hour or two playing with various configurations and options of idmap and winbind. Along the way, some testing revealed: getent passwd my_ad_account returned almost all appropriate values, but the uid and gid were both 1, clearly not correct. wbinfo -n my_ad_account returned my correct sid (I think that was the wbinfo syntax used. In any event, whatever syntax I used for me returned the correct sid. So we know the system can see me - I just need the uid to be accurate. As an update, I need the uid to return the numeric portion of my ad_account username, so if I am se123456, I need the uid to return 123456, thus getent passwd would show se123456:x:123456:blah Thanks. Scott -- Jas http://www.github.com/jas- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba Install Help -Urgent
Hi, -We are running Samba Version 2.2.7-4 on AIX 5.3 and i need to upgrade this to atleast 3.0.5 Version or even latest. -While i checked in site http://samba.org/samba/download;for suitable Version i can find one as ' samba-3.0.5.tar.gz' but while downloading and install using smitty install cant see any files to install. -maybe i was looking in the wrong way and hence i need your help in installing samba. Previously samba installed using RPM files . -also it would be helpful if you can give the list of files need to backup prior to install of new version. Please reply to my mailid : snataraja...@csc.com Regards RSuresh Unix System Administrator CSC India Private Limited Tower 1 B, DLF IT Park, 1/124, Shivaji Garden, Nandambakkam Post,, Ramapuram, Chennai - 600 089. Tamilnadu - India. Contact Details :- UK: +44 – 870 600 156 X 1504 , India: +91 44 43721504 Extn:722542 | Mobile: +91 9444540857 | snataraja...@csc.com | www.csc.com CSC • This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose • Computer Sciences Corporation India Pvt Ltd • 7th, Floor, Block 1B, DLF IT Park, Sivaji Garden, Nandambakkam Post, Ramapuram, Chennai-600 089. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] maximum NTLM_AUTH/Winbind concurrent request
Hi Guys, Iam using Samba Version 3.3.8-0.52.el5_5.2, (RPM) and iam authenticating AD users with ntlm_auth (third party program using ntlm_auth to authenticate users through samba) . but my problem is how many concurrent requests can be handled by the ntlm_auth. I have seen lot of issues on squid proxy server (too many queued ntlm_auth requests and squid failures.) Whats the maximum simultaneous connections it can handle ? (is it 256 ? ) how can I increase the limit ? and whats the maximum limit for that ? Thanks, Tharanga -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] cifs and Netapp DFS-shares problems
On Fri, Dec 10, 2010 at 5:34 AM, Jeff Layton jlay...@samba.org wrote: On Fri, 10 Dec 2010 11:25:46 +0100 Marcus li...@localguru.de wrote: Any ideas? Seems to be an error of the NetApp Fileserver acting not RFC conform. Is this the right list to discuss or should I post on linux-cifs-client list? (cc'ing linux-cifs mailing list) Probably because the ls is hung and is holding references to the mount... I've successfully tested against netapp's CIFS implementation in the past, but there are significant bugs in it. The errors you're seeing look like an alignment problem of some sort -- i.e. the server is sending packets that have incorrect length fields in them. This isn't the first such problem I've seen with OnTap. You're welcome to open a bug at bugzilla.samba.org, cc me, and I'll take a look when I have time. Gathering wire captures during one of these events and attaching them to the bug would help to track down the problem. It's likely to be Netapp's bug however... We have worked around a few similar sounding server bugs in the past, but have to be careful that we don't introduce potential buffer overruns or security problems (the Linux cifs client parses frames more carefully than some other clients to reduce the chance of going beyond the end of frames). -- Thanks, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] winbind with server 2003
I have a RedHat 5.2 and I have some problem with a Windows 2003 Domain. I have configured winbind (the configuration is the same and works in other installation) if I use as a password server a Windows 2000 Domain Server always works, if I use as password server a Windows 2003 Domain Server it is impossible validate on domain via ssh and I have to to turn off the Windows 2000 server. What could be different on server 2003, is the first server 2003 that does not works ... With Windows 2003 server i see users and groups with wbinfo command but if i try to connect via ssh with a domain user this is the output of /var/log/secure Dec 2 12:47:56 localhost sshd[7092]: pam_winbind(sshd:auth): [pamh: 0x09f59410] ENTER: pam_sm_authenticate (flags: 0x0001) Dec 2 12:47:56 localhost sshd[7092]: pam_winbind(sshd:auth): getting password (0x0091) Dec 2 12:47:56 localhost sshd[7092]: pam_winbind(sshd:auth): Could not retrieve user's password Dec 2 12:47:56 localhost sshd[7092]: pam_winbind(sshd:auth): [pamh: 0x09f59410] LEAVE: pam_sm_authenticate returning 20 Dec 2 12:47:58 localhost sshd[7092]: Failed password for proj from 10.120.12.51 port 4352 ssh2 what does it mean : pam_sm_authenticate returning 20 Thanks Simone -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Keeping Windows ACL's when migrating to SAMBA Server
We setup a Ubuntu SAMBA 3.5 server and would like it to replace our current Windows 2003 file server. I can manually copy the files over but need to keep all the Windows UID's and GID's but am having trouble copying the files over. Does anyone have any idea what im doing wrong or have any ideas for me to do this? I have pasted the contents of my smb.conf below my name. George .. smb.conf [global] workgroup = DOMAIN realm = DOMAIN.LOCAL netbios name = bed-fs1 #server string = %h server (Samba %v, Ubuntu) security = ADS syslog = 0 log file = /var/log/samba/log.%m max log size = 1000 domain master = No dns proxy = No usershare allow guests = Yes panic action = /usr/share/samba/panic-action %d idmap uid = 1000-2 idmap gid = 1000-2 template shell = /bin/bash winbind separator = + winbind enum users = Yes winbind enum groups = Yes winbind use default domain = Yes #[homes] #comment = Home Directories #browseable = yes #valid users = %S #writable = yes [servers] path = /servers valid users = @DOMAIN+Domain Admins , @DOMAIN+Domain Users , @DOMAIN+Domain Team admin users = @DOMAIN+Domain Admins , root , administrator write list = @DOMAIN+Domain Team , @DOMAIN+Domain Admins , @DOMAIN+Domain Users , root , administrator directory mask = 0700 create mode = 0700 force create mode = 0700 force directory mode = 0700 read only = no writeable = yes available = yes browseable = yes public = yes writable = yes guest ok = yes acl compatibility = auto acl check permissions = Yes acl group control = No acl map full control = Yes #acl map full control = no force unknown acl user = No dos filemode = no inherit permissions = yes store dos attributes = yes map archive = No map hidden = No map system = No map readonly = No nt acl support = Yes map acl inherit = yes profile acls = No inherit owner = No inherit acls = yes acl group control = yes vfs objects = acl_xattr [man_fs2_e] path = /servers/man_fs2/e valid users = @DOMAIN+Domain Admins , @DOMAIN+Domain Users , @DOMAIN+Domain Team admin users = @DOMAIN+Domain Admins , root , administrator write list = @DOMAIN+Domain Team , @DOMAIN+Domain Admins , @DOMAIN+Domain Users , root , administrator directory mask = 0700 create mode = 0700 force create mode = 0700 force directory mode = 0700 read only = no writeable = yes available = yes browseable = yes public = yes writable = yes guest ok = yes acl compatibility = auto acl check permissions = Yes acl group control = No acl map full control = Yes #acl map full control = no force unknown acl user = No dos filemode = no inherit permissions = yes store dos attributes = yes map archive = No map hidden = No map system = No map readonly = No nt acl support = Yes map acl inherit = yes profile acls = No inherit owner = No inherit acls = yes acl group control = yes vfs objects = acl_xattr [global] workgroup = DOMAIN realm = DOMAIN.LOCAL netbios name = bed-fs1 # server string = %h server (Samba %v, Ubuntu) security = ADS syslog = 0 log file = /var/log/samba/log.%m max log size = 1000 domain master = No dns proxy = No usershare allow guests = Yes panic action = /usr/share/samba/panic-action %d idmap uid = 1000-2 idmap gid = 1000-2 template shell = /bin/bash winbind separator = + winbind enum users = Yes winbind enum groups = Yes winbind use default domain = Yes #[homes] #comment = Home Directories #browseable = yes #valid users = %S #writable = yes [servers] path = /servers valid users = @DOMAIN+Domain Admins , @DOMAIN+Domain Users , @DOMAIN+Domain Team admin users = @DOMAIN+Domain Admins , root , administrator write list = @DOMAIN+Domain Team , @DOMAIN+Domain Admins , @DOMAIN+Domain Users , root , administrator directory mask = 0700 create mode = 0700 force create mode = 0700 force directory mode = 0700 read only = no writeable = yes available = yes browseable = yes public = yes writable = yes guest ok = yes acl compatibility = auto acl check permissions = Yes acl group control = No acl map full control = Yes #acl map full control = no force unknown acl user = No dos filemode = no inherit permissions = yes store dos attributes = yes map archive = No map hidden = No map system = No map readonly = No nt acl support = Yes map acl inherit = yes profile acls = No inherit owner = No inherit acls = yes acl group control = yes vfs objects = acl_xattr [man_fs2_e] path = /servers/man_fs2/e valid users = @DOMAIN+Domain Admins , @DOMAIN+Domain Users , @DOMAIN+Domain Team admin users = @DOMAIN+Domain Admins , root , administrator write list = @DOMAIN+Domain Team , @DOMAIN+Domain Admins , @DOMAIN+Domain Users , root , administrator directory mask = 0700 create mode = 0700 force create mode = 0700 force
[Samba] PDC on 3.0.8 upgraded to 3.5.6-70 now getting 'Access Is Denied' from clients
Wow! this got long on me. The problem seems similar to the one expressed here: http://www.mail-archive.com/samba@lists.samba.org/msg111029.html but I already had server signing = no in my config, and the 4 relevant options all seem correct. client schannel = Auto server schannel = Auto client signing = auto server signing = No On one of my PC's I can see 'If possible = yes' on the ones that are 'auto' and 'no' on the one that is 'no', so I think they are in sync. I'm not 100% sure what might be relevant, so I included a lot following. For the cliff notes, read the next 2 paragraphs and then skip down to my results of 38.1.7 from the troubleshooting guide. Here I can more or less reproduce the error, but the guide provides no expectation of an error the way I'm getting it. In a nutshell, I tarred up all files I felt were important from my Fedora core 3 installation and did a clean Fedora core 14 installation and then untarred all the content for my shares and put /etc/samba/* back in place and fired up the new samba. I had hoped that I coud just stick the tdb files over and everything would just keep working. But I think maybe I had multiple paswd.tbd and secret.tdb files and didn't realize the one actually being used because after doing so, pdbedit -w -L showed no users. So I added all the users back in via smbpasswd -a. I unjoined my machines from the domain and rejoined them. Everything *mostly* seems like it should be working, I can log into an XP Pro or Win2K machine using domain=STELTER, but I'm immediately told that it can't access the profiles so it logs me in with a vanilla desktop, but it does mount my login drive at I:. However, when I double-click on I:, I get a simple dialog saying 'Access Is Denied'. Skip down to 38.1.7 and then come back to the rest i you find some history is needed. Details Details Details follow: WHY AM I DOING THIS?? - I had been happily running Fedora Core 3 since about 2004 (IIRC) with samba acting as a primary domain controller. I had 5 children, a wife and 3 computers. I implemented roaming profiles (after considerable learning curve) and anyone in my family could log into any box and see the same desktop and same 'My Documents' (which was actually just a samba share directory). About once a year I would go on a 2 wk vacation and generally uptime on the box was about 350 days and I'd shut it down. It just worked. Well, I have recently been upgrading some boxes (2.4 GHz P4 was the top machine on the domain) and the last one I build is going to replace one of the domain computers, but it is win7pro. I found that the box did not join the domain and upon investigation learned I must have 3.3 or 3.4 and some registry tweaks. SO WHAT HAVE I DONE? - I really only cared about the data on my shares and the samba configuration so my plan was to tar up the linux disk into a 40GB file, copy it to another machine, install FC14, copy the tar back and untar it. It went mostly a designed-- I wound up with a 40GB tar file (I had created a /z directory an from / issued tar cf z/backup.tar [a-x]*). I copied that to my new win7pro box and installed FedoraCore 14 back on my trusty 800MHz Celeron's 120GB drive. I then added all the users back via useradd with their old gid's and uid's. After copying the tar file back to the fedora box and untaring it an putting all the shares back in their correct locations, I installed samba 3.5.6-70 and copied my smb.conf, passwd.tdb, secret.tdb, and lmhosts from my tar over to /etc/samba. I fired up samba and tried to see what was/wasn't working. Well, First off, boxes could see the STELTER domain, but none of the machines inside. I found by doing pdbedit -w -L that my users did not translate over properly. I discoverd that the secret.tdb and passwd.pdb file in use was under /var/... so clearly I hadn't put my files in the right place. In retrospect, I'm not really sure that the files I grabbed from /etc/samba were even in use on my old box. I also saw a secret.tdb file in my root directory which I copied over too. I then found that something must have gone wrong with my 40GB tar. I had done a tar tvf on it after making it and confirmed that all the shares I cared about and /etc were in it but I didn't look too closely at it. Seems somehow /var and /usr were omitted from the tar (got too long? some error I overlooked?. Matters not, those directories ae now gone so there is no hope of finding if the tdb files were under the var heirarchy or not-- Actually I proabaly have a backup of that from a couple years ago, but I just pressed on. I did smbpasswd on each user and I unjoine/rejoined 3 computers to the domain. Now if I browse to Networks on a windows box, I see STELTER domain and if I push into it I can see all my shares. But if I try to actually see any contents on any of
[Samba] Root Access forWindows Domain Admins
To put it simple id like to give our Domain Admins the same access to Samba shares that the root user has and havent had much luck doing this. Whenever I look this up I find that people are doing this different ways but none seem to work. The only other thing that ive seen people doing is adding a domain user to the sudoers list but that means the domain user has to be logged into the linux server and then elevate their privileges. George -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] libsunacl--for FreeBSD
Anyone know if there's a configure option for Samba4 to take advantage of this. Would like to NOT use eadb. Thoughts? Cheers, -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Root Access forWindows Domain Admins
To put it simple id like to give our Domain Admins the same access to Samba shares that the root user has and havent had much luck doing this. Whenever I look this up I find that people are doing this different ways but none seem to work. The only other thing that ive seen people doing is adding a domain user to the sudoers list but that means the domain user has to be logged into the linux server and then elevate their privileges. You may in fact be talking about different things, but the main ones I can remember now are: Admin rights at share level (can also be used as a global parameter) In smb.conf: admin users = @[yourdoamin]\Domain Admins If you are talking about privileges: net rpc rights list net rpc rights grant The possible privileges are: SeMachineAccountPrivilegeAdd machines to domain SeTakeOwnershipPrivilege Take ownership of files or other objects SeBackupPrivilege Back up files and directories SeRestorePrivilege Restore files and directories SeRemoteShutdownPrivilege Force shutdown from a remote system SePrintOperatorPrivilege Manage printers SeAddUsersPrivilege Add users and groups to the domain SeDiskOperatorPrivilege Manage disk shares SeSecurityPrivilege Manage auditing and security log For example: net rpc rights grant Domain Admins SeMachineAccountPrivilege -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba4 smb.conf questions
Hi On 8 December 2010 19:28, Ben Cone bc...@wwhfb.com wrote: I am trying to find a good guide for setting up the smb.conf and can't seem to find anything. Here's what I have been trying to do and it hasn't been working correctly. We had a Windows Server 2003 DC. I had to upgrade it because of some problems we were having and upgraded to Windows Server 2008 R2. After that, my Samba 3 with Winbind file server quit authenticating to the AD domain and try as I might I couldn't get it to work. This is largely because even though we have a perfectly good DC, all of our workstations are just in a giant workgroup (and management just won't give in and let me change it). After playing with Likewise and samba for a bit I gave up that bag and thought I would give Samba4 a try. So far I am really liking what I am seeing. I realize that we are still in beta land, but what we have so far may just work for what I want to do. I have been trying to find a good guide to configure the smb.conf file but haven't really found anything. I believe it's currently best to have a Samba 3 member server joined to the Samba 4 domain for file serving rather than doing the file serving from Samba 4. Of course I don't really see how joining Samba 4 to the domain will help get Samba 3 working :) Perhaps you should provide more details on what is going wrong with Samba 3 - Win2k8r2. By the way, successful install on ubuntu 10.04 x64 server that formally had samba 3 and winbind on it that were installed from aptitude. Do you mean that you installed Samba 4 from the Ubuntu repositories? If so, rather install from Git or perhaps Alpha 14 as per the Samba 4 HOWTO. Any help would be appreciated. The samba-technical mailing list is currently the best place to ask about issues with samba 4. -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba4 LDAP LDB Indexes
Hi This sounds like a question for the samba-technical list, which is still the best place to ask about issues with samba 4. I have copied my reply there. On 7 December 2010 08:49, dmcfeeters doma...@fiforms.org wrote: I have a system running Samba 4 Alpha 11, and I seem to have a corrupted LDB file in my directory. (Probably the result of taking a backup without using tdbbackup). Right now, running tdbbackup on the file produces an error message similar to the following: Failed to insert into DC=WWW,DC=EXAMPLE,DC=COM.ldb.bak.tmp failed to copy DC=WWW,DC=EXAMPLE,DC=COM.ldb If I run ldbsearch -H DC=WWW,DC=EXAMPLE,DC=COM.ldb -a www.example.com.ldif I get a text file containing a text dump of my directory. I can reload this into a new tdb file using ldbadd, but only if I remove the one object called @INDEXLIST. Without removing this object, ldbadd simply hangs, and then eventually dies with the following error: ltdb: tdb(newfile.ldb): tdb_transaction_cancel: no transaction Failed to commit transaction: Failed to store index records in transaction commit: Other So, my question is: am I on the right track in rebuilding this LDB file? I know I should have kept a good backup, but right now I would really like to recover the file, and it seems that all (or most) of my data is still there, if it can only be made accessible. It seems that this should work, but it doesn't seem to be importing any indexes, and if the file is not indexed I fear that performance will not be acceptable (if it even works at all). Any suggestions would be appreciated! ~Daniel -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
autobuild: intermittent test failure detected
The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2010-12-11-1044/flakey.log The source3 build logs are available here: http://git.samba.org/autobuild.flakey/2010-12-11-1044/source3.stderr http://git.samba.org/autobuild.flakey/2010-12-11-1044/source3.stdout The source4 build logs are available here: http://git.samba.org/autobuild.flakey/2010-12-11-1044/source4.stderr http://git.samba.org/autobuild.flakey/2010-12-11-1044/source4.stdout The top commit at the time of the failure was: commit 35fbc7bbda5851f7172538f79fc79be201f1d521 Author: Jelmer Vernooij jel...@samba.org Date: Sat Dec 11 03:26:31 2010 +0100 s4-smbtorture: Make test names lowercase and dot-separated. This is consistent with the test names used by selftest, should make the names less confusing and easier to integrate with other tools. Autobuild-User: Jelmer Vernooij jel...@samba.org Autobuild-Date: Sat Dec 11 04:16:13 CET 2010 on sn-devel-104
Re: autobuild: intermittent test failure detected
Am 11.12.2010 06:44, schrieb Andrew Tridgell: The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2010-12-11-0644/flakey.log The source3 build logs are available here: http://git.samba.org/autobuild.flakey/2010-12-11-0644/source3.stderr http://git.samba.org/autobuild.flakey/2010-12-11-0644/source3.stdout The source4 build logs are available here: http://git.samba.org/autobuild.flakey/2010-12-11-0644/source4.stderr http://git.samba.org/autobuild.flakey/2010-12-11-0644/source4.stdout The top commit at the time of the failure was: commit 35fbc7bbda5851f7172538f79fc79be201f1d521 Author: Jelmer Vernooij jel...@samba.org Date: Sat Dec 11 03:26:31 2010 +0100 s4-smbtorture: Make test names lowercase and dot-separated. This is consistent with the test names used by selftest, should make the names less confusing and easier to integrate with other tools. Autobuild-User: Jelmer Vernooij jel...@samba.org Autobuild-Date: Sat Dec 11 04:16:13 CET 2010 on sn-devel-104 I wonder how this passed autobuild, as the ECHO-UDP test can never be found... I'm pushing fixes for it to autobuild now. metze metze signature.asc Description: OpenPGP digital signature
autobuild: intermittent test failure detected
The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2010-12-11-1244/flakey.log The source3 build logs are available here: http://git.samba.org/autobuild.flakey/2010-12-11-1244/source3.stderr http://git.samba.org/autobuild.flakey/2010-12-11-1244/source3.stdout The source4 build logs are available here: http://git.samba.org/autobuild.flakey/2010-12-11-1244/source4.stderr http://git.samba.org/autobuild.flakey/2010-12-11-1244/source4.stdout The top commit at the time of the failure was: commit 35fbc7bbda5851f7172538f79fc79be201f1d521 Author: Jelmer Vernooij jel...@samba.org Date: Sat Dec 11 03:26:31 2010 +0100 s4-smbtorture: Make test names lowercase and dot-separated. This is consistent with the test names used by selftest, should make the names less confusing and easier to integrate with other tools. Autobuild-User: Jelmer Vernooij jel...@samba.org Autobuild-Date: Sat Dec 11 04:16:13 CET 2010 on sn-devel-104
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via aac0c58 libcli/echo: fix off by 1 crash bug
via 21d02c0 s4:selftest: use correct name for the test ECHO-UDP =
echo.udp
via b6fef94 libcli/echo: lowercase testsuite names
from 35fbc7b s4-smbtorture: Make test names lowercase and dot-separated.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit aac0c58e04ac5f379fcfb0b3912d81f64f3652d2
Author: Stefan Metzmacher me...@samba.org
Date: Sat Dec 11 11:17:17 2010 +0100
libcli/echo: fix off by 1 crash bug
metze
Autobuild-User: Stefan Metzmacher me...@samba.org
Autobuild-Date: Sat Dec 11 13:48:54 CET 2010 on sn-devel-104
commit 21d02c0626577c213ae8cfb6ea684351e78ad511
Author: Stefan Metzmacher me...@samba.org
Date: Sat Dec 11 11:04:29 2010 +0100
s4:selftest: use correct name for the test ECHO-UDP = echo.udp
I wonder how commit 35fbc7bbda5851f7172538f79fc79be201f1d521
(s4-smbtorture: Make test names lowercase and dot-separated)
ever passed make test.
metze
commit b6fef94ec16e17275d48f78453b3158a87c8f605
Author: Stefan Metzmacher me...@samba.org
Date: Sat Dec 11 11:03:52 2010 +0100
libcli/echo: lowercase testsuite names
metze
---
Summary of changes:
libcli/echo/echo.c|2 +-
libcli/echo/tests/echo.c |4 ++--
source4/selftest/tests.py |2 +-
3 files changed, 4 insertions(+), 4 deletions(-)
Changeset truncated at 500 lines:
diff --git a/libcli/echo/echo.c b/libcli/echo/echo.c
index 46d1e28..271f71b 100644
--- a/libcli/echo/echo.c
+++ b/libcli/echo/echo.c
@@ -172,7 +172,7 @@ static void echo_request_done(struct tevent_req *subreq)
return;
}
- state-message[len] = '\0';
+ state-message[len-1] = '\0';
/* Once the async function has completed, set tevent_req_done() */
tevent_req_done(req);
}
diff --git a/libcli/echo/tests/echo.c b/libcli/echo/tests/echo.c
index 931e8b6..77a7dfa 100644
--- a/libcli/echo/tests/echo.c
+++ b/libcli/echo/tests/echo.c
@@ -81,10 +81,10 @@ NTSTATUS torture_libcli_echo_init(void)
{
struct torture_suite *suite;
- suite = torture_suite_create(talloc_autofree_context(), ECHO);
+ suite = torture_suite_create(talloc_autofree_context(), echo);
NT_STATUS_HAVE_NO_MEMORY(suite);
- torture_suite_add_simple_test(suite, UDP, torture_echo_udp);
+ torture_suite_add_simple_test(suite, udp, torture_echo_udp);
suite-description = talloc_strdup(suite, libcli/echo interface
tests);
torture_register_suite(suite);
diff --git a/source4/selftest/tests.py b/source4/selftest/tests.py
index c2b47c9..3eee18b 100755
--- a/source4/selftest/tests.py
+++ b/source4/selftest/tests.py
@@ -339,7 +339,7 @@ for t in smb4torture_testsuites(rap.):
for t in base + raw:
plantestsuite_loadlist(samba4.ntvfs.cifs.%s % t, dc,
[valgrindify(smb4torture), '//$NETBIOSNAME/cifs', '-U$USERNAME%$PASSWORD'] +
ntvfsargs + [t])
-plansmbtorturetestsuite('ECHO-UDP', 'dc:local', '//$SERVER/whatever')
+plansmbtorturetestsuite('echo.udp', 'dc:local', '//$SERVER/whatever')
# Local tests
for t in smb4torture_testsuites(local.):
--
Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via 097075c build: On AIX we need _XOPEN_SOURCE = 500 for
CLOCK_REALTIME
from aac0c58 libcli/echo: fix off by 1 crash bug
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit 097075c31f79f59a498cc89ca715e5936b41b465
Author: Matthieu Patou m...@matws.net
Date: Sat Dec 11 13:13:42 2010 +0300
build: On AIX we need _XOPEN_SOURCE = 500 for CLOCK_REALTIME
Autobuild-User: Matthieu Patou m...@samba.org
Autobuild-Date: Sat Dec 11 14:48:21 CET 2010 on sn-devel-104
---
Summary of changes:
buildtools/wafsamba/wscript |3 +++
1 files changed, 3 insertions(+), 0 deletions(-)
Changeset truncated at 500 lines:
diff --git a/buildtools/wafsamba/wscript b/buildtools/wafsamba/wscript
index 5756df4..2b73f7f 100644
--- a/buildtools/wafsamba/wscript
+++ b/buildtools/wafsamba/wscript
@@ -300,6 +300,9 @@ def configure(conf):
else:
conf.env.HAVE_LD_VERSION_SCRIPT = False
+if sys.platform == aix5:
+conf.DEFINE('_XOPEN_SOURCE', 500, add_to_cflags=True)
+
# we should use the PIC options in waf instead
# Some compilo didn't support -fPIC but just print a warning
if conf.env['COMPILER_CC'] == suncc:
--
Samba Shared Repository
Re: autobuild: intermittent test failure detected
On Sat, 2010-12-11 at 11:08 +0100, Stefan (metze) Metzmacher wrote: Am 11.12.2010 06:44, schrieb Andrew Tridgell: The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2010-12-11-0644/flakey.log The source3 build logs are available here: http://git.samba.org/autobuild.flakey/2010-12-11-0644/source3.stderr http://git.samba.org/autobuild.flakey/2010-12-11-0644/source3.stdout The source4 build logs are available here: http://git.samba.org/autobuild.flakey/2010-12-11-0644/source4.stderr http://git.samba.org/autobuild.flakey/2010-12-11-0644/source4.stdout The top commit at the time of the failure was: commit 35fbc7bbda5851f7172538f79fc79be201f1d521 Author: Jelmer Vernooij jel...@samba.org Date: Sat Dec 11 03:26:31 2010 +0100 s4-smbtorture: Make test names lowercase and dot-separated. This is consistent with the test names used by selftest, should make the names less confusing and easier to integrate with other tools. Autobuild-User: Jelmer Vernooij jel...@samba.org Autobuild-Date: Sat Dec 11 04:16:13 CET 2010 on sn-devel-104 I wonder how this passed autobuild, as the ECHO-UDP test can never be found... The tests passed locally for me, but I hadn't rebased after Kai pushed the ECHO-UDP test. So I wonder if there's something wrong in the rebase logic in autobuild? Cheers, Jelmer signature.asc Description: This is a digitally signed message part
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via bf13d76 build: add more CFLAGS for aix
via 617871e build: add a dependency on lib iconv for lib intl if we are
not able to find it
from 097075c build: On AIX we need _XOPEN_SOURCE = 500 for
CLOCK_REALTIME
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit bf13d76280ea583175a712d441dcc3c8c69e698b
Author: Matthieu Patou m...@matws.net
Date: Sat Dec 11 19:20:51 2010 +0300
build: add more CFLAGS for aix
Autobuild-User: Matthieu Patou m...@samba.org
Autobuild-Date: Sat Dec 11 18:09:23 CET 2010 on sn-devel-104
commit 617871ee28e925171462d4821f60aa9f79fab94e
Author: Matthieu Patou m...@matws.net
Date: Sat Dec 11 18:50:51 2010 +0300
build: add a dependency on lib iconv for lib intl if we are not able to
find it
This is due that on some platform lib intl depend on lib iconv, failling
to provide this library cause waf to be unable to link with lib intl and
makes it think that the library doesn't exists !
---
Summary of changes:
buildtools/wafsamba/wscript |4 +++-
lib/replace/wscript | 13 -
2 files changed, 15 insertions(+), 2 deletions(-)
Changeset truncated at 500 lines:
diff --git a/buildtools/wafsamba/wscript b/buildtools/wafsamba/wscript
index 2b73f7f..d4e103e 100644
--- a/buildtools/wafsamba/wscript
+++ b/buildtools/wafsamba/wscript
@@ -301,7 +301,9 @@ def configure(conf):
conf.env.HAVE_LD_VERSION_SCRIPT = False
if sys.platform == aix5:
-conf.DEFINE('_XOPEN_SOURCE', 500, add_to_cflags=True)
+conf.DEFINE('_ALL_SOURCE', 1, add_to_cflags=True)
+# Might not be needed if ALL_SOURCE is defined
+# conf.DEFINE('_XOPEN_SOURCE', 600, add_to_cflags=True)
# we should use the PIC options in waf instead
# Some compilo didn't support -fPIC but just print a warning
diff --git a/lib/replace/wscript b/lib/replace/wscript
index 8b59807..86a4bdb 100644
--- a/lib/replace/wscript
+++ b/lib/replace/wscript
@@ -210,7 +210,18 @@ def configure(conf):
conf.CHECK_FUNCS_IN('res_search', 'resolv', checklibc=True,
headers='netinet/in.h arpa/nameser.h resolv.h')
-conf.CHECK_FUNCS_IN('gettext', 'intl', checklibc=True, headers='libintl.h')
+
+if not conf.CHECK_FUNCS_IN('gettext', 'intl', checklibc=True,
headers='libintl.h'):
+# Some hosts need lib iconv for linking with lib intl
+# So we try with flags just in case it helps.
+oldflags = conf.env['LDFLAGS_INTL']
+conf.env['LDFLAGS_INTL'] = -liconv
+if not conf.CHECK_LIB('intl'):
+conf.env['LDFLAGS_INTL'] = oldflags
+else:
+conf.CHECK_FUNCS_IN('gettext', 'intl', checklibc=True,
headers='libintl.h')
+
+conf.CHECK_FUNCS_IN('dgettext gettext', 'intl', headers='libintl.h')
conf.CHECK_FUNCS_IN('pthread_create', 'pthread', checklibc=True,
headers='pthread.h')
conf.CHECK_FUNCS_IN('crypt', 'crypt', checklibc=True)
--
Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 6bc6c00 selftest-s4: Support listing smbtorture4 tests. via 002acbb selftest: Support multiple instances of $LISTOPT. via 3b1ed52 filter-subunit: Add --list argument. via 13bb9e7 smbtorture: Default to listing all tests if no prefix was specified. via 1f5f4e9 smbtorture: Implement --list argument. from bf13d76 build: add more CFLAGS for aix http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 6bc6c004fadadc8d9ddfeff3c1a5ba6e5d5423d9 Author: Jelmer Vernooij jel...@samba.org Date: Sat Dec 11 18:47:11 2010 +0100 selftest-s4: Support listing smbtorture4 tests. Autobuild-User: Jelmer Vernooij jel...@samba.org Autobuild-Date: Sat Dec 11 19:32:07 CET 2010 on sn-devel-104 commit 002acbbbd03d506b3a2280fa85b719792178f75d Author: Jelmer Vernooij jel...@samba.org Date: Sat Dec 11 18:21:58 2010 +0100 selftest: Support multiple instances of $LISTOPT. commit 3b1ed52f2f067c8bb895c6058de08c0b07e6f80c Author: Jelmer Vernooij jel...@samba.org Date: Sat Dec 11 18:21:27 2010 +0100 filter-subunit: Add --list argument. commit 13bb9e7046ac253980d3aefafb3de88b0379bdb7 Author: Jelmer Vernooij jel...@samba.org Date: Sat Dec 11 18:00:24 2010 +0100 smbtorture: Default to listing all tests if no prefix was specified. commit 1f5f4e912d6600b3fd759ce010ac226828e7bf89 Author: Jelmer Vernooij jel...@samba.org Date: Sat Dec 11 17:56:37 2010 +0100 smbtorture: Implement --list argument. --- Summary of changes: selftest/filter-subunit | 10 + selftest/selftest.pl |2 +- source4/selftest/tests.py| 81 -- source4/torture/smbtorture.c | 59 +- 4 files changed, 106 insertions(+), 46 deletions(-) Changeset truncated at 500 lines: diff --git a/selftest/filter-subunit b/selftest/filter-subunit index 84b6610..5f062d1 100755 --- a/selftest/filter-subunit +++ b/selftest/filter-subunit @@ -25,8 +25,18 @@ parser.add_option(--prefix, type=string, help=Add prefix to all test names) parser.add_option(--fail-on-empty, default=False, action=store_true, help=Fail if there was no subunit output) +parser.add_option(--list, default=False, + action=store_true, help=Operate in list mode) opts, args = parser.parse_args() +if opts.list: + prefix = opts.prefix + if not prefix: + prefix = + for l in sys.stdin: + sys.stdout.write(%s%s\n % (prefix, l.rstrip())) + sys.exit(0) + if opts.expected_failures: expected_failures = subunithelper.read_test_regexes(opts.expected_failures) else: diff --git a/selftest/selftest.pl b/selftest/selftest.pl index 213954c..9759220 100755 --- a/selftest/selftest.pl +++ b/selftest/selftest.pl @@ -956,7 +956,7 @@ $envvarstr next; } - $cmd =~ s/\$LISTOPT/--list/; + $cmd =~ s/\$LISTOPT/--list/g; system($cmd); diff --git a/source4/selftest/tests.py b/source4/selftest/tests.py index 3eee18b..d56d4ba 100755 --- a/source4/selftest/tests.py +++ b/source4/selftest/tests.py @@ -63,11 +63,21 @@ def plantestsuite(name, env, cmdline, allow_empty_output=False): filter_subunit_args = [] if not allow_empty_output: filter_subunit_args.append(--fail-on-empty) +if $LISTOPT in cmdline: +filter_subunit_args.append($LISTOPT) print %s 21 | ../selftest/filter-subunit %s --prefix=\%s.\ % (cmdline, .join(filter_subunit_args), name) if allow_empty_output: print WARNING: allowing empty subunit output from %s % name +def add_prefix(prefix, support_list=False): +if support_list: +listopt = $LISTOPT +else: +listopt = +return ../selftest/filter-subunit %s--fail-on-empty --prefix=\%s.\ % (listopt, prefix) + + def plantestsuite_loadlist(name, env, cmdline): print -- TEST-LOADLIST -- if env == none: @@ -78,7 +88,8 @@ def plantestsuite_loadlist(name, env, cmdline): print env if isinstance(cmdline, list): cmdline = .join(cmdline) -print %s $LOADLIST 21 | ../selftest/filter-subunit --fail-on-empty --prefix=\%s.\ % (cmdline, fullname) +support_list = ($LISTOPT in cmdline) +print %s $LOADLIST 21 | %s % (cmdline, add_prefix(name, support_list)) def plantestsuite_idlist(name, env, cmdline): @@ -121,7 +132,7 @@ def planpythontestsuite(env, module): def plansmbtorturetestsuite(name, env, options): modname = samba4.%s % name -cmdline = %s %s %s % (valgrindify(smb4torture), options, name) +cmdline = %s $LISTOPT %s %s % (valgrindify(smb4torture), options, name) plantestsuite_loadlist(modname, env, cmdline) @@ -230,15 +241,15 @@ for bindoptions in [seal,padcheck]
