[Samba] Is ACL+extended attributes exclusive with mask/mode family options?

2010-12-29 Thread David Roid
Hello list,

I've got a question from reading Using Samba 3rd, where it puts:

... the final permission is caculated by below filters in the order used by
Samba:
1. Apply any DOS attribute mapping options   I take this as
either map DOS attributes to execute bits, or store DOS attributes in
extended attributes. Correct?
2. Apply the create mask settings
3. Apply the force create mode settings.

This looks reasonable, however I got an unexpected result from

[myshare]
path=...( file system is mount with acl and user_xattr )
writeble=yes
store dos attributes=yes
ea support=yes
vfs objects=acl_xattr
create mask=644

The problem is create mask is not honored and I get 755 for plain text
files created from windows client.

Further experiment reveals that if vfs objects is removed then create
mask works. I know vfs_acl_xattr is needed to keep windows ACL here ( I
suppose it's step1 ), but why doesn't it honor mask options ( step2 and
step3 )? Or settings in the share above are just not supposed to work
together?

Opinions?

Regards
-David
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Facing problem to compile samba-vfs on ubuntu.

2010-12-29 Thread Nil Nik

Hi,

I have to compile samba-vfs for Ubuntu 10.10 for this i did following steps:

Default samba is installed on my system and it's working. Now, i want to 
compile samba-vfs module. so i did following steps:

1. samba source was not on ubuntu also apt-get source samba was fail. so i 
downloaded the samba-3.5.4.tar.gz and extracted it.
2. cd samba-3.5.4/source3 and run ./autogen.sh it gave error ./autogen.sh need 
autoconf 2.53 or later to build samba from GIT. but there was configure file 
so i run ./configure and make and make install.

3. Then i downloaded samba-vscan-0.3.6.tar.bz2 extracted it in 
samba-3.5.4/example/VFS/
4. cd /samba-3.5.4/example/VFS/samba-vscan-0.3.6 then run ./configure it says 
configure: error: ../.././source doesn't exist then i run ./configure 
--with-samba-source=/samba-3.5.4/source3 then it get configure successfully. 
but when run make it gives error Makefile:68: *** Recursive variable `FLAGS' 
references itself (eventually). Stop.

How do i solve this. Please help me.

  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Is ACL+extended attributes exclusive with mask/mode family options?

2010-12-29 Thread TAKAHASHI Motonobu
2010/12/29 David Roid datar...@gmail.com:
 Further experiment reveals that if vfs objects is removed then create
 mask works. I know vfs_acl_xattr is needed to keep windows ACL here ( I
 suppose it's step1 ), but why doesn't it honor mask options ( step2 and
 step3 )? Or settings in the share above are just not supposed to work
 together?

vfs_acl_xattr sets inherit acls = yes automatically.

inherit acls = yes makes permission of files newly created inherited
from the default acls of their parent directory regardless of create mask or
such kind of parameters.

 ... the final permission is caculated by below filters in the order used by
 Samba:
 1. Apply any DOS attribute mapping options               I take this as
 either map DOS attributes to execute bits, or store DOS attributes in
 extended attributes. Correct?
 2. Apply the create mask settings
 3. Apply the force create mode settings.

If neither inherit acls nor inherit permissions is set, you are right.

---
TAKAHASHI Motonobu mo...@samba.gr.jp
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Is ACL+extended attributes exclusive with mask/mode family options?

2010-12-29 Thread David Roid
Thanks for the clarification.

2010/12/29 TAKAHASHI Motonobu mo...@monyo.com

 2010/12/29 David Roid datar...@gmail.com:
  Further experiment reveals that if vfs objects is removed then create
  mask works. I know vfs_acl_xattr is needed to keep windows ACL here ( I
  suppose it's step1 ), but why doesn't it honor mask options ( step2 and
  step3 )? Or settings in the share above are just not supposed to work
  together?

 vfs_acl_xattr sets inherit acls = yes automatically.

 inherit acls = yes makes permission of files newly created inherited
 from the default acls of their parent directory regardless of create mask
 or
 such kind of parameters.

  ... the final permission is caculated by below filters in the order used
 by
  Samba:
  1. Apply any DOS attribute mapping options   I take this as
  either map DOS attributes to execute bits, or store DOS attributes in
  extended attributes. Correct?
  2. Apply the create mask settings
  3. Apply the force create mode settings.

 If neither inherit acls nor inherit permissions is set, you are right.

 ---
 TAKAHASHI Motonobu mo...@samba.gr.jp

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Invitation to connect on LinkedIn

2010-12-29 Thread Muhammad Wasim via LinkedIn
LinkedIn
Muhammad Wasim requested to add you as a connection on LinkedIn:
--

Serge,

I'd like to add you to my professional network on LinkedIn.

- Muhammad

Accept invitation from Muhammad Wasim
http://www.linkedin.com/e/mzateh-gia8ovs3-70/vTWyDe4yCEPPQyWVLZMh1H4yCEPPQGFCi7/blk/I36301091_25/pmpxnSRJrSdvj4R5fnhv9ClRsDgZp6lQs6lzoQ5AomZIpn8_dj9vcjAMcj0Pdzd9bSRylSlejSZRbP8Ud30OdjASc38LrCBxbOYWrSlI/EML_comm_afe/

View invitation from Muhammad Wasim
http://www.linkedin.com/e/mzateh-gia8ovs3-70/vTWyDe4yCEPPQyWVLZMh1H4yCEPPQGFCi7/blk/I36301091_25/0RcBYNej0Nc3cScQALqnpPbOYWrSlI/svi/

--

Why might connecting with Muhammad Wasim be a good idea?

Muhammad Wasim's connections could be useful to you:
After accepting Muhammad Wasim's invitation, check Muhammad Wasim's connections 
to see who else you may know and who you might want an introduction to. 
Building these connections can create opportunities in the future.

 
-- 
(c) 2010, LinkedIn Corporation
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Thanks for responding, Brian, it is greatly appreciated.

To answer your questions:

Samba 3.4.2 is running on Solaris 8.
WINS support is enabled in Samba.
We are using a simple workgroup, not a domain structure.
One single XP workstation, one single Solaris/Samba server.
We are not using DNS, we are using the hosts file in XP.

Bob



-Original Message-
From: Brian McGrew [mailto:br...@visionpro.com] 
Sent: Tuesday, December 28, 2010 3:31 PM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

Hi, Robert!

So, since I don't have the whole thread here, this question may be
redundant, but are you running WINS?  Do you have a Windows DC or just a
Samba DC?  What version of Samba and Solaris, on what hardware?  What is the
network and DNS topology?

-b


On 12/28/10 2:25 PM, Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
robert.hodges@hill.af.mil wrote:

 Excellent information, thank you.
 
 Unfortunately, none of it solved my problem.
 
 I see a lot of The specified network name is no longer available error
 messages all over the internet from Linux users, and none of the very few
 solutions I have come across have worked for me.
 
 Anybody else able to chime in and take a guess as why my XP box is having a
 problem talking to my Solaris/Samba box?  Again, Win2K has no problems talking
 to the Samba box - it's just XP.
 
 Refresh:  This error happens when you try to browse using My Network Places
 in the desktop.  Mapping works fine, access works fine.  Browsing is what
 fails in XP.  I need this to work or I'm looking at a huge and expensive
 documentation change effort that few would understand.
 
 Still desperate for help on this.  This problem happens with WinXP right out
 of the box, we have nothing weird installed.
 
 Help!
 
 
 
 -Original Message-
 From: Chris Smith [mailto:smb...@chrissmith.org]
 Sent: Tuesday, December 28, 2010 12:45 PM
 To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
 Cc: John Drescher; samba@lists.samba.org
 Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly
 
 On Tue, Dec 28, 2010 at 2:23 PM, Hodges, Robert CTR USAF AFMC 520
 SMXS/MXDEC robert.hodges@hill.af.mil wrote:
 Other details:  I do not use a DNS server, I use the hosts file in XP.
 
 Yes, but NetBIOS desires the lmhosts file. See my ancient (but still
 valid) scribblings here:
 http://realcomputerguy.com/networksetup.htm#hosts
 
 Chris
 -- 
To unsubscribe from this list go to the following URL and read
 the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
I'll eventually be trying this, thanks.  But I'm hoping it doesn't have to get 
this ugly yet.



-Original Message-
From: t...@tms3.com [mailto:t...@tms3.com] 
Sent: Tuesday, December 28, 2010 3:48 PM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Cc: Chris Smith; samba@lists.samba.org
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly





Excellent information, thank you.

Unfortunately, none of it solved my problem.


Start sniffing the machine as you do a Network Neighborhood search.  You 
might also check and see just where and how lookups are being done for NETBios 
from an XP box command terminal

nbtstat -r

which will tell you how lookups are being done.  Might lead you to a culprit.




I see a lot of The specified network name is no longer available 
error messages all over the internet from Linux users, and none of the very few 
solutions I have come across have worked for me.

Anybody else able to chime in and take a guess as why my XP box is 
having a problem talking to my Solaris/Samba box? Again, Win2K has no problems 
talking to the Samba box - it's just XP.

Refresh: This error happens when you try to browse using My Network 
Places in the desktop. Mapping works fine, access works fine. Browsing is what 
fails in XP. I need this to work or I'm looking at a huge and expensive 
documentation change effort that few would understand.

Still desperate for help on this. This problem happens with WinXP right 
out of the box, we have nothing weird installed.

Help!



-Original Message-
From: Chris Smith [mailto:smb...@chrissmith.org] 
Sent: Tuesday, December 28, 2010 12:45 PM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Cc: John Drescher; samba@lists.samba.org
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

On Tue, Dec 28, 2010 at 2:23 PM, Hodges, Robert CTR USAF AFMC 520
SMXS/MXDEC robert.hodges@hill.af.mil wrote:


Other details:  I do not use a DNS server, I use the hosts file 
in XP.



Yes, but NetBIOS desires the lmhosts file. See my ancient (but still
valid) scribblings here:
http://realcomputerguy.com/networksetup.htm#hosts

Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] FW: Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Takahashi, thanks for your response.

No antivirus software is installed, firewall disabled completely.
 
I might have to go the sniffer route.  But this is XP and Samba, both old 
products.  I can't imagine that I'd be the first one to have such a ridiculous 
problem trying to get XP to be able to browse a Samba box.  This is fresh WinXP 
right out of the box (with SP3) having this problem, nothing else is installed. 
 I've got about the simplest network configuration in the world.

VERY frustrating.

Bob



-Original Message-
From: TAKAHASHI Motonobu [mailto:mo...@monyo.com] 
Sent: Tuesday, December 28, 2010 4:39 PM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Cc: t...@tms3.com; samba@lists.samba.org
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010/12/29 Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
robert.hodges@hill.af.mil:
 Refresh:  This error happens when you try to browse using My Network Places 
 in the desktop.  Mapping works fine, access works fine.  Browsing is what 
 fails in XP.  I need this to work or I'm looking at a huge and expensive 
 documentation change effort that few would understand.

Windows XP should work well as a browsing client.

Most of problems around browsing are recently cause by firewall or
anti-virus functions.

Do you disable your firewall or anti-virus which blocks incoming UDP
traffic (137/udp and
138/udp)?

Or using sniffer as tms3 said below.

2010/12/29  t...@tms3.com:
 Start sniffing the machine as you do a Network Neighborhood search.  You
 might also check and see just where and how lookups are being done for
 NETBios from an XP box command terminal

 nbtstat -r

 which will tell you how lookups are being done.  Might lead you to a
 culprit.

---
TAKAHASHI Motonobu mo...@samba.gr.jp
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
John, thanks for the response.

Yes, machine names are standard text, no special characters with the
exception of the Samba box, which has an underscore in the name.

If the workstation is Win2K, everything works great, including browsing.
XP, however, has the browsing problem (The specified network is no
longer available).  And this is with a fresh install of XP.

Bob

  

-Original Message-
From: John Drescher [mailto:dresche...@gmail.com] 
Sent: Tuesday, December 28, 2010 8:12 PM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Cc: Chris Smith; samba@lists.samba.org
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

On Tue, Dec 28, 2010 at 5:25 PM, Hodges, Robert CTR USAF AFMC 520
SMXS/MXDEC robert.hodges@hill.af.mil wrote:
 Excellent information, thank you.

 Unfortunately, none of it solved my problem.


Do you have a valid NETBIOS domain or workstation name? I mean less
than 16 characters and absolutely no . in the name.

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
John, everyone,

Whatever needs to be running on the Solaris box is running properly.
Windows 2000 workstation has no problem accessing or browsing the
Solaris box.  It is only XP that is producing the error.

All of your suggestions are excellent, PLEASE keep them coming!

Microsoft tech support is floundering around on this one, I'm hoping
that you knowledgeable Samba experts will be able to save my life here.

Bob


-Original Message-
From: John Drescher [mailto:dresche...@gmail.com] 
Sent: Tuesday, December 28, 2010 8:16 PM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Cc: Chris Smith; samba@lists.samba.org
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

On Tue, Dec 28, 2010 at 10:12 PM, John Drescher dresche...@gmail.com
wrote:
 On Tue, Dec 28, 2010 at 5:25 PM, Hodges, Robert CTR USAF AFMC 520
 SMXS/MXDEC robert.hodges@hill.af.mil wrote:
 Excellent information, thank you.

 Unfortunately, none of it solved my problem.


 Do you have a valid NETBIOS domain or workstation name? I mean less
 than 16 characters and absolutely no . in the name.


Also make sure that nmbd is running on the linux box.

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Newbie : bad uid in the smbpasswd file ?

2010-12-29 Thread Gary Dale

On 28/12/10 06:43 PM, Francois Lafont wrote:

tdb for the backend?
 
The easiest way to get things working is to stop fighting the 
distributors. Ubuntu gives you a fully functioning basic Samba 
configuration. SWAT allows you to easily configure it to add shares, 
printers, etc..


Breaking Samba, like anything else, is easier to do than to make it work 
correctly. When you replace Ubuntu's smb.conf file with your own 
hacked-up version, you will get the same results you previously had.


Use Ubuntu's default smb.conf as your starting point then use SWAT to 
update it.


So far as learning is concerned, try following Samba by Example or the 
Samba Howto Collection to get Samba to do something useful in a 
reasonably secure fashion.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Everyone,

Both the Microsoft Network Monitor (sniffer) and Nbtstat -r shows that 
Windows XP is not acknowledging the broadcast packets from the Samba box, which 
keeps XP from being able to browse the server because no master browser is 
being recognized.  If the Computer Browser service was enabled in XP, 

Widows 2000, however, acknowledges them just fine, even with Comptuer Browser 
disabled, and all is well.

Any suggestions?  If you folks help me figure this out, you'll be heroes, 
because I have come across a lot of help requests all over the internet that go 
way back many years for this very same problem, few solutions, and none of them 
resulting in a solution that works for me.

Bob


-Original Message-
From: t...@tms3.com [mailto:t...@tms3.com] 
Sent: Tuesday, December 28, 2010 3:48 PM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Cc: Chris Smith; samba@lists.samba.org
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly





Excellent information, thank you.

Unfortunately, none of it solved my problem.


Start sniffing the machine as you do a Network Neighborhood search.  You 
might also check and see just where and how lookups are being done for NETBios 
from an XP box command terminal

nbtstat -r

which will tell you how lookups are being done.  Might lead you to a culprit.




I see a lot of The specified network name is no longer available 
error messages all over the internet from Linux users, and none of the very few 
solutions I have come across have worked for me.

Anybody else able to chime in and take a guess as why my XP box is 
having a problem talking to my Solaris/Samba box? Again, Win2K has no problems 
talking to the Samba box - it's just XP.

Refresh: This error happens when you try to browse using My Network 
Places in the desktop. Mapping works fine, access works fine. Browsing is what 
fails in XP. I need this to work or I'm looking at a huge and expensive 
documentation change effort that few would understand.

Still desperate for help on this. This problem happens with WinXP right 
out of the box, we have nothing weird installed.

Help!



-Original Message-
From: Chris Smith [mailto:smb...@chrissmith.org] 
Sent: Tuesday, December 28, 2010 12:45 PM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Cc: John Drescher; samba@lists.samba.org
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

On Tue, Dec 28, 2010 at 2:23 PM, Hodges, Robert CTR USAF AFMC 520
SMXS/MXDEC robert.hodges@hill.af.mil wrote:


Other details:  I do not use a DNS server, I use the hosts file 
in XP.



Yes, but NetBIOS desires the lmhosts file. See my ancient (but still
valid) scribblings here:
http://realcomputerguy.com/networksetup.htm#hosts

Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] confusion about using samba as NT4 PDC with ldapsam backend

2010-12-29 Thread Jon Detert
Hello,

I want to use samba v3.3.x to implement an NT4/Win2k style domain:
a samba PDC and a samba BDC, using ldapsam for the 'passdb backend'.  I plan
to use RedHat Directory Server v8.2 as the ldap server.

I'm trying to sort out how user/group management and nss will work.

I'm confused about how/when the samba-supplied ldap schema is used (I mean
the schema that's in the samba distribution, that contains the
'sambaSamAccount' objectClass).

I understand that I have to add/activate the schema within my ldap server
(and that in its distributed form, it's for openLDAP, and so I have to
convert it to a syntax suitable for RedHat DirServer).

However, I don't understand how to make samba use it.

Does the simple fact of specifying 'passdb backend' = ldapsam imply that
this schema is used?

How do the samba ObjectClasses and their attributes get set for new users?
E.g. will they be set automagically if I specify the 'add
{user|group|machine} script' settings in the smb.conf?  If not, how then?

The ldap server is already populated with inetOrgPerson information for my
user population.  I've just added the samba schema and the posixAccount
schema.  How should I populate the samba and posixAccount ObjectClasses and
attributes for the existing users?  I.e. run a one-time script to populate
them, or is there a more clever way?  If the former, are there ready-made
scripts to do this, or do I need to write my own?

Once the samba schema objects and attributes are populated, how does smbd
know about them?  Will I need to run winbind in order for samba to map posix
UIDs and GIDs to SIDs and RIDs, or will that be done automagically by virtue
of specifying that the 'passdb backend' is ldapsam, and populating the samba
schema?

Even if I don't need to run winbind, should I?  I'll need to use nss in any
case, but if I use nss_ldap, I think that the o.s. won't grok nested
groups.  If I use nss_winbind, I think it will.

AtDhVaAnNkCsE,

Jon
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Brian,

Excellent response, thanks for giving me things to consider and check.

Yes, NetBIOS over TCPIP is enabled on XP.  Also, XP is set to use the Samba box 
as WINS server.

Using nbtstat -r and NetMon, I have discovered that WinXP is not 
acknowledging the broadcasts from the Samba box.  Windows 2000, on the other 
hand, recognizes them just fine, so I know the Samba box is configured 
correctly.  

If the Computer Browser service is enabled in XP, XP will elect itself as the 
master browser because it doesn't acknowledge the Samba box's server 
broadcasts.  But I can't have XP doing that, the Samba box MUST be seen as the 
master for my mission-critical needs.  Windows 2000 has no problems with this.

Bob




-Original Message-
From: Brian McGrew [mailto:br...@visionpro.com] 
Sent: Wednesday, December 29, 2010 8:24 AM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

Hi, Bob...

I remember having a problem similar to this a few years back on Solaris 8
where the WINS traffic was somehow being sent to the multicast network on
Solaris.

Have you configured XP to use the SMB Server as a WINS server under network
properties?

Do you have NetBios over TCP enabled on XP?

Have you sniffed the network with tcpdump or wireshark to see if you're
actually seeing the WINS traffic going across the wire?

This is a WINS problem, almost guaranteed, since you can map to the share,
but not see it in Network Places.

-b


On 12/29/10 5:56 AM, Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
robert.hodges@hill.af.mil wrote:

 Thanks for responding, Brian, it is greatly appreciated.
 
 To answer your questions:
 
 Samba 3.4.2 is running on Solaris 8.
 WINS support is enabled in Samba.
 We are using a simple workgroup, not a domain structure.
 One single XP workstation, one single Solaris/Samba server.
 We are not using DNS, we are using the hosts file in XP.
 
 Bob
 
 
 
 -Original Message-
 From: Brian McGrew [mailto:br...@visionpro.com]
 Sent: Tuesday, December 28, 2010 3:31 PM
 To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
 Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly
 
 Hi, Robert!
 
 So, since I don't have the whole thread here, this question may be
 redundant, but are you running WINS?  Do you have a Windows DC or just a
 Samba DC?  What version of Samba and Solaris, on what hardware?  What is the
 network and DNS topology?
 
 -b
 
 
 On 12/28/10 2:25 PM, Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
 robert.hodges@hill.af.mil wrote:
 
 Excellent information, thank you.
 
 Unfortunately, none of it solved my problem.
 
 I see a lot of The specified network name is no longer available error
 messages all over the internet from Linux users, and none of the very few
 solutions I have come across have worked for me.
 
 Anybody else able to chime in and take a guess as why my XP box is having a
 problem talking to my Solaris/Samba box?  Again, Win2K has no problems
 talking
 to the Samba box - it's just XP.
 
 Refresh:  This error happens when you try to browse using My Network Places
 in the desktop.  Mapping works fine, access works fine.  Browsing is what
 fails in XP.  I need this to work or I'm looking at a huge and expensive
 documentation change effort that few would understand.
 
 Still desperate for help on this.  This problem happens with WinXP right out
 of the box, we have nothing weird installed.
 
 Help!
 
 
 
 -Original Message-
 From: Chris Smith [mailto:smb...@chrissmith.org]
 Sent: Tuesday, December 28, 2010 12:45 PM
 To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
 Cc: John Drescher; samba@lists.samba.org
 Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly
 
 On Tue, Dec 28, 2010 at 2:23 PM, Hodges, Robert CTR USAF AFMC 520
 SMXS/MXDEC robert.hodges@hill.af.mil wrote:
 Other details:  I do not use a DNS server, I use the hosts file in XP.
 
 Yes, but NetBIOS desires the lmhosts file. See my ancient (but still
 valid) scribblings here:
 http://realcomputerguy.com/networksetup.htm#hosts
 
 Chris
 -- 
 To unsubscribe from this list go to the following URL and read
 the
 instructions:  https://lists.samba.org/mailman/options/samba
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread Chris Smith
On Wed, Dec 29, 2010 at 10:32 AM, Hodges, Robert CTR USAF AFMC 520
SMXS/MXDEC robert.hodges@hill.af.mil wrote:
 If the Computer Browser service is enabled in XP, XP will elect itself as the 
 master browser because it doesn't acknowledge the Samba box's server 
 broadcasts.

I think you need the Browser service enabled. Try some registry tweaks
and reboot:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser\Parameters\ -
IsDomainMaster FALSE
MaintainServerList Disabled

Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Brian,

Thank you so much for your responses.  I've got more effort and info out of you 
than a week of Microsoft support.

To answer your questions:

1.  Firewall off (removed, actually).  No domain membership (workgroup only).

2.  No av/as/am software of any kind (not needed - closed, secure network)

3.  smb.conf:  Looks good on my end, however, OS LEVEL was set to 10.  Raising 
it to 65 did not fix the problem.


Bob





-Original Message-
From: Brian McGrew [mailto:br...@visionpro.com] 
Sent: Wednesday, December 29, 2010 9:10 AM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

Ah, OK...  So that begs a couple more questions...

1)  Is the XP firewall on or off???  When you join XP to a domain it makes
firewall exceptions for you.  If it's on, do you have the ability to turn it
off for an hour or two and see if XP picks up the SMB server?

2)  What are you running for AV/AS/AM software, anything???

3)  Do you have an OS LEVEL directive in your smb.conf file???  I'm thinking
your smb.conf file should look something like this:

[global]
netbios name = toltec
workgroup = METRAN
security = user
encrypt passwords = yes
wins support = yes

# The following three lines ensure that the Samba
# server will maintain the role of master browser.
# Make sure no other Samba server has its OS level
# set higher than it is here.

local master = yes
preferred master = yes
os level = 65

And you can find the whole Appendix here at
http://www.samba.org/samba/docs/using_samba/appa.html for more configuration
stuff.

-brian


On 12/29/10 7:32 AM, Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
robert.hodges@hill.af.mil wrote:

 Brian,
 
 Excellent response, thanks for giving me things to consider and check.
 
 Yes, NetBIOS over TCPIP is enabled on XP.  Also, XP is set to use the Samba
 box as WINS server.
 
 Using nbtstat -r and NetMon, I have discovered that WinXP is not
 acknowledging the broadcasts from the Samba box.  Windows 2000, on the other
 hand, recognizes them just fine, so I know the Samba box is configured
 correctly.  
 
 If the Computer Browser service is enabled in XP, XP will elect itself as the
 master browser because it doesn't acknowledge the Samba box's server
 broadcasts.  But I can't have XP doing that, the Samba box MUST be seen as the
 master for my mission-critical needs.  Windows 2000 has no problems with this.
 
 Bob
 
 
 
 
 -Original Message-
 From: Brian McGrew [mailto:br...@visionpro.com]
 Sent: Wednesday, December 29, 2010 8:24 AM
 To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
 Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly
 
 Hi, Bob...
 
 I remember having a problem similar to this a few years back on Solaris 8
 where the WINS traffic was somehow being sent to the multicast network on
 Solaris.
 
 Have you configured XP to use the SMB Server as a WINS server under network
 properties?
 
 Do you have NetBios over TCP enabled on XP?
 
 Have you sniffed the network with tcpdump or wireshark to see if you're
 actually seeing the WINS traffic going across the wire?
 
 This is a WINS problem, almost guaranteed, since you can map to the share,
 but not see it in Network Places.
 
 -b
 
 
 On 12/29/10 5:56 AM, Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
 robert.hodges@hill.af.mil wrote:
 
 Thanks for responding, Brian, it is greatly appreciated.
 
 To answer your questions:
 
 Samba 3.4.2 is running on Solaris 8.
 WINS support is enabled in Samba.
 We are using a simple workgroup, not a domain structure.
 One single XP workstation, one single Solaris/Samba server.
 We are not using DNS, we are using the hosts file in XP.
 
 Bob
 
 
 
 -Original Message-
 From: Brian McGrew [mailto:br...@visionpro.com]
 Sent: Tuesday, December 28, 2010 3:31 PM
 To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
 Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly
 
 Hi, Robert!
 
 So, since I don't have the whole thread here, this question may be
 redundant, but are you running WINS?  Do you have a Windows DC or just a
 Samba DC?  What version of Samba and Solaris, on what hardware?  What is the
 network and DNS topology?
 
 -b
 
 
 On 12/28/10 2:25 PM, Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
 robert.hodges@hill.af.mil wrote:
 
 Excellent information, thank you.
 
 Unfortunately, none of it solved my problem.
 
 I see a lot of The specified network name is no longer available error
 messages all over the internet from Linux users, and none of the very few
 solutions I have come across have worked for me.
 
 Anybody else able to chime in and take a guess as why my XP box is having a
 problem talking to my Solaris/Samba box?  Again, Win2K has no problems
 talking
 to the Samba box - it's just XP.
 
 Refresh:  This error happens when you try to browse using My Network
 Places
 in the desktop.  Mapping works fine, 

Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread tms3









Everyone,

Both the Microsoft Network Monitor (sniffer) and Nbtstat -r shows 
that Windows XP is not acknowledging the broadcast packets from the 
Samba box,

Well, that's an interesting statement...

So, XP spouts a request to the WINS server, it responds and the packet 
is dropped?


Or is XP NOT sending a request at all???


which keeps XP from being able to browse the server because no master 
browser is being recognized.  If the Computer Browser service was 
enabled in XP,


Widows 2000, however, acknowledges them just fine, even with Comptuer 
Browser disabled, and all is well.


Any suggestions?  If you folks help me figure this out, you'll be 
heroes, because I have come across a lot of help requests all over the 
internet that go way back many years for this very same problem, few 
solutions, and none of them resulting in a solution that works for me.


Bob


-Original Message-
From: t...@tms3.com [mailto:t...@tms3.com]
Sent: Tuesday, December 28, 2010 3:48 PM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Cc: Chris Smith; samba@lists.samba.org
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba 
Properly






Excellent information, thank you.

Unfortunately, none of it solved my problem.


Start sniffing the machine as you do a Network Neighborhood search.  
You might also check and see just where and how lookups are being done 
for NETBios from an XP box command terminal


nbtstat -r

which will tell you how lookups are being done.  Might lead you to a 
culprit.





I see a lot of The specified network name is no longer available 
error messages all over the internet from Linux users, and none of the 
very few solutions I have come across have worked for me.


Anybody else able to chime in and take a guess as why my XP box is 
having a problem talking to my Solaris/Samba box? Again, Win2K has no 
problems talking to the Samba box - it's just XP.


Refresh: This error happens when you try to browse using My Network 
Places in the desktop. Mapping works fine, access works fine. 
Browsing is what fails in XP. I need this to work or I'm looking at a 
huge and expensive documentation change effort that few would 
understand.


Still desperate for help on this. This problem happens with WinXP 
right out of the box, we have nothing weird installed.


Help!



-Original Message-
From: Chris Smith [mailto:smb...@chrissmith.org]
Sent: Tuesday, December 28, 2010 12:45 PM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Cc: John Drescher; samba@lists.samba.org
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba 
Properly


On Tue, Dec 28, 2010 at 2:23 PM, Hodges, Robert CTR USAF AFMC 520
SMXS/MXDEC robert.hodges@hill.af.mil wrote:


Other details:  I do not use a DNS server, I use the hosts file in XP.



Yes, but NetBIOS desires the lmhosts file. See my ancient (but still
valid) scribblings here:
http://realcomputerguy.com/networksetup.htm#hosts

Chris
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba



--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Chris, thanks for the reply and good idea.

The problem that browstat status (MS support tools for XP) reveals is that XP 
does see the Samba server as the master browser but is unable to pull down the 
browse list from Samba.

Anybody know how to fix the problem of XP not being able to get the browse list 
from Samba?

Bob



-Original Message-
From: Chris Smith [mailto:smb...@chrissmith.org] 
Sent: Wednesday, December 29, 2010 9:31 AM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Cc: Brian McGrew; samba@lists.samba.org
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

On Wed, Dec 29, 2010 at 10:32 AM, Hodges, Robert CTR USAF AFMC 520
SMXS/MXDEC robert.hodges@hill.af.mil wrote:
 If the Computer Browser service is enabled in XP, XP will elect itself as the 
 master browser because it doesn't acknowledge the Samba box's server 
 broadcasts.

I think you need the Browser service enabled. Try some registry tweaks
and reboot:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser\Parameters\ -
IsDomainMaster FALSE
MaintainServerList Disabled

Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] confusion about using samba as NT4 PDC with ldapsam backend

2010-12-29 Thread TAKAHASHI Motonobu
2010/12/30 Jon Detert jdet...@infinityhealthcare.com:
 How do the samba ObjectClasses and their attributes get set for new users?
 E.g. will they be set automagically if I specify the 'add
 {user|group|machine} script' settings in the smb.conf?  If not, how then?

Use smbldap-tools or ldapsam:editposix parameter.
If you have already migrated LDAP users, smbldap-tools will be easy to use,
although mbldap-tools are not maintenanced.

There is a webpage that mentions about ldapsam:editposix:
  http://wiki.samba.org/index.php/Ldapsam_Editposix

Or make scripts like smbldap-tools by yourself.

 I'm confused about how/when the samba-supplied ldap schema is used (I mean
 the schema that's in the samba distribution, that contains the
 'sambaSamAccount' objectClass).
(snip)
 Does the simple fact of specifying 'passdb backend' = ldapsam imply that
 this schema is used?

Yes, Samba assumes proper schema is defined in the LDAP directory.

---
TAKAHASHI Motonobu mo...@samba.gr.jp

2010/12/30 Jon Detert jdet...@infinityhealthcare.com:
 Hello,

 I want to use samba v3.3.x to implement an NT4/Win2k style domain:
 a samba PDC and a samba BDC, using ldapsam for the 'passdb backend'.  I plan
 to use RedHat Directory Server v8.2 as the ldap server.

 I'm trying to sort out how user/group management and nss will work.

 I'm confused about how/when the samba-supplied ldap schema is used (I mean
 the schema that's in the samba distribution, that contains the
 'sambaSamAccount' objectClass).

 I understand that I have to add/activate the schema within my ldap server
 (and that in its distributed form, it's for openLDAP, and so I have to
 convert it to a syntax suitable for RedHat DirServer).

 However, I don't understand how to make samba use it.

 Does the simple fact of specifying 'passdb backend' = ldapsam imply that
 this schema is used?

 How do the samba ObjectClasses and their attributes get set for new users?
 E.g. will they be set automagically if I specify the 'add
 {user|group|machine} script' settings in the smb.conf?  If not, how then?

 The ldap server is already populated with inetOrgPerson information for my
 user population.  I've just added the samba schema and the posixAccount
 schema.  How should I populate the samba and posixAccount ObjectClasses and
 attributes for the existing users?  I.e. run a one-time script to populate
 them, or is there a more clever way?  If the former, are there ready-made
 scripts to do this, or do I need to write my own?

 Once the samba schema objects and attributes are populated, how does smbd
 know about them?  Will I need to run winbind in order for samba to map posix
 UIDs and GIDs to SIDs and RIDs, or will that be done automagically by virtue
 of specifying that the 'passdb backend' is ldapsam, and populating the samba
 schema?

 Even if I don't need to run winbind, should I?  I'll need to use nss in any
 case, but if I use nss_ldap, I think that the o.s. won't grok nested
 groups.  If I use nss_winbind, I think it will.

 AtDhVaAnNkCsE,

 Jon
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
TMS3,

Thanks for joining in, really appreciate it.

I'm trying to keep it all straight, I'm relatively new to Samba (but learning 
quickly).

What I now know:

1.  Sniffer on XP box reveals that XP does see the broadcasts from Samba. 

2.  The Microsoft support tool/command Browstat status shows that XP does 
recognize Samba as the server (if Computer Browser service disabled, otherwise 
XP may/may not elect itself as the master - unpredictable), but also shows that 
XP is unable to pull down the browse list form the Samba box.  

XP being unable to pull down the browse list form the Samba box is where things 
are broken.  Everything else looks good.

Any ideas on how to get that browse list from Samba to XP?

Bob



-Original Message-
From: t...@tms3.com [mailto:t...@tms3.com] 
Sent: Wednesday, December 29, 2010 9:54 AM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Cc: samba@lists.samba.org
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly






Everyone,

Both the Microsoft Network Monitor (sniffer) and Nbtstat -r shows 
that Windows XP is not acknowledging the broadcast packets from the Samba box,

Well, that's an interesting statement...

So, XP spouts a request to the WINS server, it responds and the packet is 
dropped?

Or is XP NOT sending a request at all??? 


which keeps XP from being able to browse the server because no master 
browser is being recognized. If the Computer Browser service was enabled in 
XP, 

Widows 2000, however, acknowledges them just fine, even with Comptuer 
Browser disabled, and all is well.

Any suggestions? If you folks help me figure this out, you'll be 
heroes, because I have come across a lot of help requests all over the internet 
that go way back many years for this very same problem, few solutions, and none 
of them resulting in a solution that works for me.

Bob


-Original Message-
From: t...@tms3.com [mailto:t...@tms3.com] 
Sent: Tuesday, December 28, 2010 3:48 PM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Cc: Chris Smith; samba@lists.samba.org
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly





Excellent information, thank you.

Unfortunately, none of it solved my problem.


Start sniffing the machine as you do a Network Neighborhood search. 
You might also check and see just where and how lookups are being done for 
NETBios from an XP box command terminal

nbtstat -r

which will tell you how lookups are being done. Might lead you to a 
culprit.




I see a lot of The specified network name is no longer available 
error messages all over the internet from Linux users, and none of the very few 
solutions I have come across have worked for me.

Anybody else able to chime in and take a guess as why my XP box is 
having a problem talking to my Solaris/Samba box? Again, Win2K has no problems 
talking to the Samba box - it's just XP.

Refresh: This error happens when you try to browse using My Network 
Places in the desktop. Mapping works fine, access works fine. Browsing is what 
fails in XP. I need this to work or I'm looking at a huge and expensive 
documentation change effort that few would understand.

Still desperate for help on this. This problem happens with WinXP right 
out of the box, we have nothing weird installed.

Help!



-Original Message-
From: Chris Smith [mailto:smb...@chrissmith.org] 
Sent: Tuesday, December 28, 2010 12:45 PM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Cc: John Drescher; samba@lists.samba.org
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

On Tue, Dec 28, 2010 at 2:23 PM, Hodges, Robert CTR USAF AFMC 520
SMXS/MXDEC robert.hodges@hill.af.mil wrote:


Other details: I do not use a DNS server, I use the hosts file in XP.



Yes, but NetBIOS desires the lmhosts file. See my ancient (but still
valid) scribblings here:
http://realcomputerguy.com/networksetup.htm#hosts

Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread Jeremy Allison
On Wed, Dec 29, 2010 at 10:22:46AM -0700, Hodges, Robert CTR USAF AFMC 520 
SMXS/MXDEC wrote:
 TMS3,
 
 Thanks for joining in, really appreciate it.
 
 I'm trying to keep it all straight, I'm relatively new to Samba (but learning 
 quickly).
 
 What I now know:
 
 1.  Sniffer on XP box reveals that XP does see the broadcasts from Samba. 
 
 2.  The Microsoft support tool/command Browstat status shows that XP does 
 recognize Samba as the server (if Computer Browser service disabled, 
 otherwise XP may/may not elect itself as the master - unpredictable), but 
 also shows that XP is unable to pull down the browse list form the Samba box. 
  

This is the key. Separate out the logs by incoming client name,
run smbd at debug level 10 and then look in the log.xp client name
to see if it's trying to fetch the browse list, and if so why
it goes wrong.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba crashes floods logfiles: smbd/notify_inotify.c:244(inotify_handler) - No data on inotify fd?!

2010-12-29 Thread Tom H. Lautenbacher

Dear Group members!

Since I have set up a Samba PDC-Server (openSUSE 11.2-64bit with default 
package Samba 3.4.3) approx. 8 months ago, I have encountered 3 or 4 
times a severe crash of Samba.


What happens is that all over a sudden Samba floods /var/log/messages 
and /var/log/warn with the following message (cropped out 
date/time/servername, etc.):


smbd[19724]: smbd/notify_inotify.c:244(inotify_handler)
smbd[19724]: No data on inotify fd?!


This message is being repeated until those 2 logfiles have filled up the 
/var partition.
Samba is not responsive anymore and due to a filled up /var the whole 
server is malfunctioning.


The only remedy that I had until today is to reboot the server and 
delete ../messages  ../warn.
Everything works fine then, until a few months later it occurs again 
without any obvious reason.


I updated to Samba 3.5.6 (From the official openSUSE-Samba-Repository: 
http://download.opensuse.org/repositories/network:/samba:/misc/openSUSE_11.2/noarch/) 
after the second time it occured, but it happened another 2 times after 
the update, too.


Is there anybody out there who could help me with this one?
I am thankful for any hint or peace of advice!!

Best regards
Tom H. Lautenbacher
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Chris,

Good suggestion, I tried it.

The registry change and enabling the browser service produced the same results 
as before, same error (The specified network name is no longer available.).

However, it did allow Windows XP to force itself to use the Samba server as the 
master browser without having to disable the Computer Browser service, which is 
what I had been doing.  So that was nice.

Any other suggestions?

Bob




-Original Message-
From: Chris Smith [mailto:smb...@chrissmith.org] 
Sent: Wednesday, December 29, 2010 9:31 AM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Cc: Brian McGrew; samba@lists.samba.org
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

On Wed, Dec 29, 2010 at 10:32 AM, Hodges, Robert CTR USAF AFMC 520
SMXS/MXDEC robert.hodges@hill.af.mil wrote:
 If the Computer Browser service is enabled in XP, XP will elect itself as the 
 master browser because it doesn't acknowledge the Samba box's server 
 broadcasts.

I think you need the Browser service enabled. Try some registry tweaks
and reboot:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser\Parameters\ -
IsDomainMaster FALSE
MaintainServerList Disabled

Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Brian,

Unfortunately, I'm not able to upgrade, it's a locked system at this
point.  Since it works great with a Windows 2000 client, one would think
it would also work find with XP.  

Still at the drawing board...

Bob


-Original Message-
From: Brian McGrew [mailto:br...@visionpro.com] 
Sent: Wednesday, December 29, 2010 10:31 AM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

Bob,

Do you have the ability or means to upgrade Samba to version 3.5.6 on
your
Solaris machine???  It looks like there are a few, but considerable
changes
in the way packet formulation is done in this version.

I should qualify that and say that I am not on the samba dev team; but I
do
my share of software engineering and development and am no stranger to
building samba (or complete operating systems) from source.

-brian


On 12/29/10 9:22 AM, Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
robert.hodges@hill.af.mil wrote:

 TMS3,
 
 Thanks for joining in, really appreciate it.
 
 I'm trying to keep it all straight, I'm relatively new to Samba (but
learning
 quickly).
 
 What I now know:
 
 1.  Sniffer on XP box reveals that XP does see the broadcasts from
Samba.
 
 2.  The Microsoft support tool/command Browstat status shows that XP
does
 recognize Samba as the server (if Computer Browser service disabled,
otherwise
 XP may/may not elect itself as the master - unpredictable), but also
shows
 that XP is unable to pull down the browse list form the Samba box.
 
 XP being unable to pull down the browse list form the Samba box is
where
 things are broken.  Everything else looks good.
 
 Any ideas on how to get that browse list from Samba to XP?
 
 Bob
 
 
 
 -Original Message-
 From: t...@tms3.com [mailto:t...@tms3.com]
 Sent: Wednesday, December 29, 2010 9:54 AM
 To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
 Cc: samba@lists.samba.org
 Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba
Properly
 
 
 
 
 
 
 Everyone,
 
 Both the Microsoft Network Monitor (sniffer) and Nbtstat -r shows
that
 Windows XP is not acknowledging the broadcast packets from the Samba
box,
 
 Well, that's an interesting statement...
 
 So, XP spouts a request to the WINS server, it responds and the packet
is
 dropped?
 
 Or is XP NOT sending a request at all???
 
 
 which keeps XP from being able to browse the server because no master
browser
 is being recognized. If the Computer Browser service was enabled in
XP,
 
 Widows 2000, however, acknowledges them just fine, even with Comptuer
Browser
 disabled, and all is well.
 
 Any suggestions? If you folks help me figure this out, you'll be
heroes,
 because I have come across a lot of help requests all over the
internet that
 go way back many years for this very same problem, few solutions, and
none of
 them resulting in a solution that works for me.
 
 Bob
 
 
 -Original Message-
 From: t...@tms3.com [mailto:t...@tms3.com]
 Sent: Tuesday, December 28, 2010 3:48 PM
 To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
 Cc: Chris Smith; samba@lists.samba.org
 Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba
Properly
 
 
 
 
 
 Excellent information, thank you.
 
 Unfortunately, none of it solved my problem.
 
 
 Start sniffing the machine as you do a Network Neighborhood search.
You
 might also check and see just where and how lookups are being done for
NETBios
 from an XP box command terminal
 
 nbtstat -r
 
 which will tell you how lookups are being done. Might lead you to a
culprit.
 
 
 
 
 I see a lot of The specified network name is no longer available
error
 messages all over the internet from Linux users, and none of the very
few
 solutions I have come across have worked for me.
 
 Anybody else able to chime in and take a guess as why my XP box is
having a
 problem talking to my Solaris/Samba box? Again, Win2K has no problems
talking
 to the Samba box - it's just XP.
 
 Refresh: This error happens when you try to browse using My Network
Places
 in the desktop. Mapping works fine, access works fine. Browsing is
what fails
 in XP. I need this to work or I'm looking at a huge and expensive
 documentation change effort that few would understand.
 
 Still desperate for help on this. This problem happens with WinXP
right out of
 the box, we have nothing weird installed.
 
 Help!
 
 
 
 -Original Message-
 From: Chris Smith [mailto:smb...@chrissmith.org]
 Sent: Tuesday, December 28, 2010 12:45 PM
 To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
 Cc: John Drescher; samba@lists.samba.org
 Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba
Properly
 
 On Tue, Dec 28, 2010 at 2:23 PM, Hodges, Robert CTR USAF AFMC 520
 SMXS/MXDEC robert.hodges@hill.af.mil wrote:
 
 
 Other details: I do not use a DNS server, I use the hosts file in XP.
 
 
 
 Yes, but NetBIOS desires the lmhosts file. See my ancient (but still
 valid) scribblings here:
 

Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Jeremy,

This makes sense, I'll try it.  Excellent idea.

I'm new to Samba, so how do I get it to run in debug mode and do the
logging option you mentioned?

Sorry to sound so juvenile, my experience with Samba is in reverse -
getting Linux boxes to use Windows servers.

Bob



-Original Message-
From: Jeremy Allison [mailto:j...@samba.org] 
Sent: Wednesday, December 29, 2010 10:33 AM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Cc: t...@tms3.com; samba@lists.samba.org
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

On Wed, Dec 29, 2010 at 10:22:46AM -0700, Hodges, Robert CTR USAF AFMC
520 SMXS/MXDEC wrote:
 TMS3,
 
 Thanks for joining in, really appreciate it.
 
 I'm trying to keep it all straight, I'm relatively new to Samba (but
learning quickly).
 
 What I now know:
 
 1.  Sniffer on XP box reveals that XP does see the broadcasts from
Samba. 
 
 2.  The Microsoft support tool/command Browstat status shows that XP
does recognize Samba as the server (if Computer Browser service
disabled, otherwise XP may/may not elect itself as the master -
unpredictable), but also shows that XP is unable to pull down the browse
list form the Samba box.  

This is the key. Separate out the logs by incoming client name,
run smbd at debug level 10 and then look in the log.xp client name
to see if it's trying to fetch the browse list, and if so why
it goes wrong.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba crashes floods logfiles: smbd/notify_inotify.c:244(inotify_handler) - No data on inotify fd?!

2010-12-29 Thread Tom H. Lautenbacher

On 2010-12-29 19:52, Tom H. Lautenbacher wrote:


smbd[19724]: smbd/notify_inotify.c:244(inotify_handler)
smbd[19724]: No data on inotify fd?!


Here is my /etc/samba/smb.conf
(all default values and comments are cropped automatically by SWAT):

[global]
workgroup = SOMEGROUPNAME.SGN
server string =
max open files = 1
	add machine script = /usr/sbin/useradd -c SambaMachine -g sambamachines 
-G  -d /dev/null/ -s /bin/false %u

logon script = %G.bat
logon path = \\%N\profiles\%U\%a
logon drive = z:
domain logons = Yes
os level = 255
preferred master = Yes
domain master = Yes
wins support = Yes
hosts allow = 10.31.40.0/255.255.255.0
hosts deny = 10.31.40.1
follow symlinks = No

[homes]
comment = Home directory
valid users = %S, %D%w%S
write list = %S, %D%w%S
force group = root
create mask = 0600
directory mask = 0700
browseable = No

[profiles]
comment = Windows User Profiles
path = /somepath/somedir
force group = root
read only = No
create mask = 0600
directory mask = 0700
map archive = No
map readonly = no
store dos attributes = Yes
browseable = No

[netlogon]
comment = User logon scripts
path = /var/lib/samba/netlogon
browseable = No

followed by some custom shares for normal data...
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread tms3






Jeremy,

This makes sense, I'll try it.  Excellent idea.

I'm new to Samba, so how do I get it to run in debug mode and do the
logging option you mentioned?


log level = 10 in smb.conf.

Covered in the man page.  man smb.conf




Sorry to sound so juvenile, my experience with Samba is in reverse -
getting Linux boxes to use Windows servers.

Bob



-Original Message-
From: Jeremy Allison [mailto:j...@samba.org]
Sent: Wednesday, December 29, 2010 10:33 AM
To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
Cc: t...@tms3.com; samba@lists.samba.org
Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba 
Properly


On Wed, Dec 29, 2010 at 10:22:46AM -0700, Hodges, Robert CTR USAF AFMC
520 SMXS/MXDEC wrote:


TMS3,

Thanks for joining in, really appreciate it.

I'm trying to keep it all straight, I'm relatively new to Samba (but

learning quickly).



What I now know:

1.  Sniffer on XP box reveals that XP does see the broadcasts from

Samba.



2.  The Microsoft support tool/command Browstat status shows that XP

does recognize Samba as the server (if Computer Browser service
disabled, otherwise XP may/may not elect itself as the master -
unpredictable), but also shows that XP is unable to pull down the 
browse

list form the Samba box.

This is the key. Separate out the logs by incoming client name,
run smbd at debug level 10 and then look in the log.xp client name
to see if it's trying to fetch the browse list, and if so why
it goes wrong.

Jeremy.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

You can set the logs to level 10 using the params in the manual for
smb.conf. Also a neat trick, though, is to include the config file
smb.conf.%m, which may or may not exist for all machine names, and
include the debug parameter in there. This allows you to add the log
level 10 for only the client(s) you want so as not to waste disk space
on a busy machine.

=R

On 12/29/2010 01:10 PM, Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC wrote:
 Jeremy,
 
 This makes sense, I'll try it.  Excellent idea.
 
 I'm new to Samba, so how do I get it to run in debug mode and do the
 logging option you mentioned?
 
 Sorry to sound so juvenile, my experience with Samba is in reverse -
 getting Linux boxes to use Windows servers.
 
 Bob
 
 
 
 -Original Message-
 From: Jeremy Allison [mailto:j...@samba.org] 
 Sent: Wednesday, December 29, 2010 10:33 AM
 To: Hodges, Robert CTR USAF AFMC 520 SMXS/MXDEC
 Cc: t...@tms3.com; samba@lists.samba.org
 Subject: Re: [Samba] Need Help Getting Windows XP To Use Samba Properly
 
 On Wed, Dec 29, 2010 at 10:22:46AM -0700, Hodges, Robert CTR USAF AFMC
 520 SMXS/MXDEC wrote:
 TMS3,

 Thanks for joining in, really appreciate it.

 I'm trying to keep it all straight, I'm relatively new to Samba (but
 learning quickly).

 What I now know:

 1.  Sniffer on XP box reveals that XP does see the broadcasts from
 Samba. 

 2.  The Microsoft support tool/command Browstat status shows that XP
 does recognize Samba as the server (if Computer Browser service
 disabled, otherwise XP may/may not elect itself as the master -
 unpredictable), but also shows that XP is unable to pull down the browse
 list form the Samba box.  
 
 This is the key. Separate out the logs by incoming client name,
 run smbd at debug level 10 and then look in the log.xp client name
 to see if it's trying to fetch the browse list, and if so why
 it goes wrong.
 
 Jeremy.


- -- 
-  _  _ _  _ ___  _  _  _
|Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Sr. Systems Programmer
|$| |__| |  | |__/ | \| _| |novos...@umdnj.edu - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent.|IST/CST-Academic Svcs. - ADMC 450, Newark
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk0bfugACgkQmb+gadEcsb4/HACgzwiBka0Ucbwrx2UrRauqTZiv
vUYAoNxyEB1naNX2rCoHvbKsfq5E8TnQ
=d+3G
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] confusion about using samba as NT4 PDC with ldapsam backend

2010-12-29 Thread Jon Detert
Thanks, that clarifies several points, and introduces me to the
ldapsam:editposix configuration setting.

A few questions about using ldapsam:editposix :
1) Does the use of ldapsam:editposix mean that I won't need to specify the
'add user script' or 'add group script' settings?
2) how does the ldap admin dn happen to have read/write access to the
entries in the OU's shown in the wiki article ('users', 'groups', 'idmap',
and 'computers')?  Do I have to manually grant those privileges, or are they
automatically conferred somehow?
3) I assume that the MsWin program 'srvtools.exe' (a.k.a. 'User Manager for
Domains') will transparently make use of the ldapsam:editposix when
creating/editting/deleting users and groups.  Will the samba-provided
utility 'net rpc {user|group} {add|delete|}' do the same?

Samba ObjectClass question:
What about assigning the samba ObjectClasses to existing users that don't
have them already?  Can/should I use the smbldap-tools to do so?  If not,
any suggestions?

posixAccount and posixGroup ObjectClass questions:
1) The existing users in ldap don't have the posixAccount or posixGroup
objectClasses at present.  How should I populate them?
2) Are the posixAccount uid and posixGroup gid attributes the uid and gid
that the samba config settings 'idmap uid' and 'idmap gid' refer to?  In any
case, how do I pick ranges that will work?  Do I just make sure the ranges
include every posixAccount uid and posixGroup gid that I set?

AtDhVaAnNkCsE,

Jon

On Wed, Dec 29, 2010 at 11:05 AM, TAKAHASHI Motonobu mo...@monyo.comwrote:

 2010/12/30 Jon Detert jdet...@infinityhealthcare.com:
  How do the samba ObjectClasses and their attributes get set for new
 users?
  E.g. will they be set automagically if I specify the 'add
  {user|group|machine} script' settings in the smb.conf?  If not, how then?

 Use smbldap-tools or ldapsam:editposix parameter.
 If you have already migrated LDAP users, smbldap-tools will be easy to use,
 although mbldap-tools are not maintenanced.

 There is a webpage that mentions about ldapsam:editposix:
  http://wiki.samba.org/index.php/Ldapsam_Editposix

 Or make scripts like smbldap-tools by yourself.

  I'm confused about how/when the samba-supplied ldap schema is used (I
 mean
  the schema that's in the samba distribution, that contains the
  'sambaSamAccount' objectClass).
 (snip)
  Does the simple fact of specifying 'passdb backend' = ldapsam imply that
  this schema is used?

 Yes, Samba assumes proper schema is defined in the LDAP directory.

 ---
 TAKAHASHI Motonobu mo...@samba.gr.jp

 2010/12/30 Jon Detert jdet...@infinityhealthcare.com:
  Hello,
 
  I want to use samba v3.3.x to implement an NT4/Win2k style domain:
  a samba PDC and a samba BDC, using ldapsam for the 'passdb backend'.  I
 plan
  to use RedHat Directory Server v8.2 as the ldap server.
 
  I'm trying to sort out how user/group management and nss will work.
 
  I'm confused about how/when the samba-supplied ldap schema is used (I
 mean
  the schema that's in the samba distribution, that contains the
  'sambaSamAccount' objectClass).
 
  I understand that I have to add/activate the schema within my ldap server
  (and that in its distributed form, it's for openLDAP, and so I have to
  convert it to a syntax suitable for RedHat DirServer).
 
  However, I don't understand how to make samba use it.
 
  Does the simple fact of specifying 'passdb backend' = ldapsam imply that
  this schema is used?
 
  How do the samba ObjectClasses and their attributes get set for new
 users?
  E.g. will they be set automagically if I specify the 'add
  {user|group|machine} script' settings in the smb.conf?  If not, how then?
 
  The ldap server is already populated with inetOrgPerson information for
 my
  user population.  I've just added the samba schema and the posixAccount
  schema.  How should I populate the samba and posixAccount ObjectClasses
 and
  attributes for the existing users?  I.e. run a one-time script to
 populate
  them, or is there a more clever way?  If the former, are there ready-made
  scripts to do this, or do I need to write my own?
 
  Once the samba schema objects and attributes are populated, how does smbd
  know about them?  Will I need to run winbind in order for samba to map
 posix
  UIDs and GIDs to SIDs and RIDs, or will that be done automagically by
 virtue
  of specifying that the 'passdb backend' is ldapsam, and populating the
 samba
  schema?
 
  Even if I don't need to run winbind, should I?  I'll need to use nss in
 any
  case, but if I use nss_ldap, I think that the o.s. won't grok nested
  groups.  If I use nss_winbind, I think it will.
 
  AtDhVaAnNkCsE,
 
  Jon

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] PDC unreliable - Connection interruptions, many error messages

2010-12-29 Thread Tom H. Lautenbacher

Dear Group members!

I am having problems with my Samba PDC setup since many months, 
concerning the reliability of the connections from the client to the server.

I am thankful for any hint or advice

Best regards
Tom

The symptoms on my Windows 7 64bit client:


- My Roaming profile in 1 out of 10 times does not get synchronized 
correctly without any obvious reason


- When I edit a document (e.g. word .docx) which is located on a 
samba-share, sometimes when I want to save it to a new (!) file name 
word says that it can't save to the new file name because the document 
is in use by someone else (what can't be since I chose a NEW file 
name!). Word creates the new file name anyway, but it remains 0kb.
When I select save again and chose to overwrite the new 0kb file, it 
does it without any problem.
When I am working for some hours on a document this occurs in about 2 
out of 10 times that I want to save the document to a new file name. 
(e.g. changing from File 0.4.docx to File 0.5.docx


- Sometimes the connection to the PDC get's lost in the middle of a 
day's session. Thus all my network drives get disconnected and I have to 
reboot the client to get connected again. If in this time I had Outlook 
2007 opened (my outlook.pst lives on a network share, too), I have to 
close Outlook and reboot to be able to edit anything in Outlook again.



Error messages in /var/log/messages:

Since day 1 of my Samba-Installation I am having a lot of errors logged 
in my /var/log/messages.

I upgraded from 3.4.3 to 3.5.6, but no change.
I am assuming that those errormessages have to do something with the 
symptoms that I am suffering.
Some of those messages even occur, when a openSUSE-11.3-client uses the 
domain (as a Domain Member)!

Here are some examples (grouped together per occurrence):

smbd[5873]: [2010/04/30 00:31:06,  0] 
rpc_server/srv_netlog_nt.c:603(_netr_ServerAuthenticate3)
smbd[5873]:   _netr_ServerAuthenticate3: netlogon_creds_server_check 
failed. Rejecting auth request from client WORKSTATIONA machine account 
WORKSTATIONA$
smbd[5873]: [2010/04/30 00:31:32,  0] 
lib/util_sock.c:539(read_fd_with_timeout)
smbd[5873]:   getpeername failed. Error was Transport endpoint is not 
connected
smbd[5873]:   read_fd_with_timeout: client 0.0.0.0 read error = 
Connection reset by peer.


smbd[25274]:   getpeername failed. Error was Transport endpoint is not 
connected
smbd[25274]:   write_data: write failure in writing to client 0.0.0.0. 
Error Connection reset by peer
smbd[25274]: [2010/12/29 16:39:25.780295,  0] 
smbd/process.c:79(srv_send_smb)
smbd[25274]:   Error writing 131 bytes to client. -1. (Transport 
endpoint is not connected)
smbd[25238]: [2010/12/29 16:39:25.780682,  0] 
lib/util_sock.c:675(write_data)
smbd[25238]: [2010/12/29 16:39:25.780754,  0] 
lib/util_sock.c:1432(get_peer_addr_internal)


smbd[21246]:   getpeername failed. Error was Transport endpoint is not 
connected
smbd[21246]:   write_data: write failure in writing to client 0.0.0.0. 
Error Broken pipe
smbd[21246]: [2010/12/29 16:39:25.781201,  0] 
smbd/process.c:79(srv_send_smb)
smbd[21246]:   Error writing 75 bytes to client. -1. (Transport endpoint 
is not connected)
smbd[21246]: [2010/12/29 16:39:25.781450,  0] 
lib/util_sock.c:675(write_data)
smbd[21246]: [2010/12/29 16:39:25.781523,  0] 
lib/util_sock.c:1432(get_peer_addr_internal)


WORKSTATIONB enters the network. It is NOT a Domain Member:
smbd[8267]: [2010/12/29 18:14:41.651707,  0] 
rpc_server/srv_netlog_nt.c:475(get_md4pw)

smbd[8267]:   get_md4pw: Workstation WORKSTATIONB$: no account in domain
smbd[8267]: [2010/12/29 18:14:41.651921,  0] 
rpc_server/srv_netlog_nt.c:692(_netr_ServerAuthenticate3)
smbd[8267]:   _netr_ServerAuthenticate3: failed to get machine password 
for account WORKSTATIONB$: NT_STATUS_ACCESS_DENIED


WORKSTATIONA logs on. It IS a domain Member:
smbd[8501]: [2010/12/29 18:21:24.207138,  0] 
rpc_server/srv_netlog_nt.c:714(_netr_ServerAuthenticate3)
smbd[8501]:   _netr_ServerAuthenticate3: netlogon_creds_server_check 
failed. Rejecting auth request from client WORKSTATIONA machine account 
WORKSTATIONA$
smbd[8501]: [2010/12/29 18:21:31.716442,  0] 
auth/auth_sam.c:493(check_sam_security)
smbd[8501]:   check_sam_security: make_server_info_sam() failed with 
'NT_STATUS_NO_SUCH_USER'


QUESTIONS:

1. Why do I get all those error messages?
2. What do they mean?
3. Are they related with my symptoms?
4. How do I cure this?
5. Could it be that this is related with my other posting (Samba 
crashes  floods logfiles: smbd/notify_inotify.c:244(inotify_handler) - 
No data on inotify fd?!)?


My smb.conf

(all default values and comments are cropped automatically by SWAT):

[global]
workgroup = SOMEGROUPNAME.SGN
server string =
max open files = 1
add machine script = /usr/sbin/useradd -c 

Re: [Samba] confusion about using samba as NT4 PDC with ldapsam backend

2010-12-29 Thread Christ Schlacta

On 12/29/2010 11:08, Jon Detert wrote:

Thanks, that clarifies several points, and introduces me to the
ldapsam:editposix configuration setting.

A few questions about using ldapsam:editposix :
1) Does the use of ldapsam:editposix mean that I won't need to specify the
'add user script' or 'add group script' settings?
2) how does the ldap admin dn happen to have read/write access to the
entries in the OU's shown in the wiki article ('users', 'groups', 'idmap',
and 'computers')?  Do I have to manually grant those privileges, or are they
automatically conferred somehow?
you have to grant them manually.most sane walkthroughs include a 
stepthat does this.

3) I assume that the MsWin program 'srvtools.exe' (a.k.a. 'User Manager for
Domains') will transparently make use of the ldapsam:editposix when
creating/editting/deleting users and groups.  Will the samba-provided
utility 'net rpc {user|group} {add|delete|}' do the same?

Samba ObjectClass question:
What about assigning the samba ObjectClasses to existing users that don't
have them already?  Can/should I use the smbldap-tools to do so?  If not,
any suggestions?

smbldap-usermod -a user-without-sambaSamAccount

posixAccount and posixGroup ObjectClass questions:
1) The existing users in ldap don't have the posixAccount or posixGroup
objectClasses at present.  How should I populate them?

how did you get posix users without posix accounts or posix groups?

2) Are the posixAccount uid and posixGroup gid attributes the uid and gid
that the samba config settings 'idmap uid' and 'idmap gid' refer to?  In any
case, how do I pick ranges that will work?  Do I just make sure the ranges
include every posixAccount uid and posixGroup gid that I set?

pick ranges you'll never use for automatic generation (I use 10K for 
posix users, so 20K is their RID range), so 10K and 20K are out.  I'd be 
picking something like 50K, just incase I expand my userbase later.

AtDhVaAnNkCsE,

Jon

On Wed, Dec 29, 2010 at 11:05 AM, TAKAHASHI Motonobumo...@monyo.comwrote:


2010/12/30 Jon Detertjdet...@infinityhealthcare.com:

How do the samba ObjectClasses and their attributes get set for new

users?

E.g. will they be set automagically if I specify the 'add
{user|group|machine} script' settings in the smb.conf?  If not, how then?

Use smbldap-tools or ldapsam:editposix parameter.
If you have already migrated LDAP users, smbldap-tools will be easy to use,
although mbldap-tools are not maintenanced.

There is a webpage that mentions about ldapsam:editposix:
  http://wiki.samba.org/index.php/Ldapsam_Editposix

Or make scripts like smbldap-tools by yourself.


I'm confused about how/when the samba-supplied ldap schema is used (I

mean

the schema that's in the samba distribution, that contains the
'sambaSamAccount' objectClass).

(snip)

Does the simple fact of specifying 'passdb backend' = ldapsam imply that
this schema is used?

Yes, Samba assumes proper schema is defined in the LDAP directory.

---
TAKAHASHI Motonobumo...@samba.gr.jp

2010/12/30 Jon Detertjdet...@infinityhealthcare.com:

Hello,

I want to use samba v3.3.x to implement an NT4/Win2k style domain:
a samba PDC and a samba BDC, using ldapsam for the 'passdb backend'.  I

plan

to use RedHat Directory Server v8.2 as the ldap server.

I'm trying to sort out how user/group management and nss will work.

I'm confused about how/when the samba-supplied ldap schema is used (I

mean

the schema that's in the samba distribution, that contains the
'sambaSamAccount' objectClass).

I understand that I have to add/activate the schema within my ldap server
(and that in its distributed form, it's for openLDAP, and so I have to
convert it to a syntax suitable for RedHat DirServer).

However, I don't understand how to make samba use it.

Does the simple fact of specifying 'passdb backend' = ldapsam imply that
this schema is used?

How do the samba ObjectClasses and their attributes get set for new

users?

E.g. will they be set automagically if I specify the 'add
{user|group|machine} script' settings in the smb.conf?  If not, how then?

The ldap server is already populated with inetOrgPerson information for

my

user population.  I've just added the samba schema and the posixAccount
schema.  How should I populate the samba and posixAccount ObjectClasses

and

attributes for the existing users?  I.e. run a one-time script to

populate

them, or is there a more clever way?  If the former, are there ready-made
scripts to do this, or do I need to write my own?

Once the samba schema objects and attributes are populated, how does smbd
know about them?  Will I need to run winbind in order for samba to map

posix

UIDs and GIDs to SIDs and RIDs, or will that be done automagically by

virtue

of specifying that the 'passdb backend' is ldapsam, and populating the

samba

schema?

Even if I don't need to run winbind, should I?  I'll need to use nss in

any

case, but if I use nss_ldap, I think that the o.s. won't grok nested
groups.  If I use 

Re: [Samba] Samba crashes floods logfiles: smbd/notify_inotify.c:244(inotify_handler) - No data on inotify fd?!

2010-12-29 Thread Volker Lendecke
On Wed, Dec 29, 2010 at 07:52:58PM +0200, Tom H. Lautenbacher wrote:
 Since I have set up a Samba PDC-Server (openSUSE 11.2-64bit with
 default package Samba 3.4.3) approx. 8 months ago, I have
 encountered 3 or 4 times a severe crash of Samba.
 
 What happens is that all over a sudden Samba floods
 /var/log/messages and /var/log/warn with the following message
 (cropped out date/time/servername, etc.):
 
 smbd[19724]: smbd/notify_inotify.c:244(inotify_handler)
 smbd[19724]: No data on inotify fd?!

As far as I know there's a kernel problem. Try kernel
change notify = no. The catch is that you won't see the
changes done by Unix process.

Volker
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba crashes floods logfiles: smbd/notify_inotify.c:244(inotify_handler) - No data on inotify fd?!

2010-12-29 Thread Tom H. Lautenbacher

On 2010-12-29 21:43, Volker Lendecke wrote:


On Wed, Dec 29, 2010 at 07:52:58PM +0200, Tom H. Lautenbacher wrote:

What happens is that all over a sudden Samba floods
/var/log/messages and /var/log/warn with the following message

smbd[19724]: smbd/notify_inotify.c:244(inotify_handler)
smbd[19724]: No data on inotify fd?!



As far as I know there's a kernel problem. Try kernel
change notify = no. The catch is that you won't see the
changes done by Unix process.


Hello Volker,

thank you very much for your time!

I looked up kernel change notify in the manpage of smb.conf and have 
some questions:


1a). Is it correct that kernel change notify is a per share setting 
and not in the [global] section, so that I will have to put this setting 
in each of my share-definitions?


1b). If it is not a [global] but a per-share-setting: Do I have place 
this setting only in all sections of my custom shares or also in the 
special shares [homes], [profiles]  [netlogon]?


2. Is it correct that if I do insert kernel change notify = No to my 
shares, that I won't be able to see changes in the folders from my 
Windows Clients, but I will have to manually trigger a refresh (F5) 
each time I want to see if changes have occured? E.g. if many users save 
files to a share, I won't see those new files until I trigger a refresh 
manually? Or is it only concerning the changes that a linux-process 
might have performed, e.g. a cronjob that copied a file into a share?


3. Did I do anything wrong, or is this a problem with the standard 
kernel included in openSUSE 11.2? Is there anything I can do about it?


4. Is this problem in any kind related to my other problem posted in 
this list with subject PDC unreliable - Connection interruptions,	many 
error messages at 2010-12-29 - 21:15 EET?


Thank you for any info about this!

Best regards
Tom
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba crashes floods logfiles: smbd/notify_inotify.c:244(inotify_handler) - No data on inotify fd?!

2010-12-29 Thread Volker Lendecke
On Wed, Dec 29, 2010 at 11:31:16PM +0200, Tom H. Lautenbacher wrote:
 1a). Is it correct that kernel change notify is a per share
 setting and not in the [global] section, so that I will have to put
 this setting in each of my share-definitions?
 
 1b). If it is not a [global] but a per-share-setting: Do I have
 place this setting only in all sections of my custom shares or also
 in the special shares [homes], [profiles]  [netlogon]?

It's a global setting, putting it into [global] once is
enough.


 2. Is it correct that if I do insert kernel change notify = No to
 my shares, that I won't be able to see changes in the folders from
 my Windows Clients, but I will have to manually trigger a refresh
 (F5) each time I want to see if changes have occured? E.g. if many
 users save files to a share, I won't see those new files until I
 trigger a refresh manually? Or is it only concerning the changes
 that a linux-process might have performed, e.g. a cronjob that
 copied a file into a share?

It's the latter. If other cifs clients change something,
it should still work.

 3. Did I do anything wrong, or is this a problem with the standard
 kernel included in openSUSE 11.2? Is there anything I can do about
 it?

Not sure here. Very likely not your fault, but I would need
to see a box where this happens myself to be 100% sure.

 4. Is this problem in any kind related to my other problem posted in
 this list with subject PDC unreliable - Connection
 interruptions,many error messages at 2010-12-29 - 21:15 EET?

Haven't really followed that one, sorry.

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread Chris Smith
On Wed, Dec 29, 2010 at 1:07 PM, Hodges, Robert CTR USAF AFMC 520
SMXS/MXDEC robert.hodges@hill.af.mil wrote:
 The registry change and enabling the browser service produced the same 
 results as before, same error (The specified network name is no longer 
 available.).

 However, it did allow Windows XP to force itself to use the Samba server as 
 the master browser without having to disable the Computer Browser service, 
 which is what I had been doing.  So that was nice.

 Any other suggestions?

If you have a WINS server that the system is registering with you
shouldn't need an lmhosts file - although as long as they don't
contradict you would be fine. FYI, possibly the absolute dumbest UI
decision ever was Microsoft's one to hide file extensions for known
file types. Many users think they have a perfectly fine lmhosts file
when they have a useless lmhosts.sam or lmhosts.txt file instead.

You can examine the wins.dat file on the WINS server host to determine
if the XP system is registering itself.

Outside possibility - NetBIOS Scope - which allows for some
(il)logical type of NetBIOS subnetting. It possible that the XP
system has been setup to respond to a particular NetBIOS scope ID
(although I haven't seen such a setup in use for eons). I do admit to
always adding an - option netbios-scope ; - to my dhcpd server to
eliminate this tattoo from the registry. You can also manually check
it at:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters\ScopeID
If there's any value there delete it (unless you're using a Scope ID,
then make it match).

Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread Chris Smith
On Wed, Dec 29, 2010 at 9:15 AM, Hodges, Robert CTR USAF AFMC 520
SMXS/MXDEC robert.hodges@hill.af.mil wrote:
 Yes, machine names are standard text, no special characters with the
 exception of the Samba box, which has an underscore in the name.

Just a reminder that underscores are not allowed in DNS hostnames.

Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Need Help Getting Windows XP To Use Samba Properly

2010-12-29 Thread Chris Smith
On Wed, Dec 29, 2010 at 6:09 PM, Hodges, Robert CTR USAF AFMC 520
SMXS/MXDEC robert.hodges@hill.af.mil wrote:
 This is interesting, since we've had this working since the beginning (using 
 hosts files anyway).

 Works great with Win2K and Samba:  Servername_Number

When you break the rules they will eventually break you :)

Microsoft was late to the TCP/IP party so it's possible some things
fell through the cracks. Any reasonable Google search will have you
removing underscores in your hostnames.

See:
http://technet.microsoft.com/en-us/library/cc778792%28WS.10%29.aspx
And this:
http://technet.microsoft.com/en-us/library/cc959209.aspx
which cautions:
Do Not Use Extended Characters
Do not use extended characters in NetBIOS names, especially the
underscore ( _ ) and the period ( . ). The underscore character is
converted to a dash in DNS host names. For example, NTServer_1 becomes
NTServer-1, leading to failure of name resolution of a name that may,
in fact, be recorded in the DNS files.

Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Domain Member Server not showing domain users/groups and not honoring domain user accounts

2010-12-29 Thread Christ Schlacta

I've got a domain member server configured as such:

Load smb config files from /etc/samba/smb.conf
Processing section [videos]
Processing section [music]
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
[global]
workgroup = TEMPEST
server string = Media Server (%h) (Livingroom Television)
security = DOMAIN
map to guest = Bad User
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
dns proxy = No
wins server = density.aarcane.info
usershare allow guests = Yes
panic action = /usr/share/samba/panic-action %d

[videos]
comment = Rebirth local Videos
path = /media/local/videos
write list = @rebirth
force group = videos
create mask = 0664
force create mode = 0664
directory mask = 0775
force directory mode = 0775

[music]
comment = Rebirth local Music
path = /media/local/music
write list = @rebirth
force group = music
create mask = 0664
force create mode = 0664
directory mask = 0775
force directory mode = 0775

The server is not honoring domain accounts (the PDC honors domain 
accounts and shows owners/groups as domain users without issue), but 
this one is saying Unknown username or bad password when trying to 
browse to it, and when you specify your domain username and password 
manually in the prompt, it shows files and groups as REBIRTH/username or 
UNIX-GROUP/groupname instead of as domain users and groups.


below I've stopped the server, cleared out the old log files, and 
restarted smbd (and nmbd) and double-clicked on rebirth in the windows 7 
network pane.


ikari (10.0.0.241) is the client I'm using.

aarc...@rebirth:/var/log/samba$ ls
cores  log.10.0.0.241  log.ikari  log.nmbd  log.smbd
aarc...@rebirth:/var/log/samba$ cat log.10.0.0.241
aarc...@rebirth:/var/log/samba$ cat log.ikari
[2010/12/29 16:04:30.647903,  0] lib/util_sock.c:474(read_fd_with_timeout)
[2010/12/29 16:04:30.648046,  0] 
lib/util_sock.c:1432(get_peer_addr_internal)

  getpeername failed. Error was Transport endpoint is not connected
  read_fd_with_timeout: client 0.0.0.0 read error = Connection reset by 
peer.

aarc...@rebirth:/var/log/samba$ cat log.nmbd
[2010/12/29 16:03:44,  0] nmbd/nmbd.c:857(main)
  nmbd version 3.5.4 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2010
aarc...@rebirth:/var/log/samba$ cat log.smbd
[2010/12/29 16:03:41,  0] smbd/server.c:1123(main)
  smbd version 3.5.4 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2010
[2010/12/29 16:03:41.923307,  0] printing/print_cups.c:108(cups_connect)
  Unable to connect to CUPS server localhost:631 - Connection refused
[2010/12/29 16:03:41.928781,  0] printing/print_cups.c:108(cups_connect)
  Unable to connect to CUPS server localhost:631 - Connection refused
[2010/12/29 16:03:41.929413,  0] smbd/server.c:1169(main)
  standard input is not a socket, assuming -D option
aarc...@rebirth:/var/log/samba$


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Domain Member Server not showing domain users/groups andnot honoring domain user accounts

2010-12-29 Thread tms3







I've got a domain member server configured as such:

Load smb config files from /etc/samba/smb.conf
Processing section [videos]
Processing section [music]
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
[global]
 workgroup = TEMPEST
 server string = Media Server (%h) (Livingroom 
Television)

 security = DOMAIN



From the Official How To:


Example ConfigurationSamba as a Domain Member Server
This method involves addition of the following parameters in the 
smb.conf file:

security = domainworkgroup = MIDEARTH
In order for this method to work, the Samba server needs to join the 
MS Windows NT security domain. This is done as follows:


http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/ServerType.html#id2559628

Use of this mode of authentication requires there to be a standard 
UNIX account for each user in order to assign a UID once the account 
has been authenticated by the Windows domain controller. This account 
can be blocked to prevent logons by clients other than MS Windows 
through means such as setting an invalid shell in the /etc/passwd 
entry. The best way to allocate an invalid shell to a user account is 
to set the shell to the file /bin/false. Domain controllers can be 
located anywhere that is convenient. The best advice is to have a BDC 
on every physical network segment, and if the PDC is on a remote 
network segment the use of WINS (see Network Browsing for more 
information) is almost essential.
An alternative to assigning UIDs to Windows users on a Samba member 
server is presented in Winbind, Winbind: Use of Domain Accounts.




Also see:


http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/domain-member.html#domain-member-server




 map to guest = Bad User
 syslog = 0
 log file = /var/log/samba/log.%m
 max log size = 1000
 dns proxy = No
 wins server = density.aarcane.info
 usershare allow guests = Yes
 panic action = /usr/share/samba/panic-action %d

[videos]
 comment = Rebirth local Videos
 path = /media/local/videos
 write list = @rebirth
 force group = videos
 create mask = 0664
 force create mode = 0664
 directory mask = 0775
 force directory mode = 0775

[music]
 comment = Rebirth local Music
 path = /media/local/music
 write list = @rebirth
 force group = music
 create mask = 0664
 force create mode = 0664
 directory mask = 0775
 force directory mode = 0775

The server is not honoring domain accounts (the PDC honors domain
accounts and shows owners/groups as domain users without issue), but
this one is saying Unknown username or bad password when trying to
browse to it, and when you specify your domain username and password
manually in the prompt, it shows files and groups as REBIRTH/username 
or

UNIX-GROUP/groupname instead of as domain users and groups.

below I've stopped the server, cleared out the old log files, and
restarted smbd (and nmbd) and double-clicked on rebirth in the windows 
7

network pane.

ikari (10.0.0.241) is the client I'm using.

aarc...@rebirth:/var/log/samba$ ls
cores  log.10.0.0.241  log.ikari  log.nmbd  log.smbd
aarc...@rebirth:/var/log/samba$ cat log.10.0.0.241
aarc...@rebirth:/var/log/samba$ cat log.ikari
[2010/12/29 16:04:30.647903,  0] 
lib/util_sock.c:474(read_fd_with_timeout)

[2010/12/29 16:04:30.648046,  0]
lib/util_sock.c:1432(get_peer_addr_internal)
 getpeername failed. Error was Transport endpoint is not connected
 read_fd_with_timeout: client 0.0.0.0 read error = Connection 
reset by

peer.
aarc...@rebirth:/var/log/samba$ cat log.nmbd
[2010/12/29 16:03:44,  0] nmbd/nmbd.c:857(main)
 nmbd version 3.5.4 started.
 Copyright Andrew Tridgell and the Samba Team 1992-2010
aarc...@rebirth:/var/log/samba$ cat log.smbd
[2010/12/29 16:03:41,  0] smbd/server.c:1123(main)
 smbd version 3.5.4 started.
 Copyright Andrew Tridgell and the Samba Team 1992-2010
[2010/12/29 16:03:41.923307,  0] 
printing/print_cups.c:108(cups_connect)
 Unable to connect to CUPS server localhost:631 - Connection 
refused
[2010/12/29 16:03:41.928781,  0] 
printing/print_cups.c:108(cups_connect)
 Unable to connect to CUPS server localhost:631 - Connection 
refused

[2010/12/29 16:03:41.929413,  0] smbd/server.c:1169(main)
 standard input is not a socket, assuming -D option
aarc...@rebirth:/var/log/samba$


--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] confusion about using samba as NT4 PDC with ldapsam backend

2010-12-29 Thread TAKAHASHI Motonobu
 On 12/29/2010 11:08, Jon Detert wrote:

 Thanks, that clarifies several points, and introduces me to the
 ldapsam:editposix configuration setting.

 A few questions about using ldapsam:editposix :
 1) Does the use of ldapsam:editposix mean that I won't need to specify the
 'add user script' or 'add group script' settings?

No, no 'add user/group script' is needed.

(snip)

 3) I assume that the MsWin program 'srvtools.exe' (a.k.a. 'User Manager
 for
 Domains') will transparently make use of the ldapsam:editposix when
 creating/editting/deleting users and groups.  Will the samba-provided
 utility 'net rpc {user|group} {add|delete|}' do the same?

Basically yes, but they can not set the detail attributes for example homedir,
profile path ...

I think if you want to manage without srvtools.exe, you need to use
net rpc user add
for creating a user, and need to use pdbedit for setting the detail.

Anyway ldapsam:editposix is not intended to manage such way, I think.
So you will need somewhat tricky way.

 Samba ObjectClass question:
 What about assigning the samba ObjectClasses to existing users that don't
 have them already?  Can/should I use the smbldap-tools to do so?  If not,
 any suggestions?

 posixAccount and posixGroup ObjectClass questions:
 1) The existing users in ldap don't have the posixAccount or posixGroup
 objectClasses at present.  How should I populate them?

 2) Are the posixAccount uid and posixGroup gid attributes the uid and gid
 that the samba config settings 'idmap uid' and 'idmap gid' refer to?  In
 any
 case, how do I pick ranges that will work?  Do I just make sure the ranges
 include every posixAccount uid and posixGroup gid that I set?

Same as above,  ldapsam:editposix is not intended to migrate in such way,
I think.

So you should manually adjust attributes both for UNIX and Samba users
to use LDAP tools, pdbedit, smbldap-tools based custom scripts and other
tools to suit ldapsam:editposix. It's not easy.

---
TAKAHASHI Motonobu mo...@monyo.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Questions about ldap organizational units

2010-12-29 Thread Taso Hatzi
Environment is Samba as a PDC, OpenLDAP backend, with
smbldap-tools providing the scripts to manipulate the data.


What are the recommended/mandated organizational units (OU=)
for user, computer, group info.

I'm pretty sure that groups go in ou=Groups, but I am confused
about where user and computer data goes.

I have seen ou=People, ou=Computers, and ou=Users in various places.
Which is it and why?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[SCM] Samba Shared Repository - branch master updated

2010-12-29 Thread Rusty Russell
The branch, master has been updated
   via  cac5732 tdb: tdb_summary() support.
  from  9b31f6ab Fix bug #7892 - open_file_fchmod() leaves a stale lock.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit cac57328a6077dc428396402036636095f139569
Author: Rusty Russell ru...@rustcorp.com.au
Date:   Wed Dec 29 12:50:47 2010 +1030

tdb: tdb_summary() support.

Autobuild-User: Rusty Russell ru...@rustcorp.com.au
Autobuild-Date: Wed Dec 29 10:12:05 CET 2010 on sn-devel-104

---

Summary of changes:
 lib/tdb/common/check.c   |4 +-
 lib/tdb/common/summary.c |  192 ++
 lib/tdb/common/tdb_private.h |1 +
 lib/tdb/include/tdb.h|1 +
 lib/tdb/libtdb.m4|2 +-
 lib/tdb/tools/tdbtool.c  |   12 ++-
 lib/tdb/wscript  |4 +-
 7 files changed, 206 insertions(+), 10 deletions(-)
 create mode 100644 lib/tdb/common/summary.c


Changeset truncated at 500 lines:

diff --git a/lib/tdb/common/check.c b/lib/tdb/common/check.c
index bbb566c..3387fbd 100644
--- a/lib/tdb/common/check.c
+++ b/lib/tdb/common/check.c
@@ -308,7 +308,7 @@ static bool tdb_check_free_record(struct tdb_context *tdb,
 }
 
 /* Slow, but should be very rare. */
-static size_t dead_space(struct tdb_context *tdb, tdb_off_t off)
+size_t tdb_dead_space(struct tdb_context *tdb, tdb_off_t off)
 {
size_t len;
 
@@ -406,7 +406,7 @@ _PUBLIC_ int tdb_check(struct tdb_context *tdb,
found_recovery = true;
break;
}
-   dead = dead_space(tdb, off);
+   dead = tdb_dead_space(tdb, off);
if (dead  sizeof(rec))
goto corrupt;
 
diff --git a/lib/tdb/common/summary.c b/lib/tdb/common/summary.c
new file mode 100644
index 000..29959f9
--- /dev/null
+++ b/lib/tdb/common/summary.c
@@ -0,0 +1,192 @@
+ /* 
+   Trivial Database: human-readable summary code
+   Copyright (C) Rusty Russell 2010
+   
+   This library is free software; you can redistribute it and/or
+   modify it under the terms of the GNU Lesser General Public
+   License as published by the Free Software Foundation; either
+   version 3 of the License, or (at your option) any later version.
+
+   This library is distributed in the hope that it will be useful,
+   but WITHOUT ANY WARRANTY; without even the implied warranty of
+   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+   Lesser General Public License for more details.
+
+   You should have received a copy of the GNU Lesser General Public
+   License along with this library; if not, see http://www.gnu.org/licenses/.
+*/
+#include tdb_private.h
+
+#define SUMMARY_FORMAT \
+   Size of file/data: %u/%zu\n \
+   Number of records: %zu\n \
+   Smallest/average/largest keys: %zu/%zu/%zu\n \
+   Smallest/average/largest data: %zu/%zu/%zu\n \
+   Smallest/average/largest padding: %zu/%zu/%zu\n \
+   Number of dead records: %zu\n \
+   Smallest/average/largest dead records: %zu/%zu/%zu\n \
+   Number of free records: %zu\n \
+   Smallest/average/largest free records: %zu/%zu/%zu\n \
+   Number of hash chains: %zu\n \
+   Smallest/average/largest hash chains: %zu/%zu/%zu\n \
+   Number of uncoalesced records: %zu\n \
+   Smallest/average/largest uncoalesced runs: %zu/%zu/%zu\n \
+   Percentage keys/data/padding/free/dead/rechdrstailers/hashes: 
%.0f/%.0f/%.0f/%.0f/%.0f/%.0f/%.0f\n
+
+/* We don't use tally module, to keep upstream happy. */
+struct tally {
+   size_t min, max, total;
+   size_t num;
+};
+
+static void tally_init(struct tally *tally)
+{
+   tally-total = 0;
+   tally-num = 0;
+   tally-min = tally-max = 0;
+}
+
+static void tally_add(struct tally *tally, size_t len)
+{
+   if (tally-num == 0)
+   tally-max = tally-min = len;
+   else if (len  tally-max)
+   tally-max = len;
+   else if (len  tally-min)
+   tally-min = len;
+   tally-num++;
+   tally-total += len;
+}
+
+static size_t tally_mean(const struct tally *tally)
+{
+   if (!tally-num)
+   return 0;
+   return tally-total / tally-num;
+}
+
+static size_t get_hash_length(struct tdb_context *tdb, unsigned int i)
+{
+   tdb_off_t rec_ptr;
+   size_t count = 0;
+
+   if (tdb_ofs_read(tdb, TDB_HASH_TOP(i), rec_ptr) == -1)
+   return 0;
+
+   /* keep looking until we find the right record */
+   while (rec_ptr) {
+   struct tdb_record r;
+   ++count;
+   if (tdb_rec_read(tdb, rec_ptr, r) == -1)
+   return 0;
+   rec_ptr = r.next;
+   }
+   return count;
+}
+
+_PUBLIC_ 

[SCM] Samba Shared Repository - branch master updated

2010-12-29 Thread Stefan Metzmacher
The branch, master has been updated
   via  b222615 tdb: add ABI/tdb-1.2.9.sigs
  from  cac5732 tdb: tdb_summary() support.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit b222615b5978aa78e82af79359b7cc3baec0bc87
Author: Stefan Metzmacher me...@samba.org
Date:   Wed Dec 29 10:39:25 2010 +0100

tdb: add ABI/tdb-1.2.9.sigs

metze

Autobuild-User: Stefan Metzmacher me...@samba.org
Autobuild-Date: Wed Dec 29 11:26:12 CET 2010 on sn-devel-104

---

Summary of changes:
 lib/tdb/ABI/{tdb-1.2.6.sigs = tdb-1.2.9.sigs} |1 +
 1 files changed, 1 insertions(+), 0 deletions(-)
 copy lib/tdb/ABI/{tdb-1.2.6.sigs = tdb-1.2.9.sigs} (98%)


Changeset truncated at 500 lines:

diff --git a/lib/tdb/ABI/tdb-1.2.6.sigs b/lib/tdb/ABI/tdb-1.2.9.sigs
similarity index 98%
copy from lib/tdb/ABI/tdb-1.2.6.sigs
copy to lib/tdb/ABI/tdb-1.2.9.sigs
index 1e01f3b..9e4149b 100644
--- a/lib/tdb/ABI/tdb-1.2.6.sigs
+++ b/lib/tdb/ABI/tdb-1.2.9.sigs
@@ -48,6 +48,7 @@ tdb_set_logging_function: void (struct tdb_context *, const 
struct tdb_logging_c
 tdb_set_max_dead: void (struct tdb_context *, int)
 tdb_setalarm_sigptr: void (struct tdb_context *, volatile sig_atomic_t *)
 tdb_store: int (struct tdb_context *, TDB_DATA, TDB_DATA, int)
+tdb_summary: char *(struct tdb_context *)
 tdb_transaction_cancel: int (struct tdb_context *)
 tdb_transaction_commit: int (struct tdb_context *)
 tdb_transaction_prepare_commit: int (struct tdb_context *)


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-6-test updated

2010-12-29 Thread Jeremy Allison
The branch, v3-6-test has been updated
   via  c416367 tdb: add ABI/tdb-1.2.9.sigs
   via  7034481 tdb: tdb_summary() support.
  from  6def684 Fix bug #7892 - open_file_fchmod() leaves a stale lock. 
(cherry picked from commit 079da9a83d12945e8e7bc86ef27abd0bd1599fa4)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test


- Log -
commit c416367e9a8a8c4efd1ee15e91be5c85fe6159d3
Author: Stefan Metzmacher me...@samba.org
Date:   Wed Dec 29 10:39:25 2010 +0100

tdb: add ABI/tdb-1.2.9.sigs

metze

Autobuild-User: Stefan Metzmacher me...@samba.org
Autobuild-Date: Wed Dec 29 11:26:12 CET 2010 on sn-devel-104
(cherry picked from commit b222615b5978aa78e82af79359b7cc3baec0bc87)

commit 7034481c80f5f75b4bb930c0d26ab93ce5845f80
Author: Rusty Russell ru...@rustcorp.com.au
Date:   Wed Dec 29 12:50:47 2010 +1030

tdb: tdb_summary() support.

Autobuild-User: Rusty Russell ru...@rustcorp.com.au
Autobuild-Date: Wed Dec 29 10:12:05 CET 2010 on sn-devel-104

---

Summary of changes:
 lib/tdb/ABI/{tdb-1.2.6.sigs = tdb-1.2.9.sigs} |1 +
 lib/tdb/common/check.c |4 +-
 lib/tdb/common/summary.c   |  192 
 lib/tdb/common/tdb_private.h   |1 +
 lib/tdb/include/tdb.h  |1 +
 lib/tdb/libtdb.m4  |2 +-
 lib/tdb/tools/tdbtool.c|   12 +-
 lib/tdb/wscript|4 +-
 8 files changed, 207 insertions(+), 10 deletions(-)
 copy lib/tdb/ABI/{tdb-1.2.6.sigs = tdb-1.2.9.sigs} (98%)
 create mode 100644 lib/tdb/common/summary.c


Changeset truncated at 500 lines:

diff --git a/lib/tdb/ABI/tdb-1.2.6.sigs b/lib/tdb/ABI/tdb-1.2.9.sigs
similarity index 98%
copy from lib/tdb/ABI/tdb-1.2.6.sigs
copy to lib/tdb/ABI/tdb-1.2.9.sigs
index 1e01f3b..9e4149b 100644
--- a/lib/tdb/ABI/tdb-1.2.6.sigs
+++ b/lib/tdb/ABI/tdb-1.2.9.sigs
@@ -48,6 +48,7 @@ tdb_set_logging_function: void (struct tdb_context *, const 
struct tdb_logging_c
 tdb_set_max_dead: void (struct tdb_context *, int)
 tdb_setalarm_sigptr: void (struct tdb_context *, volatile sig_atomic_t *)
 tdb_store: int (struct tdb_context *, TDB_DATA, TDB_DATA, int)
+tdb_summary: char *(struct tdb_context *)
 tdb_transaction_cancel: int (struct tdb_context *)
 tdb_transaction_commit: int (struct tdb_context *)
 tdb_transaction_prepare_commit: int (struct tdb_context *)
diff --git a/lib/tdb/common/check.c b/lib/tdb/common/check.c
index bbb566c..3387fbd 100644
--- a/lib/tdb/common/check.c
+++ b/lib/tdb/common/check.c
@@ -308,7 +308,7 @@ static bool tdb_check_free_record(struct tdb_context *tdb,
 }
 
 /* Slow, but should be very rare. */
-static size_t dead_space(struct tdb_context *tdb, tdb_off_t off)
+size_t tdb_dead_space(struct tdb_context *tdb, tdb_off_t off)
 {
size_t len;
 
@@ -406,7 +406,7 @@ _PUBLIC_ int tdb_check(struct tdb_context *tdb,
found_recovery = true;
break;
}
-   dead = dead_space(tdb, off);
+   dead = tdb_dead_space(tdb, off);
if (dead  sizeof(rec))
goto corrupt;
 
diff --git a/lib/tdb/common/summary.c b/lib/tdb/common/summary.c
new file mode 100644
index 000..29959f9
--- /dev/null
+++ b/lib/tdb/common/summary.c
@@ -0,0 +1,192 @@
+ /* 
+   Trivial Database: human-readable summary code
+   Copyright (C) Rusty Russell 2010
+   
+   This library is free software; you can redistribute it and/or
+   modify it under the terms of the GNU Lesser General Public
+   License as published by the Free Software Foundation; either
+   version 3 of the License, or (at your option) any later version.
+
+   This library is distributed in the hope that it will be useful,
+   but WITHOUT ANY WARRANTY; without even the implied warranty of
+   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+   Lesser General Public License for more details.
+
+   You should have received a copy of the GNU Lesser General Public
+   License along with this library; if not, see http://www.gnu.org/licenses/.
+*/
+#include tdb_private.h
+
+#define SUMMARY_FORMAT \
+   Size of file/data: %u/%zu\n \
+   Number of records: %zu\n \
+   Smallest/average/largest keys: %zu/%zu/%zu\n \
+   Smallest/average/largest data: %zu/%zu/%zu\n \
+   Smallest/average/largest padding: %zu/%zu/%zu\n \
+   Number of dead records: %zu\n \
+   Smallest/average/largest dead records: %zu/%zu/%zu\n \
+   Number of free records: %zu\n \
+   Smallest/average/largest free records: %zu/%zu/%zu\n \
+   Number of hash chains: %zu\n \
+   Smallest/average/largest hash chains: %zu/%zu/%zu\n \
+   Number of 

[SCM] Samba Shared Repository - branch master updated

2010-12-29 Thread Volker Lendecke
The branch, master has been updated
   via  86ff8cf s3: Allow more control over smbsock_[any_]connect
   via  65f4f22 Use sockaddr_storage in async sendto/recvfrom
  from  b222615 tdb: add ABI/tdb-1.2.9.sigs

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 86ff8cf227c759189080ade0deb4f5b184bb14f7
Author: Volker Lendecke v...@samba.org
Date:   Thu Dec 23 15:20:22 2010 +0100

s3: Allow more control over smbsock_[any_]connect

Autobuild-User: Volker Lendecke vlen...@samba.org
Autobuild-Date: Wed Dec 29 23:30:44 CET 2010 on sn-devel-104

commit 65f4f22cb4a201fb3f4f4adbb576d3a8909d4bfd
Author: Volker Lendecke v...@samba.org
Date:   Wed Dec 29 08:46:08 2010 +0100

Use sockaddr_storage in async sendto/recvfrom

---

Summary of changes:
 lib/async_req/async_sock.c |   33 ++--
 lib/async_req/async_sock.h |6 +-
 source3/include/proto.h|   31 ++--
 source3/libsmb/smbsock_connect.c   |  113 +--
 source3/torture/test_smbsock_any_connect.c |5 +-
 source3/winbindd/winbindd_cm.c |7 +-
 6 files changed, 145 insertions(+), 50 deletions(-)


Changeset truncated at 500 lines:

diff --git a/lib/async_req/async_sock.c b/lib/async_req/async_sock.c
index 9b2a625..7ea66f5 100644
--- a/lib/async_req/async_sock.c
+++ b/lib/async_req/async_sock.c
@@ -41,7 +41,7 @@ struct sendto_state {
const void *buf;
size_t len;
int flags;
-   const struct sockaddr *addr;
+   const struct sockaddr_storage *addr;
socklen_t addr_len;
ssize_t sent;
 };
@@ -52,8 +52,7 @@ static void sendto_handler(struct tevent_context *ev,
 
 struct tevent_req *sendto_send(TALLOC_CTX *mem_ctx, struct tevent_context *ev,
   int fd, const void *buf, size_t len, int flags,
-  const struct sockaddr *addr,
-  socklen_t addr_len)
+  const struct sockaddr_storage *addr)
 {
struct tevent_req *result;
struct sendto_state *state;
@@ -68,7 +67,23 @@ struct tevent_req *sendto_send(TALLOC_CTX *mem_ctx, struct 
tevent_context *ev,
state-len = len;
state-flags = flags;
state-addr = addr;
-   state-addr_len = addr_len;
+
+   switch (addr-ss_family) {
+   case AF_INET:
+   state-addr_len = sizeof(struct sockaddr_in);
+   break;
+#if defined(HAVE_IPV6)
+   case AF_INET6:
+   state-addr_len = sizeof(struct sockaddr_in6);
+   break;
+#endif
+   case AF_UNIX:
+   state-addr_len = sizeof(struct sockaddr_un);
+   break;
+   default:
+   state-addr_len = sizeof(struct sockaddr_storage);
+   break;
+   }
 
fde = tevent_add_fd(ev, state, fd, TEVENT_FD_WRITE, sendto_handler,
result);
@@ -89,7 +104,7 @@ static void sendto_handler(struct tevent_context *ev,
tevent_req_data(req, struct sendto_state);
 
state-sent = sendto(state-fd, state-buf, state-len, state-flags,
-state-addr, state-addr_len);
+(struct sockaddr *)state-addr, state-addr_len);
if ((state-sent == -1)  (errno == EINTR)) {
/* retry */
return;
@@ -117,7 +132,7 @@ struct recvfrom_state {
void *buf;
size_t len;
int flags;
-   struct sockaddr *addr;
+   struct sockaddr_storage *addr;
socklen_t *addr_len;
ssize_t received;
 };
@@ -129,7 +144,8 @@ static void recvfrom_handler(struct tevent_context *ev,
 struct tevent_req *recvfrom_send(TALLOC_CTX *mem_ctx,
 struct tevent_context *ev,
 int fd, void *buf, size_t len, int flags,
-struct sockaddr *addr, socklen_t *addr_len)
+struct sockaddr_storage *addr,
+socklen_t *addr_len)
 {
struct tevent_req *result;
struct recvfrom_state *state;
@@ -165,7 +181,8 @@ static void recvfrom_handler(struct tevent_context *ev,
tevent_req_data(req, struct recvfrom_state);
 
state-received = recvfrom(state-fd, state-buf, state-len,
-  state-flags, state-addr, state-addr_len);
+  state-flags, (struct sockaddr *)state-addr,
+  state-addr_len);
if ((state-received == -1)  (errno == EINTR)) {
/* retry */
return;
diff --git a/lib/async_req/async_sock.h b/lib/async_req/async_sock.h
index d87b2c1..8d98886 100644
--- a/lib/async_req/async_sock.h
+++