Re: [Samba] fetch passwords from AD and group membership from /etc/group

2011-01-24 Thread marius klausen
Hi,

  I want to use Active Directory for my samba users passwords and
 /etc/group for storing group membership.
  
  /etc/nsswitch.conf looks like:
  
  group: file
  
  Problem: the tests i ran show that the samba server does not know about
 group membership  (deleting file from other user belonging to the same
 group fails). The same test works as expectet when winbindd is switched off.
 What do i have to do to fix this while having winbindd running?
  
 
 It wont know anything about your groups at all with NSSwitch like this.
 You need to make it 
 
 group: files winbind
 
 OR configure NSS_LDAP and make it
 
 group: files ldap
 

something seems to be still missing 

i made a test with 

/etc/nsswitch.conf
group: files winbind

without any different results.

As I far as i understand nsswitch.conf this line tells nsswitch to look for 
group memberships in local files first and secound in AD via winbind. As i have 
no group definitions for my samba users in the AD (only passwords) i don't 
understand why nsswitch.conf needs to look that way. Could someone please 
explain?

best regards,

Marius



-- 
Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir
belohnen Sie mit bis zu 50,- Euro! https://freundschaftswerbung.gmx.de
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on Ubuntu Server

2011-01-24 Thread Daniel Müller
I thought swat is no longer working!!Just use Microsoft ads tools and you
are up and running.

---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---

-Ursprüngliche Nachricht-
Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im
Auftrag von Lynn Dixon
Gesendet: Sonntag, 23. Januar 2011 06:39
An: samba@lists.samba.org
Betreff: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on
Ubuntu Server

Hello all,
I have setup a complete domain using Samba 4 on my Ubuntu server 32 bit
machine.  I am using the Alpha 13 build (it was actually in the Ubuntu
Repos). I am trying to setup swat to make it easier to manage shares.  I
have followed the instructions at https://github.com/rvelhote/GSoC-SWAT but
I am having a few problems.

When I run ./run I get the following errors:
jenfab@dc:~/GSoC-SWAT$ sudo ./run
Starting subprocess with file monitor
Traceback (most recent call last):
  File /usr/local/bin/paster, line 9, in module
load_entry_point('PasteScript==1.7.3', 'console_scripts', 'paster')()
  File /usr/lib/pymodules/python2.6/paste/script/command.py, line 84, in
run
invoke(command, command_name, options, args[1:])
  File /usr/lib/pymodules/python2.6/paste/script/command.py, line 123, in
invoke
exit_code = runner.run(args)
  File /usr/lib/pymodules/python2.6/paste/script/command.py, line 218, in
run
result = self.command()
  File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 276, in
command
relative_to=base, global_conf=vars)
  File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 313, in
loadapp
**kw)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 204, in
loadapp
return loadobj(APP, uri, name=name, **kw)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 224, in
loadobj
global_conf=global_conf)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 248, in
loadcontext
global_conf=global_conf)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 278, in
_loadconfig
return loader.get_context(object_type, name, global_conf)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 409, in
get_context
section)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 431, in
_context_from_use
object_type, name=use, global_conf=global_conf)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 361, in
get_context
global_conf=global_conf)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 248, in
loadcontext
global_conf=global_conf)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 285, in
_loadegg
return loader.get_context(object_type, name, global_conf)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 561, in
get_context
object_type, name=name)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 587, in
find_egg_entry_point
possible.append((entry.load(), protocol, entry.name))
  File /usr/lib/python2.6/dist-packages/pkg_resources.py, line 1954, in
load
entry = __import__(self.module_name, globals(),globals(), ['__name__'])
ImportError: No module named swat.config.middleware


Any suggestions as to where to go from here?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Multiple domains issue

2011-01-24 Thread Ron García-Vidal
Understood and agreed, but since we're migrating to the AD in a 
piecemeal fashion must get this to work for users in both domains until 
the migration is complete.  Any suggestions?


-Ron

On 01/23/2011 01:05 PM, t...@tms3.com wrote:




I encountered a strange problem recently when changing the IP of my
Samba server. We are in the process of moving from an ancient NT4
domain to an AD domain. We did a full migration of all the users, and
up until Friday, our AD users were able to access the Samba server
(which is still on the NT domain) with full permissions, etc.

On Friday for reasons completely unrelated, we had to change the IP of
the Samba server. When we brought it up on the new IP, it gave an error
bringing up the Samba daemons. I was rushed and didn't pay to much
attention to the error, but instead took the easy route of removing
Samba from the NT domain, and re-joining.

That got the Samba daemons up and running and we mostly had no problem,
except now the AD users aren't allowed to access their home directories.

Home directories in a trusted domain is probably a bad idea, and likely
has some permission issues. It might be best to join the samba server to
the AD domain instead.



The AD and NT domains have a mutual trust relationship, and all SSIDs
for the users on both domains are the same. As I said, prior to Friday,
these users were able to access.

I'm not entirely sure how Samba handles multiple domains, etc. and I
have no idea how to even begin to trouble shoot this problem. Any
suggestions would be welcome.

-Ron
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] fetch passwords from AD and group membership from /etc/group

2011-01-24 Thread Dale Schroeder

On 01/21/2011 4:54 AM, marius klausen wrote:

Hi Takahashi,


While you need not run winbindd if you want to use Active Directory
for authentication, if you need to run, idmap_nss map help you?


i want to use winbind to be able to log in just by providing the accountname, 
not domainname\accountname.

i now added the following to my smb.conf:

idmap domains = MYDOMAIN
idmap uid = 6000-61000
idmap gid = 100-3000
idmap config MYDOMAIN: backend = nss

which does not change anything so far (smb+winbind restarted). The uid/gid 
ranges cover values which are given to the account in /etc/passwd /etc/group - 
maybe that is wrong?
That is correct.  winbind generated uid's/gid's should not overlap the 
range of the local uid's/gid's.
The idmap gid values that are currently set could cause problems on the 
low end; but I can't say with all certainty that that is the cause of 
the symptoms you are seeing.


Dale

best regard,

Marius

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on Ubuntu Server

2011-01-24 Thread Lynn Dixon
I am not sure how to use Microsoft AD tools to create shares and then set
those shares permissable to certain AD groups. For example, I need to create
a share called Finance and only the people in Finance can read/write to
it. I was hoping to use SWAT to help in creation and management of those
shares.

I have been using AD tools to manage the domain and GPO's but I am not sure
how to use them to create shares.

You can see swat for samba4 here:  https://github.com/rvelhote/GSoC-SWAT

On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller muel...@tropenklinik.dewrote:

 I thought swat is no longer working!!Just use Microsoft ads tools and you
 are up and running.

 ---
 EDV Daniel Müller

 Leitung EDV
 Tropenklinik Paul-Lechler-Krankenhaus
 Paul-Lechler-Str. 24
 72076 Tübingen

 Tel.: 07071/206-463, Fax: 07071/206-499
 eMail: muel...@tropenklinik.de
 Internet: www.tropenklinik.de
 ---

 -Ursprüngliche Nachricht-
 Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
 Im
 Auftrag von Lynn Dixon
 Gesendet: Sonntag, 23. Januar 2011 06:39
 An: samba@lists.samba.org
 Betreff: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on
 Ubuntu Server

 Hello all,
 I have setup a complete domain using Samba 4 on my Ubuntu server 32 bit
 machine.  I am using the Alpha 13 build (it was actually in the Ubuntu
 Repos). I am trying to setup swat to make it easier to manage shares.  I
 have followed the instructions at https://github.com/rvelhote/GSoC-SWATbut
 I am having a few problems.

 When I run ./run I get the following errors:
 jenfab@dc:~/GSoC-SWAT$ sudo ./run
 Starting subprocess with file monitor
 Traceback (most recent call last):
  File /usr/local/bin/paster, line 9, in module
load_entry_point('PasteScript==1.7.3', 'console_scripts', 'paster')()
  File /usr/lib/pymodules/python2.6/paste/script/command.py, line 84, in
 run
invoke(command, command_name, options, args[1:])
  File /usr/lib/pymodules/python2.6/paste/script/command.py, line 123, in
 invoke
exit_code = runner.run(args)
  File /usr/lib/pymodules/python2.6/paste/script/command.py, line 218, in
 run
result = self.command()
  File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 276, in
 command
relative_to=base, global_conf=vars)
  File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 313, in
 loadapp
**kw)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 204, in
 loadapp
return loadobj(APP, uri, name=name, **kw)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 224, in
 loadobj
global_conf=global_conf)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 248, in
 loadcontext
global_conf=global_conf)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 278, in
 _loadconfig
return loader.get_context(object_type, name, global_conf)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 409, in
 get_context
section)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 431, in
 _context_from_use
object_type, name=use, global_conf=global_conf)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 361, in
 get_context
global_conf=global_conf)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 248, in
 loadcontext
global_conf=global_conf)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 285, in
 _loadegg
return loader.get_context(object_type, name, global_conf)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 561, in
 get_context
object_type, name=name)
  File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 587, in
 find_egg_entry_point
possible.append((entry.load(), protocol, entry.name))
  File /usr/lib/python2.6/dist-packages/pkg_resources.py, line 1954, in
 load
entry = __import__(self.module_name, globals(),globals(), ['__name__'])
 ImportError: No module named swat.config.middleware


 Any suggestions as to where to go from here?
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build onUbuntu Server

2011-01-24 Thread tms3





I am not sure how to use Microsoft AD tools to create shares and then 
set
those shares permissable to certain AD groups. For example, I need to 
create
a share called Finance and only the people in Finance can read/write 
to
it. I was hoping to use SWAT to help in creation and management of 
those

shares.


vi smb.conf (or your favorite text editor)

add

[finance]

...various parameter...
valid users = @finance

or

write list = @finance
read list = @finance




I have been using AD tools to manage the domain and GPO's but I am not 
sure

how to use them to create shares.

You can see swat for samba4 here: 
https://github.com/rvelhote/GSoC-SWAT


On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller 
muel...@tropenklinik.dewrote:




I thought swat is no longer working!!Just use Microsoft ads tools and 
you

are up and running.

---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: http://www.tropenklinik.de
---

-Ursprüngliche Nachricht-
Von: samba-boun...@lists.samba.org 
[mailto:samba-boun...@lists.samba.org]

Im
Auftrag von Lynn Dixon
Gesendet: Sonntag, 23. Januar 2011 06:39
An: samba@lists.samba.org
Betreff: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build 
on

Ubuntu Server

Hello all,
I have setup a complete domain using Samba 4 on my Ubuntu server 32 
bit

machine.  I am using the Alpha 13 build (it was actually in the Ubuntu
Repos). I am trying to setup swat to make it easier to manage shares.  
I
have followed the instructions at 
https://github.com/rvelhote/GSoC-SWATbut

I am having a few problems.

When I run ./run I get the following errors:
jenfab@dc:~/GSoC-SWAT$ sudo ./run
Starting subprocess with file monitor
Traceback (most recent call last):
   File /usr/local/bin/paster, line 9, in module
   load_entry_point('PasteScript==1.7.3', 'console_scripts', 
'paster')()
   File /usr/lib/pymodules/python2.6/paste/script/command.py, line 
84, in

run
   invoke(command, command_name, options, args[1:])
   File /usr/lib/pymodules/python2.6/paste/script/command.py, line 
123, in

invoke
   exit_code = runner.run(args)
   File /usr/lib/pymodules/python2.6/paste/script/command.py, line 
218, in

run
   result = self.command()
   File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 
276, in

command
   relative_to=base, global_conf=vars)
   File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 
313, in

loadapp
   **kw)
   File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 
204, in

loadapp
   return loadobj(APP, uri, name=name, **kw)
   File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 
224, in

loadobj
   global_conf=global_conf)
   File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 
248, in

loadcontext
   global_conf=global_conf)
   File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 
278, in

_loadconfig
   return loader.get_context(object_type, name, global_conf)
   File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 
409, in

get_context
   section)
   File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 
431, in

_context_from_use
   object_type, name=use, global_conf=global_conf)
   File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 
361, in

get_context
   global_conf=global_conf)
   File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 
248, in

loadcontext
   global_conf=global_conf)
   File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 
285, in

_loadegg
   return loader.get_context(object_type, name, global_conf)
   File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 
561, in

get_context
   object_type, name=name)
   File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 
587, in

find_egg_entry_point
   possible.append((entry.load(), protocol, entry.name))
   File /usr/lib/python2.6/dist-packages/pkg_resources.py, line 
1954, in

load
   entry = __import__(self.module_name, globals(),globals(), 
['__name__'])

ImportError: No module named swat.config.middleware


Any suggestions as to where to go from here?
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba


--

To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Invitation to connect on LinkedIn

2011-01-24 Thread Matheus Morais via LinkedIn
LinkedIn
Matheus Morais requested to add you as a connection on LinkedIn:
--

Serge,

I'd like to add you to my professional network on LinkedIn.

- Matheus

Accept invitation from Matheus Morais
http://www.linkedin.com/e/mzateh-gjbieyy7-1u/vTWyDe4yCEPPQyWVLZMh1H4yCEPPQGFCi7/blk/I49048324_25/pmpxnSRJrSdvj4R5fnhv9ClRsDgZp6lQs6lzoQ5AomZIpn8_dj9vd38Pe3gMejh9bSd2pQBRozh4bPsVc3oScj0Mcz8LrCBxbOYWrSlI/EML_comm_afe/

View invitation from Matheus Morais
http://www.linkedin.com/e/mzateh-gjbieyy7-1u/vTWyDe4yCEPPQyWVLZMh1H4yCEPPQGFCi7/blk/I49048324_25/0RcBYQczcUd30Vd4ALqnpPbOYWrSlI/svi/
 

--
DID YOU KNOW you can use your LinkedIn profile as your website? Select a vanity 
URL and then promote this address on your business cards, email signatures, 
website, etc
http://www.linkedin.com/e/mzateh-gjbieyy7-1u/ewp/inv-21/


 
-- 
(c) 2010, LinkedIn Corporation
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build onUbuntu Server

2011-01-24 Thread Lynn Dixon
Thanks. I tried both paramaters in my smb.conf but I got errors when I tried
both:

jenfab@dc:~$ sudo /etc/init.d/samba4 restart
 * Stopping Samba 4 daemon samba
[ OK ]
 * Starting Samba 4 daemon
sambaUnknown parameter
encountered: valid users
Ignoring unknown parameter valid users
 [
OK ]
jenfab@dc:~$ sudo nano /etc/samba/smb.conf
jenfab@dc:~$ sudo /etc/init.d/samba4 restart
 * Stopping Samba 4 daemon samba [
OK ]
 * Starting Samba 4 daemon
sambaUnknown parameter
encountered: write list
Ignoring unknown parameter write list
Unknown parameter encountered: read list
Ignoring unknown parameter read list
 [
OK ]


On Mon, Jan 24, 2011 at 9:52 AM, t...@tms3.com wrote:



 I am not sure how to use Microsoft AD tools to create shares and then set
 those shares permissable to certain AD groups. For example, I need to
 create
 a share called Finance and only the people in Finance can read/write to
 it. I was hoping to use SWAT to help in creation and management of those
 shares.

 vi smb.conf (or your favorite text editor)

 add

 [finance]

 ...various parameter...
 valid users = @finance

 or

 write list = @finance
 read list = @finance



 I have been using AD tools to manage the domain and GPO's but I am not sure
 how to use them to create shares.

 You can see swat for samba4 here: https://github.com/rvelhote/GSoC-SWAT

 On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller muel...@tropenklinik.de
 wrote:

 I thought swat is no longer working!!Just use Microsoft ads tools and you
 are up and running.

 ---
 EDV Daniel Müller

 Leitung EDV
 Tropenklinik Paul-Lechler-Krankenhaus
 Paul-Lechler-Str. 24
 72076 Tübingen

 Tel.: 07071/206-463, Fax: 07071/206-499
 eMail: muel...@tropenklinik.de
 Internet: http://www.tropenklinik.de

 ---

 -Ursprüngliche Nachricht-
 Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
 Im
 Auftrag von Lynn Dixon
 Gesendet: Sonntag, 23. Januar 2011 06:39
 An: samba@lists.samba.org
 Betreff: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on
 Ubuntu Server

 Hello all,
 I have setup a complete domain using Samba 4 on my Ubuntu server 32 bit
 machine. I am using the Alpha 13 build (it was actually in the Ubuntu
 Repos). I am trying to setup swat to make it easier to manage shares. I
 have followed the instructions at https://github.com/rvelhote/GSoC-SWATbut
 I am having a few problems.

 When I run ./run I get the following errors:
 jenfab@dc:~/GSoC-SWAT$ sudo ./run
 Starting subprocess with file monitor
 Traceback (most recent call last):
File /usr/local/bin/paster, line 9, in module
  load_entry_point('PasteScript==1.7.3', 'console_scripts', 'paster')()
File /usr/lib/pymodules/python2.6/paste/script/command.py, line 84, in
 run
  invoke(command, command_name, options, args[1:])
File /usr/lib/pymodules/python2.6/paste/script/command.py, line 123,
 in
 invoke
  exit_code = runner.run(args)
File /usr/lib/pymodules/python2.6/paste/script/command.py, line 218,
 in
 run
  result = self.command()
File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 276, in
 command
  relative_to=base, global_conf=vars)
File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 313, in
 loadapp
  **kw)
File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 204,
 in
 loadapp
  return loadobj(APP, uri, name=name, **kw)
File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 224,
 in
 loadobj
  global_conf=global_conf)
File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 248,
 in
 loadcontext
  global_conf=global_conf)
File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 278,
 in
 _loadconfig
  return loader.get_context(object_type, name, global_conf)
File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 409,
 in
 get_context
  section)
File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 431,
 in
 _context_from_use
  object_type, name=use, global_conf=global_conf)
File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 361,
 in
 get_context
  global_conf=global_conf)
File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 248,
 in
 loadcontext
  global_conf=global_conf)
File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 285,
 in
 _loadegg
  return loader.get_context(object_type, name, global_conf)
File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 561,
 in
 get_context
  object_type, name=name)
File 

Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build onUbuntu Server

2011-01-24 Thread Taylor, Jonn
This is all you need.

 [test]
   path = /data/test
   read only = no

Then use windows to set the acl's.

Jonn

http://wiki.samba.org/index.php/Samba4/HOWTO

On 01/24/2011 09:24 AM, Lynn Dixon wrote:
 Thanks. I tried both paramaters in my smb.conf but I got errors when I tried
 both:

 jenfab@dc:~$ sudo /etc/init.d/samba4 restart
  * Stopping Samba 4 daemon samba
 [ OK ]
  * Starting Samba 4 daemon
 sambaUnknown parameter
 encountered: valid users
 Ignoring unknown parameter valid users
  [
 OK ]
 jenfab@dc:~$ sudo nano /etc/samba/smb.conf
 jenfab@dc:~$ sudo /etc/init.d/samba4 restart
  * Stopping Samba 4 daemon samba [
 OK ]
  * Starting Samba 4 daemon
 sambaUnknown parameter
 encountered: write list
 Ignoring unknown parameter write list
 Unknown parameter encountered: read list
 Ignoring unknown parameter read list
  [
 OK ]


 On Mon, Jan 24, 2011 at 9:52 AM, t...@tms3.com wrote:


 I am not sure how to use Microsoft AD tools to create shares and then set
 those shares permissable to certain AD groups. For example, I need to
 create
 a share called Finance and only the people in Finance can read/write to
 it. I was hoping to use SWAT to help in creation and management of those
 shares.

 vi smb.conf (or your favorite text editor)

 add

 [finance]

 ...various parameter...
 valid users = @finance

 or

 write list = @finance
 read list = @finance



 I have been using AD tools to manage the domain and GPO's but I am not sure
 how to use them to create shares.

 You can see swat for samba4 here: https://github.com/rvelhote/GSoC-SWAT

 On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller muel...@tropenklinik.de
 wrote:
 I thought swat is no longer working!!Just use Microsoft ads tools and you
 are up and running.

 ---
 EDV Daniel Müller

 Leitung EDV
 Tropenklinik Paul-Lechler-Krankenhaus
 Paul-Lechler-Str. 24
 72076 Tübingen

 Tel.: 07071/206-463, Fax: 07071/206-499
 eMail: muel...@tropenklinik.de
 Internet: http://www.tropenklinik.de

 ---

 -Ursprüngliche Nachricht-
 Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
 Im
 Auftrag von Lynn Dixon
 Gesendet: Sonntag, 23. Januar 2011 06:39
 An: samba@lists.samba.org
 Betreff: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on
 Ubuntu Server

 Hello all,
 I have setup a complete domain using Samba 4 on my Ubuntu server 32 bit
 machine. I am using the Alpha 13 build (it was actually in the Ubuntu
 Repos). I am trying to setup swat to make it easier to manage shares. I
 have followed the instructions at https://github.com/rvelhote/GSoC-SWATbut
 I am having a few problems.

 When I run ./run I get the following errors:
 jenfab@dc:~/GSoC-SWAT$ sudo ./run
 Starting subprocess with file monitor
 Traceback (most recent call last):
File /usr/local/bin/paster, line 9, in module
  load_entry_point('PasteScript==1.7.3', 'console_scripts', 'paster')()
File /usr/lib/pymodules/python2.6/paste/script/command.py, line 84, in
 run
  invoke(command, command_name, options, args[1:])
File /usr/lib/pymodules/python2.6/paste/script/command.py, line 123,
 in
 invoke
  exit_code = runner.run(args)
File /usr/lib/pymodules/python2.6/paste/script/command.py, line 218,
 in
 run
  result = self.command()
File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 276, in
 command
  relative_to=base, global_conf=vars)
File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 313, in
 loadapp
  **kw)
File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 204,
 in
 loadapp
  return loadobj(APP, uri, name=name, **kw)
File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 224,
 in
 loadobj
  global_conf=global_conf)
File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 248,
 in
 loadcontext
  global_conf=global_conf)
File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 278,
 in
 _loadconfig
  return loader.get_context(object_type, name, global_conf)
File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 409,
 in
 get_context
  section)
File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 431,
 in
 _context_from_use
  object_type, name=use, global_conf=global_conf)
File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 361,
 in
 get_context
  global_conf=global_conf)
File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 248,
 in
 loadcontext
  global_conf=global_conf)
File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 285,
 in
 _loadegg
  return 

Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build onUbuntu Server

2011-01-24 Thread Lynn Dixon
That was the first thing that I had tried.  I created a share using
smb.conf, then restarted samba.
I can see the share, and navigate down into it from windows.  If I create a
folder and then rick click from a windows machine and do security, I can add
groups, but when I try to save, the changes just disappear.

What is the best way to manage ACL's on the share from a windows machine?

Sorry for all the questions, this is my first venture into a Samba 4 AD
environment.  I have used Samba 2/3 i on a workgroup in the past and used
different security schemes.

On Mon, Jan 24, 2011 at 10:37 AM, Taylor, Jonn jo...@taylortelephone.comwrote:

 This is all you need.

  [test]
   path = /data/test
   read only = no

 Then use windows to set the acl's.

 Jonn

 http://wiki.samba.org/index.php/Samba4/HOWTO

 On 01/24/2011 09:24 AM, Lynn Dixon wrote:
  Thanks. I tried both paramaters in my smb.conf but I got errors when I
 tried
  both:
 
  jenfab@dc:~$ sudo /etc/init.d/samba4 restart
   * Stopping Samba 4 daemon samba
  [ OK ]
   * Starting Samba 4 daemon
  sambaUnknown parameter
  encountered: valid users
  Ignoring unknown parameter valid users
 
  [
  OK ]
  jenfab@dc:~$ sudo nano /etc/samba/smb.conf
  jenfab@dc:~$ sudo /etc/init.d/samba4 restart
   * Stopping Samba 4 daemon samba
 [
  OK ]
   * Starting Samba 4 daemon
  sambaUnknown parameter
  encountered: write list
  Ignoring unknown parameter write list
  Unknown parameter encountered: read list
  Ignoring unknown parameter read list
 
  [
  OK ]
 
 
  On Mon, Jan 24, 2011 at 9:52 AM, t...@tms3.com wrote:
 
 
  I am not sure how to use Microsoft AD tools to create shares and then
 set
  those shares permissable to certain AD groups. For example, I need to
  create
  a share called Finance and only the people in Finance can read/write
 to
  it. I was hoping to use SWAT to help in creation and management of those
  shares.
 
  vi smb.conf (or your favorite text editor)
 
  add
 
  [finance]
 
  ...various parameter...
  valid users = @finance
 
  or
 
  write list = @finance
  read list = @finance
 
 
 
  I have been using AD tools to manage the domain and GPO's but I am not
 sure
  how to use them to create shares.
 
  You can see swat for samba4 here: https://github.com/rvelhote/GSoC-SWAT
 
  On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller muel...@tropenklinik.de
  wrote:
  I thought swat is no longer working!!Just use Microsoft ads tools and
 you
  are up and running.
 
  ---
  EDV Daniel Müller
 
  Leitung EDV
  Tropenklinik Paul-Lechler-Krankenhaus
  Paul-Lechler-Str. 24
  72076 Tübingen
 
  Tel.: 07071/206-463, Fax: 07071/206-499
  eMail: muel...@tropenklinik.de
  Internet: http://www.tropenklinik.de
 
  ---
 
  -Ursprüngliche Nachricht-
  Von: samba-boun...@lists.samba.org [mailto:
 samba-boun...@lists.samba.org]
  Im
  Auftrag von Lynn Dixon
  Gesendet: Sonntag, 23. Januar 2011 06:39
  An: samba@lists.samba.org
  Betreff: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on
  Ubuntu Server
 
  Hello all,
  I have setup a complete domain using Samba 4 on my Ubuntu server 32 bit
  machine. I am using the Alpha 13 build (it was actually in the Ubuntu
  Repos). I am trying to setup swat to make it easier to manage shares. I
  have followed the instructions at
 https://github.com/rvelhote/GSoC-SWATbut
  I am having a few problems.
 
  When I run ./run I get the following errors:
  jenfab@dc:~/GSoC-SWAT$ sudo ./run
  Starting subprocess with file monitor
  Traceback (most recent call last):
 File /usr/local/bin/paster, line 9, in module
   load_entry_point('PasteScript==1.7.3', 'console_scripts',
 'paster')()
 File /usr/lib/pymodules/python2.6/paste/script/command.py, line 84,
 in
  run
   invoke(command, command_name, options, args[1:])
 File /usr/lib/pymodules/python2.6/paste/script/command.py, line
 123,
  in
  invoke
   exit_code = runner.run(args)
 File /usr/lib/pymodules/python2.6/paste/script/command.py, line
 218,
  in
  run
   result = self.command()
 File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 276,
 in
  command
   relative_to=base, global_conf=vars)
 File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 313,
 in
  loadapp
   **kw)
 File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line
 204,
  in
  loadapp
   return loadobj(APP, uri, name=name, **kw)
 File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line
 224,
  in
  loadobj
   global_conf=global_conf)
 File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line
 248,
  in
  loadcontext
   global_conf=global_conf)
 File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line
 278,
  in
  _loadconfig
   return loader.get_context(object_type, 

Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build onUbuntu Server

2011-01-24 Thread Taylor, Jonn
Go to advanced when changing ACL's.

Jonn

On 01/24/2011 09:48 AM, Lynn Dixon wrote:
 That was the first thing that I had tried.  I created a share using
 smb.conf, then restarted samba.
 I can see the share, and navigate down into it from windows.  If I
 create a folder and then rick click from a windows machine and do
 security, I can add groups, but when I try to save, the changes just
 disappear.

 What is the best way to manage ACL's on the share from a windows machine?

 Sorry for all the questions, this is my first venture into a Samba 4
 AD environment.  I have used Samba 2/3 i on a workgroup in the past
 and used different security schemes.

 On Mon, Jan 24, 2011 at 10:37 AM, Taylor, Jonn
 jo...@taylortelephone.com mailto:jo...@taylortelephone.com wrote:

 This is all you need.

  [test]
   path = /data/test
   read only = no

 Then use windows to set the acl's.

 Jonn

 http://wiki.samba.org/index.php/Samba4/HOWTO

 On 01/24/2011 09:24 AM, Lynn Dixon wrote:
  Thanks. I tried both paramaters in my smb.conf but I got errors
 when I tried
  both:
 
  jenfab@dc:~$ sudo /etc/init.d/samba4 restart
   * Stopping Samba 4 daemon samba
  [ OK ]
   * Starting Samba 4 daemon
  sambaUnknown
 parameter
  encountered: valid users
  Ignoring unknown parameter valid users
 
  [
  OK ]
  jenfab@dc:~$ sudo nano /etc/samba/smb.conf
  jenfab@dc:~$ sudo /etc/init.d/samba4 restart
   * Stopping Samba 4 daemon samba
 [
  OK ]
   * Starting Samba 4 daemon
  sambaUnknown
 parameter
  encountered: write list
  Ignoring unknown parameter write list
  Unknown parameter encountered: read list
  Ignoring unknown parameter read list
 
  [
  OK ]
 
 
  On Mon, Jan 24, 2011 at 9:52 AM, t...@tms3.com
 mailto:t...@tms3.com wrote:
 
 
  I am not sure how to use Microsoft AD tools to create shares
 and then set
  those shares permissable to certain AD groups. For example, I
 need to
  create
  a share called Finance and only the people in Finance can
 read/write to
  it. I was hoping to use SWAT to help in creation and management
 of those
  shares.
 
  vi smb.conf (or your favorite text editor)
 
  add
 
  [finance]
 
  ...various parameter...
  valid users = @finance
 
  or
 
  write list = @finance
  read list = @finance
 
 
 
  I have been using AD tools to manage the domain and GPO's but I
 am not sure
  how to use them to create shares.
 
  You can see swat for samba4 here:
 https://github.com/rvelhote/GSoC-SWAT
 
  On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller
 muel...@tropenklinik.de mailto:muel...@tropenklinik.de
  wrote:
  I thought swat is no longer working!!Just use Microsoft ads
 tools and you
  are up and running.
 
  ---
  EDV Daniel Müller
 
  Leitung EDV
  Tropenklinik Paul-Lechler-Krankenhaus
  Paul-Lechler-Str. 24
  72076 Tübingen
 
  Tel.: 07071/206-463, Fax: 07071/206-499
  eMail: muel...@tropenklinik.de mailto:muel...@tropenklinik.de
  Internet: http://www.tropenklinik.de
 
  ---
 
  -Ursprüngliche Nachricht-
  Von: samba-boun...@lists.samba.org
 mailto:samba-boun...@lists.samba.org
 [mailto:samba-boun...@lists.samba.org
 mailto:samba-boun...@lists.samba.org]
  Im
  Auftrag von Lynn Dixon
  Gesendet: Sonntag, 23. Januar 2011 06:39
  An: samba@lists.samba.org mailto:samba@lists.samba.org
  Betreff: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13
 build on
  Ubuntu Server
 
  Hello all,
  I have setup a complete domain using Samba 4 on my Ubuntu
 server 32 bit
  machine. I am using the Alpha 13 build (it was actually in the
 Ubuntu
  Repos). I am trying to setup swat to make it easier to manage
 shares. I
  have followed the instructions at
 https://github.com/rvelhote/GSoC-SWATbut
  I am having a few problems.
 
  When I run ./run I get the following errors:
  jenfab@dc:~/GSoC-SWAT$ sudo ./run
  Starting subprocess with file monitor
  Traceback (most recent call last):
 File /usr/local/bin/paster, line 9, in module
   load_entry_point('PasteScript==1.7.3', 'console_scripts',
 'paster')()
 File /usr/lib/pymodules/python2.6/paste/script/command.py,
 line 84, in
  run
   

Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build onUbuntu Server

2011-01-24 Thread Lynn Dixon
Ok. I tried the following:
Navigate to share, right click -- Properties. Went to security tab then
clicked advanced
That opened up and I was able to click Add and then add my Finance AD group.
The Finance group even shows up with the selected permissions in the list of
users/groups.  BUT, when I click Apply all of the changes vanish. I took
some snapshots. Check them at the links:

Before changes:
http://lh3.ggpht.com/_qETGDInSB7Q/TT2tBxte7uI/Lcw/Mf8kYZxcUxI/s400/finance1.JPG
After adding Finance:
http://lh4.ggpht.com/_qETGDInSB7Q/TT2tCEhe8kI/Lc0/4thnUxi_sBo/s400/finance2.JPG

But when I click apply, the jenfab\finance group dissappears from the list
and the changes never save.

I have tried giving 777 perms on the actual directory on my ubuntu box to
troubleshoot, but had same results.  I have also verified that ACL package
has been installed on my Ubuntu machine. What user:group do I need to have
the actual directory on the ubuntu machine set to?  Any other things I
should try?

On Mon, Jan 24, 2011 at 11:02 AM, Taylor, Jonn jo...@taylortelephone.comwrote:

  Go to advanced when changing ACL's.

 Jonn


 On 01/24/2011 09:48 AM, Lynn Dixon wrote:

 That was the first thing that I had tried.  I created a share using
 smb.conf, then restarted samba.
 I can see the share, and navigate down into it from windows.  If I create a
 folder and then rick click from a windows machine and do security, I can add
 groups, but when I try to save, the changes just disappear.

 What is the best way to manage ACL's on the share from a windows machine?

 Sorry for all the questions, this is my first venture into a Samba 4 AD
 environment.  I have used Samba 2/3 i on a workgroup in the past and used
 different security schemes.

 On Mon, Jan 24, 2011 at 10:37 AM, Taylor, Jonn 
 jo...@taylortelephone.comwrote:

 This is all you need.

  [test]
   path = /data/test
   read only = no

 Then use windows to set the acl's.

 Jonn

 http://wiki.samba.org/index.php/Samba4/HOWTO

 On 01/24/2011 09:24 AM, Lynn Dixon wrote:
  Thanks. I tried both paramaters in my smb.conf but I got errors when I
 tried
  both:
 
  jenfab@dc:~$ sudo /etc/init.d/samba4 restart
   * Stopping Samba 4 daemon samba
  [ OK ]
   * Starting Samba 4 daemon
  sambaUnknown parameter
  encountered: valid users
  Ignoring unknown parameter valid users
 
  [
  OK ]
  jenfab@dc:~$ sudo nano /etc/samba/smb.conf
  jenfab@dc:~$ sudo /etc/init.d/samba4 restart
   * Stopping Samba 4 daemon samba
 [
  OK ]
   * Starting Samba 4 daemon
  sambaUnknown parameter
  encountered: write list
  Ignoring unknown parameter write list
  Unknown parameter encountered: read list
  Ignoring unknown parameter read list
 
  [
  OK ]
 
 
  On Mon, Jan 24, 2011 at 9:52 AM, t...@tms3.com wrote:
 
 
  I am not sure how to use Microsoft AD tools to create shares and then
 set
  those shares permissable to certain AD groups. For example, I need to
  create
  a share called Finance and only the people in Finance can read/write
 to
  it. I was hoping to use SWAT to help in creation and management of
 those
  shares.
 
  vi smb.conf (or your favorite text editor)
 
  add
 
  [finance]
 
  ...various parameter...
  valid users = @finance
 
  or
 
  write list = @finance
  read list = @finance
 
 
 
  I have been using AD tools to manage the domain and GPO's but I am not
 sure
  how to use them to create shares.
 
  You can see swat for samba4 here:
 https://github.com/rvelhote/GSoC-SWAT
 
  On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller 
 muel...@tropenklinik.de
  wrote:
  I thought swat is no longer working!!Just use Microsoft ads tools and
 you
  are up and running.
 
  ---
  EDV Daniel Müller
 
  Leitung EDV
  Tropenklinik Paul-Lechler-Krankenhaus
  Paul-Lechler-Str. 24
  72076 Tübingen
 
  Tel.: 07071/206-463, Fax: 07071/206-499
  eMail: muel...@tropenklinik.de
  Internet: http://www.tropenklinik.de
 
  ---
 
  -Ursprüngliche Nachricht-
  Von: samba-boun...@lists.samba.org [mailto:
 samba-boun...@lists.samba.org]
  Im
  Auftrag von Lynn Dixon
  Gesendet: Sonntag, 23. Januar 2011 06:39
  An: samba@lists.samba.org
  Betreff: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on
  Ubuntu Server
 
  Hello all,
  I have setup a complete domain using Samba 4 on my Ubuntu server 32 bit
  machine. I am using the Alpha 13 build (it was actually in the Ubuntu
  Repos). I am trying to setup swat to make it easier to manage shares. I
  have followed the instructions at
 https://github.com/rvelhote/GSoC-SWATbut
  I am having a few problems.
 
  When I run ./run I get the following errors:
  jenfab@dc:~/GSoC-SWAT$ sudo ./run
  Starting subprocess with file monitor
  Traceback (most recent call last):
 File /usr/local/bin/paster, line 9, in module
   

Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build onUbuntu Server

2011-01-24 Thread Taylor, Jonn
Need to see you samba logs. They are in /usr/local/samba/var/samb.log by
default. Directory owner needs to be root and group should be users or
staff.

Also make sure that you can set the ACL's from the command prompt. How
to do this is on the wiki.

Jonn

On 01/24/2011 10:50 AM, Lynn Dixon wrote:
 Ok. I tried the following:
 Navigate to share, right click -- Properties. Went to security tab
 then clicked advanced
 That opened up and I was able to click Add and then add my Finance AD
 group. The Finance group even shows up with the selected permissions
 in the list of users/groups.  BUT, when I click Apply all of the
 changes vanish. I took some snapshots. Check them at the links:

 Before changes: 
 http://lh3.ggpht.com/_qETGDInSB7Q/TT2tBxte7uI/Lcw/Mf8kYZxcUxI/s400/finance1.JPG
 After adding Finance:
 http://lh4.ggpht.com/_qETGDInSB7Q/TT2tCEhe8kI/Lc0/4thnUxi_sBo/s400/finance2.JPG

 But when I click apply, the jenfab\finance group dissappears from the
 list and the changes never save.

 I have tried giving 777 perms on the actual directory on my ubuntu box
 to troubleshoot, but had same results.  I have also verified that ACL
 package has been installed on my Ubuntu machine. What user:group do I
 need to have the actual directory on the ubuntu machine set to?  Any
 other things I should try?

 On Mon, Jan 24, 2011 at 11:02 AM, Taylor, Jonn
 jo...@taylortelephone.com mailto:jo...@taylortelephone.com wrote:

 Go to advanced when changing ACL's.

 Jonn


 On 01/24/2011 09:48 AM, Lynn Dixon wrote:
 That was the first thing that I had tried.  I created a share
 using smb.conf, then restarted samba.
 I can see the share, and navigate down into it from windows.  If
 I create a folder and then rick click from a windows machine and
 do security, I can add groups, but when I try to save, the
 changes just disappear.

 What is the best way to manage ACL's on the share from a windows
 machine?

 Sorry for all the questions, this is my first venture into a
 Samba 4 AD environment.  I have used Samba 2/3 i on a workgroup
 in the past and used different security schemes.

 On Mon, Jan 24, 2011 at 10:37 AM, Taylor, Jonn
 jo...@taylortelephone.com mailto:jo...@taylortelephone.com wrote:

 This is all you need.

  [test]
   path = /data/test
   read only = no

 Then use windows to set the acl's.

 Jonn

 http://wiki.samba.org/index.php/Samba4/HOWTO

 On 01/24/2011 09:24 AM, Lynn Dixon wrote:
  Thanks. I tried both paramaters in my smb.conf but I got
 errors when I tried
  both:
 
  jenfab@dc:~$ sudo /etc/init.d/samba4 restart
   * Stopping Samba 4 daemon samba
  [ OK ]
   * Starting Samba 4 daemon
  samba  
  Unknown parameter
  encountered: valid users
  Ignoring unknown parameter valid users
 
  [
  OK ]
  jenfab@dc:~$ sudo nano /etc/samba/smb.conf
  jenfab@dc:~$ sudo /etc/init.d/samba4 restart
   * Stopping Samba 4 daemon samba  
   [
  OK ]
   * Starting Samba 4 daemon
  samba  
  Unknown parameter
  encountered: write list
  Ignoring unknown parameter write list
  Unknown parameter encountered: read list
  Ignoring unknown parameter read list
 
  [
  OK ]
 
 
  On Mon, Jan 24, 2011 at 9:52 AM, t...@tms3.com
 mailto:t...@tms3.com wrote:
 
 
  I am not sure how to use Microsoft AD tools to create
 shares and then set
  those shares permissable to certain AD groups. For
 example, I need to
  create
  a share called Finance and only the people in Finance
 can read/write to
  it. I was hoping to use SWAT to help in creation and
 management of those
  shares.
 
  vi smb.conf (or your favorite text editor)
 
  add
 
  [finance]
 
  ...various parameter...
  valid users = @finance
 
  or
 
  write list = @finance
  read list = @finance
 
 
 
  I have been using AD tools to manage the domain and GPO's
 but I am not sure
  how to use them to create shares.
 
  You can see swat for samba4 here:
 https://github.com/rvelhote/GSoC-SWAT
 
  On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller
 muel...@tropenklinik.de 

[Samba] some users can login

2011-01-24 Thread Jon Colás Gómez
*I have a PDC on ubuntu 10.04. Samba ver 3.4.7.*

At the first of my installation all users can login on windows xp machines
and access to the samba shares . But now only two domain users can log in on
it, but all users can access to the samba shares. When i boot a windows xp
machine and i try to log in with an user i got this:

The system could not log you on. Make sure your user name and domain are
correct, then type your password again. Letters in passwords must be typed
using the correct case. Make sure that Caps Lock is not accidentally on.


You can give me a clue?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build onUbuntu Server

2011-01-24 Thread Taylor, Jonn
Check you permissions on the folders.

[Mon Jan 24 11:30:24 2011 EST, 0
../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()]
../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' -
wanted 0x010e but got 0xfff3 (missing 0x000c)
[Mon Jan 24 11:30:24 2011 EST, 0
../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()]
../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' -
wanted 0x0004 but got 0xfef3 (missing 0x0004)
[Mon Jan 24 11:30:24 2011 EST, 0
../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()]
../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' -
wanted 0x0008 but got 0xfef3 (missing 0x0008)
[Mon Jan 24 11:31:06 2011 EST, 0
../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()]
../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' -
wanted 0x0006 but got 0xfef3 (missing 0x0004)
[Mon Jan 24 11:31:06 2011 EST, 0
../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()]
../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' -
wanted 0x0006 but got 0xfef3 (missing 0x0004)
[Mon Jan 24 11:32:05 2011 EST, 0
../dsdb/kcc/kcc_topology.c:3479:kcctpl_test()]
Testing kcctpl_create_intersite_connections
[Mon Jan 24 11:35:28 2011 EST, 0
../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()]
../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' -
wanted 0x0006 but got 0xfef3 (missing 0x0004)
[Mon Jan 24 11:35:28 2011 EST, 0
../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()]
../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' -
wanted 0x0006 but got 0xfef3 (missing 0x0004)

Jonn

On 01/24/2011 11:07 AM, Lynn Dixon wrote:
 Thanks for the help.  I have attached my samba.log. 



 On Mon, Jan 24, 2011 at 11:58 AM, Taylor, Jonn
 jo...@taylortelephone.com mailto:jo...@taylortelephone.com wrote:

 Need to see you samba logs. They are in
 /usr/local/samba/var/samb.log by default. Directory owner needs to
 be root and group should be users or staff.

 Also make sure that you can set the ACL's from the command prompt.
 How to do this is on the wiki.

 Jonn


 On 01/24/2011 10:50 AM, Lynn Dixon wrote:
 Ok. I tried the following:
 Navigate to share, right click -- Properties. Went to security
 tab then clicked advanced
 That opened up and I was able to click Add and then add my
 Finance AD group. The Finance group even shows up with the
 selected permissions in the list of users/groups.  BUT, when I
 click Apply all of the changes vanish. I took some snapshots.
 Check them at the links:

 Before changes: 
 
 http://lh3.ggpht.com/_qETGDInSB7Q/TT2tBxte7uI/Lcw/Mf8kYZxcUxI/s400/finance1.JPG
 After adding Finance:
 
 http://lh4.ggpht.com/_qETGDInSB7Q/TT2tCEhe8kI/Lc0/4thnUxi_sBo/s400/finance2.JPG

 But when I click apply, the jenfab\finance group dissappears from
 the list and the changes never save.

 I have tried giving 777 perms on the actual directory on my
 ubuntu box to troubleshoot, but had same results.  I have also
 verified that ACL package has been installed on my Ubuntu
 machine. What user:group do I need to have the actual directory
 on the ubuntu machine set to?  Any other things I should try?

 On Mon, Jan 24, 2011 at 11:02 AM, Taylor, Jonn
 jo...@taylortelephone.com mailto:jo...@taylortelephone.com wrote:

 Go to advanced when changing ACL's.

 Jonn


 On 01/24/2011 09:48 AM, Lynn Dixon wrote:
 That was the first thing that I had tried.  I created a
 share using smb.conf, then restarted samba.
 I can see the share, and navigate down into it from
 windows.  If I create a folder and then rick click from a
 windows machine and do security, I can add groups, but when
 I try to save, the changes just disappear.

 What is the best way to manage ACL's on the share from a
 windows machine?

 Sorry for all the questions, this is my first venture into a
 Samba 4 AD environment.  I have used Samba 2/3 i on a
 workgroup in the past and used different security schemes.

 On Mon, Jan 24, 2011 at 10:37 AM, Taylor, Jonn
 jo...@taylortelephone.com
 mailto:jo...@taylortelephone.com wrote:

 This is all you need.

  [test]
   path = /data/test
   read only = no

 Then use windows to set the acl's.

 Jonn

 http://wiki.samba.org/index.php/Samba4/HOWTO

 On 01/24/2011 09:24 AM, Lynn Dixon wrote:
  Thanks. I tried both paramaters in my smb.conf but I
 got errors when I tried
  both:
 
  jenfab@dc:~$ sudo /etc/init.d/samba4 restart
   * Stopping Samba 4 daemon samba
  [ OK ]
   * Starting 

Re: [Samba] some users can login

2011-01-24 Thread Gaiseric Vandal

Look at the event logs on your PC.
Look at the samba logs on the server.

If only two users can even log into the XP machines, how can ALL users 
access the shares?  Or are they accessing shares from non-XP machines?


Did you check pdbedit -v someuser to compare the users who can login 
with the users who cannot?


Are the users in more than 16 groups?


On 01/24/2011 11:59 AM, Jon Colás Gómez wrote:

*I have a PDC on ubuntu 10.04. Samba ver 3.4.7.*

At the first of my installation all users can login on windows xp machines
and access to the samba shares . But now only two domain users can log in on
it, but all users can access to the samba shares. When i boot a windows xp
machine and i try to log in with an user i got this:

The system could not log you on. Make sure your user name and domain are
correct, then type your password again. Letters in passwords must be typed
using the correct case. Make sure that Caps Lock is not accidentally on.


You can give me a clue?
   


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Upgrading from 3.0.23 but group_mapping.tdb is empty on current config

2011-01-24 Thread sgbarrett

Hi all,

I've done a serious amount of reading around this but I still can't figure out 
the implications of what I'm seeing.

I have inherited a CentOS 4 Samba 3.0.23 PDC  file server for 40 hosts that 
has been through the wars.  It is standalone and stable and uses the smbpasswd 
file authentication backend, however I need to upgrade for Windows 7 support.

I intend to build a server from scratch to the latest packages in CentOS 5 
(3.3.8), set an identical local SID for the domain name, bring across the 
smbpasswd file and then migrate to a tdbsam passdb when I am confident that 
there are no issues.  

In practically every Samba PDC guide I have read it says that I need to map the 
Windows domain groups to unix groups.  On the current server, the net groupmap 
list command does not return any output.  Running 'strings' against 
/var/lib/samba/group_mapping.tdb shows the following entries:

# strings group_mapping.tdb
TDB file
INFO/version
BBB0
UNIXGROUP/S-1-5-32-544
Administrators
UNIXGROUP/S-1-5-32-545
Users
UNIXGROUP/S-1-5-32-546
Guests
UNIXGROUP/S-1-5-32-547
Power Users
UNIXGROUP/S-1-5-32-548
Account Operators
UNIXGROUP/S-1-5-32-549
System Operators
BBBP
UNIXGROUP/S-1-5-32-550
Print Operators
UNIXGROUP/S-1-5-32-551
Backup Operators
BBBP
UNIXGROUP/S-1-5-32-552
Replicators
UNIXGROUP/S-1-5-21-2805943957-1905505361-2100739042-512
Domain Admins
UNIXGROUP/S-1-5-21-2805943957-1905505361-2100739042-513
Domain Users
UNIXGROUP/S-1-5-21-2805943957-1905505361-2100739042-514
Domain Guests
UNIXGROUP/S-1-5-21-3753518464-2681452192-3078135741-512
Domain Admins
UNIXGROUP/S-1-5-21-3753518464-2681452192-3078135741-513
Domain Users
UNIXGROUP/S-1-5-21-3753518464-2681452192-3078135741-514
Domain Guests
UNIXGROUP/S-1-5-21-4236374240-3432822334-3570386938-512
Domain Admins
UNIXGROUP/S-1-5-21-4236374240-3432822334-3570386938-513
Domain Users
UNIXGROUP/S-1-5-21-4236374240-3432822334-3570386938-514
Domain Guests

That suggests to me that the group_mapping.tdb file has entries for three 
different domains for the groups Domain Admins, Domain Users and Domain Guests, 
but that none of them is my domain.  Is this correct?  We are not running any 
other domains here.

I also think that I will need to map Windows groups to unix groups on the new 
server.  Will this cause any trouble, given that the Windows machines aren't 
expecting it?  Currently no domain groups are available in Windows.  Access to 
the shares is managed at the Linux filesystem level with 'valid users' flags in 
the share options.

Should I start from scratch with an identical PDC SID, or will that cause other 
problems?

Best regards,

Simon Barrett

-
Find the home of your dreams with eircom net property
Sign up for email alerts now http://www.eircom.net/propertyalerts


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Problems accessing samba 3.5.7 from Windows 2008

2011-01-24 Thread Linux Addict
On Thu, May 13, 2010 at 2:17 AM, Laurenz, Dirk
dirk.laur...@ts.fujitsu.comwrote:

 any ideas anybody?

 Mit freundlichem Gruss,


 Dirk Laurenz
 Projektmanager

 FUJITSU TECHNOLOGY SOLUTIONS GmbH
 R DE GE TIS N IC 2
 Hildesheimer Strasse 25
 30880 Laatzen
 Germany
 Telephone:  +49 511 84 89 18 08
 Telefax:+49 511 84 89 25 18 08
 Mobile: +49 170 22 10 781
 Email:  dirk.laur...@ts.fujitsu.com
 Internet:   http://ts.fujitsu.com
 Firmenangaben:  http://de.ts.fujitsu.com/imprint.html

 Diese e-Mail kann vertrauliche und/oder rechtlich geschützte Informationen
 enthalten. Wenn Sie nicht der richtige Adressat sind oder diese e-Mail
 irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und
 vernichten Sie diese e-Mail. Das unerlaubte Kopieren sowie die unbefugte
 Weitergabe dieser e-Mail und ihrer Inhalte ist nicht gestattet.
 This e-mail may contain confidential and/or privileged information. If you
 are not the intended addressee or have received this e-mail in error, please
 notify the sender immediately and destroy this e-mail. Any unauthorized
 copying, disclosure or distribution of the material in this e-mail is
 strictly forbidden.


 -Original Message-
 From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
 On Behalf Of Laurenz, Dirk
 Sent: Tuesday, May 11, 2010 12:53 PM
 To: samba@lists.samba.org
 Subject: [Samba] Problems accessing samba 3.5.7 from Windows 2008

 Hi folks,

 i've set up a samba 3.5.7 as a ADS Memberserver (W2K3). Accessing this
 server from xp, vista or server 2003 is no problem.
 trying to access it from windows 2008 results in network path not found
 or generic network error.

 Last entries in logfile:

 [2010/05/11 12:48:01.055041,  3] smbd/sec_ctx.c:310(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
 [2010/05/11 12:48:01.055073,  3] smbd/reply.c:846(reply_tcon_and_X)
  tconX service=IPC$
 [2010/05/11 12:48:01.055595,  3] smbd/sec_ctx.c:310(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
 [2010/05/11 12:48:01.055658,  3] smbd/sec_ctx.c:310(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
 [2010/05/11 12:48:01.055685,  3] smbd/service.c:1250(close_cnum)
  172.17.4.48 (172.17.4.48) closed connection to service IPC$
 [2010/05/11 12:48:01.055709,  3] smbd/connection.c:31(yield_connection)
  Yielding connection to IPC$
 [2010/05/11 12:48:01.055750,  3] smbd/sec_ctx.c:310(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
 [2010/05/11 12:48:01.055811,  3] smbd/connection.c:31(yield_connection)
  Yielding connection to
 [2010/05/11 12:48:01.055899,  3] smbd/server.c:902(exit_server_common)
  Server exit (failed to receive smb request)

 smb.conf (w/o shares)
 [global]
workgroup = DOMAIN
realm = DOMAIN.NET
server string = SOMETHING
security = ADS
map to guest = Bad User
log level = 1
printcap name = /etc/printcap
wins server = $IP1, $IP2
idmap uid = 1-200
idmap gid = 1-200
template homedir = /home/%U
template shell = /bin/bash
winbind use default domain = Yes
winbind expand groups = 3
winbind refresh tickets = Yes
winbind offline logon = Yes
winbind normalize names = Yes
include = /etc/samba/%I.conf
bind interfaces only = yes
interfaces = 127.0.0.1, $IP/255.255.255.0




 Mit freundlichem Gruss,


 Dirk Laurenz
 Projektmanager

 FUJITSU TECHNOLOGY SOLUTIONS GmbH
 R DE GE TIS N IC 2
 Hildesheimer Strasse 25
 30880 Laatzen
 Germany
 Telephone:  +49 511 84 89 18 08
 Telefax:+49 511 84 89 25 18 08
 Mobile: +49 170 22 10 781
 Email:  dirk.laur...@ts.fujitsu.commailto:
 dirk.laur...@ts.fujitsu.com
 Internet:   http://ts.fujitsu.comhttp://ts.fujitsu.com/
 Firmenangaben:  http://de.ts.fujitsu.com/imprint.html

 Diese e-Mail kann vertrauliche und/oder rechtlich geschützte Informationen
 enthalten. Wenn Sie nicht der richtige Adressat sind oder diese e-Mail
 irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und
 vernichten Sie diese e-Mail. Das


There is a bug where a client connect 443 if it timesout, it connects to
139. Bud ID 7881.

Where did you download  3.5.7 from?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 buildonUbuntu Server

2011-01-24 Thread tms3







But when I click apply, the jenfab\finance group dissappears from the 
list and the changes never save.


What OS are you using? If Linux then make sure share file system is 
xattrs capable and enable it in /etc/fstab (I believe).  If not you 
can use:


posix:eadb = /usr/local/samba/private/eadb.tdb

in global. This does NOT scale well.




I have tried giving 777 perms on the actual directory on my ubuntu box 
to troubleshoot, but had same results.  I have also verified that ACL 
package has been installed on my Ubuntu machine. What user:group do I 
need to have the actual directory on the ubuntu machine set to?  Any 
other things I should try?



On Mon, Jan 24, 2011 at 11:02 AM, Taylor, Jonn 
jo...@taylortelephone.com wrote:



Go to advanced when changing ACL's.

Jonn



On 01/24/2011 09:48 AM, Lynn Dixon wrote:
That was the first thing that I had tried.  I created   a share 
using smb.conf, then restarted samba.
I can see the share, and navigate down into it from windows.  If I 
  create a folder and then rick click from a windows machine and do
   security, I can add groups, but when I try to save, the changes 
  just disappear.


What is the best way to manage ACL's on the share from a windows   
machine?


Sorry for all the questions, this is my first venture into a Samba 
  4 AD environment.  I have used Samba 2/3 i on a workgroup in the 
  past and used different security schemes.



On Mon, Jan 24, 2011 at 10:37 AM, Taylor, Jonn 
jo...@taylortelephone.com wrote:



This is all you need.

 [test]
  path = /data/test
  read only = no

Then use windows to set the acl's.

Jonn

http://wiki.samba.org/index.php/Samba4/HOWTO


On 01/24/2011 09:24 AM, Lynn Dixon wrote:
 Thanks. I tried both paramaters in my smb.conf but I   
got errors when I tried

 both:
  
 jenfab@dc:~$ sudo /etc/init.d/samba4 restart
  * Stopping Samba 4 daemon samba
 [ OK ]
  * Starting Samba 4 daemon
 samba  
Unknown parameter

 encountered: valid users
 Ignoring unknown parameter valid users
  
  [

 OK ]
 jenfab@dc:~$ sudo nano /etc/samba/smb.conf
 jenfab@dc:~$ sudo /etc/init.d/samba4 restart
  * Stopping Samba 4 daemon samba 
  [

 OK ]
  * Starting Samba 4 daemon
 samba  
Unknown parameter

 encountered: write list
 Ignoring unknown parameter write list
 Unknown parameter encountered: read list
 Ignoring unknown parameter read list
  
  [

 OK ]


 On Mon, Jan 24, 2011 at 9:52 AM, t...@tms3.com   
wrote:



 I am not sure how to use Microsoft AD tools to   create 
shares and then set
 those shares permissable to certain AD groups.   For 
example, I need to

 create
 a share called Finance and only the people in   
Finance can read/write to
 it. I was hoping to use SWAT to help in creation   and 
management of those

 shares.

 vi smb.conf (or your favorite text editor)

 add

 [finance]

 ...various parameter...
 valid users = @finance

 or

 write list = @finance
 read list = @finance



 I have been using AD tools to manage the domain   and 
GPO's but I am not sure

 how to use them to create shares.

 You can see swat for samba4 here: 
https://github.com/rvelhote/GSoC-SWAT


 On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller   
muel...@tropenklinik.de

 wrote:
 I thought swat is no longer working!!Just use   
Microsoft ads tools and you

 are up and running.

 ---
 EDV Daniel Müller

 Leitung EDV
 Tropenklinik Paul-Lechler-Krankenhaus
 Paul-Lechler-Str. 24
 72076 Tübingen

 Tel.: 07071/206-463, Fax: 07071/206-499
 eMail: muel...@tropenklinik.de
 Internet: http://www.tropenklinik.de

 ---

 -Ursprüngliche Nachricht-
 Von: samba-boun...@lists.samba.org 
[mailto:samba-boun...@lists.samba.org]

 Im
 Auftrag von Lynn Dixon
 Gesendet: Sonntag, 23. Januar 2011 06:39
 An: samba@lists.samba.org
 Betreff: [Samba] Trouble installing SWAT on a   Samba 4 
Alpha 13 build on

 Ubuntu Server

 Hello all,
 I have setup a complete domain using Samba 4 on   my 
Ubuntu server 32 bit
  machine. I am using the Alpha 13 build (it was   
actually in the Ubuntu
 Repos). I am trying to setup swat to make it   easier 
to manage shares. I
 have followed the instructions at 
https://github.com/rvelhote/GSoC-SWATbut

 I am having a few problems.

 When I run ./run I get the following errors:
 jenfab@dc:~/GSoC-SWAT$ sudo ./run
 Starting subprocess with file monitor
 Traceback (most recent call last):
File 

Re: [Samba] Problems accessing samba 3.5.7 from Windows 2008

2011-01-24 Thread Jack Downes



There is a bug where a client connect 443 if it timesout, it connects to
139. Bud ID 7881.

Where did you download  3.5.7 from?
I would like to know this too...  there's supposed to be some fix for 
printers in 3.5.7 that I really want.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Problems accessing samba 3.5.7 from Windows 2008

2011-01-24 Thread John Drescher
 There is a bug where a client connect 443 if it timesout, it connects to
 139. Bud ID 7881.

 Where did you download  3.5.7 from?

 I would like to know this too...  there's supposed to be some fix for
 printers in 3.5.7 that I really want.

Since the date of the original email was from last May I believe the
version quoted had to be wrong. However I guess you could grab the git
and build the current 3.5.X to get the latest 3.5 release.

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Multiple domains issue

2011-01-24 Thread Ron García-Vidal
Here's some more info.  This is an excerpt from the log on a connection 
attempt:


[2011/01/24 15:30:55, 1] smbd/service.c:make_connection_snum(950)
  CLIENT_STATION (X.X.X.46) connect to service USERNAME initially as 
user ADDOMAIN+USERNAME (uid=1, gid=1) (pid 18741)

[2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150)
  chdir (/opt/ntpublic/users/USERNAME) failed
[2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150)
  chdir (/opt/ntpublic/users/USERNAME) failed
[2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150)
  chdir (/opt/ntpublic/users/USERNAME) failed
[2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150)
  chdir (/opt/ntpublic/users/USERNAME) failed
[2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150)
  chdir (/opt/ntpublic/users/USERNAME) failed
[2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150)
  chdir (/opt/ntpublic/users/USERNAME) failed
[2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150)
  chdir (/opt/ntpublic/users/USERNAME) failed
[2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150)
  chdir (/opt/ntpublic/users/USERNAME) failed
[2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150)
  chdir (/opt/ntpublic/users/USERNAME) failed
[2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150)
  chdir (/opt/ntpublic/users/USERNAME) failed
[2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150)
  chdir (/opt/ntpublic/users/USERNAME) failed
[2011/01/24 15:30:57, 0] smbd/service.c:set_current_service(150)
  chdir (/opt/ntpublic/users/USERNAME) failed
[2011/01/24 15:30:57, 0] smbd/service.c:set_current_service(150)
  chdir (/opt/ntpublic/users/USERNAME) failed
[2011/01/24 15:30:57, 0] smbd/service.c:set_current_service(150)
  chdir (/opt/ntpublic/users/USERNAME) failed
[2011/01/24 15:30:59, 0] smbd/service.c:set_current_service(150)
  chdir (/opt/ntpublic/users/USERNAME) failed
[2011/01/24 15:30:59, 0] smbd/service.c:set_current_service(150)
  chdir (/opt/ntpublic/users/USERNAME) failed
[2011/01/24 15:31:05, 1] smbd/service.c:close_cnum(1150)
  CLIENT_STATION (X.X.X.46) closed connection to service USERNAME


As I said, prior to Friday's domain drop and rejoin, this worked 
properly.  I think there just needs to be able to say 
ADDOMAIN+USERNAME=NTDOMAIN+USERNAME.


-Ron

On 01/24/2011 06:52 AM, Ron García-Vidal wrote:

Understood and agreed, but since we're migrating to the AD in a
piecemeal fashion must get this to work for users in both domains until
the migration is complete. Any suggestions?

-Ron

On 01/23/2011 01:05 PM, t...@tms3.com wrote:




I encountered a strange problem recently when changing the IP of my
Samba server. We are in the process of moving from an ancient NT4
domain to an AD domain. We did a full migration of all the users, and
up until Friday, our AD users were able to access the Samba server
(which is still on the NT domain) with full permissions, etc.

On Friday for reasons completely unrelated, we had to change the IP of
the Samba server. When we brought it up on the new IP, it gave an error
bringing up the Samba daemons. I was rushed and didn't pay to much
attention to the error, but instead took the easy route of removing
Samba from the NT domain, and re-joining.

That got the Samba daemons up and running and we mostly had no problem,
except now the AD users aren't allowed to access their home directories.

Home directories in a trusted domain is probably a bad idea, and likely
has some permission issues. It might be best to join the samba server to
the AD domain instead.



The AD and NT domains have a mutual trust relationship, and all SSIDs
for the users on both domains are the same. As I said, prior to Friday,
these users were able to access.

I'm not entirely sure how Samba handles multiple domains, etc. and I
have no idea how to even begin to trouble shoot this problem. Any
suggestions would be welcome.

-Ron
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 buildonUbuntu Server

2011-01-24 Thread Lynn Dixon
With the help of John, and tms3, I was able to resolve the problem!

Once I corrected my fstab for /share with acl and user_xattr options, and
remounted the filesystem, that worked perfectly.  Mind you I did have to
delete the old /share/finance folder since it was created without the new
attributes. Its working perfectly now. I am able to use the built-in windows
file ACL tools to configure perms.

BTW, Ubuntu 10.10 uses ext4 by default, but I still had to install attr and
acl packages from the repos as they were not included in the default
install.  once I mounted the filesystem with users_xattr,acl  in fstab, it
worked perfectly.

Thank you for the fast responses and all the help!

On Mon, Jan 24, 2011 at 1:18 PM, t...@tms3.com wrote:





 But when I click apply, the jenfab\finance group dissappears from the list
 and the changes never save.

 What OS are you using? If Linux then make sure share file system is xattrs
 capable and enable it in /etc/fstab (I believe).  If not you can use:

 posix:eadb = /usr/local/samba/private/eadb.tdb

 in global. This does NOT scale well.



 I have tried giving 777 perms on the actual directory on my ubuntu box to
 troubleshoot, but had same results.  I have also verified that ACL package
 has been installed on my Ubuntu machine. What user:group do I need to have
 the actual directory on the ubuntu machine set to?  Any other things I
 should try?

 On Mon, Jan 24, 2011 at 11:02 AM, Taylor, Jonn 
 jo...@taylortelephone.comwrote:

  Go to advanced when changing ACL's.

 Jonn


 On 01/24/2011 09:48 AM, Lynn Dixon wrote:

 That was the first thing that I had tried.  I created a share using
 smb.conf, then restarted samba.
 I can see the share, and navigate down into it from windows.  If I create
 a folder and then rick click from a windows machine and do security, I can
 add groups, but when I try to save, the changes just disappear.

 What is the best way to manage ACL's on the share from a windows machine?

 Sorry for all the questions, this is my first venture into a Samba 4 AD
 environment.  I have used Samba 2/3 i on a workgroup in the past and used
 different security schemes.

 On Mon, Jan 24, 2011 at 10:37 AM, Taylor, Jonn jo...@taylortelephone.com
  wrote:

 This is all you need.

  [test]
   path = /data/test
   read only = no

 Then use windows to set the acl's.

 Jonn

 http://wiki.samba.org/index.php/Samba4/HOWTO

 On 01/24/2011 09:24 AM, Lynn Dixon wrote:
  Thanks. I tried both paramaters in my smb.conf but I got errors when I
 tried
  both:
 
  jenfab@dc:~$ sudo /etc/init.d/samba4 restart
   * Stopping Samba 4 daemon samba
  [ OK ]
   * Starting Samba 4 daemon
  sambaUnknown parameter
  encountered: valid users
  Ignoring unknown parameter valid users
 
  [
  OK ]
  jenfab@dc:~$ sudo nano /etc/samba/smb.conf
  jenfab@dc:~$ sudo /etc/init.d/samba4 restart
   * Stopping Samba 4 daemon samba
   [
  OK ]
   * Starting Samba 4 daemon
  sambaUnknown parameter
  encountered: write list
  Ignoring unknown parameter write list
  Unknown parameter encountered: read list
  Ignoring unknown parameter read list
 
  [
  OK ]
 
 
  On Mon, Jan 24, 2011 at 9:52 AM, t...@tms3.com wrote:
 
 
  I am not sure how to use Microsoft AD tools to create shares and then
 set
  those shares permissable to certain AD groups. For example, I need to
  create
  a share called Finance and only the people in Finance can read/write
 to
  it. I was hoping to use SWAT to help in creation and management of
 those
  shares.
 
  vi smb.conf (or your favorite text editor)
 
  add
 
  [finance]
 
  ...various parameter...
  valid users = @finance
 
  or
 
  write list = @finance
  read list = @finance
 
 
 
  I have been using AD tools to manage the domain and GPO's but I am not
 sure
  how to use them to create shares.
 
  You can see swat for samba4 here:
 https://github.com/rvelhote/GSoC-SWAT
 
  On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller 
 muel...@tropenklinik.de
  wrote:
  I thought swat is no longer working!!Just use Microsoft ads tools and
 you
  are up and running.
 
  ---
  EDV Daniel Müller
 
  Leitung EDV
  Tropenklinik Paul-Lechler-Krankenhaus
  Paul-Lechler-Str. 24
  72076 Tübingen
 
  Tel.: 07071/206-463, Fax: 07071/206-499
  eMail: muel...@tropenklinik.de
  Internet: http://www.tropenklinik.de
 
  ---
 
  -Ursprüngliche Nachricht-
  Von: samba-boun...@lists.samba.org [mailto:
 samba-boun...@lists.samba.org]
  Im
  Auftrag von Lynn Dixon
  Gesendet: Sonntag, 23. Januar 2011 06:39
  An: samba@lists.samba.org
  Betreff: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build
 on
  Ubuntu Server
 
  Hello all,
  I have setup a complete domain using Samba 4 on my Ubuntu server 32
 bit
  machine. I am using the Alpha 13 build (it was actually in the Ubuntu
  Repos). 

[Samba] [samba] Linux acls problem with windows 7 and vista

2011-01-24 Thread sisu .

Hei all,
Today I upgraded my samba which was a really old version 3.0.33 (I know)  to 
3.5. The upgraded seemed alright  since I realize that I got a problem with the 
linux acls, I wanna say that I only have this problem with windows 7 and Vista, 
however windows xp works alright
To try to be concreted I will try to expose the problem with an example, the 
point is that I have a directory called 'shared', which is set as:
[shared]comment =  Shared directorypath = /samba/sharedread only = 
noforce create mode = 0770force directory mode = 0770force group = 
rootlocking = nooplocks = noveto oplock files = /*.txt/
and the acl's I set are the following:
 getfacl shared/
# file: shared# owner: root# group: 
rootuser::rwxgroup::---group:company:r-xgroup:helpdesk:r-xgroup:sysadmin:r-xgroup:tech:r-xmask::rwxother::---default:user::rwxdefault:group::---default:group:company:rwxdefault:mask::rwxdefault:other::---
I have an user called user1 who has company as a primary group, and I have a 
user2 who has company as a primary group and sysadmin as  secondary group. 
The fact is that the user2 is able to get on the shared directory and user1 
not, but if I set the user1 on the tech group then this user1 is able to get on 
the directory. weird huh?
So weird ! I spent a lot of time with it and I'm not able to find out what is 
going on :( I thought even that it could be a bug but I didn't find any case 
exactly like that.
The only suspicious line I fond in may samba log are:
[2011/01/24 16:27:11.098007,  3] smbd/sec_ctx.c:418(pop_sec_ctx)  pop_sec_ctx 
(1030, 0) - sec_ctx_stack_ndx = 0[2011/01/24 16:27:11.098046,  3] 
smbd/error.c:80(error_packet_set)  error packet at smbd/error.c(160) cmd=162 
(SMBntcreateX) NT_STATUS_ACCESS_DENIED[2011/01/24 16:27:11.098107,  3] 
smbd/process.c:1485(process_smb)  Transaction 39 of length 114 (0 
toread)[2011/01/24 16:27:11.098124,  3] smbd/process.c:1294(switch_message)  
switch message SMBntcreateX (pid 10278) conn 0x2b841d0f2200[2011/01/24 
16:27:11.098139,  4] smbd/uid.c:257(change_to_user)  change_to_user: Skipping 
user change - already user
I will appreciate so much any help !!!
c u !



  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build onUbuntu Server

2011-01-24 Thread Lynn Dixon
I have one more quick question if i may.  This one maybe a simple one :)
Is there any way to set the sysvol and netlogon shares to be not
browseable?  i know they are very important, but it would be nice if they
were hidden.  I have tried browseable = no  but I think samba 4 ignores
that :)

On Mon, Jan 24, 2011 at 7:30 PM, Taylor, Jonn jo...@taylortelephone.comwrote:

  Glad I could help.


 On 01/24/2011 05:38 PM, Lynn Dixon wrote:

 AWESOME!!! That fixed it my friend!  Once I corrected my fstab for /share
 with acl and user_xattr options, and remounted the filesystem, that worked
 perfectly.  Mind you I did have to delete the old /share/finance folder
 since it was created without the new attributes. Its working perfectly now.
 I am able to use the built-in windows file ACL tools to configure perms.

 Thanks again for all your help, I hope I will be able to return the favor
 in the future!

 Lynn Dixon

 On Mon, Jan 24, 2011 at 12:44 PM, Taylor, Jonn 
 jo...@taylortelephone.comwrote:

  Make sure that you have these installed.

 apt-get install build-essential libattr1-dev libblkid-dev libgnutls-dev 
 libreadline5-dev python-dev autoconf python-dnspython gdb pkg-config 
 bind9utils libpam0g-dev



  NOTE about filesystem support

 To use the advanced features of Samba4 you need a filesystem that supports
 both the user and system xattr namespaces.

 If you run Linux with a 2.6 kernel and ext3 this means you need to include
 the option user_xattr in your /etc/fstab. For example:

 /dev/hda3 /home ext3 user_xattr 1 1

 You also need to compile your kernel with the XATTR and SECURITY options
 for your filesystem. For ext3 that means you need:

   CONFIG_EXT3_FS_XATTR=y
   CONFIG_EXT3_FS_SECURITY=y

 If you are running a Linux 2.6 kernel with CONFIG_IKCONFIG_PROC defined
 you can check this with the following command:

   $ zgrep CONFIG_EXT3_FS /proc/config.gz

 If you don't have a filesystem with xattr support, then you can simulate
 it by using the option:

   posix:eadb = /usr/local/samba/eadb.tdb

 that will place all extra file attributes (NT ACLs, DOS EAs, streams etc),
 in that tdb. It is not efficient, and doesn't scale well, but at least it
 gives you a choice when you don't have a modern filesystem.
 [edithttp://wiki.samba.org/index.php?title=Samba4/HOWTOaction=editsection=18
 ]
  Testing your filesystem

 To test your filesystem support, install the 'attr' package and run the
 following 4 commands as root:

  # touch test.txt
  # setfattr -n user.test -v test test.txt
  # setfattr -n security.test -v test2 test.txt
  # getfattr -d test.txt
  # getfattr -n security.test -d test.txt

 You should see output like this:

  # file: test.txt
  user.test=test

  # file: test.txt
  security.test=test2

 If you get any Operation not supported errors then it means your kernel
 is not configured correctly, or your filesystem is not mounted with the
 right options.

 If you get any Operation not permitted errors then it probably means you
 didn't try the test as root.

 If you are using the posix:eadb option then you don't need to test your
 filesystem in this manner.
 Jonn


 On 01/24/2011 11:20 AM, Lynn Dixon wrote:

 Hmmm. Here is what I have for permissions and ACLs on the finance folder:

 root@dc:/share# ls -la
 total 28
 drwxr-xr-x  4 root root   4096 2011-01-24 10:10 .
 drwxr-xr-x 22 root root   4096 2011-01-22 23:56 ..
 drwxrwxrwx  5 root users  4096 2011-01-24 11:53 finance
 drwx--  2 root root  16384 2011-01-22 21:55 lost+found
 root@dc:/share# getfacl finance/
 # file: finance/
 # owner: root
 # group: users
 user::rwx
 group::rwx
 other::rwx

 root@dc:/share#

 And here is what the parent folder /share looks like:
 drwxr-xr-x   4 root root  4096 2011-01-24 10:10 share

 root@dc:/# getfacl share
 # file: share
 # owner: root
 # group: root
 user::rwx
 group::r-x
 other::r-x


 Just to be safe, here is what /etc/fstab looks like for the /share
 directory:
 # /share was on /dev/sda3 during installation
 UUID=a20cec9c-f3e0-4ab7-b9fe-15071e89b7d6 /share  ext4
 defaults0   2


 do I need to mount it with an ACL argument?









 On Mon, Jan 24, 2011 at 12:12 PM, Taylor, Jonn jo...@taylortelephone.com
  wrote:

  Check you permissions on the folders.

 [Mon Jan 24 11:30:24 2011 EST, 0
 ../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()]
 ../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' -
 wanted 0x010e but got 0xfff3 (missing 0x000c)
 [Mon Jan 24 11:30:24 2011 EST, 0
 ../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()]
 ../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' -
 wanted 0x0004 but got 0xfef3 (missing 0x0004)
 [Mon Jan 24 11:30:24 2011 EST, 0
 ../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()]
 ../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' -
 wanted 0x0008 but got 0xfef3 (missing 0x0008)
 [Mon Jan 24 11:31:06 2011 EST, 0
 

[Samba] Shutting down WinXP Pro instance

2011-01-24 Thread Joe Tseng

Recently I set up a PDC (Fedora 12 - I'm using this for a specific reason) 
using Samba 3.4.9 and OpenLDAP 2.4.19; I named my domain ATHOME.  I am trying 
to figure out how to shut down WinXP Pro remotely and I'm not having any luck.  
Up to this point I have tried the following:
 
 - I used ATHOME\root which is the admin acct I used to join XP to my domain.  
I added ATHOME\root to my workstation's Administrators group.
 
 - I've disabled simple file sharing on WinXP.
 
 - I've disabled the WinXP firewall.
 
My results are the following:
 
[root@server0 openldap]# net rpc shutdown -d -I 10.1.0.154 -U root
[2011/01/24 19:50:34,  0] lib/debug.c:451(debug_parse_params)
  debug_parse_params: unrecognized debug class name or format [-I]
Enter root's password:
Shutdown of remote machine failed
result was: WERR_ACCESS_DENIED
[root@server0 openldap]# net rpc shutdown -d -I 10.1.0.154 -U Administrator
[2011/01/24 19:50:42,  0] lib/debug.c:451(debug_parse_params)
  debug_parse_params: unrecognized debug class name or format [-I]
Enter Administrator's password:
Shutdown of remote machine failed
result was: WERR_ACCESS_DENIED

The 1st attempt was using ATHOME\root; the 2nd attempt was using the 
workstation's local Administrator account.  I've tried googling for 
WERR_ACCESS_DENIED but I can't find any listings that resemble this issue.  
Could someone pls clue me in?
 
Thanks for the help,
 
 - Joe
 

If you type Google into Google, you can break the Internet. -- Jen Barber 
  
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Shutting down WinXP Pro instance

2011-01-24 Thread Michael Wood
Hi

On 25 January 2011 02:54, Joe Tseng joe_ts...@hotmail.com wrote:

 Recently I set up a PDC (Fedora 12 - I'm using this for a specific reason) 
 using Samba 3.4.9 and OpenLDAP 2.4.19; I named my domain ATHOME.  I am trying 
 to figure out how to shut down WinXP Pro remotely and I'm not having any 
 luck.  Up to this point I have tried the following:

  - I used ATHOME\root which is the admin acct I used to join XP to my domain. 
  I added ATHOME\root to my workstation's Administrators group.

  - I've disabled simple file sharing on WinXP.

  - I've disabled the WinXP firewall.

 My results are the following:

 [root@server0 openldap]# net rpc shutdown -d -I 10.1.0.154 -U root
 [2011/01/24 19:50:34,  0] lib/debug.c:451(debug_parse_params)
  debug_parse_params: unrecognized debug class name or format [-I]

You are using incorrect syntax for the debug option.

Try net rpc shutdown -d 10 -I 10.1.0.154 -U root and maybe that will
show you what the problem is.  (i.e. you need a number after -d.)

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Shutting down WinXP Pro instance

2011-01-24 Thread tms3







--- Original message ---
Subject: Re: [Samba] Shutting down WinXP Pro instance
From: Michael Wood esiot...@gmail.com
To: Joe Tseng joe_ts...@hotmail.com
Cc: samba@lists.samba.org
Date: Monday, 24/01/2011 10:51 PM

Hi

On 25 January 2011 02:54, Joe Tseng joe_ts...@hotmail.com wrote:



Recently I set up a PDC (Fedora 12 - I'm using this for a specific 
reason) using Samba 3.4.9 and OpenLDAP 2.4.19; I named my domain 
ATHOME.  I am trying to figure out how to shut down WinXP Pro remotely 
and I'm not having any luck.  Up to this point I have tried the 
following:


 - I used ATHOME\root which is the admin acct I used to join XP to my 
domain.  I added ATHOME\root to my workstation's Administrators group.


 - I've disabled simple file sharing on WinXP.

 - I've disabled the WinXP firewall.

My results are the following:

[root@server0 openldap]# net rpc shutdown -d -I 10.1.0.154 -U root


Hmmm. Do you have good NetBIOS browsing or WINS? I've noticed that 
these calls by IP address have a tendency to fail, but by NetBIOS name 
succeed.





[2011/01/24 19:50:34,  0] lib/debug.c:451(debug_parse_params)
 debug_parse_params: unrecognized debug class name or format [-I]


You are using incorrect syntax for the debug option.

Try net rpc shutdown -d 10 -I 10.1.0.154 -U root and maybe that will
show you what the problem is.  (i.e. you need a number after -d.)

--
Michael Wood esiot...@gmail.com
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Shutting down WinXP Pro instance

2011-01-24 Thread Daniel Müller
Maybe your local policies security disallows that feature.
You can proof that with  gpedit.msc local settings--add user rights--
force shutdown from remote

---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---

-Ursprüngliche Nachricht-
Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im
Auftrag von t...@tms3.com
Gesendet: Dienstag, 25. Januar 2011 07:54
An: Michael Wood
Cc: samba@lists.samba.org; Joe Tseng
Betreff: Re: [Samba] Shutting down WinXP Pro instance






 --- Original message ---
 Subject: Re: [Samba] Shutting down WinXP Pro instance
 From: Michael Wood esiot...@gmail.com
 To: Joe Tseng joe_ts...@hotmail.com
 Cc: samba@lists.samba.org
 Date: Monday, 24/01/2011 10:51 PM

 Hi

 On 25 January 2011 02:54, Joe Tseng joe_ts...@hotmail.com wrote:


 Recently I set up a PDC (Fedora 12 - I'm using this for a specific 
 reason) using Samba 3.4.9 and OpenLDAP 2.4.19; I named my domain 
 ATHOME.  I am trying to figure out how to shut down WinXP Pro remotely 
 and I'm not having any luck.  Up to this point I have tried the 
 following:

  - I used ATHOME\root which is the admin acct I used to join XP to my 
 domain.  I added ATHOME\root to my workstation's Administrators group.

  - I've disabled simple file sharing on WinXP.

  - I've disabled the WinXP firewall.

 My results are the following:

 [root@server0 openldap]# net rpc shutdown -d -I 10.1.0.154 -U root

Hmmm. Do you have good NetBIOS browsing or WINS? I've noticed that 
these calls by IP address have a tendency to fail, but by NetBIOS name 
succeed.



 [2011/01/24 19:50:34,  0] lib/debug.c:451(debug_parse_params)
  debug_parse_params: unrecognized debug class name or format [-I]

 You are using incorrect syntax for the debug option.

 Try net rpc shutdown -d 10 -I 10.1.0.154 -U root and maybe that will
 show you what the problem is.  (i.e. you need a number after -d.)

 --
 Michael Wood esiot...@gmail.com
 --
 To unsubscribe from this list go to the following URL and read the
 instructions: https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


s3: Fix an infinite loop

2011-01-24 Thread Stefan (metze) Metzmacher
Hi Volker,

I think this change is wrong because, selret is a pointer and we already
have this check (directly above):

if (*selrtn = 0) {
/*
 * No fd ready
 */
return false;
}

I've done some more changes to implement the fd fairness
in lib/events.c instead of smbd/process.c.

Please have a look at:
http://gitweb.samba.org/?p=metze/samba/wip.git;a=shortlog;h=refs/heads/master3-tevent2

metze



signature.asc
Description: OpenPGP digital signature


Re: s3: Fix an infinite loop

2011-01-24 Thread Volker Lendecke
On Mon, Jan 24, 2011 at 09:14:23AM +0100, Stefan (metze) Metzmacher wrote:
 I think this change is wrong because, selret is a pointer and we already
 have this check (directly above):

Gna. I have first done this in 3.5, where selrtn is not a
pointer. I have then just taken the same patch and applied
it to master, wrongly assuming that this is the same piece
of code. The patch applied cleanly, so I did not check.
Apologies for this false assumption.

By the way, where does 3.5 handle the selrtn==-1 case?

I have just pushed the revert to autobuild.

With best regards,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen


Re: s3: Fix an infinite loop

2011-01-24 Thread Stefan (metze) Metzmacher
Hi Volker,

 On Mon, Jan 24, 2011 at 09:14:23AM +0100, Stefan (metze) Metzmacher wrote:
 I think this change is wrong because, selret is a pointer and we already
 have this check (directly above):
 
 Gna. I have first done this in 3.5, where selrtn is not a
 pointer. I have then just taken the same patch and applied
 it to master, wrongly assuming that this is the same piece
 of code. The patch applied cleanly, so I did not check.
 Apologies for this false assumption.

No problem, I assumed something like that:-)

 By the way, where does 3.5 handle the selrtn==-1 case?

I think we need something like this there:

http://gitweb.samba.org/?p=metze/samba/wip.git;a=commitdiff;h=22f0e9bf00fb8a3dc02b8c4e13d05b9f7a9adb6b
http://gitweb.samba.org/?p=metze/samba/wip.git;a=commitdiff;h=d935696bc4559fe66f3420b8bbe0d9a595b41116

 I have just pushed the revert to autobuild.

Does my other changes make sense for you?

metze



signature.asc
Description: OpenPGP digital signature


[SCM] Samba Shared Repository - branch master updated

2011-01-24 Thread Volker Lendecke
The branch, master has been updated
   via  509dd57 Revert s3: Fix an infinite loop
  from  61f7d7c s3: Fix an infinite loop

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 509dd57d68ba45cd5189c9bafe7f65ecb198b6db
Author: Volker Lendecke v...@samba.org
Date:   Mon Jan 24 09:25:01 2011 +0100

Revert s3: Fix an infinite loop

This reverts commit 61f7d7cdeccb1f733590e8bdb8229b32363a815e.

Autobuild-User: Volker Lendecke vlen...@samba.org
Autobuild-Date: Mon Jan 24 10:10:43 CET 2011 on sn-devel-104

---

Summary of changes:
 source3/lib/events.c |4 
 1 files changed, 0 insertions(+), 4 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/lib/events.c b/source3/lib/events.c
index 802a2e5..d987072 100644
--- a/source3/lib/events.c
+++ b/source3/lib/events.c
@@ -120,10 +120,6 @@ bool run_events(struct tevent_context *ev,
return false;
}
 
-   if (selrtn = 0) {
-   return false;
-   }
-
for (fde = ev-fd_events; fde; fde = fde-next) {
uint16 flags = 0;
 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-6-test updated

2011-01-24 Thread Volker Lendecke
The branch, v3-6-test has been updated
   via  8645941 Revert s3: Fix an infinite loop
  from  0a84c30 s3: Fix an infinite loop

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test


- Log -
commit 8645941125a50bd9cc77676f481b44e52362ac75
Author: Volker Lendecke v...@samba.org
Date:   Mon Jan 24 09:25:01 2011 +0100

Revert s3: Fix an infinite loop

This reverts commit 61f7d7cdeccb1f733590e8bdb8229b32363a815e.

Autobuild-User: Volker Lendecke vlen...@samba.org
Autobuild-Date: Mon Jan 24 10:10:43 CET 2011 on sn-devel-104

---

Summary of changes:
 source3/lib/events.c |4 
 1 files changed, 0 insertions(+), 4 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/lib/events.c b/source3/lib/events.c
index 802a2e5..d987072 100644
--- a/source3/lib/events.c
+++ b/source3/lib/events.c
@@ -120,10 +120,6 @@ bool run_events(struct tevent_context *ev,
return false;
}
 
-   if (selrtn = 0) {
-   return false;
-   }
-
for (fde = ev-fd_events; fde; fde = fde-next) {
uint16 flags = 0;
 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2011-01-24 Thread Günther Deschner
The branch, master has been updated
   via  cea36ae s3-winbind: fix winbindd_dual_pam_auth_samlogon() for NT4 
domains.
  from  509dd57 Revert s3: Fix an infinite loop

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit cea36aeacf8778493463f31e6afc3f58384639e2
Author: Günther Deschner g...@samba.org
Date:   Mon Jan 24 11:48:36 2011 +0100

s3-winbind: fix winbindd_dual_pam_auth_samlogon() for NT4 domains.

After failing the netr_LogonSamLogonEx, we failed to retry with
netr_LogonSamLogon.

Guenther

Autobuild-User: Günther Deschner g...@samba.org
Autobuild-Date: Mon Jan 24 12:35:42 CET 2011 on sn-devel-104

---

Summary of changes:
 source3/winbindd/winbindd_pam.c |1 +
 1 files changed, 1 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/winbindd/winbindd_pam.c b/source3/winbindd/winbindd_pam.c
index cbdd8f3..0c0250e 100644
--- a/source3/winbindd/winbindd_pam.c
+++ b/source3/winbindd/winbindd_pam.c
@@ -1263,6 +1263,7 @@ static NTSTATUS winbindd_dual_pam_auth_samlogon(struct 
winbindd_domain *domain,
DEBUG(3, (Got a DC that can not do NetSamLogonEx, 
  retrying with NetSamLogon\n));
domain-can_do_samlogon_ex = false;
+   retry = true;
continue;
}
 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-6-test updated

2011-01-24 Thread Günther Deschner
The branch, v3-6-test has been updated
   via  b88ca13 s3-winbind: fix winbindd_dual_pam_auth_samlogon() for NT4 
domains.
  from  8645941 Revert s3: Fix an infinite loop

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test


- Log -
commit b88ca1307b0ddf9181eb4fc85dd1d3fd6d766ede
Author: Günther Deschner g...@samba.org
Date:   Mon Jan 24 11:48:36 2011 +0100

s3-winbind: fix winbindd_dual_pam_auth_samlogon() for NT4 domains.

After failing the netr_LogonSamLogonEx, we failed to retry with
netr_LogonSamLogon.

Guenther

Autobuild-User: Günther Deschner g...@samba.org
Autobuild-Date: Mon Jan 24 12:35:42 CET 2011 on sn-devel-104
(cherry picked from commit cea36aeacf8778493463f31e6afc3f58384639e2)

---

Summary of changes:
 source3/winbindd/winbindd_pam.c |1 +
 1 files changed, 1 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/winbindd/winbindd_pam.c b/source3/winbindd/winbindd_pam.c
index cbdd8f3..0c0250e 100644
--- a/source3/winbindd/winbindd_pam.c
+++ b/source3/winbindd/winbindd_pam.c
@@ -1263,6 +1263,7 @@ static NTSTATUS winbindd_dual_pam_auth_samlogon(struct 
winbindd_domain *domain,
DEBUG(3, (Got a DC that can not do NetSamLogonEx, 
  retrying with NetSamLogon\n));
domain-can_do_samlogon_ex = false;
+   retry = true;
continue;
}
 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2011-01-24 Thread Stefan Metzmacher
The branch, master has been updated
   via  0dc1eee libcli/ldap: use lib/ldb_compat.h for the s3 build
  from  cea36ae s3-winbind: fix winbindd_dual_pam_auth_samlogon() for NT4 
domains.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 0dc1eee0b8174d591ea02de40bb564088a25fd97
Author: Stefan Metzmacher me...@samba.org
Date:   Mon Jan 24 13:29:14 2011 +0100

libcli/ldap: use lib/ldb_compat.h for the s3 build

metze

Autobuild-User: Stefan Metzmacher me...@samba.org
Autobuild-Date: Mon Jan 24 14:55:50 CET 2011 on sn-devel-104

---

Summary of changes:
 libcli/ldap/ldap_message.h |4 
 source3/lib/ldb_compat.h   |   13 +
 2 files changed, 17 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/libcli/ldap/ldap_message.h b/libcli/ldap/ldap_message.h
index c500184..3354fad 100644
--- a/libcli/ldap/ldap_message.h
+++ b/libcli/ldap/ldap_message.h
@@ -22,7 +22,11 @@
 #define _LIBCLI_LDAP_MESSAGE_H_
 
 #include ../libcli/ldap/ldap_errors.h
+#if _SAMBA_BUILD_ == 3
+#include lib/ldb_compat.h
+#else
 #include lib/ldb/include/ldb.h
+#endif
 
 enum ldap_request_tag {
LDAP_TAG_BindRequest = 0,
diff --git a/source3/lib/ldb_compat.h b/source3/lib/ldb_compat.h
index fb8f2f0..f05104a 100644
--- a/source3/lib/ldb_compat.h
+++ b/source3/lib/ldb_compat.h
@@ -71,4 +71,17 @@ struct ldb_parse_tree {
} u;
 };
 
+struct ldb_message_element {
+   unsigned int flags;
+   const char *name;
+   unsigned int num_values;
+   struct ldb_val *values;
+};
+
+struct ldb_control {
+   const char *oid;
+   int critical;
+   void *data;
+};
+
 #endif


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-6-test updated

2011-01-24 Thread Stefan Metzmacher
The branch, v3-6-test has been updated
   via  f670bb4 libcli/ldap: use lib/ldb_compat.h for the s3 build
  from  b88ca13 s3-winbind: fix winbindd_dual_pam_auth_samlogon() for NT4 
domains.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test


- Log -
commit f670bb40a3d978fbbbf0e41808efc3f67ce9177b
Author: Stefan Metzmacher me...@samba.org
Date:   Mon Jan 24 13:29:14 2011 +0100

libcli/ldap: use lib/ldb_compat.h for the s3 build

metze

Autobuild-User: Stefan Metzmacher me...@samba.org
Autobuild-Date: Mon Jan 24 14:55:50 CET 2011 on sn-devel-104
(cherry picked from commit 0dc1eee0b8174d591ea02de40bb564088a25fd97)

---

Summary of changes:
 libcli/ldap/ldap_message.h |4 
 source3/lib/ldb_compat.h   |   13 +
 2 files changed, 17 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/libcli/ldap/ldap_message.h b/libcli/ldap/ldap_message.h
index c500184..3354fad 100644
--- a/libcli/ldap/ldap_message.h
+++ b/libcli/ldap/ldap_message.h
@@ -22,7 +22,11 @@
 #define _LIBCLI_LDAP_MESSAGE_H_
 
 #include ../libcli/ldap/ldap_errors.h
+#if _SAMBA_BUILD_ == 3
+#include lib/ldb_compat.h
+#else
 #include lib/ldb/include/ldb.h
+#endif
 
 enum ldap_request_tag {
LDAP_TAG_BindRequest = 0,
diff --git a/source3/lib/ldb_compat.h b/source3/lib/ldb_compat.h
index fb8f2f0..f05104a 100644
--- a/source3/lib/ldb_compat.h
+++ b/source3/lib/ldb_compat.h
@@ -71,4 +71,17 @@ struct ldb_parse_tree {
} u;
 };
 
+struct ldb_message_element {
+   unsigned int flags;
+   const char *name;
+   unsigned int num_values;
+   struct ldb_val *values;
+};
+
+struct ldb_control {
+   const char *oid;
+   int critical;
+   void *data;
+};
+
 #endif


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2011-01-24 Thread Günther Deschner
The branch, master has been updated
   via  ef0a390 s3-waf: fix lib/addns include path.
   via  c675b1c s3-waf: no need anymore to include source4 globally.
  from  0dc1eee libcli/ldap: use lib/ldb_compat.h for the s3 build

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit ef0a3903f007cee5a564699fc9750d6e8a472d7d
Author: Günther Deschner g...@samba.org
Date:   Mon Jan 24 15:27:52 2011 +0100

s3-waf: fix lib/addns include path.

Guenther

Autobuild-User: Günther Deschner g...@samba.org
Autobuild-Date: Mon Jan 24 16:15:58 CET 2011 on sn-devel-104

commit c675b1c827f792e19cbacd91d2356e0df2ee87e3
Author: Günther Deschner g...@samba.org
Date:   Mon Jan 24 15:26:11 2011 +0100

s3-waf: no need anymore to include source4 globally.

Guenther

---

Summary of changes:
 source3/wscript |4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/wscript b/source3/wscript
index fc1cc1d..e286e8f 100644
--- a/source3/wscript
+++ b/source3/wscript
@@ -71,8 +71,8 @@ def configure(conf):
 conf.env['build_swat'] = True
 
 conf.ADD_EXTRA_INCLUDES('''#source3 #source3/include #lib/replace 
#lib/talloc
-   #lib/tevent #source3/libaddns #source3/librpc
-   #source3/lib #lib/tdb/include #lib/popt 
#source4''')
+   #lib/tevent #lib/addns #source3/librpc
+   #source3/lib #lib/tdb/include #lib/popt''')
 
 conf.RECURSE('../lib/replace')
 conf.RECURSE('build')


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-6-test updated

2011-01-24 Thread Günther Deschner
The branch, v3-6-test has been updated
   via  e08e530 s3-waf: fix lib/addns include path.
   via  a4f9ad8 s3-waf: no need anymore to include source4 globally.
  from  f670bb4 libcli/ldap: use lib/ldb_compat.h for the s3 build

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test


- Log -
commit e08e530974c8f1042f27fba5b47921cc1c6c5e13
Author: Günther Deschner g...@samba.org
Date:   Mon Jan 24 15:27:52 2011 +0100

s3-waf: fix lib/addns include path.

Guenther

Autobuild-User: Günther Deschner g...@samba.org
Autobuild-Date: Mon Jan 24 16:15:58 CET 2011 on sn-devel-104
(cherry picked from commit ef0a3903f007cee5a564699fc9750d6e8a472d7d)

commit a4f9ad8f2f8790d13421affd9952f891e5632465
Author: Günther Deschner g...@samba.org
Date:   Mon Jan 24 15:26:11 2011 +0100

s3-waf: no need anymore to include source4 globally.

Guenther
(cherry picked from commit c675b1c827f792e19cbacd91d2356e0df2ee87e3)

---

Summary of changes:
 source3/wscript |4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/wscript b/source3/wscript
index fc1cc1d..e286e8f 100644
--- a/source3/wscript
+++ b/source3/wscript
@@ -71,8 +71,8 @@ def configure(conf):
 conf.env['build_swat'] = True
 
 conf.ADD_EXTRA_INCLUDES('''#source3 #source3/include #lib/replace 
#lib/talloc
-   #lib/tevent #source3/libaddns #source3/librpc
-   #source3/lib #lib/tdb/include #lib/popt 
#source4''')
+   #lib/tevent #lib/addns #source3/librpc
+   #source3/lib #lib/tdb/include #lib/popt''')
 
 conf.RECURSE('../lib/replace')
 conf.RECURSE('build')


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-6-test updated

2011-01-24 Thread Stefan Metzmacher
The branch, v3-6-test has been updated
   via  f08f449 drsuapi.idl: add some more DRSUAPI_ATTID_* values
   via  7d0b03e lib/replace/testsuite.c - fix test output (cherry picked 
from commit da78e24ca201dcdac8a498a5d0da8c30154d4d9a)
   via  9d2567e tdbrestore: Update to GPLv3+, remove old FSF address. 
(cherry picked from commit 24d5a7202ab521b92eb07c93647ae2d381e181a5)
   via  d132658 s4-dns: disable segfault handling in dlz_bind9
   via  5cb58b7 lib/util/time.c - make the strftime output locale 
independant (%c is not)
   via  5617a71 Revert lib/util:tests/time.c - test_timestring - fix it 
on Solaris
   via  fa98c8e lib/util:tests/time.c - test_timestring - fix it on 
Solaris
  from  e08e530 s3-waf: fix lib/addns include path.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test


- Log -
commit f08f449cc074e32d54da62521c2598d5ac9b3eb5
Author: Stefan Metzmacher me...@samba.org
Date:   Wed Jan 12 15:48:30 2011 +0100

drsuapi.idl: add some more DRSUAPI_ATTID_* values

These will be use for net rpc vampire passwd in source3.

metze

Autobuild-User: Stefan Metzmacher me...@samba.org
Autobuild-Date: Wed Jan 12 19:51:53 CET 2011 on sn-devel-104
(cherry picked from commit c39e80094b91ac7055faee61a8137d47e9e76c43)

commit 7d0b03e676fbb977c3e83bb077f19551be796587
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Thu Dec 23 12:42:37 2010 +0100

lib/replace/testsuite.c - fix test output
(cherry picked from commit da78e24ca201dcdac8a498a5d0da8c30154d4d9a)

Signed-off-by: Stefan Metzmacher me...@samba.org

commit 9d2567e7a0c602afdcf8e2146bcaee509dec902a
Author: Jelmer Vernooij jel...@samba.org
Date:   Wed Jan 5 13:52:34 2011 +0100

tdbrestore: Update to GPLv3+, remove old FSF address.
(cherry picked from commit 24d5a7202ab521b92eb07c93647ae2d381e181a5)

Signed-off-by: Stefan Metzmacher me...@samba.org

commit d132658fbe61a2904dd04e915adc7c5d0f686ea2
Author: Stefan Metzmacher me...@samba.org
Date:   Sat Jan 15 02:24:51 2011 +0100

s4-dns: disable segfault handling in dlz_bind9

we don't want bind9 calling the Samba segv handler
(cherry picked from commit da5c328b4b4a793053a8b1c942ceda56da01625c)

Only the lib/util part...

Signed-off-by: Stefan Metzmacher me...@samba.org

commit 5cb58b7d29ee142df864b0d844adff865ba04454
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Wed Dec 22 09:53:27 2010 +0100

lib/util/time.c - make the strftime output locale independant (%c is 
not)

So that it also works on Solaris.
(cherry picked from commit 07bcf6197d9fbdc038513ae3db7f83a9bb8a6cd9)

Signed-off-by: Stefan Metzmacher me...@samba.org

commit 5617a71e2ed28eb129c8854aa3ae18c98c409c59
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Mon Dec 6 11:28:22 2010 +0100

Revert lib/util:tests/time.c - test_timestring - fix it on Solaris

This reverts commit 654e0102ddb0acaaf45fb55c15818722235fcc9f.
This should better be handled by the replace library.

Autobuild-User: Matthias Dieter Wallnöfer m...@samba.org
Autobuild-Date: Mon Dec  6 12:17:31 CET 2010 on sn-devel-104
(cherry picked from commit bd3e5804a41fdfc8a43bebd95c53e4f0ff1d7a10)

commit fa98c8ec3fa805790491d2fed76c9fa79ed289d1
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Sun Dec 5 22:20:06 2010 +0100

lib/util:tests/time.c - test_timestring - fix it on Solaris

Solaris returns Thu Jan 01 and not Thu Jan  1 - therefore proof for
both.

Autobuild-User: Matthias Dieter Wallnöfer m...@samba.org
Autobuild-Date: Sun Dec  5 23:09:13 CET 2010 on sn-devel-104
(cherry picked from commit 654e0102ddb0acaaf45fb55c15818722235fcc9f)

---

Summary of changes:
 lib/replace/test/testsuite.c |2 +-
 lib/tdb/tools/tdbrestore.c   |5 ++---
 lib/util/fault.c |   14 --
 lib/util/tests/time.c|3 +--
 lib/util/time.c  |9 -
 lib/util/util.h  |1 +
 librpc/idl/drsuapi.idl   |5 +
 7 files changed, 26 insertions(+), 13 deletions(-)


Changeset truncated at 500 lines:

diff --git a/lib/replace/test/testsuite.c b/lib/replace/test/testsuite.c
index 1f242eb..0e455f2 100644
--- a/lib/replace/test/testsuite.c
+++ b/lib/replace/test/testsuite.c
@@ -771,7 +771,7 @@ static int test_FUNCTION(void)
 {
printf(test: FUNCTION\n);
if (strcmp(__FUNCTION__, test_FUNCTION) != 0) {
-   printf(failure: FAILURE [\nFAILURE invalid\n]\n);
+   printf(failure: FUNCTION [\nFUNCTION invalid\n]\n);
return false;
}
printf(success: FUNCTION\n);
diff --git a/lib/tdb/tools/tdbrestore.c b/lib/tdb/tools/tdbrestore.c
index 601cd5e..95ee360 100644
--- a/lib/tdb/tools/tdbrestore.c
+++ 

[SCM] Samba Shared Repository - branch master updated

2011-01-24 Thread Günther Deschner
The branch, master has been updated
   via  39ea30d s3-build: remove source4 include path for autoconf build as 
well.
   via  9943761 s3-rpcclient: allow to define validation level for samlogon.
  from  ef0a390 s3-waf: fix lib/addns include path.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 39ea30de0fb9ebf64b7c7ab8f6731fcf98ed294b
Author: Günther Deschner g...@samba.org
Date:   Mon Jan 24 16:55:05 2011 +0100

s3-build: remove source4 include path for autoconf build as well.

Guenther

Autobuild-User: Günther Deschner g...@samba.org
Autobuild-Date: Mon Jan 24 17:40:56 CET 2011 on sn-devel-104

commit 99437614fa8028d60356ee79611d94051ec756ec
Author: Günther Deschner g...@samba.org
Date:   Fri Jan 21 16:58:32 2011 +0100

s3-rpcclient: allow to define validation level for samlogon.

Guenther

---

Summary of changes:
 source3/Makefile.in   |1 -
 source3/rpc_client/cli_netlogon.c |2 +-
 source3/rpc_client/cli_netlogon.h |1 +
 source3/rpcclient/cmd_netlogon.c  |6 +++---
 4 files changed, 5 insertions(+), 5 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/Makefile.in b/source3/Makefile.in
index d92224e..0ce97b8 100644
--- a/source3/Makefile.in
+++ b/source3/Makefile.in
@@ -188,7 +188,6 @@ FLAGS = -I. \
$(ISA) \
-I$(srcdir)/lib \
-I.. \
-   -I../source4 \
-D_SAMBA_BUILD_=3
 
 PATH_FLAGS = -DSMB_PASSWD_FILE=\$(SMB_PASSWD_FILE)\ \
diff --git a/source3/rpc_client/cli_netlogon.c 
b/source3/rpc_client/cli_netlogon.c
index 3046d27..914bfd3 100644
--- a/source3/rpc_client/cli_netlogon.c
+++ b/source3/rpc_client/cli_netlogon.c
@@ -159,6 +159,7 @@ NTSTATUS rpccli_netlogon_sam_logon(struct rpc_pipe_client 
*cli,
   const char *username,
   const char *password,
   const char *workstation,
+  uint16_t validation_level,
   int logon_type)
 {
NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
@@ -168,7 +169,6 @@ NTSTATUS rpccli_netlogon_sam_logon(struct rpc_pipe_client 
*cli,
union netr_LogonLevel *logon;
union netr_Validation validation;
uint8_t authoritative;
-   int validation_level = 3;
fstring clnt_name_slash;
struct dcerpc_binding_handle *b = cli-binding_handle;
 
diff --git a/source3/rpc_client/cli_netlogon.h 
b/source3/rpc_client/cli_netlogon.h
index 107c222..bb38b75 100644
--- a/source3/rpc_client/cli_netlogon.h
+++ b/source3/rpc_client/cli_netlogon.h
@@ -15,6 +15,7 @@ NTSTATUS rpccli_netlogon_sam_logon(struct rpc_pipe_client 
*cli,
   const char *username,
   const char *password,
   const char *workstation,
+  uint16_t validation_level,
   int logon_type);
 NTSTATUS rpccli_netlogon_sam_network_logon(struct rpc_pipe_client *cli,
   TALLOC_CTX *mem_ctx,
diff --git a/source3/rpcclient/cmd_netlogon.c b/source3/rpcclient/cmd_netlogon.c
index 1942352..c909efe 100644
--- a/source3/rpcclient/cmd_netlogon.c
+++ b/source3/rpcclient/cmd_netlogon.c
@@ -718,7 +718,7 @@ static NTSTATUS cmd_netlogon_sam_logon(struct 
rpc_pipe_client *cli,
NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
int logon_type = NetlogonNetworkInformation;
const char *username, *password;
-   int auth_level = 2;
+   uint16_t validation_level = 3;
uint32 logon_param = 0;
const char *workstation = NULL;
 
@@ -740,14 +740,14 @@ static NTSTATUS cmd_netlogon_sam_logon(struct 
rpc_pipe_client *cli,
sscanf(argv[4], %i, logon_type);
 
if (argc = 6)
-   sscanf(argv[5], %i, auth_level);
+   validation_level = atoi(argv[5]);
 
if (argc == 7)
sscanf(argv[6], %x, logon_param);
 
/* Perform the sam logon */
 
-   result = rpccli_netlogon_sam_logon(cli, mem_ctx, logon_param, 
lp_workgroup(), username, password, workstation, logon_type);
+   result = rpccli_netlogon_sam_logon(cli, mem_ctx, logon_param, 
lp_workgroup(), username, password, workstation, validation_level, logon_type);
 
if (!NT_STATUS_IS_OK(result))
goto done;


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-6-test updated

2011-01-24 Thread Günther Deschner
The branch, v3-6-test has been updated
   via  d6ab521 s3-build: remove source4 include path for autoconf build as 
well.
   via  bb21a5d s3-rpcclient: allow to define validation level for samlogon.
  from  f08f449 drsuapi.idl: add some more DRSUAPI_ATTID_* values

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test


- Log -
commit d6ab52177397fab496edd570c64c5673eda1ea48
Author: Günther Deschner g...@samba.org
Date:   Mon Jan 24 16:55:05 2011 +0100

s3-build: remove source4 include path for autoconf build as well.

Guenther

Autobuild-User: Günther Deschner g...@samba.org
Autobuild-Date: Mon Jan 24 17:40:56 CET 2011 on sn-devel-104
(cherry picked from commit 39ea30de0fb9ebf64b7c7ab8f6731fcf98ed294b)

commit bb21a5def93877ff6f524998e7e806222c1163e8
Author: Günther Deschner g...@samba.org
Date:   Fri Jan 21 16:58:32 2011 +0100

s3-rpcclient: allow to define validation level for samlogon.

Guenther
(cherry picked from commit 99437614fa8028d60356ee79611d94051ec756ec)

---

Summary of changes:
 source3/Makefile.in   |1 -
 source3/rpc_client/cli_netlogon.c |2 +-
 source3/rpc_client/cli_netlogon.h |1 +
 source3/rpcclient/cmd_netlogon.c  |6 +++---
 4 files changed, 5 insertions(+), 5 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/Makefile.in b/source3/Makefile.in
index d92224e..0ce97b8 100644
--- a/source3/Makefile.in
+++ b/source3/Makefile.in
@@ -188,7 +188,6 @@ FLAGS = -I. \
$(ISA) \
-I$(srcdir)/lib \
-I.. \
-   -I../source4 \
-D_SAMBA_BUILD_=3
 
 PATH_FLAGS = -DSMB_PASSWD_FILE=\$(SMB_PASSWD_FILE)\ \
diff --git a/source3/rpc_client/cli_netlogon.c 
b/source3/rpc_client/cli_netlogon.c
index 3046d27..914bfd3 100644
--- a/source3/rpc_client/cli_netlogon.c
+++ b/source3/rpc_client/cli_netlogon.c
@@ -159,6 +159,7 @@ NTSTATUS rpccli_netlogon_sam_logon(struct rpc_pipe_client 
*cli,
   const char *username,
   const char *password,
   const char *workstation,
+  uint16_t validation_level,
   int logon_type)
 {
NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
@@ -168,7 +169,6 @@ NTSTATUS rpccli_netlogon_sam_logon(struct rpc_pipe_client 
*cli,
union netr_LogonLevel *logon;
union netr_Validation validation;
uint8_t authoritative;
-   int validation_level = 3;
fstring clnt_name_slash;
struct dcerpc_binding_handle *b = cli-binding_handle;
 
diff --git a/source3/rpc_client/cli_netlogon.h 
b/source3/rpc_client/cli_netlogon.h
index 107c222..bb38b75 100644
--- a/source3/rpc_client/cli_netlogon.h
+++ b/source3/rpc_client/cli_netlogon.h
@@ -15,6 +15,7 @@ NTSTATUS rpccli_netlogon_sam_logon(struct rpc_pipe_client 
*cli,
   const char *username,
   const char *password,
   const char *workstation,
+  uint16_t validation_level,
   int logon_type);
 NTSTATUS rpccli_netlogon_sam_network_logon(struct rpc_pipe_client *cli,
   TALLOC_CTX *mem_ctx,
diff --git a/source3/rpcclient/cmd_netlogon.c b/source3/rpcclient/cmd_netlogon.c
index 1942352..c909efe 100644
--- a/source3/rpcclient/cmd_netlogon.c
+++ b/source3/rpcclient/cmd_netlogon.c
@@ -718,7 +718,7 @@ static NTSTATUS cmd_netlogon_sam_logon(struct 
rpc_pipe_client *cli,
NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
int logon_type = NetlogonNetworkInformation;
const char *username, *password;
-   int auth_level = 2;
+   uint16_t validation_level = 3;
uint32 logon_param = 0;
const char *workstation = NULL;
 
@@ -740,14 +740,14 @@ static NTSTATUS cmd_netlogon_sam_logon(struct 
rpc_pipe_client *cli,
sscanf(argv[4], %i, logon_type);
 
if (argc = 6)
-   sscanf(argv[5], %i, auth_level);
+   validation_level = atoi(argv[5]);
 
if (argc == 7)
sscanf(argv[6], %x, logon_param);
 
/* Perform the sam logon */
 
-   result = rpccli_netlogon_sam_logon(cli, mem_ctx, logon_param, 
lp_workgroup(), username, password, workstation, logon_type);
+   result = rpccli_netlogon_sam_logon(cli, mem_ctx, logon_param, 
lp_workgroup(), username, password, workstation, validation_level, logon_type);
 
if (!NT_STATUS_IS_OK(result))
goto done;


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2011-01-24 Thread Jelmer Vernooij
The branch, master has been updated
   via  5b83923 s4-waf: Skip header-not-found cache if a library is 
specified, as it may provide additional C flags.
   via  57d1dce s4-waf: Only show minversion when there was a minimum 
version specified.
   via  4078b64 Show text output messages when interfacing with bzr.
   via  b763a27 remove unnecessary use of pass.
  from  39ea30d s3-build: remove source4 include path for autoconf build as 
well.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 5b839230e1475550f13ed642187913fd0c026445
Author: Jelmer Vernooij jel...@samba.org
Date:   Mon Jan 24 18:09:27 2011 -0800

s4-waf: Skip header-not-found cache if a library is specified, as it may 
provide
additional C flags.

Tridge, please check.

Autobuild-User: Jelmer Vernooij jel...@samba.org
Autobuild-Date: Tue Jan 25 03:59:32 CET 2011 on sn-devel-104

commit 57d1dcef7ffeab086cf125431f5e03985ba0d0ce
Author: Jelmer Vernooij jel...@samba.org
Date:   Mon Jan 24 17:15:49 2011 -0800

s4-waf: Only show minversion when there was a minimum version specified.

commit 4078b649f19adaba3218d8241455138981d0f3a2
Author: Jelmer Vernooij jel...@samba.org
Date:   Mon Jan 24 17:14:50 2011 -0800

Show text output messages when interfacing with bzr.

commit b763a2735ee761ba614ca3868cd962847f9adda6
Author: Jelmer Vernooij jel...@samba.org
Date:   Mon Jan 3 06:54:07 2011 +0100

remove unnecessary use of pass.

---

Summary of changes:
 buildtools/wafsamba/samba_autoconf.py |2 +-
 buildtools/wafsamba/samba_bundled.py  |6 +-
 buildtools/wafsamba/samba_version.py  |7 ++-
 3 files changed, 12 insertions(+), 3 deletions(-)


Changeset truncated at 500 lines:

diff --git a/buildtools/wafsamba/samba_autoconf.py 
b/buildtools/wafsamba/samba_autoconf.py
index 91d8a56..ec0ed16 100644
--- a/buildtools/wafsamba/samba_autoconf.py
+++ b/buildtools/wafsamba/samba_autoconf.py
@@ -80,7 +80,7 @@ def nolink(self):
 
 def CHECK_HEADER(conf, h, add_headers=False, lib=None):
 '''check for a header'''
-if h in missing_headers:
+if h in missing_headers and lib is None:
 return False
 d = h.upper().replace('/', '_')
 d = d.replace('.', '_')
diff --git a/buildtools/wafsamba/samba_bundled.py 
b/buildtools/wafsamba/samba_bundled.py
index 2e3e130..39edad0 100644
--- a/buildtools/wafsamba/samba_bundled.py
+++ b/buildtools/wafsamba/samba_bundled.py
@@ -122,10 +122,14 @@ def CHECK_BUNDLED_SYSTEM(conf, libname, 
minversion='0.0.0',
 
 minversion = minimum_library_version(conf, libname, minversion)
 
+msg = 'Checking for system %s' % libname
+if minversion != '0.0.0':
+msg += ' = %s' % minversion
+
 # try pkgconfig first
 if (conf.check_cfg(package=libname,
   args='%s = %s --cflags --libs' % (libname, 
minversion),
-  msg='Checking for system %s = %s' % (libname, 
minversion)) and
+  msg=msg) and
 check_functions_headers()):
 conf.SET_TARGET_TYPE(libname, 'SYSLIB')
 conf.env[found] = True
diff --git a/buildtools/wafsamba/samba_version.py 
b/buildtools/wafsamba/samba_version.py
index 8d1bd32..5069ea3 100644
--- a/buildtools/wafsamba/samba_version.py
+++ b/buildtools/wafsamba/samba_version.py
@@ -1,13 +1,18 @@
 import os
 import Utils
 import samba_utils
+import sys
 
 def bzr_version_summary(path):
 try:
-from bzrlib import branch, osutils, workingtree
+import bzrlib
 except ImportError:
 return (BZR-UNKNOWN, {})
 
+import bzrlib.ui
+bzrlib.ui.ui_factory = bzrlib.ui.make_ui_for_terminal(
+sys.stdin, sys.stdout, sys.stderr)
+from bzrlib import branch, osutils, workingtree
 from bzrlib.plugin import load_plugins
 load_plugins()
 


-- 
Samba Shared Repository