Re: [Samba] fetch passwords from AD and group membership from /etc/group
Hi, I want to use Active Directory for my samba users passwords and /etc/group for storing group membership. /etc/nsswitch.conf looks like: group: file Problem: the tests i ran show that the samba server does not know about group membership (deleting file from other user belonging to the same group fails). The same test works as expectet when winbindd is switched off. What do i have to do to fix this while having winbindd running? It wont know anything about your groups at all with NSSwitch like this. You need to make it group: files winbind OR configure NSS_LDAP and make it group: files ldap something seems to be still missing i made a test with /etc/nsswitch.conf group: files winbind without any different results. As I far as i understand nsswitch.conf this line tells nsswitch to look for group memberships in local files first and secound in AD via winbind. As i have no group definitions for my samba users in the AD (only passwords) i don't understand why nsswitch.conf needs to look that way. Could someone please explain? best regards, Marius -- Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir belohnen Sie mit bis zu 50,- Euro! https://freundschaftswerbung.gmx.de -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on Ubuntu Server
I thought swat is no longer working!!Just use Microsoft ads tools and you are up and running. --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de Internet: www.tropenklinik.de --- -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von Lynn Dixon Gesendet: Sonntag, 23. Januar 2011 06:39 An: samba@lists.samba.org Betreff: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on Ubuntu Server Hello all, I have setup a complete domain using Samba 4 on my Ubuntu server 32 bit machine. I am using the Alpha 13 build (it was actually in the Ubuntu Repos). I am trying to setup swat to make it easier to manage shares. I have followed the instructions at https://github.com/rvelhote/GSoC-SWAT but I am having a few problems. When I run ./run I get the following errors: jenfab@dc:~/GSoC-SWAT$ sudo ./run Starting subprocess with file monitor Traceback (most recent call last): File /usr/local/bin/paster, line 9, in module load_entry_point('PasteScript==1.7.3', 'console_scripts', 'paster')() File /usr/lib/pymodules/python2.6/paste/script/command.py, line 84, in run invoke(command, command_name, options, args[1:]) File /usr/lib/pymodules/python2.6/paste/script/command.py, line 123, in invoke exit_code = runner.run(args) File /usr/lib/pymodules/python2.6/paste/script/command.py, line 218, in run result = self.command() File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 276, in command relative_to=base, global_conf=vars) File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 313, in loadapp **kw) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 204, in loadapp return loadobj(APP, uri, name=name, **kw) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 224, in loadobj global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 248, in loadcontext global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 278, in _loadconfig return loader.get_context(object_type, name, global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 409, in get_context section) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 431, in _context_from_use object_type, name=use, global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 361, in get_context global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 248, in loadcontext global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 285, in _loadegg return loader.get_context(object_type, name, global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 561, in get_context object_type, name=name) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 587, in find_egg_entry_point possible.append((entry.load(), protocol, entry.name)) File /usr/lib/python2.6/dist-packages/pkg_resources.py, line 1954, in load entry = __import__(self.module_name, globals(),globals(), ['__name__']) ImportError: No module named swat.config.middleware Any suggestions as to where to go from here? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Multiple domains issue
Understood and agreed, but since we're migrating to the AD in a piecemeal fashion must get this to work for users in both domains until the migration is complete. Any suggestions? -Ron On 01/23/2011 01:05 PM, t...@tms3.com wrote: I encountered a strange problem recently when changing the IP of my Samba server. We are in the process of moving from an ancient NT4 domain to an AD domain. We did a full migration of all the users, and up until Friday, our AD users were able to access the Samba server (which is still on the NT domain) with full permissions, etc. On Friday for reasons completely unrelated, we had to change the IP of the Samba server. When we brought it up on the new IP, it gave an error bringing up the Samba daemons. I was rushed and didn't pay to much attention to the error, but instead took the easy route of removing Samba from the NT domain, and re-joining. That got the Samba daemons up and running and we mostly had no problem, except now the AD users aren't allowed to access their home directories. Home directories in a trusted domain is probably a bad idea, and likely has some permission issues. It might be best to join the samba server to the AD domain instead. The AD and NT domains have a mutual trust relationship, and all SSIDs for the users on both domains are the same. As I said, prior to Friday, these users were able to access. I'm not entirely sure how Samba handles multiple domains, etc. and I have no idea how to even begin to trouble shoot this problem. Any suggestions would be welcome. -Ron -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] fetch passwords from AD and group membership from /etc/group
On 01/21/2011 4:54 AM, marius klausen wrote: Hi Takahashi, While you need not run winbindd if you want to use Active Directory for authentication, if you need to run, idmap_nss map help you? i want to use winbind to be able to log in just by providing the accountname, not domainname\accountname. i now added the following to my smb.conf: idmap domains = MYDOMAIN idmap uid = 6000-61000 idmap gid = 100-3000 idmap config MYDOMAIN: backend = nss which does not change anything so far (smb+winbind restarted). The uid/gid ranges cover values which are given to the account in /etc/passwd /etc/group - maybe that is wrong? That is correct. winbind generated uid's/gid's should not overlap the range of the local uid's/gid's. The idmap gid values that are currently set could cause problems on the low end; but I can't say with all certainty that that is the cause of the symptoms you are seeing. Dale best regard, Marius -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on Ubuntu Server
I am not sure how to use Microsoft AD tools to create shares and then set those shares permissable to certain AD groups. For example, I need to create a share called Finance and only the people in Finance can read/write to it. I was hoping to use SWAT to help in creation and management of those shares. I have been using AD tools to manage the domain and GPO's but I am not sure how to use them to create shares. You can see swat for samba4 here: https://github.com/rvelhote/GSoC-SWAT On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller muel...@tropenklinik.dewrote: I thought swat is no longer working!!Just use Microsoft ads tools and you are up and running. --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de Internet: www.tropenklinik.de --- -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von Lynn Dixon Gesendet: Sonntag, 23. Januar 2011 06:39 An: samba@lists.samba.org Betreff: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on Ubuntu Server Hello all, I have setup a complete domain using Samba 4 on my Ubuntu server 32 bit machine. I am using the Alpha 13 build (it was actually in the Ubuntu Repos). I am trying to setup swat to make it easier to manage shares. I have followed the instructions at https://github.com/rvelhote/GSoC-SWATbut I am having a few problems. When I run ./run I get the following errors: jenfab@dc:~/GSoC-SWAT$ sudo ./run Starting subprocess with file monitor Traceback (most recent call last): File /usr/local/bin/paster, line 9, in module load_entry_point('PasteScript==1.7.3', 'console_scripts', 'paster')() File /usr/lib/pymodules/python2.6/paste/script/command.py, line 84, in run invoke(command, command_name, options, args[1:]) File /usr/lib/pymodules/python2.6/paste/script/command.py, line 123, in invoke exit_code = runner.run(args) File /usr/lib/pymodules/python2.6/paste/script/command.py, line 218, in run result = self.command() File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 276, in command relative_to=base, global_conf=vars) File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 313, in loadapp **kw) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 204, in loadapp return loadobj(APP, uri, name=name, **kw) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 224, in loadobj global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 248, in loadcontext global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 278, in _loadconfig return loader.get_context(object_type, name, global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 409, in get_context section) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 431, in _context_from_use object_type, name=use, global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 361, in get_context global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 248, in loadcontext global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 285, in _loadegg return loader.get_context(object_type, name, global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 561, in get_context object_type, name=name) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 587, in find_egg_entry_point possible.append((entry.load(), protocol, entry.name)) File /usr/lib/python2.6/dist-packages/pkg_resources.py, line 1954, in load entry = __import__(self.module_name, globals(),globals(), ['__name__']) ImportError: No module named swat.config.middleware Any suggestions as to where to go from here? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build onUbuntu Server
I am not sure how to use Microsoft AD tools to create shares and then set those shares permissable to certain AD groups. For example, I need to create a share called Finance and only the people in Finance can read/write to it. I was hoping to use SWAT to help in creation and management of those shares. vi smb.conf (or your favorite text editor) add [finance] ...various parameter... valid users = @finance or write list = @finance read list = @finance I have been using AD tools to manage the domain and GPO's but I am not sure how to use them to create shares. You can see swat for samba4 here: https://github.com/rvelhote/GSoC-SWAT On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller muel...@tropenklinik.dewrote: I thought swat is no longer working!!Just use Microsoft ads tools and you are up and running. --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de Internet: http://www.tropenklinik.de --- -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von Lynn Dixon Gesendet: Sonntag, 23. Januar 2011 06:39 An: samba@lists.samba.org Betreff: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on Ubuntu Server Hello all, I have setup a complete domain using Samba 4 on my Ubuntu server 32 bit machine. I am using the Alpha 13 build (it was actually in the Ubuntu Repos). I am trying to setup swat to make it easier to manage shares. I have followed the instructions at https://github.com/rvelhote/GSoC-SWATbut I am having a few problems. When I run ./run I get the following errors: jenfab@dc:~/GSoC-SWAT$ sudo ./run Starting subprocess with file monitor Traceback (most recent call last): File /usr/local/bin/paster, line 9, in module load_entry_point('PasteScript==1.7.3', 'console_scripts', 'paster')() File /usr/lib/pymodules/python2.6/paste/script/command.py, line 84, in run invoke(command, command_name, options, args[1:]) File /usr/lib/pymodules/python2.6/paste/script/command.py, line 123, in invoke exit_code = runner.run(args) File /usr/lib/pymodules/python2.6/paste/script/command.py, line 218, in run result = self.command() File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 276, in command relative_to=base, global_conf=vars) File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 313, in loadapp **kw) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 204, in loadapp return loadobj(APP, uri, name=name, **kw) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 224, in loadobj global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 248, in loadcontext global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 278, in _loadconfig return loader.get_context(object_type, name, global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 409, in get_context section) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 431, in _context_from_use object_type, name=use, global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 361, in get_context global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 248, in loadcontext global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 285, in _loadegg return loader.get_context(object_type, name, global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 561, in get_context object_type, name=name) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 587, in find_egg_entry_point possible.append((entry.load(), protocol, entry.name)) File /usr/lib/python2.6/dist-packages/pkg_resources.py, line 1954, in load entry = __import__(self.module_name, globals(),globals(), ['__name__']) ImportError: No module named swat.config.middleware Any suggestions as to where to go from here? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Invitation to connect on LinkedIn
LinkedIn Matheus Morais requested to add you as a connection on LinkedIn: -- Serge, I'd like to add you to my professional network on LinkedIn. - Matheus Accept invitation from Matheus Morais http://www.linkedin.com/e/mzateh-gjbieyy7-1u/vTWyDe4yCEPPQyWVLZMh1H4yCEPPQGFCi7/blk/I49048324_25/pmpxnSRJrSdvj4R5fnhv9ClRsDgZp6lQs6lzoQ5AomZIpn8_dj9vd38Pe3gMejh9bSd2pQBRozh4bPsVc3oScj0Mcz8LrCBxbOYWrSlI/EML_comm_afe/ View invitation from Matheus Morais http://www.linkedin.com/e/mzateh-gjbieyy7-1u/vTWyDe4yCEPPQyWVLZMh1H4yCEPPQGFCi7/blk/I49048324_25/0RcBYQczcUd30Vd4ALqnpPbOYWrSlI/svi/ -- DID YOU KNOW you can use your LinkedIn profile as your website? Select a vanity URL and then promote this address on your business cards, email signatures, website, etc http://www.linkedin.com/e/mzateh-gjbieyy7-1u/ewp/inv-21/ -- (c) 2010, LinkedIn Corporation -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build onUbuntu Server
Thanks. I tried both paramaters in my smb.conf but I got errors when I tried both: jenfab@dc:~$ sudo /etc/init.d/samba4 restart * Stopping Samba 4 daemon samba [ OK ] * Starting Samba 4 daemon sambaUnknown parameter encountered: valid users Ignoring unknown parameter valid users [ OK ] jenfab@dc:~$ sudo nano /etc/samba/smb.conf jenfab@dc:~$ sudo /etc/init.d/samba4 restart * Stopping Samba 4 daemon samba [ OK ] * Starting Samba 4 daemon sambaUnknown parameter encountered: write list Ignoring unknown parameter write list Unknown parameter encountered: read list Ignoring unknown parameter read list [ OK ] On Mon, Jan 24, 2011 at 9:52 AM, t...@tms3.com wrote: I am not sure how to use Microsoft AD tools to create shares and then set those shares permissable to certain AD groups. For example, I need to create a share called Finance and only the people in Finance can read/write to it. I was hoping to use SWAT to help in creation and management of those shares. vi smb.conf (or your favorite text editor) add [finance] ...various parameter... valid users = @finance or write list = @finance read list = @finance I have been using AD tools to manage the domain and GPO's but I am not sure how to use them to create shares. You can see swat for samba4 here: https://github.com/rvelhote/GSoC-SWAT On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller muel...@tropenklinik.de wrote: I thought swat is no longer working!!Just use Microsoft ads tools and you are up and running. --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de Internet: http://www.tropenklinik.de --- -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von Lynn Dixon Gesendet: Sonntag, 23. Januar 2011 06:39 An: samba@lists.samba.org Betreff: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on Ubuntu Server Hello all, I have setup a complete domain using Samba 4 on my Ubuntu server 32 bit machine. I am using the Alpha 13 build (it was actually in the Ubuntu Repos). I am trying to setup swat to make it easier to manage shares. I have followed the instructions at https://github.com/rvelhote/GSoC-SWATbut I am having a few problems. When I run ./run I get the following errors: jenfab@dc:~/GSoC-SWAT$ sudo ./run Starting subprocess with file monitor Traceback (most recent call last): File /usr/local/bin/paster, line 9, in module load_entry_point('PasteScript==1.7.3', 'console_scripts', 'paster')() File /usr/lib/pymodules/python2.6/paste/script/command.py, line 84, in run invoke(command, command_name, options, args[1:]) File /usr/lib/pymodules/python2.6/paste/script/command.py, line 123, in invoke exit_code = runner.run(args) File /usr/lib/pymodules/python2.6/paste/script/command.py, line 218, in run result = self.command() File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 276, in command relative_to=base, global_conf=vars) File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 313, in loadapp **kw) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 204, in loadapp return loadobj(APP, uri, name=name, **kw) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 224, in loadobj global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 248, in loadcontext global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 278, in _loadconfig return loader.get_context(object_type, name, global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 409, in get_context section) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 431, in _context_from_use object_type, name=use, global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 361, in get_context global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 248, in loadcontext global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 285, in _loadegg return loader.get_context(object_type, name, global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 561, in get_context object_type, name=name) File
Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build onUbuntu Server
This is all you need. [test] path = /data/test read only = no Then use windows to set the acl's. Jonn http://wiki.samba.org/index.php/Samba4/HOWTO On 01/24/2011 09:24 AM, Lynn Dixon wrote: Thanks. I tried both paramaters in my smb.conf but I got errors when I tried both: jenfab@dc:~$ sudo /etc/init.d/samba4 restart * Stopping Samba 4 daemon samba [ OK ] * Starting Samba 4 daemon sambaUnknown parameter encountered: valid users Ignoring unknown parameter valid users [ OK ] jenfab@dc:~$ sudo nano /etc/samba/smb.conf jenfab@dc:~$ sudo /etc/init.d/samba4 restart * Stopping Samba 4 daemon samba [ OK ] * Starting Samba 4 daemon sambaUnknown parameter encountered: write list Ignoring unknown parameter write list Unknown parameter encountered: read list Ignoring unknown parameter read list [ OK ] On Mon, Jan 24, 2011 at 9:52 AM, t...@tms3.com wrote: I am not sure how to use Microsoft AD tools to create shares and then set those shares permissable to certain AD groups. For example, I need to create a share called Finance and only the people in Finance can read/write to it. I was hoping to use SWAT to help in creation and management of those shares. vi smb.conf (or your favorite text editor) add [finance] ...various parameter... valid users = @finance or write list = @finance read list = @finance I have been using AD tools to manage the domain and GPO's but I am not sure how to use them to create shares. You can see swat for samba4 here: https://github.com/rvelhote/GSoC-SWAT On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller muel...@tropenklinik.de wrote: I thought swat is no longer working!!Just use Microsoft ads tools and you are up and running. --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de Internet: http://www.tropenklinik.de --- -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von Lynn Dixon Gesendet: Sonntag, 23. Januar 2011 06:39 An: samba@lists.samba.org Betreff: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on Ubuntu Server Hello all, I have setup a complete domain using Samba 4 on my Ubuntu server 32 bit machine. I am using the Alpha 13 build (it was actually in the Ubuntu Repos). I am trying to setup swat to make it easier to manage shares. I have followed the instructions at https://github.com/rvelhote/GSoC-SWATbut I am having a few problems. When I run ./run I get the following errors: jenfab@dc:~/GSoC-SWAT$ sudo ./run Starting subprocess with file monitor Traceback (most recent call last): File /usr/local/bin/paster, line 9, in module load_entry_point('PasteScript==1.7.3', 'console_scripts', 'paster')() File /usr/lib/pymodules/python2.6/paste/script/command.py, line 84, in run invoke(command, command_name, options, args[1:]) File /usr/lib/pymodules/python2.6/paste/script/command.py, line 123, in invoke exit_code = runner.run(args) File /usr/lib/pymodules/python2.6/paste/script/command.py, line 218, in run result = self.command() File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 276, in command relative_to=base, global_conf=vars) File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 313, in loadapp **kw) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 204, in loadapp return loadobj(APP, uri, name=name, **kw) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 224, in loadobj global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 248, in loadcontext global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 278, in _loadconfig return loader.get_context(object_type, name, global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 409, in get_context section) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 431, in _context_from_use object_type, name=use, global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 361, in get_context global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 248, in loadcontext global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 285, in _loadegg return
Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build onUbuntu Server
That was the first thing that I had tried. I created a share using smb.conf, then restarted samba. I can see the share, and navigate down into it from windows. If I create a folder and then rick click from a windows machine and do security, I can add groups, but when I try to save, the changes just disappear. What is the best way to manage ACL's on the share from a windows machine? Sorry for all the questions, this is my first venture into a Samba 4 AD environment. I have used Samba 2/3 i on a workgroup in the past and used different security schemes. On Mon, Jan 24, 2011 at 10:37 AM, Taylor, Jonn jo...@taylortelephone.comwrote: This is all you need. [test] path = /data/test read only = no Then use windows to set the acl's. Jonn http://wiki.samba.org/index.php/Samba4/HOWTO On 01/24/2011 09:24 AM, Lynn Dixon wrote: Thanks. I tried both paramaters in my smb.conf but I got errors when I tried both: jenfab@dc:~$ sudo /etc/init.d/samba4 restart * Stopping Samba 4 daemon samba [ OK ] * Starting Samba 4 daemon sambaUnknown parameter encountered: valid users Ignoring unknown parameter valid users [ OK ] jenfab@dc:~$ sudo nano /etc/samba/smb.conf jenfab@dc:~$ sudo /etc/init.d/samba4 restart * Stopping Samba 4 daemon samba [ OK ] * Starting Samba 4 daemon sambaUnknown parameter encountered: write list Ignoring unknown parameter write list Unknown parameter encountered: read list Ignoring unknown parameter read list [ OK ] On Mon, Jan 24, 2011 at 9:52 AM, t...@tms3.com wrote: I am not sure how to use Microsoft AD tools to create shares and then set those shares permissable to certain AD groups. For example, I need to create a share called Finance and only the people in Finance can read/write to it. I was hoping to use SWAT to help in creation and management of those shares. vi smb.conf (or your favorite text editor) add [finance] ...various parameter... valid users = @finance or write list = @finance read list = @finance I have been using AD tools to manage the domain and GPO's but I am not sure how to use them to create shares. You can see swat for samba4 here: https://github.com/rvelhote/GSoC-SWAT On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller muel...@tropenklinik.de wrote: I thought swat is no longer working!!Just use Microsoft ads tools and you are up and running. --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de Internet: http://www.tropenklinik.de --- -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto: samba-boun...@lists.samba.org] Im Auftrag von Lynn Dixon Gesendet: Sonntag, 23. Januar 2011 06:39 An: samba@lists.samba.org Betreff: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on Ubuntu Server Hello all, I have setup a complete domain using Samba 4 on my Ubuntu server 32 bit machine. I am using the Alpha 13 build (it was actually in the Ubuntu Repos). I am trying to setup swat to make it easier to manage shares. I have followed the instructions at https://github.com/rvelhote/GSoC-SWATbut I am having a few problems. When I run ./run I get the following errors: jenfab@dc:~/GSoC-SWAT$ sudo ./run Starting subprocess with file monitor Traceback (most recent call last): File /usr/local/bin/paster, line 9, in module load_entry_point('PasteScript==1.7.3', 'console_scripts', 'paster')() File /usr/lib/pymodules/python2.6/paste/script/command.py, line 84, in run invoke(command, command_name, options, args[1:]) File /usr/lib/pymodules/python2.6/paste/script/command.py, line 123, in invoke exit_code = runner.run(args) File /usr/lib/pymodules/python2.6/paste/script/command.py, line 218, in run result = self.command() File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 276, in command relative_to=base, global_conf=vars) File /usr/lib/pymodules/python2.6/paste/script/serve.py, line 313, in loadapp **kw) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 204, in loadapp return loadobj(APP, uri, name=name, **kw) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 224, in loadobj global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 248, in loadcontext global_conf=global_conf) File /usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py, line 278, in _loadconfig return loader.get_context(object_type,
Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build onUbuntu Server
Go to advanced when changing ACL's. Jonn On 01/24/2011 09:48 AM, Lynn Dixon wrote: That was the first thing that I had tried. I created a share using smb.conf, then restarted samba. I can see the share, and navigate down into it from windows. If I create a folder and then rick click from a windows machine and do security, I can add groups, but when I try to save, the changes just disappear. What is the best way to manage ACL's on the share from a windows machine? Sorry for all the questions, this is my first venture into a Samba 4 AD environment. I have used Samba 2/3 i on a workgroup in the past and used different security schemes. On Mon, Jan 24, 2011 at 10:37 AM, Taylor, Jonn jo...@taylortelephone.com mailto:jo...@taylortelephone.com wrote: This is all you need. [test] path = /data/test read only = no Then use windows to set the acl's. Jonn http://wiki.samba.org/index.php/Samba4/HOWTO On 01/24/2011 09:24 AM, Lynn Dixon wrote: Thanks. I tried both paramaters in my smb.conf but I got errors when I tried both: jenfab@dc:~$ sudo /etc/init.d/samba4 restart * Stopping Samba 4 daemon samba [ OK ] * Starting Samba 4 daemon sambaUnknown parameter encountered: valid users Ignoring unknown parameter valid users [ OK ] jenfab@dc:~$ sudo nano /etc/samba/smb.conf jenfab@dc:~$ sudo /etc/init.d/samba4 restart * Stopping Samba 4 daemon samba [ OK ] * Starting Samba 4 daemon sambaUnknown parameter encountered: write list Ignoring unknown parameter write list Unknown parameter encountered: read list Ignoring unknown parameter read list [ OK ] On Mon, Jan 24, 2011 at 9:52 AM, t...@tms3.com mailto:t...@tms3.com wrote: I am not sure how to use Microsoft AD tools to create shares and then set those shares permissable to certain AD groups. For example, I need to create a share called Finance and only the people in Finance can read/write to it. I was hoping to use SWAT to help in creation and management of those shares. vi smb.conf (or your favorite text editor) add [finance] ...various parameter... valid users = @finance or write list = @finance read list = @finance I have been using AD tools to manage the domain and GPO's but I am not sure how to use them to create shares. You can see swat for samba4 here: https://github.com/rvelhote/GSoC-SWAT On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller muel...@tropenklinik.de mailto:muel...@tropenklinik.de wrote: I thought swat is no longer working!!Just use Microsoft ads tools and you are up and running. --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de mailto:muel...@tropenklinik.de Internet: http://www.tropenklinik.de --- -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org mailto:samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org mailto:samba-boun...@lists.samba.org] Im Auftrag von Lynn Dixon Gesendet: Sonntag, 23. Januar 2011 06:39 An: samba@lists.samba.org mailto:samba@lists.samba.org Betreff: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on Ubuntu Server Hello all, I have setup a complete domain using Samba 4 on my Ubuntu server 32 bit machine. I am using the Alpha 13 build (it was actually in the Ubuntu Repos). I am trying to setup swat to make it easier to manage shares. I have followed the instructions at https://github.com/rvelhote/GSoC-SWATbut I am having a few problems. When I run ./run I get the following errors: jenfab@dc:~/GSoC-SWAT$ sudo ./run Starting subprocess with file monitor Traceback (most recent call last): File /usr/local/bin/paster, line 9, in module load_entry_point('PasteScript==1.7.3', 'console_scripts', 'paster')() File /usr/lib/pymodules/python2.6/paste/script/command.py, line 84, in run
Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build onUbuntu Server
Ok. I tried the following: Navigate to share, right click -- Properties. Went to security tab then clicked advanced That opened up and I was able to click Add and then add my Finance AD group. The Finance group even shows up with the selected permissions in the list of users/groups. BUT, when I click Apply all of the changes vanish. I took some snapshots. Check them at the links: Before changes: http://lh3.ggpht.com/_qETGDInSB7Q/TT2tBxte7uI/Lcw/Mf8kYZxcUxI/s400/finance1.JPG After adding Finance: http://lh4.ggpht.com/_qETGDInSB7Q/TT2tCEhe8kI/Lc0/4thnUxi_sBo/s400/finance2.JPG But when I click apply, the jenfab\finance group dissappears from the list and the changes never save. I have tried giving 777 perms on the actual directory on my ubuntu box to troubleshoot, but had same results. I have also verified that ACL package has been installed on my Ubuntu machine. What user:group do I need to have the actual directory on the ubuntu machine set to? Any other things I should try? On Mon, Jan 24, 2011 at 11:02 AM, Taylor, Jonn jo...@taylortelephone.comwrote: Go to advanced when changing ACL's. Jonn On 01/24/2011 09:48 AM, Lynn Dixon wrote: That was the first thing that I had tried. I created a share using smb.conf, then restarted samba. I can see the share, and navigate down into it from windows. If I create a folder and then rick click from a windows machine and do security, I can add groups, but when I try to save, the changes just disappear. What is the best way to manage ACL's on the share from a windows machine? Sorry for all the questions, this is my first venture into a Samba 4 AD environment. I have used Samba 2/3 i on a workgroup in the past and used different security schemes. On Mon, Jan 24, 2011 at 10:37 AM, Taylor, Jonn jo...@taylortelephone.comwrote: This is all you need. [test] path = /data/test read only = no Then use windows to set the acl's. Jonn http://wiki.samba.org/index.php/Samba4/HOWTO On 01/24/2011 09:24 AM, Lynn Dixon wrote: Thanks. I tried both paramaters in my smb.conf but I got errors when I tried both: jenfab@dc:~$ sudo /etc/init.d/samba4 restart * Stopping Samba 4 daemon samba [ OK ] * Starting Samba 4 daemon sambaUnknown parameter encountered: valid users Ignoring unknown parameter valid users [ OK ] jenfab@dc:~$ sudo nano /etc/samba/smb.conf jenfab@dc:~$ sudo /etc/init.d/samba4 restart * Stopping Samba 4 daemon samba [ OK ] * Starting Samba 4 daemon sambaUnknown parameter encountered: write list Ignoring unknown parameter write list Unknown parameter encountered: read list Ignoring unknown parameter read list [ OK ] On Mon, Jan 24, 2011 at 9:52 AM, t...@tms3.com wrote: I am not sure how to use Microsoft AD tools to create shares and then set those shares permissable to certain AD groups. For example, I need to create a share called Finance and only the people in Finance can read/write to it. I was hoping to use SWAT to help in creation and management of those shares. vi smb.conf (or your favorite text editor) add [finance] ...various parameter... valid users = @finance or write list = @finance read list = @finance I have been using AD tools to manage the domain and GPO's but I am not sure how to use them to create shares. You can see swat for samba4 here: https://github.com/rvelhote/GSoC-SWAT On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller muel...@tropenklinik.de wrote: I thought swat is no longer working!!Just use Microsoft ads tools and you are up and running. --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de Internet: http://www.tropenklinik.de --- -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto: samba-boun...@lists.samba.org] Im Auftrag von Lynn Dixon Gesendet: Sonntag, 23. Januar 2011 06:39 An: samba@lists.samba.org Betreff: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on Ubuntu Server Hello all, I have setup a complete domain using Samba 4 on my Ubuntu server 32 bit machine. I am using the Alpha 13 build (it was actually in the Ubuntu Repos). I am trying to setup swat to make it easier to manage shares. I have followed the instructions at https://github.com/rvelhote/GSoC-SWATbut I am having a few problems. When I run ./run I get the following errors: jenfab@dc:~/GSoC-SWAT$ sudo ./run Starting subprocess with file monitor Traceback (most recent call last): File /usr/local/bin/paster, line 9, in module
Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build onUbuntu Server
Need to see you samba logs. They are in /usr/local/samba/var/samb.log by default. Directory owner needs to be root and group should be users or staff. Also make sure that you can set the ACL's from the command prompt. How to do this is on the wiki. Jonn On 01/24/2011 10:50 AM, Lynn Dixon wrote: Ok. I tried the following: Navigate to share, right click -- Properties. Went to security tab then clicked advanced That opened up and I was able to click Add and then add my Finance AD group. The Finance group even shows up with the selected permissions in the list of users/groups. BUT, when I click Apply all of the changes vanish. I took some snapshots. Check them at the links: Before changes: http://lh3.ggpht.com/_qETGDInSB7Q/TT2tBxte7uI/Lcw/Mf8kYZxcUxI/s400/finance1.JPG After adding Finance: http://lh4.ggpht.com/_qETGDInSB7Q/TT2tCEhe8kI/Lc0/4thnUxi_sBo/s400/finance2.JPG But when I click apply, the jenfab\finance group dissappears from the list and the changes never save. I have tried giving 777 perms on the actual directory on my ubuntu box to troubleshoot, but had same results. I have also verified that ACL package has been installed on my Ubuntu machine. What user:group do I need to have the actual directory on the ubuntu machine set to? Any other things I should try? On Mon, Jan 24, 2011 at 11:02 AM, Taylor, Jonn jo...@taylortelephone.com mailto:jo...@taylortelephone.com wrote: Go to advanced when changing ACL's. Jonn On 01/24/2011 09:48 AM, Lynn Dixon wrote: That was the first thing that I had tried. I created a share using smb.conf, then restarted samba. I can see the share, and navigate down into it from windows. If I create a folder and then rick click from a windows machine and do security, I can add groups, but when I try to save, the changes just disappear. What is the best way to manage ACL's on the share from a windows machine? Sorry for all the questions, this is my first venture into a Samba 4 AD environment. I have used Samba 2/3 i on a workgroup in the past and used different security schemes. On Mon, Jan 24, 2011 at 10:37 AM, Taylor, Jonn jo...@taylortelephone.com mailto:jo...@taylortelephone.com wrote: This is all you need. [test] path = /data/test read only = no Then use windows to set the acl's. Jonn http://wiki.samba.org/index.php/Samba4/HOWTO On 01/24/2011 09:24 AM, Lynn Dixon wrote: Thanks. I tried both paramaters in my smb.conf but I got errors when I tried both: jenfab@dc:~$ sudo /etc/init.d/samba4 restart * Stopping Samba 4 daemon samba [ OK ] * Starting Samba 4 daemon samba Unknown parameter encountered: valid users Ignoring unknown parameter valid users [ OK ] jenfab@dc:~$ sudo nano /etc/samba/smb.conf jenfab@dc:~$ sudo /etc/init.d/samba4 restart * Stopping Samba 4 daemon samba [ OK ] * Starting Samba 4 daemon samba Unknown parameter encountered: write list Ignoring unknown parameter write list Unknown parameter encountered: read list Ignoring unknown parameter read list [ OK ] On Mon, Jan 24, 2011 at 9:52 AM, t...@tms3.com mailto:t...@tms3.com wrote: I am not sure how to use Microsoft AD tools to create shares and then set those shares permissable to certain AD groups. For example, I need to create a share called Finance and only the people in Finance can read/write to it. I was hoping to use SWAT to help in creation and management of those shares. vi smb.conf (or your favorite text editor) add [finance] ...various parameter... valid users = @finance or write list = @finance read list = @finance I have been using AD tools to manage the domain and GPO's but I am not sure how to use them to create shares. You can see swat for samba4 here: https://github.com/rvelhote/GSoC-SWAT On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller muel...@tropenklinik.de
[Samba] some users can login
*I have a PDC on ubuntu 10.04. Samba ver 3.4.7.* At the first of my installation all users can login on windows xp machines and access to the samba shares . But now only two domain users can log in on it, but all users can access to the samba shares. When i boot a windows xp machine and i try to log in with an user i got this: The system could not log you on. Make sure your user name and domain are correct, then type your password again. Letters in passwords must be typed using the correct case. Make sure that Caps Lock is not accidentally on. You can give me a clue? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build onUbuntu Server
Check you permissions on the folders. [Mon Jan 24 11:30:24 2011 EST, 0 ../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()] ../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' - wanted 0x010e but got 0xfff3 (missing 0x000c) [Mon Jan 24 11:30:24 2011 EST, 0 ../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()] ../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' - wanted 0x0004 but got 0xfef3 (missing 0x0004) [Mon Jan 24 11:30:24 2011 EST, 0 ../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()] ../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' - wanted 0x0008 but got 0xfef3 (missing 0x0008) [Mon Jan 24 11:31:06 2011 EST, 0 ../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()] ../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' - wanted 0x0006 but got 0xfef3 (missing 0x0004) [Mon Jan 24 11:31:06 2011 EST, 0 ../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()] ../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' - wanted 0x0006 but got 0xfef3 (missing 0x0004) [Mon Jan 24 11:32:05 2011 EST, 0 ../dsdb/kcc/kcc_topology.c:3479:kcctpl_test()] Testing kcctpl_create_intersite_connections [Mon Jan 24 11:35:28 2011 EST, 0 ../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()] ../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' - wanted 0x0006 but got 0xfef3 (missing 0x0004) [Mon Jan 24 11:35:28 2011 EST, 0 ../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()] ../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' - wanted 0x0006 but got 0xfef3 (missing 0x0004) Jonn On 01/24/2011 11:07 AM, Lynn Dixon wrote: Thanks for the help. I have attached my samba.log. On Mon, Jan 24, 2011 at 11:58 AM, Taylor, Jonn jo...@taylortelephone.com mailto:jo...@taylortelephone.com wrote: Need to see you samba logs. They are in /usr/local/samba/var/samb.log by default. Directory owner needs to be root and group should be users or staff. Also make sure that you can set the ACL's from the command prompt. How to do this is on the wiki. Jonn On 01/24/2011 10:50 AM, Lynn Dixon wrote: Ok. I tried the following: Navigate to share, right click -- Properties. Went to security tab then clicked advanced That opened up and I was able to click Add and then add my Finance AD group. The Finance group even shows up with the selected permissions in the list of users/groups. BUT, when I click Apply all of the changes vanish. I took some snapshots. Check them at the links: Before changes: http://lh3.ggpht.com/_qETGDInSB7Q/TT2tBxte7uI/Lcw/Mf8kYZxcUxI/s400/finance1.JPG After adding Finance: http://lh4.ggpht.com/_qETGDInSB7Q/TT2tCEhe8kI/Lc0/4thnUxi_sBo/s400/finance2.JPG But when I click apply, the jenfab\finance group dissappears from the list and the changes never save. I have tried giving 777 perms on the actual directory on my ubuntu box to troubleshoot, but had same results. I have also verified that ACL package has been installed on my Ubuntu machine. What user:group do I need to have the actual directory on the ubuntu machine set to? Any other things I should try? On Mon, Jan 24, 2011 at 11:02 AM, Taylor, Jonn jo...@taylortelephone.com mailto:jo...@taylortelephone.com wrote: Go to advanced when changing ACL's. Jonn On 01/24/2011 09:48 AM, Lynn Dixon wrote: That was the first thing that I had tried. I created a share using smb.conf, then restarted samba. I can see the share, and navigate down into it from windows. If I create a folder and then rick click from a windows machine and do security, I can add groups, but when I try to save, the changes just disappear. What is the best way to manage ACL's on the share from a windows machine? Sorry for all the questions, this is my first venture into a Samba 4 AD environment. I have used Samba 2/3 i on a workgroup in the past and used different security schemes. On Mon, Jan 24, 2011 at 10:37 AM, Taylor, Jonn jo...@taylortelephone.com mailto:jo...@taylortelephone.com wrote: This is all you need. [test] path = /data/test read only = no Then use windows to set the acl's. Jonn http://wiki.samba.org/index.php/Samba4/HOWTO On 01/24/2011 09:24 AM, Lynn Dixon wrote: Thanks. I tried both paramaters in my smb.conf but I got errors when I tried both: jenfab@dc:~$ sudo /etc/init.d/samba4 restart * Stopping Samba 4 daemon samba [ OK ] * Starting
Re: [Samba] some users can login
Look at the event logs on your PC. Look at the samba logs on the server. If only two users can even log into the XP machines, how can ALL users access the shares? Or are they accessing shares from non-XP machines? Did you check pdbedit -v someuser to compare the users who can login with the users who cannot? Are the users in more than 16 groups? On 01/24/2011 11:59 AM, Jon Colás Gómez wrote: *I have a PDC on ubuntu 10.04. Samba ver 3.4.7.* At the first of my installation all users can login on windows xp machines and access to the samba shares . But now only two domain users can log in on it, but all users can access to the samba shares. When i boot a windows xp machine and i try to log in with an user i got this: The system could not log you on. Make sure your user name and domain are correct, then type your password again. Letters in passwords must be typed using the correct case. Make sure that Caps Lock is not accidentally on. You can give me a clue? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Upgrading from 3.0.23 but group_mapping.tdb is empty on current config
Hi all, I've done a serious amount of reading around this but I still can't figure out the implications of what I'm seeing. I have inherited a CentOS 4 Samba 3.0.23 PDC file server for 40 hosts that has been through the wars. It is standalone and stable and uses the smbpasswd file authentication backend, however I need to upgrade for Windows 7 support. I intend to build a server from scratch to the latest packages in CentOS 5 (3.3.8), set an identical local SID for the domain name, bring across the smbpasswd file and then migrate to a tdbsam passdb when I am confident that there are no issues. In practically every Samba PDC guide I have read it says that I need to map the Windows domain groups to unix groups. On the current server, the net groupmap list command does not return any output. Running 'strings' against /var/lib/samba/group_mapping.tdb shows the following entries: # strings group_mapping.tdb TDB file INFO/version BBB0 UNIXGROUP/S-1-5-32-544 Administrators UNIXGROUP/S-1-5-32-545 Users UNIXGROUP/S-1-5-32-546 Guests UNIXGROUP/S-1-5-32-547 Power Users UNIXGROUP/S-1-5-32-548 Account Operators UNIXGROUP/S-1-5-32-549 System Operators BBBP UNIXGROUP/S-1-5-32-550 Print Operators UNIXGROUP/S-1-5-32-551 Backup Operators BBBP UNIXGROUP/S-1-5-32-552 Replicators UNIXGROUP/S-1-5-21-2805943957-1905505361-2100739042-512 Domain Admins UNIXGROUP/S-1-5-21-2805943957-1905505361-2100739042-513 Domain Users UNIXGROUP/S-1-5-21-2805943957-1905505361-2100739042-514 Domain Guests UNIXGROUP/S-1-5-21-3753518464-2681452192-3078135741-512 Domain Admins UNIXGROUP/S-1-5-21-3753518464-2681452192-3078135741-513 Domain Users UNIXGROUP/S-1-5-21-3753518464-2681452192-3078135741-514 Domain Guests UNIXGROUP/S-1-5-21-4236374240-3432822334-3570386938-512 Domain Admins UNIXGROUP/S-1-5-21-4236374240-3432822334-3570386938-513 Domain Users UNIXGROUP/S-1-5-21-4236374240-3432822334-3570386938-514 Domain Guests That suggests to me that the group_mapping.tdb file has entries for three different domains for the groups Domain Admins, Domain Users and Domain Guests, but that none of them is my domain. Is this correct? We are not running any other domains here. I also think that I will need to map Windows groups to unix groups on the new server. Will this cause any trouble, given that the Windows machines aren't expecting it? Currently no domain groups are available in Windows. Access to the shares is managed at the Linux filesystem level with 'valid users' flags in the share options. Should I start from scratch with an identical PDC SID, or will that cause other problems? Best regards, Simon Barrett - Find the home of your dreams with eircom net property Sign up for email alerts now http://www.eircom.net/propertyalerts -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Problems accessing samba 3.5.7 from Windows 2008
On Thu, May 13, 2010 at 2:17 AM, Laurenz, Dirk dirk.laur...@ts.fujitsu.comwrote: any ideas anybody? Mit freundlichem Gruss, Dirk Laurenz Projektmanager FUJITSU TECHNOLOGY SOLUTIONS GmbH R DE GE TIS N IC 2 Hildesheimer Strasse 25 30880 Laatzen Germany Telephone: +49 511 84 89 18 08 Telefax:+49 511 84 89 25 18 08 Mobile: +49 170 22 10 781 Email: dirk.laur...@ts.fujitsu.com Internet: http://ts.fujitsu.com Firmenangaben: http://de.ts.fujitsu.com/imprint.html Diese e-Mail kann vertrauliche und/oder rechtlich geschützte Informationen enthalten. Wenn Sie nicht der richtige Adressat sind oder diese e-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese e-Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser e-Mail und ihrer Inhalte ist nicht gestattet. This e-mail may contain confidential and/or privileged information. If you are not the intended addressee or have received this e-mail in error, please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Laurenz, Dirk Sent: Tuesday, May 11, 2010 12:53 PM To: samba@lists.samba.org Subject: [Samba] Problems accessing samba 3.5.7 from Windows 2008 Hi folks, i've set up a samba 3.5.7 as a ADS Memberserver (W2K3). Accessing this server from xp, vista or server 2003 is no problem. trying to access it from windows 2008 results in network path not found or generic network error. Last entries in logfile: [2010/05/11 12:48:01.055041, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/05/11 12:48:01.055073, 3] smbd/reply.c:846(reply_tcon_and_X) tconX service=IPC$ [2010/05/11 12:48:01.055595, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/05/11 12:48:01.055658, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/05/11 12:48:01.055685, 3] smbd/service.c:1250(close_cnum) 172.17.4.48 (172.17.4.48) closed connection to service IPC$ [2010/05/11 12:48:01.055709, 3] smbd/connection.c:31(yield_connection) Yielding connection to IPC$ [2010/05/11 12:48:01.055750, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/05/11 12:48:01.055811, 3] smbd/connection.c:31(yield_connection) Yielding connection to [2010/05/11 12:48:01.055899, 3] smbd/server.c:902(exit_server_common) Server exit (failed to receive smb request) smb.conf (w/o shares) [global] workgroup = DOMAIN realm = DOMAIN.NET server string = SOMETHING security = ADS map to guest = Bad User log level = 1 printcap name = /etc/printcap wins server = $IP1, $IP2 idmap uid = 1-200 idmap gid = 1-200 template homedir = /home/%U template shell = /bin/bash winbind use default domain = Yes winbind expand groups = 3 winbind refresh tickets = Yes winbind offline logon = Yes winbind normalize names = Yes include = /etc/samba/%I.conf bind interfaces only = yes interfaces = 127.0.0.1, $IP/255.255.255.0 Mit freundlichem Gruss, Dirk Laurenz Projektmanager FUJITSU TECHNOLOGY SOLUTIONS GmbH R DE GE TIS N IC 2 Hildesheimer Strasse 25 30880 Laatzen Germany Telephone: +49 511 84 89 18 08 Telefax:+49 511 84 89 25 18 08 Mobile: +49 170 22 10 781 Email: dirk.laur...@ts.fujitsu.commailto: dirk.laur...@ts.fujitsu.com Internet: http://ts.fujitsu.comhttp://ts.fujitsu.com/ Firmenangaben: http://de.ts.fujitsu.com/imprint.html Diese e-Mail kann vertrauliche und/oder rechtlich geschützte Informationen enthalten. Wenn Sie nicht der richtige Adressat sind oder diese e-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese e-Mail. Das There is a bug where a client connect 443 if it timesout, it connects to 139. Bud ID 7881. Where did you download 3.5.7 from? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 buildonUbuntu Server
But when I click apply, the jenfab\finance group dissappears from the list and the changes never save. What OS are you using? If Linux then make sure share file system is xattrs capable and enable it in /etc/fstab (I believe). If not you can use: posix:eadb = /usr/local/samba/private/eadb.tdb in global. This does NOT scale well. I have tried giving 777 perms on the actual directory on my ubuntu box to troubleshoot, but had same results. I have also verified that ACL package has been installed on my Ubuntu machine. What user:group do I need to have the actual directory on the ubuntu machine set to? Any other things I should try? On Mon, Jan 24, 2011 at 11:02 AM, Taylor, Jonn jo...@taylortelephone.com wrote: Go to advanced when changing ACL's. Jonn On 01/24/2011 09:48 AM, Lynn Dixon wrote: That was the first thing that I had tried. I created a share using smb.conf, then restarted samba. I can see the share, and navigate down into it from windows. If I create a folder and then rick click from a windows machine and do security, I can add groups, but when I try to save, the changes just disappear. What is the best way to manage ACL's on the share from a windows machine? Sorry for all the questions, this is my first venture into a Samba 4 AD environment. I have used Samba 2/3 i on a workgroup in the past and used different security schemes. On Mon, Jan 24, 2011 at 10:37 AM, Taylor, Jonn jo...@taylortelephone.com wrote: This is all you need. [test] path = /data/test read only = no Then use windows to set the acl's. Jonn http://wiki.samba.org/index.php/Samba4/HOWTO On 01/24/2011 09:24 AM, Lynn Dixon wrote: Thanks. I tried both paramaters in my smb.conf but I got errors when I tried both: jenfab@dc:~$ sudo /etc/init.d/samba4 restart * Stopping Samba 4 daemon samba [ OK ] * Starting Samba 4 daemon samba Unknown parameter encountered: valid users Ignoring unknown parameter valid users [ OK ] jenfab@dc:~$ sudo nano /etc/samba/smb.conf jenfab@dc:~$ sudo /etc/init.d/samba4 restart * Stopping Samba 4 daemon samba [ OK ] * Starting Samba 4 daemon samba Unknown parameter encountered: write list Ignoring unknown parameter write list Unknown parameter encountered: read list Ignoring unknown parameter read list [ OK ] On Mon, Jan 24, 2011 at 9:52 AM, t...@tms3.com wrote: I am not sure how to use Microsoft AD tools to create shares and then set those shares permissable to certain AD groups. For example, I need to create a share called Finance and only the people in Finance can read/write to it. I was hoping to use SWAT to help in creation and management of those shares. vi smb.conf (or your favorite text editor) add [finance] ...various parameter... valid users = @finance or write list = @finance read list = @finance I have been using AD tools to manage the domain and GPO's but I am not sure how to use them to create shares. You can see swat for samba4 here: https://github.com/rvelhote/GSoC-SWAT On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller muel...@tropenklinik.de wrote: I thought swat is no longer working!!Just use Microsoft ads tools and you are up and running. --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de Internet: http://www.tropenklinik.de --- -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von Lynn Dixon Gesendet: Sonntag, 23. Januar 2011 06:39 An: samba@lists.samba.org Betreff: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on Ubuntu Server Hello all, I have setup a complete domain using Samba 4 on my Ubuntu server 32 bit machine. I am using the Alpha 13 build (it was actually in the Ubuntu Repos). I am trying to setup swat to make it easier to manage shares. I have followed the instructions at https://github.com/rvelhote/GSoC-SWATbut I am having a few problems. When I run ./run I get the following errors: jenfab@dc:~/GSoC-SWAT$ sudo ./run Starting subprocess with file monitor Traceback (most recent call last): File
Re: [Samba] Problems accessing samba 3.5.7 from Windows 2008
There is a bug where a client connect 443 if it timesout, it connects to 139. Bud ID 7881. Where did you download 3.5.7 from? I would like to know this too... there's supposed to be some fix for printers in 3.5.7 that I really want. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Problems accessing samba 3.5.7 from Windows 2008
There is a bug where a client connect 443 if it timesout, it connects to 139. Bud ID 7881. Where did you download 3.5.7 from? I would like to know this too... there's supposed to be some fix for printers in 3.5.7 that I really want. Since the date of the original email was from last May I believe the version quoted had to be wrong. However I guess you could grab the git and build the current 3.5.X to get the latest 3.5 release. John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Multiple domains issue
Here's some more info. This is an excerpt from the log on a connection attempt: [2011/01/24 15:30:55, 1] smbd/service.c:make_connection_snum(950) CLIENT_STATION (X.X.X.46) connect to service USERNAME initially as user ADDOMAIN+USERNAME (uid=1, gid=1) (pid 18741) [2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150) chdir (/opt/ntpublic/users/USERNAME) failed [2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150) chdir (/opt/ntpublic/users/USERNAME) failed [2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150) chdir (/opt/ntpublic/users/USERNAME) failed [2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150) chdir (/opt/ntpublic/users/USERNAME) failed [2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150) chdir (/opt/ntpublic/users/USERNAME) failed [2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150) chdir (/opt/ntpublic/users/USERNAME) failed [2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150) chdir (/opt/ntpublic/users/USERNAME) failed [2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150) chdir (/opt/ntpublic/users/USERNAME) failed [2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150) chdir (/opt/ntpublic/users/USERNAME) failed [2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150) chdir (/opt/ntpublic/users/USERNAME) failed [2011/01/24 15:30:56, 0] smbd/service.c:set_current_service(150) chdir (/opt/ntpublic/users/USERNAME) failed [2011/01/24 15:30:57, 0] smbd/service.c:set_current_service(150) chdir (/opt/ntpublic/users/USERNAME) failed [2011/01/24 15:30:57, 0] smbd/service.c:set_current_service(150) chdir (/opt/ntpublic/users/USERNAME) failed [2011/01/24 15:30:57, 0] smbd/service.c:set_current_service(150) chdir (/opt/ntpublic/users/USERNAME) failed [2011/01/24 15:30:59, 0] smbd/service.c:set_current_service(150) chdir (/opt/ntpublic/users/USERNAME) failed [2011/01/24 15:30:59, 0] smbd/service.c:set_current_service(150) chdir (/opt/ntpublic/users/USERNAME) failed [2011/01/24 15:31:05, 1] smbd/service.c:close_cnum(1150) CLIENT_STATION (X.X.X.46) closed connection to service USERNAME As I said, prior to Friday's domain drop and rejoin, this worked properly. I think there just needs to be able to say ADDOMAIN+USERNAME=NTDOMAIN+USERNAME. -Ron On 01/24/2011 06:52 AM, Ron García-Vidal wrote: Understood and agreed, but since we're migrating to the AD in a piecemeal fashion must get this to work for users in both domains until the migration is complete. Any suggestions? -Ron On 01/23/2011 01:05 PM, t...@tms3.com wrote: I encountered a strange problem recently when changing the IP of my Samba server. We are in the process of moving from an ancient NT4 domain to an AD domain. We did a full migration of all the users, and up until Friday, our AD users were able to access the Samba server (which is still on the NT domain) with full permissions, etc. On Friday for reasons completely unrelated, we had to change the IP of the Samba server. When we brought it up on the new IP, it gave an error bringing up the Samba daemons. I was rushed and didn't pay to much attention to the error, but instead took the easy route of removing Samba from the NT domain, and re-joining. That got the Samba daemons up and running and we mostly had no problem, except now the AD users aren't allowed to access their home directories. Home directories in a trusted domain is probably a bad idea, and likely has some permission issues. It might be best to join the samba server to the AD domain instead. The AD and NT domains have a mutual trust relationship, and all SSIDs for the users on both domains are the same. As I said, prior to Friday, these users were able to access. I'm not entirely sure how Samba handles multiple domains, etc. and I have no idea how to even begin to trouble shoot this problem. Any suggestions would be welcome. -Ron -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 buildonUbuntu Server
With the help of John, and tms3, I was able to resolve the problem! Once I corrected my fstab for /share with acl and user_xattr options, and remounted the filesystem, that worked perfectly. Mind you I did have to delete the old /share/finance folder since it was created without the new attributes. Its working perfectly now. I am able to use the built-in windows file ACL tools to configure perms. BTW, Ubuntu 10.10 uses ext4 by default, but I still had to install attr and acl packages from the repos as they were not included in the default install. once I mounted the filesystem with users_xattr,acl in fstab, it worked perfectly. Thank you for the fast responses and all the help! On Mon, Jan 24, 2011 at 1:18 PM, t...@tms3.com wrote: But when I click apply, the jenfab\finance group dissappears from the list and the changes never save. What OS are you using? If Linux then make sure share file system is xattrs capable and enable it in /etc/fstab (I believe). If not you can use: posix:eadb = /usr/local/samba/private/eadb.tdb in global. This does NOT scale well. I have tried giving 777 perms on the actual directory on my ubuntu box to troubleshoot, but had same results. I have also verified that ACL package has been installed on my Ubuntu machine. What user:group do I need to have the actual directory on the ubuntu machine set to? Any other things I should try? On Mon, Jan 24, 2011 at 11:02 AM, Taylor, Jonn jo...@taylortelephone.comwrote: Go to advanced when changing ACL's. Jonn On 01/24/2011 09:48 AM, Lynn Dixon wrote: That was the first thing that I had tried. I created a share using smb.conf, then restarted samba. I can see the share, and navigate down into it from windows. If I create a folder and then rick click from a windows machine and do security, I can add groups, but when I try to save, the changes just disappear. What is the best way to manage ACL's on the share from a windows machine? Sorry for all the questions, this is my first venture into a Samba 4 AD environment. I have used Samba 2/3 i on a workgroup in the past and used different security schemes. On Mon, Jan 24, 2011 at 10:37 AM, Taylor, Jonn jo...@taylortelephone.com wrote: This is all you need. [test] path = /data/test read only = no Then use windows to set the acl's. Jonn http://wiki.samba.org/index.php/Samba4/HOWTO On 01/24/2011 09:24 AM, Lynn Dixon wrote: Thanks. I tried both paramaters in my smb.conf but I got errors when I tried both: jenfab@dc:~$ sudo /etc/init.d/samba4 restart * Stopping Samba 4 daemon samba [ OK ] * Starting Samba 4 daemon sambaUnknown parameter encountered: valid users Ignoring unknown parameter valid users [ OK ] jenfab@dc:~$ sudo nano /etc/samba/smb.conf jenfab@dc:~$ sudo /etc/init.d/samba4 restart * Stopping Samba 4 daemon samba [ OK ] * Starting Samba 4 daemon sambaUnknown parameter encountered: write list Ignoring unknown parameter write list Unknown parameter encountered: read list Ignoring unknown parameter read list [ OK ] On Mon, Jan 24, 2011 at 9:52 AM, t...@tms3.com wrote: I am not sure how to use Microsoft AD tools to create shares and then set those shares permissable to certain AD groups. For example, I need to create a share called Finance and only the people in Finance can read/write to it. I was hoping to use SWAT to help in creation and management of those shares. vi smb.conf (or your favorite text editor) add [finance] ...various parameter... valid users = @finance or write list = @finance read list = @finance I have been using AD tools to manage the domain and GPO's but I am not sure how to use them to create shares. You can see swat for samba4 here: https://github.com/rvelhote/GSoC-SWAT On Mon, Jan 24, 2011 at 5:03 AM, Daniel Müller muel...@tropenklinik.de wrote: I thought swat is no longer working!!Just use Microsoft ads tools and you are up and running. --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de Internet: http://www.tropenklinik.de --- -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto: samba-boun...@lists.samba.org] Im Auftrag von Lynn Dixon Gesendet: Sonntag, 23. Januar 2011 06:39 An: samba@lists.samba.org Betreff: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build on Ubuntu Server Hello all, I have setup a complete domain using Samba 4 on my Ubuntu server 32 bit machine. I am using the Alpha 13 build (it was actually in the Ubuntu Repos).
[Samba] [samba] Linux acls problem with windows 7 and vista
Hei all, Today I upgraded my samba which was a really old version 3.0.33 (I know) to 3.5. The upgraded seemed alright since I realize that I got a problem with the linux acls, I wanna say that I only have this problem with windows 7 and Vista, however windows xp works alright To try to be concreted I will try to expose the problem with an example, the point is that I have a directory called 'shared', which is set as: [shared]comment = Shared directorypath = /samba/sharedread only = noforce create mode = 0770force directory mode = 0770force group = rootlocking = nooplocks = noveto oplock files = /*.txt/ and the acl's I set are the following: getfacl shared/ # file: shared# owner: root# group: rootuser::rwxgroup::---group:company:r-xgroup:helpdesk:r-xgroup:sysadmin:r-xgroup:tech:r-xmask::rwxother::---default:user::rwxdefault:group::---default:group:company:rwxdefault:mask::rwxdefault:other::--- I have an user called user1 who has company as a primary group, and I have a user2 who has company as a primary group and sysadmin as secondary group. The fact is that the user2 is able to get on the shared directory and user1 not, but if I set the user1 on the tech group then this user1 is able to get on the directory. weird huh? So weird ! I spent a lot of time with it and I'm not able to find out what is going on :( I thought even that it could be a bug but I didn't find any case exactly like that. The only suspicious line I fond in may samba log are: [2011/01/24 16:27:11.098007, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (1030, 0) - sec_ctx_stack_ndx = 0[2011/01/24 16:27:11.098046, 3] smbd/error.c:80(error_packet_set) error packet at smbd/error.c(160) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED[2011/01/24 16:27:11.098107, 3] smbd/process.c:1485(process_smb) Transaction 39 of length 114 (0 toread)[2011/01/24 16:27:11.098124, 3] smbd/process.c:1294(switch_message) switch message SMBntcreateX (pid 10278) conn 0x2b841d0f2200[2011/01/24 16:27:11.098139, 4] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user I will appreciate so much any help !!! c u ! -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Trouble installing SWAT on a Samba 4 Alpha 13 build onUbuntu Server
I have one more quick question if i may. This one maybe a simple one :) Is there any way to set the sysvol and netlogon shares to be not browseable? i know they are very important, but it would be nice if they were hidden. I have tried browseable = no but I think samba 4 ignores that :) On Mon, Jan 24, 2011 at 7:30 PM, Taylor, Jonn jo...@taylortelephone.comwrote: Glad I could help. On 01/24/2011 05:38 PM, Lynn Dixon wrote: AWESOME!!! That fixed it my friend! Once I corrected my fstab for /share with acl and user_xattr options, and remounted the filesystem, that worked perfectly. Mind you I did have to delete the old /share/finance folder since it was created without the new attributes. Its working perfectly now. I am able to use the built-in windows file ACL tools to configure perms. Thanks again for all your help, I hope I will be able to return the favor in the future! Lynn Dixon On Mon, Jan 24, 2011 at 12:44 PM, Taylor, Jonn jo...@taylortelephone.comwrote: Make sure that you have these installed. apt-get install build-essential libattr1-dev libblkid-dev libgnutls-dev libreadline5-dev python-dev autoconf python-dnspython gdb pkg-config bind9utils libpam0g-dev NOTE about filesystem support To use the advanced features of Samba4 you need a filesystem that supports both the user and system xattr namespaces. If you run Linux with a 2.6 kernel and ext3 this means you need to include the option user_xattr in your /etc/fstab. For example: /dev/hda3 /home ext3 user_xattr 1 1 You also need to compile your kernel with the XATTR and SECURITY options for your filesystem. For ext3 that means you need: CONFIG_EXT3_FS_XATTR=y CONFIG_EXT3_FS_SECURITY=y If you are running a Linux 2.6 kernel with CONFIG_IKCONFIG_PROC defined you can check this with the following command: $ zgrep CONFIG_EXT3_FS /proc/config.gz If you don't have a filesystem with xattr support, then you can simulate it by using the option: posix:eadb = /usr/local/samba/eadb.tdb that will place all extra file attributes (NT ACLs, DOS EAs, streams etc), in that tdb. It is not efficient, and doesn't scale well, but at least it gives you a choice when you don't have a modern filesystem. [edithttp://wiki.samba.org/index.php?title=Samba4/HOWTOaction=editsection=18 ] Testing your filesystem To test your filesystem support, install the 'attr' package and run the following 4 commands as root: # touch test.txt # setfattr -n user.test -v test test.txt # setfattr -n security.test -v test2 test.txt # getfattr -d test.txt # getfattr -n security.test -d test.txt You should see output like this: # file: test.txt user.test=test # file: test.txt security.test=test2 If you get any Operation not supported errors then it means your kernel is not configured correctly, or your filesystem is not mounted with the right options. If you get any Operation not permitted errors then it probably means you didn't try the test as root. If you are using the posix:eadb option then you don't need to test your filesystem in this manner. Jonn On 01/24/2011 11:20 AM, Lynn Dixon wrote: Hmmm. Here is what I have for permissions and ACLs on the finance folder: root@dc:/share# ls -la total 28 drwxr-xr-x 4 root root 4096 2011-01-24 10:10 . drwxr-xr-x 22 root root 4096 2011-01-22 23:56 .. drwxrwxrwx 5 root users 4096 2011-01-24 11:53 finance drwx-- 2 root root 16384 2011-01-22 21:55 lost+found root@dc:/share# getfacl finance/ # file: finance/ # owner: root # group: users user::rwx group::rwx other::rwx root@dc:/share# And here is what the parent folder /share looks like: drwxr-xr-x 4 root root 4096 2011-01-24 10:10 share root@dc:/# getfacl share # file: share # owner: root # group: root user::rwx group::r-x other::r-x Just to be safe, here is what /etc/fstab looks like for the /share directory: # /share was on /dev/sda3 during installation UUID=a20cec9c-f3e0-4ab7-b9fe-15071e89b7d6 /share ext4 defaults0 2 do I need to mount it with an ACL argument? On Mon, Jan 24, 2011 at 12:12 PM, Taylor, Jonn jo...@taylortelephone.com wrote: Check you permissions on the folders. [Mon Jan 24 11:30:24 2011 EST, 0 ../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()] ../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' - wanted 0x010e but got 0xfff3 (missing 0x000c) [Mon Jan 24 11:30:24 2011 EST, 0 ../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()] ../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' - wanted 0x0004 but got 0xfef3 (missing 0x0004) [Mon Jan 24 11:30:24 2011 EST, 0 ../ntvfs/posix/pvfs_acl.c:567:pvfs_access_check_unix()] ../ntvfs/posix/pvfs_acl.c:567 denied access to '/share/finance/.' - wanted 0x0008 but got 0xfef3 (missing 0x0008) [Mon Jan 24 11:31:06 2011 EST, 0
[Samba] Shutting down WinXP Pro instance
Recently I set up a PDC (Fedora 12 - I'm using this for a specific reason) using Samba 3.4.9 and OpenLDAP 2.4.19; I named my domain ATHOME. I am trying to figure out how to shut down WinXP Pro remotely and I'm not having any luck. Up to this point I have tried the following: - I used ATHOME\root which is the admin acct I used to join XP to my domain. I added ATHOME\root to my workstation's Administrators group. - I've disabled simple file sharing on WinXP. - I've disabled the WinXP firewall. My results are the following: [root@server0 openldap]# net rpc shutdown -d -I 10.1.0.154 -U root [2011/01/24 19:50:34, 0] lib/debug.c:451(debug_parse_params) debug_parse_params: unrecognized debug class name or format [-I] Enter root's password: Shutdown of remote machine failed result was: WERR_ACCESS_DENIED [root@server0 openldap]# net rpc shutdown -d -I 10.1.0.154 -U Administrator [2011/01/24 19:50:42, 0] lib/debug.c:451(debug_parse_params) debug_parse_params: unrecognized debug class name or format [-I] Enter Administrator's password: Shutdown of remote machine failed result was: WERR_ACCESS_DENIED The 1st attempt was using ATHOME\root; the 2nd attempt was using the workstation's local Administrator account. I've tried googling for WERR_ACCESS_DENIED but I can't find any listings that resemble this issue. Could someone pls clue me in? Thanks for the help, - Joe If you type Google into Google, you can break the Internet. -- Jen Barber -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Shutting down WinXP Pro instance
Hi On 25 January 2011 02:54, Joe Tseng joe_ts...@hotmail.com wrote: Recently I set up a PDC (Fedora 12 - I'm using this for a specific reason) using Samba 3.4.9 and OpenLDAP 2.4.19; I named my domain ATHOME. I am trying to figure out how to shut down WinXP Pro remotely and I'm not having any luck. Up to this point I have tried the following: - I used ATHOME\root which is the admin acct I used to join XP to my domain. I added ATHOME\root to my workstation's Administrators group. - I've disabled simple file sharing on WinXP. - I've disabled the WinXP firewall. My results are the following: [root@server0 openldap]# net rpc shutdown -d -I 10.1.0.154 -U root [2011/01/24 19:50:34, 0] lib/debug.c:451(debug_parse_params) debug_parse_params: unrecognized debug class name or format [-I] You are using incorrect syntax for the debug option. Try net rpc shutdown -d 10 -I 10.1.0.154 -U root and maybe that will show you what the problem is. (i.e. you need a number after -d.) -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Shutting down WinXP Pro instance
--- Original message --- Subject: Re: [Samba] Shutting down WinXP Pro instance From: Michael Wood esiot...@gmail.com To: Joe Tseng joe_ts...@hotmail.com Cc: samba@lists.samba.org Date: Monday, 24/01/2011 10:51 PM Hi On 25 January 2011 02:54, Joe Tseng joe_ts...@hotmail.com wrote: Recently I set up a PDC (Fedora 12 - I'm using this for a specific reason) using Samba 3.4.9 and OpenLDAP 2.4.19; I named my domain ATHOME. I am trying to figure out how to shut down WinXP Pro remotely and I'm not having any luck. Up to this point I have tried the following: - I used ATHOME\root which is the admin acct I used to join XP to my domain. I added ATHOME\root to my workstation's Administrators group. - I've disabled simple file sharing on WinXP. - I've disabled the WinXP firewall. My results are the following: [root@server0 openldap]# net rpc shutdown -d -I 10.1.0.154 -U root Hmmm. Do you have good NetBIOS browsing or WINS? I've noticed that these calls by IP address have a tendency to fail, but by NetBIOS name succeed. [2011/01/24 19:50:34, 0] lib/debug.c:451(debug_parse_params) debug_parse_params: unrecognized debug class name or format [-I] You are using incorrect syntax for the debug option. Try net rpc shutdown -d 10 -I 10.1.0.154 -U root and maybe that will show you what the problem is. (i.e. you need a number after -d.) -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Shutting down WinXP Pro instance
Maybe your local policies security disallows that feature. You can proof that with gpedit.msc local settings--add user rights-- force shutdown from remote --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de Internet: www.tropenklinik.de --- -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von t...@tms3.com Gesendet: Dienstag, 25. Januar 2011 07:54 An: Michael Wood Cc: samba@lists.samba.org; Joe Tseng Betreff: Re: [Samba] Shutting down WinXP Pro instance --- Original message --- Subject: Re: [Samba] Shutting down WinXP Pro instance From: Michael Wood esiot...@gmail.com To: Joe Tseng joe_ts...@hotmail.com Cc: samba@lists.samba.org Date: Monday, 24/01/2011 10:51 PM Hi On 25 January 2011 02:54, Joe Tseng joe_ts...@hotmail.com wrote: Recently I set up a PDC (Fedora 12 - I'm using this for a specific reason) using Samba 3.4.9 and OpenLDAP 2.4.19; I named my domain ATHOME. I am trying to figure out how to shut down WinXP Pro remotely and I'm not having any luck. Up to this point I have tried the following: - I used ATHOME\root which is the admin acct I used to join XP to my domain. I added ATHOME\root to my workstation's Administrators group. - I've disabled simple file sharing on WinXP. - I've disabled the WinXP firewall. My results are the following: [root@server0 openldap]# net rpc shutdown -d -I 10.1.0.154 -U root Hmmm. Do you have good NetBIOS browsing or WINS? I've noticed that these calls by IP address have a tendency to fail, but by NetBIOS name succeed. [2011/01/24 19:50:34, 0] lib/debug.c:451(debug_parse_params) debug_parse_params: unrecognized debug class name or format [-I] You are using incorrect syntax for the debug option. Try net rpc shutdown -d 10 -I 10.1.0.154 -U root and maybe that will show you what the problem is. (i.e. you need a number after -d.) -- Michael Wood esiot...@gmail.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
s3: Fix an infinite loop
Hi Volker, I think this change is wrong because, selret is a pointer and we already have this check (directly above): if (*selrtn = 0) { /* * No fd ready */ return false; } I've done some more changes to implement the fd fairness in lib/events.c instead of smbd/process.c. Please have a look at: http://gitweb.samba.org/?p=metze/samba/wip.git;a=shortlog;h=refs/heads/master3-tevent2 metze signature.asc Description: OpenPGP digital signature
Re: s3: Fix an infinite loop
On Mon, Jan 24, 2011 at 09:14:23AM +0100, Stefan (metze) Metzmacher wrote: I think this change is wrong because, selret is a pointer and we already have this check (directly above): Gna. I have first done this in 3.5, where selrtn is not a pointer. I have then just taken the same patch and applied it to master, wrongly assuming that this is the same piece of code. The patch applied cleanly, so I did not check. Apologies for this false assumption. By the way, where does 3.5 handle the selrtn==-1 case? I have just pushed the revert to autobuild. With best regards, Volker Lendecke -- SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen phone: +49-551-37-0, fax: +49-551-37-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
Re: s3: Fix an infinite loop
Hi Volker, On Mon, Jan 24, 2011 at 09:14:23AM +0100, Stefan (metze) Metzmacher wrote: I think this change is wrong because, selret is a pointer and we already have this check (directly above): Gna. I have first done this in 3.5, where selrtn is not a pointer. I have then just taken the same patch and applied it to master, wrongly assuming that this is the same piece of code. The patch applied cleanly, so I did not check. Apologies for this false assumption. No problem, I assumed something like that:-) By the way, where does 3.5 handle the selrtn==-1 case? I think we need something like this there: http://gitweb.samba.org/?p=metze/samba/wip.git;a=commitdiff;h=22f0e9bf00fb8a3dc02b8c4e13d05b9f7a9adb6b http://gitweb.samba.org/?p=metze/samba/wip.git;a=commitdiff;h=d935696bc4559fe66f3420b8bbe0d9a595b41116 I have just pushed the revert to autobuild. Does my other changes make sense for you? metze signature.asc Description: OpenPGP digital signature
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 509dd57 Revert s3: Fix an infinite loop from 61f7d7c s3: Fix an infinite loop http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 509dd57d68ba45cd5189c9bafe7f65ecb198b6db Author: Volker Lendecke v...@samba.org Date: Mon Jan 24 09:25:01 2011 +0100 Revert s3: Fix an infinite loop This reverts commit 61f7d7cdeccb1f733590e8bdb8229b32363a815e. Autobuild-User: Volker Lendecke vlen...@samba.org Autobuild-Date: Mon Jan 24 10:10:43 CET 2011 on sn-devel-104 --- Summary of changes: source3/lib/events.c |4 1 files changed, 0 insertions(+), 4 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/lib/events.c b/source3/lib/events.c index 802a2e5..d987072 100644 --- a/source3/lib/events.c +++ b/source3/lib/events.c @@ -120,10 +120,6 @@ bool run_events(struct tevent_context *ev, return false; } - if (selrtn = 0) { - return false; - } - for (fde = ev-fd_events; fde; fde = fde-next) { uint16 flags = 0; -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-6-test updated
The branch, v3-6-test has been updated via 8645941 Revert s3: Fix an infinite loop from 0a84c30 s3: Fix an infinite loop http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test - Log - commit 8645941125a50bd9cc77676f481b44e52362ac75 Author: Volker Lendecke v...@samba.org Date: Mon Jan 24 09:25:01 2011 +0100 Revert s3: Fix an infinite loop This reverts commit 61f7d7cdeccb1f733590e8bdb8229b32363a815e. Autobuild-User: Volker Lendecke vlen...@samba.org Autobuild-Date: Mon Jan 24 10:10:43 CET 2011 on sn-devel-104 --- Summary of changes: source3/lib/events.c |4 1 files changed, 0 insertions(+), 4 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/lib/events.c b/source3/lib/events.c index 802a2e5..d987072 100644 --- a/source3/lib/events.c +++ b/source3/lib/events.c @@ -120,10 +120,6 @@ bool run_events(struct tevent_context *ev, return false; } - if (selrtn = 0) { - return false; - } - for (fde = ev-fd_events; fde; fde = fde-next) { uint16 flags = 0; -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via cea36ae s3-winbind: fix winbindd_dual_pam_auth_samlogon() for NT4 domains. from 509dd57 Revert s3: Fix an infinite loop http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit cea36aeacf8778493463f31e6afc3f58384639e2 Author: Günther Deschner g...@samba.org Date: Mon Jan 24 11:48:36 2011 +0100 s3-winbind: fix winbindd_dual_pam_auth_samlogon() for NT4 domains. After failing the netr_LogonSamLogonEx, we failed to retry with netr_LogonSamLogon. Guenther Autobuild-User: Günther Deschner g...@samba.org Autobuild-Date: Mon Jan 24 12:35:42 CET 2011 on sn-devel-104 --- Summary of changes: source3/winbindd/winbindd_pam.c |1 + 1 files changed, 1 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/winbindd/winbindd_pam.c b/source3/winbindd/winbindd_pam.c index cbdd8f3..0c0250e 100644 --- a/source3/winbindd/winbindd_pam.c +++ b/source3/winbindd/winbindd_pam.c @@ -1263,6 +1263,7 @@ static NTSTATUS winbindd_dual_pam_auth_samlogon(struct winbindd_domain *domain, DEBUG(3, (Got a DC that can not do NetSamLogonEx, retrying with NetSamLogon\n)); domain-can_do_samlogon_ex = false; + retry = true; continue; } -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-6-test updated
The branch, v3-6-test has been updated via b88ca13 s3-winbind: fix winbindd_dual_pam_auth_samlogon() for NT4 domains. from 8645941 Revert s3: Fix an infinite loop http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test - Log - commit b88ca1307b0ddf9181eb4fc85dd1d3fd6d766ede Author: Günther Deschner g...@samba.org Date: Mon Jan 24 11:48:36 2011 +0100 s3-winbind: fix winbindd_dual_pam_auth_samlogon() for NT4 domains. After failing the netr_LogonSamLogonEx, we failed to retry with netr_LogonSamLogon. Guenther Autobuild-User: Günther Deschner g...@samba.org Autobuild-Date: Mon Jan 24 12:35:42 CET 2011 on sn-devel-104 (cherry picked from commit cea36aeacf8778493463f31e6afc3f58384639e2) --- Summary of changes: source3/winbindd/winbindd_pam.c |1 + 1 files changed, 1 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/winbindd/winbindd_pam.c b/source3/winbindd/winbindd_pam.c index cbdd8f3..0c0250e 100644 --- a/source3/winbindd/winbindd_pam.c +++ b/source3/winbindd/winbindd_pam.c @@ -1263,6 +1263,7 @@ static NTSTATUS winbindd_dual_pam_auth_samlogon(struct winbindd_domain *domain, DEBUG(3, (Got a DC that can not do NetSamLogonEx, retrying with NetSamLogon\n)); domain-can_do_samlogon_ex = false; + retry = true; continue; } -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 0dc1eee libcli/ldap: use lib/ldb_compat.h for the s3 build from cea36ae s3-winbind: fix winbindd_dual_pam_auth_samlogon() for NT4 domains. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 0dc1eee0b8174d591ea02de40bb564088a25fd97 Author: Stefan Metzmacher me...@samba.org Date: Mon Jan 24 13:29:14 2011 +0100 libcli/ldap: use lib/ldb_compat.h for the s3 build metze Autobuild-User: Stefan Metzmacher me...@samba.org Autobuild-Date: Mon Jan 24 14:55:50 CET 2011 on sn-devel-104 --- Summary of changes: libcli/ldap/ldap_message.h |4 source3/lib/ldb_compat.h | 13 + 2 files changed, 17 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/libcli/ldap/ldap_message.h b/libcli/ldap/ldap_message.h index c500184..3354fad 100644 --- a/libcli/ldap/ldap_message.h +++ b/libcli/ldap/ldap_message.h @@ -22,7 +22,11 @@ #define _LIBCLI_LDAP_MESSAGE_H_ #include ../libcli/ldap/ldap_errors.h +#if _SAMBA_BUILD_ == 3 +#include lib/ldb_compat.h +#else #include lib/ldb/include/ldb.h +#endif enum ldap_request_tag { LDAP_TAG_BindRequest = 0, diff --git a/source3/lib/ldb_compat.h b/source3/lib/ldb_compat.h index fb8f2f0..f05104a 100644 --- a/source3/lib/ldb_compat.h +++ b/source3/lib/ldb_compat.h @@ -71,4 +71,17 @@ struct ldb_parse_tree { } u; }; +struct ldb_message_element { + unsigned int flags; + const char *name; + unsigned int num_values; + struct ldb_val *values; +}; + +struct ldb_control { + const char *oid; + int critical; + void *data; +}; + #endif -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-6-test updated
The branch, v3-6-test has been updated via f670bb4 libcli/ldap: use lib/ldb_compat.h for the s3 build from b88ca13 s3-winbind: fix winbindd_dual_pam_auth_samlogon() for NT4 domains. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test - Log - commit f670bb40a3d978fbbbf0e41808efc3f67ce9177b Author: Stefan Metzmacher me...@samba.org Date: Mon Jan 24 13:29:14 2011 +0100 libcli/ldap: use lib/ldb_compat.h for the s3 build metze Autobuild-User: Stefan Metzmacher me...@samba.org Autobuild-Date: Mon Jan 24 14:55:50 CET 2011 on sn-devel-104 (cherry picked from commit 0dc1eee0b8174d591ea02de40bb564088a25fd97) --- Summary of changes: libcli/ldap/ldap_message.h |4 source3/lib/ldb_compat.h | 13 + 2 files changed, 17 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/libcli/ldap/ldap_message.h b/libcli/ldap/ldap_message.h index c500184..3354fad 100644 --- a/libcli/ldap/ldap_message.h +++ b/libcli/ldap/ldap_message.h @@ -22,7 +22,11 @@ #define _LIBCLI_LDAP_MESSAGE_H_ #include ../libcli/ldap/ldap_errors.h +#if _SAMBA_BUILD_ == 3 +#include lib/ldb_compat.h +#else #include lib/ldb/include/ldb.h +#endif enum ldap_request_tag { LDAP_TAG_BindRequest = 0, diff --git a/source3/lib/ldb_compat.h b/source3/lib/ldb_compat.h index fb8f2f0..f05104a 100644 --- a/source3/lib/ldb_compat.h +++ b/source3/lib/ldb_compat.h @@ -71,4 +71,17 @@ struct ldb_parse_tree { } u; }; +struct ldb_message_element { + unsigned int flags; + const char *name; + unsigned int num_values; + struct ldb_val *values; +}; + +struct ldb_control { + const char *oid; + int critical; + void *data; +}; + #endif -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via ef0a390 s3-waf: fix lib/addns include path. via c675b1c s3-waf: no need anymore to include source4 globally. from 0dc1eee libcli/ldap: use lib/ldb_compat.h for the s3 build http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit ef0a3903f007cee5a564699fc9750d6e8a472d7d Author: Günther Deschner g...@samba.org Date: Mon Jan 24 15:27:52 2011 +0100 s3-waf: fix lib/addns include path. Guenther Autobuild-User: Günther Deschner g...@samba.org Autobuild-Date: Mon Jan 24 16:15:58 CET 2011 on sn-devel-104 commit c675b1c827f792e19cbacd91d2356e0df2ee87e3 Author: Günther Deschner g...@samba.org Date: Mon Jan 24 15:26:11 2011 +0100 s3-waf: no need anymore to include source4 globally. Guenther --- Summary of changes: source3/wscript |4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/wscript b/source3/wscript index fc1cc1d..e286e8f 100644 --- a/source3/wscript +++ b/source3/wscript @@ -71,8 +71,8 @@ def configure(conf): conf.env['build_swat'] = True conf.ADD_EXTRA_INCLUDES('''#source3 #source3/include #lib/replace #lib/talloc - #lib/tevent #source3/libaddns #source3/librpc - #source3/lib #lib/tdb/include #lib/popt #source4''') + #lib/tevent #lib/addns #source3/librpc + #source3/lib #lib/tdb/include #lib/popt''') conf.RECURSE('../lib/replace') conf.RECURSE('build') -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-6-test updated
The branch, v3-6-test has been updated via e08e530 s3-waf: fix lib/addns include path. via a4f9ad8 s3-waf: no need anymore to include source4 globally. from f670bb4 libcli/ldap: use lib/ldb_compat.h for the s3 build http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test - Log - commit e08e530974c8f1042f27fba5b47921cc1c6c5e13 Author: Günther Deschner g...@samba.org Date: Mon Jan 24 15:27:52 2011 +0100 s3-waf: fix lib/addns include path. Guenther Autobuild-User: Günther Deschner g...@samba.org Autobuild-Date: Mon Jan 24 16:15:58 CET 2011 on sn-devel-104 (cherry picked from commit ef0a3903f007cee5a564699fc9750d6e8a472d7d) commit a4f9ad8f2f8790d13421affd9952f891e5632465 Author: Günther Deschner g...@samba.org Date: Mon Jan 24 15:26:11 2011 +0100 s3-waf: no need anymore to include source4 globally. Guenther (cherry picked from commit c675b1c827f792e19cbacd91d2356e0df2ee87e3) --- Summary of changes: source3/wscript |4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/wscript b/source3/wscript index fc1cc1d..e286e8f 100644 --- a/source3/wscript +++ b/source3/wscript @@ -71,8 +71,8 @@ def configure(conf): conf.env['build_swat'] = True conf.ADD_EXTRA_INCLUDES('''#source3 #source3/include #lib/replace #lib/talloc - #lib/tevent #source3/libaddns #source3/librpc - #source3/lib #lib/tdb/include #lib/popt #source4''') + #lib/tevent #lib/addns #source3/librpc + #source3/lib #lib/tdb/include #lib/popt''') conf.RECURSE('../lib/replace') conf.RECURSE('build') -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-6-test updated
The branch, v3-6-test has been updated via f08f449 drsuapi.idl: add some more DRSUAPI_ATTID_* values via 7d0b03e lib/replace/testsuite.c - fix test output (cherry picked from commit da78e24ca201dcdac8a498a5d0da8c30154d4d9a) via 9d2567e tdbrestore: Update to GPLv3+, remove old FSF address. (cherry picked from commit 24d5a7202ab521b92eb07c93647ae2d381e181a5) via d132658 s4-dns: disable segfault handling in dlz_bind9 via 5cb58b7 lib/util/time.c - make the strftime output locale independant (%c is not) via 5617a71 Revert lib/util:tests/time.c - test_timestring - fix it on Solaris via fa98c8e lib/util:tests/time.c - test_timestring - fix it on Solaris from e08e530 s3-waf: fix lib/addns include path. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test - Log - commit f08f449cc074e32d54da62521c2598d5ac9b3eb5 Author: Stefan Metzmacher me...@samba.org Date: Wed Jan 12 15:48:30 2011 +0100 drsuapi.idl: add some more DRSUAPI_ATTID_* values These will be use for net rpc vampire passwd in source3. metze Autobuild-User: Stefan Metzmacher me...@samba.org Autobuild-Date: Wed Jan 12 19:51:53 CET 2011 on sn-devel-104 (cherry picked from commit c39e80094b91ac7055faee61a8137d47e9e76c43) commit 7d0b03e676fbb977c3e83bb077f19551be796587 Author: Matthias Dieter Wallnöfer m...@samba.org Date: Thu Dec 23 12:42:37 2010 +0100 lib/replace/testsuite.c - fix test output (cherry picked from commit da78e24ca201dcdac8a498a5d0da8c30154d4d9a) Signed-off-by: Stefan Metzmacher me...@samba.org commit 9d2567e7a0c602afdcf8e2146bcaee509dec902a Author: Jelmer Vernooij jel...@samba.org Date: Wed Jan 5 13:52:34 2011 +0100 tdbrestore: Update to GPLv3+, remove old FSF address. (cherry picked from commit 24d5a7202ab521b92eb07c93647ae2d381e181a5) Signed-off-by: Stefan Metzmacher me...@samba.org commit d132658fbe61a2904dd04e915adc7c5d0f686ea2 Author: Stefan Metzmacher me...@samba.org Date: Sat Jan 15 02:24:51 2011 +0100 s4-dns: disable segfault handling in dlz_bind9 we don't want bind9 calling the Samba segv handler (cherry picked from commit da5c328b4b4a793053a8b1c942ceda56da01625c) Only the lib/util part... Signed-off-by: Stefan Metzmacher me...@samba.org commit 5cb58b7d29ee142df864b0d844adff865ba04454 Author: Matthias Dieter Wallnöfer m...@samba.org Date: Wed Dec 22 09:53:27 2010 +0100 lib/util/time.c - make the strftime output locale independant (%c is not) So that it also works on Solaris. (cherry picked from commit 07bcf6197d9fbdc038513ae3db7f83a9bb8a6cd9) Signed-off-by: Stefan Metzmacher me...@samba.org commit 5617a71e2ed28eb129c8854aa3ae18c98c409c59 Author: Matthias Dieter Wallnöfer m...@samba.org Date: Mon Dec 6 11:28:22 2010 +0100 Revert lib/util:tests/time.c - test_timestring - fix it on Solaris This reverts commit 654e0102ddb0acaaf45fb55c15818722235fcc9f. This should better be handled by the replace library. Autobuild-User: Matthias Dieter Wallnöfer m...@samba.org Autobuild-Date: Mon Dec 6 12:17:31 CET 2010 on sn-devel-104 (cherry picked from commit bd3e5804a41fdfc8a43bebd95c53e4f0ff1d7a10) commit fa98c8ec3fa805790491d2fed76c9fa79ed289d1 Author: Matthias Dieter Wallnöfer m...@samba.org Date: Sun Dec 5 22:20:06 2010 +0100 lib/util:tests/time.c - test_timestring - fix it on Solaris Solaris returns Thu Jan 01 and not Thu Jan 1 - therefore proof for both. Autobuild-User: Matthias Dieter Wallnöfer m...@samba.org Autobuild-Date: Sun Dec 5 23:09:13 CET 2010 on sn-devel-104 (cherry picked from commit 654e0102ddb0acaaf45fb55c15818722235fcc9f) --- Summary of changes: lib/replace/test/testsuite.c |2 +- lib/tdb/tools/tdbrestore.c |5 ++--- lib/util/fault.c | 14 -- lib/util/tests/time.c|3 +-- lib/util/time.c |9 - lib/util/util.h |1 + librpc/idl/drsuapi.idl |5 + 7 files changed, 26 insertions(+), 13 deletions(-) Changeset truncated at 500 lines: diff --git a/lib/replace/test/testsuite.c b/lib/replace/test/testsuite.c index 1f242eb..0e455f2 100644 --- a/lib/replace/test/testsuite.c +++ b/lib/replace/test/testsuite.c @@ -771,7 +771,7 @@ static int test_FUNCTION(void) { printf(test: FUNCTION\n); if (strcmp(__FUNCTION__, test_FUNCTION) != 0) { - printf(failure: FAILURE [\nFAILURE invalid\n]\n); + printf(failure: FUNCTION [\nFUNCTION invalid\n]\n); return false; } printf(success: FUNCTION\n); diff --git a/lib/tdb/tools/tdbrestore.c b/lib/tdb/tools/tdbrestore.c index 601cd5e..95ee360 100644 --- a/lib/tdb/tools/tdbrestore.c +++
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 39ea30d s3-build: remove source4 include path for autoconf build as well. via 9943761 s3-rpcclient: allow to define validation level for samlogon. from ef0a390 s3-waf: fix lib/addns include path. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 39ea30de0fb9ebf64b7c7ab8f6731fcf98ed294b Author: Günther Deschner g...@samba.org Date: Mon Jan 24 16:55:05 2011 +0100 s3-build: remove source4 include path for autoconf build as well. Guenther Autobuild-User: Günther Deschner g...@samba.org Autobuild-Date: Mon Jan 24 17:40:56 CET 2011 on sn-devel-104 commit 99437614fa8028d60356ee79611d94051ec756ec Author: Günther Deschner g...@samba.org Date: Fri Jan 21 16:58:32 2011 +0100 s3-rpcclient: allow to define validation level for samlogon. Guenther --- Summary of changes: source3/Makefile.in |1 - source3/rpc_client/cli_netlogon.c |2 +- source3/rpc_client/cli_netlogon.h |1 + source3/rpcclient/cmd_netlogon.c |6 +++--- 4 files changed, 5 insertions(+), 5 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/Makefile.in b/source3/Makefile.in index d92224e..0ce97b8 100644 --- a/source3/Makefile.in +++ b/source3/Makefile.in @@ -188,7 +188,6 @@ FLAGS = -I. \ $(ISA) \ -I$(srcdir)/lib \ -I.. \ - -I../source4 \ -D_SAMBA_BUILD_=3 PATH_FLAGS = -DSMB_PASSWD_FILE=\$(SMB_PASSWD_FILE)\ \ diff --git a/source3/rpc_client/cli_netlogon.c b/source3/rpc_client/cli_netlogon.c index 3046d27..914bfd3 100644 --- a/source3/rpc_client/cli_netlogon.c +++ b/source3/rpc_client/cli_netlogon.c @@ -159,6 +159,7 @@ NTSTATUS rpccli_netlogon_sam_logon(struct rpc_pipe_client *cli, const char *username, const char *password, const char *workstation, + uint16_t validation_level, int logon_type) { NTSTATUS result = NT_STATUS_UNSUCCESSFUL; @@ -168,7 +169,6 @@ NTSTATUS rpccli_netlogon_sam_logon(struct rpc_pipe_client *cli, union netr_LogonLevel *logon; union netr_Validation validation; uint8_t authoritative; - int validation_level = 3; fstring clnt_name_slash; struct dcerpc_binding_handle *b = cli-binding_handle; diff --git a/source3/rpc_client/cli_netlogon.h b/source3/rpc_client/cli_netlogon.h index 107c222..bb38b75 100644 --- a/source3/rpc_client/cli_netlogon.h +++ b/source3/rpc_client/cli_netlogon.h @@ -15,6 +15,7 @@ NTSTATUS rpccli_netlogon_sam_logon(struct rpc_pipe_client *cli, const char *username, const char *password, const char *workstation, + uint16_t validation_level, int logon_type); NTSTATUS rpccli_netlogon_sam_network_logon(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx, diff --git a/source3/rpcclient/cmd_netlogon.c b/source3/rpcclient/cmd_netlogon.c index 1942352..c909efe 100644 --- a/source3/rpcclient/cmd_netlogon.c +++ b/source3/rpcclient/cmd_netlogon.c @@ -718,7 +718,7 @@ static NTSTATUS cmd_netlogon_sam_logon(struct rpc_pipe_client *cli, NTSTATUS result = NT_STATUS_UNSUCCESSFUL; int logon_type = NetlogonNetworkInformation; const char *username, *password; - int auth_level = 2; + uint16_t validation_level = 3; uint32 logon_param = 0; const char *workstation = NULL; @@ -740,14 +740,14 @@ static NTSTATUS cmd_netlogon_sam_logon(struct rpc_pipe_client *cli, sscanf(argv[4], %i, logon_type); if (argc = 6) - sscanf(argv[5], %i, auth_level); + validation_level = atoi(argv[5]); if (argc == 7) sscanf(argv[6], %x, logon_param); /* Perform the sam logon */ - result = rpccli_netlogon_sam_logon(cli, mem_ctx, logon_param, lp_workgroup(), username, password, workstation, logon_type); + result = rpccli_netlogon_sam_logon(cli, mem_ctx, logon_param, lp_workgroup(), username, password, workstation, validation_level, logon_type); if (!NT_STATUS_IS_OK(result)) goto done; -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-6-test updated
The branch, v3-6-test has been updated via d6ab521 s3-build: remove source4 include path for autoconf build as well. via bb21a5d s3-rpcclient: allow to define validation level for samlogon. from f08f449 drsuapi.idl: add some more DRSUAPI_ATTID_* values http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test - Log - commit d6ab52177397fab496edd570c64c5673eda1ea48 Author: Günther Deschner g...@samba.org Date: Mon Jan 24 16:55:05 2011 +0100 s3-build: remove source4 include path for autoconf build as well. Guenther Autobuild-User: Günther Deschner g...@samba.org Autobuild-Date: Mon Jan 24 17:40:56 CET 2011 on sn-devel-104 (cherry picked from commit 39ea30de0fb9ebf64b7c7ab8f6731fcf98ed294b) commit bb21a5def93877ff6f524998e7e806222c1163e8 Author: Günther Deschner g...@samba.org Date: Fri Jan 21 16:58:32 2011 +0100 s3-rpcclient: allow to define validation level for samlogon. Guenther (cherry picked from commit 99437614fa8028d60356ee79611d94051ec756ec) --- Summary of changes: source3/Makefile.in |1 - source3/rpc_client/cli_netlogon.c |2 +- source3/rpc_client/cli_netlogon.h |1 + source3/rpcclient/cmd_netlogon.c |6 +++--- 4 files changed, 5 insertions(+), 5 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/Makefile.in b/source3/Makefile.in index d92224e..0ce97b8 100644 --- a/source3/Makefile.in +++ b/source3/Makefile.in @@ -188,7 +188,6 @@ FLAGS = -I. \ $(ISA) \ -I$(srcdir)/lib \ -I.. \ - -I../source4 \ -D_SAMBA_BUILD_=3 PATH_FLAGS = -DSMB_PASSWD_FILE=\$(SMB_PASSWD_FILE)\ \ diff --git a/source3/rpc_client/cli_netlogon.c b/source3/rpc_client/cli_netlogon.c index 3046d27..914bfd3 100644 --- a/source3/rpc_client/cli_netlogon.c +++ b/source3/rpc_client/cli_netlogon.c @@ -159,6 +159,7 @@ NTSTATUS rpccli_netlogon_sam_logon(struct rpc_pipe_client *cli, const char *username, const char *password, const char *workstation, + uint16_t validation_level, int logon_type) { NTSTATUS result = NT_STATUS_UNSUCCESSFUL; @@ -168,7 +169,6 @@ NTSTATUS rpccli_netlogon_sam_logon(struct rpc_pipe_client *cli, union netr_LogonLevel *logon; union netr_Validation validation; uint8_t authoritative; - int validation_level = 3; fstring clnt_name_slash; struct dcerpc_binding_handle *b = cli-binding_handle; diff --git a/source3/rpc_client/cli_netlogon.h b/source3/rpc_client/cli_netlogon.h index 107c222..bb38b75 100644 --- a/source3/rpc_client/cli_netlogon.h +++ b/source3/rpc_client/cli_netlogon.h @@ -15,6 +15,7 @@ NTSTATUS rpccli_netlogon_sam_logon(struct rpc_pipe_client *cli, const char *username, const char *password, const char *workstation, + uint16_t validation_level, int logon_type); NTSTATUS rpccli_netlogon_sam_network_logon(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx, diff --git a/source3/rpcclient/cmd_netlogon.c b/source3/rpcclient/cmd_netlogon.c index 1942352..c909efe 100644 --- a/source3/rpcclient/cmd_netlogon.c +++ b/source3/rpcclient/cmd_netlogon.c @@ -718,7 +718,7 @@ static NTSTATUS cmd_netlogon_sam_logon(struct rpc_pipe_client *cli, NTSTATUS result = NT_STATUS_UNSUCCESSFUL; int logon_type = NetlogonNetworkInformation; const char *username, *password; - int auth_level = 2; + uint16_t validation_level = 3; uint32 logon_param = 0; const char *workstation = NULL; @@ -740,14 +740,14 @@ static NTSTATUS cmd_netlogon_sam_logon(struct rpc_pipe_client *cli, sscanf(argv[4], %i, logon_type); if (argc = 6) - sscanf(argv[5], %i, auth_level); + validation_level = atoi(argv[5]); if (argc == 7) sscanf(argv[6], %x, logon_param); /* Perform the sam logon */ - result = rpccli_netlogon_sam_logon(cli, mem_ctx, logon_param, lp_workgroup(), username, password, workstation, logon_type); + result = rpccli_netlogon_sam_logon(cli, mem_ctx, logon_param, lp_workgroup(), username, password, workstation, validation_level, logon_type); if (!NT_STATUS_IS_OK(result)) goto done; -- Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 5b83923 s4-waf: Skip header-not-found cache if a library is specified, as it may provide additional C flags. via 57d1dce s4-waf: Only show minversion when there was a minimum version specified. via 4078b64 Show text output messages when interfacing with bzr. via b763a27 remove unnecessary use of pass. from 39ea30d s3-build: remove source4 include path for autoconf build as well. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 5b839230e1475550f13ed642187913fd0c026445 Author: Jelmer Vernooij jel...@samba.org Date: Mon Jan 24 18:09:27 2011 -0800 s4-waf: Skip header-not-found cache if a library is specified, as it may provide additional C flags. Tridge, please check. Autobuild-User: Jelmer Vernooij jel...@samba.org Autobuild-Date: Tue Jan 25 03:59:32 CET 2011 on sn-devel-104 commit 57d1dcef7ffeab086cf125431f5e03985ba0d0ce Author: Jelmer Vernooij jel...@samba.org Date: Mon Jan 24 17:15:49 2011 -0800 s4-waf: Only show minversion when there was a minimum version specified. commit 4078b649f19adaba3218d8241455138981d0f3a2 Author: Jelmer Vernooij jel...@samba.org Date: Mon Jan 24 17:14:50 2011 -0800 Show text output messages when interfacing with bzr. commit b763a2735ee761ba614ca3868cd962847f9adda6 Author: Jelmer Vernooij jel...@samba.org Date: Mon Jan 3 06:54:07 2011 +0100 remove unnecessary use of pass. --- Summary of changes: buildtools/wafsamba/samba_autoconf.py |2 +- buildtools/wafsamba/samba_bundled.py |6 +- buildtools/wafsamba/samba_version.py |7 ++- 3 files changed, 12 insertions(+), 3 deletions(-) Changeset truncated at 500 lines: diff --git a/buildtools/wafsamba/samba_autoconf.py b/buildtools/wafsamba/samba_autoconf.py index 91d8a56..ec0ed16 100644 --- a/buildtools/wafsamba/samba_autoconf.py +++ b/buildtools/wafsamba/samba_autoconf.py @@ -80,7 +80,7 @@ def nolink(self): def CHECK_HEADER(conf, h, add_headers=False, lib=None): '''check for a header''' -if h in missing_headers: +if h in missing_headers and lib is None: return False d = h.upper().replace('/', '_') d = d.replace('.', '_') diff --git a/buildtools/wafsamba/samba_bundled.py b/buildtools/wafsamba/samba_bundled.py index 2e3e130..39edad0 100644 --- a/buildtools/wafsamba/samba_bundled.py +++ b/buildtools/wafsamba/samba_bundled.py @@ -122,10 +122,14 @@ def CHECK_BUNDLED_SYSTEM(conf, libname, minversion='0.0.0', minversion = minimum_library_version(conf, libname, minversion) +msg = 'Checking for system %s' % libname +if minversion != '0.0.0': +msg += ' = %s' % minversion + # try pkgconfig first if (conf.check_cfg(package=libname, args='%s = %s --cflags --libs' % (libname, minversion), - msg='Checking for system %s = %s' % (libname, minversion)) and + msg=msg) and check_functions_headers()): conf.SET_TARGET_TYPE(libname, 'SYSLIB') conf.env[found] = True diff --git a/buildtools/wafsamba/samba_version.py b/buildtools/wafsamba/samba_version.py index 8d1bd32..5069ea3 100644 --- a/buildtools/wafsamba/samba_version.py +++ b/buildtools/wafsamba/samba_version.py @@ -1,13 +1,18 @@ import os import Utils import samba_utils +import sys def bzr_version_summary(path): try: -from bzrlib import branch, osutils, workingtree +import bzrlib except ImportError: return (BZR-UNKNOWN, {}) +import bzrlib.ui +bzrlib.ui.ui_factory = bzrlib.ui.make_ui_for_terminal( +sys.stdin, sys.stdout, sys.stderr) +from bzrlib import branch, osutils, workingtree from bzrlib.plugin import load_plugins load_plugins() -- Samba Shared Repository