Re: [Samba] Samba 4 Permission

2011-10-04 Thread Daniel Müller
For every share in samba4 login as administator from a windows client. Give
your rights according to your
groups and users as you would for an windows ads server that’s all. Working
for me.

Greetings 
Daniel 

---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---
-Ursprüngliche Nachricht-
Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im
Auftrag von Mike
Gesendet: Samstag, 1. Oktober 2011 13:58
An: Charles Tryon
Cc: samba@lists.samba.org; Andrew Bartlett
Betreff: Re: [Samba] Samba 4 Permission

On Fri, Sep 30, 2011 at 8:48 PM, Charles Tryon
charles.tr...@gmail.comwrote:

 If the valid users directive is no longer used, is there some sort of
 equivalent in Samba4?

 I haven't been able to find a list of currently working directives for
 shares on Samba4.  I'm beginning to see why you still need a samba3 server
 -- it appears that much of the control over properties of shares has yet
to
 make its way into samba4.  Is this accurate?


Charles, I've held the same fundamental question about Samba4 for quite a
while but always thought I must be missing something obvious.
Thanks, now I don't feel alone in the matter and am eager to see what may be
available.  I thought about trying Franky and Samba4_s3compat, but at my
current skill level, I cannot afford too many surprises.

Mike
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Fwd: Win 7 Pro

2011-10-04 Thread John Drescher
On Mon, Oct 3, 2011 at 6:57 PM, Andrew Bartlett abart...@samba.org wrote:
 On Mon, 2011-10-03 at 13:51 -0400, John Drescher wrote:
 On Mon, Oct 3, 2011 at 1:46 PM,  sa...@printflow.eu wrote:
  On 2011-10-03 19:40, John Drescher wrote:
 
  Is there anything else I may try ?
 
  Make sure you have your WINS settings in your windows 7 client so that
  the client can find the PDC.
 
  Any hint in this ? In ipconfig I see only WINS proxy disabled.
 

 I usually set the PDC as a WINS server and add that to the windows
 client. Or make sure your DNS servers have the PDC records so the
 windows client can find the PDC.

 http://www.linuxquestions.org/questions/linux-networking-3/does-samba-pdc-need-dns-544436/

 I'm sorry, but almost every suggestion in that forum post is wrong.

 If you are joining Windows 7 to Samba (3.x) domain controllers, follow
 our official instructions:  http://wiki.samba.org/index.php/Windows7


He said he followed that but gets The specified domain either does not exist or
could not be contacted.

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] LDAP: Mixing local and LDAP-Users

2011-10-04 Thread Daniel Müller
Hi,
When you use LDAP?! Why do you need local users and ldap users?
Just you need LDAP that’s all.

---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---

-Ursprüngliche Nachricht-
Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im 
Auftrag von Felipe Augusto van de Wiel
Gesendet: Donnerstag, 22. September 2011 23:46
An: samba@lists.samba.org
Betreff: Re: [Samba] LDAP: Mixing local and LDAP-Users

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi Denis,

On 18-09-2011 17:18, Denis Witt wrote:
 is it possible to mix local and LDAP-Users? Especially I need to
 know if it's possible to use an LDAP-Group (like the group that
 is mapped to Domain Administrators) together with an local user.

It is, but you aren't going to do that with standard tools. :-)


 (If I use adduser $username $ldap-group the group isn't found,
 even if the group is shown using getent group.)

Just go to LDAP Group and use the member attribute to add your
user.  Depend if you are using rfc2703bis or not that may vary.

Once LDAP reports the user is present in the group, the system
should do the rest. :)


 If this isn't possible, is there a way to map more than one
 group to the rid=512 (ntgroup=Domain Admins)?

That's also possible, you should use 'net groupmap'

Kind regards,
- -- 
Felipe Augusto van de Wiel felipe.w...@hpp.org.br
Tecnologia da Informação (TI) - Complexo Pequeno Príncipe
http://www.pequenoprincipe.org.br/T: +55 41 3310 1747
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=9yjd
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Fwd: Win 7 Pro

2011-10-04 Thread samba
I added WINS server to my DHCP config and  now I join domain. THX ! I 
did not undo settings from http://wiki.samba.org/index.php/Windows7 to 
check. I will try with next machine in about week. This page also noted 
that registry setting is not needed with patch from MS witch seems be 
instaled.


This led me to other question, I have two PDCs on my network for two 
companies. If I set both WINS server in DHCP setting may I expect it 
will work? Does w7 checks both of them?


Oto

On 2011-10-04 0:57, Andrew Bartlett wrote:

On Mon, 2011-10-03 at 13:51 -0400, John Drescher wrote:

On Mon, Oct 3, 2011 at 1:46 PM,sa...@printflow.eu  wrote:

On 2011-10-03 19:40, John Drescher wrote:

Is there anything else I may try ?

Make sure you have your WINS settings in your windows 7 client so that
the client can find the PDC.

Any hint in this ? In ipconfig I see only WINS proxy disabled.


I usually set the PDC as a WINS server and add that to the windows
client. Or make sure your DNS servers have the PDC records so the
windows client can find the PDC.

http://www.linuxquestions.org/questions/linux-networking-3/does-samba-pdc-need-dns-544436/

I'm sorry, but almost every suggestion in that forum post is wrong.

If you are joining Windows 7 to Samba (3.x) domain controllers, follow
our official instructions:  http://wiki.samba.org/index.php/Windows7

Andrew Bartlett



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Anyone can create empty files (v 3.5.11)

2011-10-04 Thread Dan Carpenter
Just a follow up incase someone else runs into this problem.  It
turns out this was a bug in the cifs driver.  I submitted a patch to
fix this.

http://marc.info/?l=linux-cifsm=131715894203568w=2

regards,
dan carpenter
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] ctdb issues

2011-10-04 Thread Lydia Heck


I have been running ctdb on our cluster for ~6 months to serve a gpfs filesystem 
over nfs. It has been running a treat :) !


Recently the servers were upgraded to redhat 5.7 and ctdb-1.0.112-1.el5
is part of the package list. Since the upgrade the log file is filled with 
messages


2011/10/04 12:35:37.933801 [ 1779]: basename: missing operand
2011/10/04 12:35:37.933850 [ 1779]: Try `basename --help' for more information.
2011/10/04 12:35:48.332844 [ 1779]: basename: missing operand
2011/10/04 12:35:48.332900 [ 1779]: Try `basename --help' for more information.



I have tried to start a more recent version of ctdb but have failed to make that 
work with my present configuration. I would like to keep with the packaged 
version, as it is very much easier to maintain. Any idea what I can do to get 
rid of this ?


Lydia

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] ctdb issues

2011-10-04 Thread L . P . H . van Belle
Hai, 

which version is kexec-tools? 
should be 2.0.0-45 or higher. 
( link https://bugzilla.redhat.com/show_bug.cgi?id=683769 ) 

Louis
 

-Oorspronkelijk bericht-
Van: lydia.h...@durham.ac.uk 
[mailto:samba-boun...@lists.samba.org] Namens Lydia Heck
Verzonden: 2011-10-04 13:41
Aan: samba@lists.samba.org
Onderwerp: [Samba] ctdb issues


I have been running ctdb on our cluster for ~6 months to serve 
a gpfs filesystem 
over nfs. It has been running a treat :) !

Recently the servers were upgraded to redhat 5.7 and ctdb-1.0.112-1.el5
is part of the package list. Since the upgrade the log file is 
filled with 
messages

2011/10/04 12:35:37.933801 [ 1779]: basename: missing operand
2011/10/04 12:35:37.933850 [ 1779]: Try `basename --help' for 
more information.
2011/10/04 12:35:48.332844 [ 1779]: basename: missing operand
2011/10/04 12:35:48.332900 [ 1779]: Try `basename --help' for 
more information.



I have tried to start a more recent version of ctdb but have 
failed to make that 
work with my present configuration. I would like to keep with 
the packaged 
version, as it is very much easier to maintain. Any idea what 
I can do to get 
rid of this ?

Lydia

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Fwd: Win 7 Pro

2011-10-04 Thread John Drescher
 This led me to other question, I have two PDCs on my network for two
 companies. If I set both WINS server in DHCP setting may I expect it will
 work? Does w7 checks both of them?


That one I can not help you with. I have 1 PDC and multiple BDCs on
the same network and domain for the last decade.

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] ctdb issues

2011-10-04 Thread Lydia Heck


Hi,

it is:

1.102pre-126.el5_6.6 local-rhels5.7-x86_64-Server

However before the upgrade - where I am sure the kexec-tools were not at a level 
higher than this, ctdb worked perfectly fine.


What is there I could do?

Lydia




On Tue, 4 Oct 2011, L.P.H. van Belle wrote:


Hai,

which version is kexec-tools?
should be 2.0.0-45 or higher.
( link https://bugzilla.redhat.com/show_bug.cgi?id=683769 )

Louis



-Oorspronkelijk bericht-
Van: lydia.h...@durham.ac.uk
[mailto:samba-boun...@lists.samba.org] Namens Lydia Heck
Verzonden: 2011-10-04 13:41
Aan: samba@lists.samba.org
Onderwerp: [Samba] ctdb issues


I have been running ctdb on our cluster for ~6 months to serve
a gpfs filesystem
over nfs. It has been running a treat :) !

Recently the servers were upgraded to redhat 5.7 and ctdb-1.0.112-1.el5
is part of the package list. Since the upgrade the log file is
filled with
messages

2011/10/04 12:35:37.933801 [ 1779]: basename: missing operand
2011/10/04 12:35:37.933850 [ 1779]: Try `basename --help' for
more information.
2011/10/04 12:35:48.332844 [ 1779]: basename: missing operand
2011/10/04 12:35:48.332900 [ 1779]: Try `basename --help' for
more information.



I have tried to start a more recent version of ctdb but have
failed to make that
work with my present configuration. I would like to keep with
the packaged
version, as it is very much easier to maintain. Any idea what
I can do to get
rid of this ?

Lydia

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 4 Permission

2011-10-04 Thread Mike
On Tue, Oct 4, 2011 at 2:01 AM, Daniel Müller muel...@tropenklinik.dewrote:

 For every share in samba4 login as administator from a windows client. Give
 your rights according to your
 groups and users as you would for an windows ads server that’s all. Working
 for me.

 Greetings
 Daniel


Daniel,
Thank you for writing.
Assume I have completed a new server installation, what commands are used in
Samba4 to create the users,groups, and various share 'masks'.
Best regards,
Mike
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] USB Drive Permissions?

2011-10-04 Thread Nicholas Oleksinski
Here comes a newbie question...

I just installed Samba on my Karmic box and I am trying to share a USB drive
that has been mounted to /media/Personal1.

It's not working now even though I see it as a listed share.  So I went
through the 'Samba Checklist'.  The tmp share worked immediately, which
leads me to think that this has something to do with the ownership and
permissions on the USB drive.

1) It is owned by noleks (me)
2) Its permissions are 700, unchangeable (?)

Has anyone else dealt with such an issue?  It's gotta be easy.  I've been
around Linux enough to know when I'm missing something. :)

Thanks
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] LDAP: Mixing local and LDAP-Users

2011-10-04 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 04-10-2011 04:16, Daniel Müller wrote:
 When you use LDAP?! Why do you need local users and ldap users?
 Just you need LDAP that’s all.

I'm pretty sure different networks have differents demands.

This is not one rule fit them all.

Kind regards,
- -- 
Felipe Augusto van de Wiel felipe.w...@hpp.org.br
Tecnologia da Informação (TI) - Complexo Pequeno Príncipe
http://www.pequenoprincipe.org.br/T: +55 41 3310 1747
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=HJdF
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] USB Drive Permissions?

2011-10-04 Thread Chris Weiss
On Tue, Oct 4, 2011 at 12:11 PM, Nicholas Oleksinski nolek...@gmail.com wrote:
 I just installed Samba on my Karmic box and I am trying to share a USB drive
 that has been mounted to /media/Personal1.
 1) It is owned by noleks (me)
 2) Its permissions are 700, unchangeable (?)

To change default permissions, you'd have to consult your automounter
docs.  As most usb sticks are fat32, they don't actually have
permissions, so what you are seeing is a posix permission emulation
layer in the vfat fs driver, which is controlled by mount flags.

However, and a bigger problem, is that when you make a share on a
mount point and the connect to it, smbd will tend to lock the mount
point and you won't be able to cleanly unmount the disk without
manually killing the smbd process that has it locked.

What I have done in the past is to share out /media with the force
user option so that access to the usb disks is done as my desktop
login user.  As I recall, this locks /media but not /media/Personal1
so that issue is resolved.  The force user option is a lot easier to
deal with than automounters.  And sharing /media means all your usb
drives will work without adding a share for each one.  you also get
cd/dvd-rom sharing.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Fwd: Win 7 Pro

2011-10-04 Thread Harry Jede
On 19:40:52 wrote sa...@printflow.eu:
 I added WINS server to my DHCP config and  now I join domain. THX ! I
 did not undo settings from http://wiki.samba.org/index.php/Windows7
 to check. I will try with next machine in about week. This page also
 noted that registry setting is not needed with patch from MS witch
 seems be instaled.
 
 This led me to other question, I have two PDCs on my network for two
 companies. If I set both WINS server in DHCP setting may I expect it
 will work? Does w7 checks both of them?
You should have *one and only one* WINS-Server per ethernet segment. 
WINS use broadcasts.


-- 

Regards
Harry Jede
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] USB Drive Permissions?

2011-10-04 Thread noleksin

Hi Chris:
Thanks for the help. I will investigate the automounter documentation re:  
filesystem types and permissions.

Can you help me understand what Force user mode is?
I am going to try to share /media with User authentication mode.
Thanks again

On , Chris Weiss cwe...@gmail.com wrote:
On Tue, Oct 4, 2011 at 12:11 PM, Nicholas Oleksinski nolek...@gmail.com  
wrote:


 I just installed Samba on my Karmic box and I am trying to share a USB  
drive



 that has been mounted to /media/Personal1.



 1) It is owned by noleks (me)



 2) Its permissions are 700, unchangeable (?)





To change default permissions, you'd have to consult your automounter



docs. As most usb sticks are fat32, they don't actually have



permissions, so what you are seeing is a posix permission emulation



layer in the vfat fs driver, which is controlled by mount flags.





However, and a bigger problem, is that when you make a share on a



mount point and the connect to it, smbd will tend to lock the mount



point and you won't be able to cleanly unmount the disk without



manually killing the smbd process that has it locked.





What I have done in the past is to share out /media with the force



user option so that access to the usb disks is done as my desktop



login user. As I recall, this locks /media but not /media/Personal1



so that issue is resolved. The force user option is a lot easier to



deal with than automounters. And sharing /media means all your usb



drives will work without adding a share for each one. you also get



cd/dvd-rom sharing.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] USB Drive Permissions?

2011-10-04 Thread Chris Weiss
search this page for force user
http://www.samba.org/samba/docs/man/manpages-3/smb.conf.5.html


On Tue, Oct 4, 2011 at 1:15 PM,  nolek...@gmail.com wrote:
 Hi Chris:
 Thanks for the help. I will investigate the automounter documentation re:
 filesystem types and permissions.
 Can you help me understand what Force user mode is?
 I am going to try to share /media with User authentication mode.
 Thanks again

 On , Chris Weiss cwe...@gmail.com wrote:
 On Tue, Oct 4, 2011 at 12:11 PM, Nicholas Oleksinski nolek...@gmail.com
 wrote:

  I just installed Samba on my Karmic box and I am trying to share a USB
  drive

  that has been mounted to /media/Personal1.

  1) It is owned by noleks (me)

  2) Its permissions are 700, unchangeable (?)



 To change default permissions, you'd have to consult your automounter

 docs.  As most usb sticks are fat32, they don't actually have

 permissions, so what you are seeing is a posix permission emulation

 layer in the vfat fs driver, which is controlled by mount flags.



 However, and a bigger problem, is that when you make a share on a

 mount point and the connect to it, smbd will tend to lock the mount

 point and you won't be able to cleanly unmount the disk without

 manually killing the smbd process that has it locked.



 What I have done in the past is to share out /media with the force

 user option so that access to the usb disks is done as my desktop

 login user.  As I recall, this locks /media but not /media/Personal1

 so that issue is resolved.  The force user option is a lot easier to

 deal with than automounters.  And sharing /media means all your usb

 drives will work without adding a share for each one.  you also get

 cd/dvd-rom sharing.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] USB Drive Permissions?

2011-10-04 Thread noleksin

Hi Chris
An update...
Sharing /media worked, but I still cannot access /media/Personal1, which is  
actually a Western Digital portable HD.
I can see all the directories in /media. I made a test folder called  
public, chmod 777, and I can edit files in there from my client.


The Disk Utility reports that the drive is Partition Type HPFS/NTFS, Type:  
NTFS.


Not sure how to figure out what Ubuntu is using for automount...

On , nolek...@gmail.com wrote:

Hi Chris:
Thanks for the help. I will investigate the automounter documentation re:  
filesystem types and permissions.

Can you help me understand what Force user mode is?
I am going to try to share /media with User authentication mode.
Thanks again



On , Chris Weiss cwe...@gmail.com wrote:
 On Tue, Oct 4, 2011 at 12:11 PM, Nicholas Oleksinski  
nolek...@gmail.com wrote:


  I just installed Samba on my Karmic box and I am trying to share a  
USB drive


  that has been mounted to /media/Personal1.

  1) It is owned by noleks (me)

  2) Its permissions are 700, unchangeable (?)



 To change default permissions, you'd have to consult your automounter

 docs. As most usb sticks are fat32, they don't actually have

 permissions, so what you are seeing is a posix permission emulation

 layer in the vfat fs driver, which is controlled by mount flags.



 However, and a bigger problem, is that when you make a share on a

 mount point and the connect to it, smbd will tend to lock the mount

 point and you won't be able to cleanly unmount the disk without

 manually killing the smbd process that has it locked.



 What I have done in the past is to share out /media with the force

 user option so that access to the usb disks is done as my desktop

 login user. As I recall, this locks /media but not /media/Personal1

 so that issue is resolved. The force user option is a lot easier to

 deal with than automounters. And sharing /media means all your usb

 drives will work without adding a share for each one. you also get

 cd/dvd-rom sharing.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] USB Drive Permissions?

2011-10-04 Thread Nicholas Oleksinski
More...

Here is the mtab entry:

noleks-ub:~ cat /etc/mtab
/dev/sda1 / ext4 rw,errors=remount-ro 0 0
proc /proc proc rw 0 0
none /sys sysfs rw,noexec,nosuid,nodev 0 0
none /sys/fs/fuse/connections fusectl rw 0 0
none /sys/kernel/debug debugfs rw 0 0
none /sys/kernel/security securityfs rw 0 0
none /dev devtmpfs rw,mode=0755 0 0
none /dev/pts devpts rw,noexec,nosuid,gid=5,mode=0620 0 0
none /dev/shm tmpfs rw,nosuid,nodev 0 0
none /var/run tmpfs rw,nosuid,mode=0755 0 0
none /var/lock tmpfs rw,noexec,nosuid,nodev 0 0
none /lib/init/rw tmpfs rw,nosuid,mode=0755 0 0
binfmt_misc /proc/sys/fs/binfmt_misc binfmt_misc rw,noexec,nosuid,nodev 0 0
gvfs-fuse-daemon /home/noleks/.gvfs fuse.gvfs-fuse-daemon
rw,nosuid,nodev,user=noleks 0 0
*/dev/sdb1 /media/Personal1 fuseblk
rw,nosuid,nodev,allow_other,blksize=4096,default_permissions 0 0*

I think I'm real close here as a result of Chris' guidance.
Is there a way to control what options the automounter uses when I plug in
the drive?

On Tue, Oct 4, 2011 at 2:31 PM, nolek...@gmail.com wrote:

 Hi Chris
 An update...
 Sharing /media worked, but I still cannot access /media/Personal1, which is
 actually a Western Digital portable HD.
 I can see all the directories in /media. I made a test folder called
 public, chmod 777, and I can edit files in there from my client.

 The Disk Utility reports that the drive is Partition Type HPFS/NTFS, Type:
 NTFS.

 Not sure how to figure out what Ubuntu is using for automount...


 On , nolek...@gmail.com wrote:
  Hi Chris:
  Thanks for the help. I will investigate the automounter documentation re:
 filesystem types and permissions.
  Can you help me understand what Force user mode is?
  I am going to try to share /media with User authentication mode.
  Thanks again
 
  On , Chris Weiss cwe...@gmail.com wrote:
   On Tue, Oct 4, 2011 at 12:11 PM, Nicholas Oleksinski
 nolek...@gmail.com wrote:
  
I just installed Samba on my Karmic box and I am trying to share a
 USB drive
  
that has been mounted to /media/Personal1.
  
1) It is owned by noleks (me)
  
2) Its permissions are 700, unchangeable (?)
  
  
  
   To change default permissions, you'd have to consult your automounter
  
   docs.  As most usb sticks are fat32, they don't actually have
  
   permissions, so what you are seeing is a posix permission emulation
  
   layer in the vfat fs driver, which is controlled by mount flags.
  
  
  
   However, and a bigger problem, is that when you make a share on a
  
   mount point and the connect to it, smbd will tend to lock the mount
  
   point and you won't be able to cleanly unmount the disk without
  
   manually killing the smbd process that has it locked.
  
  
  
   What I have done in the past is to share out /media with the force
  
   user option so that access to the usb disks is done as my desktop
  
   login user.  As I recall, this locks /media but not /media/Personal1
  
   so that issue is resolved.  The force user option is a lot easier to
  
   deal with than automounters.  And sharing /media means all your usb
  
   drives will work without adding a share for each one.  you also get
  
   cd/dvd-rom sharing.
  
  

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Fwd: Win 7 Pro

2011-10-04 Thread Gaiseric Vandal

On 10/04/2011 01:45 PM, Harry Jede wrote:

On 19:40:52 wrote sa...@printflow.eu:

I added WINS server to my DHCP config and  now I join domain. THX ! I
did not undo settings from http://wiki.samba.org/index.php/Windows7
to check. I will try with next machine in about week. This page also
noted that registry setting is not needed with patch from MS witch
seems be instaled.

This led me to other question, I have two PDCs on my network for two
companies. If I set both WINS server in DHCP setting may I expect it
will work? Does w7 checks both of them?

You should have *one and only one* WINS-Server per ethernet segment.
WINS use broadcasts.


I thought WINS clients registered with WINS servers-  which means that 
the WINS DB is updated with that client, and that the WIN client can 
then resolve client names to IP address.   WINS lets you avoid issues 
with finding machines by broadcast.


If you have a windows server as a WINS server, it can replicate/sync 
data with other WINS servers. I believe there is an recommended max 
limit for how many clients a WINS server should support-  although I 
think it is unlikely that one ethernet segment would have so many to 
really need more than 1 WINS server.



Conceptually, if you had two completely separate Windows or Samba 
domains, each with its own PDC.   I could see that you could allow them 
each to have their own WINS server, and the WINS server's would not 
replicate.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] LDAP: Mixing local and LDAP-Users

2011-10-04 Thread Gaiseric Vandal



On 10/04/2011 01:21 PM, Felipe Augusto van de Wiel wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 04-10-2011 04:16, Daniel Müller wrote:

When you use LDAP?! Why do you need local users and ldap users?
Just you need LDAP that’s all.

I'm pretty sure different networks have differents demands.

This is not one rule fit them all.

Kind regards,
- -- 
Felipe Augusto van de Wielfelipe.w...@hpp.org.br

Tecnologia da Informação (TI) - Complexo Pequeno Príncipe
http://www.pequenoprincipe.org.br/T: +55 41 3310 1747
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=HJdF
-END PGP SIGNATURE-



Windows OS domain members will at least have a local Administrator 
account.I have two member servers and two DC's.  All use LDAP for 
unix backends.  One member server uses TBD backed for the one local user 
(Administrator) -  though the unix account for the Administrator is 
actually the same as the domain Administrator. It also uses tbd for 
group mappings.  The 2nd member server does not have any local samba 
accounts or groups.The samba shares are pretty open since we rely on 
the local unix permissions for security, and set them via unix not 
windows.But if I wanted to manage perms from windows clients I would 
probably need to define the local Administrator user, local Admins 
group, and local users group.









--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba 4 Permission

2011-10-04 Thread Marcel de Reuver
2011/10/4 Mike 1100...@gmail.com

 On Tue, Oct 4, 2011 at 2:01 AM, Daniel Müller muel...@tropenklinik.de
 wrote:

  For every share in samba4 login as administator from a windows client.
 Give
  your rights according to your
  groups and users as you would for an windows ads server that’s all.
 Working
  for me.
 
  Greetings
  Daniel
 

 Daniel,
 Thank you for writing.
 Assume I have completed a new server installation, what commands are used
 in
 Samba4 to create the users,groups, and various share 'masks'.
 Best regards,
 Mike
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba


Do it from a Windows pc with Administration Tools installed.
See:
http://wiki.samba.org/index.php/Samba4/HOWTO#Step_1:_Installing_Windows_Remote_Administration_Tools_onto_Windows

-- 
BR, Marcel de Reuver
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 4 Permission

2011-10-04 Thread Mike
On Tue, Oct 4, 2011 at 3:42 PM, Marcel de Reuver mar...@de.reuver.orgwrote:

 2011/10/4 Mike 1100...@gmail.comDo it from a Windows pc with
 Administration Tools installed.
 See:

 http://wiki.samba.org/index.php/Samba4/HOWTO#Step_1:_Installing_Windows_Remote_Administration_Tools_onto_Windows


Thank you, Marcel.
It's quite a different world now -- configuring linux servers with gui
tools, and windows tools at that.
I need to go forward and try it.

Best regards,

Mike
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba users profiles directory failing to mount in windows client

2011-10-04 Thread greep elem
I am having some issues with Samba with roaming profiles running on Ubuntu
server.  When a user logs in they get prompted with an error:

windows error--
Windows cannot locate the server copy of your roaming profile and is
attempting to log you
on with your local profile. Changes to the profile will not be copied to the
server when
you logoff. Possible causes of this error include network problems or
insufficient security
rights. If this problem persists, contact your network administrator.

DETAIL - The network path was not found.
windows error--

While trying to figure this out I believe I have found the problem but am
unsure how to fix it.  It would appear that for the logon path =
\\%N\Profiles\%U entry in smb.conf that the %N (or even %L) does not get
translated to the netbios name of the server.

doing the following command shows the %N still untranslated while the %U is
correctly updated to the user name

# pdbedit -Lv testuser | grep Path
Profile Path: \\%N\profiles\testuser

If I manually hard code the %N  to the servers name instead of using %N or
%L the roaming profile works perfectly.


Can anyone point me in the right direction so as to resolve this issue?


Server setup:

Ubuntu server 11.04
Samba 3.5.8
OpenLDAP 2.4.23
Windows XP SP3 clients

smb.conf below:

--[ smb.conf
[global]
workgroup = TESTDOMAIN
netbios aliases = TESTSRV
obey pam restrictions = Yes
passdb backend = ldapsam:ldap://localhost
passwd program = /usr/sbin/smbldap-passwd -u %u
passwd chat = Changing *\nNew password* %n\n *Retype new
password* %n\n
passwd chat timeout = 4
log level = 3
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
add user script = /usr/sbin/smbldap-useradd -m '%u'
delete user script = /usr/sbin/smbldap-userdel %u
add group script = /usr/sbin/smbldap-groupadd -p '%g'
delete group script = /usr/sbin/smbldap-groupdel '%g'
add user to group script = /usr/sbin/smbldap-groupmod -m '%u'
'%g'
delete user from group script = /usr/sbin/smbldap-groupmod -x
'%u' '%g'
set primary group script = /usr/sbin/smbldap-usermod -g '%g'
'%u'
add machine script = /usr/sbin/smbldap-useradd -w '%u'
logon path = \\%N\Profiles\%U
logon drive = H:
domain logons = Yes
preferred master = Yes
domain master = Yes
dns proxy = No
wins support = Yes
ldap admin dn = cn=admin,dc=testdomain
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Idmap
ldap machine suffix = ou=Computers
ldap passwd sync = yes
ldap suffix = dc=testdomain
ldap ssl = no
ldap user suffix = ou=Users
panic action = /usr/share/samba/panic-action %d

[homes]
comment = Home Directories
valid users = %S
Read only = No
browseable = No

[netlogon]
comment = Network Logon Service
path = /home/samba/netlogon
admin users = root
guest ok = Yes
browseable = No

[Profiles]
comment = Roaming Profile Share
path = /home/samba/profiles
read only = No
profile acls = Yes
browseable = No
--[ smb.conf
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] security of ntlmauth / winbindd_privileged dir

2011-10-04 Thread Harry Jede
I have a working setup with samba  squid on one machine. However it 
seems that ntlm_auth is not doing what I expected.

As an unprivilegd user I am able to test succesfull password:


ute@alix:~$ ntlm_auth -V
Version 3.5.6


ute@alix:~$ ntlm_auth  --username=hans --password=keins
NT_STATUS_OK: Success (0x0)

Surely I know this password.



Now the same with diagnostics on:

ute@alix:~$ ntlm_auth --diagnostics --username=hans --password=keins

winbind client not authorized to use winbindd_pam_auth_crap. Ensure 
permissions on /var/run/samba/winbindd_privileged are set correctly. 
(0xc022)
[2011/10/01 14:56:15.107135,  1] 
utils/ntlm_auth_diagnostics.c:601(diagnose_ntlm_auth)
  Test LM failed!
winbind client not authorized to use winbindd_pam_auth_crap. Ensure 
permissions on /var/run/samba/winbindd_privileged are set correctly. 
(0xc022)
[2011/10/01 14:56:15.108233,  1] 
utils/ntlm_auth_diagnostics.c:601(diagnose_ntlm_auth)
  Test LM and NTLM failed!
winbind client not authorized to use winbindd_pam_auth_crap. Ensure 
permissions on /var/run/samba/winbindd_privileged are set correctly. 
(0xc022)
[2011/10/01 14:56:15.108713,  1] 
utils/ntlm_auth_diagnostics.c:601(diagnose_ntlm_auth)
  Test NTLM failed!
winbind client not authorized to use winbindd_pam_auth_crap. Ensure 
permissions on /var/run/samba/winbindd_privileged are set correctly. 
(0xc022)
[2011/10/01 14:56:15.108951,  1] 
utils/ntlm_auth_diagnostics.c:601(diagnose_ntlm_auth)
  Test NTLM in LM failed!
winbind client not authorized to use winbindd_pam_auth_crap. Ensure 
permissions on /var/run/samba/winbindd_privileged are set correctly. 
(0xc022)
[2011/10/01 14:56:15.109218,  1] 
utils/ntlm_auth_diagnostics.c:601(diagnose_ntlm_auth)
  Test NTLM in both failed!
winbind client not authorized to use winbindd_pam_auth_crap. Ensure 
permissions on /var/run/samba/winbindd_privileged are set correctly. 
(0xc022)
[2011/10/01 14:56:15.109478,  1] 
utils/ntlm_auth_diagnostics.c:601(diagnose_ntlm_auth)
  Test NTLMv2 failed!
winbind client not authorized to use winbindd_pam_auth_crap. Ensure 
permissions on /var/run/samba/winbindd_privileged are set correctly. 
(0xc022)
[2011/10/01 14:56:15.109611,  1] 
utils/ntlm_auth_diagnostics.c:601(diagnose_ntlm_auth)
  Test NTLMv2 and LMv2 failed!
winbind client not authorized to use winbindd_pam_auth_crap. Ensure 
permissions on /var/run/samba/winbindd_privileged are set correctly. 
(0xc022)
[2011/10/01 14:56:15.109742,  1] 
utils/ntlm_auth_diagnostics.c:601(diagnose_ntlm_auth)
  Test LMv2 failed!
winbind client not authorized to use winbindd_pam_auth_crap. Ensure 
permissions on /var/run/samba/winbindd_privileged are set correctly. 
(0xc022)
[2011/10/01 14:56:15.109871,  1] 
utils/ntlm_auth_diagnostics.c:601(diagnose_ntlm_auth)
  Test NTLMv2 and LMv2, LMv2 broken failed!
winbind client not authorized to use winbindd_pam_auth_crap. Ensure 
permissions on /var/run/samba/winbindd_privileged are set correctly. 
(0xc022)
winbind client not authorized to use winbindd_pam_auth_crap. Ensure 
permissions on /var/run/samba/winbindd_privileged are set correctly. 
(0xc022)
[2011/10/01 14:56:15.110300,  1] 
utils/ntlm_auth_diagnostics.c:601(diagnose_ntlm_auth)
  Test NTLM and LM, LM broken failed!
winbind client not authorized to use winbindd_pam_auth_crap. Ensure 
permissions on /var/run/samba/winbindd_privileged are set correctly. 
(0xc022)
winbind client not authorized to use winbindd_pam_auth_crap. Ensure 
permissions on /var/run/samba/winbindd_privileged are set correctly. 
(0xc022)
[2011/10/01 14:56:15.110751,  1] 
utils/ntlm_auth_diagnostics.c:601(diagnose_ntlm_auth)
  Test Plaintext failed!
winbind client not authorized to use winbindd_pam_auth_crap. Ensure 
permissions on /var/run/samba/winbindd_privileged are set correctly. 
(0xc022)
[2011/10/01 14:56:15.110874,  1] 
utils/ntlm_auth_diagnostics.c:601(diagnose_ntlm_auth)
  Test Plaintext LM broken failed!
winbind client not authorized to use winbindd_pam_auth_crap. Ensure 
permissions on /var/run/samba/winbindd_privileged are set correctly. 
(0xc022)
winbind client not authorized to use winbindd_pam_auth_crap. Ensure 
permissions on /var/run/samba/winbindd_privileged are set correctly. 
(0xc022)
[2011/10/01 14:56:15.92,  1] 
utils/ntlm_auth_diagnostics.c:601(diagnose_ntlm_auth)
  Test Plaintext NT only failed!
winbind client not authorized to use winbindd_pam_auth_crap. Ensure 
permissions on /var/run/samba/winbindd_privileged are set correctly. 
(0xc022)
[2011/10/01 14:56:15.111303,  1] 
utils/ntlm_auth_diagnostics.c:601(diagnose_ntlm_auth)
  Test Plaintext LM only failed!

This time the password test failed. 

Here is the relevant config:

# ls -la /var/run/samba/winbindd_privileged/
insgesamt 8
drwxr-x--- 2 root winbindd_priv 4096  1. Okt 14:33 .
drwxr-xr-x 3 root root  4096  1. Okt 14:33 ..
srwxrwxrwx 1 root root 0  1. Okt 14:33 pipe

# getent group winbindd_priv

[Samba] wbinfo command generate a winbindd core dump

2011-10-04 Thread Harry Jede
OS Debian squeeze
# wbinfo -V
Version 3.5.6


ute@alix:~$ wbinfo --getdcname=KRONPRINZ
Could not get dc name for KRONPRINZ

As root and as unprivilegd user, this command results in a winbind core 
dump.


[2011/10/04 23:40:18.022674,  0] lib/fault.c:46(fault_report)
  ===
[2011/10/04 23:40:18.030995,  0] lib/fault.c:47(fault_report)
  INTERNAL ERROR: Signal 11 in pid 20226 (3.5.6)
  Please read the Trouble-Shooting section of the Samba3-HOWTO
[2011/10/04 23:40:18.031215,  0] lib/fault.c:49(fault_report)
  
  From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf
[2011/10/04 23:40:18.031412,  0] lib/fault.c:50(fault_report)
  ===
[2011/10/04 23:40:18.031550,  0] lib/util.c:1465(smb_panic)
  PANIC (pid 20226): internal error
[2011/10/04 23:40:18.063944,  0] lib/util.c:1569(log_stack_trace)
  BACKTRACE: 17 stack frames:
   #0 /usr/sbin/winbindd(log_stack_trace+0x1a) [0x7fc86ae39b0a]
   #1 /usr/sbin/winbindd(smb_panic+0x1f) [0x7fc86ae39bcf]
   #2 /usr/sbin/winbindd(+0x1a374d) [0x7fc86ae2974d]
   #3 /lib/libc.so.6(+0x321e0) [0x7fc86893d1e0]
   #4 /usr/sbin/winbindd(winbindd_getdcname_recv+0xc4) [0x7fc86adb73c4]
   #5 /usr/sbin/winbindd(+0xe1a7d) [0x7fc86ad67a7d]
   #6 /usr/sbin/winbindd(+0x12aa96) [0x7fc86adb0a96]
   #7 /usr/sbin/winbindd(+0x10c757) [0x7fc86ad92757]
   #8 /usr/sbin/winbindd(+0x10c07d) [0x7fc86ad9207d]
   #9 /usr/sbin/winbindd(+0x13459d) [0x7fc86adba59d]
   #10 /usr/sbin/winbindd(+0x134d4b) [0x7fc86adbad4b]
   #11 /usr/sbin/winbindd(run_events+0x1b2) [0x7fc86ae49342]
   #12 /usr/sbin/winbindd(+0x1c3601) [0x7fc86ae49601]
   #13 /usr/sbin/winbindd(_tevent_loop_once+0x90) [0x7fc86ae499e0]
   #14 /usr/sbin/winbindd(main+0x933) [0x7fc86ad68fa3]
   #15 /lib/libc.so.6(__libc_start_main+0xfd) [0x7fc868929c4d]
   #16 /usr/sbin/winbindd(+0xe0a79) [0x7fc86ad66a79]
[2011/10/04 23:40:18.070826,  0] lib/fault.c:326(dump_core)
  dumping core in /var/log/samba/cores/winbindd


-- 

Regards
Harry Jede
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba users profiles directory failing to mount in windows client

2011-10-04 Thread Harry Jede
On 23:55:42 wrote greep elem:
 I am having some issues with Samba with roaming profiles running on
 Ubuntu server.  When a user logs in they get prompted with an error:
 
 windows error--
 Windows cannot locate the server copy of your roaming profile and is
 attempting to log you
 on with your local profile. Changes to the profile will not be copied
 to the server when
 you logoff. Possible causes of this error include network problems or
 insufficient security
 rights. If this problem persists, contact your network administrator.
 
 DETAIL - The network path was not found.
 windows error--
 
 While trying to figure this out I believe I have found the problem
 but am unsure how to fix it.  It would appear that for the logon
 path = \\%N\Profiles\%U entry in smb.conf that the %N (or even %L)
 does not get translated to the netbios name of the server.
 
 doing the following command shows the %N still untranslated while the
 %U is correctly updated to the user name
 
 # pdbedit -Lv testuser | grep Path
 Profile Path: \\%N\profiles\testuser
 
 If I manually hard code the %N  to the servers name instead of using
 %N or %L the roaming profile works perfectly.
 
 
 Can anyone point me in the right direction so as to resolve this
 issue?
Use netbios name instead of netbios aliases

-- 

Regards
Harry Jede
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] issue with tesparam

2011-10-04 Thread Harry Jede
OS: Debian squeeze
Samba: 3.5.6

# testparm --section-name=global -s 21|grep ALIX
returns nothing

# grep ALIX /etc/samba/smb.conf
  netbios name = ALIX
works


-- 

Regards
Harry Jede
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[SCM] Samba Shared Repository - branch master updated

2011-10-04 Thread Stefan Metzmacher
The branch, master has been updated
   via  4c6bfac s3:lib/util: make sure panic action can attach a debugger 
on ubuntu (=10.10)
   via  f2b795e lib/util: make sure panic action can attach a debugger on 
ubuntu (=10.10)
   via  1ff61f1 s3:param: use ROLE_DOMAIN_CONTROLLER for an AD domain 
controller
  from  6b5d8e0 s4-subdomain: create trust record with forest root DC

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 4c6bfac12a274b0bbcdb54681a817b704839222d
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Oct 4 10:47:46 2011 +0200

s3:lib/util: make sure panic action can attach a debugger on ubuntu 
(=10.10)

By default user processes can't attach a debugger to a process.
So explicitly allow that for all child processes, before calling
the panic action script.

metze

Autobuild-User: Stefan Metzmacher me...@samba.org
Autobuild-Date: Tue Oct  4 12:51:35 CEST 2011 on sn-devel-104

commit f2b795e9cf3ddb0f6bf0929bd0e423d39d6d239a
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Oct 4 10:47:46 2011 +0200

lib/util: make sure panic action can attach a debugger on ubuntu (=10.10)

By default user processes can't attach a debugger to a process.
So explicitly allow that for all child processes, before calling
the panic action script.

metze

commit 1ff61f1223f36a7cfa7acfc9da500b2684e5282b
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Oct 4 09:21:23 2011 +0200

s3:param: use ROLE_DOMAIN_CONTROLLER for an AD domain controller

metze

---

Summary of changes:
 lib/util/fault.c |7 +++
 source3/lib/util.c   |   11 +++
 source3/param/loadparm_server_role.c |2 +-
 3 files changed, 19 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/lib/util/fault.c b/lib/util/fault.c
index ed7684a..7fe081d 100644
--- a/lib/util/fault.c
+++ b/lib/util/fault.c
@@ -116,6 +116,13 @@ static void smb_panic_default(const char *why)
 {
int result;
 
+#if defined(HAVE_PRCTL)  defined(PR_SET_PTRACER)
+   /*
+* Make sure all children can attach a debugger.
+*/
+   prctl(PR_SET_PTRACER, getpid(), 0, 0, 0);
+#endif
+
if (panic_action  *panic_action) {
char pidstr[20];
char cmdstring[200];
diff --git a/source3/lib/util.c b/source3/lib/util.c
index 689d41e..887d184 100644
--- a/source3/lib/util.c
+++ b/source3/lib/util.c
@@ -31,6 +31,10 @@
 #include ccan/hash/hash.h
 #include libcli/security/security.h
 
+#ifdef HAVE_SYS_PRCTL_H
+#include sys/prctl.h
+#endif
+
 /* Max allowable allococation - 256mb - 0x1000 */
 #define MAX_ALLOC_SIZE (1024*1024*256)
 
@@ -778,6 +782,13 @@ void smb_panic_s3(const char *why)
(unsigned long long)sys_getpid(), why));
log_stack_trace();
 
+#if defined(HAVE_PRCTL)  defined(PR_SET_PTRACER)
+   /*
+* Make sure all children can attach a debugger.
+*/
+   prctl(PR_SET_PTRACER, getpid(), 0, 0, 0);
+#endif
+
cmd = lp_panic_action();
if (cmd  *cmd) {
DEBUG(0, (smb_panic(): calling panic action [%s]\n, cmd));
diff --git a/source3/param/loadparm_server_role.c 
b/source3/param/loadparm_server_role.c
index 3cc8f35..1f18b4f 100644
--- a/source3/param/loadparm_server_role.c
+++ b/source3/param/loadparm_server_role.c
@@ -79,7 +79,7 @@ void set_server_role(void)
break;
case SEC_ADS:
if (lp_domain_logons()) {
-   server_role = ROLE_DOMAIN_PDC;
+   server_role = ROLE_DOMAIN_CONTROLLER;
break;
}
server_role = ROLE_DOMAIN_MEMBER;


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2011-10-04 Thread Günther Deschner
The branch, master has been updated
   via  e30e7a6 s3-waf: remove explicit linking to SMBLDAP subsystem.
   via  ea50207 s3-smbldap: remove an obsolete prototype.
  from  4c6bfac s3:lib/util: make sure panic action can attach a debugger 
on ubuntu (=10.10)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit e30e7a6ec02700234f73671c113743e1572efa01
Author: Günther Deschner g...@samba.org
Date:   Tue Oct 4 12:53:38 2011 +0200

s3-waf: remove explicit linking to SMBLDAP subsystem.

Guenther

Autobuild-User: Günther Deschner g...@samba.org
Autobuild-Date: Tue Oct  4 14:39:57 CEST 2011 on sn-devel-104

commit ea50207230ea221deadbcf6ad6ca2a8525c27254
Author: Günther Deschner g...@samba.org
Date:   Tue Oct 4 12:53:09 2011 +0200

s3-smbldap: remove an obsolete prototype.

Guenther

---

Summary of changes:
 source3/include/smbldap.h |1 -
 source3/wscript_build |   18 +-
 2 files changed, 9 insertions(+), 10 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/include/smbldap.h b/source3/include/smbldap.h
index 7bb9895..4ae8476 100644
--- a/source3/include/smbldap.h
+++ b/source3/include/smbldap.h
@@ -219,7 +219,6 @@ struct ldapsam_privates {
 /* Functions shared between pdb_ldap.c and pdb_nds.c. */
 struct pdb_methods;
 NTSTATUS pdb_init_ldapsam_compat( struct pdb_methods **pdb_method, const char 
*location);
-void private_data_free_fn(void **result);
 int ldapsam_search_suffix_by_name(struct ldapsam_privates *ldap_state,
   const char *user,
   LDAPMessage ** result,
diff --git a/source3/wscript_build b/source3/wscript_build
index f80e115..d105f1f 100755
--- a/source3/wscript_build
+++ b/source3/wscript_build
@@ -665,7 +665,7 @@ if not bld.env.toplevel_build:
 bld.SAMBA3_LIBRARY('netapi',
 source=LIBNETAPI_SRC,
 public_deps='''talloc tdb_compat cap wbclient smbd_shim 
libsmb KRBCLIENT
-pdb SMBLDAP param samba-util
+pdb param samba-util
 LIBMSRPC_GEN msrpc3 ads LIBNET DCUTIL NDR_LIBNETAPI
 RPC_CLIENT_SCHANNEL smbconf REG_SMBCONF
 LIBCLI_SAMR libcli_lsa3 LIBRPCCLI_NETLOGON
@@ -678,7 +678,7 @@ bld.SAMBA3_LIBRARY('netapi',
 
 bld.SAMBA3_LIBRARY('smbclient',
 source=LIBSMBCLIENT_SRC,
-public_deps='''talloc tdb_compat wbclient cap param  
smbd_shim libsmb KRBCLIENT pdb SMBLDAP
+public_deps='''talloc tdb_compat wbclient cap param  
smbd_shim libsmb KRBCLIENT pdb
 LIBMSRPC_GEN msrpc3 libcli_lsa3 RPC_NDR_SRVSVC 
popt_samba3''',
 public_headers='include/libsmbclient.h',
 vnum='0',
@@ -1233,21 +1233,21 @@ bld.SAMBA3_BINARY('smbcontrol',
 bld.SAMBA3_BINARY('smbtree',
  source=SMBTREE_SRC,
  deps='''talloc tdb_compat tevent cap wbclient param smbd_shim
- libsmb LIBSMB_ERR popt_samba3 KRBCLIENT pdb SMBLDAP 
LIBMSRPC_GEN msrpc3 PROFILE
+ libsmb LIBSMB_ERR popt_samba3 KRBCLIENT pdb LIBMSRPC_GEN 
msrpc3 PROFILE
  RPC_NDR_SRVSVC''',
  vars=locals())
 
 bld.SAMBA3_BINARY('smbpasswd',
  source=SMBPASSWD_SRC,
  deps='''talloc tdb_compat tevent cap wbclient param smbd_shim
- libsmb LIBSMB_ERR popt_samba3 KRBCLIENT pdb SMBLDAP 
LIBMSRPC_GEN msrpc3 PASSWD_UTIL
+ libsmb LIBSMB_ERR popt_samba3 KRBCLIENT pdb LIBMSRPC_GEN 
msrpc3 PASSWD_UTIL
  LIBCLI_SAMR INIT_LSA PASSCHANGE''',
  vars=locals())
 
 bld.SAMBA3_BINARY('pdbedit',
  source=PDBEDIT_SRC,
  deps='''talloc tdb_compat tevent cap wbclient param smbd_shim
- LIBNTLMSSP LIBSMB_ERR popt_samba3 pdb SMBLDAP
+ LIBNTLMSSP LIBSMB_ERR popt_samba3 pdb
  PASSWD_UTIL cli-ldap-common''',
  vars=locals())
 
@@ -1291,14 +1291,14 @@ bld.SAMBA3_BINARY('msgtest',
 bld.SAMBA3_BINARY('smbcacls',
  source=SMBCACLS_SRC,
  deps='''talloc tdb_compat cap wbclient param libsmb KRBCLIENT
- smbd_shim pdb popt_samba3 SMBLDAP LIBMSRPC_GEN
+ smbd_shim pdb popt_samba3 LIBMSRPC_GEN
  msrpc3 libcli_lsa3''',
  vars=locals())
 
 bld.SAMBA3_BINARY('smbcquotas',
  source=SMBCQUOTAS_SRC,
  deps='''talloc tdb_compat cap wbclient param  smbd_shim 
libsmb KRBCLIENT
- popt_samba3 pdb SMBLDAP LIBMSRPC_GEN msrpc3
+ popt_samba3 pdb LIBMSRPC_GEN msrpc3
  libcli_lsa3''',
  vars=locals())
 
@@ -1322,7 

autobuild: intermittent test failure detected

2011-10-04 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2011-10-04-1732/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2011-10-04-1732/samba3.stderr
   http://git.samba.org/autobuild.flakey/2011-10-04-1732/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2011-10-04-1732/samba4.stderr
   http://git.samba.org/autobuild.flakey/2011-10-04-1732/samba4.stdout
  
The top commit at the time of the failure was:

commit e30e7a6ec02700234f73671c113743e1572efa01
Author: Günther Deschner g...@samba.org
Date:   Tue Oct 4 12:53:38 2011 +0200

s3-waf: remove explicit linking to SMBLDAP subsystem.

Guenther

Autobuild-User: Günther Deschner g...@samba.org
Autobuild-Date: Tue Oct  4 14:39:57 CEST 2011 on sn-devel-104


autobuild: intermittent test failure detected

2011-10-04 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2011-10-04-2051/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2011-10-04-2051/samba3.stderr
   http://git.samba.org/autobuild.flakey/2011-10-04-2051/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2011-10-04-2051/samba4.stderr
   http://git.samba.org/autobuild.flakey/2011-10-04-2051/samba4.stdout
  
The top commit at the time of the failure was:

commit e30e7a6ec02700234f73671c113743e1572efa01
Author: Günther Deschner g...@samba.org
Date:   Tue Oct 4 12:53:38 2011 +0200

s3-waf: remove explicit linking to SMBLDAP subsystem.

Guenther

Autobuild-User: Günther Deschner g...@samba.org
Autobuild-Date: Tue Oct  4 14:39:57 CEST 2011 on sn-devel-104


[SCM] Samba Shared Repository - branch master updated

2011-10-04 Thread Jeremy Allison
The branch, master has been updated
   via  f93fd12 Fix bug #8507 - smbd doesn't correctly honor the force 
create mode bits from a cifsfs create.
  from  e30e7a6 s3-waf: remove explicit linking to SMBLDAP subsystem.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit f93fd128eb623e324459806a34052bd40afe82e5
Author: Jeremy Allison j...@samba.org
Date:   Tue Oct 4 14:46:00 2011 -0700

Fix bug #8507 - smbd doesn't correctly honor the force create mode bits 
from a cifsfs create.

Don't manipulate the new_dos_attributes bits until we know it's not a POSIX 
open.

Autobuild-User: Jeremy Allison j...@samba.org
Autobuild-Date: Wed Oct  5 01:19:17 CEST 2011 on sn-devel-104

---

Summary of changes:
 source3/smbd/open.c |   12 ++--
 1 files changed, 6 insertions(+), 6 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/smbd/open.c b/source3/smbd/open.c
index 61d1a2e..a44f15f 100644
--- a/source3/smbd/open.c
+++ b/source3/smbd/open.c
@@ -1541,12 +1541,6 @@ static NTSTATUS open_file_ntcreate(connection_struct 
*conn,
 
ZERO_STRUCT(id);
 
-   /* Windows allows a new file to be created and
-  silently removes a FILE_ATTRIBUTE_DIRECTORY
-  sent by the client. Do the same. */
-
-   new_dos_attributes = ~FILE_ATTRIBUTE_DIRECTORY;
-
if (conn-printer) {
/*
 * Printers are handled completely differently.
@@ -1580,6 +1574,12 @@ static NTSTATUS open_file_ntcreate(connection_struct 
*conn,
unx_mode = (mode_t)(new_dos_attributes  
~FILE_FLAG_POSIX_SEMANTICS);
new_dos_attributes = 0;
} else {
+   /* Windows allows a new file to be created and
+  silently removes a FILE_ATTRIBUTE_DIRECTORY
+  sent by the client. Do the same. */
+
+   new_dos_attributes = ~FILE_ATTRIBUTE_DIRECTORY;
+
/* We add FILE_ATTRIBUTE_ARCHIVE to this as this mode is only 
used if the file is
 * created new. */
unx_mode = unix_mode(conn, new_dos_attributes | 
FILE_ATTRIBUTE_ARCHIVE,


-- 
Samba Shared Repository


[SCM] build.samba.org - branch master updated

2011-10-04 Thread Andrew Tridgell
The branch, master has been updated
   via  0c5ef6c update location of upstream waf tree
  from  434956b use --enabled-shared in python install script

http://gitweb.samba.org/?p=build-farm.git;a=shortlog;h=master


- Log -
commit 0c5ef6c5542f5573180078503abd70a1cef57184
Author: Andrew Tridgell tri...@samba.org
Date:   Wed Oct 5 13:30:35 2011 +1100

update location of upstream waf tree

---

Summary of changes:
 common.fns|3 +--
 import-and-analyse.py |3 +--
 web/trees.conf|4 ++--
 3 files changed, 4 insertions(+), 6 deletions(-)


Changeset truncated at 500 lines:

diff --git a/common.fns b/common.fns
index 0768d87..87fe12d 100644
--- a/common.fns
+++ b/common.fns
@@ -11,5 +11,4 @@ test_tree ccache-maint . $compiler
 test_tree talloc . $compiler
 test_tree tdb . $compiler
 test_tree ldb . $compiler
-test_tree waf-svn demos $compiler
-
+test_tree waf demos $compiler
diff --git a/import-and-analyse.py b/import-and-analyse.py
index c7ef5cb..2318cc1 100755
--- a/import-and-analyse.py
+++ b/import-and-analyse.py
@@ -38,9 +38,8 @@ smtp.connect()
 
 def check_and_send_mails(cur, old):
 
-if cur.tree is waf-svn:
+if cur.tree is waf:
 # no point sending emails, as the email addresses are invalid
-# from git svn
 return
 
 if cur.tree is samba_3_waf:
diff --git a/web/trees.conf b/web/trees.conf
index 9ab398a..3b497d1 100644
--- a/web/trees.conf
+++ b/web/trees.conf
@@ -83,7 +83,7 @@ scm = git
 repo = rsync.git
 branch = master
 
-[waf-svn]
+[waf]
 scm = git
-repo = waf-svn.git
+repo = waf.git
 branch = master


-- 
build.samba.org