[Samba] PDC emulator overloaded

2011-10-17 Thread blizza...@libero.it
Hello all,

i'm using samba + winbind yo connect to AD win 2003 on many linux box.
I use winbind to retrive users and groups list quering PDC emulator.
When PDC get many requests (i use squid with ntml transparent auth + winbind 
also) it get overloaded and slow down reply to my servers.
The problem is that when this situation occur, all services stop to work, and 
the users (10.000) became very angry.
How can i solve this problem?
I know that there was only i PDC on network, so can i build a dedicate samba 
server to act as PDC or BDC or other to help real PDC emulator to load the 
share?
Someone can give me advices?
Thank you.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] [quick question] smbclient -m smb2 not working

2011-10-17 Thread David Roid
Greetings list,

I just upgraded to samba 3.6.0 trying SMB2. Though Windows 2008 R2 can work
with SMB2 shares just fine, I'm unable to access SMB2 shares with mount.cifs
or smbclient, even with -m smb2 specified -- I get this

Unrecognised protocol level smb2, whereas smbclient comes with
samba-client-3.6.0-63.1.rpm.

So is this supported yet (from client side) or I miss anything?

Regards
-David
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] [quick question] smbclient -m smb2 not working

2011-10-17 Thread Michael Wood
Hi

On 17 October 2011 11:35, David Roid datar...@gmail.com wrote:
 Greetings list,

 I just upgraded to samba 3.6.0 trying SMB2. Though Windows 2008 R2 can work
 with SMB2 shares just fine, I'm unable to access SMB2 shares with mount.cifs
 or smbclient, even with -m smb2 specified -- I get this

 Unrecognised protocol level smb2, whereas smbclient comes with
 samba-client-3.6.0-63.1.rpm.

 So is this supported yet (from client side) or I miss anything?

smbclient and mount.cifs are two different things.  mount.cifs is from
the cifs-utils project and is no longer part of Samba.  I suspect it
does not yet support SMB2.

http://wiki.samba.org/index.php/LinuxCIFS_utils

The mailing list is here:

http://vger.kernel.org/vger-lists.html#linux-cifs

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] ctdb domain question

2011-10-17 Thread Kosa Attila
Hi,
Is there any reason against making a ctdb connected 2 pc samba
cluster also a domain member? After setting the [include =
registry] option, one member of the cluster didn't let the users
to log in. If I relogin this cluster member to the domain, then
the other member starts to refuse users to log in. Did I miss
some option that I have to use in this scenario? The name of the
servers are different, but at the netbios aliases option they are
the same. The used samba version is: 3.5.6~dfsg-3squeeze5.

-- 
Cheers,
Zsiga
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] [quick question] smbclient -m smb2 not working

2011-10-17 Thread David Roid
Thanks, Michael. But in my case, neither of smbclient/mount.cifs works with
SMB2.

-David

2011/10/17 Michael Wood esiot...@gmail.com

 Hi

 On 17 October 2011 11:35, David Roid datar...@gmail.com wrote:
  Greetings list,
 
  I just upgraded to samba 3.6.0 trying SMB2. Though Windows 2008 R2 can
 work
  with SMB2 shares just fine, I'm unable to access SMB2 shares with
 mount.cifs
  or smbclient, even with -m smb2 specified -- I get this
 
  Unrecognised protocol level smb2, whereas smbclient comes with
  samba-client-3.6.0-63.1.rpm.
 
  So is this supported yet (from client side) or I miss anything?

 smbclient and mount.cifs are two different things.  mount.cifs is from
 the cifs-utils project and is no longer part of Samba.  I suspect it
 does not yet support SMB2.

 http://wiki.samba.org/index.php/LinuxCIFS_utils

 The mailing list is here:

 http://vger.kernel.org/vger-lists.html#linux-cifs

 --
 Michael Wood esiot...@gmail.com

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] ctdb domain question

2011-10-17 Thread Daniel Müller
As far as i know you cannot cluster samba as dc with ctdb.

---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---

-Ursprüngliche Nachricht-
Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im
Auftrag von Kosa Attila
Gesendet: Montag, 17. Oktober 2011 12:11
An: samba@lists.samba.org
Betreff: [Samba] ctdb domain question

Hi,
Is there any reason against making a ctdb connected 2 pc samba
cluster also a domain member? After setting the [include =
registry] option, one member of the cluster didn't let the users
to log in. If I relogin this cluster member to the domain, then
the other member starts to refuse users to log in. Did I miss
some option that I have to use in this scenario? The name of the
servers are different, but at the netbios aliases option they are
the same. The used samba version is: 3.5.6~dfsg-3squeeze5.

-- 
Cheers,
Zsiga
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] ctdb domain question

2011-10-17 Thread Daniel Müller
Your both ctdb nodes have the same name and the same ip?
Is winbind running: http://ctdb.samba.org/samba.html
CTDB_MANAGES_WINBIND
This is a parameter in /etc/sysconfig/ctdb

When this parameter is set to yes CTDB will start/stop/restart the local
winbind daemon as the cluster configuration changes.

When this parameter is set you should also make sure that winbind is NOT
started by default by the linux system when it boots: 
  chkconfig winbind off

Example: 
  CTDB_MANAGES_WINBIND=yes

It is strongly recommended that you set this parameter to yes if you
intend to use clustered samba in DOMAIN or ADS security mode.

---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---

-Ursprüngliche Nachricht-
Von: Kosa Attila [mailto:zs...@kosaek.hu] 
Gesendet: Montag, 17. Oktober 2011 12:54
An: Daniel Müller
Cc: samba@lists.samba.org
Betreff: Re: [Samba] ctdb domain question

On Mon, Oct 17, 2011 at 12:40:15PM +0200, Daniel Müller wrote:
 As far as i know you cannot cluster samba as dc with ctdb.
 
 ---
 EDV Daniel Müller
 
 -Ursprüngliche Nachricht-
 Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
Im
 Auftrag von Kosa Attila
 Gesendet: Montag, 17. Oktober 2011 12:11
 An: samba@lists.samba.org
 Betreff: [Samba] ctdb domain question
 
 Hi,
 Is there any reason against making a ctdb connected 2 pc samba
 cluster also a domain member? After setting the [include =
 ^^

No dc, member server.

-- 
Cheers,
Zsiga

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] ctdb domain question

2011-10-17 Thread Kosa Attila
On Mon, Oct 17, 2011 at 01:03:25PM +0200, Daniel Müller wrote:
 Your both ctdb nodes have the same name and the same ip?
 Is winbind running: http://ctdb.samba.org/samba.html
 CTDB_MANAGES_WINBIND
 This is a parameter in /etc/sysconfig/ctdb
 
 When this parameter is set to yes CTDB will start/stop/restart the local
 winbind daemon as the cluster configuration changes.
 
 When this parameter is set you should also make sure that winbind is NOT
 started by default by the linux system when it boots: 
   chkconfig winbind off
 
 Example: 
   CTDB_MANAGES_WINBIND=yes
 
 It is strongly recommended that you set this parameter to yes if you
 intend to use clustered samba in DOMAIN or ADS security mode.

smb-cluster-1 and smb-cluster-2:
---
Debian Squeeze
linux-image-2.6.32-5-amd64
ctdb 1.10+git20110722-1
glusterfs 3.2.3-1
samba 3.5.6~dfsg-3squeeze5

smb-cluster-1:
-
- eth0 - 192.168.100.144 (Bcast:192.168.100.255 Mask:255.255.255.0)
- eth1 - 10.10.10.1 (Bcast:10.10.10.255  Mask:255.255.255.0)
- /dev/sdb1 - ~5 GB, mount /dev/sdb1 /mnt -t ext3

smb-cluster-2:
-
- eth0 - 192.168.100.145 (Bcast:192.168.100.255 Mask:255.255.255.0)
- eth1 - 10.10.10.2 (Bcast:10.10.10.255  Mask:255.255.255.0)
- /dev/sdb1 - ~5 GB, mount /dev/sdb1 /mnt -t ext3

# grep -v ^\# /etc/default/ctdb | grep -v ^$
CTDB_RECOVERY_LOCK=/samba/ctdb/ctdb
CTDB_PUBLIC_INTERFACE=eth0
CTDB_PUBLIC_ADDRESSES=/etc/ctdb/public_addresses
CTDB_MANAGES_SAMBA=yes
CTDB_SAMBA_SKIP_SHARE_CHECK=no
CTDB_SAMBA_CHECK_PORTS=445
CTDB_MANAGES_WINBIND=yes
CTDB_MANAGES_VSFTPD=no
CTDB_MANAGES_ISCSI=no
CTDB_MANAGES_NFS=no
CTDB_MANAGES_HTTPD=no
CTDB_INIT_STYLE=debian
ulimit -n 3
CTDB_NODES=/etc/ctdb/nodes
CTDB_NOTIFY_SCRIPT=/etc/ctdb/notify.sh
CTDB_DBDIR=/var/lib/ctdb
CTDB_DBDIR_PERSISTENT=/var/lib/ctdb/persistent
CTDB_EVENT_SCRIPT_DIR=/etc/ctdb/events.d
CTDB_SOCKET=/tmp/ctdb.socket
CTDB_TRANSPORT=tcp
CTDB_START_AS_DISABLED=no
CTDB_CAPABILITY_RECMASTER=yes
CTDB_CAPABILITY_LMASTER=yes
CTDB_LOGFILE=/var/log/ctdb/log.ctdb
CTDB_DEBUGLEVEL=ERR
CTDB_SUPPRESS_COREFILE=no
CTDB_SYSLOG=no
CTDB_RUN_TIMEOUT_MONITOR=no
CTDB_MAX_PERSISTENT_CHECK_ERRORS=0

# ctdb status
Number of nodes:2
pnn:0 10.10.10.1   OK (THIS NODE)
pnn:1 10.10.10.2   OK
Generation:1071551548
Size:2
hash:0 lmaster:0
hash:1 lmaster:1
Recovery mode:NORMAL (0)
Recovery master:0

#  testparm -v  /dev/null | grep 'netbios aliases'
netbios aliases = samba

-- 
Cheers,
Zsiga
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] ctdb domain question

2011-10-17 Thread Kosa Attila
On Mon, Oct 17, 2011 at 06:26:05PM +0800, David Roid wrote:
 Sounds like domain membership is not in sync for your cluster, make sure
 smb.conf is identical and net ads join is executed on only one node after
 ctdb reaches stable state.

The smb.conf file is identical on the two servers because I
scp-ed it from one to the other. The ctdb was in a stable state,
no AD is present, a third samba server (same version) is the PDC.

-- 
Cheers,
Zsiga
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Password expires every month even though 'Password Must Change' is set to 'never' (Samba+LDAP)

2011-10-17 Thread Willy Offermans
Hello Aaron,

To my knowledge, sambaPwdMustChange is obsolete and is simply ignored by
Samba. Please correct me if I'm wrong.

On Fri, Oct 14, 2011 at 08:30:26AM -0400, Aaron E. wrote:
 Sounds like you've checked mostly all except your ldap backend...
 Check your LDAP DB for... (they will be in nix timestamp)
 
 sambaPasswordCanChange
 sambaPasswordLastSet
 sambaPasswordMustChange
 
 setup smbldap-tools package
 
 On 10/13/2011 11:00 PM, Jeffrey Chan wrote:
 I'm using OpenLDAP as backend.
 
 
 On Wed, Oct 12, 2011 at 11:16 PM, Aaron E.ssures...@gmail.com  wrote:
 
 Just cuirous are you using pam or ldap backend?
 
 
 On 10/12/2011 09:22 AM, Marco Ciampa wrote:
 
 On Wed, Oct 12, 2011 at 12:15:16PM +0800, Jeffrey Chan wrote:
 
 Hi all,
 
 I've posted this a month ago but haven't gotten a reply. Can anyone
 please
 help?
 
 - Jeff
 
 
 
 On Mon, Aug 29, 2011 at 5:14 PM, Jeffrey Changoofri...@gmail.com
   wrote:
 
   Hi all,
 
 Since a few months ago Samba ask each of our users to change password at
 log on every month and I have not been able to disable it.
 
 I found this page and follow the instructions:
 
 
 http://playingwithsid.**blogspot.com/2010/12/change-**
 samba-password-expiry-setting.**htmlhttp://playingwithsid.blogspot.com/2010/12/change-samba-password-expiry-setting.html
 
 The default ‘Password Must Change’ policy was set to never and pdbedit
 shows ‘Password Must Change: never’ for each user, yet the passwords
 still
 get expire once a month.
 
 Can anyone please give me some pointers?
 
 - Jeff
 
 
 Just a hint (maybe wrong...)
 
 obey pam restrictions = No
 
 ...
 
 
 
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  
 https://lists.samba.org/**mailman/options/sambahttps://lists.samba.org/mailman/options/samba
 
 
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba

-- 
Met vriendelijke groeten,
With kind regards,
Mit freundlichen Gruessen,

Willy

*
 W.K. Offermans
Home:   +31 45 544 49 44
Mobile: +31 681 15 87 68
e-mail: wi...@offermans.rompen.nl
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] ntlm_auth NT_STATUS_INVALID_HANDLE with windbind

2011-10-17 Thread Harry Jede
On 09:35:16 wrote Alessandro:
 I should use an authenticated proxy with Squid, but I have a problem
 with winbind.
 I'm working on a PDC, debian squeeze with samba from backport (ver.
 2:3.5.11~dfsg-1~bpo60+1 )
 
 Here the problem: I can authenticate users.
 
 /usr/bin/ntlm_auth --username=myname --domain=MYCOMPANY
 password: 
 NT_STATUS_INVALID_HANDLE: Invalid handle (0xc008)
 
 
 wbinfo -a myname
 Enter myname's password: 
 plaintext password authentication failed
 Could not authenticate user myname with plaintext password
 Enter myname's password: 
 challenge/response password authentication failed
 error code was NT_STATUS_INVALID_HANDLE (0xc008)
 error messsage was: Invalid handle
 Could not authenticate user myname with challenge/response
 
 With --domain argument the result is the same
 
 wbinfo seems to work fine with all other arguments (-u, -g, etc.. a
 strange behavior: with -m it gives two domains, BUILTIN and
 MYCOMPNAY)


wbinfo should show three domains:
# wbinfo -m
BULITIN
YOUR_DOMAIN
YOUR_SERVER

# net getdomainsid
SID for local machine YOUR_SERVER is: LOCAL-SID
SID for domain YOUR_DOMAIN is: DOMAIN-SID

# ldapsearch -xLLL ((objectclass=sambaDomain)(sambaDomainName=*)) 
sambasid
dn: sambaDomainName=YOUR_DOMAIN,dc=example,dc=net
sambaSID: DOMAIN-SID

dn: sambaDomainName=YOUR_SERVER,dc=example,dc=net
sambaSID: LOCAL-SID



and finally 
# wbinfo --ping-dc
MUST succeed




As SATOH Fumiyas tells us, one SHOULD join without a running winbindd 
Daemon. 
# net rpc join -S localhost -U administrator

One are NOT joining localhost! One join $HOSTNAME!!

Verify with 
# net rpc testjoin
Join to 'YOUR_DOMAIN' is OK

and 
# pdbedit -v $HOSTNAME$
Account Flags:[S  ]
User SID: DOMAIN-SID-SERVER-RID
Primary Group SID:DOMAIN-SID-515

These tree settings are imortant. It MUST be a server account and the 
primary group sid MUST have the RID=515




# wbinfo -a user%secret
plaintext password authentication succeeded
challenge/response password authentication succeeded



Dont forget to add the user proxy to the group winbindd_priv, so 
that the ntlm_auth helper from squid has enough rights.



 
 I found the following bug:
 https://bugzilla.samba.org/show_bug.cgi?id=7481
 http://osdir.com/ml/debian-bugs-dist/2011-02/msg00966.html
 http://osdir.com/ml/debian-bugs-dist/2011-02/msg09069.html
 
 I could compile samba from source applying the #7481 patch, but I'm
 not sure this is my case, because the workaround exposed at the end
 of #7481 doesn't work for me.
 Any idea?
It works for me with Samba 3.5.6 and also with 3.5.11 from backports :-) 
. I use openldap as passdb backend.

Step-by-step guide

You should verify these three groups:
# net sam list builtin
administrators
guests
users

# net sam show administrators
BUILTIN\administrators is a Local Group with SID S-1-5-32-544
# net sam show guests
BUILTIN\guests is a Local Group with SID S-1-5-32-546
# net sam show users
BUILTIN\users is a Local Group with SID S-1-5-32-545

and verify that these groups have their default members:
# net rpc group members Administrators
YOUR_DOMAIN\Domain Admins
# net rpc group members guests
YOUR_DOMAIN\Domain Guests
# net rpc group members users
YOUR_DOMAIN\Domain Users




You must have a valid idmap alloc setup
and have stored the secret in secrets.tdb
smb.conf:

; idmap Konfiguration fuer SAMBA 3.5.6 mit LDAP
idmap backend   = ldap
idmap uid   = 100-199
idmap gid   = 100-199
idmap alloc backend = ldap
idmap alloc config : ldap_url   = ldap://127.0.0.1/
idmap alloc config : ldap_base_dn   = ou=Idmap,dc=example,dc=net
idmap alloc config : ldap_user_dn   = cn=admin,dc=example,dc=net


Store the idmap secret in secrets.tdb
# net idmap secret alloc secret
The secret must be the password from ldap_user_dn

If you are using ldap as passdb backend then set this:

ldapsam:editposix   = yes

in smb.conf. This will prevent samba to use the smbldaptools. They 
produce wrong joins! And by the way, check that the previously created 
builtin groups have sambaGroupType=4. smbldaptools set this to 5, which 
does not work.
If you now have set ldapsam:editposix dont forget to restart samba

now, you should join as explained earlier



Store the authuser in secrets.tdb
# net -Uroot setauthuser

will store user and passord in secrets.tdb, so that winbindd has enough 
rights to work. If your administrator account has uidnumber=0, you may 
use this account.


stop samba, start winbind, start samba
wait some seconds, winbindd will now create the third domain which has 
the name of your PDCs hostname.

check with wbinfo


HINT
when I checked winbindd.conf with testparm, I have get some errors, 
until I put an empty or comment line before the line with the include 
statement :-) .

 Thanks
 Alessandro


-- 

Regards
Harry Jede
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  

Re: [Samba] tattooing of tdbsam backend with logon script value

2011-10-17 Thread Harry Jede
On 15:21:48 wrote Pat Emblen:
 On 15/10/11 19:15, Harry Jede wrote:
  pdbedit -S user
 
 Not here, it just sets an empty logon script, it doesn't default back
 to the one in smb.conf.
 
 root@sheldon:/home/smb/netlogon# pdbedit -S  talcom
 Unix username:talcom
 NT username:
 Account Flags:[U  ]
 User SID: S-1-5-21-3019205139-2287944265-981039286-3000
 Primary Group SID:S-1-5-21-3019205139-2287944265-981039286-513
 Full Name:talcom
 Home Directory:   \\sheldon\talcom
 HomeDir Drive:
 Logon Script:  default 
missing
 Profile Path: \\sheldon\profiles\talcom
 Domain:   SHELDON
 Account desc:
 Workstations:
 Munged dial:
 Logon time:   0
 Logoff time:  9223372036854775807 seconds since the Epoch
 Kickoff time: 9223372036854775807 seconds since the Epoch
 Password last set:Fri, 30 Sep 2011 20:03:00 EST
 Password can change:  Fri, 30 Sep 2011 20:03:00 EST
 Password must change: never
 Last bad password   : 0
 Bad password count  : 0
 Logon hours : FF
 r
I can see two differences between your acoounts and my:
1. You dont have a NT Username
2. Your Home Directory and your Profile Path points to the netbios 
server name sheldon, which is identical to your netbios domain name 
SHELDON.

Try to create a new account with:
pdbedit -a newuser

and check it again. Is your Server Name really equal to your workgroup 
name?




-- 

Regards
Harry Jede
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] [quick question] smbclient -m smb2 not working

2011-10-17 Thread Jeremy Allison
On Mon, Oct 17, 2011 at 06:17:49PM +0800, David Roid wrote:
 Thanks, Michael. But in my case, neither of smbclient/mount.cifs works with
 SMB2.

No smbclient doesn't yet support SMB2. Metze is currently working
on adding this functionality to the base library code.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Getting remote registry information.

2011-10-17 Thread Ken D'Ambrosio
Hey, all.  A couple weeks ago, I asked about getting remote registry
information, and someone helpfully offered up net rpc registry [blah].  And
it does a decent job, but I'm yet to find the right permutation that would give
me a whole branch of the hierarchy (akin to doing an export in regedit).  For
what I'm looking to do, that would be really, truly handy.  Most seem to save
the file remotely, or to spit out just the information for that level of the
hierarchy (e.g., enumerate).  Is there a way to get an entire branch?

Thanks!

-Ken





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Getting remote registry information.

2011-10-17 Thread Harry Jede
On 21:53:31 wrote Ken D'Ambrosio:
 Hey, all.  A couple weeks ago, I asked about getting remote registry
 information, and someone helpfully offered up net rpc registry
 [blah].  And it does a decent job, but I'm yet to find the right
 permutation that would give me a whole branch of the hierarchy (akin
 to doing an export in regedit).  For what I'm looking to do, that
 would be really, truly handy.  Most seem to save the file remotely,
 or to spit out just the information for that level of the hierarchy
 (e.g., enumerate).  Is there a way to get an entire branch?

regedt32 or regedit

as member of domain admins

 Thanks!
 
 -Ken


-- 

Gruss
Harry Jede
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] AD authentication against a service name not part of AD.

2011-10-17 Thread Wes Reneau
I have 3 node VCS cluster who all run the same smb.conf file but they are
all seperate instances.  Samba is not a part of the VCS cluster. I've joined
the boxes to AD and based on AD groups can successfully access the desired
shares only if you reference the server name and not the service name.  The
servername is server1.mydomain.com the service name is
serviceA.somedomain.net.

The service name is simply a DNS zone so no trusts exist.  I've pondered the
idea of having samba reference the interface where the service lives but in
the event the service is moved from server1 to server2 will that crash smb?

Ultimatley I want to access the service name to gain access to the shares as
the server name is going to be unreliable.  I've copied my smb.conf file
below and edited it to reflect the names I've used in the first paragraph.

[global]
 workgroup = mydomain
 realm = mydomain.com
 server string = %h server (Samba %v)
 security = ADS
 allow trusted domains = No
 password server = auth.mydomain.com
 log level = 3
 log file = /var/log/samba/log.%m
 max log size = 1000
 name resolve order = host wins bcast
 time server = Yes
 printcap name = cups
 wins support = Yes
 idmap uid = 16777217-33554431
 idmap gid = 16777217-33554431
 template shell = /bin/bash
 winbind enum users = Yes
 winbind enum groups = Yes
 cups options = raw

 [printers]
 comment = All Printers
 path = /var/spool/samba
 printable = Yes
 browseable = No

 [unixshare]
 comment = UNIX Share
 path = /tmp/UNIX_share
 valid users = @mydomain\UNIX System Administrators
 read only = No
 browseable = No



 [reports]
 comment = Report repository
 path = /reports
 guest ok = Yes
 writeable = yes

 [verify]
 path = /verify
 guest ok = Yes
 writeable = yes


When trying to access \\serviceA.somedomain.net\reports I get the error that
reads:

No process is on the other end of the pipe

However if I try to access \\server1.mydomain.com\reports it works fine.


I would appreciate any help.
Wes
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Codepage Problem?

2011-10-17 Thread Philipp Schmiedeknecht
Hi,

I have the following logs in log.smbd:

-
[2011/10/17 16:40:54.464688,  3] smbd/process.c:1485(process_smb)
 Transaction 2732 of length 200 (0 toread)
[2011/10/17 16:40:54.464704,  3] smbd/process.c:1294(switch_message)
 switch message SMBntcreateX (pid 19814) conn 0x7fa6eeb5d430
[2011/10/17 16:40:54.464753,  3] smbd/msdfs.c:746(dfs_redirect)
 dfs_redirect: Not redirecting \vera\Extern\SomeFolder\Sîÿÿ.
[2011/10/17 16:40:54.464768,  3] smbd/msdfs.c:757(dfs_redirect)
 dfs_redirect: Path \vera\Extern\SomeFolder\Sîÿÿ converted to non-dfs path 
SomeFolder/Sîÿÿ
[2011/10/17 16:40:54.464804,  3] smbd/vfs.c:851(check_reduced_name)
 check_reduced_name [SomeFolder/Sîÿÿ] [/raid/extern]
[2011/10/17 16:40:54.464839,  3] smbd/vfs.c:1008(check_reduced_name)
 check_reduced_name: SomeFolder/Sîÿÿ reduced to /raid/extern/SomeFolder/Sîÿÿ
[2011/10/17 16:40:54.464855,  3] smbd/vfs.c:851(check_reduced_name)
 check_reduced_name [SomeFolder/Sîÿÿ] [/raid/extern]
[2011/10/17 16:40:54.464889,  3] smbd/vfs.c:1008(check_reduced_name)
 check_reduced_name: SomeFolder/Sîÿÿ reduced to /raid/extern/SomeFolder/Sîÿÿ
[2011/10/17 16:40:54.464912,  3] smbd/dosmode.c:166(unix_mode)
 unix_mode(SomeFolder/Sîÿÿ) returning 0744
[2011/10/17 16:40:54.464927,  3] smbd/vfs.c:851(check_reduced_name)
 check_reduced_name [SomeFolder/Sîÿÿ] [/raid/extern]
[2011/10/17 16:40:54.464961,  3] smbd/vfs.c:1008(check_reduced_name)
 check_reduced_name: SomeFolder/Sîÿÿ reduced to /raid/extern/SomeFolder/Sîÿÿ
[2011/10/17 16:40:54.464978,  3] smbd/error.c:80(error_packet_set)
 error packet at smbd/error.c(160) cmd=162 (SMBntcreateX) 
NT_STATUS_OBJECT_NAME_NOT_FOUND
-

Sîÿÿ of course is no existing file.

Is this caused by a wrong codepage configuration?
In my smb.conf no codepage is configured

On the clients this results in disconnection from the server

Best regards
Philipp



___
Burgunderstr. 3 
71672 Marbach a.N.-Rielingshausen
fon: +49-7144-5072550
fax: +49-7144-1305905
mobil: +49-179-4758994
skype: ph.schmiedeknecht


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] tattooing of tdbsam backend with logon script value

2011-10-17 Thread TAKAHASHI Motonobu

On 07/08/11 00:23, Chris Smith wrote:
 Therefore said users, who have once had
 an explicitly defined logon script value can (seemingly) no longer
 returned to the state where they use whatever logon script is
 defined in smb.conf.
 Is there a way to reset said users, removing the tattooing effect?

No, as menthioned repeatly in this list:
  http://lists.samba.org/archive/samba/2011-June/163006.html
  http://lists.samba.org/archive/samba/2010-December/159763.html

I think this should be by design as well as Windows NT domain does.

 On 15:21:48 wrote Pat Emblen:
   pdbedit -S user
  
  Not here, it just sets an empty logon script, it doesn't default back
  to the one in smb.conf.
  
  root@sheldon:/home/smb/netlogon# pdbedit -S  talcom
(snip)

Do you use old passdb such as smbpasswd or ldapsam_compat?

---
TAKAHASHI Motonobu mo...@samba.gr.jp
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] tattooing of tdbsam backend with logon script value

2011-10-17 Thread Pat Emblen

On 18/10/11 02:29, Harry Jede wrote:

On 15:21:48 wrote Pat Emblen:

On 15/10/11 19:15, Harry Jede wrote:

pdbedit -S user


Not here, it just sets an empty logon script, it doesn't default back
to the one in smb.conf.

root@sheldon:/home/smb/netlogon# pdbedit -S  talcom
Unix username:talcom
NT username:

.

Profile Path: \\sheldon\profiles\talcom
Domain:   SHELDON

I can see two differences between your acoounts and my:
1. You dont have a NT Username


I'm not sure about this, I checked another couple of machines and they 
dont show them either, but they all work.



2. Your Home Directory and your Profile Path points to the netbios
server name sheldon, which is identical to your netbios domain name
SHELDON.


I've been using this machine as a bit of a test box for some scripts. 
Maybe I added 'talcom' before I set the domain up in smb.conf.That 
probably explains the Domain matching the the machine netbios name.

None of the other accounts are like this.


Try to create a new account with:
pdbedit -a newuser

and check it again. Is your Server Name really equal to your workgroup
name?



It didn't change anything ...

#cat /etc/samba/smb.conf |grep 'logon script'
# Not mandatory with new pylogon script
logon script = scripts\%U.cmd

# cat scripts/fred.cmd
ECHO hi fred
PAUSE

root@sheldon:/home/smb/netlogon# adduser fred
Adding user `fred' ...
Adding new group `fred' (1014) ...
Adding new user `fred' (1007) with group `fred' ...
Creating home directory `/home/fred' ...
Copying files from `/etc/skel' ...
snip

root@sheldon:/home/smb/netlogon# smbpasswd -a fred
New SMB password:
Retype new SMB password:
Added user fred.

root@sheldon:/home/smb/netlogon# pdbedit -Lvu fred
Unix username:fred
NT username:
Account Flags:[U  ]
User SID: S-1-5-21-3019205139-2287944265-981039286-1018
Primary Group SID:S-1-5-21-3019205139-2287944265-981039286-513
Full Name:Fred Flintstone
Home Directory:   \\sheldon\fred
HomeDir Drive:
Logon Script: scripts\fred.cmd
Profile Path: \\sheldon\profiles\fred
Domain:   TALBYCOM
Account desc:
Workstations:
Munged dial:
Logon time:   0
Logoff time:  9223372036854775807 seconds since the Epoch
Kickoff time: 9223372036854775807 seconds since the Epoch
Password last set:Tue, 18 Oct 2011 10:22:40 EST
Password can change:  Tue, 18 Oct 2011 10:22:40 EST
Password must change: never
Last bad password   : 0
Bad password count  : 0
Logon hours : FF

Set a script manually
root@sheldon:/home/smb/netlogon# pdbedit -S scripts\fred.vbs -u fred
snip
Home Directory:   \\sheldon\fred
HomeDir Drive:
Logon Script: scripts\fred.vbs
snip

Try to null it back to default
root@sheldon:/home/smb/netlogon# pdbedit -S  fred
snip
Home Directory:   \\sheldon\fred
HomeDir Drive:
Logon Script:  No good
snip

Tested the account and the logon script does not run
It does run after resetting the account, as I previously described

And FYI
A new user record from passdb.tdb - gets the default Logon Script

key 12 bytes
USER_zaphod
data 194 bytes
[000] 00 00 00 00 FF FF FF 7F  FF FF FF 7F 00 00 00 00   ...
[010] 36 DC 9C 4E 00 00 00 00  FF FF FF 7F 07 00 00 00  6..N... ...
[020] 7A 61 70 68 6F 64 00 09  00 00 00 54 41 4C 42 59  zaphod.. ...TALBY
[030] 43 4F 4D 00 01 00 00 00  00 07 00 00 00 7A 61 70  COM .zap
[040] 68 6F 64 00 00 00 00 00  00 00 00 00 00 00 00 00  hod ...
[050] 00 00 00 00 01 00 00 00  00 01 00 00 00 00 01 00  ... ...
[060] 00 00 00 01 00 00 00 00  FE 03 00 00 01 02 00 00  ... ...
[070] 00 00 00 00 10 00 00 00  A2 AC 52 67 41 D3 CB 37  ... ..RgA..7
[080] EE F2 2A C6 25 1D E4 95  00 00 00 00 10 00 00 00  ..*.%... ...
[090] A8 00 15 00 00 00 20 00  00 00 FF FF FF FF FF FF  ..  
[0A0] FF FF FF FF FF FF FF FF  FF FF FF FF FF FF FF 00   ...
[0B0] 00 00 00 00 00 00 00 00  00 00 00 00 00 00 EC 04  ... 
[0C0] 00 00 .

after pdbedit -S  -u zaphod

key 12 bytes
USER_zaphod
data 195 bytes
[000] 00 00 00 00 FF FF FF 7F  FF FF FF 7F 00 00 00 00   ...
[010] 36 DC 9C 4E 00 00 00 00  FF FF FF 7F 07 00 00 00  6..N... ...
[020] 7A 61 70 68 6F 64 00 09  00 00 00 54 41 4C 42 59  zaphod.. ...TALBY
[030] 43 4F 4D 00 01 00 00 00  00 07 00 00 00 7A 61 70  COM .zap
[040] 68 6F 64 00 00 00 00 00  00 00 00 00 01 00 00 00  hod ...
[050] 00 00 00 00 00 01 00 00  00 00 01 00 00 00 00 01  ... 
[060] 00 00 00 00 01 00 00 00  00 FE 03 00 00 01 02 00  ... ...
[070] 00 00 00 00 00 10 00 00  00 A2 AC 52 67 41 D3 CB  ... ...RgA..
[080] 37 EE F2 2A C6 25 1D E4  95 00 00 00 00 10 00 00  7..*.%.. ...
[090] 00 A8 00 15 00 00 00 20  00 00 00 FF FF FF FF FF  ...  
[0A0] FF FF FF FF FF FF FF FF  FF FF FF FF 

Re: [Samba] tattooing of tdbsam backend with logon script value

2011-10-17 Thread Pat Emblen

On 18/10/11 11:19, TAKAHASHI Motonobu wrote:

On 15:21:48 wrote Pat Emblen:

pdbedit -S user


Not here, it just sets an empty logon script, it doesn't default back
to the one in smb.conf.

root@sheldon:/home/smb/netlogon# pdbedit -S  talcom

(snip)

Do you use old passdb such as smbpasswd or ldapsam_compat?

---
TAKAHASHI Motonobumo...@samba.gr.jp


passdb = tdbsam

Those other posts refer to Logon Path, not Logon Script, I suppose you 
mean that both wont reset back to default.


I'm afraid I've never persisted long enough to get ldap working.
If anyone can point to a good how to that works with Debian Squeeze I 
would appreciate it


Pat

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] directory permission for samba user

2011-10-17 Thread Kaushal Shriyan
Hi,

In samba, path = /path/to/share/point so if i have /database as
directory and user as sales whats the preferred read write and user
and group ownership permission on /database ?

Regards

Kaushal
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[SCM] Samba Shared Repository - branch master updated

2011-10-17 Thread Kai Blin
The branch, master has been updated
   via  8c07686 s4 provision: DNS backend should be set by caller
   via  d58f266 s4 provision/dns: Clean up os level handling
   via  6382721 s4 provision/dns: Clean up backend handling
   via  b42b812 s4 provision: Default to win2k3 domain function level
   via  41d4862 s4 provision: Reword opinionated dns backend help text, add 
NONE backend
   via  292554c s4 provision: Rename bind9 flatfile backend to 
BIND9_FLATFILE
  from  009b97d provision: fix the doc

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 8c076862ad0b1b14bb6addef323c5678368051af
Author: Kai Blin k...@samba.org
Date:   Sat Oct 15 13:54:45 2011 +0200

s4 provision: DNS backend should be set by caller

Autobuild-User: Kai Blin k...@samba.org
Autobuild-Date: Mon Oct 17 09:51:12 CEST 2011 on sn-devel-104

commit d58f266d19750484b72ad0e18de3e83c88e81169
Author: Kai Blin k...@samba.org
Date:   Sat Oct 15 13:52:57 2011 +0200

s4 provision/dns: Clean up os level handling

commit 6382721ce0559bd60a9abd08b0a9353db9f7d731
Author: Kai Blin k...@samba.org
Date:   Sat Oct 15 13:48:28 2011 +0200

s4 provision/dns: Clean up backend handling

commit b42b81249c5f6006e743b186a3d58a3763aeabe8
Author: Kai Blin k...@samba.org
Date:   Sat Oct 15 12:36:50 2011 +0200

s4 provision: Default to win2k3 domain function level

commit 41d48626e24324c726793856c3c907c0dd89f3a1
Author: Kai Blin k...@samba.org
Date:   Sat Oct 15 12:27:55 2011 +0200

s4 provision: Reword opinionated dns backend help text, add NONE backend

commit 292554c396d0a848bb73423e08a5f30eba1d4907
Author: Kai Blin k...@samba.org
Date:   Sat Oct 15 12:17:14 2011 +0200

s4 provision: Rename bind9 flatfile backend to BIND9_FLATFILE

---

Summary of changes:
 source4/scripting/python/samba/join.py |6 ++-
 .../scripting/python/samba/provision/__init__.py   |8 +---
 .../scripting/python/samba/provision/sambadns.py   |   41 
 source4/scripting/python/samba/upgrade.py  |8 +++-
 source4/scripting/python/samba/upgradehelpers.py   |3 +-
 source4/setup/provision|   16 ++--
 6 files changed, 52 insertions(+), 30 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/scripting/python/samba/join.py 
b/source4/scripting/python/samba/join.py
index 731f0b5..6a8ac97 100644
--- a/source4/scripting/python/samba/join.py
+++ b/source4/scripting/python/samba/join.py
@@ -584,7 +584,8 @@ class dc_join(object):
 serverdn=ctx.server_dn, domain=ctx.domain_name,
 hostname=ctx.myname, domainsid=ctx.domsid,
 machinepass=ctx.acct_pass, serverrole=domain 
controller,
-sitename=ctx.site, lp=ctx.lp, 
ntdsguid=ctx.ntds_guid)
+sitename=ctx.site, lp=ctx.lp, 
ntdsguid=ctx.ntds_guid,
+dns_backend=NONE)
 print Provision OK for domain DN %s % presult.domaindn
 ctx.local_samdb = presult.samdb
 ctx.lp  = presult.lp
@@ -622,7 +623,8 @@ class dc_join(object):
  domainguid=domguid,
  targetdir=ctx.targetdir, 
samdb_fill=FILL_SUBDOMAIN,
  machinepass=ctx.acct_pass, serverrole=domain 
controller,
- lp=ctx.lp, hostip=ctx.names.hostip, 
hostip6=ctx.names.hostip6)
+ lp=ctx.lp, hostip=ctx.names.hostip, 
hostip6=ctx.names.hostip6,
+ dns_backend=BIND9_FLATFILE)
 print(Provision OK for domain %s % ctx.names.dnsdomain)
 
 
diff --git a/source4/scripting/python/samba/provision/__init__.py 
b/source4/scripting/python/samba/provision/__init__.py
index a3633ab..5e7e374 100644
--- a/source4/scripting/python/samba/provision/__init__.py
+++ b/source4/scripting/python/samba/provision/__init__.py
@@ -1625,10 +1625,6 @@ def provision_fill(samdb, secrets_ldb, logger, names, 
paths,
 dnsdomain=names.dnsdomain,
 dns_keytab_path=paths.dns_keytab, dnspass=dnspass)
 
-# Default DNS backend is BIND9 using txt files for zone information
-if not dns_backend:
-dns_backend = BIND9
-
 setup_ad_dns(samdb, names, logger, hostip=hostip, hostip6=hostip6,
  dns_backend=dns_backend, os_level=dom_for_fun_level)
 
@@ -1640,7 +1636,7 @@ def provision_fill(samdb, secrets_ldb, logger, names, 
paths,
 
 # Only make a zone file on the first DC, it should be
 # replicated with DNS replication
-if dns_backend == BIND9:
+if dns_backend == BIND9_FLATFILE:
 create_zone_file(lp, logger, paths, 

[SCM] Samba Shared Repository - branch master updated

2011-10-17 Thread Stefan Metzmacher
The branch, master has been updated
   via  2a2dd6f s3: Before adding KDC's to the krb5.conf, cldap ping them
   via  41a0e96 Add cldap_multi_netlogon_send/recv
  from  8c07686 s4 provision: DNS backend should be set by caller

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 2a2dd6ff5e057b1dec37a212b0a5eeb2a8392c36
Author: Volker Lendecke v...@samba.org
Date:   Wed Oct 12 19:41:45 2011 +0200

s3: Before adding KDC's to the krb5.conf, cldap ping them

Some Kerberos libraries don't do proper failover. This fixes the situation
where a KDC exists in DNS but is not reachable for some reason.

Ported to master by Stefan Metzmacher me...@samba.org

Autobuild-User: Stefan Metzmacher me...@samba.org
Autobuild-Date: Mon Oct 17 11:25:37 CEST 2011 on sn-devel-104

commit 41a0e96724dc05752b1bdb86fc946c820be16632
Author: Volker Lendecke v...@samba.org
Date:   Thu Sep 29 13:30:30 2011 +0200

Add cldap_multi_netlogon_send/recv

Make ads_cldap_netlogon use it. It does not need the fancy multi stuff, but
excercising that code more often is better. And because we have to ask over 
the
network, the additional load should be neglectable.

Ported to master by Stefan Metzmacher me...@samba.org

---

Summary of changes:
 source3/Makefile.in   |3 +-
 source3/libads/cldap.c|  338 +++--
 source3/libads/cldap.h|   18 +++
 source3/libads/kerberos.c |  148 ++---
 source3/wscript_build |2 +-
 5 files changed, 418 insertions(+), 91 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/Makefile.in b/source3/Makefile.in
index 6b979d4..f2bab71 100644
--- a/source3/Makefile.in
+++ b/source3/Makefile.in
@@ -1532,7 +1532,8 @@ NTLM_AUTH_OBJ = ${NTLM_AUTH_OBJ1} $(LIBSAMBA_OBJ) 
$(POPT_LIB_OBJ) \
$(PASSDB_OBJ) $(GROUPDB_OBJ) \
$(SMBLDAP_OBJ) $(LIBNMB_OBJ) \
$(WBCOMMON_OBJ) \
-   $(LIBCLI_LDAP_NDR_OBJ) \
+   $(LIBNBT_OBJ) \
+   $(CLDAP_OBJ) \
$(DRSUAPI_OBJ) \
$(LIBNDR_GEN_OBJ0) $(LIBNDR_NETLOGON_OBJ) @BUILD_INIPARSER@
 
diff --git a/source3/libads/cldap.c b/source3/libads/cldap.c
index 4f725a0..0241236 100644
--- a/source3/libads/cldap.c
+++ b/source3/libads/cldap.c
@@ -23,8 +23,286 @@
 #include includes.h
 #include ../libcli/cldap/cldap.h
 #include ../lib/tsocket/tsocket.h
+#include ../lib/util/tevent_ntstatus.h
 #include libads/cldap.h
 
+struct cldap_multi_netlogon_state {
+   struct tevent_context *ev;
+   const struct tsocket_address * const *servers;
+   int num_servers;
+   const char *domain;
+   const char *hostname;
+   unsigned ntversion;
+   int min_servers;
+
+   struct cldap_socket **cldap;
+   struct tevent_req **subreqs;
+   int num_sent;
+   int num_received;
+   int num_good_received;
+   struct cldap_netlogon *ios;
+   struct netlogon_samlogon_response **responses;
+};
+
+static void cldap_multi_netlogon_done(struct tevent_req *subreq);
+static void cldap_multi_netlogon_next(struct tevent_req *subreq);
+
+/*
+ * Do a parallel cldap ping to the servers. The first min_servers
+ * are fired directly, the remaining ones in 100msec intervals. If
+ * min_servers responses came in successfully, we immediately reply,
+ * not waiting for the remaining ones.
+ */
+
+struct tevent_req *cldap_multi_netlogon_send(
+   TALLOC_CTX *mem_ctx, struct tevent_context *ev,
+   const struct tsocket_address * const *servers, int num_servers,
+   const char *domain, const char *hostname, unsigned ntversion,
+   int min_servers)
+{
+   struct tevent_req *req, *subreq;
+   struct cldap_multi_netlogon_state *state;
+   int i;
+
+   req = tevent_req_create(mem_ctx, state,
+   struct cldap_multi_netlogon_state);
+   if (req == NULL) {
+   return NULL;
+   }
+   state-ev = ev;
+   state-servers = servers;
+   state-num_servers = num_servers;
+   state-domain = domain;
+   state-hostname = hostname;
+   state-ntversion = ntversion;
+   state-min_servers = min_servers;
+
+   if (min_servers  num_servers) {
+   tevent_req_nterror(req, NT_STATUS_INVALID_PARAMETER);
+   return tevent_req_post(req, ev);
+   }
+
+   state-subreqs = talloc_zero_array(state,
+  struct tevent_req *,
+  num_servers);
+   if (tevent_req_nomem(state-subreqs, req)) {
+   return tevent_req_post(req, ev);
+   }
+
+   state-cldap = talloc_zero_array(state,
+struct cldap_socket *,
+   

autobuild: intermittent test failure detected

2011-10-17 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2011-10-17-1202/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2011-10-17-1202/samba3.stderr
   http://git.samba.org/autobuild.flakey/2011-10-17-1202/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2011-10-17-1202/samba4.stderr
   http://git.samba.org/autobuild.flakey/2011-10-17-1202/samba4.stdout
  
The top commit at the time of the failure was:

commit 2a2dd6ff5e057b1dec37a212b0a5eeb2a8392c36
Author: Volker Lendecke v...@samba.org
Date:   Wed Oct 12 19:41:45 2011 +0200

s3: Before adding KDC's to the krb5.conf, cldap ping them

Some Kerberos libraries don't do proper failover. This fixes the situation
where a KDC exists in DNS but is not reachable for some reason.

Ported to master by Stefan Metzmacher me...@samba.org

Autobuild-User: Stefan Metzmacher me...@samba.org
Autobuild-Date: Mon Oct 17 11:25:37 CEST 2011 on sn-devel-104


[SCM] Samba Shared Repository - branch master updated

2011-10-17 Thread Stefan Metzmacher
The branch, master has been updated
   via  ebcf45b s4:dlz_bind9: add no memory checks
   via  d9558fd s4:dlz_bind9: Copy dn before changing in b9_has_soa
   via  c88195f s4:dlz_bind9: add missing earch bases for windows 2000 
domains
  from  2a2dd6f s3: Before adding KDC's to the krb5.conf, cldap ping them

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit ebcf45b5506013b2cbcc706e09f26198c07382d3
Author: Stefan Metzmacher me...@samba.org
Date:   Mon Oct 17 12:10:10 2011 +0200

s4:dlz_bind9: add no memory checks

metze

Autobuild-User: Stefan Metzmacher me...@samba.org
Autobuild-Date: Mon Oct 17 14:07:25 CEST 2011 on sn-devel-104

commit d9558fdc34a690230cd4927df45f4353bd5cc498
Author: Stefan Gohmann gohm...@univention.de
Date:   Thu Oct 13 15:23:58 2011 +0200

s4:dlz_bind9: Copy dn before changing in b9_has_soa

Signed-off-by: Stefan Metzmacher me...@samba.org

commit c88195fbe3a6b201f24ffb1ababdac22dd2c33a3
Author: Stefan Gohmann gohm...@univention.de
Date:   Fri Sep 16 15:36:08 2011 +0200

s4:dlz_bind9: add missing earch bases for windows 2000 domains

By default the samba4 dlz_bind9 backend searches under
CN=MicrosoftDNS,DC=DomainDnsZones and CN=MicrosoftDNS,DC=ForestDnsZones.

In my samba4 test setup all DNS zones are under CN=MicrosoftDNS,CN=System.
After adding the attached patch it works fine for me.

Signed-off-by: Stefan Metzmacher me...@samba.org

---

Summary of changes:
 source4/dns_server/dlz_bind9.c |   11 ++-
 1 files changed, 10 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/dns_server/dlz_bind9.c b/source4/dns_server/dlz_bind9.c
index 4873112..e37a66e 100644
--- a/source4/dns_server/dlz_bind9.c
+++ b/source4/dns_server/dlz_bind9.c
@@ -53,6 +53,7 @@ struct dlz_bind9_data {
 static const char *zone_prefixes[] = {
CN=MicrosoftDNS,DC=DomainDnsZones,
CN=MicrosoftDNS,DC=ForestDnsZones,
+   CN=MicrosoftDNS,CN=System,
NULL
 };
 
@@ -1014,10 +1015,18 @@ _PUBLIC_ isc_result_t dlz_configure(dns_view_t *view, 
void *dbdata)
for (j=0; jres-count; j++) {
isc_result_t result;
const char *zone = 
ldb_msg_find_attr_as_string(res-msgs[j], name, NULL);
+   struct ldb_dn *zone_dn;
+
if (zone == NULL) {
continue;
}
-   if (!b9_has_soa(state, dn, zone)) {
+   zone_dn = ldb_dn_copy(tmp_ctx, dn);
+   if (zone_dn == NULL) {
+   talloc_free(tmp_ctx);
+   return ISC_R_NOMEMORY;
+   }
+
+   if (!b9_has_soa(state, zone_dn, zone)) {
continue;
}
result = state-writeable_zone(view, zone);


-- 
Samba Shared Repository


autobuild: intermittent test failure detected

2011-10-17 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2011-10-17-1647/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2011-10-17-1647/samba3.stderr
   http://git.samba.org/autobuild.flakey/2011-10-17-1647/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2011-10-17-1647/samba4.stderr
   http://git.samba.org/autobuild.flakey/2011-10-17-1647/samba4.stdout
  
The top commit at the time of the failure was:

commit ebcf45b5506013b2cbcc706e09f26198c07382d3
Author: Stefan Metzmacher me...@samba.org
Date:   Mon Oct 17 12:10:10 2011 +0200

s4:dlz_bind9: add no memory checks

metze

Autobuild-User: Stefan Metzmacher me...@samba.org
Autobuild-Date: Mon Oct 17 14:07:25 CEST 2011 on sn-devel-104


[SCM] Samba Shared Repository - branch master updated

2011-10-17 Thread Günther Deschner
The branch, master has been updated
   via  b96a9e1 s3-waf: make sure we always build example pdb modules with 
--enable-developer.
   via  bc536d4 s3-passdb: fix the build of example pdb test module.
   via  234f06e s3-auth: remove dead prototype.
   via  235f78a s3-waf: make sure we always build example auth modules with 
--enable-developer.
   via  329c4d1 s3-auth: fix the build of skel auth example module.
  from  ebcf45b s4:dlz_bind9: add no memory checks

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit b96a9e1c5b23271f42734a8045e4d95a42e8e33f
Author: Günther Deschner g...@samba.org
Date:   Mon Oct 17 16:08:50 2011 +0200

s3-waf: make sure we always build example pdb modules with 
--enable-developer.

Guenther

Autobuild-User: Günther Deschner g...@samba.org
Autobuild-Date: Mon Oct 17 17:39:36 CEST 2011 on sn-devel-104

commit bc536d4893678eec2a3fbba40fb133a24761992a
Author: Günther Deschner g...@samba.org
Date:   Mon Oct 17 16:08:04 2011 +0200

s3-passdb: fix the build of example pdb test module.

Guenther

commit 234f06eae1a05a232ec1d09250badd6706b8beb2
Author: Günther Deschner g...@samba.org
Date:   Mon Oct 17 15:56:08 2011 +0200

s3-auth: remove dead prototype.

Guenther

commit 235f78aa955084c87fbc9f3bc9f556a9811a71c4
Author: Günther Deschner g...@samba.org
Date:   Mon Oct 17 15:54:17 2011 +0200

s3-waf: make sure we always build example auth modules with 
--enable-developer.

Guenther

commit 329c4d12f9a08d9499f9982076bdd9e614fbdd63
Author: Günther Deschner g...@samba.org
Date:   Mon Oct 17 15:53:19 2011 +0200

s3-auth: fix the build of skel auth example module.

Guenther

---

Summary of changes:
 examples/auth/auth_skel.c   |   25 -
 examples/auth/wscript_build |9 +
 examples/pdb/test.c |   33 +
 examples/pdb/wscript_build  |   10 ++
 source3/auth/proto.h|1 -
 source3/wscript |1 +
 source3/wscript_build   |2 ++
 7 files changed, 43 insertions(+), 38 deletions(-)
 create mode 100644 examples/auth/wscript_build
 create mode 100644 examples/pdb/wscript_build


Changeset truncated at 500 lines:

diff --git a/examples/auth/auth_skel.c b/examples/auth/auth_skel.c
index e6cbd73..4352251 100644
--- a/examples/auth/auth_skel.c
+++ b/examples/auth/auth_skel.c
@@ -19,6 +19,7 @@
 */
 
 #include includes.h
+#include auth.h
 
 #undef DBGC_CLASS
 #define DBGC_CLASS DBGC_AUTH
@@ -26,8 +27,8 @@
 static NTSTATUS check_skel_security(const struct auth_context *auth_context,
 void *my_private_data, 
 TALLOC_CTX *mem_ctx,
-const auth_usersupplied_info 
*user_info, 
-auth_serversupplied_info **server_info)
+const struct auth_usersupplied_info 
*user_info,
+struct auth_serversupplied_info 
**server_info)
 {
if (!user_info || !auth_context) {
return NT_STATUS_LOGON_FAILURE;
@@ -43,12 +44,26 @@ static NTSTATUS check_skel_security(const struct 
auth_context *auth_context,
 /* module initialisation */
 NTSTATUS auth_init_skel(struct auth_context *auth_context, const char *param, 
auth_methods **auth_method) 
 {
-   if (!make_auth_methods(auth_context, auth_method)) {
+   struct auth_methods *result;
+
+   result = talloc_zero(auth_context, struct auth_methods);
+   if (result == NULL) {
return NT_STATUS_NO_MEMORY;
}
+   result-name = skel;
+   result-auth = check_skel_security;
+
+   if (param  *param) {
+   /* we load the 'fallback' module - if skel isn't here, call this
+  module */
+   auth_methods *priv;
+   if (!load_auth_module(auth_context, param, priv)) {
+   return NT_STATUS_UNSUCCESSFUL;
+   }
+   result-private_data = (void *)priv;
+   }
 
-   (*auth_method)-auth = check_skel_security;
-   (*auth_method)-name = skel;
+*auth_method = result;
return NT_STATUS_OK;
 }
 
diff --git a/examples/auth/wscript_build b/examples/auth/wscript_build
new file mode 100644
index 000..91f5302
--- /dev/null
+++ b/examples/auth/wscript_build
@@ -0,0 +1,9 @@
+#!/usr/bin/env python
+
+bld.SAMBA3_MODULE('auth_skel',
+ subsystem='auth',
+ source='auth_skel.c',
+ deps='samba-util',
+ init_function='',
+ internal_module=bld.SAMBA3_IS_STATIC_MODULE('auth_skel'),
+ enabled=bld.SAMBA3_IS_ENABLED_MODULE('auth_skel'))
diff --git 

[SCM] Samba Shared Repository - branch master updated

2011-10-17 Thread Jeremy Allison
The branch, master has been updated
   via  c3bdcab First part of fix for bug #8419 - Make VFS op streaminfo 
stackable.
  from  b96a9e1 s3-waf: make sure we always build example pdb modules with 
--enable-developer.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit c3bdcab5161107be8155a7913d9cb325383a781d
Author: Frank Lahm frankl...@googlemail.com
Date:   Mon Oct 17 11:10:29 2011 -0700

First part of fix for bug #8419 - Make VFS op streaminfo stackable.

Autobuild-User: Jeremy Allison j...@samba.org
Autobuild-Date: Mon Oct 17 21:39:32 CEST 2011 on sn-devel-104

---

Summary of changes:
 source3/lib/filename_util.c |2 +-
 source3/smbd/close.c|6 +++---
 source3/smbd/filename.c |4 ++--
 source3/smbd/nttrans.c  |4 ++--
 source3/smbd/open.c |6 +++---
 source3/smbd/proto.h|6 ++
 source3/smbd/trans2.c   |5 ++---
 source3/smbd/vfs.c  |   15 +++
 8 files changed, 34 insertions(+), 14 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/lib/filename_util.c b/source3/lib/filename_util.c
index 2405183..85d9fb5 100644
--- a/source3/lib/filename_util.c
+++ b/source3/lib/filename_util.c
@@ -47,7 +47,7 @@ NTSTATUS get_full_smb_filename(TALLOC_CTX *ctx,
 
 /**
  * There are actually legitimate callers of this such as functions that
- * enumerate streams using the SMB_VFS_STREAMINFO interface and then want to
+ * enumerate streams using the vfs_streaminfo interface and then want to
  * operate on each stream.
  */
 NTSTATUS create_synthetic_smb_fname(TALLOC_CTX *ctx, const char *base_name,
diff --git a/source3/smbd/close.c b/source3/smbd/close.c
index 33e497c..b736432 100644
--- a/source3/smbd/close.c
+++ b/source3/smbd/close.c
@@ -212,8 +212,8 @@ NTSTATUS delete_all_streams(connection_struct *conn, const 
char *fname)
TALLOC_CTX *frame = talloc_stackframe();
NTSTATUS status;
 
-   status = SMB_VFS_STREAMINFO(conn, NULL, fname, talloc_tos(),
-   num_streams, stream_info);
+   status = vfs_streaminfo(conn, NULL, fname, talloc_tos(),
+   num_streams, stream_info);
 
if (NT_STATUS_EQUAL(status, NT_STATUS_NOT_IMPLEMENTED)) {
DEBUG(10, (no streams around\n));
@@ -222,7 +222,7 @@ NTSTATUS delete_all_streams(connection_struct *conn, const 
char *fname)
}
 
if (!NT_STATUS_IS_OK(status)) {
-   DEBUG(10, (SMB_VFS_STREAMINFO failed: %s\n,
+   DEBUG(10, (vfs_streaminfo failed: %s\n,
   nt_errstr(status)));
goto fail;
}
diff --git a/source3/smbd/filename.c b/source3/smbd/filename.c
index 7fe7cc8..b7c7831 100644
--- a/source3/smbd/filename.c
+++ b/source3/smbd/filename.c
@@ -1184,8 +1184,8 @@ static NTSTATUS build_stream_path(TALLOC_CTX *mem_ctx,
}
 
/* Fall back to a case-insensitive scan of all streams on the file. */
-   status = SMB_VFS_STREAMINFO(conn, NULL, smb_fname-base_name, mem_ctx,
-   num_streams, streams);
+   status = vfs_streaminfo(conn, NULL, smb_fname-base_name, mem_ctx,
+   num_streams, streams);
 
if (NT_STATUS_EQUAL(status, NT_STATUS_OBJECT_NAME_NOT_FOUND)) {
SET_STAT_INVALID(smb_fname-st);
diff --git a/source3/smbd/nttrans.c b/source3/smbd/nttrans.c
index 2d6fa26..8e78d3c 100644
--- a/source3/smbd/nttrans.c
+++ b/source3/smbd/nttrans.c
@@ -702,7 +702,7 @@ void reply_ntcreate_and_X(struct smb_request *req)
if (NT_STATUS_IS_OK(status)  num_names) {
file_status = ~NO_EAS;
}
-   status = SMB_VFS_STREAMINFO(conn, NULL, smb_fname-base_name, 
ctx,
+   status = vfs_streaminfo(conn, NULL, smb_fname-base_name, ctx,
num_streams, streams);
/* There is always one stream, ::$DATA. */
if (NT_STATUS_IS_OK(status)  num_streams  1) {
@@ -1283,7 +1283,7 @@ static void call_nt_transact_create(connection_struct 
*conn,
if (NT_STATUS_IS_OK(status)  num_names) {
file_status = ~NO_EAS;
}
-   status = SMB_VFS_STREAMINFO(conn, NULL, smb_fname-base_name, 
ctx,
+   status = vfs_streaminfo(conn, NULL, smb_fname-base_name, ctx,
num_streams, streams);
/* There is always one stream, ::$DATA. */
if (NT_STATUS_IS_OK(status)  num_streams  1) {
diff --git a/source3/smbd/open.c b/source3/smbd/open.c
index b897c8a..f3fccd0 100644
--- a/source3/smbd/open.c
+++ b/source3/smbd/open.c
@@ -2972,8 +2972,8 @@ NTSTATUS open_streams_for_delete(connection_struct *conn,
TALLOC_CTX *frame = 

[SCM] Samba Shared Repository - branch master updated

2011-10-17 Thread Jeremy Allison
The branch, master has been updated
   via  c52b571 Fix uninitialized memory problem in group_sids_to_info3 
(fixes bug #8455).
  from  c3bdcab First part of fix for bug #8419 - Make VFS op streaminfo 
stackable.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit c52b571506874987ba626c25e9692fbe2251b7e2
Author: Wilco Baan Hofman wi...@baanhofman.nl
Date:   Mon Oct 17 21:24:41 2011 +0200

Fix uninitialized memory problem in group_sids_to_info3 (fixes bug #8455).

Autobuild-User: Jeremy Allison j...@samba.org
Autobuild-Date: Mon Oct 17 23:32:58 CEST 2011 on sn-devel-104

---

Summary of changes:
 source3/auth/server_info.c |4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/auth/server_info.c b/source3/auth/server_info.c
index fd21010..5b2706a 100644
--- a/source3/auth/server_info.c
+++ b/source3/auth/server_info.c
@@ -269,8 +269,8 @@ static NTSTATUS group_sids_to_info3(struct netr_SamInfo3 
*info3,
if (info3-base.primary_gid == rid) continue;
 
/* store domain group rid */
-   groups-rids[i].rid = rid;
-   groups-rids[i].attributes = attributes;
+   groups-rids[groups-count].rid = rid;
+   groups-rids[groups-count].attributes = attributes;
groups-count++;
continue;
}


-- 
Samba Shared Repository


autobuild: intermittent test failure detected

2011-10-17 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2011-10-18-0102/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2011-10-18-0102/samba3.stderr
   http://git.samba.org/autobuild.flakey/2011-10-18-0102/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2011-10-18-0102/samba4.stderr
   http://git.samba.org/autobuild.flakey/2011-10-18-0102/samba4.stdout
  
The top commit at the time of the failure was:

commit c52b571506874987ba626c25e9692fbe2251b7e2
Author: Wilco Baan Hofman wi...@baanhofman.nl
Date:   Mon Oct 17 21:24:41 2011 +0200

Fix uninitialized memory problem in group_sids_to_info3 (fixes bug #8455).

Autobuild-User: Jeremy Allison j...@samba.org
Autobuild-Date: Mon Oct 17 23:32:58 CEST 2011 on sn-devel-104


[SCM] CTDB repository - branch master updated - ctdb-1.11-76-gc774e17

2011-10-17 Thread Ronnie Sahlberg
The branch, master has been updated
   via  c774e17c78f181833ca688aa48b42e7b90c822d8 (commit)
  from  dd9f82dbe2346c7143b0229e3611c402ee8c4025 (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=master


- Log -
commit c774e17c78f181833ca688aa48b42e7b90c822d8
Author: Martin Schwenke mar...@meltin.net
Date:   Sun Sep 25 14:48:25 2011 +1000

Web - add me as a developer.  :-)

Signed-off-by: Martin Schwenke mar...@meltin.net

---

Summary of changes:
 web/index.html |1 +
 1 files changed, 1 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/web/index.html b/web/index.html
index 658a71e..d9d03a2 100644
--- a/web/index.html
+++ b/web/index.html
@@ -134,6 +134,7 @@ projects that want to make their services cluster aware 
using CTDB.
 liPeter Somogyi/li
 lia href=http://sernet.de/Samba/;Volker Lendecke/a/li
 liStefan Metzmacher/li
+lia href=http://meltin.net/people/martin/;Martin Schwenke/a/li
 /ul
 
 !--#include virtual=footer.html --


-- 
CTDB repository


[SCM] CTDB repository - branch master updated - ctdb-1.11-77-g02184bd

2011-10-17 Thread Ronnie Sahlberg
The branch, master has been updated
   via  02184bd5b9ab94cdf2b9ff92e56a509f92f9e4aa (commit)
  from  c774e17c78f181833ca688aa48b42e7b90c822d8 (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=master


- Log -
commit 02184bd5b9ab94cdf2b9ff92e56a509f92f9e4aa
Author: Martin Schwenke mar...@meltin.net
Date:   Fri Oct 7 14:59:46 2011 +1100

onnode: unset EXTRA_SSH_OPTS when using fakessh

This case was never tested and fakessh obviously won't handle the
extra arguments.

Signed-off-by: Martin Schwenke mar...@meltin.net

---

Summary of changes:
 tools/onnode |1 +
 1 files changed, 1 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/tools/onnode b/tools/onnode
index 804ab09..4bd8243 100755
--- a/tools/onnode
+++ b/tools/onnode
@@ -339,6 +339,7 @@ $current  command=cd $PWD  $command
 ssh_opts=
 if [ -n $CTDB_NODES_SOCKETS ] ; then
 SSH=fakessh
+EXTRA_SSH_OPTS=
 else 
 # Could 2/dev/null || true but want to see errors from typos in file.
 [ -r ${ctdb_base}/onnode.conf ]  . ${ctdb_base}/onnode.conf


-- 
CTDB repository


[SCM] CTDB repository - branch master updated - ctdb-1.11-81-g99de5bc

2011-10-17 Thread Ronnie Sahlberg
The branch, master has been updated
   via  99de5bceb788ba56ebc052c05d29a834ba2496fa (commit)
   via  2d6a800a789ca59fdab92422f98a4e05ba55f34c (commit)
   via  395ddff90281189ebdab77620b560d233e04 (commit)
   via  1f1534435b9d5f464604e28a8cce2cd0a779ef68 (commit)
  from  02184bd5b9ab94cdf2b9ff92e56a509f92f9e4aa (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=master


- Log -
commit 99de5bceb788ba56ebc052c05d29a834ba2496fa
Merge: 02184bd5b9ab94cdf2b9ff92e56a509f92f9e4aa 
2d6a800a789ca59fdab92422f98a4e05ba55f34c
Author: Ronnie Sahlberg ronniesahlb...@gmail.com
Date:   Tue Oct 18 11:54:55 2011 +1100

Merge remote branch 'martins/tests'

commit 2d6a800a789ca59fdab92422f98a4e05ba55f34c
Author: Martin Schwenke mar...@meltin.net
Date:   Fri Sep 2 13:20:50 2011 +1000

Tests - simple integration - do a ctdb sync after restarting the cluster

There looks to be a minor race where IPs haven't yet been reallocated
but the cluster is healthy.  This should fix it.

Signed-off-by: Martin Schwenke mar...@meltin.net

commit 395ddff90281189ebdab77620b560d233e04
Author: Martin Schwenke mar...@meltin.net
Date:   Thu Sep 15 17:09:36 2011 +1000

Tests - IP allocation - initial unit tests

Signed-off-by: Martin Schwenke mar...@meltin.net

commit 1f1534435b9d5f464604e28a8cce2cd0a779ef68
Author: Martin Schwenke mar...@meltin.net
Date:   Thu Sep 15 17:08:18 2011 +1000

Tests - IP allocation - allow more interesting node states to be specified

Node states on the command line are now comma-separated hex numbers,
so all flag states can be expressed.

Signed-off-by: Martin Schwenke mar...@meltin.net

---

Summary of changes:
 tests/scripts/ctdb_test_functions.bash  |3 +
 tests/src/ctdb_takeover_tests.c |   27 +++--
 tests/takeover/common.sh|   70 +
 tests/{onnode = takeover}/run_tests.sh |8 +-
 tests/takeover/testcases/lcp2.001.sh|   31 ++
 tests/takeover/testcases/lcp2.002.sh|   31 ++
 tests/takeover/testcases/lcp2.003.sh|   31 ++
 tests/takeover/testcases/lcp2.004.sh|   37 +++
 tests/takeover/testcases/lcp2.005.sh|  163 +++
 tests/takeover/testcases/lcp2.006.sh|   31 ++
 tests/takeover/testcases/lcp2.007.sh|   31 ++
 tests/takeover/testcases/lcp2.008.sh|   31 ++
 tests/takeover/testcases/lcp2.009.sh|   31 ++
 tests/takeover/testcases/nondet.001.sh  |   29 ++
 tests/takeover/testcases/nondet.002.sh  |   29 ++
 tests/takeover/testcases/nondet.003.sh  |   29 ++
 16 files changed, 597 insertions(+), 15 deletions(-)
 create mode 100644 tests/takeover/common.sh
 copy tests/{onnode = takeover}/run_tests.sh (57%)
 create mode 100755 tests/takeover/testcases/lcp2.001.sh
 create mode 100755 tests/takeover/testcases/lcp2.002.sh
 create mode 100755 tests/takeover/testcases/lcp2.003.sh
 create mode 100755 tests/takeover/testcases/lcp2.004.sh
 create mode 100755 tests/takeover/testcases/lcp2.005.sh
 create mode 100755 tests/takeover/testcases/lcp2.006.sh
 create mode 100755 tests/takeover/testcases/lcp2.007.sh
 create mode 100755 tests/takeover/testcases/lcp2.008.sh
 create mode 100755 tests/takeover/testcases/lcp2.009.sh
 create mode 100755 tests/takeover/testcases/nondet.001.sh
 create mode 100755 tests/takeover/testcases/nondet.002.sh
 create mode 100755 tests/takeover/testcases/nondet.003.sh


Changeset truncated at 500 lines:

diff --git a/tests/scripts/ctdb_test_functions.bash 
b/tests/scripts/ctdb_test_functions.bash
index 13797dc..670b91e 100644
--- a/tests/scripts/ctdb_test_functions.bash
+++ b/tests/scripts/ctdb_test_functions.bash
@@ -929,6 +929,9 @@ restart_ctdb ()
continue
fi
 
+   echo Doing a sync...
+   onnode -q 0 $CTDB sync
+
echo ctdb is ready
return 0
 done
diff --git a/tests/src/ctdb_takeover_tests.c b/tests/src/ctdb_takeover_tests.c
index 5fd2332..a150018 100644
--- a/tests/src/ctdb_takeover_tests.c
+++ b/tests/src/ctdb_takeover_tests.c
@@ -183,11 +183,23 @@ void ctdb_test_init(const char nodestates[],
struct ctdb_public_ip_list *t;
struct ctdb_all_public_ips *available_public_ips;
int i, numips, numnodes;
-
-   numnodes = strlen(nodestates);
+   /* This is test code and this is unreasonably big... :-) */
+   uint32_t nodeflags[256];
+   char *tok, *ns;
 
*ctdb = talloc_zero(NULL, struct ctdb_context);
 
+   /* Avoid that const */
+   ns = talloc_strdup(*ctdb, nodestates);
+
+   numnodes = 0;
+   tok = strtok(ns, ,);
+   while (tok != NULL) {
+   nodeflags[numnodes] = (uint32_t) strtol(tok, NULL, 16);
+   numnodes++;
+   tok = strtok(NULL, ,);
+   }
+   
/* Fake things up... */
   

[SCM] Samba Shared Repository - branch master updated

2011-10-17 Thread Andrew Tridgell
The branch, master has been updated
   via  75953f1 ldb: fixed a race in ldb initialisation
   via  3a4fa65 libsmbclient: initial ABI signatures
   via  d226acd libsmbclient: add ABI checking and pc file
  from  c52b571 Fix uninitialized memory problem in group_sids_to_info3 
(fixes bug #8455).

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 75953f18469fa8746d9d8ad203bcbd0df9dd
Author: Andrew Tridgell tri...@samba.org
Date:   Tue Oct 18 11:21:34 2011 +1100

ldb: fixed a race in ldb initialisation

This fixes a race when two processes initialise the same ldb database
at the same time. One of them could fail due to the other creating the
@BASEINFO record first.

Pair-Programmed-With: Andrew Bartlett abart...@samba.org

Autobuild-User: Andrew Tridgell tri...@samba.org
Autobuild-Date: Tue Oct 18 03:54:42 CEST 2011 on sn-devel-104

commit 3a4fa654d5ba42ae78a132f54a7edfa722b367f0
Author: Andrew Tridgell tri...@samba.org
Date:   Thu Oct 13 10:03:55 2011 +1100

libsmbclient: initial ABI signatures

commit d226acd97a2aa79cd1710c2b07d00a2ed3c93d6e
Author: Andrew Tridgell tri...@samba.org
Date:   Thu Oct 13 10:02:17 2011 +1100

libsmbclient: add ABI checking and pc file

this gives us ABI checking for libsmbclient so that the waf build will
prevent ABI breakage, and a public version number. The addition of the
pc file makes this library available via pkgconfig, including querying
of the version number

Pair-Programmed-With: Andrew Bartlett abart...@samba.org

---

Summary of changes:
 lib/ldb/ldb_tdb/ldb_cache.c |   10 ++-
 source3/libsmb/ABI/smbclient-0.1.0.sigs |  170 +++
 source3/libsmb/smbclient.pc.in  |   11 ++
 source3/wscript_build   |6 +-
 4 files changed, 194 insertions(+), 3 deletions(-)
 create mode 100644 source3/libsmb/ABI/smbclient-0.1.0.sigs
 create mode 100644 source3/libsmb/smbclient.pc.in


Changeset truncated at 500 lines:

diff --git a/lib/ldb/ldb_tdb/ldb_cache.c b/lib/ldb/ldb_tdb/ldb_cache.c
index e54ceaa..0b93021 100644
--- a/lib/ldb/ldb_tdb/ldb_cache.c
+++ b/lib/ldb/ldb_tdb/ldb_cache.c
@@ -308,9 +308,17 @@ int ltdb_cache_load(struct ldb_module *module)

/* possibly initialise the baseinfo */
if (r == LDB_ERR_NO_SUCH_OBJECT) {
-   if (ltdb_baseinfo_init(module) != LDB_SUCCESS) {
+
+   if (tdb_transaction_start(ltdb-tdb) != 0) {
goto failed;
}
+
+   /* error handling for ltdb_baseinfo_init() is by
+  looking for the record again. */
+   ltdb_baseinfo_init(module);
+
+   tdb_transaction_commit(ltdb-tdb);
+
if (ltdb_search_dn1(module, baseinfo_dn, baseinfo) != 
LDB_SUCCESS) {
goto failed;
}
diff --git a/source3/libsmb/ABI/smbclient-0.1.0.sigs 
b/source3/libsmb/ABI/smbclient-0.1.0.sigs
new file mode 100644
index 000..bbd7700
--- /dev/null
+++ b/source3/libsmb/ABI/smbclient-0.1.0.sigs
@@ -0,0 +1,170 @@
+smbc_chmod: int (const char *, mode_t)
+smbc_close: int (int)
+smbc_closedir: int (int)
+smbc_creat: int (const char *, mode_t)
+smbc_fgetxattr: int (int, const char *, const void *, size_t)
+smbc_flistxattr: int (int, char *, size_t)
+smbc_free_context: int (SMBCCTX *, int)
+smbc_fremovexattr: int (int, const char *)
+smbc_fsetxattr: int (int, const char *, const void *, size_t, int)
+smbc_fstat: int (int, struct stat *)
+smbc_fstatvfs: int (int, struct statvfs *)
+smbc_ftruncate: int (int, off_t)
+smbc_getDebug: int (SMBCCTX *)
+smbc_getFunctionAddCachedServer: smbc_add_cached_srv_fn (SMBCCTX *)
+smbc_getFunctionAuthData: smbc_get_auth_data_fn (SMBCCTX *)
+smbc_getFunctionAuthDataWithContext: smbc_get_auth_data_with_context_fn 
(SMBCCTX *)
+smbc_getFunctionCheckServer: smbc_check_server_fn (SMBCCTX *)
+smbc_getFunctionChmod: smbc_chmod_fn (SMBCCTX *)
+smbc_getFunctionClose: smbc_close_fn (SMBCCTX *)
+smbc_getFunctionClosedir: smbc_closedir_fn (SMBCCTX *)
+smbc_getFunctionCreat: smbc_creat_fn (SMBCCTX *)
+smbc_getFunctionFstat: smbc_fstat_fn (SMBCCTX *)
+smbc_getFunctionFstatVFS: smbc_fstatvfs_fn (SMBCCTX *)
+smbc_getFunctionFstatdir: smbc_fstatdir_fn (SMBCCTX *)
+smbc_getFunctionFtruncate: smbc_ftruncate_fn (SMBCCTX *)
+smbc_getFunctionGetCachedServer: smbc_get_cached_srv_fn (SMBCCTX *)
+smbc_getFunctionGetdents: smbc_getdents_fn (SMBCCTX *)
+smbc_getFunctionGetxattr: smbc_getxattr_fn (SMBCCTX *)
+smbc_getFunctionListPrintJobs: smbc_list_print_jobs_fn (SMBCCTX *)
+smbc_getFunctionListxattr: smbc_listxattr_fn (SMBCCTX *)
+smbc_getFunctionLseek: smbc_lseek_fn (SMBCCTX *)
+smbc_getFunctionLseekdir: smbc_lseekdir_fn (SMBCCTX *)
+smbc_getFunctionMkdir: smbc_mkdir_fn (SMBCCTX *)

[SCM] Samba Shared Repository - branch master updated

2011-10-17 Thread Andrew Bartlett
The branch, master has been updated
   via  5954a37 lib/param: Remove parameters for wins and spoolss databases
   via  9d49945 ldb: Output more error information when a connect fails
   via  94fbe2e s3:auth_util: add the uid with WBC_ID_TYPE_BOTH also to the 
group array
   via  9068a30 s3-auth: use typedefs in auth.h
   via  e7d5f0a gensec: move event context from gensec_*_init() to 
gensec_update()
   via  0f2b27e s3-auth fix comment after s3 ntlmssp gensec module
   via  f88b686 gensec: move event-using code to gensec_update() hooks out 
of gensec_start*()
   via  3f9ab2e ntlmssp: Refuse to seal if we did not negotiate to sign
   via  86d684e gensec: Refuse to seal if we did not negotiate to sign
   via  09c5acd s4-auth: match the new s3 gensec client and always 
negotiate SIGN with SEAL
   via  0d5de7e gensec: Assert that we have not been subject to a downgrade 
attack in DCE/RPC clients
   via  5ef4e91 s3-smbd Give the nt error string when failing to set up 
encrypted transport
   via  5392491 s3-ntlmssp Implement the server-side auth_ntlmssp code as a 
GENSEC module
   via  c779647 gensec: an event context is no longer mandetory
   via  02eef4d ntlmssp: Put members from auth_ntlmssp_state into 
gensec_ntlmssp_state
   via  968b367 ntlmssp: Prepare gensec_ntlmssp_start() for broader use
   via  0c6e4ad ntlmssp: Move ntlmssp code to auth/ntlmssp
   via  5e6543a build: compile gensec_start.c and credentials.c in the 
autoconf build
   via  5f11615 s4-s3-upgrade: Give a better clue when we cannot open 
secrets.tdb
   via  d4d4f4e s3-auth Add my copyright
   via  734e5c5 credentials: Prioritise command-line specified options 
above defaults from smb.conf
   via  f8c6219 s4-selftest When testing for a credentials cache, do not 
specify a domain
   via  4c20276 Revert s4: Mark the winsreplication test as knownfail
   via  fe98fa6 Revert s4:selftest: skip flakey samba4.nbt.winsreplication 
for now
  from  75953f1 ldb: fixed a race in ldb initialisation

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 5954a37997a786a8808ee2544b594a0c90f1c893
Author: Andrew Bartlett abart...@samba.org
Date:   Tue Oct 18 11:33:33 2011 +1100

lib/param: Remove parameters for wins and spoolss databases

This removes the smb.conf parameters per-database, replacing these
with hard-coded database names in well known (and configurable)
directories.

The wins.ldb is now always in the state dir, rather than being in
both state and lock dir (ie, a bug).

Less smb.conf parameters means less parameters to try and sync up
between the loadparm subsystems.

Andrew Bartlett

Autobuild-User: Andrew Bartlett abart...@samba.org
Autobuild-Date: Tue Oct 18 05:39:54 CEST 2011 on sn-devel-104

commit 9d49945ff037e46f5083dc88816acafc2343a77c
Author: Andrew Bartlett abart...@samba.org
Date:   Tue Oct 18 11:30:52 2011 +1100

ldb: Output more error information when a connect fails

commit 94fbe2e4bdab8bcd021fedfff71114bbf3d72ca1
Author: Stefan Metzmacher me...@samba.org
Date:   Wed Oct 12 20:52:09 2011 +0200

s3:auth_util: add the uid with WBC_ID_TYPE_BOTH also to the group array

This will help with having sidHistory support in future.

metze

commit 9068a3080b6d8980f46cc141fdf76b832d38ecf7
Author: Andrew Bartlett abart...@samba.org
Date:   Mon Oct 17 15:56:44 2011 +1100

s3-auth: use typedefs in auth.h

Signed-off-by: Stefan Metzmacher me...@samba.org

commit e7d5f0a357c42593a015b80390dedf920117a7e2
Author: Andrew Bartlett abart...@samba.org
Date:   Mon Oct 17 09:22:33 2011 +0200

gensec: move event context from gensec_*_init() to gensec_update()

This avoids keeping the event context around on a the gensec_security
context structure long term.

In the Samba3 server, the event context we either supply is a NULL
pointer as no server-side modules currently use the event context.

Andrew Bartlett

Signed-off-by: Stefan Metzmacher me...@samba.org

commit 0f2b27e7d428e75b8e6079ee5f36a0cccd4d1785
Author: Andrew Bartlett abart...@samba.org
Date:   Mon Oct 17 14:00:39 2011 +1100

s3-auth fix comment after s3 ntlmssp gensec module

Signed-off-by: Stefan Metzmacher me...@samba.org

commit f88b686167d3cc0c8e2c6d00f12da4b0fccc767d
Author: Andrew Bartlett abart...@samba.org
Date:   Mon Oct 17 13:46:57 2011 +1100

gensec: move event-using code to gensec_update() hooks out of 
gensec_start*()

This ensures that only gensec_update() will require an event context 
argument
when the API is refactored.

Andrew Bartlett

commit 3f9ab2e8e7437ad2775ecd7b87c20804089b58cb
Author: Andrew Bartlett abart...@samba.org
Date:   Sat Oct 15 14:56:11 2011 +1100

ntlmssp: Refuse to seal if we did not negotiate to