Re: [Samba] net rpc testjoin error
please update, in wheezy samba is upgraded to 3.6.1 and test again. Louis -Oorspronkelijk bericht- Van: jh...@math.wisc.edu [mailto:samba-boun...@lists.samba.org] Namens John G. Heim Verzonden: 2011-12-22 20:28 Aan: samba@lists.samba.org Onderwerp: [Samba] net rpc testjoin error I have a PDC running debian wheezy with samba 3.5.11 . If I run 'net rpc testjoin' on my PDC, it does this: # net rpc testjoin get_schannel_session_key: could not fetch trust account password for domain 'UW-MATH' net_rpc_join_ok: failed to get schannel session key from server HUBBLE for domain UW-MATH. Error was NT_STATUS_CANT_ACCESS_DOMAIN_INFO Join to domain 'UW-MATH' is not valid: NT_STATUS_CANT_ACCESS_DOMAIN_INFO The backend is openldap and I can find the name of my PDC in the ldap database. It appears to have a valid machine trust account based on the ldap record. The main problem I'm having is that after I joined a Win7 machine to the domain, I can't log in as a domain user. It says The trust relationship between this workstation and the domain failed. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 4 Kerberos: Failed to decrypt PA-DATA
On 12/23/2011 06:34 AM, Günter Kukkukk wrote: On Thursday 22 December 2011 22:32:46 steve wrote: Hi everyone After almost 2 days up-time with Samba 4, it failed again. This time it simply will not restart. The krb5.conf had got corrupted. I replaced it with this one from /usr/local/samba/private /etc/krb5.conf [libdefaults] default_realm = HH3.SITE dns_lookup_realm = false dns_lookup_kdc = true It starts up OK: samba -i -d 3 lpcfg_load: refreshing parameters from /usr/local/samba/etc/smb.conf params.c:pm_process() - Processing configuration file /usr/local/samba/etc/smb.conf samba version 4.0.0alpha18-GIT-bfc7481 started. Copyright Andrew Tridgell and the Samba Team 1992-2011 GENSEC backend 'gssapi_spnego' registered GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend 'sasl-DIGEST-MD5' registered GENSEC backend 'spnego' registered GENSEC backend 'schannel' registered GENSEC backend 'ntlmssp' registered GENSEC backend 'krb5' registered GENSEC backend 'fake_gssapi_krb5' registered NTPTR backend 'simple_ldb' NTVFS backend 'default' for type 1 registered NTVFS backend 'posix' for type 1 registered NTVFS backend 'unixuid' for type 1 registered NTVFS backend 'unixuid' for type 3 registered NTVFS backend 'unixuid' for type 2 registered NTVFS backend 'cifs' for type 1 registered NTVFS backend 'smb2' for type 1 registered NTVFS backend 'simple' for type 1 registered NTVFS backend 'cifsposix' for type 1 registered NTVFS backend 'default' for type 3 registered NTVFS backend 'default' for type 2 registered NTVFS backend 'nbench' for type 1 registered PROCESS_MODEL 'single' registered PROCESS_MODEL 'standard' registered PROCESS_MODEL 'onefork' registered PROCESS_MODEL 'prefork' registered AUTH backend 'sam' registered AUTH backend 'sam_ignoredomain' registered AUTH backend 'anonymous' registered AUTH backend 'server' registered AUTH backend 'winbind' registered AUTH backend 'winbind_wbclient' registered AUTH backend 'name_to_ntstatus' registered AUTH backend 'fixed_challenge' registered AUTH backend 'unix' registered SHARE backend [classic] registered. SHARE backend [ldb] registered. ldb_wrap open of privilege.ldb samba: using 'standard' process model DCERPC endpoint server 'rpcecho' registered DCERPC endpoint server 'epmapper' registered DCERPC endpoint server 'remote' registered DCERPC endpoint server 'srvsvc' registered DCERPC endpoint server 'wkssvc' registered DCERPC endpoint server 'unixinfo' registered DCERPC endpoint server 'samr' registered DCERPC endpoint server 'winreg' registered DCERPC endpoint server 'netlogon' registered DCERPC endpoint server 'dssetup' registered DCERPC endpoint server 'lsarpc' registered DCERPC endpoint server 'backupkey' registered DCERPC endpoint server 'spoolss' registered DCERPC endpoint server 'drsuapi' registered DCERPC endpoint server 'browser' registered DCERPC endpoint server 'eventlog6' registered DCERPC endpoint server 'dnsserver' registered WARNING: no socket to connect to ldb_wrap open of secrets.ldb ldb_wrap open of idmap.ldb Calling DNS name update script Calling SPN name update script kccsrv_partition[DC=hh3,DC=site] loaded kccsrv_partition[CN=Configuration,DC=hh3,DC=site] loaded kccsrv_partition[CN=Schema,CN=Configuration,DC=hh3,DC=site] loaded kccsrv_partition[DC=DomainDnsZones,DC=hh3,DC=site] loaded dreplsrv_partition[CN=Configuration,DC=hh3,DC=site] loaded dreplsrv_partition[CN=Schema,CN=Configuration,DC=hh3,DC=site] loaded dreplsrv_partition[DC=hh3,DC=site] loaded dreplsrv_partition[DC=ForestDnsZones,DC=hh3,DC=site] loaded dreplsrv_partition[DC=DomainDnsZones,DC=hh3,DC=site] loaded kccsrv_partition[DC=ForestDnsZones,DC=hh3,DC=site] loaded Completed SPN update check OK Completed DNS update check OK Registered HH300 with 192.168.1.3 on interface 192.168.1.255 Registered HH303 with 192.168.1.3 on interface 192.168.1.255 Registered HH320 with 192.168.1.3 on interface 192.168.1.255 Registered CACTUS1b with 192.168.1.3 on interface 192.168.1.255 Registered CACTUS1c with 192.168.1.3 on interface 192.168.1.255 Registered CACTUS00 with 192.168.1.3 on interface 192.168.1.255 And this works: kinit administra...@hh3.site Password for administra...@hh3.site: Warning: Your password will expire in 40 days on Tue Jan 31 23:40:57 2012 Kerberos: AS-REQ administra...@hh3.site from ipv4:192.168.1.3:39949 for krbtgt/hh3.s...@hh3.site Kerberos: Client sent patypes: 149 Kerberos: Looking for PKINIT pa-data -- administra...@hh3.site Kerberos: Looking for ENC-TS pa-data -- administra...@hh3.site Kerberos: No preauth found, returning PREAUTH-REQUIRED -- administra...@hh3.site Kerberos: AS-REQ administra...@hh3.site from ipv4:192.168.1.3:33899 for krbtgt/hh3.s...@hh3.site Kerberos: Client sent patypes: encrypted-timestamp, 149 Kerberos: Looking for PKINIT pa-data -- administra...@hh3.site Kerberos: Looking for ENC-TS pa-data -- administra...@hh3.site Kerberos: ENC-TS Pre-authentication succeeded --
[Samba] samba 4 and nfs permissions
Hi We have AD users created with either samba-tool user add steve2 or using the windows AD frontend from a windows box. Users are created with home directories under /home/CACTUS On a win 7 client all works fine. Users can authenticate against the CACTUS domain and files are created with the correct uid:gid We joined an Ubuntu client to the domain using likewise. /home from the server is mounted on the client via nfs. On the ubuntu box, users can authenticate, but cannot enter their /home folder. Making the folder recursively 0777 allows them access but any new file created has the wrong uid:gid On the server: wbinfo -i steve2 gives /home/CACTUS/steve2 306:100 and I can use smbclient to create folders that show 306:100 On the ubuntu client however, any new files created have uid:gid of 1481114100:1481114113 Can I eliminate Samba 4 from debugging this problem? If so, then can anyone narrow down which of likewise or nfs is the culprit and if neither then any other alternatives. . . Thanks Steve. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Help - Mounting a Windows computer with two IP addresses
Hi all, I need to mount a Windows share locally on my laptop. However, I cannot do this via sudo mount -t smbfs //host_name/share_name /local_mount because the host_name has two IP addresses with it as shown by nmblookup //host_name. (That is, I try mounting and I'm given this error: mount error(115): Operation now in progress Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) ) One IP address is a static one which the Windows computer uses to connect to another machine. The other IP address is a DHCP-given IP and is the one I need to connect to. I can mount the share if I use sudo mount -t smbfs //dhcp_ip/share_name /local_mount however, this is problematic for obvious reasons since I need the mount to be permanent (eventually going in fstab). My question is: Is there a way to ignore the static IP address when mounting? Further info: I can connect to the Windows machine using smbclient //host_name/share_name and browse just fine. Also, nautilus can browse the remote file system as well. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Help - Mounting a Windows computer with two IP addresses
Hi all, I need to mount a Windows share locally on my laptop. However, I cannot do this via sudo mount -t smbfs //host_name/share_name /local_mount because the host_name has two IP addresses with it as shown by nmblookup //host_name. In Windows network adapter settings, disable netbios over tcp/ip for the address you don't want. If you have a WINS server delete the entry for that IP after disabling it. (That is, I try mounting and I'm given this error: mount error(115): Operation now in progress Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) ) One IP address is a static one which the Windows computer uses to connect to another machine. The other IP address is a DHCP-given IP and is the one I need to connect to. I can mount the share if I use sudo mount -t smbfs //dhcp_ip/share_name /local_mount however, this is problematic for obvious reasons since I need the mount to be permanent (eventually going in fstab). My question is: Is there a way to ignore the static IP address when mounting? Further info: I can connect to the Windows machine using smbclient //host_name/share_name and browse just fine. Also, nautilus can browse the remote file system as well. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] net rpc testjoin error
Not sure if this is related, but I had problems joining or rejoining XP or Win 7 machines to the domain after upgrading to Samba 3.5.x. I have a Samba PDC and Samba BDC with an LDAP backend. The backend unix account would already exist. i would have to delete the samba machine account and then precreate (or preserve) only 2 samba LDAP attributes. Delete the machine account #smbpasswd -x -m machinename The use an LDAP editor (e.g. apache directory studio), remove any remaining samba attributes (if necessary) except sambaPrimaryGroupSID and sambaAccountFlags. If necessary, create sambaPrimaryGroupSID and sambaAccountFlags. type: sambaPrimaryGroupSID value:S-1-5-21-XXX-YYY--515 type: sambaAccountFlags value: [W ] At this point I could rejoin the domain. You can also use smbpasswd -a -m machinename to test this.After joining the machine to the domain, verify the LDAP settings for sambaAccountFlags. Smbpasswd command may have set the sambaAccountFlags to be U (for user) not W (for workstation.) Make sure that Pbdedit and LDAP editors may report the same thing for sambaAccountFlags. On 12/23/2011 03:08 AM, L.P.H. van Belle wrote: please update, in wheezy samba is upgraded to 3.6.1 and test again. Louis -Oorspronkelijk bericht- Van: jh...@math.wisc.edu [mailto:samba-boun...@lists.samba.org] Namens John G. Heim Verzonden: 2011-12-22 20:28 Aan: samba@lists.samba.org Onderwerp: [Samba] net rpc testjoin error I have a PDC running debian wheezy with samba 3.5.11 . If I run 'net rpc testjoin' on my PDC, it does this: # net rpc testjoin get_schannel_session_key: could not fetch trust account password for domain 'UW-MATH' net_rpc_join_ok: failed to get schannel session key from server HUBBLE for domain UW-MATH. Error was NT_STATUS_CANT_ACCESS_DOMAIN_INFO Join to domain 'UW-MATH' is not valid: NT_STATUS_CANT_ACCESS_DOMAIN_INFO The backend is openldap and I can find the name of my PDC in the ldap database. It appears to have a valid machine trust account based on the ldap record. The main problem I'm having is that after I joined a Win7 machine to the domain, I can't log in as a domain user. It says The trust relationship between this workstation and the domain failed. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] winbindd/idmap_ldap.c:472(idmap_ldap_allocate_id) Cannot allocate gid above 20000!
I feel your pain. we are up to 1275000, but have been running idmap/ldap for many years. I have considered going to RID or full AD integration, but have organizational issues either way. On Dec 22, 2011, at 3:50 AM, Jelle de Jong wrote: On 19/12/11 19:10, Jelle de Jong wrote: On 19/12/11 11:22, Jelle de Jong wrote: On 23/05/11 13:37, Jelle de Jong wrote: I got a few servers that where running stable and somehow winbindd started complaining. There were no users added or any samba related updates. Also the problems did not started on the same day one of the servers started today and on other one months ago... winbindd[14450]: [2011/05/23 13:33:13.442070, 0] winbindd/idmap_ldap.c:472(idmap_ldap_allocate_id) winbindd[14450]: Cannot allocate gid above 2! # winbindd --version Version 3.5.6 I am still having these errors and I keep increasing the values: idmap uid = 1-60500 idmap gid = 1-60500 I started with 2 and I am now on 60500... Dec 19 11:01:15 stayce winbindd[23861]: [2011/12/19 11:01:15.569602, 0] winbindd/idmap_ldap.c:472(idmap_ldap_allocate_id) Dec 19 11:01:15 stayce winbindd[23861]: Cannot allocate gid above 60500! # winbindd --version Version 3.5.6 I found the following: samba (2:3.5.8~dfsg-1) unstable; urgency=low * New upstream release. This fixes the following bugs: - Winbind leaks gids with idmap ldap backend (upstrem #) Closes: #613624 Upgraded to: # winbindd --version Version 3.5.11 Hopefully this will fix my issues. Sadly this didn't work!! A few days later the problem started again... stayce:~# grep Cannot allocate gid above /var/log/syslog Dec 22 07:28:15 stayce winbindd[26373]: Cannot allocate gid above 61000! Dec 22 07:28:15 stayce winbindd[26373]: Cannot allocate gid above 61000! Dec 22 07:29:53 stayce winbindd[26373]: Cannot allocate gid above 61000! snip Dec 22 09:31:40 stayce winbindd[26373]: Cannot allocate gid above 61000! stayce:~# winbindd -V Version 3.5.11 stayce:~# smbd -V Version 3.5.11 stayce:~# testparm Load smb config files from /etc/samba/smb.conf rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) Processing section [documenten] Processing section [homes] Processing section [netlogon] Processing section [profiles] Loaded services file OK. Server role: ROLE_DOMAIN_PDC Press enter to see a dump of your service definitions [global] workgroup = company netbios name = SERVER passdb backend = ldapsam log file = /var/log/samba/log.%m smb ports = 445 time server = Yes load printers = No printcap name = /dev/null disable spoolss = Yes logon script = netlogon.bat logon path = \\%N\profiles\%U domain logons = Yes preferred master = Yes domain master = Yes dns proxy = No ldap admin dn = cn=admin,dc=company,dc=nl ldap delete dn = Yes ldap group suffix = ou=groups ldap idmap suffix = ou=idmap ldap machine suffix = ou=computers ldap passwd sync = yes ldap suffix = dc=company,dc=nl ldap ssl = no ldap user suffix = ou=users usershare max shares = 0 usershare path = /srv/storage/shares panic action = /usr/share/samba/panic-action %d idmap backend = ldap:ldap://localhost/ idmap alloc backend = ldap idmap uid = 1-61000 idmap gid = 1-61000 template homedir = /srv/storage/shares/ template shell = /bin/bash ldapsam:trusted = yes ldapsam:editposix = yes idmap alloc config : ldap_url = ldap://localhost/ idmap alloc config : ldap_base_dn = ou=idmap,dc=company,dc=nl idmap alloc config : ldap_user_dn = cn=admin,dc=company,dc=nl printing = bsd print command = lpr -r -P'%p' %s lpq command = lpq -P'%p' lprm command = lprm -P'%p' %j [documenten] path = /srv/storage/shares read only = No inherit acls = Yes map acl inherit = Yes hide unreadable = Yes store dos attributes = Yes vfs objects = recycle recycle:keeptree = Yes recycle:versions = Yes recycle:touch_mtime = Yes [homes] comment = Home Directories path = /srv/storage/samba/homes/%U read only = No inherit acls = Yes map acl inherit = Yes store dos attributes = Yes browseable = No root preexec = /usr/local/bin/samba-mkdir-home %U [netlogon] comment = Network Logon Service path = /srv/storage/samba/netlogon read only = No inherit acls = Yes map acl inherit = Yes store dos attributes = Yes browseable = No [profiles] comment = Users profiles path = /srv/storage/samba/profiles read only = No inherit acls = Yes profile acls = Yes map acl inherit = Yes store dos attributes =
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via 601f382 s4:drsuapi/getncchanges: the default for isRecycled is FALSE
via 7d13f7d s4-drsuapi: we store boolean in upppercase so we need to
test them in uppercase
via 34d549d s4-kcc: Remove also deleted objects that are not in the
Deleted Object container
via ea9fb5c s4-ldb: Add isRecycled when is defined in the schema
from 271c7d9 s4:rpc-dnsserver: Set the rank for the new DNS record
correctly
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit 601f3822d5c86f30aff185bc2a5ed7d4803cac51
Author: Stefan Metzmacher me...@samba.org
Date: Tue Nov 15 12:42:22 2011 +0100
s4:drsuapi/getncchanges: the default for isRecycled is FALSE
metze
Autobuild-User: Matthieu Patou m...@samba.org
Autobuild-Date: Fri Dec 23 09:30:09 CET 2011 on sn-devel-104
commit 7d13f7d4a1c01513702beeb4f62892a86238b283
Author: Matthieu Patou m...@matws.net
Date: Mon Nov 14 18:32:41 2011 +0100
s4-drsuapi: we store boolean in upppercase so we need to test them in
uppercase
Signed-off-by: Stefan Metzmacher me...@samba.org
commit 34d549de34a10129dfb1d3a2f788f15c8110d3d4
Author: Matthieu Patou m...@matws.net
Date: Tue Nov 15 12:38:51 2011 +0100
s4-kcc: Remove also deleted objects that are not in the Deleted Object
container
For the configuration container we do a full scan at every run of the
kcc-delete service. For the base DN we introduce a new parameter that
avoid the full scan to kick just when samba starts.
Signed-off-by: Stefan Metzmacher me...@samba.org
commit ea9fb5cad84595aca3544df521607616aec9041d
Author: Matthieu Patou m...@matws.net
Date: Tue Nov 1 23:12:47 2011 +0100
s4-ldb: Add isRecycled when is defined in the schema
Signed-off-by: Stefan Metzmacher me...@samba.org
---
Summary of changes:
source4/dsdb/kcc/kcc_deleted.c | 38 +-
source4/dsdb/kcc/kcc_service.h |2 +
source4/dsdb/samdb/ldb_modules/repl_meta_data.c | 12 +--
source4/rpc_server/drsuapi/getncchanges.c |8 ++--
4 files changed, 51 insertions(+), 9 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source4/dsdb/kcc/kcc_deleted.c b/source4/dsdb/kcc/kcc_deleted.c
index 5d2585d..0e1a428 100644
--- a/source4/dsdb/kcc/kcc_deleted.c
+++ b/source4/dsdb/kcc/kcc_deleted.c
@@ -44,8 +44,12 @@ NTSTATUS kccsrv_check_deleted(struct kccsrv_service *s,
TALLOC_CTX *mem_ctx)
struct kccsrv_partition *part;
int ret;
uint32_t tombstoneLifetime;
+ bool do_fs = false;
+ time_t interval = lpcfg_parm_int(s-task-lp_ctx, NULL, kccsrv,
+
check_deleted_full_scan_interval, 86400);
time_t t = time(NULL);
+
if (t - s-last_deleted_check lpcfg_parm_int(s-task-lp_ctx, NULL,
kccsrv,
check_deleted_interval,
600)) {
return NT_STATUS_OK;
@@ -57,6 +61,22 @@ NTSTATUS kccsrv_check_deleted(struct kccsrv_service *s,
TALLOC_CTX *mem_ctx)
DEBUG(1,(__location__ : Failed to get tombstone lifetime\n));
return NT_STATUS_INTERNAL_DB_CORRUPTION;
}
+ if (s-last_full_scan_deleted_check 0 ((t -
s-last_full_scan_deleted_check) interval )) {
+ do_fs = true;
+ s-last_full_scan_deleted_check = t;
+ }
+
+ if (s-last_full_scan_deleted_check == 0) {
+ /*
+* If we never made a full scan set the last full scan event to
be in the past
+* and that 9/10 of the full scan interval has already passed.
+* This is done to avoid the full scan to fire just at the
begining of samba
+* or a couple of minutes after the start.
+* With this setup and default values of interval, the full
scan will fire
+* 2.4 hours after the start of samba
+*/
+ s-last_full_scan_deleted_check = t - ((9 * interval) / 10);
+ }
for (part=s-partitions; part; part=part-next) {
struct ldb_dn *do_dn;
@@ -70,8 +90,18 @@ NTSTATUS kccsrv_check_deleted(struct kccsrv_service *s,
TALLOC_CTX *mem_ctx)
container */
continue;
}
- ret = dsdb_search(s-samdb, do_dn, res, do_dn,
LDB_SCOPE_ONELEVEL, attrs,
- DSDB_SEARCH_SHOW_RECYCLED, NULL);
+
+ if (!do_fs ldb_dn_compare(ldb_get_config_basedn(s-samdb),
part-dn)) {
+ ret = dsdb_search(s-samdb, do_dn, res, do_dn,
LDB_SCOPE_ONELEVEL, attrs,
+ DSDB_SEARCH_SHOW_RECYCLED, NULL);
+ } else {
+
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via 31db5e6 s4:torture/rpc/netlogon.c - factor out the computer name
check in an own test
via 9a91d7f s4:netlogon RPC server - dcesrv_netr_DsRGetSiteName - add a
small explaination
via 2bc7b8f s4:libcli/finddcs_nbt.c - free req consistently with
finddcs_cldap.c
via eddf0d0 ldb:ldb_tdb.c - fix warnings in ltdb_init_rootdse
from 601f382 s4:drsuapi/getncchanges: the default for isRecycled is FALSE
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit 31db5e667bbb388b75a5dc1790facf85d4daf629
Author: Matthias Dieter Wallnöfer m...@samba.org
Date: Thu Nov 24 17:38:14 2011 +0100
s4:torture/rpc/netlogon.c - factor out the computer name check in an own
test
This check is by no ways specific to DsRGetSiteName and hence it should
be factored out in an own function.
Samba at the moment does not implement the expected behaviour so I have
added the torture_skip action.
Signed-off-by: Stefan Metzmacher me...@samba.org
Autobuild-User: Stefan Metzmacher me...@samba.org
Autobuild-Date: Fri Dec 23 12:17:48 CET 2011 on sn-devel-104
commit 9a91d7f05a702ea47495b254049a7ec409212d1b
Author: Matthias Dieter Wallnöfer m...@samba.org
Date: Thu Nov 24 17:03:00 2011 +0100
s4:netlogon RPC server - dcesrv_netr_DsRGetSiteName - add a small
explaination
NETLOGON pipe is only thought for DCs.
Signed-off-by: Stefan Metzmacher me...@samba.org
commit 2bc7b8f4c9992f5f825d8328e0353f793d7e7ebf
Author: Matthias Dieter Wallnöfer m...@samba.org
Date: Thu Dec 22 16:49:48 2011 +0100
s4:libcli/finddcs_nbt.c - free req consistently with finddcs_cldap.c
It is more obvious to free where the context for the first time appears.
Signed-off-by: Stefan Metzmacher me...@samba.org
commit eddf0d0fe277cc763bbe0bb4706ab1a4aebf8151
Author: Matthias Dieter Wallnöfer m...@samba.org
Date: Thu Dec 22 11:50:49 2011 +0100
ldb:ldb_tdb.c - fix warnings in ltdb_init_rootdse
We should ignore the LDB result.
Signed-off-by: Stefan Metzmacher me...@samba.org
---
Summary of changes:
lib/ldb/ldb_tdb/ldb_tdb.c |8 +---
source4/libcli/finddcs_nbt.c |6 ++-
source4/rpc_server/netlogon/dcerpc_netlogon.c |5 ++
source4/torture/rpc/netlogon.c| 72 +
4 files changed, 71 insertions(+), 20 deletions(-)
Changeset truncated at 500 lines:
diff --git a/lib/ldb/ldb_tdb/ldb_tdb.c b/lib/ldb/ldb_tdb/ldb_tdb.c
index a85e41d..ebde8a3 100644
--- a/lib/ldb/ldb_tdb/ldb_tdb.c
+++ b/lib/ldb/ldb_tdb/ldb_tdb.c
@@ -1418,14 +1418,8 @@ static int ltdb_handle_request(struct ldb_module *module,
static int ltdb_init_rootdse(struct ldb_module *module)
{
- struct ldb_context *ldb;
- int ret;
-
- ldb = ldb_module_get_ctx(module);
-
- ret = ldb_mod_register_control(module,
- LDB_CONTROL_PERMISSIVE_MODIFY_OID);
/* ignore errors on this - we expect it for non-sam databases */
+ ldb_mod_register_control(module, LDB_CONTROL_PERMISSIVE_MODIFY_OID);
/* there can be no module beyond the backend, just return */
return LDB_SUCCESS;
diff --git a/source4/libcli/finddcs_nbt.c b/source4/libcli/finddcs_nbt.c
index 9579a9e..6a5d1fd 100644
--- a/source4/libcli/finddcs_nbt.c
+++ b/source4/libcli/finddcs_nbt.c
@@ -284,7 +284,6 @@ NTSTATUS finddcs_nbt_recv(struct tevent_req *req,
TALLOC_CTX *mem_ctx,
*num_dcs = state-num_dcs;
*dcs = talloc_steal(mem_ctx, state-dcs);
}
- talloc_free(req);
return status;
}
@@ -298,6 +297,7 @@ NTSTATUS finddcs_nbt(TALLOC_CTX *mem_ctx,
struct imessaging_context *msg_ctx,
int *num_dcs, struct nbt_dc_name **dcs)
{
+ NTSTATUS status;
struct tevent_req *req = finddcs_nbt_send(mem_ctx,
my_netbios_name,
nbt_port,
@@ -305,5 +305,7 @@ NTSTATUS finddcs_nbt(TALLOC_CTX *mem_ctx,
domain_sid,
resolve_ctx,
event_ctx, msg_ctx);
- return finddcs_nbt_recv(req, mem_ctx, num_dcs, dcs);
+ status = finddcs_nbt_recv(req, mem_ctx, num_dcs, dcs);
+ talloc_free(req);
+ return status;
}
diff --git a/source4/rpc_server/netlogon/dcerpc_netlogon.c
b/source4/rpc_server/netlogon/dcerpc_netlogon.c
index 125fb38..6d6cfe0 100644
--- a/source4/rpc_server/netlogon/dcerpc_netlogon.c
+++ b/source4/rpc_server/netlogon/dcerpc_netlogon.c
@@ -1296,6 +1296,11 @@ static WERROR dcesrv_netr_DsRGetSiteName(struct
dcesrv_call_state *dce_call, TAL
[SCM] CTDB repository - branch master updated - ctdb-1.12-145-g809d1f3
The branch, master has been updated via 809d1f3b8a9232fce0376cb47e4f633b49237529 (commit) via 40ca781b3305d9f0bfee5b109d4eefde461a3f13 (commit) via db59ac2ee6a9f5f7f088ebbc5e2800d9e57aae17 (commit) via 2c44c6dc583872c603a399afb01936abcbb05158 (commit) via ae78e8d991636a3a79dd9fbcefc15032afb08f55 (commit) via 6e6aaba28ac560d51d7450ebcf99babf868d0aea (commit) via 772e08c29ef70a4cc73f7887939e5071a90a98cb (commit) via bec2ff46402b6d90521c75e8d46b9f6f2f47239a (commit) via 4f23976fad3de63a47cf81d26dff1973d025e262 (commit) via 4ed94279f243729d521d365a44607fd086ae7c41 (commit) via 583cbf1bf8f6b1a805d77a2a1d521015868c7828 (commit) via 295168d99183d2d21f27a8ac6825d421fa866b28 (commit) via d8ab86f0eb11437e50d18183858dd3177a8f61e6 (commit) via 1a7d9b25fdcf7b59598618d406c2a681c90d9163 (commit) via 07f1ba54b1617fadd6fe83826dd8e76f37cea071 (commit) via 1963e33859e9dc51e9e88664c6d95e62c7c8b8be (commit) via 11f52ba18370f1dda983f2263f9af82045b4fdea (commit) via cf68b762432a18e4a3cda137591b3f005c196906 (commit) via 905fc9cd7126ab84c23d4a803c59e32b9c54e6f0 (commit) via e31594e0c13899e88013ce7eb7e3dc434c2f0723 (commit) via 6596f2c4a6b4783b6498502fbbf50f87d4f59085 (commit) via f686bc440560074c1ce866f2037ae3671f182185 (commit) via 09c55b76c96c4ab3fe812763007b81cf0a2ac86c (commit) via 019106e035520e6b3e5702b6e76d910626c3df13 (commit) via 48fe56ea27e3649ae7a67257fdce54f973e7c3c5 (commit) via e71afbf731f06a3b89b64220c7fd1b1ea5492d4a (commit) via 8fc4d5018ee6eee8856634095694d3ad0de5b4ae (commit) via ea3e640a28178ddcb85285f4efec62ccba2483d9 (commit) via 536aad024d52f2c32dd397fc86294c963b91341b (commit) via 0ed349c24c7399b3b440c1f5d573db77ddb988b3 (commit) via 7c5b27bc8dce9e30f2aff05297113da981f7b9a3 (commit) via 970b8fc60857ad2f18f45312d355c571fb2f0246 (commit) via a5a29bf92b23e9b5a1523b06461eced422b22ffe (commit) via 78530f40338f511a7cd1d33ada450905742bfa8f (commit) via 1f62afbe1ae0b3e7dbad4081d1b51e3ab6ee5c39 (commit) via e40fa9efd1c77aa35c917aba6e6e4d21d9c5cdea (commit) via 621c3ce957cb946ca05a2d527c037746ae2f01d3 (commit) via d93750ea3f5cb854e5893e53795fd08656e7c12c (commit) via 489148e465e2b8aed87ea836e3518f43490671ca (commit) via a5065b42a98c709173503e02d217f97792878625 (commit) via 8b0caaeed154d26c67a73659d3bbbdd63b21be11 (commit) via 6c4d1b768ccade344a7462ecad7cf5cbbf3873d4 (commit) from 00373958a5d5fb8c9b99548d5b9f327e78669162 (commit) http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=master - Log - commit 809d1f3b8a9232fce0376cb47e4f633b49237529 Author: Michael Adam ob...@samba.org Date: Fri Dec 23 17:23:07 2011 +0100 vacuum: improve logging in remove_record_from_delete_queue() commit 40ca781b3305d9f0bfee5b109d4eefde461a3f13 Author: Michael Adam ob...@samba.org Date: Fri Dec 23 17:22:46 2011 +0100 vacuum: improve logging in delete_record_traverse() commit db59ac2ee6a9f5f7f088ebbc5e2800d9e57aae17 Author: Michael Adam ob...@samba.org Date: Fri Dec 23 17:10:20 2011 +0100 vacuum: improve logging in insert_record_into_delete_queue() commit 2c44c6dc583872c603a399afb01936abcbb05158 Author: Michael Adam ob...@samba.org Date: Fri Dec 23 17:08:28 2011 +0100 vacuum: improve debugging in delete_queue_traverse() commit ae78e8d991636a3a79dd9fbcefc15032afb08f55 Author: Michael Adam ob...@samba.org Date: Fri Dec 23 15:14:06 2011 +0100 vacuum: add debug message to insert_record_into_delete_queue() for failed insert commit 6e6aaba28ac560d51d7450ebcf99babf868d0aea Author: Michael Adam ob...@samba.org Date: Fri Dec 23 10:37:25 2011 +0100 vacuum: improve debugging in insert_record_into_delete_queue() commit 772e08c29ef70a4cc73f7887939e5071a90a98cb Author: Michael Adam ob...@samba.org Date: Fri Dec 23 00:14:18 2011 +0100 vacuum: initialize (to zero) the vacuum fetch list in ctdb_vacuum_init_vacuum_data() commit bec2ff46402b6d90521c75e8d46b9f6f2f47239a Author: Michael Adam ob...@samba.org Date: Thu Dec 22 15:46:49 2011 +0100 vacuum: add statistics output for processing of the delete list commit 4f23976fad3de63a47cf81d26dff1973d025e262 Author: Michael Adam ob...@samba.org Date: Tue Dec 13 14:48:38 2011 +0100 doc:ctdb.1: add generated files after update commit 4ed94279f243729d521d365a44607fd086ae7c41 Author: Michael Adam ob...@samba.org Date: Thu Dec 22 13:05:26 2011 +0100 doc:ctdb.1: explain that ctdb listvars does not list obsolete tunables any more commit 583cbf1bf8f6b1a805d77a2a1d521015868c7828 Author: Michael Adam ob...@samba.org Date: Tue Dec 13 14:47:42 2011 +0100 doc:ctdb.1: adapt example output of ctdb listvars to current state commit
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via 4a1895e s3:lib/ctdbd_conn: try ctdbd_init_connection() as root
from 31db5e6 s4:torture/rpc/netlogon.c - factor out the computer name
check in an own test
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit 4a1895eb9921ad533910d08823c2814c470875fd
Author: Stefan Metzmacher me...@samba.org
Date: Fri Dec 23 14:45:45 2011 +0100
s3:lib/ctdbd_conn: try ctdbd_init_connection() as root
ctdbd_traverse is only called if the main db_context is already
open. So if we could get to information via dbwrap_fetch,
we should also be able to traverse.
metze
Autobuild-User: Stefan Metzmacher me...@samba.org
Autobuild-Date: Fri Dec 23 18:19:14 CET 2011 on sn-devel-104
---
Summary of changes:
source3/lib/ctdbd_conn.c |2 ++
1 files changed, 2 insertions(+), 0 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source3/lib/ctdbd_conn.c b/source3/lib/ctdbd_conn.c
index 9d4af18..9d2b544 100644
--- a/source3/lib/ctdbd_conn.c
+++ b/source3/lib/ctdbd_conn.c
@@ -1537,7 +1537,9 @@ NTSTATUS ctdbd_traverse(uint32 db_id,
int cstatus;
struct ctdbd_traverse_state state;
+ become_root();
status = ctdbd_init_connection(NULL, conn);
+ unbecome_root();
if (!NT_STATUS_IS_OK(status)) {
DEBUG(0, (ctdbd_init_connection failed: %s\n,
nt_errstr(status)));
--
Samba Shared Repository
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via d4e834e lib: Fix NT_STATUS_ALL_SIDS_FILTERED definition from 4a1895e s3:lib/ctdbd_conn: try ctdbd_init_connection() as root http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit d4e834ec6c8005b8a517185a46ab18d8343b7313 Author: Volker Lendecke v...@samba.org Date: Fri Dec 23 21:41:03 2011 +0100 lib: Fix NT_STATUS_ALL_SIDS_FILTERED definition This seems to be more in line with all the other NT_STATUS definitions. Metze, please check. Autobuild-User: Volker Lendecke vlen...@samba.org Autobuild-Date: Fri Dec 23 23:19:17 CET 2011 on sn-devel-104 --- Summary of changes: libcli/util/ntstatus.h |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/libcli/util/ntstatus.h b/libcli/util/ntstatus.h index f79363b..af4ab6a 100644 --- a/libcli/util/ntstatus.h +++ b/libcli/util/ntstatus.h @@ -604,7 +604,7 @@ typedef uint32_t NTSTATUS; #define NT_STATUS_OBJECTID_NOT_FOUND NT_STATUS(0xC000 | 0x02F0) #define NT_STATUS_NO_SUCH_JOB NT_STATUS(0xC000 | 0xEDE) /* scheduler */ #define NT_STATUS_NETWORK_SESSION_EXPIRED NT_STATUS(0xC000 | 0x035C) -#define NT_STATUS_ALL_SIDS_FILTERED NT_STATUS(0xC | 0x035E) +#define NT_STATUS_ALL_SIDS_FILTERED NT_STATUS(0xC000 | 0x035E) #define NT_STATUS_DOWNGRADE_DETECTED NT_STATUS(0xC000 | 0x0388) #define NT_STATUS_NO_S4U_PROT_SUPPORT NT_STATUS(0xC000 | 0x040A) #define NT_STATUS_CROSSREALM_DELEGATION_FAILURE NT_STATUS(0xC000 | 0x040B) -- Samba Shared Repository
