Re: [Samba] Samba 4 on AIX with XLC

2013-01-08 Thread Michael Wood
Hi

On 8 January 2013 08:57, Benjamin Huntsman
bhunts...@mail2.cu-portland.edu wrote:

 _(...) is how the localisation is done AFAIK.  i.e. it's for
 translating messages into different languages.
 
 Maybe there's something wrong with internationalisation/localisation
 (i18n/l10n) on the system?  See what the configure output says about
 it (maybe gettext).

 Hi there!
Thanks so much for the response!  Very interesting idea.  But I'm not sure 
 what I'd be looking for.  Is gettext required?  It's almost certainly no 
 present, as this is a clean build of AIX just for this compile, and I've only 
 been installing things on an as-needed basis...

It shouldn't be required.  Haven't compiled Samba in a while, so I
don't know the details, but try ./configure --help and see if there's
anything to do with nls/i18n/l10n/gettext.  Maybe --disable-nls.

 How would I check the configure output?

See if there's a config.log.  Look for things to do with nls,
i18n, l10n, gettext etc.

Btw, I think OpenLDAP and Active Directory support are only relevant
to client/member support for AD.  The Samba 4.x AD server has its own
built-in LDAP and Kerberos components.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] samba 4.0.0 internal DNS

2013-01-08 Thread Dirk Jakobsmeier
Hello,

after running hand compiled samba 3 64-bit version on solaris we are now 
trying to test samba 4.0.0 AD version. Using the HowTo we compile samba 
sources and installed it. With provisioning a new domain the dns.keytab file 
ist not created. This happens on 3 newly installed sources 4.0.0 and also on a 
rc4 source of samba 4. So without this file there is no dynamical update of the 
samba internal dns server. Why is  this file not created when provisioning a 
domain?

Thanks in advance,

Regards

Dirk
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] SAMBA4 AD addicional Domain Controler Outgoing ForestDNSZones, DomainDNSZones replication problem

2013-01-08 Thread Sérgio Henrique
Hi all,

First of all congratulations for reaching 4.0.0 stable version.
I have being testing for a while and it works great when using SAMBA4 as
PDC and add Windows or another samba4 as addicional domain .

But when i try to add samba4 as addcional domain of a Windows 2008 R2
PDC(2003 level) i am unable to replicate ForestDNS and DomainDNSZones from
Samba4 to Windows 2008R2 DC.

Environment:

Primary DC Windows 2008 R2 x64 with 2003 levels
Addcitional DC Samba4 on Ubuntu Server 12.10 compile samba 4.0.0
with  ./configure --enable-selftest --prefix=/opt/samba and join domain as
/opt/samba4/bin/samba-tool domain join test.lisbon.local DC -Uxpto
--realm=test.lisbon.local --dns-backend=SAMBA_INTERNAL

# Global parameters
[global]
workgroup = TEST
realm = TEST.lisbon.local
netbios name = DC02-LNXBDC
server role = active directory domain controller
debug level = 2
interfaces = 172.17.49.10
dsdb:schema update allowed = yes

[netlogon]
path = /opt/samba/var/locks/sysvol/TEST.LISBON.LOCAL/scripts
read only = No

[sysvol]
path = /opt/samba/var/locks/sysvol
read only = No

SAMBA4 incoming replication all ok:

Default-First-Site-Name\dc02-lnxbdc
DSA Options: 0x0001
DSA object GUID: 4347f5b6-1599-4eb3-bc4f-5d054961dae6
DSA invocationId: 56a23d6e-fe89-4b02-9e15-fa90154a2e6a

 INBOUND NEIGHBORS 

DC=DomainDnsZones,DC=test,DC=lisbon,DC=local
Default-First-Site-Name\dc01-winpdc via RPC
DSA object GUID: 5dbb4a99-acf8-444f-bdcd-51fa5aeb8ab0
Last attempt @ Tue Jan  8 13:40:15 2013 WET was successful
0 consecutive failure(s).
Last success @ Tue Jan  8 13:40:15 2013 WET

DC=test,DC=lisbon,DC=local
Default-First-Site-Name\dc01-winpdc via RPC
DSA object GUID: 5dbb4a99-acf8-444f-bdcd-51fa5aeb8ab0
Last attempt @ Tue Jan  8 13:40:15 2013 WET was successful
0 consecutive failure(s).
Last success @ Tue Jan  8 13:40:15 2013 WET

CN=Schema,CN=Configuration,DC=test,DC=lisbon,DC=local
Default-First-Site-Name\dc01-winpdc via RPC
DSA object GUID: 5dbb4a99-acf8-444f-bdcd-51fa5aeb8ab0
Last attempt @ Tue Jan  8 13:40:16 2013 WET was successful
0 consecutive failure(s).
Last success @ Tue Jan  8 13:40:16 2013 WET

CN=Configuration,DC=test,DC=lisbon,DC=local
Default-First-Site-Name\dc01-winpdc via RPC
DSA object GUID: 5dbb4a99-acf8-444f-bdcd-51fa5aeb8ab0
Last attempt @ Tue Jan  8 13:40:16 2013 WET was successful
0 consecutive failure(s).
Last success @ Tue Jan  8 13:40:16 2013 WET

DC=ForestDnsZones,DC=test,DC=lisbon,DC=local
Default-First-Site-Name\dc01-winpdc via RPC
DSA object GUID: 5dbb4a99-acf8-444f-bdcd-51fa5aeb8ab0
Last attempt @ Tue Jan  8 13:40:15 2013 WET was successful
0 consecutive failure(s).
Last success @ Tue Jan  8 13:40:15 2013 WET

SAMBA4 output replication NOK!(No DomainDNSzones or ForestDNSZones)

 OUTBOUND NEIGHBORS 

DC=test,DC=lisbon,DC=local
Default-First-Site-Name\dc01-winpdc via RPC
DSA object GUID: 5dbb4a99-acf8-444f-bdcd-51fa5aeb8ab0
Last attempt @ Fri Jan  4 01:49:45 2013 WET was successful
0 consecutive failure(s).
Last success @ Fri Jan  4 01:49:45 2013 WET

CN=Schema,CN=Configuration,DC=test,DC=lisbon,DC=local
Default-First-Site-Name\dc01-winpdc via RPC
DSA object GUID: 5dbb4a99-acf8-444f-bdcd-51fa5aeb8ab0
Last attempt @ Fri Jan  4 01:49:45 2013 WET was successful
0 consecutive failure(s).
Last success @ Fri Jan  4 01:49:45 2013 WET

CN=Configuration,DC=test,DC=lisbon,DC=local
Default-First-Site-Name\dc01-winpdc via RPC
DSA object GUID: 5dbb4a99-acf8-444f-bdcd-51fa5aeb8ab0
Last attempt @ Fri Jan  4 01:49:45 2013 WET was successful
0 consecutive failure(s).
Last success @ Fri Jan  4 01:49:45 2013 WET

 KCC CONNECTION OBJECTS 

Connection --
Connection name: 10fc6577-2bd9-45fa-86e6-74144ed64d84
Enabled: TRUE
Server DNS name : dc01-winpdc.test.lisbon.local
Server DN name  : CN=NTDS
Settings,CN=dc01-winpdc,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=lisbon,DC=local
TransportType: RPC
options: 0x0001
Warning: No NC replicated for Connection!

When trying to replicate on Win2k8 R2 the replication from winserver to
linux server is ok, but when trying to replicate from linux server to
windows server teh Domain and Forest DNS zones are not replicated.

Samba 4 Server Status -

System time  : 2013-01-08 

[Samba] Samba4 Version Number

2013-01-08 Thread Muharrem BEYAZ
Hello;

I Wanna install exchange 2010 to samba4 pdc installation. But give install 
error. I want a upgrade a version number to samba4

Domain=[DOMAIN] OS=[Unix] Server=[Samba 4.1.0pre1-GIT-f2d67af]

And add service pack number similar Windows servers.

Thank You
Muharrem
Muharrem BEYAZ [http://www.calismiyor.com/imza.jpg]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] about AD replication

2013-01-08 Thread Amaury Viera Hernández

Hi everyone,
First of all, apologize me for my language, i don't speak english fluentlly,

Well,

I have been testing samba 4.0.0 from the sources in:

http://ftp.samba.org/pub/samba/samba-4.0.0.tar.gz

i have been using bind as dns backend and following these 
turorials(internal dns is not working fine for me):



http://wiki.samba.org/index.php/Samba4/HOWTO
http://wiki.samba.org/index.php/Samba_4/OS_Requirements

OS: Ubuntu precise -  12.04.1(i686) LTS (bind version:  9.8.1-p1)

Everything is working fine for me.

My principal objective is for replicating an Active directory domain 
controller.


I have been reading this tutorial using the dlz driver for bind9( 
internal dns is not working for me):


http://wiki.samba.org/index.php/Samba4_joining_a_domain

Operating systems:
- Windows Domain Controller: Microsoft Windows Server 2003 Enterprise 
Edition Service Pack 2(using i386)
- Linux domain controller: Ubuntu precise -  12.04.1(i686) LTS (bind 
version:  9.8.1-p1)


I have been testing that:
- I can add a user on the Samba DC using either the Samba command line 
tools, or the Windows GUI admin tools and that the user shows up within 
a few seconds on the Windows domain controller.
- I can add a user on the Windows Server domain controller using the 
Windows GUI admin tools and that the user shows up within a few seconds 
on the Samba DC


The main problem is that while the windows domain controller is turn on 
the user's autentication in domain controllers works fine, but, when  I 
turn off the windows domain controller the users can't login in the 
linux domain controller.



Thank you in advanced.
Best Regards,
Amaury Viera Hernandez.

The following message is automatically attached to this email.

10mo. ANIVERSARIO DE LA CREACION DE LA UNIVERSIDAD DE LAS CIENCIAS 
INFORMATICAS...
CONECTADOS AL FUTURO, CONECTADOS A LA REVOLUCION

http://www.uci.cu
http://www.facebook.com/universidad.uci
http://www.flickr.com/photos/universidad_uci
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] {Samba4] Problem with Joining Samba3 to Samba4 AD Domain

2013-01-08 Thread Varoujan Avanessians
Hello everyone
I have reached the end of my rope and desperately need help.
I recently installed two Samba4 Active Directory Domain Controllers on
CentOS 6.3 which are working perfectly, and I had joined a Samba3 Server to
this domain and everything went well. I could authenticate users on samba3
server and could see all the groups in the domain, but I was having
permissions problem accessing the share that I had created on the Samba3
server. I could see the Share but could not access it. with some poking
around I discovered that disabling the selinux would solve the issue.
Everything was working well before the New Year. Today when I tried to
access the share I got the Same problem, so I thought I might restart the
server and after restart I had the following error messages in
/var/log/messages.

Jan  7 15:42:58 samba3 winbindd[2346]: [2013/01/07 15:42:58.674815,  0]
libads/sasl.c:823(ads_sasl_spnego_bind)
Jan  7 15:42:58 samba3 winbindd[2346]:   kinit succeeded but
ads_sasl_spnego_krb5_bind failed: Invalid credentials

I noticed that I could no longer see the users or groups when I ran wbinf
-u and wbinfo -g.


Here are the step I took to try and resolve the problem but without success:

1- Removed the samba3 machine from Samba4 AD
2- Stopped smb and winbind on samba3
3- deleted all tdb files from /var/lib/samba
4- started the smb and winbind services
5 - ran:
root@Samba3 ~]# kinit administrator
Password for administra...@domain.company.com:
Warning: Your password will expire in 17 days on Fri Jan 25 15:00:57 2013
[root@Samba3 ~]#

6- Next I arn:
[root@Samba3 ~]# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: administra...@domain.company.com

Valid starting ExpiresService principal
01/07/13 16:17:58  01/08/13 02:17:58  krbtgt/DOMAIN
company@domain.company.com
renew until 01/08/13 16:17:28

7- Then I tried the following commands in turn

[root@Samba3 ~]# net ads join -U administrator
Enter administrator's password:
[2013/01/07 16:21:03.456721,  0] libads/sasl.c:823(ads_sasl_spnego_bind)
  kinit succeeded but ads_sasl_spnego_krb5_bind failed: Invalid credentials
Failed to join domain: failed to connect to AD: Invalid credentials

[root@Samba3 ~]# net ads testjoin
[2013/01/07 16:25:09.437670,  0] libads/sasl.c:823(ads_sasl_spnego_bind)
  kinit succeeded but ads_sasl_spnego_krb5_bind failed: Invalid credentials
[2013/01/07 16:25:09.665259,  0] libads/sasl.c:823(ads_sasl_spnego_bind)
  kinit succeeded but ads_sasl_spnego_krb5_bind failed: Invalid credentials
Join to domain is not valid: Invalid credentials


[root@Samba3 ~]# net rpc join -U administrator
Enter administrator's password:
Joined domain DOMAIN.

[root@Samba3 ~]# net rpc testjoin
Join to 'DOMAIN' is OK

[root@GLEN-Samba1 ~]# net ads info -U Administrator
Enter Administrator's password:
LDAP server: 192.168.1.101
LDAP server name: samba-ad.domain.company.com
Realm: DOMAIN.COMPANY.COM
Bind Path: dc=DOMAIN,dc=COMPANY,dc=COM
LDAP port: 389
Server time: Mon, 07 Jan 2013 16:27:56 PST
KDC server: 10.100.1.101
Server time offset: 26

[root@Samba3 ~]#  net rpc info -U Administrator
Enter Administrator's password:
Domain Name: DOMAIN
Domain SID: S-1-5-21-2572227374-1339717712-1008418335
Sequence number: 1
Num users: 17
Num domain groups: 12
Num local groups: 26

[root@Samba3 ~]# wbinfo -a vavanessians%somepassword
plaintext password authentication succeeded
challenge/response password authentication succeeded

[root@Samba3 ~]# wbinfo -K 'vavanessians%somepassword'
plaintext kerberos password authentication for [vavanessians%somepassword]
succeeded (requesting cctype: FILE)
credentials were put in: FILE:/tmp/krb5cc_0


but when I run wbinfo -u or wbinfo -g I get nothing

My configuration files are:


[root@Samba3 ~]# cat /etc/krb5.conf
[libdefaults]
ticket_lifetime = 24h
default_realm = DOMAIN.COMPANY.COM
# default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc
# default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc
dns_lookup_realm = true
dns_lookup_kdc = true
forwardable = true
[realms]
DOMAIN.COMPANY.COM = {
kdc = 192.168.1.101
default_domain = DOMAIN.COMPANY.COM
}
[domain_realm]
.domain.company.com = DOMAIN.COMPANY.COM
domain.company.com = DOMAIN.COMPANY.COM
[kdc]
profile = /etc/krb5kdc/kdc.conf
[logging]
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmin.log
default = FILE:/var/log/krb5lib.logog

[root@Samba3 ~]# cat /etc/hosts
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.1.128 samba3.domain.company.com samba3
192.168.1.101 samba-ad.domain.company.com samba-ad





[root@Samba3 ~]# cat /etc/samba/smb.conf
[global]
netbios name = Samba3
workgroup = DOMAIN
realm = DOMAIN.COMPANY.COM
preferred master = no
server string = Samba File Server
security = ads
encrypt passwords = yes

log level = 3
log file = /var/log/samba/log.%m
max log size = 50
printcap name = cups
printing = cups

winbind enum users = yes

Re: [Samba] about AD replication

2013-01-08 Thread felix
 Hi everyone,
 First of all, apologize me for my language, i don't speak english
 fluentlly,

 Well,

 I have been testing samba 4.0.0 from the sources in:

 http://ftp.samba.org/pub/samba/samba-4.0.0.tar.gz

 i have been using bind as dns backend and following these
 turorials(internal dns is not working fine for me):


 http://wiki.samba.org/index.php/Samba4/HOWTO
 http://wiki.samba.org/index.php/Samba_4/OS_Requirements

 OS: Ubuntu precise -  12.04.1(i686) LTS (bind version:  9.8.1-p1)

 Everything is working fine for me.

 My principal objective is for replicating an Active directory domain
 controller.

 I have been reading this tutorial using the dlz driver for bind9(
 internal dns is not working for me):

 http://wiki.samba.org/index.php/Samba4_joining_a_domain

 Operating systems:
 - Windows Domain Controller: Microsoft Windows Server 2003 Enterprise
 Edition Service Pack 2(using i386)
 - Linux domain controller: Ubuntu precise -  12.04.1(i686) LTS (bind
 version:  9.8.1-p1)

 I have been testing that:
 - I can add a user on the Samba DC using either the Samba command line
 tools, or the Windows GUI admin tools and that the user shows up within
 a few seconds on the Windows domain controller.
 - I can add a user on the Windows Server domain controller using the
 Windows GUI admin tools and that the user shows up within a few seconds
 on the Samba DC

 The main problem is that while the windows domain controller is turn on
 the user's autentication in domain controllers works fine, but, when  I
 turn off the windows domain controller the users can't login in the
 linux domain controller.


Amaury:
I guess that your problem is with roles. You have to pass all the roles
from the windows server to the samba server. You should do that using the
MMC or samba-tool.

Cheers,
Felix.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 4 Services for UNIX?

2013-01-08 Thread Robert Moggach
I've been back and forth with Andrew on this offlist and a few notes to
share.
I still don't have full success:

*1) How to install the necessary schema etc for UNIX connectivity*


The part I was missing here, which isn't part of the howto, is that to get
Windows to see the UNIX attributes (Services for UNIX etc.) you need to
have an NIS domain.
When provisioning you need to add the following option:

--use-rfc2307

This will add records to create an NIS domain that the Windows side will
recognize, allowing you to change UIDs,GIDs etc. in the GUI.
It's all possible with ldbmodify but I wanted to get the GUI working.


 *2) How to install/manage UNIX friendly users, groups, etc.*


I found this site which was indispensable in getting back to a familiar
place.

http://linuxcostablanca.blogspot.ca/p/samba-4.html

There are a few places in his howto that I got caught on but in the end I
have multiple OSs authenticating against Samba AD DC.
It's for OpenSUSE but I had little issue translating for CentOS 6.x.


 *3) How to successfully add the automount schema (the wiki doesn't seem
 to work for me)*


This ISN'T working yet. :(
Regardless of how I've tried using ldapadd or ldbadd or ldbmodify I can't
get past the following error:

schema_data_add: we are not master: reject request

This is with dsdb:schema update allowed = yes used as an option on the
command line and also in the smb.conf, separately and together.


 * 4) How to add automount maps*


This seems to be an easy task once the schema is added.
http://phaedrus77.blogspot.**com.es/2010/04/samba4-ad-**
domain-controller-to-serve.**htmlhttp://phaedrus77.blogspot.com.es/2010/04/samba4-ad-domain-controller-to-serve.html


So if anyone has some insight on the we are not master error I'd love it.
I'm only running one server so I'm not sure why it's not able to add the
records.

Rob
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 4 on AIX with XLC

2013-01-08 Thread Benjamin Huntsman
See if there's a config.log.  Look for things to do with nls,
i18n, l10n, gettext etc.

Btw, I think OpenLDAP and Active Directory support are only relevant
to client/member support for AD.  The Samba 4.x AD server has its own
built-in LDAP and Kerberos components.

--
Michael Wood esiot...@gmail.com

Hi!
   There is no config.log, but there is a setting in the ./configure options, 
--with-gettext=
   So do I need to get gettext?  Is it strictly required for Samba 4?

Many thanks!

-Ben
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 4 on AIX with XLC

2013-01-08 Thread Jeremy Allison
On Tue, Jan 08, 2013 at 06:46:16PM +, Benjamin Huntsman wrote:
 See if there's a config.log.  Look for things to do with nls,
 i18n, l10n, gettext etc.
 
 Btw, I think OpenLDAP and Active Directory support are only relevant
 to client/member support for AD.  The Samba 4.x AD server has its own
 built-in LDAP and Kerberos components.
 
 --
 Michael Wood esiot...@gmail.com
 
 Hi!
There is no config.log, but there is a setting in the ./configure options, 
 --with-gettext=
So do I need to get gettext?  Is it strictly required for Samba 4?

I would ensure gettext is available. That's how it's mostly been
tested.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 4 on AIX with XLC

2013-01-08 Thread Michael Wood
On 8 January 2013 20:46, Benjamin Huntsman
bhunts...@mail2.cu-portland.edu wrote:
See if there's a config.log.  Look for things to do with nls,
i18n, l10n, gettext etc.

Btw, I think OpenLDAP and Active Directory support are only relevant
to client/member support for AD.  The Samba 4.x AD server has its own
built-in LDAP and Kerberos components.

 Hi!
There is no config.log, but there is a setting in the ./configure options, 
 --with-gettext=
So do I need to get gettext?  Is it strictly required for Samba 4?

 Many thanks!

Try --without-gettext.  It should not be required.

Sorry I don't have time to try it myself.

Also, you might want to try gcc.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 4 on AIX with XLC

2013-01-08 Thread Benjamin Huntsman
I would ensure gettext is available. That's how it's mostly been
tested.

Jeremy.

Hee hee... that worked.  Got samba 4 compiled, so, for the record, gettext is 
absolutely required.
I also had to use xlC_r (note the capital C) as the compiler, since XLC will 
choke on using C++-style comments in straight C code.

Anyway, thanks again everyone!!

-Ben
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 4 Services for UNIX?

2013-01-08 Thread Robert Moggach
yes as far as I can tell I have the SchemaMasterRole

[root@crawford ~]# samba-tool fsmo show
InfrastructureMasterRole owner: CN=NTDS
Settings,CN=CRAWFORD,CN=Servers,CN=MySite,CN=Sites,CN=Configuration,DC=mydomain
RidAllocationMasterRole owner: CN=NTDS
Settings,CN=CRAWFORD,CN=Servers,CN=MySite,CN=Sites,CN=Configuration,DC=mydomain
PdcEmulationMasterRole owner: CN=NTDS
Settings,CN=CRAWFORD,CN=Servers,CN=MySite,CN=Sites,CN=Configuration,DC=mydomain
DomainNamingMasterRole owner: CN=NTDS
Settings,CN=CRAWFORD,CN=Servers,CN=MySite,CN=Sites,CN=Configuration,DC=mydomain
SchemaMasterRole owner: CN=NTDS
Settings,CN=CRAWFORD,CN=Servers,CN=MySite,CN=Sites,CN=Configuration,DC=mydomain

When I try to seize I get the following:

[root@crawford ~]# samba-tool fsmo seize --role=all
Attempting transfer...
FSMO transfer of 'rid' role successful
ERROR: Failed to initiate role seize of 'rid' role: objectclass: modify
message must have elements/attributes!

[root@crawford ~]# samba-tool fsmo seize --role=schema
Attempting transfer...
FSMO transfer of 'schema' role successful
ERROR: Failed to initiate role seize of 'schema' role: objectclass: modify
message must have elements/attributes!


On Tue, Jan 8, 2013 at 3:07 PM, Gémes Géza g...@kzsdabas.hu wrote:

 please check with samba-tool fsmo show, that the SchemaMasterRole is hold
 by the DC you are pointing your ldbmodify command (schema master role is
 one of the five roles which can be had on only one dc in a domain)


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] about AD replication

2013-01-08 Thread Amaury Viera Hernández

On 01/08/2013 12:19 PM, fe...@epepm.cupet.cu wrote:

Hi everyone,
First of all, apologize me for my language, i don't speak english
fluentlly,

Well,

I have been testing samba 4.0.0 from the sources in:

http://ftp.samba.org/pub/samba/samba-4.0.0.tar.gz

i have been using bind as dns backend and following these
turorials(internal dns is not working fine for me):


http://wiki.samba.org/index.php/Samba4/HOWTO
http://wiki.samba.org/index.php/Samba_4/OS_Requirements

OS: Ubuntu precise -  12.04.1(i686) LTS (bind version:  9.8.1-p1)

Everything is working fine for me.

My principal objective is for replicating an Active directory domain
controller.

I have been reading this tutorial using the dlz driver for bind9(
internal dns is not working for me):

http://wiki.samba.org/index.php/Samba4_joining_a_domain

Operating systems:
- Windows Domain Controller: Microsoft Windows Server 2003 Enterprise
Edition Service Pack 2(using i386)
- Linux domain controller: Ubuntu precise -  12.04.1(i686) LTS (bind
version:  9.8.1-p1)

I have been testing that:
- I can add a user on the Samba DC using either the Samba command line
tools, or the Windows GUI admin tools and that the user shows up within
a few seconds on the Windows domain controller.
- I can add a user on the Windows Server domain controller using the
Windows GUI admin tools and that the user shows up within a few seconds
on the Samba DC

The main problem is that while the windows domain controller is turn on
the user's autentication in domain controllers works fine, but, when  I
turn off the windows domain controller the users can't login in the
linux domain controller.



Amaury:
I guess that your problem is with roles. You have to pass all the roles
from the windows server to the samba server. You should do that using the
MMC or samba-tool.

Cheers,
Felix.



Well,
Cold you help me using samba-tool?
there is any documentation available about it?

Thanks in advance,
regards, Amaury.


10mo. ANIVERSARIO DE LA CREACION DE LA UNIVERSIDAD DE LAS CIENCIAS 
INFORMATICAS...
CONECTADOS AL FUTURO, CONECTADOS A LA REVOLUCION

http://www.uci.cu
http://www.facebook.com/universidad.uci
http://www.flickr.com/photos/universidad_uci
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] about AD replication

2013-01-08 Thread felix
 On 01/08/2013 12:19 PM, fe...@epepm.cupet.cu wrote:
 Hi everyone,
 First of all, apologize me for my language, i don't speak english
 fluentlly,

 Well,

 I have been testing samba 4.0.0 from the sources in:

 http://ftp.samba.org/pub/samba/samba-4.0.0.tar.gz

 i have been using bind as dns backend and following these
 turorials(internal dns is not working fine for me):


 http://wiki.samba.org/index.php/Samba4/HOWTO
 http://wiki.samba.org/index.php/Samba_4/OS_Requirements

 OS: Ubuntu precise -  12.04.1(i686) LTS (bind version:  9.8.1-p1)

 Everything is working fine for me.

 My principal objective is for replicating an Active directory domain
 controller.

 I have been reading this tutorial using the dlz driver for bind9(
 internal dns is not working for me):

 http://wiki.samba.org/index.php/Samba4_joining_a_domain

 Operating systems:
 - Windows Domain Controller: Microsoft Windows Server 2003 Enterprise
 Edition Service Pack 2(using i386)
 - Linux domain controller: Ubuntu precise -  12.04.1(i686) LTS (bind
 version:  9.8.1-p1)

 I have been testing that:
 - I can add a user on the Samba DC using either the Samba command line
 tools, or the Windows GUI admin tools and that the user shows up within
 a few seconds on the Windows domain controller.
 - I can add a user on the Windows Server domain controller using the
 Windows GUI admin tools and that the user shows up within a few seconds
 on the Samba DC

 The main problem is that while the windows domain controller is turn on
 the user's autentication in domain controllers works fine, but, when  I
 turn off the windows domain controller the users can't login in the
 linux domain controller.


 Amaury:
 I guess that your problem is with roles. You have to pass all the roles
 from the windows server to the samba server. You should do that using
 the
 MMC or samba-tool.

 Cheers,
 Felix.


 Well,
 Cold you help me using samba-tool?
 there is any documentation available about it?


Never done that before, but may be this, in your samba server, could help:

/usr/local/samba/bin/samba-tool fsmo transfer -h

This shows help about it.

Felix.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba 4 on AIX with XLC

2013-01-08 Thread Benjamin Huntsman
Hi again!
   I'll stop making so much noise shortly, but I've got to get this proved by 
say, tomorrow, or take a different direction on my project.

I got Samba 4 to compile on AIX using the following:

# export CFLAGS=-I/opt/openldap-2.4.32/include -qlanglvl=extc99
# CFLAGS=$CFLAGS ./configure --prefix=/opt/samba-4.0.0 
--sysconfdir=/etc/samba-4.0.0 --localstatedir=/var/samba-4.0.0 
--with-gettext=/opt/freeware
...
# make
...
# make install
...
#

Now unfortunately, while the compile completes, something's not right.  If I 
try to run /opt/samba-4.0.0/sbin/smbd -b, I get the following error:

bash-3.2# ./smbd -v
exec(): 0509-036 Cannot load program ./smbd because of the following errors:
rtld: 0712-001 Symbol aixacl_to_smbacl was referenced
  from module default/source3/libsmbd_base.so(), but a runtime definition
  of the symbol was not found.
rtld: 0712-001 Symbol aixacl_smb_to_aixacl was referenced
  from module default/source3/libsmbd_base.so(), but a runtime definition
  of the symbol was not found.
bash-3.2# CFLAGS=$CFLAGS ./configure --prefix=/opt/samba-4.0.0 
--sysconfdir=/etc/samba-4.0.0 --localstatedir=/var/samba-4.0.0 
--with-gettext=/opt/freeware
bash-3.2# echo $CFLAGS
-I/opt/openldap-2.4.32/include -qlanglvl=extc99
bash-3.2#

What's this aixacl_smb_to_aixacl thing?  The last time I built this earlier 
today, I'd had -qlanglvl=extended set, and was instead tripping up because it 
couldn't find the symbol va_copy.  The following article suggested rebuilding 
with -qlanglvl=extc99:

http://lists.samba.org/archive/samba-technical/2006-October/049777.html

After doing so, that's where I get the missing aixacl_to_smbacl problem.

Whatever shall I do?  There's got to be a way to get the shared libraries 
installed, and find all the right stuff.  On the previous attempt, I just 
copied all the .so's in place one-at-a-time until it hit the va_copy thing.

Many thanks!!

-Ben


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 4 Services for UNIX?

2013-01-08 Thread Robert Moggach
I've solved getting the schema into the directory... and I thought I
populated my automount maps...
but the directory is unbrowseable -

Getting closer... I keep getting the following error:

*acl_read: cannot get descriptor of automountMap... etc. etc.*


Steps I took...
1) I had changed the Default-First-Site-Name to something more appropriate
and changing that back seemed like a good place to start even though fsmo
was showing me as the SchemaMaster -

2) At this point I was able to get the schema loaded... almost... ldapadd
didn't like attributes and class in the same ldif... and then I had to
restart samba to add the class file... ugh... use ldbmodify! I edited the
automount.ldif schema file to be two files - one for the attributes and a
second for the classes

I added the schema using the following two commands:

ldbmodify -H /usr/local/samba/private/sam.ldb
/root/SAMBA4/automount/autofs_attr.ldif --option=dsdb:schema update
allowed=true

ldbmodify -H /usr/local/samba/private/sam.ldb
/root/SAMBA4/automount/autofs_class.ldif --option=dsdb:schema update
allowed=true

4) I then tried to add the automount records with ldbmodify with no luck ...
ldbmodify -H /usr/local/samba/private/sam.ldb
/root/SAMBA4/automount/03_autofs_maps.ldif
...
Sorting rpmd with attid exception 3 rDN=CN
DN=CN=linux,CN=autofs,CN=Services,DC=MYDOMAIN
ERR: (Naming violation) objectclass: Invalid RDN 'AUTOMOUNTMAPNAME' for
objectclass 'automountMap'! on DN
automountMapName=auto_master,CN=mac,CN=autofs,CN=Services,DC=MYDOMAIN at
block before line 41
Modify failed after processing 5 records

Weird... solved that by doing the following, but now i have all kinds of
acl_read errors

ldbmodify -H /usr/local/samba/private/sam.ldb.d/DC\=MYDOMAIN.ldb
03_autofs_maps.ldif

ldapsearch gives me the following:

result: 1 Operations errorsearch: 5
result: 1 Operations error
text: acl_read: cannot get descriptor of automountMapName=...

weird? how do I add acls?

The following shows the whole directory as expected... but I need ldap to
work for autofs!

ldbsearch -H /usr/local/samba/private/sam.ldb

So can someone tell me how to get acls added for my objects?




Samba version: 4.1.0pre1-GIT-94f11e9
Build environment:
   Build host:  Linux crawford 2.6.32-279.19.1.el6.x86_64 #1 SMP Wed Dec 19
07:05:20 UTC 2012 x86_64 x86_64 x86_64 GNU/Linux
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 4 on AIX with XLC

2013-01-08 Thread Benjamin Huntsman
Also, shouldn't make clean delete all the .so's in the build tree?  It 
doesn't.  After figuring out that that may be tripping me up, I used 'find . 
name *.so -print | while read so; do rm $so; done' to take care of that.  Who 
knows what other cruft may be lying around though... at this point I may have 
to just nuke the build tree and re-extract the tarball...

Thanks!

-Ben
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Help with 'samba-tool dsacl set ...'

2013-01-08 Thread Robert Moggach
I've tried setting default object permissions for the automountMap and
automount objects when they're added to my schema but I'm still getting acl
errors. I would assume that the 'samba-tool dsacl set' command could help
me but I have no clue where to start with syntax and I looked at the python
to see if I could find it but to no avail.

From using MMC on the windows side I assume I need the following
permissions...

Authenticated Users: View
SYSTEM: Full
Domain Admins: Full

so without knowing how...

samba-tool dsacl set -URL=ldap://sambaserver.mydomain \
--action=allow \
--objectdn='automountMapName=auto.master,DC=MYDOMAIN' \
--trusteedn='CN=Administrator,CN=Users,DC=MYDOMAIN' \
-U Administrator \
--sddl=

probably miles away...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] [Announce] CTDB 2.1 available for download

2013-01-08 Thread Amitay Isaacs
Highlights
===

* Support for Samba 4.0.0
   To use CTDB 2.1 with Samba 3.x, enable Samba3AvoidDeadlocks tunable

* Set CTDB_BASE in eventscripts, so they can be run easily

* Clean up orphaned interfaces

* Do not restart NFS on reconfigure event

* Fix RSN based recovery of persistent databases to avoid corruption

* Re-factor and separate IP allocation algorithms


Reporting bugs  Development Discussion
===

Please discuss this release on the samba-technical mailing list or by
joining the #ctdb IRC channel on irc.freenode.net.

All bug reports should be filed under CTDB product in the project's
Bugzilla database (https://bugzilla.samba.org/).


Download Details
=

The source code can be downloaded from:

  http://ftp.samba.org/pub/ctdb/

Git repository

   git://git.samba.org/ctdb.git
   http://git.samba.org/?p=ctdb.git;a=summary  (Git via web)

CTDB documentation

https://ctdb.samba.org/


Amitay.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[SCM] Samba Shared Repository - branch master updated

2013-01-08 Thread Jeremy Allison
The branch, master has been updated
   via  3d5c534 smbd: Fix bug 9549 -- Memleak in the async echo handler
  from  eae01b0 samba-tool Add --service argument to samba-tool ntacl 
get/set

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 3d5c534f0cc7c6e3eead7462eef4a178c7035857
Author: Volker Lendecke v...@samba.org
Date:   Tue Jan 8 15:34:19 2013 +0100

smbd: Fix bug 9549 -- Memleak in the async echo handler

Reviewed by: Jeremy Allison j...@samba.org

Autobuild-User(master): Jeremy Allison j...@samba.org
Autobuild-Date(master): Tue Jan  8 23:30:41 CET 2013 on sn-devel-104

---

Summary of changes:
 source3/smbd/process.c |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/smbd/process.c b/source3/smbd/process.c
index f89ca02..a02aeda 100644
--- a/source3/smbd/process.c
+++ b/source3/smbd/process.c
@@ -3022,7 +3022,7 @@ static void smbd_echo_got_packet(struct tevent_req *req)
}
 
iov = state-pending[num_pending];
-   iov-iov_base = buf;
+   iov-iov_base = talloc_move(state-pending, buf);
iov-iov_len = buflen;
 
DEBUG(10,(echo_handler[%d]: forward to main\n,


-- 
Samba Shared Repository


[SCM] CTDB repository - branch master updated - ctdb-2.0-53-g735ec99

2013-01-08 Thread Amitay Isaacs
The branch, master has been updated
   via  735ec99b99c7bb579851ce8293011aaf1dcc552a (commit)
  from  50abf597cefe6f8ea2a2ff7694bf84641344a9b1 (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=master


- Log -
commit 735ec99b99c7bb579851ce8293011aaf1dcc552a
Author: Martin Schwenke mar...@meltin.net
Date:   Tue Jan 8 16:49:56 2013 +1100

eventscripts: Fail the setup event if CTDB does not become ready

Currently it silently continues without attempting to set tunables.

Signed-off-by: Martin Schwenke mar...@meltin.net

---

Summary of changes:
 config/events.d/00.ctdb |7 +++
 1 files changed, 3 insertions(+), 4 deletions(-)


Changeset truncated at 500 lines:

diff --git a/config/events.d/00.ctdb b/config/events.d/00.ctdb
index 847805b..0261353 100755
--- a/config/events.d/00.ctdb
+++ b/config/events.d/00.ctdb
@@ -79,10 +79,9 @@ case $1 in
 
  setup)
 # Make sure CTDB daemon is ready to process requests
-if wait_until_ready ; then
-   # set any tunables from the config file
-   set_ctdb_variables
-   fi || exit 1
+   wait_until_ready || die CTDB did not become ready for setup
+   # Set any tunables from the config file
+   set_ctdb_variables || die Failed to set CTDB tunables
;;
 
 startup)


-- 
CTDB repository


autobuild: intermittent test failure detected

2013-01-08 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2013-01-09-0419/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2013-01-09-0419/samba3.stderr
   http://git.samba.org/autobuild.flakey/2013-01-09-0419/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2013-01-09-0419/samba.stderr
   http://git.samba.org/autobuild.flakey/2013-01-09-0419/samba.stdout
  
The top commit at the time of the failure was:

commit 3d5c534f0cc7c6e3eead7462eef4a178c7035857
Author: Volker Lendecke v...@samba.org
Date:   Tue Jan 8 15:34:19 2013 +0100

smbd: Fix bug 9549 -- Memleak in the async echo handler

Reviewed by: Jeremy Allison j...@samba.org

Autobuild-User(master): Jeremy Allison j...@samba.org
Autobuild-Date(master): Tue Jan  8 23:30:41 CET 2013 on sn-devel-104


[SCM] CTDB repository - branch master updated - ctdb-2.0-59-g746168d

2013-01-08 Thread Amitay Isaacs
The branch, master has been updated
   via  746168df2e691058e601016110fae818c6a265c3 (commit)
   via  45d439a1ab093b420c27b1502ef109021833c7af (commit)
   via  efaac27a9ed52ed0f436c7e194013fd06e8b02b3 (commit)
   via  ca6e7eccc90f2869c220231666bf284798342bce (commit)
   via  d23adec89b69e7c6f96c8e1417ef4ca4c9edc57e (commit)
   via  9a70a4d23d00f6cb996c061ba3dfb7c47b4f6a4f (commit)
  from  735ec99b99c7bb579851ce8293011aaf1dcc552a (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=master


- Log -
commit 746168df2e691058e601016110fae818c6a265c3
Author: Amitay Isaacs ami...@gmail.com
Date:   Tue Dec 4 15:05:44 2012 +1100

daemon: On shutdown, destroy timed events that check if recoverd is active

When CTDB is shutting down, recovery daemon is stopped, but the
event that checks if recovery daemon is still alive is not destroyed.
So recovery master is restarted during shutdown if CTDB daemon takes
longer to shutdown.

There are two processes that check if recovery daemon is working.

1. ctdb_check_recd() - which checks every 30 seconds if the recovery
   daemon process exists.

2. ctdb_recd_ping_timeout() - which is triggered when recovery daemon
   fails to ping CTDB daemon.

Both the events are periodic and need to be destroyed when shutting down.

Signed-off-by: Amitay Isaacs ami...@gmail.com

commit 45d439a1ab093b420c27b1502ef109021833c7af
Author: Amitay Isaacs ami...@gmail.com
Date:   Tue Dec 18 12:52:39 2012 +1100

tests: Add a test for recovery of persistent databases

Ensure that RSN based recovery and __db_sequence_number__ based recovery
methods for persistent databases work correctly.  They should not cause
corruption of the database.

Signed-off-by: Amitay Isaacs ami...@gmail.com

commit efaac27a9ed52ed0f436c7e194013fd06e8b02b3
Author: Amitay Isaacs ami...@gmail.com
Date:   Wed Dec 19 15:14:42 2012 +1100

tools/ctdb: Add setdbseqnum command to set __db_sequence_number__

Signed-off-by: Amitay Isaacs ami...@gmail.com

commit ca6e7eccc90f2869c220231666bf284798342bce
Author: Amitay Isaacs ami...@gmail.com
Date:   Wed Dec 19 14:43:26 2012 +1100

tools/ctdb: Re-factor code to check if db exists given name or id

Most of the commands related to database operations can now use the
common code (db_exists()) to refer to database with either name or id.

In addition to return db_id for db_name, the function returns all the
flags set for the database.

Signed-off-by: Amitay Isaacs ami...@gmail.com

commit d23adec89b69e7c6f96c8e1417ef4ca4c9edc57e
Author: Amitay Isaacs ami...@gmail.com
Date:   Mon Dec 17 14:46:14 2012 +1100

tools/ctdb: Add pdelete command to delete a record from persistent database

Signed-off-by: Amitay Isaacs ami...@gmail.com

commit 9a70a4d23d00f6cb996c061ba3dfb7c47b4f6a4f
Author: Amitay Isaacs ami...@gmail.com
Date:   Tue Dec 4 14:58:30 2012 +1100

daemon: Update the comment and remove redundant check in 
ctdb_start_transport()

ctdb_start_transport() is called just before setup event, when CTDB
is ready to process the requests. startup event happens much later
after a successful recovery.

Transport method ctdb-methods is successfully initialized before
ctdb_start_transport() is called.  No need to check again.

Signed-off-by: Amitay Isaacs ami...@gmail.com

---

Summary of changes:
 include/ctdb_private.h   |1 +
 server/ctdb_daemon.c |7 +-
 server/ctdb_recover.c|8 +-
 server/ctdb_recoverd.c   |   13 +-
 tests/simple/76_ctdb_pdb_recovery.sh |  119 +
 tools/ctdb.c |  469 +++---
 6 files changed, 395 insertions(+), 222 deletions(-)
 create mode 100755 tests/simple/76_ctdb_pdb_recovery.sh


Changeset truncated at 500 lines:

diff --git a/include/ctdb_private.h b/include/ctdb_private.h
index 152af64..fb54195 100644
--- a/include/ctdb_private.h
+++ b/include/ctdb_private.h
@@ -508,6 +508,7 @@ struct ctdb_context {
bool valgrinding;
uint32_t event_script_timeouts; /* counting how many consecutive times 
an eventscript has timedout */
uint32_t *recd_ping_count;
+   TALLOC_CTX *recd_ctx; /* a context used to track recoverd monitoring 
events */
TALLOC_CTX *release_ips_ctx; /* a context used to automatically drop 
all IPs if we fail to recover the node */
 
TALLOC_CTX *event_script_ctx;
diff --git a/server/ctdb_daemon.c b/server/ctdb_daemon.c
index 623e623..fdfd5de 100644
--- a/server/ctdb_daemon.c
+++ b/server/ctdb_daemon.c
@@ -70,14 +70,9 @@ static void ctdb_start_time_tickd(struct ctdb_context *ctdb)
 }
 
 
-/* called when the startup event script has finished */

[SCM] CTDB repository - branch master updated - ctdb-2.0-60-g7d8546e

2013-01-08 Thread Amitay Isaacs
The branch, master has been updated
   via  7d8546ee4353851f0543d0ca2c4c67cb0cc75aea (commit)
  from  746168df2e691058e601016110fae818c6a265c3 (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=master


- Log -
commit 7d8546ee4353851f0543d0ca2c4c67cb0cc75aea
Author: Amitay Isaacs ami...@gmail.com
Date:   Mon Oct 29 14:56:10 2012 +1100

daemon: Protect against double free of callback state while shutting down

When CTDB is shut down and monitoring has been stopped, monitor_context
gets freed and all the callback states hanging off it.  This includes
callback state for current_monitor, if the current monitor event has
not yet finished.  As a result, when the shutdown event is called,
current_monitor-callback state is not NULL, but it's actually freed
and it's a dangling reference.

So before executing callback function and freeing callback state check
if ctdb-monitor-monitor_context is not NULL.

Signed-off-by: Amitay Isaacs ami...@gmail.com

---

Summary of changes:
 include/ctdb_private.h |1 +
 server/ctdb_monitor.c  |7 +++
 server/eventscript.c   |5 +++--
 3 files changed, 11 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/include/ctdb_private.h b/include/ctdb_private.h
index fb54195..5b519fb 100644
--- a/include/ctdb_private.h
+++ b/include/ctdb_private.h
@@ -1343,6 +1343,7 @@ int ctdb_repack(struct ctdb_context *ctdb, int argc, 
const char **argv);
 void ctdb_block_signal(int signum);
 void ctdb_unblock_signal(int signum);
 int32_t ctdb_monitoring_mode(struct ctdb_context *ctdb);
+bool ctdb_stopped_monitoring(struct ctdb_context *ctdb);
 int ctdb_set_child_logging(struct ctdb_context *ctdb);
 void ctdb_lockdown_memory(struct ctdb_context *ctdb);
 
diff --git a/server/ctdb_monitor.c b/server/ctdb_monitor.c
index bc21e5b..984f947 100644
--- a/server/ctdb_monitor.c
+++ b/server/ctdb_monitor.c
@@ -506,3 +506,10 @@ int32_t ctdb_monitoring_mode(struct ctdb_context *ctdb)
return ctdb-monitor-monitoring_mode;
 }
 
+/*
+ * Check if monitoring has been stopped
+ */
+bool ctdb_stopped_monitoring(struct ctdb_context *ctdb)
+{
+   return (ctdb-monitor-monitor_context == NULL ? true : false);
+}
diff --git a/server/eventscript.c b/server/eventscript.c
index 6a75877..762f950 100644
--- a/server/eventscript.c
+++ b/server/eventscript.c
@@ -781,8 +781,9 @@ static int ctdb_event_script_callback_v(struct ctdb_context 
*ctdb,
if (ctdb-current_monitor) {
struct ctdb_event_script_state *ms = 
talloc_get_type(ctdb-current_monitor, struct ctdb_event_script_state);
 
-   /* cancel it */
-   if (ms-callback != NULL) {
+   /* Cancel current monitor callback state only if monitoring
+* context ctdb-monitor-monitor_context has not been freed */
+   if (ms-callback != NULL  !ctdb_stopped_monitoring(ctdb)) {
ms-callback-fn(ctdb, -ECANCELED, 
ms-callback-private_data);
talloc_free(ms-callback);
}


-- 
CTDB repository


[SCM] CTDB repository - annotated tag ctdb-2.1 created - ctdb-2.1

2013-01-08 Thread Amitay Isaacs
The annotated tag, ctdb-2.1 has been created
at  7406d21936dbf26167782fd4f336c10dcad3f405 (tag)
   tagging  7d8546ee4353851f0543d0ca2c4c67cb0cc75aea (commit)
  replaces  ctdb-2.0
 tagged by  Amitay Isaacs
on  Wed Jan 9 15:47:18 2013 +1100

- Log -
New version 2.1

Amitay Isaacs (14):
  recoverd: Track the nodes that fail takeover run and set culprit count
  tools/ctdb: Do not use function return value as pnn
  locking: Do not use RECLOCK for tracking DB locks and latencies
  doc: Update ping_pong documentation to add -c option
  daemon: Check if log_latency_ms is set before using it
  daemon: Add a tunable to enable automatic database priority setting
  tests/complex: Add NFS test when CTDB is killed on one of the nodes
  daemon: Update the comment and remove redundant check in 
ctdb_start_transport()
  tools/ctdb: Add pdelete command to delete a record from persistent 
database
  tools/ctdb: Re-factor code to check if db exists given name or id
  tools/ctdb: Add setdbseqnum command to set __db_sequence_number__
  tests: Add a test for recovery of persistent databases
  daemon: On shutdown, destroy timed events that check if recoverd is active
  daemon: Protect against double free of callback state while shutting down

Martin Schwenke (38):
  Eventscripts: 10.interface startup event should only process interfaces 
once
  ctdbd: Make the link status of new interfaces more flexible
  Eventscripts: 10.interface should list configured interfaces
  Git should ignore generated include/version.h file
  Initscript: when checking status, print output of ctdb ping if it fails
  tests: Local daemons should use --listen instead of --node-ip
  ctdbd: Remove debug option --node-ip, use --listen instead
  ctdbd: Initialise the node flags in just one place
  Eventscripts: Do not restart NFS on reconfigure
  Eventscripts: Change the default reconfigure action to do nothing
  ctdbd: Clean up orphaned interfaces when an IP is deleted
  tests: new function ip2ipmask() for integration testing
  tests: new simple integration test for delip interface garbage collection
  tests/takeover: Support valgrinding the takeover code
  tests/takeover: IP allocation now selected via $CTDB_IP_ALGORITHM
  tests/takeover: Support testing of NoIPTakeoverOnDisabled
  tests/takeover: Do output filtering for deterministic IPs algorithm too
  tests/takeover: Initial tests for deterministic IPs
  tests/takeover: Add some LCP2 tests for case when no node are healthy
  recoverd: Fix a memory leak in IP allocation
  recoverd: Move the test for both 'DeterministicIPs' and 'NoIPFailback' set
  recoverd: Don't do failback at all when deterministic IPs are in use
  recoverd: basic_failback() can call find_takeover_node() directly
  recoverd: Trying to failback more IPs no longer allocates unassigned IPs
  recoverd: Move failback retry loop into basic_failback() and 
lcp2_failback()
  recoverd: New function unassign_unsuitable_ips()
  recoverd: Separate each IP allocation algorithm into its own function
  tests/eventscripts: Ratchet down debug level for ctdb_takeover_tests
  tests/simple: Add test to check recovery daemon IP verification
  scripts: Move drop_all_public_ips() to the functions file
  eventscripts: Each script should set CTDB_BASE if it is not set
  scripts: statd-callout should calculate CTDB_BASE if it is not set
  scripts: debug-hung-script.sh doesn't need functions/loadconfig
  ctdbd: Default value for debug_hung_script should use ETCDIR
  scripts: Make drop_all_public_ips() more robust
  scripts: Rework ctdb-crash-cleanup.sh so that it uses existing functions
  scripts: Make script_log() use supplied message, stop logger from hanging
  eventscripts: Fail the setup event if CTDB does not become ready

Michael Adam (6):
  vacuum: fix a comment typo
  recoverd: fix a comment typo
  recovery: data corruption of persistent DBs after recoveries: don't 
delete emtpy records
  utils:ping_pong: add a -c switch to check the lock before reading/writing
  events/50.samba: fix testparm background update
  ctdb:recover: fix a comment typo

Volker Lendecke (2):
  build: Fix the build with old system-installed tevent
  vacuum: Avoid some tallocs in ctdb recovery

---


-- 
CTDB repository


[SCM] CTDB repository - annotated tag ctdb-2.1 deleted - ctdb-2.0-60-g7d8546e

2013-01-08 Thread Amitay Isaacs
The annotated tag, ctdb-2.1 has been deleted
   was  7406d21936dbf26167782fd4f336c10dcad3f405

---
tag ctdb-2.1

New version 2.1
7d8546ee4353851f0543d0ca2c4c67cb0cc75aea daemon: Protect against double free of 
callback state while shutting down
---


-- 
CTDB repository


[SCM] CTDB repository - branch master updated - ctdb-2.0-61-g7393e2b

2013-01-08 Thread Amitay Isaacs
The branch, master has been updated
   via  7393e2b290f9879ff72d5c5a9ce933034129f0e8 (commit)
  from  7d8546ee4353851f0543d0ca2c4c67cb0cc75aea (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=master


- Log -
commit 7393e2b290f9879ff72d5c5a9ce933034129f0e8
Author: Amitay Isaacs ami...@gmail.com
Date:   Wed Jan 9 16:22:39 2013 +1100

recoverd: Create recoverd monitoring timed events off recoverd context

This ensures that when shutting down CTDB, all the timed events
associated with monitoring recoverd are destroyed and recoverd
is not restarted.

Signed-off-by: Amitay Isaacs ami...@gmail.com

---

Summary of changes:
 server/ctdb_recoverd.c |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/server/ctdb_recoverd.c b/server/ctdb_recoverd.c
index 5f83044..0f8aa91 100644
--- a/server/ctdb_recoverd.c
+++ b/server/ctdb_recoverd.c
@@ -3971,7 +3971,7 @@ static void ctdb_check_recd(struct event_context *ev, 
struct timed_event *te,
return;
}
 
-   event_add_timed(ctdb-ev, ctdb, 
+   event_add_timed(ctdb-ev, ctdb-recd_ctx,
timeval_current_ofs(30, 0),
ctdb_check_recd, ctdb);
 }


-- 
CTDB repository


[SCM] CTDB repository - annotated tag ctdb-2.1 created - ctdb-2.1

2013-01-08 Thread Amitay Isaacs
The annotated tag, ctdb-2.1 has been created
at  8348dcc46f716ff96b639f4afca676d272eb842f (tag)
   tagging  7393e2b290f9879ff72d5c5a9ce933034129f0e8 (commit)
  replaces  ctdb-2.0
 tagged by  Amitay Isaacs
on  Wed Jan 9 16:31:30 2013 +1100

- Log -
New version 2.1

Amitay Isaacs (15):
  recoverd: Track the nodes that fail takeover run and set culprit count
  tools/ctdb: Do not use function return value as pnn
  locking: Do not use RECLOCK for tracking DB locks and latencies
  doc: Update ping_pong documentation to add -c option
  daemon: Check if log_latency_ms is set before using it
  daemon: Add a tunable to enable automatic database priority setting
  tests/complex: Add NFS test when CTDB is killed on one of the nodes
  daemon: Update the comment and remove redundant check in 
ctdb_start_transport()
  tools/ctdb: Add pdelete command to delete a record from persistent 
database
  tools/ctdb: Re-factor code to check if db exists given name or id
  tools/ctdb: Add setdbseqnum command to set __db_sequence_number__
  tests: Add a test for recovery of persistent databases
  daemon: On shutdown, destroy timed events that check if recoverd is active
  daemon: Protect against double free of callback state while shutting down
  recoverd: Create recoverd monitoring timed events off recoverd context

Martin Schwenke (38):
  Eventscripts: 10.interface startup event should only process interfaces 
once
  ctdbd: Make the link status of new interfaces more flexible
  Eventscripts: 10.interface should list configured interfaces
  Git should ignore generated include/version.h file
  Initscript: when checking status, print output of ctdb ping if it fails
  tests: Local daemons should use --listen instead of --node-ip
  ctdbd: Remove debug option --node-ip, use --listen instead
  ctdbd: Initialise the node flags in just one place
  Eventscripts: Do not restart NFS on reconfigure
  Eventscripts: Change the default reconfigure action to do nothing
  ctdbd: Clean up orphaned interfaces when an IP is deleted
  tests: new function ip2ipmask() for integration testing
  tests: new simple integration test for delip interface garbage collection
  tests/takeover: Support valgrinding the takeover code
  tests/takeover: IP allocation now selected via $CTDB_IP_ALGORITHM
  tests/takeover: Support testing of NoIPTakeoverOnDisabled
  tests/takeover: Do output filtering for deterministic IPs algorithm too
  tests/takeover: Initial tests for deterministic IPs
  tests/takeover: Add some LCP2 tests for case when no node are healthy
  recoverd: Fix a memory leak in IP allocation
  recoverd: Move the test for both 'DeterministicIPs' and 'NoIPFailback' set
  recoverd: Don't do failback at all when deterministic IPs are in use
  recoverd: basic_failback() can call find_takeover_node() directly
  recoverd: Trying to failback more IPs no longer allocates unassigned IPs
  recoverd: Move failback retry loop into basic_failback() and 
lcp2_failback()
  recoverd: New function unassign_unsuitable_ips()
  recoverd: Separate each IP allocation algorithm into its own function
  tests/eventscripts: Ratchet down debug level for ctdb_takeover_tests
  tests/simple: Add test to check recovery daemon IP verification
  scripts: Move drop_all_public_ips() to the functions file
  eventscripts: Each script should set CTDB_BASE if it is not set
  scripts: statd-callout should calculate CTDB_BASE if it is not set
  scripts: debug-hung-script.sh doesn't need functions/loadconfig
  ctdbd: Default value for debug_hung_script should use ETCDIR
  scripts: Make drop_all_public_ips() more robust
  scripts: Rework ctdb-crash-cleanup.sh so that it uses existing functions
  scripts: Make script_log() use supplied message, stop logger from hanging
  eventscripts: Fail the setup event if CTDB does not become ready

Michael Adam (6):
  vacuum: fix a comment typo
  recoverd: fix a comment typo
  recovery: data corruption of persistent DBs after recoveries: don't 
delete emtpy records
  utils:ping_pong: add a -c switch to check the lock before reading/writing
  events/50.samba: fix testparm background update
  ctdb:recover: fix a comment typo

Volker Lendecke (2):
  build: Fix the build with old system-installed tevent
  vacuum: Avoid some tallocs in ctdb recovery

---


-- 
CTDB repository


[SCM] Samba Shared Repository - branch master updated

2013-01-08 Thread Andrew Bartlett
The branch, master has been updated
   via  411440d replace: Fix compilation of rep_mkstemp
   via  0615f68 s3: Fix vfs_zfsacl to compile.
   via  1002cc9 selftest: show that Samba honours write list and valid 
users
   via  fcdd609 Fixup the change_to_user_by_session() case as called from 
become_user_by_session()
   via  296c0c3 smbd: Remove some ()
   via  38b34cc smbd: Simplify an if-expression
   via  1770882 smbd: Fix a typo
   via  b668c90 Move create_share_access_mask() from smbd/service.c to 
smbd/uid.c.
   via  86d1e1d Fix bug #9518 - conn-share_access appears not be be reset 
between users.
   via  1abb5eb Factor code out of check_user_ok() into a call to 
check_user_share_access().
   via  ea86f4e Initialize stack variables. Prelude to factoring out calls 
to check_user_share_access().
   via  8475f20 Add check_user_share_access() which factors out the share 
security and read_only flag setting code.
   via  6d7bffa Correctly setup the conn-share_access based on the current 
user token.
   via  5e9eebf Change API for create_share_access_mask() - remove conn 
struct.
   via  926d930 Change API for create_share_access_mask() to pass in the 
token.
   via  00de188 Fix API for create_share_access_mask().
   via  f7464bb Remove static from create_share_access_mask().
   via  4983d58 Add uint32_t share_access to vuid_cache_entry.
   via  7d90ae1 Clean up struct connection_struct, make struct vuid_cache a 
pointer not inline.
   via  5e483ab Remove unneeded variable const struct auth_session_info 
*session_info
   via  2e2f464 Remove dead code now vuser can no longer be NULL.
   via  0a09ffd Remove the second set of {} braces, no longer needed.
   via  45845f5 Remove one set of enclosing {} braces, no longer needed.
   via  390a812 Move the definition of struct vuid_cache_entry *ent outside 
blocks.
   via  310c4ca Start to tidy-up check_user_ok().
   via  5bffdac torture/vfstest.c: Always use create_conn_struct(). Don't 
hand create connection structs.
   via  7ba6850 source3/smbd/pysmbd.c: Always use create_conn_struct(). 
Don't hand create connection structs.
   via  a9730cb smbd/posix_acls.c: Use create_conn_struct(). Don't 
hand-create connection structs.
   via  b6fe9ec Allow create_conn_struct() to be called with snum == -1.
   via  97eb049 smbd: Rework create_conn_struct to use conn_new()
  from  3d5c534 smbd: Fix bug 9549 -- Memleak in the async echo handler

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 411440d2d9085fe9db0e3c26c025c6b94d02c00f
Author: Jesper Larsen jesper.lar...@ixonos.com
Date:   Fri Jan 4 13:03:58 2013 +0100

replace: Fix compilation of rep_mkstemp

Commit 1fbc185 removed the variable 'p'.
Use the equivalent variable 'template' instead.

Reviewed-by: Andrew Bartlett abart...@samba.org

Autobuild-User(master): Andrew Bartlett abart...@samba.org
Autobuild-Date(master): Wed Jan  9 07:18:33 CET 2013 on sn-devel-104

commit 0615f68096569d00b1f262529024ad40136d445e
Author: Ira Cooper i...@samba.org
Date:   Thu Dec 27 19:57:14 2012 +

s3: Fix vfs_zfsacl to compile.

Reviewed-by: Andrew Bartlett abart...@samba.org

commit 1002cc9a669836d6cddaac350715a2b107bec01e
Author: Andrew Bartlett abart...@samba.org
Date:   Thu Dec 20 23:05:55 2012 +1100

selftest: show that Samba honours write list and valid users

Reviewed-by: Jeremy Allison j...@samba.org
Reviewed-by: Stefan Metzmacher me...@samba.org

commit fcdd6092b10a4b4406af47b989dcf1a9d693580e
Author: Jeremy Allison j...@samba.org
Date:   Tue Jan 8 11:02:16 2013 -0800

Fixup the change_to_user_by_session() case as called from 
become_user_by_session()

Use inside source3/printing/nt_printing.c:get_correct_cversion().

Allow check_user_ok() to be called with vuid==UID_FIELD_INVALID.
All this should do is throw away one entry in the vuid cache.

Signed-off-by: Jeremy Allison j...@samba.org

Reviewed-by: Andrew Bartlett abart...@samba.org

commit 296c0c34f198dfc7a8f13f26e54fbc980f667784
Author: Volker Lendecke v...@samba.org
Date:   Sun Jan 6 14:50:33 2013 +0100

smbd: Remove some ()

Reviewed-by: Jeremy Allison j...@samba.org
Reviewed-by: Stefan Metzmacher me...@samba.org
Reviewed-by: Andrew Bartlett abart...@samba.org

commit 38b34cc3e529e185dd3b3d9f79ae74d1c9fac435
Author: Volker Lendecke v...@samba.org
Date:   Sun Jan 6 14:41:24 2013 +0100

smbd: Simplify an if-expression

Reviewed-by: Jeremy Allison j...@samba.org
Reviewed-by: Stefan Metzmacher me...@samba.org
Reviewed-by: Andrew Bartlett abart...@samba.org

commit 17708821ffc2d0cb771e8c5cb6415b87e20d6a0a
Author: Volker Lendecke v...@samba.org
Date:   Sun Jan 6 14:39:07 2013 +0100

smbd: Fix a typo

Reviewed-by: 

[SCM] Samba Shared Repository - branch master updated

2013-01-08 Thread Matthieu Patou
The branch, master has been updated
   via  2cc6f9c libnet-vampire: reports Exops as they rather than sync on 
some partitions
   via  09b0010 script: Add a script to display testsuite runtime sorted
   via  0c86126 libnet: set the invocation_id earlier in order to avoid 
annoying messages
  from  411440d replace: Fix compilation of rep_mkstemp

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 2cc6f9ce7f8068440ef527b0aebd3ad5ad105a9d
Author: Matthieu Patou m...@matws.net
Date:   Mon Dec 31 15:38:50 2012 -0800

libnet-vampire: reports Exops as they rather than sync on some partitions

Instead of showing:
Partition[CN=RODC,OU=Domain Controllers,DC=samba,DC=example,DC=com]
objects[1] linked_values[8]
Report a exop based on CN=RODC,OU=Domain 
Controllers,DC=samba,DC=example,DC=com
as
Exop on CN=RODC,OU=Domain Controllers,DC=samba,DC=example,DC=com, ...

Signed-off-by: Matthieu Patou m...@matws.net
Reviewed-By: Andrew Bartlett abart...@samba.org

Autobuild-User(master): Matthieu Patou m...@samba.org
Autobuild-Date(master): Wed Jan  9 09:01:30 CET 2013 on sn-devel-104

commit 09b00108069f16a6a654b88b4d87fbd3f566f2f0
Author: Matthieu Patou m...@matws.net
Date:   Tue Jan 1 20:56:16 2013 -0800

script: Add a script to display testsuite runtime sorted

Signed-off-by: Matthieu Patou m...@matws.net
Reviewed-By: Andrew Bartlett abart...@samba.org

commit 0c86126d166c8f75bd3593fce077f26bca51f8aa
Author: Matthieu Patou m...@matws.net
Date:   Mon Dec 31 02:12:23 2012 -0800

libnet: set the invocation_id earlier in order to avoid annoying messages

At that moment we have all the information to set the invocation id so
let's set it, it will avoid useless messages about missing invocation
id.

Signed-off-by: Matthieu Patou m...@matws.net
Reviewed-By: Andrew Bartlett abart...@samba.org

---

Summary of changes:
 script/show_testsuite_time  |   40 ++
 source4/libnet/libnet_vampire.c |   59 ++
 2 files changed, 80 insertions(+), 19 deletions(-)
 create mode 100755 script/show_testsuite_time


Changeset truncated at 500 lines:

diff --git a/script/show_testsuite_time b/script/show_testsuite_time
new file mode 100755
index 000..4015321
--- /dev/null
+++ b/script/show_testsuite_time
@@ -0,0 +1,40 @@
+#!/usr/bin/env perl
+use Time::Local ('timegm');
+my $in = STDIN;
+use strict;
+
+my $intest=0;
+my $name;
+my $start=0;
+my $end=0;
+my %hash;
+my $fh;
+if ($#ARGV = 0) {
+   open($fh, , $ARGV[0]) || die can't open .$ARGV[0];
+} else {
+   $fh = $in;
+}
+while($fh)
+{
+   if (m/^testsuite: (.*)/) {
+   $intest = 1;
+   $name = $1;
+   }
+   if (m/testsuite-\w+:/) {
+   $hash{$name - .($end - $start)} = $end - $start;
+   $intest = 0;
+   $start = 0;
+   }
+   if (m/^time: (\d\d\d\d)-(\d\d)-(\d\d) (\d\d):(\d\d):(\d\d)/  $intest) 
{
+   my $ts=timegm($6,$5,$4,$3,$2 - 1,$1 - 1900);
+   if ($start == 0) {
+   $start = $ts;
+   } else {
+   $end = $ts;
+   }
+   }
+}
+my @sorted = sort { $hash{$a}=$hash{$b} } keys(%hash);
+for my $l (@sorted) {
+   print $l.\n;
+}
diff --git a/source4/libnet/libnet_vampire.c b/source4/libnet/libnet_vampire.c
index 4091346..599119f 100644
--- a/source4/libnet/libnet_vampire.c
+++ b/source4/libnet/libnet_vampire.c
@@ -288,6 +288,19 @@ static NTSTATUS libnet_vampire_cb_apply_schema(struct 
libnet_vampire_cb_state *s
default:
return NT_STATUS_INVALID_PARAMETER;
}
+   /* We must set these up to ensure the replMetaData is written
+* correctly, before our NTDS Settings entry is replicated */
+   ok = samdb_set_ntds_invocation_id(s-ldb, c-dest_dsa-invocation_id);
+   if (!ok) {
+   DEBUG(0,(Failed to set cached ntds invocationId\n));
+   return NT_STATUS_FOOBAR;
+   }
+   ok = samdb_set_ntds_objectGUID(s-ldb, c-dest_dsa-ntds_guid);
+   if (!ok) {
+   DEBUG(0,(Failed to set cached ntds objectGUID\n));
+   return NT_STATUS_FOOBAR;
+   }
+
 
status = dsdb_schema_pfm_from_drsuapi_pfm(mapping_ctr, true,
  s, pfm_remote, NULL);
@@ -492,19 +505,6 @@ static NTSTATUS libnet_vampire_cb_apply_schema(struct 
libnet_vampire_cb_state *s
talloc_free(s_dsa);
talloc_free(schema_objs);
 
-   /* We must set these up to ensure the replMetaData is written
-* correctly, before our NTDS Settings entry is replicated */
-   ok = samdb_set_ntds_invocation_id(s-ldb, c-dest_dsa-invocation_id);
-   if (!ok) {
-