Re: [Samba] Trouble with user who has mixed case login (upper and lower)

2013-02-10 Thread TAKAHASHI Motonobu
From: billdorr...@pgatourhq.com
Date: Thu, 7 Feb 2013 17:55:33 -0500

 We're having an issue with a user who has a login with mixed case - we'll 
 call him USERone. 
 
 Samba does not recognize him; it says that the user does not exist even 
 though he does - and we're using the correct case for each letter. We 
 would rename him to an all lower case name, but he there are multiple 
 folders, files, and groups and processes that we'd have to change. Doing 
 so would be painful.
 
 We are using RHEL 6 and our version is 3.5.10-125.el6.x86_64.
 
 Any help that anyone can provide would be awesome.

Have you tried to set username level parameter?
Also you may use usename map or username map script for this purpose.
See smb.conf(5) for the detail.

---
TAKAHASHI Motonobu mo...@monyo.com / @damemonyo 
   facebook.com/takahashi.motonobu

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] removing local policies

2013-02-10 Thread TAKAHASHI Motonobu
From: Cristian Saavedra c...@asualcance.com
Date: Thu, 7 Feb 2013 11:07:49 -0500

 We are upgrading to Samba4 from Samba 3.x, we got a fully functional
 domain over the last 4 years and we are trying to do our migration as
 smooth as possible.

 I have migrated, users, machines and everything to the new samba4 domain
 (not in production yet), however when i log and old machine from the
 samba 3.x domain to the samba 4 domains, the local policy still applies,
 i suppose is because the old policies uses ntconfig.pol that burns the
 change on the registry.
 
 I'd like to remove that policies without having to reinstall or recreate
 users, has anyone managed to do that? 

I think you are using 'System Policy' feature on Samba 3 domain. The
settings applied by 'System Policy' are tatooed. It's by design.

To search system policy tatoo will show you additional information.

---
TAKAHASHI Motonobu mo...@monyo.com / @damemonyo 
   facebook.com/takahashi.motonobu


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Append/delete permissions

2013-02-10 Thread TAKAHASHI Motonobu
From: Dejan Gambin dejan.gam...@coin.hr
Date: Wed, 6 Feb 2013 22:11:08 +0100

 I am new on the list but have been using samba for a while. At the moment
 I have the following problem/request:
 
 - have a group of ordinary users (lets call it ALL)
 - have a group of admin users (lets call it ADMIN)
 - have a share X
 
 I want all my ordinary users (they are in valid users list as @ALL) to be 
 able to create/add files and folders in this share but NOT be able to delete 
 them once they are added. Besides, I want that all those created 
 files/folders can be deleted by the admin users from ADMIN group.
 
 I suppose this is possible but don't know how.

To set vfs object = acl_xattr and to enable xattr on your file system,
Samba can store NTFS ACLs. But as far as I examined, there are some
problems around access control.

Please try.

 I have been playing with create mode/mask, directory mode/mask, force
 user/group, inherit owner, inherit permissions, chattr, etc but didn't
 make any success. I am using Samba 3.5.6 on Linux Debian machine.

No, you cannot archive with these parameters. These parameters work in UNIX
semantics, which does not have 'can DELETE' flag.

---
TAKAHASHI Motonobu mo...@monyo.com / @damemonyo 
   facebook.com/takahashi.motonobu

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Problems building Samba SRPM on Fedora 18 due to buildtools/bin/waf

2013-02-10 Thread Nico Kadel-Garcia
I'm doing some work trying to build SRPM's for samba-4.0.2 on Fedoar
18, to update from the 4.0.0rc5 currently available for it.  and maybe
even to backport to RHEL 6. Unfortunately, even the original and
unmodified SRPM from Red Hat fails to build because the
buildtools/bin/waf is *spewing* temporary files into /tmp/wfcache.
/tmp is mounted as a tmpfs filesystem, and it's too dang small.

I can reconfigure a host with /tmp as a local filesystem, and I can
even do builds inside the mock tools for building SRPM's  which
create and use chroot environments and don't use tmpfs at all. But
it's a booby trap for anyone unsuspecting of the issue: The Samba
RPM's will fail to build because /tmp overflows with all the
/tmp/wafcache debris overwhelming it.

I don't have a best solution for this yet, I just wanted to let the
mailing list know they might get a surprise if they try to build RPM's
for Samba on Fedora 18.

   Nico Kadel-Garcia
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Classicupgrade not working

2013-02-10 Thread Jonis Maurin CearĂ¡
Hi list.

I'm trying to convert my samba3  domain to samba4 AD with samba-tool,
but i'm getting an error and i can' t find anything about it on
google.

I've enabled the log level 4 on smb.conf and here's what i got:

Home server: PANDORA
init_sam_from_ldap: Entry found for user: DIRET-ESTAG$
Home server: PANDORA
init_sam_from_ldap: Entry found for user: dsegato
Home server: PANDORA
init_sam_from_ldap: Entry found for user: lesley
Home server: PANDORA
ERROR(type 'exceptions.AttributeError'): uncaught exception -
'passdb.Samu' object has no attribute 'acct_flags'
  File 
/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/__init__.py,
line 175, in _run
return self.run(*args, **kwargs)
  File /usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/domain.py,
line 1318, in run
useeadb=eadb, dns_backend=dns_backend, use_ntvfs=use_ntvfs)
  File /usr/local/samba/lib64/python2.6/site-packages/samba/upgrade.py,
line 722, in upgrade_from_samba3
% (user.acct_flags, username,
[


I've copied my .tdb files to a new test server.also, i'm using
ldap backend on s3.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba 4 talk from FOSDEM and linux.conf.au

2013-02-10 Thread Andrew Bartlett
On Thu, 2013-02-07 at 10:14 +0100, Andreas Schneider wrote:
 Hello,
 
 you should watch the entertaining talk about Samba 4 from Jeremey he gave at 
 FOSDEM!
 
 http://video.fosdem.org/2013/maintracks/Janson/Samba4.webm

I also spoke at two miniconfs this year about Samba 4.0.

This talk is a 25 min talk about the features and progress with Samba
4.0:
http://mirror.linux.org.au/linux.conf.au/2013/ogv/Samba_4.0.ogv

This is a talk about autobuild and testing in Samba (50mins):
http://mirror.linux.org.au/linux.conf.au/2013/ogv/Two_years_with_Sambas_autobuild.ogv

These videos really do give a great overview of where we are at with
Samba 4.0.

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] fileserver.conf

2013-02-10 Thread Fabian von Romberg
I just did a samba-tool domain provision as AD DC.  I read that if --use-ntvfs 
is not specified, samba4 will run as s3fs.  I read also that a fileserver.conf 
should be generated, however I dont see that file.  Is this important?

Im running samba 4.0.3

Regards,
Fabian

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] fileserver.conf

2013-02-10 Thread Andrew Bartlett
On Sun, 2013-02-10 at 21:51 -0500, Fabian von Romberg wrote:
 I just did a samba-tool domain provision as AD DC.  I read that if 
 --use-ntvfs is not specified, samba4 will run as s3fs.  I read also that a 
 fileserver.conf should be generated, however I dont see that file.  Is this 
 important?
 
 Im running samba 4.0.3

We eliminated this file in recent Samba 4.0 versions (I think during the
rc series), and instead apply the configuration changes internally. 

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


autobuild: intermittent test failure detected

2013-02-10 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2013-02-10-0931/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2013-02-10-0931/samba3.stderr
   http://git.samba.org/autobuild.flakey/2013-02-10-0931/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2013-02-10-0931/samba.stderr
   http://git.samba.org/autobuild.flakey/2013-02-10-0931/samba.stdout
  
The top commit at the time of the failure was:

commit c932b139c8d1fc0b6a357623fe4011edabb45422
Author: Richard Sharpe realrichardsha...@gmail.com
Date:   Fri Feb 8 19:56:56 2013 -0800

Improve the configure tests for aio_suspend to get rid of warnings. Timur 
provided the wscript method, I added the configure.in correction.

Signed-off-by: Timur Bakeyev ti...@freebsd.org
Signed-off-by: Richard Sharpe realrichardsha...@gmail.com

Reviewed-by: Andrew Bartlett abart...@samba.org

Autobuild-User(master): Andrew Bartlett abart...@samba.org
Autobuild-Date(master): Sat Feb  9 09:24:06 CET 2013 on sn-devel-104


[SCM] CTDB repository - branch master updated - ctdb-2.1-22-g00db5fa

2013-02-10 Thread Amitay Isaacs
The branch, master has been updated
   via  00db5fa00474f8a83f1aa3b603fd756cc9b49ff4 (commit)
  from  b940e3a24daa73ca9b2896b7a449240136442b53 (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=master


- Log -
commit 00db5fa00474f8a83f1aa3b603fd756cc9b49ff4
Author: Martin Schwenke mar...@meltin.net
Date:   Wed Feb 6 14:15:11 2013 +1100

Logging: Fix breakage when freeing the log ringbuffer

Commit a82d3ec12f0fda16d6bfa8442a07595de897c10e broke fetching from
the log ringbuffer.  The solution there is still generally good: there
is no need to keep the ringbuffer in children created by
ctdb_fork()... except for those special children that are created to
fetch data from the ringbuffer!

Introduce a new function ctdb_fork_no_free_ringbuffer() that does
everything ctdb_fork() needs to do except free the ringbuffer (i.e. it
is the old ctdb_fork() function).  The new ctdb_fork() function just
calls that function and then frees the ringbuffer in the child.

This means all callers of ctdb_fork() have the convenience of having
the ringbuffer freed.  There are 3 special cases:

* Forking the recovery daemon.  We want to be able to fetch from the
  ringbuffer there.

* The ringbuffer fetching code.  Change the 2 calls in this code (main
  daemon, recovery daemon) to call ctdb_fork_no_free_ringbuffer()
  instead.

While we're here, clear the log ringbuffer when the recovery deamon is
forked, since it will contain a copy of the messages from the main
daemon.

Note to self: always test... even the most obvious patches...  ;-)

Signed-off-by: Martin Schwenke mar...@meltin.net

---

Summary of changes:
 common/ctdb_fork.c |   15 ---
 common/ctdb_logging.c  |2 +-
 include/ctdb_private.h |1 +
 server/ctdb_recoverd.c |7 +--
 4 files changed, 19 insertions(+), 6 deletions(-)


Changeset truncated at 500 lines:

diff --git a/common/ctdb_fork.c b/common/ctdb_fork.c
index a11f75a..9e3a06d 100644
--- a/common/ctdb_fork.c
+++ b/common/ctdb_fork.c
@@ -27,7 +27,7 @@
  * This function forks a child process and drops the realtime 
  * scheduler for the child process.
  */
-pid_t ctdb_fork(struct ctdb_context *ctdb)
+pid_t ctdb_fork_no_free_ringbuffer(struct ctdb_context *ctdb)
 {
pid_t pid;
char *process;
@@ -60,8 +60,6 @@ pid_t ctdb_fork(struct ctdb_context *ctdb)
}
ctdb-can_send_controls = false;
 
-   ctdb_log_ringbuffer_free();
-
return 0;
}
 
@@ -75,6 +73,17 @@ pid_t ctdb_fork(struct ctdb_context *ctdb)
return pid;
 }
 
+pid_t ctdb_fork(struct ctdb_context *ctdb)
+{
+   pid_t pid;
+
+   pid = ctdb_fork_no_free_ringbuffer(ctdb);
+   if (pid == 0) {
+   ctdb_log_ringbuffer_free();
+   }
+
+   return pid;
+}
 
 
 static void ctdb_sigchld_handler(struct tevent_context *ev,
diff --git a/common/ctdb_logging.c b/common/ctdb_logging.c
index 105b4df..de5ca6e 100644
--- a/common/ctdb_logging.c
+++ b/common/ctdb_logging.c
@@ -163,7 +163,7 @@ int32_t ctdb_control_get_log(struct ctdb_context *ctdb, 
TDB_DATA addr)
/* spawn a child process to marshall the huge log blob and send it back
   to the ctdb tool using a MESSAGE
*/
-   child = ctdb_fork(ctdb);
+   child = ctdb_fork_no_free_ringbuffer(ctdb);
if (child == (pid_t)-1) {
DEBUG(DEBUG_ERR,(Failed to fork a log collector child\n));
return -1;
diff --git a/include/ctdb_private.h b/include/ctdb_private.h
index cf850aa..7794c4c 100644
--- a/include/ctdb_private.h
+++ b/include/ctdb_private.h
@@ -1072,6 +1072,7 @@ void ctdb_restore_scheduler(struct ctdb_context *ctdb);
 
 struct tevent_signal *ctdb_init_sigchld(struct ctdb_context *ctdb);
 pid_t ctdb_fork(struct ctdb_context *ctdb);
+pid_t ctdb_fork_no_free_ringbuffer(struct ctdb_context *ctdb);
 int ctdb_kill(struct ctdb_context *ctdb, pid_t pid, int signum);
 
 int32_t ctdb_control_takeover_ip(struct ctdb_context *ctdb, 
diff --git a/server/ctdb_recoverd.c b/server/ctdb_recoverd.c
index bffe2be..95172a1 100644
--- a/server/ctdb_recoverd.c
+++ b/server/ctdb_recoverd.c
@@ -2126,7 +2126,7 @@ static void getlog_handler(struct ctdb_context *ctdb, 
uint64_t srvid,
}
log_addr = (struct ctdb_get_log_addr *)data.dptr;
 
-   child = ctdb_fork(ctdb);
+   child = ctdb_fork_no_free_ringbuffer(ctdb);
if (child == (pid_t)-1) {
DEBUG(DEBUG_ERR,(Failed to fork a log collector child\n));
return;
@@ -4014,7 +4014,7 @@ int ctdb_start_recoverd(struct ctdb_context *ctdb)
 
ctdb-ctdbd_pid = getpid();
 
-   ctdb-recoverd_pid = ctdb_fork(ctdb);
+   ctdb-recoverd_pid = ctdb_fork_no_free_ringbuffer(ctdb);
 

autobuild: intermittent test failure detected

2013-02-10 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2013-02-11-0611/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2013-02-11-0611/samba3.stderr
   http://git.samba.org/autobuild.flakey/2013-02-11-0611/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2013-02-11-0611/samba.stderr
   http://git.samba.org/autobuild.flakey/2013-02-11-0611/samba.stdout
  
The top commit at the time of the failure was:

commit c932b139c8d1fc0b6a357623fe4011edabb45422
Author: Richard Sharpe realrichardsha...@gmail.com
Date:   Fri Feb 8 19:56:56 2013 -0800

Improve the configure tests for aio_suspend to get rid of warnings. Timur 
provided the wscript method, I added the configure.in correction.

Signed-off-by: Timur Bakeyev ti...@freebsd.org
Signed-off-by: Richard Sharpe realrichardsha...@gmail.com

Reviewed-by: Andrew Bartlett abart...@samba.org

Autobuild-User(master): Andrew Bartlett abart...@samba.org
Autobuild-Date(master): Sat Feb  9 09:24:06 CET 2013 on sn-devel-104