Re: [Samba] 3.6.8: Winbind/Active Directory: lsass.exe process run cpu to 100%

2012-09-28 Thread Michael Wood
On 27 September 2012 09:00, David Touzeau da...@touzeau.eu wrote: Dear I have connected samba 3.6.8 to my Active Directory in the lsass.exe run to 100% When stopping winbind the lsass.exe CPU is down to 0% When set winbindd to debug mode, it seems it try to scan the root user every time. I

Re: [Samba] [PATCH] Set RFC2307 attributes in samba-tool create

2012-09-28 Thread Michael Wood
Hi You should rather post patches to the samba-technical list. I have copied by reply there. On 25 September 2012 16:54, Alexander Wuerstlein a...@arw.name wrote: Optionally set RFC2307 (NIS Schema) attributes in samba-tool create. Mainly needed for UID mapping to be usable. Not all

[Samba] Samba4 ADC cannot edit GPO with W2K3

2012-09-28 Thread Luis Martinez
Hello, I have been trying to setup a working environment with samba4-rc1 on fedora 17 following the samba4 howto at the wiki. DNS and ldap are internal. Everything looks like working, I can create and edit GPOs with WinXP Pro but with Win2K3 server I can create GPOs but I can't edit them. I

Re: [Samba] 3.6.8: Winbind/Active Directory: lsass.exe process run cpu to 100%

2012-09-28 Thread David Touzeau
On 27 September 2012 09:00, David Touzeau da...@touzeau.eu wrote: Dear I have connected samba 3.6.8 to my Active Directory in the lsass.exe run to 100% When stopping winbind the lsass.exe CPU is down to 0% When set winbindd to debug mode, it seems it try to scan the root user every time. I would

Re: [Samba] Printing from Samba4

2012-09-28 Thread steve
On 27/09/12 22:25, Florian Scholz wrote: try http://wiki.samba.org/index.php/Samba4/HOWTO#Step_13:_Setup_a_Printer_share 2012/9/27 steve st...@steve-ss.com mailto:st...@steve-ss.com Hi I have a printer connected to a Samba4 AD machine. I set it up using CUPS. It works fine. Is

Re: [Samba] Samba4 ADC cannot edit GPO with W2K3

2012-09-28 Thread felix
Hello, I have been trying to setup a working environment with samba4-rc1 on fedora 17 following the samba4 howto at the wiki. DNS and ldap are internal. Everything looks like working, I can create and edit GPOs with WinXP Pro but with Win2K3 server I can create GPOs but I can't edit them. I

[Samba] [Fwd: Re: Samba4 ADC cannot edit GPO with W2K3]

2012-09-28 Thread sandy . napoles
Try chmod -R 4775 /usr/local/samba/var/locks/sysvol -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba4 ADC cannot edit GPO with W2K3

2012-09-28 Thread steve
On 28/09/12 13:27, fe...@epepm.cupet.cu wrote: Try: /usr/local/samba/bin/samba-tool ntacl sysvolcheck and if it yields some error then: /usr/local/samba/bin/samba-tool ntacl sysvolreset It worked for me. Hi Exactly the same GPO creation error here. Here are the outputs from the samba4

Re: [Samba] Samba4 ADC cannot edit GPO with W2K3

2012-09-28 Thread sandy . napoles
I have the same error, but I can create perfectly the GPO and it are aplicate in my client perfect..then why I have it? ERROR(class 'samba.provision.ProvisioningError'): uncaught exception - ProvisioningError: DB ACL on sysvol directory /usr/local/samba/var/locks/sysvol/eccmg.cupet.cu

Re: [Samba] Samba4 ADC cannot edit GPO with W2K3

2012-09-28 Thread Matthieu Patou
On 09/28/2012 03:03 AM, Luis Martinez wrote: Hello, I have been trying to setup a working environment with samba4-rc1 on fedora 17 following the samba4 howto at the wiki. DNS and ldap are internal. Everything looks like working, I can create and edit GPOs with WinXP Pro but with Win2K3

Re: [Samba] Samba4 ADC cannot edit GPO with W2K3

2012-09-28 Thread Luis Martinez
I have made more tests with the information given. Coming from a fresh provisioning after install I get already an error while runing the check: [root@tesauro ~]# /usr/local/samba/bin/samba-tool ntacl sysvolcheck ERROR(type 'exceptions.TypeError'): uncaught exception - (61, 'No data

Re: [Samba] Samba4 ADC cannot edit GPO with W2K3

2012-09-28 Thread Luis Martinez
Hello, I will try to do the packet capturing an give more details. Thanks! El 28/09/12 18:35, Matthieu Patou escribió: On 09/28/2012 03:03 AM, Luis Martinez wrote: Hello, I have been trying to setup a working environment with samba4-rc1 on fedora 17 following the samba4 howto at the wiki.

[Samba] Samba4 LDAP returns wrong responses in some cases, BIND-DLZ refuses to update

2012-09-28 Thread Dmitry Khromov
Hello. We have a couple of questions regarding Samba 4.1.0pre1-GIT-aad669b running on Gentoo GNU/Linux 1) Is MS 1.2.840.113556.1.4.1941 operator support implemented (planned to be implemented) in Samba 4 internal LDAP server? Please compare: $ ldapsearch -h 192.168.1.32 -x -D

[Samba] Why smbd (version 4.1.0) uses source3/smbd/server.c not source4/smbd/server.c

2012-09-28 Thread Jun Yi
Dear everybody, Could anybody told me the reason? Does the code of samba 3 and samba 4 mix together in the master branch. How can I let smbd be compiled from source4/smbd/server.c? Thanks and Have a good weekend Jun The following is what I got from the command line: junyij-2.desktop$ ./smbd

Re: [Samba] Why smbd (version 4.1.0) uses source3/smbd/server.c not source4/smbd/server.c

2012-09-28 Thread Volker Lendecke
Hello! Would it be possible that you give us a broader picture of what you want to achieve? You seem to be running latest code in configurations that are vastly different from what the Samba Team supports. If you could tell us more about your goals, we might be able to help you and recommend a

Re: [Samba] Fw: Connection fails with Server/Client Signing = Mandatory

2012-09-28 Thread hceute...@gmail.com
I see an issue with this line Microsoft network client: Digitally sign communications (always) Disabled Set both that and the network server policy as enabled and see what happens. Setting that as disabled only makes sense if the samba setting is still set to auto. Otherwise, it appears

Re: [Samba] Fw: Connection fails with Server/Client Signing = Mandatory

2012-09-28 Thread hceute...@gmail.com
One more thing to add: I'm pretty sure you cannot force signing and still send unencrypted passwords to third party SMB servers (which Samba is): Microsoft network client: Send unencrypted password to third-party SMB servers Enabled Otherwise that also seems to conflict... On Sep 26, 2012 11:06

Re: [Samba] Why smbd (version 4.1.0) uses source3/smbd/server.c not source4/smbd/server.c

2012-09-28 Thread hceute...@gmail.com
At first glance, and it doesn't look like you are firing up the smbd daemon as root. It has to be started as root, or else you definitely will see lots of access denied errors against log files. On Sep 28, 2012 7:45 PM, Jun Yi yi.jun.m...@gmail.com wrote: Dear everybody, Could anybody told me

Re: [Samba] Moving to Samba4, DNS problems.

2012-09-28 Thread hceute...@gmail.com
Do you still have DNS servers on Windows servers? It could be your prior settings are blocking changes as they think they are unauthorized DNS updates. I think it is referred to as authoritative updates.. On Sep 25, 2012 5:59 AM, Aleix Dorca Josa ado...@uda.ad wrote: Hi, I've spent the last

Re: [Samba] 3.6.8: Winbind/Active Directory: lsass.exe process run cpu to 100%

2012-09-28 Thread Heather Choi
You definitely should have files placed *before* winbind of passwd, group and shadow, like: passwd: files winbind shadow: files winbind group: files winbind Otherwise, you will be hitting AD a whole ton for localized users and definitely root with services running. On

Re: [Samba] Why smbd (version 4.1.0) uses source3/smbd/server.c not source4/smbd/server.c

2012-09-28 Thread Andrew Bartlett
On Fri, 2012-09-28 at 17:45 -0700, Jun Yi wrote: Dear everybody, Could anybody told me the reason? Does the code of samba 3 and samba 4 mix together in the master branch. How can I let smbd be compiled from source4/smbd/server.c? source4/smbd/server.c is compiled as 'samba'. the

Re: [Samba] Winbind issue using samba 3.6.3

2012-09-28 Thread Heather Choi
Looks like you have a potentially conflicting idmap block here: idmap backend = rid:DOMAN=1-2 and here: idmap uid = 1-2 idmap gid = 1-2 This is more contemporary with Samba 3.6: idmap config * : backend = tdb idmap config * : range = 20001-3 idmap config

[Samba] BIND-DLZ refuses to update

2012-09-28 Thread Andrew Bartlett
On Sat, 2012-09-29 at 04:10 +0400, Dmitry Khromov wrote: Hello. We have a couple of questions regarding Samba 4.1.0pre1-GIT-aad669b running on Gentoo GNU/Linux 2) We have a problem with Samba refusing to update DNS records with Gentoo's BIND 9.9.1_p3 (GSSAPI, DLZ) BIND log says: ...

Re: [Samba] Moving to Samba4, DNS problems.

2012-09-28 Thread Aleix Dorca Josa
Yes, I do have a Windows 2003 DNS server, the one that has the DC. That's it. When all stuff is replicated to Samba4 the records I've mentioned are missing. Do you thinks there's some kind of configuration on the Windows 2003 DNS side that I should change? Could you please elaborate your

[SCM] Samba Shared Repository - branch v3-6-test updated

2012-09-28 Thread Karolin Seeger
The branch, v3-6-test has been updated via d0eb11f Fix bug #9189 - SMB2 Create doesn't return correct MAX ACCESS access mask in blob. via 0a1f8e7 Add some const to can_delete_file_in_directory(). from 16a3b6e quota: add supprt for gfs2

[SCM] Samba Shared Repository - branch v3-6-test updated

2012-09-28 Thread Karolin Seeger
The branch, v3-6-test has been updated via f2d6c00 s3-spoolss: Fix builtin forms order to match Windows again. from d0eb11f Fix bug #9189 - SMB2 Create doesn't return correct MAX ACCESS access mask in blob. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test - Log

[SCM] Samba Shared Repository - branch v3-6-test updated

2012-09-28 Thread Karolin Seeger
The branch, v3-6-test has been updated via d4faae3 Fix bug #9016 - Connection to outbound trusted domain goes offline. from f2d6c00 s3-spoolss: Fix builtin forms order to match Windows again. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test - Log

[SCM] Samba Shared Repository - branch v3-5-test updated

2012-09-28 Thread Karolin Seeger
The branch, v3-5-test has been updated via 265ff55 Fix bug #9016 - Connection to outbound trusted domain goes offline. from bea4512 quota: add supprt for gfs2 http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-test - Log

[SCM] Samba Shared Repository - branch v3-6-test updated

2012-09-28 Thread Karolin Seeger
The branch, v3-6-test has been updated via 834c817 selftest: we fail samba3.smb2.compound.interim2 via f9773cf s4:torture:smb2:compound: remove two unused macros (cherry picked from commit 6f6b1c6ac15f225978e8c2d67c1a817d9e098317) via 51ae753 s4:torture:smb2: don't skip

[SCM] Samba Shared Repository - branch v3-6-test updated

2012-09-28 Thread Karolin Seeger
The branch, v3-6-test has been updated via d0b872e Fix bug #9213 - Bad ASN.1 NegTokenInit packet can cause invalid free. from 834c817 selftest: we fail samba3.smb2.compound.interim2 http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test - Log

[SCM] Samba Shared Repository - branch v3-5-test updated

2012-09-28 Thread Karolin Seeger
The branch, v3-5-test has been updated via 1b85990 Fix bug #9213 - Bad ASN.1 NegTokenInit packet can cause invalid free. from 265ff55 Fix bug #9016 - Connection to outbound trusted domain goes offline. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-test - Log

[SCM] Samba Shared Repository - branch v3-6-test updated

2012-09-28 Thread Karolin Seeger
The branch, v3-6-test has been updated via f3f960b s3-smbd: Don't segfault if user specified ports out for range. from d0b872e Fix bug #9213 - Bad ASN.1 NegTokenInit packet can cause invalid free. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test - Log

[SCM] Samba Shared Repository - branch v3-5-test updated

2012-09-28 Thread Karolin Seeger
The branch, v3-5-test has been updated via 60b15f3 s3-smbd: Don't segfault if user specified ports out for range. from 1b85990 Fix bug #9213 - Bad ASN.1 NegTokenInit packet can cause invalid free. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-test - Log

[SCM] Samba Shared Repository - branch v3-5-test updated

2012-09-28 Thread Karolin Seeger
The branch, v3-5-test has been updated via 157b88d Fix bug #7781 (Samba transforms ShareName to lowercase when adding new share via MMC) from 60b15f3 s3-smbd: Don't segfault if user specified ports out for range. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-test - Log

[SCM] Samba Shared Repository - branch v4-0-test updated

2012-09-28 Thread Karolin Seeger
The branch, v4-0-test has been updated via c10debd s3-smbd: Don't segfault if user specified ports out for range. via d5f5a6a Fix bug #9213 - Bad ASN.1 NegTokenInit packet can cause invalid free. via 4d295c9 s4:dns.py: reproducer for (bug #9184) via c362ed5

[SCM] Samba Shared Repository - branch master updated

2012-09-28 Thread Karolin Seeger
The branch, master has been updated via b9ca792 WHATSNEW: Add changed parameters. via e30937e WHATSNEW: Start release notes for Samba 4.0.0rc2. from a6be8a9 Support UPN_DNS_INFO in the PAC http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

autobuild: intermittent test failure detected

2012-09-28 Thread autobuild
The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2012-09-28-1628/flakey.log The samba3 build logs are available here:

[SCM] Samba Shared Repository - branch master updated

2012-09-28 Thread David Disseldorp
The branch, master has been updated via 0d7a2af vfs: check full_audit enum-str mapping on startup via e8e91fb vfs: add missing pwrite ops to full_audit from b9ca792 WHATSNEW: Add changed parameters. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

autobuild: intermittent test failure detected

2012-09-28 Thread autobuild
The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2012-09-28-2231/flakey.log The samba3 build logs are available here:

[SCM] Samba Shared Repository - branch master updated

2012-09-28 Thread Günther Deschner
The branch, master has been updated via 837f47d s3-winbindd: Adjust error code loop logic in rpc_trusted_domains(). via e792a44 s3-lsa: Flesh out the returned info in _lsa_EnumTrustedDomainsEx(). via 8e53b9d s3-winbindd: Allow DNS resolution of trusted domains if DNS

autobuild: intermittent test failure detected

2012-09-28 Thread autobuild
The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2012-09-29-0438/flakey.log The samba3 build logs are available here: