Re: [Samba] PROPOSAL: Remove SWAT in Samba 4.1

2013-02-20 Thread Sebastian Arcus
On 20/02/13 03:24, Gregory Sloop wrote: DS On 02/17/2013 6:02 PM, Andrew Bartlett wrote: As most of you would have noticed, we have now had 3 CVE-nominated security issues for SWAT in the past couple of years. -SNIP- Therefore, it was suggested on a private list that we just drop SWAT. I

Re: [Samba] Samba how to use wins.tdb

2013-02-20 Thread Daniel Müller
Which version of samba, 3 or 4? With samba 4 there is no need of a wins server any more. With samba 3 you are better with samba4wins a real Microsoft wins substitute. Can push and pull with w1008 r2 wins. Tested in my production environment. Greetings Daniel

Re: [Samba] Question marks, asterisks, colons in filenames

2013-02-20 Thread Jonathan Buzzard
On Tue, 2013-02-19 at 20:50 +0100, Ray wrote: Hi, at home I only use Linux, so no problem there. Even all my Squeezebox radios haven't got any problem with special characters, which is not really a surprise, because under the hood they also run Linux. But I also run a site-to-site VPN

Re: [Samba] PROPOSAL: Remove SWAT in Samba 4.1

2013-02-20 Thread Robert Schetterer
Am 18.02.2013 01:02, schrieb Andrew Bartlett: As most of you would have noticed, we have now had 3 CVE-nominated security issues for SWAT in the past couple of years. At the same time, while I know many of our users use SWAT, we just don't have anybody to maintain it inside the Samba Team.

Re: [Samba] Question marks, asterisks, colons in filenames

2013-02-20 Thread Sven Tegethoff
On 20.02.2013 10:37, Jonathan Buzzard wrote: The issue is that you have been abusing your file system to store metadata in the file names. A practice that is always going to end in trouble. For example what do you do when a filename for your chosen metadata format exceeds the maximum length

Re: [Samba] Request to an old post - Having problem with Samba Internal DNS

2013-02-20 Thread Alex Matthews
Hiya, I am also having problems with this. When samba starts I get tsig verify failures: [2013/02/20 10:49:05, 0] ../source4/smbd/server.c:369(binary_smbd_main) samba version 4.0.3 started. Copyright Andrew Tridgell and the Samba Team 1992-2012 [2013/02/20 10:49:06, 0]

Re: [Samba] PROPOSAL: Remove SWAT in Samba 4.1

2013-02-20 Thread Andrew Bartlett
On Wed, 2013-02-20 at 08:29 +, Sebastian Arcus wrote: On 20/02/13 03:24, Gregory Sloop wrote: DS On 02/17/2013 6:02 PM, Andrew Bartlett wrote: As most of you would have noticed, we have now had 3 CVE-nominated security issues for SWAT in the past couple of years. -SNIP-

Re: [Samba] Request to an old post - Having problem with Samba Internal DNS

2013-02-20 Thread Andrew Bartlett
On Wed, 2013-02-20 at 10:53 +, Alex Matthews wrote: Hiya, I am also having problems with this. When samba starts I get tsig verify failures: [2013/02/20 10:49:05, 0] ../source4/smbd/server.c:369(binary_smbd_main) samba version 4.0.3 started. Copyright Andrew Tridgell and the

Re: [Samba] Request to an old post - Having problem with Samba Internal DNS

2013-02-20 Thread Alex Matthews
On 20/02/2013 10:58, Andrew Bartlett wrote: On Wed, 2013-02-20 at 10:53 +, Alex Matthews wrote: Hiya, I am also having problems with this. When samba starts I get tsig verify failures: [2013/02/20 10:49:05, 0] ../source4/smbd/server.c:369(binary_smbd_main) samba version 4.0.3

Re: [Samba] PROPOSAL: Remove SWAT in Samba 4.1

2013-02-20 Thread Sebastian Arcus
On 20/02/13 10:57, Andrew Bartlett wrote: On Wed, 2013-02-20 at 08:29 +, Sebastian Arcus wrote: On 20/02/13 03:24, Gregory Sloop wrote: DS On 02/17/2013 6:02 PM, Andrew Bartlett wrote: As most of you would have noticed, we have now had 3 CVE-nominated security issues for SWAT in the

[Samba] is there an equivalent to libjcifs for Python?

2013-02-20 Thread Jean-Daniel
Hi list, What tools in Python can I use to: - connect to a remote share - list the files - list the ACLS of the files - get the content I am looking for something functionally similar to the libjcifs. Is there a nice fuse integration with Samba that would implement the mentioned features?

[Samba] Complete migration Windows 2008 R2 PDC to samba4

2013-02-20 Thread Sérgio Henrique
Hi everbody, i Am trying to perform a full migration from windows 2008 R2 x64 primary domain controler (forest and domain at 2003 level) with DNS AD integrated zone to samba4. I have created a test environment to perform this task but i am unable to execute a full migration to samba4. I have

[Samba] getent group return only local users

2013-02-20 Thread Hervé Hénoch
Hello I use S4 file server with nsswitch.conf (ad server is another Linux with S4) : passwd: compat winbind group: compat winbind I wonder how it can be possible that : * getent passwd is ok * but getent group returns only local users (wbinfo -g is ok and gives

[Samba] Error in DRS Showrepl

2013-02-20 Thread BOTZ Franck (Informaticien) - DDT 67/SG/MGI/CI
Hi. Here is my problem. I have 2 DC (DC1, DC2) From DC1 I run samba-tool drs showrepl DC1 - INBOUND NEIGHBORS : OK OUTBOUND NEIGHBORS : OK KCC CONNECTION OBJECTS Connection -- Connection

Re: [Samba] PROPOSAL: Remove SWAT in Samba 4.1

2013-02-20 Thread Gregory Sloop
-SNIP- However, for anyone looking for a web version of the smb.conf for 4.0.3 - see this wiki page. http://wiki.samba.org/index.php/Documentation_Links/samba4-smb.conf SA Just curious what is the source of the smb.conf manual above. I think your question was answered in terms of S4 vs S3

[Samba] samba_upgradeprovision and msDS-SupportedEncryptionTypes / msDS-NcType

2013-02-20 Thread Dominic Evans
Originally I had a Win 2003 DC. I added a samba 4.0.0 DC to the domain, allow full replication to take place and then transferred all the roles to the samba 4.0.0 dc. Finally I removed the Windows DC from the domain. Everything has been working well. Today I upgraded from samba 4.0.0 to 4.0.3 and

[Samba] permissions nobody:nogroup using winbind

2013-02-20 Thread Steve Snedeker
I have successfully configured winbind in 12.04 on a VM, but when I tried to install it on a physical box using the exact same process my permissions are screwed up. On my home directory which is mounted using autofs from an nfs4 file server the permissions are showing nobody:nogroup I've

[Samba] What will happen if I disable reverse check for \\server\printer on samba?

2013-02-20 Thread Alex Korobkin
Hi team, In Samba 3.6, rpc_server/spoolss/srv_spoolss_nt.c file has this stance at line 1740: /* some sanity check because you can open a printer or a print server */ /* aka: \\server\printer or \\server */ DEBUGADD(3,(checking name: %s\n, r-in.printername)); result =

Re: [Samba] samba_upgradeprovision and msDS-SupportedEncryptionTypes / msDS-NcType

2013-02-20 Thread Gregory Sloop
DE Originally I had a Win 2003 DC. I added a samba 4.0.0 DC to the DE domain, allow full replication to take place and then transferred all DE the roles to the samba 4.0.0 dc. Finally I removed the Windows DC from DE the domain. DE Everything has been working well. Today I upgraded from samba

Re: [Samba] Error in DRS Showrepl

2013-02-20 Thread Ricky Nance
On DC2 do you have nameserver ip.to.dc.1 in your /etc/resolv.conf ? Also the Warnings are just that, a warning, they are safe to ignore. (I have them on mine, and my replication works fine.) Ricky On Wed, Feb 20, 2013 at 8:44 AM, BOTZ Franck (Informaticien) - DDT 67/SG/MGI/CI

Re: [Samba] getent group return only local users

2013-02-20 Thread Ricky Nance
Did you make the appropriate symlinks for winbind.so ? I use Ubuntu and mine look like the following: root@server:/lib/x86_64-linux-gnu# ls -alh | grep winbind lrwxrwxrwx 1 root root40 Nov 23 14:45 libnss_winbind.so - /usr/local/samba/lib/libnss_winbind.so.2 lrwxrwxrwx 1 root root40 Nov

Re: [Samba] Question marks, asterisks, colons in filenames

2013-02-20 Thread Jeremy Allison
On Wed, Feb 20, 2013 at 11:30:37AM +0100, Sven Tegethoff wrote: What we have here is a problem of two incompatible text fields, and it does not make a difference if that incompatibility is a filenames in a file system or some table in some kind of non-filesytem media library. If you can't

[Samba] Problem with User and Group Ownership listing

2013-02-20 Thread Wes Modes
I am installing smb 3.5 on a CentOS 6.2 host using smbldap-tools. I've previously installed a similar configuration on RHEL4 using smb 3.0 but CentOS now uses nss-pam-ldapd and nslcd instead of nss_ldap, so the configurations cannot be moved straight across. When I do a listing of a share

[Samba] Samba 4 DC - idmap config on a samba 4 member server

2013-02-20 Thread BOTZ Franck (Informaticien) - DDT 67/SG/MGI/CI
Hi I configure a member server as discribe on this page : http://wiki.samba.org/index.php/Samba4/Domain_Member My smb.conf looks like that : [global] workgroup = DDCS security = ADS realm = DDCS.LOCAL encrypt passwords = yes idmap config *:backend = tdb idmap config

[Samba] Samba4 Auto-start

2013-02-20 Thread Mike Ray
Hello all, I'll cut to the chase -- several weeks ago, I thought I had an upstart configuration file that would start Samba4 when the VM was turned on; but it turns out I was wrong. At the time there was nothing on the wiki about it (the links were broken). The script I thought was working

Re: [Samba] Samba4 Auto-start

2013-02-20 Thread Mike Ray
Clarification, as it looks as though highlighting is frowned upon: For that first netstat command, the lines that indicate smbd is on that port are the lines that are a direct consequence of the script (i.e. remove or comment out the script, and those lines wouldn't show) - Original

[Samba] Samba 4 DC - idmap config on a samba 4 member server

2013-02-20 Thread BOTZ Franck (Informaticien) - DDT 67/SG/MGI/CI
Without idmap line, it work too. [global] workgroup = DDCS security = ADS realm = DDCS.LOCAL encrypt passwords = yes # idmap config *:backend = tdb # idmap config *:range = 70001-8 # idmap config DDCS:backend = ad # idmap config DDCS:schema_mode = rfc2307 # idmap

[Samba] LDAP recommendations please

2013-02-20 Thread ray klassen
Currently I have a samba 3 domain setup with an LDAP backend. It's been very convenient and fault tolerant for me to put read-only replicas of the ldap database on all servers that use LDAP authentication. I'd like to keep doing that after switching to samba 4. Can that be done? -- To

Re: [Samba] Samba4 Auto-start

2013-02-20 Thread Gregory Sloop
MR I'll cut to the chase -- several weeks ago, I thought I had an MR upstart configuration file that would start Samba4 when the VM was MR turned on; but it turns out I was wrong. At the time there was MR nothing on the wiki about it (the links were broken). MR The script I thought was working

Re: [Samba] Samba4 Auto-start

2013-02-20 Thread Ricky Nance
My bet is that smbd is spawning before your upstart script causing major problems. Try to issue a update-rc.d -f smbd remove then reboot and see if your problem goes away. Ricky On Wed, Feb 20, 2013 at 3:15 PM, Gregory Sloop gr...@sloop.net wrote: MR I'll cut to the chase -- several weeks

[Samba] Samba 4 cross-compile for ARM

2013-02-20 Thread Liam
I'm about to fund development of an OpenEmbedded recipe to build Samba 4 on a Beagleboard XM (TI OMAP family). If anyone's done this already or is actively working on it, please get in touch with me so we can avoid duplicating efforts. Thanks! -- To unsubscribe from this list go to the

Re: [Samba] is there an equivalent to libjcifs for Python?

2013-02-20 Thread Andrew Bartlett
On Wed, 2013-02-20 at 14:49 +0100, Jean-Daniel wrote: Hi list, What tools in Python can I use to: - connect to a remote share - list the files - list the ACLS of the files - get the content Samba 4.0 ships with python bindings for our CIFS client, and can do exactly this. See

Re: [Samba] Samba 4 DC - idmap config on a samba 4 member server

2013-02-20 Thread Hervé Hénoch
Hello Franck I had the same problem. When I removed config in the two lines, getent group worked. idmap config *:backend = tdb idmap config *:range = 70001-8 For the role of idmap you can read : http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/idmapper.html Regards Le

[SCM] Samba Shared Repository - branch master updated

2013-02-20 Thread Christian Ambach
The branch, master has been updated via 3d29bb2 s3:rpc_client fix a crash from 2f4b21b ntdb: switch between secrets.tdb and secrets.ntdb depending on 'use ntdb' http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log

[SCM] Samba Shared Repository - branch master updated

2013-02-20 Thread Andrew Bartlett
The branch, master has been updated via 46ab33d build:autoconf: fix output of syslog-facility check from 3d29bb2 s3:rpc_client fix a crash http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit