[Samba] samba 3.2.2 ?
Hai, maybe it's a bit early to ask, but is there a date when 3.2.2 wil be released. thanx. Louis -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba + ads / user and group update-probem
Hello subscribers, we have a problem with keeping our group memberships up to date. If we e.g. remove a group membership from a user, we don´t see any change when trying wbinfo -r j.doe or groups j.doe. Even after hours there ist no update. We also tried restarting smb, nmb, winbindd. Anyone has an idea? Some additional info: |samba/winbind-version: 3.2.0-17.fc9 |Here our smb.conf | |[global] |winbind cache time = 1m |workgroup = xy-gmbh |netbios name = smbtestfc9 |realm = TRANSACT-GMBH.DE |idmap uid = 1-15000 |idmap gid = 1-15000 |winbind separator = / |winbind use default domain = Yes |security = ADS |encrypt passwords = yes |#Optional. Use only if Samba cannot determine the Kerberos server automatically. |#password server = 192.168.2.50 |client use spnego = yes |log level = 3 |winbind enum users = yes |winbind enum groups = yes | |[test] |comment = test |path = /tmp |browseable = yes |read only = no |guest ok = no |valid users = XY-GMBH/a.someone, XY-GMBH/j.someoneelse, XY-GMBH/m.anotherguy |create mask = 0770 |directory mask = 0770 |and our krb5.conf | |[logging] | default = FILE:/var/log/krb5libs.log | kdc = FILE:/var/log/krb5kdc.log | admin_server = FILE:/var/log/kadmind.log | |[libdefaults] | default_realm = XY-GMBH.DE | dns_lookup_realm = false | dns_lookup_kdc = false | ticket_lifetime = 24h | forwardable = yes | |[realms] | XY-GMBH.DE = { | kdc = 192.168.1.11:88 | default_domain = xy-gmbh.de | } | |[domain_realm] | .transact-gmbh.de = XY-GMBH.DE | transact-gmbh.de = XY-GMBH.DE | |[appdefaults] | pam = { | debug = false | ticket_lifetime = 36000 | renew_lifetime = 36000 | forwardable = true | krb4_convert = false | } |# wbinfo -p |Ping to winbindd succeeded |# net ads testjoin |Join is OK |# klist |Ticket cache: FILE:/tmp/krb5cc_0 |Default principal: [EMAIL PROTECTED] | |Valid starting ExpiresService principal |08/14/08 15:37:03 08/15/08 01:37:05 krbtgt/[EMAIL PROTECTED] |renew until 08/15/08 15:37:03 | | |Kerberos 4 ticket cache: /tmp/tkt0 |klist: You have no tickets cached -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Signing problem with trusted domain in 3.2.0
Hello I seem to be having signing problems with 3.2.0 I have 2 PDCs on 2 different sites (say A and B) both running 3.2.0, with the line server signing = auto in smb.conf. There is a one way trust (B trusting A) setup. While everything works correctly on both sites for local machines access to local shares (a site A user logged on a site A machine can perfectly access shares of site A PDC). The problem appears when one user logged on site A tries to access share on site B PDC, or a user of site A tries to log on site A domain from a site B machine. This problem disappears if server signing is set to No in smb.conf. I could make a level 10 log of smbd process while the problem appears, and could isolate the following lines : [2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285) simple_packet_signature: sequence number 2 [2008/08/15 12:24:29, 0] libsmb/smb_signing.c:srv_check_incoming_message(754) srv_check_incoming_message: BAD SIG: seq 2 wanted SMB signature of [2008/08/15 12:24:29, 5] lib/util.c:dump_data(2226) [000] 52 70 FA 2C 55 E1 28 A4 Rp.,U.(. [2008/08/15 12:24:29, 0] libsmb/smb_signing.c:srv_check_incoming_message(758) srv_check_incoming_message: BAD SIG: seq 2 got SMB signature of [2008/08/15 12:24:29, 5] lib/util.c:dump_data(2226) [000] 8E 53 67 0F 36 6B FC DB .Sg.6k.. and then smbd seems to turn off signing : [2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285) simple_packet_signature: sequence number 4294967293 [2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285) simple_packet_signature: sequence number 4294967294 [2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285) simple_packet_signature: sequence number 4294967295 [2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285) simple_packet_signature: sequence number 0 [2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285) simple_packet_signature: sequence number 1 [2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285) simple_packet_signature: sequence number 2 [2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285) simple_packet_signature: sequence number 3 [2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285) simple_packet_signature: sequence number 4 [2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285) simple_packet_signature: sequence number 5 [2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285) simple_packet_signature: sequence number 6 [2008/08/15 12:24:29, 5] libsmb/smb_signing.c:signing_good(243) srv_check_incoming_message: signing negotiated but not required and peer isn't sending correct signatures. Turning off. And at some point, the connexion is terminated (and windows pops up some error message saying the server is no more available): [2008/08/15 12:24:29, 10] lib/util.c:dump_data(2226) [000] 49 50 43 00 00 00 00 IPC [2008/08/15 12:24:29, 5] lib/util_sock.c:read_socket_with_timeout(928) read_socket_with_timeout: blocking read. EOF from client. [2008/08/15 12:24:29, 10] smbd/process.c:receive_smb_raw_talloc(276) receive_smb_raw: NT_STATUS_END_OF_FILE [2008/08/15 12:24:29, 3] smbd/process.c:smbd_process(2027) receive_message_or_smb failed: NT_STATUS_END_OF_FILE, exiting [2008/08/15 12:24:29, 5] lib/gencache.c:gencache_shutdown(93) Closing cache file The complete log is available at http://www.thom.fr.eu.org/log.smbd Anybody gone through similar problem ? Thanks François -- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba + acl
Hello I am using samba 3.2.1 version on centos 5.2 with ldap. Everything is working fine as i expected. I have shared a share , say , NOA on samba server. Now i log into windows and access the share and tried to give rights on share by right click properties security . I want to give a group call noag only read , write and but no permission of delete on share NOA . I have a group who can full access to the share NOA. I right click on it , use security tab to give only read permission , it works fine, but when i select? all the options except delete and full control and click ok , it chages to full control , which is what i don't want. I am searched a lot but couldn't find the solution. Is there any solutiont for this or this is not possible in samba. Thanks in advance Bikrish -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Signing problem with trusted domain in 3.2.0
On Mon, Aug 18, 2008 at 02:13:16PM +0200, [EMAIL PROTECTED] wrote: I seem to be having signing problems with 3.2.0 Should be fixed in 3.2.1. Volker pgp0CB500xyZh.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba + ads / user and group update-probem
On Mon, Aug 18, 2008 at 02:13:10PM +0200, Anian Wurzenberger wrote: we have a problem with keeping our group memberships up to date. If we e.g. remove a group membership from a user, we don´t see any change when trying wbinfo -r j.doe or groups j.doe. Even after hours there ist no update. We also tried restarting smb, nmb, winbindd. Anyone has an idea? Does it still fail if j.doe logs in? If that one fixes it, then you see effects of the netsamlogon_cache.tdb. Volker pgpxtWm8sPeS0.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Windows vista ultimate samba 3.0.31
Hello to all I have setup samba 3.0.31 as PDC successful with xp clients. Now I have a vista ultimate pc which I cannot join to the domain. The error message when I try to join to the domain is: The Domain is unavailable or the connection could not be established. What I've done so far: Run secpol.msc -- Local Plicies--Security Options --Lan Manager authentication level--changed it to: LM and NTLM- use NTLMV2 session security if negotiated. Had someone did the trick?? Greetings Daniel Müller Tropenklinik Paul-Lechler-Krankenhaus [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] samba + ads / user and group update-probem
Thank you for your answer. Where should the user log in? Into a share? Into an AD-connected Computer? Anian -Original Message- From: Volker Lendecke [mailto:[EMAIL PROTECTED] Does it still fail if j.doe logs in? If that one fixes it, then you see effects of the netsamlogon_cache.tdb. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] [ANNOUNCE] Samba 3.2.1 Available for Download.eml
Hi Michael, Everything compiled, and installed with the proper links. I'm getting ready to test a RPM build to see if this works. Will let everyone know in about 1-2 hours. James -Original Message- From: Michael Adam [mailto:[EMAIL PROTECTED] Sent: Friday, August 15, 2008 4:05 PM To: James Kosin Subject: Re: [Samba] [ANNOUNCE] Samba 3.2.1 Available for Download.eml Hi, James Kosin wrote: No patch was attached that's basically the one downside for me of using mutt. I keep forgetting the attachements I promised... :-) Btw: You can contact me under the nic obnox on the freenode irc channed samba-technical if you need some more realtime troubleshooting. Cheers - Michael -- Michael Adam [EMAIL PROTECTED] [EMAIL PROTECTED] SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen phone: +49-551-37-0, fax: +49-551-37-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen http://www.SerNet.DE, mailto: Info @ SerNet.DE -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] WG: Windows vista ultimate samba 3.0.31
I found the solution: I tried the srvmgr tool from microsoft to get connected to my samba 3 domain (from an XP client). And this tool told me the same There is no PDC found for your domain. You may go on but but your rights may be Restricted. As I logged on I saw that both my PDC and BDC where BDCs. I stopped my BDC. Logged on to my PDC and remembering that I had also smbd4wins running on the same machine I restarted smbd4wins and then samba and everithing worked fine. I could join the vista client to the domain on the fly. -Ursprüngliche Nachricht- Von: Daniel Müller [mailto:[EMAIL PROTECTED] Gesendet: Montag, 18. August 2008 15:00 An: 'samba@lists.samba.org' Betreff: Windows vista ultimate samba 3.0.31 Hello to all I have setup samba 3.0.31 as PDC successful with xp clients. Now I have a vista ultimate pc which I cannot join to the domain. The error message when I try to join to the domain is: The Domain is unavailable or the connection could not be established. What I've done so far: Run secpol.msc -- Local Plicies--Security Options --Lan Manager authentication level--changed it to: LM and NTLM- use NTLMV2 session security if negotiated. Had someone did the trick?? Greetings Daniel Müller Tropenklinik Paul-Lechler-Krankenhaus [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] [ANNOUNCE] Samba 3.2.1 Available for Download.eml
Hi James, James Kosin wrote: Everything compiled, and installed with the proper links. Great! I'm getting ready to test a RPM build to see if this works. Will let everyone know in about 1-2 hours. Thanks for the feedback. Please re-open and comment bug #5592, should any problems (re)occur. Thanks! Cheers - Michael -- Michael Adam [EMAIL PROTECTED] [EMAIL PROTECTED] SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen phone: +49-551-37-0, fax: +49-551-37-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen http://www.SerNet.DE, mailto: Info @ SerNet.DE pgpWJFapSab74.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba 3.2.2 ?
Hi, On Mon, Aug 18, 2008 at 09:18:16AM +0200, L.P.H. van Belle wrote: maybe it's a bit early to ask, but is there a date when 3.2.2 wil be released. No, it is not too early... ;-) 3.2.2 will be out tomorrow. Please see Samba Wiki [1] for more information about release planning. [1] http://wiki.samba.org/index.php/Release_Planning_for_Samba_3.2#3.2.2 Cheers, Karolin -- SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen phone: +49-551-37-0, fax: +49-551-37-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen http://www.SerNet.DE, mailto: Info @ SerNet.DE pgpdF4a1y0j49.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] samba 3.2.2 ?
GREAT !! :D Then this release will make lenny :D ( at least, for me :D ) Thanx for the reply Louis -Oorspronkelijk bericht- Van: Karolin Seeger [mailto:[EMAIL PROTECTED] Verzonden: maandag 18 augustus 2008 16:28 Aan: L.P.H. van Belle CC: samba@lists.samba.org Onderwerp: Re: [Samba] samba 3.2.2 ? Hi, On Mon, Aug 18, 2008 at 09:18:16AM +0200, L.P.H. van Belle wrote: maybe it's a bit early to ask, but is there a date when 3.2.2 wil be released. No, it is not too early... ;-) 3.2.2 will be out tomorrow. Please see Samba Wiki [1] for more information about release planning. [1] http://wiki.samba.org/index.php/Release_Planning_for_Samba_3.2#3.2.2 Cheers, Karolin -- SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen phone: +49-551-37-0, fax: +49-551-37-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen http://www.SerNet.DE, mailto: Info @ SerNet.DE -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.x access rights issue with secondary groups or Unix rights
Hi experts I have a trouble in access rights I am running Samba 3.0.31 on Solaris 10 x86 64 bits as member server of an Active Directory 2003 R2 domain (MYDOMAIN) using Identity Management for Unix I set rights to access a sub folder of a Samba share. On Solaris the user toto jdoe can write a new file. From Windows, the same user can't. Itlooks like OK when the primary group (grp1) of the user is the group that own the subtree but not when this owner group is a secondary group (grp2). It is OK If I set explicitly the user right from MS Windows I can't change the access rights to the group from MS Windows I suspect Unix ownership or ACL to be the root cause but I can't exclude a Samba issue Thanks for help Here a long details on my config (sorry for the parts that take place and no useful info, so just go to the valuable data) An extract from my smb.conf [global] ## part windows ## host msdfs = no netbios name = machines01 netbios aliases = 2store server string = 2store workgroup = MYDOMAIN realm = MYDOMAIN.LOCAL security = ADS use kerberos keytab = yes obey pam restrictions = Yes use spnego = yes client use spnego = yes password server = machinew01.MYDOMAIN.local machinew07.MYDOMAIN.local # unix extensions = no machine password timeout = 0 # logon path = \\machines01\profiles\%U template shell = /bin/bash hosts allow = 127.0.0.1, 192.168.10.0/255.255.255.0, 192.168.11.0/255.255.255.0 ## part samba engine ## max log size = 5 log level = 10 syslog = 0 log file = /var/log/samba/%m socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 ## part ldap et idmap ## ldap admin dn = cn=myadmin,cn=users,dc=MYDOMAIN,dc=local ldap idmap suffix = ou=idmap ldap ssl = no idmap backend = ldap:ldap://machinew01.MYDOMAIN.local ldap:ldap://machinew07.MYDOMAIN.local #idmap backend = idmap_rid:MYDOMAIN=1-2 #idmap backend = ad idmap uid = 1-2 idmap gid = 1-2 #idmap config MYDOMAIN:schema_mode = rfc2307 ## part winbind ## winbind nss info = rfc2307 winbind cache time = 5 winbind refresh tickets = Yes winbind use default domain = Yes winbind trusted domains only = Yes winbind nested groups = Yes winbind enum groups = Yes winbind enum users = Yes [data] comment = Samba data folder path = /samba/data read only = No create mask = 0740 directory mask = 0750 guest ok = Yes Check the Unix name resolution getent passwd jdoe jdoe:x:10037:10002:John DOE:/home/jdoe:/bin/sh getent group grp2 grp2::10004:myadmin,jdoe,demo1,demo2,demo3 I can check that Samba can resolve if the user is member of the group /usr/local/samba/bin/net ads user info jdoe grp2 grp1 /usr/local/samba/bin/wbinfo -G 10004 S-1-5-21-2269603188-533060101-51835291-1642 /usr/local/samba/bin/wbinfo -Y S-1-5-21-2269603188-533060101-51835291-1642 10004 /usr/local/samba/bin/wbinfo -R 10004 winbind_lookup_rids failed Could not lookup RIDs 10004 Review of the access rights ls -al /samba/data/level1/level2/level3/level4 drwxrwsr-x+ 19 myadmin grp2 512 Aug 15 11:18 . drwxr-x--- 9 myadmin grp1 512 Aug 12 16:06 .. drwxrws---+ 3 myadmin grp2 512 Jun 27 10:58 general -rwxr-+ 1 jdoe grp20 Aug 15 11:18 New Text Document from Windows.txt -rwxrw 1 jdoe grp2 44 Aug 15 11:14 newdocfromunix.txt *** ACTION: I try on Unix to change the group owner of .. by grp2 but that remove all jdoe access from Windows Test POSIX ACLs getfacl -a /samba/data/level1/level2/level3/level4/ # file: /samba/data/level1/level2/level3/level4/ # owner: myadmin # group: grp2 user::rwx group::rwx #effective:rwx other:r-x getfacl -a /samba/data/level1/level2/level3 # file: /samba/data/level1/level2/level3 # owner: myadmin # group: grp1 user::rwx group::r-x #effective:r-x mask:r-x other:--- getfacl -a /samba/data/level1/level2 # file: /samba/data/level1/level2 # owner: myadmin # group: grp1 user::rwx group::r-x #effective:r-x other:r-x getfacl -a /samba/data/level1 # file: /samba/data/level1 # owner: root # group: root user::rwx group::r-x #effective:r-x mask:r-x other:r-x getfacl -a /samba/data # file: /samba/data # owner: myadmin # group: grp1 user::rwx user:user123:rwx#effective:rwx group::r-x #effective:r-x mask:rwx other:r-x From MS Windows side properties/security The group is in the group and user names list there is no check box in the Allow or deny clomn Advanced/permissions TypeNamePermission
Re: [Samba] Re: Question to smbclient and domain users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Which I find unfortunate as you end up using the username that Windows provides, not the username the person actually gets (if I'm not mistaken). Andreas Ladanyi wrote: | The answer is to use %U instead %u (from the old smb.conf) then | everything work :-) | | Andreas Ladanyi schrieb: | Hi, | | smbclient i60ws1\\public_html -U ladanyi | | results in: | | [2008/08/17 10:43:10, 0] smbd/service.c:make_connection_snum(1003) | '/var/www/public_html/IPR-OFFICE/ladanyi' does not exist or | permission denied when connecting to [public_html] Error was | Permission denied | | I use the: | | winbind use default domain = yes | | option. | | This option works for wbinfo -u/-g option. | | Is it possible to get the query from: | | /var/www/public_html/IPR-OFFICE/ladanyi | | converted to: | | /var/www/public_html/ladanyi | | | smb.conf: | | security=ads | workgroup = IPR-OFFICE | | | winbind separator = / | winbind enum users = yes | winbind enum groups = yes | winbind cache time = 60 | idmap uid = 6000-27000 | idmap gid = 600-7000 | idmap backend = ad | template shell = /bin/bash | template homedir = /home/%u | winbind use default domain = yes | winbind refresh tickets = yes | allow trusted domains = yes | winbind nss info = rfc2307 | winbind nested groups = yes | winbind normalize names = yes | | Bye, | Andy | | | - -- ~ _ _ _ _ ___ _ _ _ ~ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Systems Programmer II ~ |$| |__| | | |__/ | \| _| |[EMAIL PROTECTED] - 973/972.0922 (2-0922) ~ \__/ Univ. of Med. and Dent.|IST/AST - NJMS Medical Science Bldg - C630 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFIqaRSmb+gadEcsb4RAqmnAKCE5fyJWNlZdNYOHGdDLbQFYgJz2gCgoScX ZNN5bzQyVTfbee/F19ZXX98= =3H9a -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba 3.2.1 build system not honoring CFLAGS
Hi, I was compiling samba 3.2.1 and noticed that the Makefile doesn't use the CFLAGS I gave it. After digging into the configure script I came up with this patch. I know configure is generated from configure.in, but I was also unable to run it through my autoconf 2.62 (tried it on another machine with autoconf 2.61 and it worked) Uri. --- configure 2008-08-17 01:16:13.0 +0300 +++ samba-3.2.1/source/configure2008-08-17 01:20:32.0 +0300 @@ -11339,8 +11339,6 @@ fi if test x$debug = xyes ; then CFLAGS=${CFLAGS} -g -else - CFLAGS=-O fi CFLAGS=${CFLAGS} -D_SAMBA_BUILD_=3 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba 3.0.28, directory name is garbled.
Environment: Sun Solaris 5.10 Samba 3.0.28 (latest SUN supported version) We are currently running Totalnet Advanced Server TAS (for cifs services) but plan to replace this with SAMBA. Has anyone see this problem? I am opening a ticket with SUN also. from the UNIX command line cd /export/userdir/project dir/sub dir /file-excel.xls ( yes, there are spaces in the directory names and a trailing space .) From a PC client, XP sp2 TAS mapping: \userdir\project dir\sub dir\file-excel.xls [ note that the PC does not show the trailing space but allows access to the directory ] SAMBA mapping: \userdir\project dir\2D8YHS~L\file-excel.xls [ note that the PC shows a garbled directory name but allows access to the directory below] At some point we may go to open source to get the latest version, but, management wants to stay on SUN supported versions if possible. Thanks, Bill Evans FHCRC -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba 3.0.28, directory name is garbled.
On Mon, Aug 18, 2008 at 11:19:12AM -0700, Evans, Bill wrote: Environment: Sun Solaris 5.10 Samba 3.0.28 (latest SUN supported version) We are currently running Totalnet Advanced Server TAS (for cifs services) but plan to replace this with SAMBA. Has anyone see this problem? I am opening a ticket with SUN also. from the UNIX command line cd /export/userdir/project dir/sub dir /file-excel.xls ( yes, there are spaces in the directory names and a trailing space .) From a PC client, XP sp2 TAS mapping: \userdir\project dir\sub dir\file-excel.xls [ note that the PC does not show the trailing space but allows access to the directory ] SAMBA mapping: \userdir\project dir\2D8YHS~L\file-excel.xls [ note that the PC shows a garbled directory name but allows access to the directory below] At some point we may go to open source to get the latest version, but, management wants to stay on SUN supported versions if possible. Trailing spaces are illegal in a Windows name so Samba has to mangle them (it does the same for names with a ':' also). Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Error loading module ad.so on AIX
Dear Help, I'm working on building samba from source (version 3.0.29) on AIX v6.1. I used the following configure statement: ./configure --with-shared-modules=idmap_ad --with-krb5=/etc/krb5 CC=xlc CPPFLAGS=-I/opt/pware/include LDFLAGS=-L/opt/pware/lib I then edited the Makefile so that the following libraries were included: LIBS=-liconv -ldl -lcom_err -lnsl And then to fix an AIX specific error I updated a line in /usr/include/sys/stropts.h to read: #define mod_filename ... instead of: #define mod_name I was able to successfully compile and link everything and start samba up. However, I'm unable to get user info from winbind (using wbinfo -i) or convert SIDs to uids, uids to SIDs, SIDs to usernames or usernames to SIDs. However, wbinfo -u and wbinfo -g work just fine. When I looked at log.winbindd-idmap, I found the following error: Error loading module '/usr/local/samba/lib/idmap/ad.so': rtld: 0712-001 Symbol _talloc_zero_zeronull was referenced from the module /usr/local/samba/lib/idmap/ad.so(), but a runtime definition of the symbol was not found. So, I'm wondering if I'm just missing a library in the LIBS line in Makefile, or if it's something on the AIX side that needs to be updated for this for winbind to work properly with Active Directory. Any help would be greatly appreciated. smb.conf is below... Thanks! -Matt SMB.CONF == # Global parameters [global] workgroup = TEST realm = TEST.LOCAL security = ADS encrypt passwords = yes password server = IP.OF.AD.SERVER log level = 3 log file = /usr/local/samba/var/%m.log max log size = 50 idmap domains = TEST idmap config TEST:backend = ad idmap config TEST:default = yes idmap config TEST:schema_mode = rfc2307 # idmap config DOMAIN:range = 10-4000 winbind separator = + winbind use default domain = Yes winbind nested groups = Yes winbind enum users = yes winbind enum groups = yes winbind nss info = rfc2307 passdb backend = tdbsam [anyone] path = /home/anyone guest ok = yes browseable = yes [testing] path = /home/testing guest ok = no valid users = @TEST+testgrp2 TEST+test05 write list = @TEST+testgrp2 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] connecting to shares in other subnet : slow
Greets, samba-users, I contact this list because of a problem I face at a customer's site. We run Samba version 3.0.28-0.6-1787-SUSE-CODE10 there on a SLES 10 SP2 server. This server is located behind a firewall (run by me), that firewall allows all relevant Samba-ports through (137-139, 445). The clients are located in a separated subnet, the routing between client- and server-subnet is run by an external service-provider, we have to trust in what they do (and say). Connections work fine as soon as they are established, the problem is that the connecting itself takes way too long. There's a small batch-script doing the net use x: ... and it sometimes takes up to half an hour (!) until the shares are connected. connecting via telnet works fine, so routing and firewalling seems to work OK. Today I narrowed things down via smb ports = 445 but without improvements. Doing a net view \\our.server.domain.tld returns the shares immediately, and we also use the FQDN in the batch-script. As soon as the shares are connected, transfers are working fine and fast. Connections within the server-net start up immediately as well, so the hardware and smb.conf should be OK also afaik. [global] workgroup = ROM map to guest = Bad User log level = 2 smb ports = 445 printcap name = cups logon path = \\%L\profiles\.msprofile logon drive = P: logon home = \\%L\%U\.9xprofile usershare allow guests = Yes printing = cups cups options = raw print command = lpq command = %p lprm command = include = /etc/samba/dhcp.conf the only speciality is that we use auditing in the shares, but I don't think this might be the reason: [public] comment = fuer alle path = /mnt/public force group = users read only = No inherit acls = Yes vfs objects = full_audit full_audit:failure = all full_audit:success = all full_audit:priority = NOTICE full_audit:facility = LOCAL5 The logs don't show anything suspicious, at least nothing I understand as problematic. I'll be happy to provide any logs and/or tcpdumps or something if needed. Does anyone have any pointer for me? Thanks in advance, best regards, Stefan -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] On move ACLs from source parent are preserved not inherited from new parent
Hi! We're using sernet-samba 3.0.28-21 on debian. (The smb.conf can be found below) There are 2 subfolders in root share directory ponudbe and projects: srv03:/srv/data/test# getfacl * # file: ponudbe # owner: root # group: root user::rwx user:COMPANY+administrator:rwx group::r-x group:COMPANY+ponudbe_rw:rwx mask::rwx other::--- default:user::rwx default:user:COMPANY+administrator:rwx default:group::r-x default:group:COMPANY+ponudbe_rw:rwx default:mask::rwx default:other::--- # file: projects # owner: root # group: root user::rwx user:COMPANY+administrator:rwx group::r-x group:COMPANY+projekti_rw:rwx mask::rwx other::--- default:user::rwx default:user:COMPANY+administrator:rwx default:group::r-x default:group:COMPANY+projekti_rw:rwx default:mask::rwx default:other::--- When I connect with Windows XP client to share, ACLs are respected properly. Then I create a new folder (as administrator) under ponudbe named mapica. The problem occurs when I cutpaste this folder from ponudbe into projects. The default ACLs of projects dir are not added to the folder mapica and the ACLs from ponudba folder are preserved. Is this the expected behaviour? srv03:/srv/data/test/projects# getfacl mapica/ # file: mapica # owner: COMPANY+administrator # group: root user::rwx user:COMPANY+administrator:rwx group::rwx group:COMPANY+ponudbe_rw:rwx mask::rwx other::--- Is there a way to configure Samba so that when I cut the folder mapica to projects the default permissions of projects are added to mapica and all of its subfolders? Is it possible to remove the default permissions of ponudbe at the same time? Because with the current behaviour user has to be in group ponudbe_rw to access folder mapica that was created in ponudbe, but later moved to projects folder. Help appreciated! Thanks! Blaz --- smb.conf --- [global] workgroup = COMPANY netbios name = SRV03 realm = COMPANY.LOCAL server string = Dokumenti null passwords = yes dns proxy = no log file = /var/log/samba/log.%m log level = 3 max log size = 5000 syslog = 0 panic action = /usr/share/samba/panic-action %d security = ADS password server = srv05.COMPANY.local winbind separator = + winbind cache time = 300 nt acl support = yes encrypt passwords = true #passdb backend = guest guest account = nobody invalid users = root preserve case = yes socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192 idmap uid = 18000-25000 idmap gid = 18000-25000 winbind enum users = yes winbind enum groups = yes template homedir = /dev/null template shell = /bin/false getwd cache = yes domain master = no local master = no preferred master = no os level = 20 [test] path=/srv/data/test browseable = yes writable = yes guest ok = no force create mode = 2770 inherit acls = yes inherit permissions = yes wide links = no map acl inherit = yes -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] samba 3.0.28, directory name is garbled.
Fixed, from the O'Reilly manual Chapter 5.4.2 Mangling Options add mangled names = no ( works in the per share space, not sure about the global space ) and all works fine (so far anyway) [fu] comment = %U's Home Directory path = /home/%U read only = No acl check permissions = Yes force security mode = 0775 force directory mode = 0775 inherit permissions = Yes inherit acls = Yes map acl inherit = Yes case sensitive = No veto files = /.tnatr:*/ browseable = Yes vfs objects = zfsacl mangled names = no On Mon, Aug 18, 2008 at 11:19:12AM -0700, Evans, Bill wrote: Environment: Sun Solaris 5.10 Samba 3.0.28 (latest SUN supported version) We are currently running Totalnet Advanced Server TAS (for cifs services) but plan to replace this with SAMBA. Has anyone see this problem? I am opening a ticket with SUN also. from the UNIX command line cd /export/userdir/project dir/sub dir /file-excel.xls ( yes, there are spaces in the directory names and a trailing space .) From a PC client, XP sp2 TAS mapping: \userdir\project dir\sub dir\file-excel.xls [ note that the PC does not show the trailing space but allows access to the directory ] SAMBA mapping: \userdir\project dir\2D8YHS~L\file-excel.xls [ note that the PC shows a garbled directory name but allows access to the directory below] At some point we may go to open source to get the latest version, but, management wants to stay on SUN supported versions if possible. Trailing spaces are illegal in a Windows name so Samba has to mangle them (it does the same for names with a ':' also). Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba + ads / user and group update-probem
On Mon, Aug 18, 2008 at 03:41:50PM +0200, Anian Wurzenberger wrote: Thank you for your answer. Where should the user log in? Into a share? Into an AD-connected Computer? For example into a share. Anthing that makes Samba authenticate against the DC. Volker pgp6lv4n5ldRC.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [SCM] Samba Shared Repository - branch v4-0-test updated - release-4-0-0alpha5-297-g61f2958
Hi Andrew, +const struct dsdb_syntax *find_syntax_map_by_ad_oid(const char *ad_oid) +{ + int i; + for (i=0; dsdb_syntaxes[i].ldap_oid; i++) { + if (strcasecmp(ad_oid, dsdb_syntaxes[i].attributeSyntax_oid) == 0) { + return dsdb_syntaxes[i]; + } + } + return NULL; +} + +const struct dsdb_syntax *find_syntax_map_by_ad_syntax(int oMSyntax) +{ + int i; + for (i=0; dsdb_syntaxes[i].ldap_oid; i++) { + if (oMSyntax == dsdb_syntaxes[i].oMSyntax) { + return dsdb_syntaxes[i]; + } + } + return NULL; +} + +const struct dsdb_syntax *find_syntax_map_by_standard_oid(const char *standard_oid) +{ + int i; + for (i=0; dsdb_syntaxes[i].ldap_oid; i++) { + if (strcasecmp(standard_oid, dsdb_syntaxes[i].ldap_oid) == 0) { + return dsdb_syntaxes[i]; + } + } + return NULL; +} can you please rename this functions to dsdb_syntax_find_by_*()? Thanks! metze signature.asc Description: OpenPGP digital signature
[SCM] Samba Shared Repository - branch v4-0-test updated - release-4-0-0alpha5-299-g6a9720c
The branch, v4-0-test has been updated via 6a9720c99d36a575ea8ed92e94ff6d2fe6f3e27d (commit) via 531882dadd57eb6fa048c5d6e5fe3accc20df751 (commit) from 61f2958c84beeedcf369ccdc02afed0c8055b108 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test - Log - commit 6a9720c99d36a575ea8ed92e94ff6d2fe6f3e27d Author: Matthieu Suiche [EMAIL PROTECTED] Date: Thu Jul 10 09:31:43 2008 + librpc/ndr: add support for XPRESS decompression Signed-off-by: Stefan Metzmacher [EMAIL PROTECTED] commit 531882dadd57eb6fa048c5d6e5fe3accc20df751 Author: Matthieu Suiche [EMAIL PROTECTED] Date: Thu Jul 10 09:31:43 2008 + lib/compression: Import of lzxpress decompression algorithm Signed-off-by: Stefan Metzmacher [EMAIL PROTECTED] --- Summary of changes: source/lib/basic.mk|2 +- source/lib/compression/lzxpress.c | 144 .../mech/context.h = lib/compression/lzxpress.h} | 28 ++-- source/librpc/ndr/ndr_compression.c| 61 - 4 files changed, 216 insertions(+), 19 deletions(-) create mode 100644 source/lib/compression/lzxpress.c copy source/{heimdal/lib/gssapi/mech/context.h = lib/compression/lzxpress.h} (75%) Changeset truncated at 500 lines: diff --git a/source/lib/basic.mk b/source/lib/basic.mk index b86df5d..0c68fda 100644 --- a/source/lib/basic.mk +++ b/source/lib/basic.mk @@ -1,6 +1,6 @@ [SUBSYSTEM::LIBCOMPRESSION] -LIBCOMPRESSION_OBJ_FILES = $(libcompressionsrcdir)/mszip.o +LIBCOMPRESSION_OBJ_FILES = $(libcompressionsrcdir)/mszip.o $(libcompressionsrcdir)/lzxpress.o [SUBSYSTEM::GENCACHE] PRIVATE_DEPENDENCIES = TDB_WRAP diff --git a/source/lib/compression/lzxpress.c b/source/lib/compression/lzxpress.c new file mode 100644 index 000..5063051 --- /dev/null +++ b/source/lib/compression/lzxpress.c @@ -0,0 +1,144 @@ +/* + * Copyright (C) Matthieu Suiche 2008 + * + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * + * 1. Redistributions of source code must retain the above copyright + *notice, this list of conditions and the following disclaimer. + * + * 2. Redistributions in binary form must reproduce the above copyright + *notice, this list of conditions and the following disclaimer in the + *documentation and/or other materials provided with the distribution. + * + * 3. Neither the name of the author nor the names of its contributors + *may be used to endorse or promote products derived from this software + *without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + * + */ + +#include includes.h +#include replace.h +#include lzxpress.h + + +#define __BUF_POS_CONST(buf,ofs)(((const uint8_t *)buf)+(ofs)) +#define __PULL_BYTE(buf,ofs) \ + ((uint8_t)((*__BUF_POS_CONST(buf,ofs)) 0xFF)) + +#ifndef PULL_LE_UINT16 +#define PULL_LE_UINT16(buf,ofs) ((uint16_t)( \ + ((uint16_t)(((uint16_t)(__PULL_BYTE(buf,(ofs)+0))) 0)) | \ + ((uint16_t)(((uint16_t)(__PULL_BYTE(buf,(ofs)+1))) 8)) \ +)) +#endif + +#ifndef PULL_LE_UINT32 +#define PULL_LE_UINT32(buf,ofs) ((uint32_t)( \ + ((uint32_t)(((uint32_t)(__PULL_BYTE(buf,(ofs)+0))) 0)) | \ + ((uint32_t)(((uint32_t)(__PULL_BYTE(buf,(ofs)+1))) 8)) | \ + ((uint32_t)(((uint32_t)(__PULL_BYTE(buf,(ofs)+2))) 16)) | \ + ((uint32_t)(((uint32_t)(__PULL_BYTE(buf,(ofs)+3))) 24)) \ +)) +#endif + +static uint32_t xpress_decompress(uint8_t *input, + uint32_t input_size, + uint8_t *output, + uint32_t output_size) +{ + uint32_t output_index, input_index; + uint32_t indicator, indicator_bit; + uint32_t length; + uint32_t offset; + uint32_t nibble_index; + + output_index = 0; + input_index = 0; + indicator = 0; + indicator_bit = 0; + length = 0; + offset = 0; + nibble_index =
[SCM] Samba Shared Repository - branch v4-0-test updated - release-4-0-0alpha5-304-gf48dfd8
The branch, v4-0-test has been updated via f48dfd87badcddc64a1c0bf52939188a4a8f4add (commit) via 25876fc4ab8ba11f00d24bb8ceb517c0e4a4d72d (commit) via 0fb265e567d700b3c16eb8f28bc5f26653a819fa (commit) via ce44a608f66bf27070fd43d576551fde6f545d7c (commit) via 0dbbc287f65a51330c5309df5a96b3acd4d044d5 (commit) from 6a9720c99d36a575ea8ed92e94ff6d2fe6f3e27d (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test - Log - commit f48dfd87badcddc64a1c0bf52939188a4a8f4add Author: Stefan Metzmacher [EMAIL PROTECTED] Date: Mon Aug 18 15:33:11 2008 +0200 librpc: don't build the old mszip decompression code metze commit 25876fc4ab8ba11f00d24bb8ceb517c0e4a4d72d Author: Stefan Metzmacher [EMAIL PROTECTED] Date: Thu Aug 7 16:24:57 2008 + ndr_compression: use zlib's inflate() for decompression metze commit 0fb265e567d700b3c16eb8f28bc5f26653a819fa Author: Stefan Metzmacher [EMAIL PROTECTED] Date: Mon Aug 18 14:26:53 2008 +0200 zlib: mark as modified for samba metze commit ce44a608f66bf27070fd43d576551fde6f545d7c Author: Stefan Metzmacher [EMAIL PROTECTED] Date: Fri Aug 15 13:32:51 2008 +0200 zlib: fix compiler warnings metze commit 0dbbc287f65a51330c5309df5a96b3acd4d044d5 Author: Stefan Metzmacher [EMAIL PROTECTED] Date: Mon Aug 18 14:25:41 2008 +0200 zlib: we don't need the inflateReset2 prototype twice metze --- Summary of changes: source/lib/basic.mk |4 +- source/lib/zlib/adler32.c |3 +- source/lib/zlib/compress.c |5 +- source/lib/zlib/crc32.c |4 +- source/lib/zlib/deflate.c |8 ++-- source/lib/zlib/gzio.c | 16 +++--- source/lib/zlib/infback.c | 24 +- source/lib/zlib/inffast.c | 10 ++-- source/lib/zlib/inflate.c | 46 +- source/lib/zlib/trees.c | 12 ++-- source/lib/zlib/uncompr.c |5 +- source/lib/zlib/zlib.h | 31 +--- source/lib/zlib/zutil.h |2 +- source/librpc/config.mk |3 +- source/librpc/ndr/ndr_compression.c | 92 ++ 15 files changed, 173 insertions(+), 92 deletions(-) Changeset truncated at 500 lines: diff --git a/source/lib/basic.mk b/source/lib/basic.mk index 0c68fda..4d07668 100644 --- a/source/lib/basic.mk +++ b/source/lib/basic.mk @@ -1,6 +1,6 @@ -[SUBSYSTEM::LIBCOMPRESSION] +[SUBSYSTEM::LZXPRESS] -LIBCOMPRESSION_OBJ_FILES = $(libcompressionsrcdir)/mszip.o $(libcompressionsrcdir)/lzxpress.o +LZXPRESS_OBJ_FILES = $(libcompressionsrcdir)/lzxpress.o [SUBSYSTEM::GENCACHE] PRIVATE_DEPENDENCIES = TDB_WRAP diff --git a/source/lib/zlib/adler32.c b/source/lib/zlib/adler32.c index 007ba26..b5333d7 100644 --- a/source/lib/zlib/adler32.c +++ b/source/lib/zlib/adler32.c @@ -5,8 +5,7 @@ /* @(#) $Id$ */ -#define ZLIB_INTERNAL -#include zlib.h +#include zutil.h #define BASE 65521UL/* largest prime smaller than 65536 */ #define NMAX 5552 diff --git a/source/lib/zlib/compress.c b/source/lib/zlib/compress.c index df04f01..40a53cd 100644 --- a/source/lib/zlib/compress.c +++ b/source/lib/zlib/compress.c @@ -5,8 +5,7 @@ /* @(#) $Id$ */ -#define ZLIB_INTERNAL -#include zlib.h +#include zutil.h /* === Compresses the source buffer into the destination buffer. The level @@ -29,7 +28,7 @@ int ZEXPORT compress2 (dest, destLen, source, sourceLen, level) z_stream stream; int err; -stream.next_in = (Bytef*)source; +stream.next_in = source; stream.avail_in = (uInt)sourceLen; #ifdef MAXSEG_64K /* Check for source 64K on 16-bit machine: */ diff --git a/source/lib/zlib/crc32.c b/source/lib/zlib/crc32.c index f658a9e..4d6e699 100644 --- a/source/lib/zlib/crc32.c +++ b/source/lib/zlib/crc32.c @@ -11,6 +11,8 @@ /* @(#) $Id$ */ +#include zutil.h /* for STDC and FAR definitions */ + /* Note on the use of DYNAMIC_CRC_TABLE: there is no mutex or semaphore protection on the static variables used to control the first-use generation @@ -26,8 +28,6 @@ # endif /* !DYNAMIC_CRC_TABLE */ #endif /* MAKECRCH */ -#include zutil.h /* for STDC and FAR definitions */ - #define local static /* Find a four-byte integer type for crc32_little() and crc32_big(). */ diff --git a/source/lib/zlib/deflate.c b/source/lib/zlib/deflate.c index 29ce1f6..2720aab 100644 --- a/source/lib/zlib/deflate.c +++ b/source/lib/zlib/deflate.c @@ -154,9 +154,6 @@ local const config configuration_table[10] = { * meaning. */ -#define EQUAL 0 -/* result of memcmp for equal strings */ - #ifndef NO_DUMMY_DECL struct static_tree_desc_s {int dummy;}; /* for buggy
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2929-gd1738c9
The branch, v3-2-test has been updated via d1738c966cc090fbe4bcd246bebb9c693235152a (commit) from 77a0d72ffe9764faa4accdf9240c1d482404d01d (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit d1738c966cc090fbe4bcd246bebb9c693235152a Author: Karolin Seeger [EMAIL PROTECTED] Date: Mon Aug 18 15:52:09 2008 +0200 WHATSNEW: Update changes since 3.2.1. Karolin --- Summary of changes: WHATSNEW.txt | 10 ++ 1 files changed, 10 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 5d30dbd..97402b2 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -25,6 +25,7 @@ Changes since 3.2.1 o Michael Adam [EMAIL PROTECTED] +* Fix creation and installation of shared libraries. * Fix replacement of random seed generator. * Fix a race condition in idmap_tdb2_allocate_id(). * Fix unix_convert() for * after changing map_nt_error_from_unix(). @@ -36,6 +37,9 @@ o Jeremy Allison [EMAIL PROTECTED] mistake. * BUG 5686: Fix segfaults in libsmbclient. * BUG 5692: Fix coredump in full_audit.so. +* BUG 5696: Fix force group in setups using Winbind. +* Rename cifs.spnego to cifs.upcall. +* Fix segfault in cifs.upcall when it is called without any arguments. * Fix coverity ID 594 (resource leak on error path). * Fix assigning of primary group memberships when authenticating via Winbind. @@ -63,12 +67,18 @@ o Günther Deschner [EMAIL PROTECTED] * Add add c++ guard to netapi. +o Steve French [EMAIL PROTECTED] +* Fix compile warning in cifs.upcall. +* Add dns_resolver key type to cifs.upcall. + + o SATOH Fumiyasu [EMAIL PROTECTED] * BUG 5688: Fix orphaned LPQ processes if socket address is invalid. o Volker Lendecke [EMAIL PROTECTED] * BUG 5684: Fix removal of dead records in tdb files. +* Fix coverity IDs 595, 596. * Fix smb_len calculation for chained requests. -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2930-g25c354f
The branch, v3-2-test has been updated via 25c354f8d194624d9ef8924d861af377cb89275d (commit) from d1738c966cc090fbe4bcd246bebb9c693235152a (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 25c354f8d194624d9ef8924d861af377cb89275d Author: Karolin Seeger [EMAIL PROTECTED] Date: Mon Aug 18 15:56:52 2008 +0200 WHATSNEW: Add corresponding bug number. Karolin --- Summary of changes: WHATSNEW.txt |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 97402b2..bde08d6 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -25,7 +25,7 @@ Changes since 3.2.1 o Michael Adam [EMAIL PROTECTED] -* Fix creation and installation of shared libraries. +* BUG 5592: Fix creation and installation of shared libraries. * Fix replacement of random seed generator. * Fix a race condition in idmap_tdb2_allocate_id(). * Fix unix_convert() for * after changing map_nt_error_from_unix(). -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2931-g986c52d
The branch, v3-2-test has been updated via 986c52dca86cc82dd62d1b9f71ee2269d5ba5cb4 (commit) from 25c354f8d194624d9ef8924d861af377cb89275d (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 986c52dca86cc82dd62d1b9f71ee2269d5ba5cb4 Author: Karolin Seeger [EMAIL PROTECTED] Date: Mon Aug 18 15:59:07 2008 +0200 WHATSNEW: Add some more major bug fixes. Karolin --- Summary of changes: WHATSNEW.txt |2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index bde08d6..ec82d87 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -10,10 +10,12 @@ Major bug fixes included in Samba 3.2.2 are: o Fix removal of dead records in tdb files. This can lead to very large tdb files and to overflowing partitions as a consequence on systems running an nmbd daemon. + o Fix force group in setups using Winbind. o Fix freezing Windows Explorer on WinXP while browsing Samba shares. This one led to timeouts during printing as well. o Fix assigning of primary group memberships when authenticating via Winbind. + o Fix creation and installation of shared libraries. ## -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-stable updated - release-3-2-1-143-gc68fcfd
The branch, v3-2-stable has been updated via c68fcfd4a052eb58205f52d76788b6f083c28581 (commit) via 83a85683ebae320e9e4717851277b727849f0da7 (commit) from 5473ac21094cd0cc29dbf0a8991eade36ac31f49 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable - Log - commit c68fcfd4a052eb58205f52d76788b6f083c28581 Author: Karolin Seeger [EMAIL PROTECTED] Date: Mon Aug 18 15:59:07 2008 +0200 WHATSNEW: Add some more major bug fixes. Karolin (cherry picked from commit 986c52dca86cc82dd62d1b9f71ee2269d5ba5cb4) commit 83a85683ebae320e9e4717851277b727849f0da7 Author: Karolin Seeger [EMAIL PROTECTED] Date: Mon Aug 18 15:56:52 2008 +0200 WHATSNEW: Add corresponding bug number. Karolin (cherry picked from commit 25c354f8d194624d9ef8924d861af377cb89275d) --- Summary of changes: WHATSNEW.txt |4 +++- 1 files changed, 3 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 97402b2..ec82d87 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -10,10 +10,12 @@ Major bug fixes included in Samba 3.2.2 are: o Fix removal of dead records in tdb files. This can lead to very large tdb files and to overflowing partitions as a consequence on systems running an nmbd daemon. + o Fix force group in setups using Winbind. o Fix freezing Windows Explorer on WinXP while browsing Samba shares. This one led to timeouts during printing as well. o Fix assigning of primary group memberships when authenticating via Winbind. + o Fix creation and installation of shared libraries. ## @@ -25,7 +27,7 @@ Changes since 3.2.1 o Michael Adam [EMAIL PROTECTED] -* Fix creation and installation of shared libraries. +* BUG 5592: Fix creation and installation of shared libraries. * Fix replacement of random seed generator. * Fix a race condition in idmap_tdb2_allocate_id(). * Fix unix_convert() for * after changing map_nt_error_from_unix(). -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2932-g9f74480
The branch, v3-2-test has been updated via 9f74480cc6c4f1f41c1a4fe71580cd623ef41407 (commit) from 986c52dca86cc82dd62d1b9f71ee2269d5ba5cb4 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 9f74480cc6c4f1f41c1a4fe71580cd623ef41407 Author: Karolin Seeger [EMAIL PROTECTED] Date: Mon Aug 18 16:36:53 2008 +0200 WHATSNEW: Update release date. Karolin --- Summary of changes: WHATSNEW.txt |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index ec82d87..dc3963a 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,6 +1,6 @@ == Release Notes for Samba 3.2.2 - August, 18 2008 + August, 19 2008 == This is a bug fix release of the Samba 3.2 series. -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-stable updated - release-3-2-1-144-ga28f3a6
The branch, v3-2-stable has been updated via a28f3a6e02f3d97980a7581a0aa032233f802e83 (commit) from c68fcfd4a052eb58205f52d76788b6f083c28581 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable - Log - commit a28f3a6e02f3d97980a7581a0aa032233f802e83 Author: Karolin Seeger [EMAIL PROTECTED] Date: Mon Aug 18 16:36:53 2008 +0200 WHATSNEW: Update release date. Karolin (cherry picked from commit 9f74480cc6c4f1f41c1a4fe71580cd623ef41407) --- Summary of changes: WHATSNEW.txt |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/WHATSNEW.txt b/WHATSNEW.txt index ec82d87..dc3963a 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -1,6 +1,6 @@ == Release Notes for Samba 3.2.2 - August, 18 2008 + August, 19 2008 == This is a bug fix release of the Samba 3.2 series. -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2933-ge2caa65
The branch, v3-2-test has been updated via e2caa65a698ca7109aa44656ff9399104cf0663b (commit) from 9f74480cc6c4f1f41c1a4fe71580cd623ef41407 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit e2caa65a698ca7109aa44656ff9399104cf0663b Author: Igor Mammedov [EMAIL PROTECTED] Date: Mon Aug 18 09:55:44 2008 -0700 Fix length error in wrapping spnego blob. Karoling this needs to be in 3.2.2 (sorry). --- Summary of changes: source/libsmb/clikrb5.c |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source/libsmb/clikrb5.c b/source/libsmb/clikrb5.c index d30cc54..a7ca24f 100644 --- a/source/libsmb/clikrb5.c +++ b/source/libsmb/clikrb5.c @@ -1870,7 +1870,7 @@ static krb5_error_code ads_krb5_get_fwd_ticket( krb5_context context, } /* We now have a service ticket, now turn it into an AP-REQ. */ - authenticator-length = ntohs(fwdData.length + GSSAPI_CHECKSUM_SIZE); + authenticator-length = fwdData.length + GSSAPI_CHECKSUM_SIZE; /* Caller should call free() when they're done with this. */ authenticator-data = (char *)pChksum; -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-3733-g1cad62d
The branch, v3-3-test has been updated via 1cad62d347eca9d3af847fb297d0dc822de7560c (commit) from 99d9bfe60d219f6ef09c9a6967896867a86b8a0e (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test - Log - commit 1cad62d347eca9d3af847fb297d0dc822de7560c Author: Igor Mammedov [EMAIL PROTECTED] Date: Mon Aug 18 09:56:23 2008 -0700 Fix length error in wrapping spnego blob --- Summary of changes: source/libsmb/clikrb5.c |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source/libsmb/clikrb5.c b/source/libsmb/clikrb5.c index 5bb33b1..fa21ad3 100644 --- a/source/libsmb/clikrb5.c +++ b/source/libsmb/clikrb5.c @@ -1910,7 +1910,7 @@ static krb5_error_code ads_krb5_get_fwd_ticket( krb5_context context, } /* We now have a service ticket, now turn it into an AP-REQ. */ - authenticator-length = ntohs(fwdData.length + GSSAPI_CHECKSUM_SIZE); + authenticator-length = fwdData.length + GSSAPI_CHECKSUM_SIZE; /* Caller should call free() when they're done with this. */ authenticator-data = (char *)pChksum; -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-3735-g5a13b7c
The branch, v3-3-test has been updated via 5a13b7c442f1b70f36dd336bfa8b3dac897bfa4c (commit) via 9b0478984ed3d6ffa84e7eb6f7ef1e5fa3a0f1e3 (commit) from 1cad62d347eca9d3af847fb297d0dc822de7560c (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test - Log - commit 5a13b7c442f1b70f36dd336bfa8b3dac897bfa4c Author: Jeff Layton [EMAIL PROTECTED] Date: Mon Aug 18 13:49:59 2008 -0400 cifs.upcall: enable building by default on linux When building on linux, default to building cifs.upcall. Throw a warning if ADS support is disabled or keyutils isn't installed. Signed-off-by: Jeff Layton [EMAIL PROTECTED] commit 9b0478984ed3d6ffa84e7eb6f7ef1e5fa3a0f1e3 Author: Jeff Layton [EMAIL PROTECTED] Date: Mon Aug 18 13:49:59 2008 -0400 cifs.upcall: move default install location to EPREFIX/sbin cifs.upcall links to libraries that live under /usr, so installing it in /sbin doesn't seem appropriate. Move it to EPREFIX/sbin instead (i.e. /usr/sbin). Signed-off-by: Jeff Layton [EMAIL PROTECTED] --- Summary of changes: source/Makefile.in |8 source/configure.in | 23 +++ 2 files changed, 23 insertions(+), 8 deletions(-) Changeset truncated at 500 lines: diff --git a/source/Makefile.in b/source/Makefile.in index 938d711..a1dac20 100644 --- a/source/Makefile.in +++ b/source/Makefile.in @@ -176,9 +176,9 @@ PATH_FLAGS = -DSMB_PASSWD_FILE=\$(SMB_PASSWD_FILE)\ \ # Note that all executable programs now provide for an optional executable suffix. -SBIN_PROGS = bin/[EMAIL PROTECTED]@ bin/[EMAIL PROTECTED]@ @SWAT_SBIN_TARGETS@ @EXTRA_SBIN_PROGS@ +SBIN_PROGS = bin/[EMAIL PROTECTED]@ bin/[EMAIL PROTECTED]@ @SWAT_SBIN_TARGETS@ @EXTRA_SBIN_PROGS@ @CIFSUPCALL_PROGS@ -ROOT_SBIN_PROGS = @CIFSMOUNT_PROGS@ @CIFSUPCALL_PROGS@ +ROOT_SBIN_PROGS = @CIFSMOUNT_PROGS@ BIN_PROGS1 = bin/[EMAIL PROTECTED]@ bin/[EMAIL PROTECTED]@ bin/[EMAIL PROTECTED]@ \ bin/[EMAIL PROTECTED]@ bin/[EMAIL PROTECTED]@ bin/[EMAIL PROTECTED]@ @@ -2482,8 +2482,8 @@ installcifsmount:: @CIFSMOUNT_PROGS@ @$(SHELL) script/installbin.sh $(INSTALLPERMS_BIN) $(DESTDIR) $(prefix) $(ROOTSBINDIR) @CIFSMOUNT_PROGS@ installcifsupcall:: @CIFSUPCALL_PROGS@ - @$(SHELL) $(srcdir)/script/installdirs.sh $(INSTALLPERMS_BIN) $(DESTDIR) $(ROOTSBINDIR) - @$(SHELL) script/installbin.sh $(INSTALLPERMS_BIN) $(DESTDIR) $(prefix) $(ROOTSBINDIR) @CIFSUPCALL_PROGS@ + @$(SHELL) $(srcdir)/script/installdirs.sh $(INSTALLPERMS_BIN) $(DESTDIR) $(SBINDIR) + @$(SHELL) script/installbin.sh $(INSTALLPERMS_BIN) $(DESTDIR) $(prefix) $(SBINDIR) @CIFSUPCALL_PROGS@ # Some symlinks are required for the 'probing' of modules. # This mechanism should go at some point.. diff --git a/source/configure.in b/source/configure.in index c769859..38819df 100644 --- a/source/configure.in +++ b/source/configure.in @@ -4048,7 +4048,7 @@ INSTALL_CIFSUPCALL= UNINSTALL_CIFSUPCALL= AC_MSG_CHECKING(whether to build cifs.upcall) AC_ARG_WITH(cifsupcall, -[AS_HELP_STRING([--with-cifsupcall], [Include cifs.upcall (Linux only) support (default=no)])], +[AS_HELP_STRING([--with-cifsupcall], [Include cifs.upcall (Linux only) support (default=yes)])], [ case $withval in no) AC_MSG_RESULT(no) @@ -4074,9 +4074,24 @@ AC_ARG_WITH(cifsupcall, esac ;; esac ], -[ - AC_MSG_RESULT(no) - ] +[ case $host_os in + *linux*) + if test x$use_ads != xyes; then + AC_MSG_WARN(ADS support should be enabled for building cifs.upcall) + elif test x$HAVE_KEYUTILS_H != x1; then + AC_MSG_WARN(keyutils package is required for cifs.upcall) + else + AC_MSG_RESULT(yes) + AC_DEFINE(WITH_CIFSUPCALL,1,[whether to build cifs.upcall]) + CIFSUPCALL_PROGS=bin/cifs.upcall + INSTALL_CIFSUPCALL=installcifsupcall + UNINSTALL_CIFSUPCALL=uninstallcifsupcall + fi + ;; + *) + AC_MSG_RESULT(no) + ;; + esac ] ) -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-devel updated - release-3-2-0pre2-3754-ge415420
The branch, v3-devel has been updated via e415420b086a236be6bcc1e7584bec276a74e457 (commit) from 16ee95494ba495c5f5ff8779206f380db1067b2d (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-devel - Log - commit e415420b086a236be6bcc1e7584bec276a74e457 Author: Jeremy Allison [EMAIL PROTECTED] Date: Mon Aug 18 16:18:34 2008 -0700 Make the change to smbcontrol for all to mean broadcast, and smbd to mean the main smb daemon. Update docs to match. Jeremy. --- Summary of changes: docs-xml/manpages-3/smbcontrol.1.xml | 17 + source/utils/smbcontrol.c|7 +++ 2 files changed, 16 insertions(+), 8 deletions(-) Changeset truncated at 500 lines: diff --git a/docs-xml/manpages-3/smbcontrol.1.xml b/docs-xml/manpages-3/smbcontrol.1.xml index d7c7751..f8c31bb 100644 --- a/docs-xml/manpages-3/smbcontrol.1.xml +++ b/docs-xml/manpages-3/smbcontrol.1.xml @@ -58,23 +58,32 @@ on STDIN. An empty command line or a q will quit the program./para/listitem /varlistentry - + varlistentry termdestination/term listitemparaOne of parameternmbd/parameter, parametersmbd/parameter or a process ID./para + paraThe parameterall/parameter destination causes the + message to broadcast to all running daemons including nmbd and + winbind. This is a change for Samba 3.3, prior to this the + paramter smbd used to do this./para + paraThe parametersmbd/parameter destination causes the - message to broadcast to all smbd daemons./para + message to be sent to the smbd daemon specified in the + filenamesmbd.pid/filename file./para paraThe parameternmbd/parameter destination causes the message to be sent to the nmbd daemon specified in the filenamenmbd.pid/filename file./para + paraThe parameterwinbindd/parameter destination causes the + message to be sent to the winbind daemon specified in the + filenamewinbindd.pid/filename file./para + paraIf a single process ID is given, the message is sent to only that process./para/listitem /varlistentry - - + varlistentry termmessage-type/term listitemparaType of message to send. See diff --git a/source/utils/smbcontrol.c b/source/utils/smbcontrol.c index 6699763..750030d 100644 --- a/source/utils/smbcontrol.c +++ b/source/utils/smbcontrol.c @@ -1228,9 +1228,9 @@ static struct server_id parse_dest(const char *dest) struct server_id result = {-1}; pid_t pid; - /* Zero is a special return value for broadcast smbd */ + /* Zero is a special return value for broadcast to all processes */ - if (strequal(dest, smbd)) { + if (strequal(dest, all)) { return interpret_pid(MSG_BROADCAST_PID_STR); } @@ -1245,7 +1245,6 @@ static struct server_id parse_dest(const char *dest) dest = winbindd; } - if (!(strequal(dest, winbindd) || strequal(dest, nmbd))) { /* Check for numeric pid number */ @@ -1266,7 +1265,7 @@ static struct server_id parse_dest(const char *dest) fprintf(stderr,Can't find pid for destination '%s'\n, dest); return result; -} +} /* Execute smbcontrol command */ -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-3736-gc361bec
The branch, v3-3-test has been updated via c361beca1ed4e896151c6445b881b40957cc1ce4 (commit) from 5a13b7c442f1b70f36dd336bfa8b3dac897bfa4c (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test - Log - commit c361beca1ed4e896151c6445b881b40957cc1ce4 Author: Jeremy Allison [EMAIL PROTECTED] Date: Mon Aug 18 16:17:59 2008 -0700 Make the change to smbcontrol for all to mean broadcast, and smbd to mean the main smb daemon. Update docs to match. Jeremy. --- Summary of changes: docs-xml/manpages-3/smbcontrol.1.xml | 17 + source/utils/smbcontrol.c|7 +++ 2 files changed, 16 insertions(+), 8 deletions(-) Changeset truncated at 500 lines: diff --git a/docs-xml/manpages-3/smbcontrol.1.xml b/docs-xml/manpages-3/smbcontrol.1.xml index d7c7751..f8c31bb 100644 --- a/docs-xml/manpages-3/smbcontrol.1.xml +++ b/docs-xml/manpages-3/smbcontrol.1.xml @@ -58,23 +58,32 @@ on STDIN. An empty command line or a q will quit the program./para/listitem /varlistentry - + varlistentry termdestination/term listitemparaOne of parameternmbd/parameter, parametersmbd/parameter or a process ID./para + paraThe parameterall/parameter destination causes the + message to broadcast to all running daemons including nmbd and + winbind. This is a change for Samba 3.3, prior to this the + paramter smbd used to do this./para + paraThe parametersmbd/parameter destination causes the - message to broadcast to all smbd daemons./para + message to be sent to the smbd daemon specified in the + filenamesmbd.pid/filename file./para paraThe parameternmbd/parameter destination causes the message to be sent to the nmbd daemon specified in the filenamenmbd.pid/filename file./para + paraThe parameterwinbindd/parameter destination causes the + message to be sent to the winbind daemon specified in the + filenamewinbindd.pid/filename file./para + paraIf a single process ID is given, the message is sent to only that process./para/listitem /varlistentry - - + varlistentry termmessage-type/term listitemparaType of message to send. See diff --git a/source/utils/smbcontrol.c b/source/utils/smbcontrol.c index 6699763..750030d 100644 --- a/source/utils/smbcontrol.c +++ b/source/utils/smbcontrol.c @@ -1228,9 +1228,9 @@ static struct server_id parse_dest(const char *dest) struct server_id result = {-1}; pid_t pid; - /* Zero is a special return value for broadcast smbd */ + /* Zero is a special return value for broadcast to all processes */ - if (strequal(dest, smbd)) { + if (strequal(dest, all)) { return interpret_pid(MSG_BROADCAST_PID_STR); } @@ -1245,7 +1245,6 @@ static struct server_id parse_dest(const char *dest) dest = winbindd; } - if (!(strequal(dest, winbindd) || strequal(dest, nmbd))) { /* Check for numeric pid number */ @@ -1266,7 +1265,7 @@ static struct server_id parse_dest(const char *dest) fprintf(stderr,Can't find pid for destination '%s'\n, dest); return result; -} +} /* Execute smbcontrol command */ -- Samba Shared Repository
Build status as of Tue Aug 19 00:00:02 2008
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2008-08-18 00:00:40.0 + +++ /home/build/master/cache/broken_results.txt 2008-08-19 00:01:10.0 + @@ -1,4 +1,4 @@ -Build status as of Mon Aug 18 00:00:03 2008 +Build status as of Tue Aug 19 00:00:02 2008 Build counts: Tree Total Broken Panic @@ -6,17 +6,17 @@ ccache 31 9 0 ctdb 0 0 0 distcc 1 0 0 -ldb 30 30 0 +ldb 31 30 0 libreplace 31 11 0 lorikeet-heimdal 25 20 0 -pidl 16 9 0 +pidl 17 9 0 ppp 9 0 0 rsync32 12 0 samba-docs 0 0 0 samba-gtk6 6 0 samba_3_X_devel 26 21 0 -samba_3_X_test 26 24 0 -samba_4_0_test 29 24 0 +samba_3_X_test 27 24 0 +samba_4_0_test 29 23 0 smb-build30 4 0 talloc 30 5 0 tdb 31 12 0
[SCM] Samba Shared Repository - branch v4-0-test updated - release-4-0-0alpha5-311-g27d07df
The branch, v4-0-test has been updated via 27d07df301d60e49d36efd003f2fd2305c83c3fe (commit) via 423db2468ba3dac89cebc59c8498c0b08c5f3d7b (commit) via e26a5efd9a580ed3728e1f449e367b1cd4a73b5f (commit) via 0aebae91be0fba7ffa94d73946a94aea930a252a (commit) via 9643db1a011edc95aa903908cec708b3a3566e71 (commit) via 07107c45c35a11979bf68a14b2c4df9415880fcb (commit) via fcb87e77860b449ac3483ccec5e6b5ed087540f2 (commit) from f48dfd87badcddc64a1c0bf52939188a4a8f4add (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test - Log - commit 27d07df301d60e49d36efd003f2fd2305c83c3fe Merge: 423db2468ba3dac89cebc59c8498c0b08c5f3d7b f48dfd87badcddc64a1c0bf52939188a4a8f4add Author: Andrew Bartlett [EMAIL PROTECTED] Date: Tue Aug 19 14:10:53 2008 +1000 Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet commit 423db2468ba3dac89cebc59c8498c0b08c5f3d7b Author: Andrew Bartlett [EMAIL PROTECTED] Date: Tue Aug 19 11:43:41 2008 +1000 Fix templates.ldb reprovision handling. This sets the attributes in a seperate transaction, and allows a forced delete of the whole file. Andrew Bartlett commit e26a5efd9a580ed3728e1f449e367b1cd4a73b5f Author: Andrew Bartlett [EMAIL PROTECTED] Date: Mon Aug 18 20:30:27 2008 +1000 Note the ldb syntax for attribute syntaxes in the table. This includes additional Samba-specific syntaxes made available from the ldif_handlers code. This commit also changes some table to use #defines, to ensure consistancy in other parts of the code. Andrew Bartlett commit 0aebae91be0fba7ffa94d73946a94aea930a252a Author: Andrew Bartlett [EMAIL PROTECTED] Date: Mon Aug 18 20:21:31 2008 +1000 Allow attributes to be overwritten, not just added to commit 9643db1a011edc95aa903908cec708b3a3566e71 Author: Andrew Bartlett [EMAIL PROTECTED] Date: Mon Aug 18 20:20:24 2008 +1000 Fix segfaults when loading the schema fails. commit 07107c45c35a11979bf68a14b2c4df9415880fcb Author: Andrew Bartlett [EMAIL PROTECTED] Date: Mon Aug 18 15:12:08 2008 +1000 Ensure we fail to proceed if the schema won't load. commit fcb87e77860b449ac3483ccec5e6b5ed087540f2 Author: Andrew Bartlett [EMAIL PROTECTED] Date: Mon Aug 18 12:01:27 2008 +1000 Remove references to the unused @SUBCLASS feature. This was removed from ldb_tdb a while ago Andrew Bartlett --- Summary of changes: .gitignore |2 +- source/dsdb/samdb/ldb_modules/schema_fsmo.c |1 + source/dsdb/samdb/ldb_modules/tests/samba3sam.py |2 +- source/dsdb/samdb/samdb.h|1 + source/dsdb/schema/schema.h |1 + source/dsdb/schema/schema_init.c | 27 ++-- source/dsdb/schema/schema_syntax.c | 47 - source/lib/ldb-samba/config.mk |2 +- source/lib/ldb-samba/ldif_handlers.c | 25 +++ source/lib/ldb-samba/ldif_handlers.h | 13 ++ source/lib/ldb/common/ldb_attributes.c | 14 +- source/lib/ldb/ldb_sqlite3/ldb_sqlite3.c | 37 + source/lib/ldb/ldb_sqlite3/schema| 35 source/lib/ldb/tests/test-attribs.ldif |9 source/lib/ldb/tests/test-index.ldif |4 -- source/scripting/python/samba/provision.py | 12 +- source/setup/provision_templates.ldif| 10 - source/setup/provision_templates_init.ldif | 10 + 18 files changed, 109 insertions(+), 143 deletions(-) create mode 100644 source/lib/ldb-samba/ldif_handlers.h create mode 100644 source/setup/provision_templates_init.ldif Changeset truncated at 500 lines: diff --git a/.gitignore b/.gitignore index 1e574f0..a216677 100644 --- a/.gitignore +++ b/.gitignore @@ -55,7 +55,7 @@ source/ldap_server/proto.h source/lib/db_wrap_proto.h source/lib/charset/charset_proto.h source/lib/cmdline/credentials.h -source/lib/ldb/samba/ldif_handlers.h +source/lib/ldb/samba/ldif_handlers_proto.h source/lib/registry/regf.h source/lib/registry/tdr_regf.c source/lib/registry/tdr_regf.h diff --git a/source/dsdb/samdb/ldb_modules/schema_fsmo.c b/source/dsdb/samdb/ldb_modules/schema_fsmo.c index 706b7b1..968b19c 100644 --- a/source/dsdb/samdb/ldb_modules/schema_fsmo.c +++ b/source/dsdb/samdb/ldb_modules/schema_fsmo.c @@ -125,6 +125,7 @@ static int schema_fsmo_init(struct ldb_module *module) schema_fsmo_init: dsdb_schema load failed: %s, error_string); talloc_free(mem_ctx); + return ret; } /* dsdb_set_schema() steal
[SCM] Samba Shared Repository - branch v4-0-test updated - release-4-0-0alpha5-314-gfc6b4f0
The branch, v4-0-test has been updated via fc6b4f03ebba015a13a6ab93221b0bc3ef8ef2ed (commit) via 08257c6d6ce809fcd53f9b2b4d558fef616b74ce (commit) via 6ed0b3f2475022288f636605492ca27fde97cd52 (commit) from 27d07df301d60e49d36efd003f2fd2305c83c3fe (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test - Log - commit fc6b4f03ebba015a13a6ab93221b0bc3ef8ef2ed Merge: 08257c6d6ce809fcd53f9b2b4d558fef616b74ce 27d07df301d60e49d36efd003f2fd2305c83c3fe Author: Andrew Bartlett [EMAIL PROTECTED] Date: Tue Aug 19 14:11:51 2008 +1000 Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet commit 08257c6d6ce809fcd53f9b2b4d558fef616b74ce Author: Andrew Bartlett [EMAIL PROTECTED] Date: Tue Aug 19 14:10:14 2008 +1000 Fix up new OpenLDAP MMR code. This changes the MMR password from hard-coded value of 'linux', adds tests and fixes the Fedora DS backend. Currently the MMR password matches the admin password, but we can change this to be another random value if required. Also require the port to be specified on the command line, so we don't hard-code a port of 9000. Andrew Bartlett commit 6ed0b3f2475022288f636605492ca27fde97cd52 Author: Oliver Liebel [EMAIL PROTECTED] Date: Tue Aug 19 12:03:04 2008 +1000 Generate Multi-Master Replication configuration for OpenLDAP This patches provision-backend and the related scripts to generate the correct configuration blobs for N-way multi-master replication using OpenLDAP. Signed-off-by: Andrew Bartlett [EMAIL PROTECTED] --- Summary of changes: source/scripting/python/samba/provision.py | 69 -- source/setup/mmr_serverids.conf |2 + source/setup/mmr_syncrepl.conf | 12 source/setup/provision-backend |7 ++- source/setup/slapd.conf | 36 ++- source/setup/tests/blackbox_provision-backend.sh |1 + 6 files changed, 116 insertions(+), 11 deletions(-) create mode 100644 source/setup/mmr_serverids.conf create mode 100644 source/setup/mmr_syncrepl.conf Changeset truncated at 500 lines: diff --git a/source/scripting/python/samba/provision.py b/source/scripting/python/samba/provision.py index 836509a..0855efe 100644 --- a/source/scripting/python/samba/provision.py +++ b/source/scripting/python/samba/provision.py @@ -76,7 +76,9 @@ class ProvisionPaths(object): self.memberofconf = None self.fedoradsinf = None self.fedoradspartitions = None - + self.olmmron = None + self.olmmrserveridsconf = None + self.olmmrsyncreplconf = None class ProvisionNames(object): def __init__(self): @@ -241,9 +243,13 @@ def provision_paths_from_lp(lp, dnsdomain): paths.memberofconf = os.path.join(paths.ldapdir, memberof.conf) paths.fedoradsinf = os.path.join(paths.ldapdir, - fedorads.inf) + fedorads.inf) paths.fedoradspartitions = os.path.join(paths.ldapdir, fedorads-partitions.ldif) +paths.olmmrserveridsconf = os.path.join(paths.ldapdir, +mmr_serverids.conf) +paths.olmmrsyncreplconf = os.path.join(paths.ldapdir, + mmr_syncrepl.conf) paths.hklm = hklm.ldb paths.hkcr = hkcr.ldb paths.hkcu = hkcu.ldb @@ -331,7 +337,7 @@ def guess_names(lp=None, hostname=None, domain=None, dnsdomain=None, serverrole= names.hostname = hostname names.sitename = sitename names.serverdn = CN=%s,CN=Servers,CN=%s,CN=Sites,%s % (netbiosname, sitename, configdn) - + return names @@ -1151,7 +1157,8 @@ def provision_backend(setup_dir=None, message=None, smbconf=None, targetdir=None, realm=None, rootdn=None, domaindn=None, schemadn=None, configdn=None, domain=None, hostname=None, adminpass=None, root=None, serverrole=None, - ldap_backend_type=None, ldap_backend_port=None): + ldap_backend_type=None, ldap_backend_port=None, + ol_mmr_urls=None): def setup_path(file): return os.path.join(setup_dir, file) @@ -1265,7 +1272,51 @@ def provision_backend(setup_dir=None, message=None, refint_config = read_and_sub_file(setup_path(refint.conf), { LINK_ATTRS : refint_attributes}) - + +# generate serverids, ldap-urls and syncrepl-blocks for mmr hosts + mmr_on_config = + mmr_serverids_config = +mmr_syncrepl_schema_config = +