[Samba] samba 3.2.2 ?

2008-08-18 Thread L.P.H. van Belle
Hai, 
 
maybe it's a bit early to ask, but is there a date when 3.2.2
wil be released.
 
thanx.
 
Louis

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba + ads / user and group update-probem

2008-08-18 Thread Anian Wurzenberger
Hello subscribers,
we have a problem with keeping our group memberships up to date. If we e.g. 
remove a group membership from a user, we don´t see any change when trying 
wbinfo -r j.doe or groups j.doe. Even after hours there ist no update. We 
also tried restarting smb, nmb, winbindd.

Anyone has an idea?


Some additional info:


|samba/winbind-version: 3.2.0-17.fc9


|Here our smb.conf
|
|[global]
|winbind cache time = 1m
|workgroup = xy-gmbh
|netbios name = smbtestfc9
|realm = TRANSACT-GMBH.DE
|idmap uid = 1-15000
|idmap gid = 1-15000
|winbind separator = /
|winbind use default domain = Yes
|security = ADS
|encrypt passwords = yes
|#Optional. Use only if Samba cannot determine the Kerberos server 
automatically.
|#password server = 192.168.2.50
|client use spnego = yes
|log level = 3
|winbind enum users = yes
|winbind enum groups = yes
|
|[test]
|comment = test
|path = /tmp
|browseable = yes
|read only = no
|guest ok = no
|valid users = XY-GMBH/a.someone, XY-GMBH/j.someoneelse, 
XY-GMBH/m.anotherguy
|create mask = 0770
|directory mask = 0770



|and our krb5.conf
|
|[logging]
| default = FILE:/var/log/krb5libs.log
| kdc = FILE:/var/log/krb5kdc.log
| admin_server = FILE:/var/log/kadmind.log
|
|[libdefaults]
| default_realm = XY-GMBH.DE
| dns_lookup_realm = false
| dns_lookup_kdc = false
| ticket_lifetime = 24h
| forwardable = yes
|
|[realms]
| XY-GMBH.DE = {
|  kdc = 192.168.1.11:88
|  default_domain = xy-gmbh.de
| }
|
|[domain_realm]
| .transact-gmbh.de = XY-GMBH.DE
| transact-gmbh.de = XY-GMBH.DE
|
|[appdefaults]
| pam = {
|   debug = false
|   ticket_lifetime = 36000
|   renew_lifetime = 36000
|   forwardable = true
|   krb4_convert = false
| }


|# wbinfo -p
|Ping to winbindd succeeded


|# net ads testjoin
|Join is OK


|# klist
|Ticket cache: FILE:/tmp/krb5cc_0
|Default principal: [EMAIL PROTECTED]
|
|Valid starting ExpiresService principal
|08/14/08 15:37:03  08/15/08 01:37:05  krbtgt/[EMAIL PROTECTED]
|renew until 08/15/08 15:37:03
|
|
|Kerberos 4 ticket cache: /tmp/tkt0
|klist: You have no tickets cached


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Signing problem with trusted domain in 3.2.0

2008-08-18 Thread devel
Hello

I seem to be having signing problems with 3.2.0

I have 2 PDCs on 2 different sites (say A and B) both running 3.2.0, with
the line server signing = auto in smb.conf. There is a one way trust (B
trusting A) setup.

While everything works correctly on both sites for local machines access
to local shares (a site A user logged on a site A machine can perfectly
access shares of site A PDC). The problem appears when one user logged on
site A tries to access share on site B PDC, or a user of site A tries to
log on site A domain from a site B machine. This problem disappears if
server signing is set to No in smb.conf. I could make a level 10 log of
smbd process while the problem appears, and could isolate the following
lines :

[2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 2
[2008/08/15 12:24:29,  0]
libsmb/smb_signing.c:srv_check_incoming_message(754)
  srv_check_incoming_message: BAD SIG: seq 2 wanted SMB signature of
[2008/08/15 12:24:29,  5] lib/util.c:dump_data(2226)
  [000] 52 70 FA 2C 55 E1 28 A4   Rp.,U.(.
[2008/08/15 12:24:29,  0]
libsmb/smb_signing.c:srv_check_incoming_message(758)
  srv_check_incoming_message: BAD SIG: seq 2 got SMB signature of
[2008/08/15 12:24:29,  5] lib/util.c:dump_data(2226)
  [000] 8E 53 67 0F 36 6B FC DB   .Sg.6k..

and then smbd seems to turn off signing :

[2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 4294967293
[2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 4294967294
[2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 4294967295
[2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 0
[2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 1
[2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 2
[2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 3
[2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 4
[2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 5
[2008/08/15 12:24:29, 10] libsmb/smb_signing.c:simple_packet_signature(285)
  simple_packet_signature: sequence number 6
[2008/08/15 12:24:29,  5] libsmb/smb_signing.c:signing_good(243)
  srv_check_incoming_message: signing negotiated but not required and peer
  isn't sending correct signatures. Turning off.

And at some point, the connexion is terminated (and windows pops up some
error message saying the server is no more available):

[2008/08/15 12:24:29, 10] lib/util.c:dump_data(2226)
  [000] 49 50 43 00 00 00 00  IPC
[2008/08/15 12:24:29,  5] lib/util_sock.c:read_socket_with_timeout(928)
  read_socket_with_timeout: blocking read. EOF from client.
[2008/08/15 12:24:29, 10] smbd/process.c:receive_smb_raw_talloc(276)
  receive_smb_raw: NT_STATUS_END_OF_FILE
[2008/08/15 12:24:29,  3] smbd/process.c:smbd_process(2027)
  receive_message_or_smb failed: NT_STATUS_END_OF_FILE, exiting
[2008/08/15 12:24:29,  5] lib/gencache.c:gencache_shutdown(93)
  Closing cache file

The complete log is available at http://www.thom.fr.eu.org/log.smbd

Anybody gone through similar problem ?

Thanks

François

-- 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba + acl

2008-08-18 Thread bikrish
Hello

I am using samba 3.2.1 version on centos 5.2 with ldap. Everything is working 
fine as i expected. I have shared a share , say , NOA on samba server. 
Now i log into windows and access the share and tried to give rights on share 
by right click  properties  security . I want to give a group call noag only 
read , write and but no permission of delete on share NOA . I have a group who 
can full access to the share NOA. I right click on it , use security tab to 
give only read permission , it works fine, but when i select? all the options 
except delete and full control and click ok , it chages to full control , which 
is what i don't want. I am searched a lot but couldn't find the solution. Is 
there any solutiont for this or this is not possible in samba.

Thanks in advance

Bikrish
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Signing problem with trusted domain in 3.2.0

2008-08-18 Thread Volker Lendecke
On Mon, Aug 18, 2008 at 02:13:16PM +0200, [EMAIL PROTECTED] wrote:
 I seem to be having signing problems with 3.2.0

Should be fixed in 3.2.1.

Volker


pgp0CB500xyZh.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba + ads / user and group update-probem

2008-08-18 Thread Volker Lendecke
On Mon, Aug 18, 2008 at 02:13:10PM +0200, Anian Wurzenberger wrote:
 we have a problem with keeping our group memberships up to
 date. If we e.g. remove a group membership from a user, we
 don´t see any change when trying wbinfo -r j.doe or
 groups j.doe. Even after hours there ist no update. We
 also tried restarting smb, nmb, winbindd.
 
 Anyone has an idea?

Does it still fail if j.doe logs in? If that one fixes it,
then you see effects of the netsamlogon_cache.tdb.

Volker


pgpxtWm8sPeS0.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Windows vista ultimate samba 3.0.31

2008-08-18 Thread Daniel Müller
Hello to all

I have setup samba 3.0.31 as PDC successful with xp clients.
Now I have a vista ultimate pc which I cannot join to the domain.
The error message when I try to join to the domain is:
The Domain is unavailable or the connection could not be established.

What I've done so far:

Run secpol.msc -- Local Plicies--Security Options --Lan Manager
authentication level--changed it to:
LM and NTLM- use NTLMV2 session security if negotiated.

Had someone did the trick??

Greetings

Daniel Müller
Tropenklinik Paul-Lechler-Krankenhaus
[EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] samba + ads / user and group update-probem

2008-08-18 Thread Anian Wurzenberger
Thank you for your answer. Where should the user log in? Into a share? Into an 
AD-connected Computer?

Anian


-Original Message-
From: Volker Lendecke [mailto:[EMAIL PROTECTED] 
Does it still fail if j.doe logs in? If that one fixes it, then you see effects 
of the netsamlogon_cache.tdb.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] [ANNOUNCE] Samba 3.2.1 Available for Download.eml

2008-08-18 Thread James Kosin
Hi Michael,

Everything compiled, and installed with the proper links.  I'm getting ready to 
test a RPM build to see if this works.  Will let everyone know in about 1-2 
hours.

James

-Original Message-
From: Michael Adam [mailto:[EMAIL PROTECTED] 
Sent: Friday, August 15, 2008 4:05 PM
To: James Kosin
Subject: Re: [Samba] [ANNOUNCE] Samba 3.2.1 Available for Download.eml

Hi, 

James Kosin wrote:
 No patch was attached

that's basically the one downside for me of using mutt.
I keep forgetting the attachements I promised... :-)

Btw: You can contact me under the nic obnox on the freenode irc channed 
samba-technical if you need some more realtime troubleshooting.

Cheers - Michael

--
Michael Adam [EMAIL PROTECTED]  [EMAIL PROTECTED] SerNet GmbH, 
Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9 AG Göttingen, HRB 2816, GF: Dr. 
Johannes Loxen http://www.SerNet.DE, mailto: Info @ SerNet.DE

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] WG: Windows vista ultimate samba 3.0.31

2008-08-18 Thread Daniel Müller
I found the solution:


I tried the srvmgr tool from microsoft to get connected to my samba 3
domain (from an XP client).
And this tool told me the same There is no PDC found for your domain.
You may go on but but your rights may be
Restricted. As I logged on I saw that both my PDC and BDC where BDCs.
I stopped my BDC. Logged on to my PDC and remembering that I had also
smbd4wins running on the same machine
I restarted smbd4wins and then samba  and everithing worked fine. I
could join the vista client to the domain on the fly.

-Ursprüngliche Nachricht-
Von: Daniel Müller [mailto:[EMAIL PROTECTED] 
Gesendet: Montag, 18. August 2008 15:00
An: 'samba@lists.samba.org'
Betreff: Windows vista ultimate samba 3.0.31


Hello to all

I have setup samba 3.0.31 as PDC successful with xp clients. Now I have
a vista ultimate pc which I cannot join to the domain. The error message
when I try to join to the domain is: The Domain is unavailable or the
connection could not be established.

What I've done so far:

Run secpol.msc -- Local Plicies--Security Options --Lan Manager
authentication level--changed it to: LM and NTLM- use NTLMV2 session
security if negotiated.

Had someone did the trick??

Greetings

Daniel Müller
Tropenklinik Paul-Lechler-Krankenhaus
[EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] [ANNOUNCE] Samba 3.2.1 Available for Download.eml

2008-08-18 Thread Michael Adam
Hi James,

James Kosin wrote:
 Everything compiled, and installed with the proper links.

Great!

 I'm getting ready to test a RPM build to see if this works.  Will
 let everyone know in about 1-2 hours.

Thanks for the feedback.

Please re-open and comment bug #5592, should any problems
(re)occur. Thanks!

Cheers - Michael

-- 
Michael Adam [EMAIL PROTECTED]  [EMAIL PROTECTED]
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.SerNet.DE, mailto: Info @ SerNet.DE


pgpWJFapSab74.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba 3.2.2 ?

2008-08-18 Thread Karolin Seeger
Hi,

On Mon, Aug 18, 2008 at 09:18:16AM +0200, L.P.H. van Belle wrote:
 maybe it's a bit early to ask, but is there a date when 3.2.2
 wil be released.

No, it is not too early... ;-)
3.2.2 will be out tomorrow.

Please see Samba Wiki [1] for more information about release planning.

[1] http://wiki.samba.org/index.php/Release_Planning_for_Samba_3.2#3.2.2

Cheers,
Karolin

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.SerNet.DE, mailto: Info @ SerNet.DE



pgpdF4a1y0j49.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] samba 3.2.2 ?

2008-08-18 Thread L.P.H. van Belle
GREAT !! :D 

Then this release will make lenny :D ( at least, for me :D ) 
Thanx for the reply 

Louis


-Oorspronkelijk bericht-
Van: Karolin Seeger [mailto:[EMAIL PROTECTED] 
Verzonden: maandag 18 augustus 2008 16:28
Aan: L.P.H. van Belle
CC: samba@lists.samba.org
Onderwerp: Re: [Samba] samba 3.2.2 ?

Hi,

On Mon, Aug 18, 2008 at 09:18:16AM +0200, L.P.H. van Belle wrote:
 maybe it's a bit early to ask, but is there a date when 3.2.2
 wil be released.

No, it is not too early... ;-)
3.2.2 will be out tomorrow.

Please see Samba Wiki [1] for more information about release planning.

[1] 
http://wiki.samba.org/index.php/Release_Planning_for_Samba_3.2#3.2.2

Cheers,
Karolin

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.SerNet.DE, mailto: Info @ SerNet.DE



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0.x access rights issue with secondary groups or Unix rights

2008-08-18 Thread albanperso-zatoo
Hi experts

I have a trouble in access rights

I am running Samba
3.0.31 on Solaris 10 x86 64 bits as member server of an Active
Directory 2003 R2 domain (MYDOMAIN) using Identity Management for Unix
I set rights to access a sub folder of a Samba share. On Solaris the user
toto jdoe can write a new file. From Windows, the same user can't.
Itlooks like OK when the primary group (grp1) of the user is the group
that own the subtree but not when this owner group is a secondary group
(grp2).
It is OK If I set explicitly the user right from MS Windows
I can't change the access rights to the group from MS Windows

I suspect Unix ownership or ACL to be the root cause but I can't exclude a 
Samba issue

Thanks for help

Here a long details on my config (sorry for the parts that take place and no 
useful info, so just go to the valuable data)

 An extract from my smb.conf 

[global]
## part windows ##
host msdfs = no
netbios name = machines01
netbios aliases = 2store
server string = 2store
workgroup = MYDOMAIN
realm = MYDOMAIN.LOCAL
security = ADS
use kerberos keytab = yes
obey pam restrictions = Yes
use spnego = yes
client use spnego = yes
password server = machinew01.MYDOMAIN.local machinew07.MYDOMAIN.local
#   unix extensions = no
machine password timeout = 0
#   logon path = \\machines01\profiles\%U
template shell = /bin/bash
hosts allow = 127.0.0.1, 192.168.10.0/255.255.255.0, 
192.168.11.0/255.255.255.0
## part samba engine ##
max log size = 5
log level = 10
syslog = 0
log file = /var/log/samba/%m
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
## part ldap et idmap ##
ldap admin dn = cn=myadmin,cn=users,dc=MYDOMAIN,dc=local
ldap idmap suffix = ou=idmap
ldap ssl = no
idmap backend = ldap:ldap://machinew01.MYDOMAIN.local 
ldap:ldap://machinew07.MYDOMAIN.local
#idmap backend = idmap_rid:MYDOMAIN=1-2
#idmap backend = ad
idmap uid = 1-2
idmap gid = 1-2
#idmap config MYDOMAIN:schema_mode = rfc2307
## part winbind ##
winbind nss info = rfc2307
winbind cache time = 5
winbind refresh tickets = Yes
winbind use default domain = Yes
winbind trusted domains only = Yes
winbind nested groups = Yes
winbind enum groups = Yes
winbind enum users = Yes

[data]
comment = Samba data folder
path = /samba/data
read only = No
create mask = 0740
directory mask = 0750
guest ok = Yes




 Check the Unix name resolution 
getent passwd jdoe
jdoe:x:10037:10002:John DOE:/home/jdoe:/bin/sh


getent group grp2
grp2::10004:myadmin,jdoe,demo1,demo2,demo3


 I can check that Samba can resolve if the user is member of the 
group 

/usr/local/samba/bin/net ads user info jdoe
grp2
grp1


/usr/local/samba/bin/wbinfo -G 10004
S-1-5-21-2269603188-533060101-51835291-1642

/usr/local/samba/bin/wbinfo -Y S-1-5-21-2269603188-533060101-51835291-1642
10004


/usr/local/samba/bin/wbinfo -R 10004
winbind_lookup_rids failed
Could not lookup RIDs 10004



 Review of the access rights 

ls -al /samba/data/level1/level2/level3/level4
drwxrwsr-x+ 19 myadmin grp2  512 Aug 15 11:18 .
drwxr-x---   9 myadmin grp1 512 Aug 12 16:06 ..
drwxrws---+  3 myadmin grp2  512 Jun 27 10:58 general
-rwxr-+  1 jdoe grp20 Aug 15 11:18 New Text Document from 
Windows.txt
-rwxrw   1 jdoe grp2   44 Aug 15 11:14 newdocfromunix.txt

*** ACTION: I try on Unix to change the group owner of .. by grp2 but that 
remove all jdoe access from Windows


 Test POSIX ACLs 
getfacl -a /samba/data/level1/level2/level3/level4/

# file: /samba/data/level1/level2/level3/level4/
# owner: myadmin
# group: grp2
user::rwx
group::rwx  #effective:rwx
other:r-x


getfacl -a /samba/data/level1/level2/level3

# file: /samba/data/level1/level2/level3
# owner: myadmin
# group: grp1
user::rwx
group::r-x  #effective:r-x
mask:r-x
other:---


getfacl -a /samba/data/level1/level2

# file: /samba/data/level1/level2
# owner: myadmin
# group: grp1
user::rwx
group::r-x  #effective:r-x
other:r-x


getfacl -a /samba/data/level1

# file: /samba/data/level1
# owner: root
# group: root
user::rwx
group::r-x  #effective:r-x
mask:r-x
other:r-x


getfacl -a /samba/data

# file: /samba/data
# owner: myadmin
# group: grp1
user::rwx
user:user123:rwx#effective:rwx
group::r-x  #effective:r-x
mask:rwx
other:r-x



 From MS Windows side 

properties/security
The group is in the group and user names list
there is no check box in the Allow or deny clomn

Advanced/permissions

TypeNamePermission

Re: [Samba] Re: Question to smbclient and domain users

2008-08-18 Thread Ryan Novosielski

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Which I find unfortunate as you end up using the username that Windows
provides, not the username the person actually gets (if I'm not mistaken).

Andreas Ladanyi wrote:
| The answer is to use %U instead %u (from the old smb.conf) then
| everything work :-)
|
| Andreas Ladanyi schrieb:
| Hi,
|
| smbclient i60ws1\\public_html  -U ladanyi
|
| results in:
|
| [2008/08/17 10:43:10, 0] smbd/service.c:make_connection_snum(1003)
|   '/var/www/public_html/IPR-OFFICE/ladanyi' does not exist or
| permission denied when connecting to [public_html] Error was
| Permission denied
|
| I use the:
|
| winbind use default domain = yes
|
|  option.
|
| This option works for wbinfo -u/-g option.
|
| Is it possible to get the query from:
|
| /var/www/public_html/IPR-OFFICE/ladanyi
|
| converted to:
|
| /var/www/public_html/ladanyi
|
|
| smb.conf:
|
| security=ads
| workgroup = IPR-OFFICE
|
|
| winbind separator = /
| winbind enum users = yes
| winbind enum groups = yes
| winbind cache time = 60
| idmap uid = 6000-27000
| idmap gid = 600-7000
| idmap backend = ad
| template shell = /bin/bash
| template homedir = /home/%u
| winbind use default domain = yes
| winbind refresh tickets = yes
| allow trusted domains = yes
| winbind nss info =  rfc2307
| winbind nested groups = yes
| winbind normalize names = yes
|
| Bye,
| Andy
|
|
|

- --
~  _  _ _  _ ___  _  _  _
~ |Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Systems Programmer II
~ |$| |__| |  | |__/ | \| _| |[EMAIL PROTECTED] - 973/972.0922 (2-0922)
~ \__/ Univ. of Med. and Dent.|IST/AST - NJMS Medical Science Bldg - C630
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIqaRSmb+gadEcsb4RAqmnAKCE5fyJWNlZdNYOHGdDLbQFYgJz2gCgoScX
ZNN5bzQyVTfbee/F19ZXX98=
=3H9a
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba 3.2.1 build system not honoring CFLAGS

2008-08-18 Thread Uri Simchoni
Hi,

I was compiling samba 3.2.1 and noticed that the Makefile doesn't use the 
CFLAGS I gave it. After digging into the configure script I came up with this 
patch. I know configure is generated from configure.in, but I was also unable 
to run it through my autoconf 2.62 (tried it on another machine with autoconf 
2.61 and it worked)

Uri.

--- configure   2008-08-17 01:16:13.0 +0300
+++ samba-3.2.1/source/configure2008-08-17 01:20:32.0 +0300
@@ -11339,8 +11339,6 @@
 fi
 if test x$debug = xyes ; then
CFLAGS=${CFLAGS} -g
-else
-   CFLAGS=-O
 fi

 CFLAGS=${CFLAGS} -D_SAMBA_BUILD_=3

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba 3.0.28, directory name is garbled.

2008-08-18 Thread Evans, Bill
Environment:
Sun Solaris 5.10
Samba   3.0.28 (latest SUN supported version)

We are currently running Totalnet Advanced Server TAS (for cifs
services) but plan to replace this with SAMBA.

Has anyone see this problem?  I am opening a ticket with SUN also.

from the UNIX command line

cd /export/userdir/project dir/sub dir /file-excel.xls  
( yes, there are spaces in the directory names and a trailing space 
.)

From a PC client, XP sp2


TAS mapping:   \userdir\project dir\sub dir\file-excel.xls  
[ note that the PC does not show the trailing space but allows access to
the directory ]

SAMBA mapping: \userdir\project dir\2D8YHS~L\file-excel.xls 
[ note that the PC shows a garbled directory name but allows access to
the directory below]

At some point we may go to open source to get the latest version, but, 
management wants to stay on SUN supported versions if possible.


Thanks,
Bill Evans
FHCRC


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba 3.0.28, directory name is garbled.

2008-08-18 Thread Jeremy Allison
On Mon, Aug 18, 2008 at 11:19:12AM -0700, Evans, Bill wrote:
 Environment:
 Sun Solaris   5.10
 Samba 3.0.28 (latest SUN supported version)
 
 We are currently running Totalnet Advanced Server TAS (for cifs
 services) but plan to replace this with SAMBA.
 
 Has anyone see this problem?  I am opening a ticket with SUN also.
 
 from the UNIX command line
 
 cd /export/userdir/project dir/sub dir /file-excel.xls  
 ( yes, there are spaces in the directory names and a trailing space 
 .)
 
 From a PC client, XP sp2
 
 
 TAS mapping:   \userdir\project dir\sub dir\file-excel.xls  
 [ note that the PC does not show the trailing space but allows access to
 the directory ]
 
 SAMBA mapping: \userdir\project dir\2D8YHS~L\file-excel.xls 
 [ note that the PC shows a garbled directory name but allows access to
 the directory below]
 
 At some point we may go to open source to get the latest version, but, 
 management wants to stay on SUN supported versions if possible.

Trailing spaces are illegal in a Windows name so Samba
has to mangle them (it does the same for names with a
':' also).

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Error loading module ad.so on AIX

2008-08-18 Thread Matt Anderson
Dear Help,

I'm working on building samba from source (version 3.0.29) on AIX v6.1.  I used
the following configure statement:
./configure --with-shared-modules=idmap_ad --with-krb5=/etc/krb5 CC=xlc
CPPFLAGS=-I/opt/pware/include LDFLAGS=-L/opt/pware/lib

I then edited the Makefile so that the following libraries were included:
LIBS=-liconv -ldl -lcom_err -lnsl

And then to fix an AIX specific error I updated a line in
/usr/include/sys/stropts.h to read:
#define mod_filename ...
instead of:
#define mod_name

I was able to successfully compile and link everything and start samba up. 
However, I'm unable to get user info from winbind (using wbinfo -i) or convert
SIDs to uids, uids to SIDs, SIDs to usernames or usernames to SIDs.  However,
wbinfo -u and wbinfo -g work just fine.

When I looked at log.winbindd-idmap, I found the following error:
Error loading module '/usr/local/samba/lib/idmap/ad.so': rtld: 0712-001 Symbol
_talloc_zero_zeronull was referenced from the module
/usr/local/samba/lib/idmap/ad.so(), but a runtime definition of the symbol was
not found.

So, I'm wondering if I'm just missing a library in the LIBS line in Makefile, or
if it's something on the AIX side that needs to be updated for this for winbind
to work properly with Active Directory.

Any help would be greatly appreciated.

smb.conf is below...

Thanks!
-Matt

SMB.CONF
==
# Global parameters
[global]
workgroup = TEST
realm = TEST.LOCAL
security = ADS
encrypt passwords = yes
password server = IP.OF.AD.SERVER
log level = 3 
log file = /usr/local/samba/var/%m.log
max log size = 50

idmap domains = TEST
idmap config TEST:backend = ad
idmap config TEST:default = yes
idmap config TEST:schema_mode = rfc2307
#   idmap config DOMAIN:range = 10-4000

winbind separator = + 
winbind use default domain = Yes 
winbind nested groups = Yes
winbind enum users = yes
winbind enum groups = yes
winbind nss info = rfc2307
passdb backend = tdbsam

[anyone]
path = /home/anyone
guest ok = yes
browseable = yes

[testing]
path = /home/testing
guest ok = no
valid users = @TEST+testgrp2 TEST+test05
write list = @TEST+testgrp2 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] connecting to shares in other subnet : slow

2008-08-18 Thread Stefan G. Weichinger


Greets, samba-users,

I contact this list because of a problem I face at a customer's site.

We run Samba version 3.0.28-0.6-1787-SUSE-CODE10 there on a SLES 10 SP2 
server. This server is located behind a firewall (run by me), that 
firewall allows all relevant Samba-ports through (137-139, 445).


The clients are located in a separated subnet, the routing between 
client- and server-subnet is run by an external service-provider, we 
have to trust in what they do (and say).


Connections work fine as soon as they are established, the problem is 
that the connecting itself takes way too long.


There's a small batch-script doing the net use x: ... and it sometimes 
takes up to half an hour (!) until the shares are connected.


connecting via telnet works fine, so routing and firewalling seems to 
work OK.


Today I narrowed things down via smb ports = 445 but without improvements.

Doing a net view \\our.server.domain.tld returns the shares 
immediately, and we also use the FQDN in the batch-script.


As soon as the shares are connected, transfers are working fine and fast.

Connections within the server-net start up immediately as well, so the 
hardware and smb.conf should be OK also afaik.


[global]
workgroup = ROM
map to guest = Bad User
log level = 2
smb ports = 445
printcap name = cups
logon path = \\%L\profiles\.msprofile
logon drive = P:
logon home = \\%L\%U\.9xprofile
usershare allow guests = Yes
printing = cups
cups options = raw
print command =
lpq command = %p
lprm command =
include = /etc/samba/dhcp.conf

the only speciality is that we use auditing in the shares, but I don't 
think this might be the reason:


[public]
comment = fuer alle
path = /mnt/public
force group = users
read only = No
inherit acls = Yes
vfs objects = full_audit
full_audit:failure = all
full_audit:success = all
full_audit:priority = NOTICE
full_audit:facility = LOCAL5


The logs don't show anything suspicious, at least nothing I understand 
as problematic.


I'll be happy to provide any logs and/or tcpdumps or something if needed.

Does anyone have any pointer for me?

Thanks in advance, best regards,
Stefan







--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] On move ACLs from source parent are preserved not inherited from new parent

2008-08-18 Thread Blaz Primc

Hi!

We're using sernet-samba 3.0.28-21 on debian. (The smb.conf can be found 
below)

There are 2 subfolders in root share directory ponudbe and projects:

srv03:/srv/data/test# getfacl *
# file: ponudbe
# owner: root
# group: root
user::rwx
user:COMPANY+administrator:rwx
group::r-x
group:COMPANY+ponudbe_rw:rwx
mask::rwx
other::---
default:user::rwx
default:user:COMPANY+administrator:rwx
default:group::r-x
default:group:COMPANY+ponudbe_rw:rwx
default:mask::rwx
default:other::---

# file: projects
# owner: root
# group: root
user::rwx
user:COMPANY+administrator:rwx
group::r-x
group:COMPANY+projekti_rw:rwx
mask::rwx
other::---
default:user::rwx
default:user:COMPANY+administrator:rwx
default:group::r-x
default:group:COMPANY+projekti_rw:rwx
default:mask::rwx
default:other::---

When I connect with Windows XP client to share, ACLs are respected 
properly. Then I create a new folder (as administrator) under ponudbe 
 named mapica. The problem occurs when I cutpaste this folder from 
ponudbe into projects. The default ACLs of projects dir are not 
added to the folder mapica and the ACLs from ponudba folder are 
preserved. Is this the expected behaviour?


srv03:/srv/data/test/projects# getfacl mapica/
# file: mapica
# owner: COMPANY+administrator
# group: root
user::rwx
user:COMPANY+administrator:rwx
group::rwx
group:COMPANY+ponudbe_rw:rwx
mask::rwx
other::---

Is there a way to configure Samba so that when I cut the folder mapica 
to projects the default permissions of projects are added to 
mapica and all of its subfolders? Is it possible to remove the 
default permissions of ponudbe at the same time?


Because with the current behaviour user has to be in group ponudbe_rw 
to access folder mapica that was created in ponudbe, but later moved 
to projects folder.


Help appreciated!

Thanks! Blaz

--- smb.conf ---

[global]
   workgroup = COMPANY
   netbios name = SRV03
   realm = COMPANY.LOCAL
   server string = Dokumenti
   null passwords = yes
   dns proxy = no
   log file = /var/log/samba/log.%m
   log level = 3
   max log size = 5000
   syslog = 0
   panic action = /usr/share/samba/panic-action %d
   security = ADS
   password server = srv05.COMPANY.local

   winbind separator = +
   winbind cache time = 300

   nt acl support = yes
   encrypt passwords = true
   #passdb backend = guest
   guest account = nobody
   invalid users = root
   preserve case = yes
   socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192
   idmap uid = 18000-25000
   idmap gid = 18000-25000
   winbind enum users = yes
   winbind enum groups = yes

   template homedir = /dev/null
   template shell = /bin/false

   getwd cache = yes

   domain master = no
   local master = no
   preferred master = no
   os level = 20

[test]
path=/srv/data/test
browseable = yes
writable = yes
guest ok = no
force create mode = 2770
inherit acls = yes
inherit permissions = yes
wide links = no
map acl inherit = yes

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] samba 3.0.28, directory name is garbled.

2008-08-18 Thread Evans, Bill
Fixed, from the O'Reilly manual Chapter 5.4.2 Mangling Options

add mangled names = no ( works in the per share space, not sure about
the global space ) and all works fine (so far anyway)

[fu]
comment = %U's Home Directory
path = /home/%U
read only = No
acl check permissions = Yes
force security mode = 0775
force directory mode = 0775
inherit permissions = Yes
inherit acls = Yes
map acl inherit = Yes
case sensitive = No
veto files = /.tnatr:*/
browseable = Yes
vfs objects = zfsacl
mangled names = no


On Mon, Aug 18, 2008 at 11:19:12AM -0700, Evans, Bill wrote:
 Environment:
 Sun Solaris   5.10
 Samba 3.0.28 (latest SUN supported version)
 
 We are currently running Totalnet Advanced Server TAS (for cifs
 services) but plan to replace this with SAMBA.
 
 Has anyone see this problem?  I am opening a ticket with SUN also.
 
 from the UNIX command line
 
 cd /export/userdir/project dir/sub dir /file-excel.xls  
 ( yes, there are spaces in the directory names and a trailing space 
 .)
 
 From a PC client, XP sp2
 
 
 TAS mapping:   \userdir\project dir\sub dir\file-excel.xls  
 [ note that the PC does not show the trailing space but allows access
to
 the directory ]
 
 SAMBA mapping: \userdir\project dir\2D8YHS~L\file-excel.xls 
 [ note that the PC shows a garbled directory name but allows access to
 the directory below]
 
 At some point we may go to open source to get the latest version, but,

 management wants to stay on SUN supported versions if possible.

Trailing spaces are illegal in a Windows name so Samba
has to mangle them (it does the same for names with a
':' also).

Jeremy.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba + ads / user and group update-probem

2008-08-18 Thread Volker Lendecke
On Mon, Aug 18, 2008 at 03:41:50PM +0200, Anian Wurzenberger wrote:
 Thank you for your answer. Where should the user log in?
 Into a share? Into an AD-connected Computer?

For example into a share. Anthing that makes Samba
authenticate against the DC.

Volker


pgp6lv4n5ldRC.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [SCM] Samba Shared Repository - branch v4-0-test updated - release-4-0-0alpha5-297-g61f2958

2008-08-18 Thread Stefan (metze) Metzmacher
Hi Andrew,

 +const struct dsdb_syntax *find_syntax_map_by_ad_oid(const char *ad_oid) 
 +{
 + int i;
 + for (i=0; dsdb_syntaxes[i].ldap_oid; i++) {
 + if (strcasecmp(ad_oid, dsdb_syntaxes[i].attributeSyntax_oid) == 
 0) {
 + return dsdb_syntaxes[i];
 + }
 + }
 + return NULL;
 +}
 +
 +const struct dsdb_syntax *find_syntax_map_by_ad_syntax(int oMSyntax) 
 +{
 + int i;
 + for (i=0; dsdb_syntaxes[i].ldap_oid; i++) {
 + if (oMSyntax == dsdb_syntaxes[i].oMSyntax) {
 + return dsdb_syntaxes[i];
 + }
 + }
 + return NULL;
 +}
 +
 +const struct dsdb_syntax *find_syntax_map_by_standard_oid(const char 
 *standard_oid) 
 +{
 + int i;
 + for (i=0; dsdb_syntaxes[i].ldap_oid; i++) {
 + if (strcasecmp(standard_oid, dsdb_syntaxes[i].ldap_oid) == 0) {
 + return dsdb_syntaxes[i];
 + }
 + }
 + return NULL;
 +}

can you please rename this functions to
dsdb_syntax_find_by_*()?

Thanks!

metze



signature.asc
Description: OpenPGP digital signature


[SCM] Samba Shared Repository - branch v4-0-test updated - release-4-0-0alpha5-299-g6a9720c

2008-08-18 Thread Stefan Metzmacher
The branch, v4-0-test has been updated
   via  6a9720c99d36a575ea8ed92e94ff6d2fe6f3e27d (commit)
   via  531882dadd57eb6fa048c5d6e5fe3accc20df751 (commit)
  from  61f2958c84beeedcf369ccdc02afed0c8055b108 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test


- Log -
commit 6a9720c99d36a575ea8ed92e94ff6d2fe6f3e27d
Author: Matthieu Suiche [EMAIL PROTECTED]
Date:   Thu Jul 10 09:31:43 2008 +

librpc/ndr: add support for XPRESS decompression

Signed-off-by: Stefan Metzmacher [EMAIL PROTECTED]

commit 531882dadd57eb6fa048c5d6e5fe3accc20df751
Author: Matthieu Suiche [EMAIL PROTECTED]
Date:   Thu Jul 10 09:31:43 2008 +

lib/compression: Import of lzxpress decompression algorithm

Signed-off-by: Stefan Metzmacher [EMAIL PROTECTED]

---

Summary of changes:
 source/lib/basic.mk|2 +-
 source/lib/compression/lzxpress.c  |  144 
 .../mech/context.h = lib/compression/lzxpress.h}  |   28 ++--
 source/librpc/ndr/ndr_compression.c|   61 -
 4 files changed, 216 insertions(+), 19 deletions(-)
 create mode 100644 source/lib/compression/lzxpress.c
 copy source/{heimdal/lib/gssapi/mech/context.h = lib/compression/lzxpress.h} 
(75%)


Changeset truncated at 500 lines:

diff --git a/source/lib/basic.mk b/source/lib/basic.mk
index b86df5d..0c68fda 100644
--- a/source/lib/basic.mk
+++ b/source/lib/basic.mk
@@ -1,6 +1,6 @@
 [SUBSYSTEM::LIBCOMPRESSION]
 
-LIBCOMPRESSION_OBJ_FILES = $(libcompressionsrcdir)/mszip.o
+LIBCOMPRESSION_OBJ_FILES = $(libcompressionsrcdir)/mszip.o 
$(libcompressionsrcdir)/lzxpress.o
 
 [SUBSYSTEM::GENCACHE]
 PRIVATE_DEPENDENCIES = TDB_WRAP
diff --git a/source/lib/compression/lzxpress.c 
b/source/lib/compression/lzxpress.c
new file mode 100644
index 000..5063051
--- /dev/null
+++ b/source/lib/compression/lzxpress.c
@@ -0,0 +1,144 @@
+/*
+ * Copyright (C) Matthieu Suiche 2008
+ *
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright
+ *notice, this list of conditions and the following disclaimer.
+ *
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *notice, this list of conditions and the following disclaimer in the
+ *documentation and/or other materials provided with the distribution.
+ *
+ * 3. Neither the name of the author nor the names of its contributors
+ *may be used to endorse or promote products derived from this software
+ *without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ *
+ */
+
+#include includes.h
+#include replace.h
+#include lzxpress.h
+
+
+#define __BUF_POS_CONST(buf,ofs)(((const uint8_t *)buf)+(ofs))
+#define __PULL_BYTE(buf,ofs) \
+   ((uint8_t)((*__BUF_POS_CONST(buf,ofs))  0xFF))
+
+#ifndef PULL_LE_UINT16
+#define PULL_LE_UINT16(buf,ofs) ((uint16_t)( \
+   ((uint16_t)(((uint16_t)(__PULL_BYTE(buf,(ofs)+0)))  0)) | \
+   ((uint16_t)(((uint16_t)(__PULL_BYTE(buf,(ofs)+1)))  8)) \
+))
+#endif
+
+#ifndef PULL_LE_UINT32
+#define PULL_LE_UINT32(buf,ofs) ((uint32_t)( \
+   ((uint32_t)(((uint32_t)(__PULL_BYTE(buf,(ofs)+0)))   0)) | \
+   ((uint32_t)(((uint32_t)(__PULL_BYTE(buf,(ofs)+1)))   8)) | \
+   ((uint32_t)(((uint32_t)(__PULL_BYTE(buf,(ofs)+2)))  16)) | \
+   ((uint32_t)(((uint32_t)(__PULL_BYTE(buf,(ofs)+3)))  24)) \
+))
+#endif
+
+static uint32_t xpress_decompress(uint8_t *input,
+   uint32_t input_size,
+   uint8_t *output,
+   uint32_t output_size)
+{
+   uint32_t output_index, input_index;
+   uint32_t indicator, indicator_bit;
+   uint32_t length;
+   uint32_t offset;
+   uint32_t nibble_index;
+
+   output_index = 0;
+   input_index = 0;
+   indicator = 0;
+   indicator_bit = 0;
+   length = 0;
+   offset = 0;
+   nibble_index = 

[SCM] Samba Shared Repository - branch v4-0-test updated - release-4-0-0alpha5-304-gf48dfd8

2008-08-18 Thread Stefan Metzmacher
The branch, v4-0-test has been updated
   via  f48dfd87badcddc64a1c0bf52939188a4a8f4add (commit)
   via  25876fc4ab8ba11f00d24bb8ceb517c0e4a4d72d (commit)
   via  0fb265e567d700b3c16eb8f28bc5f26653a819fa (commit)
   via  ce44a608f66bf27070fd43d576551fde6f545d7c (commit)
   via  0dbbc287f65a51330c5309df5a96b3acd4d044d5 (commit)
  from  6a9720c99d36a575ea8ed92e94ff6d2fe6f3e27d (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test


- Log -
commit f48dfd87badcddc64a1c0bf52939188a4a8f4add
Author: Stefan Metzmacher [EMAIL PROTECTED]
Date:   Mon Aug 18 15:33:11 2008 +0200

librpc: don't build the old mszip decompression code

metze

commit 25876fc4ab8ba11f00d24bb8ceb517c0e4a4d72d
Author: Stefan Metzmacher [EMAIL PROTECTED]
Date:   Thu Aug 7 16:24:57 2008 +

ndr_compression: use zlib's inflate() for decompression

metze

commit 0fb265e567d700b3c16eb8f28bc5f26653a819fa
Author: Stefan Metzmacher [EMAIL PROTECTED]
Date:   Mon Aug 18 14:26:53 2008 +0200

zlib: mark as modified for samba

metze

commit ce44a608f66bf27070fd43d576551fde6f545d7c
Author: Stefan Metzmacher [EMAIL PROTECTED]
Date:   Fri Aug 15 13:32:51 2008 +0200

zlib: fix compiler warnings

metze

commit 0dbbc287f65a51330c5309df5a96b3acd4d044d5
Author: Stefan Metzmacher [EMAIL PROTECTED]
Date:   Mon Aug 18 14:25:41 2008 +0200

zlib: we don't need the inflateReset2 prototype twice

metze

---

Summary of changes:
 source/lib/basic.mk |4 +-
 source/lib/zlib/adler32.c   |3 +-
 source/lib/zlib/compress.c  |5 +-
 source/lib/zlib/crc32.c |4 +-
 source/lib/zlib/deflate.c   |8 ++--
 source/lib/zlib/gzio.c  |   16 +++---
 source/lib/zlib/infback.c   |   24 +-
 source/lib/zlib/inffast.c   |   10 ++--
 source/lib/zlib/inflate.c   |   46 +-
 source/lib/zlib/trees.c |   12 ++--
 source/lib/zlib/uncompr.c   |5 +-
 source/lib/zlib/zlib.h  |   31 +---
 source/lib/zlib/zutil.h |2 +-
 source/librpc/config.mk |3 +-
 source/librpc/ndr/ndr_compression.c |   92 ++
 15 files changed, 173 insertions(+), 92 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/lib/basic.mk b/source/lib/basic.mk
index 0c68fda..4d07668 100644
--- a/source/lib/basic.mk
+++ b/source/lib/basic.mk
@@ -1,6 +1,6 @@
-[SUBSYSTEM::LIBCOMPRESSION]
+[SUBSYSTEM::LZXPRESS]
 
-LIBCOMPRESSION_OBJ_FILES = $(libcompressionsrcdir)/mszip.o 
$(libcompressionsrcdir)/lzxpress.o
+LZXPRESS_OBJ_FILES = $(libcompressionsrcdir)/lzxpress.o
 
 [SUBSYSTEM::GENCACHE]
 PRIVATE_DEPENDENCIES = TDB_WRAP
diff --git a/source/lib/zlib/adler32.c b/source/lib/zlib/adler32.c
index 007ba26..b5333d7 100644
--- a/source/lib/zlib/adler32.c
+++ b/source/lib/zlib/adler32.c
@@ -5,8 +5,7 @@
 
 /* @(#) $Id$ */
 
-#define ZLIB_INTERNAL
-#include zlib.h
+#include zutil.h
 
 #define BASE 65521UL/* largest prime smaller than 65536 */
 #define NMAX 5552
diff --git a/source/lib/zlib/compress.c b/source/lib/zlib/compress.c
index df04f01..40a53cd 100644
--- a/source/lib/zlib/compress.c
+++ b/source/lib/zlib/compress.c
@@ -5,8 +5,7 @@
 
 /* @(#) $Id$ */
 
-#define ZLIB_INTERNAL
-#include zlib.h
+#include zutil.h
 
 /* ===
  Compresses the source buffer into the destination buffer. The level
@@ -29,7 +28,7 @@ int ZEXPORT compress2 (dest, destLen, source, sourceLen, 
level)
 z_stream stream;
 int err;
 
-stream.next_in = (Bytef*)source;
+stream.next_in = source;
 stream.avail_in = (uInt)sourceLen;
 #ifdef MAXSEG_64K
 /* Check for source  64K on 16-bit machine: */
diff --git a/source/lib/zlib/crc32.c b/source/lib/zlib/crc32.c
index f658a9e..4d6e699 100644
--- a/source/lib/zlib/crc32.c
+++ b/source/lib/zlib/crc32.c
@@ -11,6 +11,8 @@
 
 /* @(#) $Id$ */
 
+#include zutil.h  /* for STDC and FAR definitions */
+
 /*
   Note on the use of DYNAMIC_CRC_TABLE: there is no mutex or semaphore
   protection on the static variables used to control the first-use generation
@@ -26,8 +28,6 @@
 #  endif /* !DYNAMIC_CRC_TABLE */
 #endif /* MAKECRCH */
 
-#include zutil.h  /* for STDC and FAR definitions */
-
 #define local static
 
 /* Find a four-byte integer type for crc32_little() and crc32_big(). */
diff --git a/source/lib/zlib/deflate.c b/source/lib/zlib/deflate.c
index 29ce1f6..2720aab 100644
--- a/source/lib/zlib/deflate.c
+++ b/source/lib/zlib/deflate.c
@@ -154,9 +154,6 @@ local const config configuration_table[10] = {
  * meaning.
  */
 
-#define EQUAL 0
-/* result of memcmp for equal strings */
-
 #ifndef NO_DUMMY_DECL
 struct static_tree_desc_s {int dummy;}; /* for buggy 

[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2929-gd1738c9

2008-08-18 Thread Karolin Seeger
The branch, v3-2-test has been updated
   via  d1738c966cc090fbe4bcd246bebb9c693235152a (commit)
  from  77a0d72ffe9764faa4accdf9240c1d482404d01d (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test


- Log -
commit d1738c966cc090fbe4bcd246bebb9c693235152a
Author: Karolin Seeger [EMAIL PROTECTED]
Date:   Mon Aug 18 15:52:09 2008 +0200

WHATSNEW: Update changes since 3.2.1.

Karolin

---

Summary of changes:
 WHATSNEW.txt |   10 ++
 1 files changed, 10 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 5d30dbd..97402b2 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -25,6 +25,7 @@ Changes since 3.2.1
 
 
 o   Michael Adam [EMAIL PROTECTED]
+* Fix creation and installation of shared libraries.
 * Fix replacement of random seed generator.
 * Fix a race condition in idmap_tdb2_allocate_id().
 * Fix unix_convert() for * after changing map_nt_error_from_unix().
@@ -36,6 +37,9 @@ o   Jeremy Allison [EMAIL PROTECTED]
   mistake.
 * BUG 5686: Fix segfaults in libsmbclient.
 * BUG 5692: Fix coredump in full_audit.so.
+* BUG 5696: Fix force group in setups using Winbind.
+* Rename cifs.spnego to cifs.upcall.
+* Fix segfault in cifs.upcall when it is called without any arguments.
 * Fix coverity ID 594 (resource leak on error path).
 * Fix assigning of primary group memberships when authenticating via
   Winbind.
@@ -63,12 +67,18 @@ o   Günther Deschner [EMAIL PROTECTED]
 * Add add c++ guard to netapi.
 
 
+o   Steve French [EMAIL PROTECTED]
+* Fix compile warning in cifs.upcall.
+* Add dns_resolver key type to cifs.upcall.
+
+
 o   SATOH Fumiyasu [EMAIL PROTECTED]
 * BUG 5688: Fix orphaned LPQ processes if socket address is invalid.
 
 
 o   Volker Lendecke [EMAIL PROTECTED]
 * BUG 5684: Fix removal of dead records in tdb files.
+* Fix coverity IDs 595, 596.
 * Fix smb_len calculation for chained requests.
 
 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2930-g25c354f

2008-08-18 Thread Karolin Seeger
The branch, v3-2-test has been updated
   via  25c354f8d194624d9ef8924d861af377cb89275d (commit)
  from  d1738c966cc090fbe4bcd246bebb9c693235152a (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test


- Log -
commit 25c354f8d194624d9ef8924d861af377cb89275d
Author: Karolin Seeger [EMAIL PROTECTED]
Date:   Mon Aug 18 15:56:52 2008 +0200

WHATSNEW: Add corresponding bug number.

Karolin

---

Summary of changes:
 WHATSNEW.txt |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 97402b2..bde08d6 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -25,7 +25,7 @@ Changes since 3.2.1
 
 
 o   Michael Adam [EMAIL PROTECTED]
-* Fix creation and installation of shared libraries.
+* BUG 5592: Fix creation and installation of shared libraries.
 * Fix replacement of random seed generator.
 * Fix a race condition in idmap_tdb2_allocate_id().
 * Fix unix_convert() for * after changing map_nt_error_from_unix().


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2931-g986c52d

2008-08-18 Thread Karolin Seeger
The branch, v3-2-test has been updated
   via  986c52dca86cc82dd62d1b9f71ee2269d5ba5cb4 (commit)
  from  25c354f8d194624d9ef8924d861af377cb89275d (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test


- Log -
commit 986c52dca86cc82dd62d1b9f71ee2269d5ba5cb4
Author: Karolin Seeger [EMAIL PROTECTED]
Date:   Mon Aug 18 15:59:07 2008 +0200

WHATSNEW: Add some more major bug fixes.

Karolin

---

Summary of changes:
 WHATSNEW.txt |2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index bde08d6..ec82d87 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -10,10 +10,12 @@ Major bug fixes included in Samba 3.2.2 are:
   o Fix removal of dead records in tdb files. This can lead to very large
 tdb files and to overflowing partitions as a consequence on systems
 running an nmbd daemon.
+  o Fix force group in setups using Winbind.
   o Fix freezing Windows Explorer on WinXP while browsing Samba shares.
 This one led to timeouts during printing as well.
   o Fix assigning of primary group memberships when authenticating via
 Winbind.
+  o Fix creation and installation of shared libraries.
 
 
 ##


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-2-stable updated - release-3-2-1-143-gc68fcfd

2008-08-18 Thread Karolin Seeger
The branch, v3-2-stable has been updated
   via  c68fcfd4a052eb58205f52d76788b6f083c28581 (commit)
   via  83a85683ebae320e9e4717851277b727849f0da7 (commit)
  from  5473ac21094cd0cc29dbf0a8991eade36ac31f49 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable


- Log -
commit c68fcfd4a052eb58205f52d76788b6f083c28581
Author: Karolin Seeger [EMAIL PROTECTED]
Date:   Mon Aug 18 15:59:07 2008 +0200

WHATSNEW: Add some more major bug fixes.

Karolin
(cherry picked from commit 986c52dca86cc82dd62d1b9f71ee2269d5ba5cb4)

commit 83a85683ebae320e9e4717851277b727849f0da7
Author: Karolin Seeger [EMAIL PROTECTED]
Date:   Mon Aug 18 15:56:52 2008 +0200

WHATSNEW: Add corresponding bug number.

Karolin
(cherry picked from commit 25c354f8d194624d9ef8924d861af377cb89275d)

---

Summary of changes:
 WHATSNEW.txt |4 +++-
 1 files changed, 3 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index 97402b2..ec82d87 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -10,10 +10,12 @@ Major bug fixes included in Samba 3.2.2 are:
   o Fix removal of dead records in tdb files. This can lead to very large
 tdb files and to overflowing partitions as a consequence on systems
 running an nmbd daemon.
+  o Fix force group in setups using Winbind.
   o Fix freezing Windows Explorer on WinXP while browsing Samba shares.
 This one led to timeouts during printing as well.
   o Fix assigning of primary group memberships when authenticating via
 Winbind.
+  o Fix creation and installation of shared libraries.
 
 
 ##
@@ -25,7 +27,7 @@ Changes since 3.2.1
 
 
 o   Michael Adam [EMAIL PROTECTED]
-* Fix creation and installation of shared libraries.
+* BUG 5592: Fix creation and installation of shared libraries.
 * Fix replacement of random seed generator.
 * Fix a race condition in idmap_tdb2_allocate_id().
 * Fix unix_convert() for * after changing map_nt_error_from_unix().


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2932-g9f74480

2008-08-18 Thread Karolin Seeger
The branch, v3-2-test has been updated
   via  9f74480cc6c4f1f41c1a4fe71580cd623ef41407 (commit)
  from  986c52dca86cc82dd62d1b9f71ee2269d5ba5cb4 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test


- Log -
commit 9f74480cc6c4f1f41c1a4fe71580cd623ef41407
Author: Karolin Seeger [EMAIL PROTECTED]
Date:   Mon Aug 18 16:36:53 2008 +0200

WHATSNEW: Update release date.

Karolin

---

Summary of changes:
 WHATSNEW.txt |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index ec82d87..dc3963a 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,6 +1,6 @@
==
Release Notes for Samba 3.2.2
- August, 18 2008
+ August, 19 2008
==
 
 This is a bug fix release of the Samba 3.2 series.


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-2-stable updated - release-3-2-1-144-ga28f3a6

2008-08-18 Thread Karolin Seeger
The branch, v3-2-stable has been updated
   via  a28f3a6e02f3d97980a7581a0aa032233f802e83 (commit)
  from  c68fcfd4a052eb58205f52d76788b6f083c28581 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable


- Log -
commit a28f3a6e02f3d97980a7581a0aa032233f802e83
Author: Karolin Seeger [EMAIL PROTECTED]
Date:   Mon Aug 18 16:36:53 2008 +0200

WHATSNEW: Update release date.

Karolin
(cherry picked from commit 9f74480cc6c4f1f41c1a4fe71580cd623ef41407)

---

Summary of changes:
 WHATSNEW.txt |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index ec82d87..dc3963a 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,6 +1,6 @@
==
Release Notes for Samba 3.2.2
- August, 18 2008
+ August, 19 2008
==
 
 This is a bug fix release of the Samba 3.2 series.


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-2933-ge2caa65

2008-08-18 Thread Jeremy Allison
The branch, v3-2-test has been updated
   via  e2caa65a698ca7109aa44656ff9399104cf0663b (commit)
  from  9f74480cc6c4f1f41c1a4fe71580cd623ef41407 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test


- Log -
commit e2caa65a698ca7109aa44656ff9399104cf0663b
Author: Igor Mammedov [EMAIL PROTECTED]
Date:   Mon Aug 18 09:55:44 2008 -0700

Fix length error in wrapping spnego blob. Karoling this needs to be in 
3.2.2 (sorry).

---

Summary of changes:
 source/libsmb/clikrb5.c |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/libsmb/clikrb5.c b/source/libsmb/clikrb5.c
index d30cc54..a7ca24f 100644
--- a/source/libsmb/clikrb5.c
+++ b/source/libsmb/clikrb5.c
@@ -1870,7 +1870,7 @@ static krb5_error_code ads_krb5_get_fwd_ticket( 
krb5_context context,
}
 
/* We now have a service ticket, now turn it into an AP-REQ. */
-   authenticator-length = ntohs(fwdData.length + GSSAPI_CHECKSUM_SIZE);
+   authenticator-length = fwdData.length + GSSAPI_CHECKSUM_SIZE;
 
/* Caller should call free() when they're done with this. */
authenticator-data = (char *)pChksum;


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-3733-g1cad62d

2008-08-18 Thread Jeremy Allison
The branch, v3-3-test has been updated
   via  1cad62d347eca9d3af847fb297d0dc822de7560c (commit)
  from  99d9bfe60d219f6ef09c9a6967896867a86b8a0e (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test


- Log -
commit 1cad62d347eca9d3af847fb297d0dc822de7560c
Author: Igor Mammedov [EMAIL PROTECTED]
Date:   Mon Aug 18 09:56:23 2008 -0700

Fix length error in wrapping spnego blob

---

Summary of changes:
 source/libsmb/clikrb5.c |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/libsmb/clikrb5.c b/source/libsmb/clikrb5.c
index 5bb33b1..fa21ad3 100644
--- a/source/libsmb/clikrb5.c
+++ b/source/libsmb/clikrb5.c
@@ -1910,7 +1910,7 @@ static krb5_error_code ads_krb5_get_fwd_ticket( 
krb5_context context,
}
 
/* We now have a service ticket, now turn it into an AP-REQ. */
-   authenticator-length = ntohs(fwdData.length + GSSAPI_CHECKSUM_SIZE);
+   authenticator-length = fwdData.length + GSSAPI_CHECKSUM_SIZE;
 
/* Caller should call free() when they're done with this. */
authenticator-data = (char *)pChksum;


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-3735-g5a13b7c

2008-08-18 Thread jlayton
The branch, v3-3-test has been updated
   via  5a13b7c442f1b70f36dd336bfa8b3dac897bfa4c (commit)
   via  9b0478984ed3d6ffa84e7eb6f7ef1e5fa3a0f1e3 (commit)
  from  1cad62d347eca9d3af847fb297d0dc822de7560c (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test


- Log -
commit 5a13b7c442f1b70f36dd336bfa8b3dac897bfa4c
Author: Jeff Layton [EMAIL PROTECTED]
Date:   Mon Aug 18 13:49:59 2008 -0400

cifs.upcall: enable building by default on linux

When building on linux, default to building cifs.upcall. Throw a
warning if ADS support is disabled or keyutils isn't installed.

Signed-off-by: Jeff Layton [EMAIL PROTECTED]

commit 9b0478984ed3d6ffa84e7eb6f7ef1e5fa3a0f1e3
Author: Jeff Layton [EMAIL PROTECTED]
Date:   Mon Aug 18 13:49:59 2008 -0400

cifs.upcall: move default install location to EPREFIX/sbin

cifs.upcall links to libraries that live under /usr, so installing it
in /sbin doesn't seem appropriate. Move it to EPREFIX/sbin instead
(i.e. /usr/sbin).

Signed-off-by: Jeff Layton [EMAIL PROTECTED]

---

Summary of changes:
 source/Makefile.in  |8 
 source/configure.in |   23 +++
 2 files changed, 23 insertions(+), 8 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/Makefile.in b/source/Makefile.in
index 938d711..a1dac20 100644
--- a/source/Makefile.in
+++ b/source/Makefile.in
@@ -176,9 +176,9 @@ PATH_FLAGS = -DSMB_PASSWD_FILE=\$(SMB_PASSWD_FILE)\ \
 
 # Note that all executable programs now provide for an optional executable 
suffix.
 
-SBIN_PROGS = bin/[EMAIL PROTECTED]@ bin/[EMAIL PROTECTED]@ @SWAT_SBIN_TARGETS@ 
@EXTRA_SBIN_PROGS@
+SBIN_PROGS = bin/[EMAIL PROTECTED]@ bin/[EMAIL PROTECTED]@ @SWAT_SBIN_TARGETS@ 
@EXTRA_SBIN_PROGS@ @CIFSUPCALL_PROGS@
 
-ROOT_SBIN_PROGS = @CIFSMOUNT_PROGS@ @CIFSUPCALL_PROGS@
+ROOT_SBIN_PROGS = @CIFSMOUNT_PROGS@
 
 BIN_PROGS1 = bin/[EMAIL PROTECTED]@ bin/[EMAIL PROTECTED]@ bin/[EMAIL 
PROTECTED]@ \
bin/[EMAIL PROTECTED]@ bin/[EMAIL PROTECTED]@ bin/[EMAIL PROTECTED]@
@@ -2482,8 +2482,8 @@ installcifsmount:: @CIFSMOUNT_PROGS@
@$(SHELL) script/installbin.sh $(INSTALLPERMS_BIN) $(DESTDIR) $(prefix) 
$(ROOTSBINDIR) @CIFSMOUNT_PROGS@
 
 installcifsupcall:: @CIFSUPCALL_PROGS@
-   @$(SHELL) $(srcdir)/script/installdirs.sh $(INSTALLPERMS_BIN) 
$(DESTDIR) $(ROOTSBINDIR)
-   @$(SHELL) script/installbin.sh $(INSTALLPERMS_BIN) $(DESTDIR) $(prefix) 
$(ROOTSBINDIR) @CIFSUPCALL_PROGS@
+   @$(SHELL) $(srcdir)/script/installdirs.sh $(INSTALLPERMS_BIN) 
$(DESTDIR) $(SBINDIR)
+   @$(SHELL) script/installbin.sh $(INSTALLPERMS_BIN) $(DESTDIR) $(prefix) 
$(SBINDIR) @CIFSUPCALL_PROGS@
 
 # Some symlinks are required for the 'probing' of modules.
 # This mechanism should go at some point..
diff --git a/source/configure.in b/source/configure.in
index c769859..38819df 100644
--- a/source/configure.in
+++ b/source/configure.in
@@ -4048,7 +4048,7 @@ INSTALL_CIFSUPCALL=
 UNINSTALL_CIFSUPCALL=
 AC_MSG_CHECKING(whether to build cifs.upcall)
 AC_ARG_WITH(cifsupcall,
-[AS_HELP_STRING([--with-cifsupcall], [Include cifs.upcall (Linux only) support 
(default=no)])],
+[AS_HELP_STRING([--with-cifsupcall], [Include cifs.upcall (Linux only) support 
(default=yes)])],
 [ case $withval in
   no)
AC_MSG_RESULT(no)
@@ -4074,9 +4074,24 @@ AC_ARG_WITH(cifsupcall,
esac
 ;;
   esac ],
-[
-  AC_MSG_RESULT(no)
-  ]
+[ case $host_os in
+  *linux*)
+   if test x$use_ads != xyes; then
+   AC_MSG_WARN(ADS support should be enabled for building 
cifs.upcall)
+   elif test x$HAVE_KEYUTILS_H != x1; then
+   AC_MSG_WARN(keyutils package is required for cifs.upcall)
+   else
+   AC_MSG_RESULT(yes)
+   AC_DEFINE(WITH_CIFSUPCALL,1,[whether to build cifs.upcall])
+   CIFSUPCALL_PROGS=bin/cifs.upcall
+   INSTALL_CIFSUPCALL=installcifsupcall
+   UNINSTALL_CIFSUPCALL=uninstallcifsupcall
+   fi
+   ;;
+  *)
+   AC_MSG_RESULT(no)
+   ;;
+  esac ]
 )
 
 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-devel updated - release-3-2-0pre2-3754-ge415420

2008-08-18 Thread Jeremy Allison
The branch, v3-devel has been updated
   via  e415420b086a236be6bcc1e7584bec276a74e457 (commit)
  from  16ee95494ba495c5f5ff8779206f380db1067b2d (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-devel


- Log -
commit e415420b086a236be6bcc1e7584bec276a74e457
Author: Jeremy Allison [EMAIL PROTECTED]
Date:   Mon Aug 18 16:18:34 2008 -0700

Make the change to smbcontrol for all to mean broadcast,
and smbd to mean the main smb daemon. Update docs to match.
Jeremy.

---

Summary of changes:
 docs-xml/manpages-3/smbcontrol.1.xml |   17 +
 source/utils/smbcontrol.c|7 +++
 2 files changed, 16 insertions(+), 8 deletions(-)


Changeset truncated at 500 lines:

diff --git a/docs-xml/manpages-3/smbcontrol.1.xml 
b/docs-xml/manpages-3/smbcontrol.1.xml
index d7c7751..f8c31bb 100644
--- a/docs-xml/manpages-3/smbcontrol.1.xml
+++ b/docs-xml/manpages-3/smbcontrol.1.xml
@@ -58,23 +58,32 @@
on STDIN. An empty command line or a q will quit the 
program./para/listitem
/varlistentry
-   
+
varlistentry
termdestination/term
listitemparaOne of parameternmbd/parameter, 
parametersmbd/parameter or a process ID./para
 
+   paraThe parameterall/parameter destination causes the 
+   message to broadcast to all running daemons including nmbd and
+   winbind. This is a change for Samba 3.3, prior to this the
+   paramter smbd used to do this./para
+
paraThe parametersmbd/parameter destination causes the 
-   message to broadcast to all smbd daemons./para
+   message to be sent to the smbd daemon specified in the 
+   filenamesmbd.pid/filename file./para
 
paraThe parameternmbd/parameter destination causes the 
message to be sent to the nmbd daemon specified in the 
filenamenmbd.pid/filename file./para
 
+   paraThe parameterwinbindd/parameter destination causes 
the 
+   message to be sent to the winbind daemon specified in the 
+   filenamewinbindd.pid/filename file./para
+
paraIf a single process ID is given, the message is sent 
to only that process./para/listitem
/varlistentry
-   
-   
+
varlistentry
termmessage-type/term
listitemparaType of message to send. See 
diff --git a/source/utils/smbcontrol.c b/source/utils/smbcontrol.c
index 6699763..750030d 100644
--- a/source/utils/smbcontrol.c
+++ b/source/utils/smbcontrol.c
@@ -1228,9 +1228,9 @@ static struct server_id parse_dest(const char *dest)
struct server_id result = {-1};
pid_t pid;
 
-   /* Zero is a special return value for broadcast smbd */
+   /* Zero is a special return value for broadcast to all processes */
 
-   if (strequal(dest, smbd)) {
+   if (strequal(dest, all)) {
return interpret_pid(MSG_BROADCAST_PID_STR);
}
 
@@ -1245,7 +1245,6 @@ static struct server_id parse_dest(const char *dest)
dest = winbindd;
}
 
-   
if (!(strequal(dest, winbindd) || strequal(dest, nmbd))) {
/* Check for numeric pid number */
 
@@ -1266,7 +1265,7 @@ static struct server_id parse_dest(const char *dest)
fprintf(stderr,Can't find pid for destination '%s'\n, dest);
 
return result;
-}  
+}
 
 /* Execute smbcontrol command */
 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-3-test updated - release-3-2-0pre2-3736-gc361bec

2008-08-18 Thread Jeremy Allison
The branch, v3-3-test has been updated
   via  c361beca1ed4e896151c6445b881b40957cc1ce4 (commit)
  from  5a13b7c442f1b70f36dd336bfa8b3dac897bfa4c (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test


- Log -
commit c361beca1ed4e896151c6445b881b40957cc1ce4
Author: Jeremy Allison [EMAIL PROTECTED]
Date:   Mon Aug 18 16:17:59 2008 -0700

Make the change to smbcontrol for all to mean broadcast,
and smbd to mean the main smb daemon. Update docs to match.
Jeremy.

---

Summary of changes:
 docs-xml/manpages-3/smbcontrol.1.xml |   17 +
 source/utils/smbcontrol.c|7 +++
 2 files changed, 16 insertions(+), 8 deletions(-)


Changeset truncated at 500 lines:

diff --git a/docs-xml/manpages-3/smbcontrol.1.xml 
b/docs-xml/manpages-3/smbcontrol.1.xml
index d7c7751..f8c31bb 100644
--- a/docs-xml/manpages-3/smbcontrol.1.xml
+++ b/docs-xml/manpages-3/smbcontrol.1.xml
@@ -58,23 +58,32 @@
on STDIN. An empty command line or a q will quit the 
program./para/listitem
/varlistentry
-   
+
varlistentry
termdestination/term
listitemparaOne of parameternmbd/parameter, 
parametersmbd/parameter or a process ID./para
 
+   paraThe parameterall/parameter destination causes the 
+   message to broadcast to all running daemons including nmbd and
+   winbind. This is a change for Samba 3.3, prior to this the
+   paramter smbd used to do this./para
+
paraThe parametersmbd/parameter destination causes the 
-   message to broadcast to all smbd daemons./para
+   message to be sent to the smbd daemon specified in the 
+   filenamesmbd.pid/filename file./para
 
paraThe parameternmbd/parameter destination causes the 
message to be sent to the nmbd daemon specified in the 
filenamenmbd.pid/filename file./para
 
+   paraThe parameterwinbindd/parameter destination causes 
the 
+   message to be sent to the winbind daemon specified in the 
+   filenamewinbindd.pid/filename file./para
+
paraIf a single process ID is given, the message is sent 
to only that process./para/listitem
/varlistentry
-   
-   
+
varlistentry
termmessage-type/term
listitemparaType of message to send. See 
diff --git a/source/utils/smbcontrol.c b/source/utils/smbcontrol.c
index 6699763..750030d 100644
--- a/source/utils/smbcontrol.c
+++ b/source/utils/smbcontrol.c
@@ -1228,9 +1228,9 @@ static struct server_id parse_dest(const char *dest)
struct server_id result = {-1};
pid_t pid;
 
-   /* Zero is a special return value for broadcast smbd */
+   /* Zero is a special return value for broadcast to all processes */
 
-   if (strequal(dest, smbd)) {
+   if (strequal(dest, all)) {
return interpret_pid(MSG_BROADCAST_PID_STR);
}
 
@@ -1245,7 +1245,6 @@ static struct server_id parse_dest(const char *dest)
dest = winbindd;
}
 
-   
if (!(strequal(dest, winbindd) || strequal(dest, nmbd))) {
/* Check for numeric pid number */
 
@@ -1266,7 +1265,7 @@ static struct server_id parse_dest(const char *dest)
fprintf(stderr,Can't find pid for destination '%s'\n, dest);
 
return result;
-}  
+}
 
 /* Execute smbcontrol command */
 


-- 
Samba Shared Repository


Build status as of Tue Aug 19 00:00:02 2008

2008-08-18 Thread build
URL: http://build.samba.org/

--- /home/build/master/cache/broken_results.txt.old 2008-08-18 
00:00:40.0 +
+++ /home/build/master/cache/broken_results.txt 2008-08-19 00:01:10.0 
+
@@ -1,4 +1,4 @@
-Build status as of Mon Aug 18 00:00:03 2008
+Build status as of Tue Aug 19 00:00:02 2008
 
 Build counts:
 Tree Total  Broken Panic 
@@ -6,17 +6,17 @@
 ccache   31 9  0 
 ctdb 0  0  0 
 distcc   1  0  0 
-ldb  30 30 0 
+ldb  31 30 0 
 libreplace   31 11 0 
 lorikeet-heimdal 25 20 0 
-pidl 16 9  0 
+pidl 17 9  0 
 ppp  9  0  0 
 rsync32 12 0 
 samba-docs   0  0  0 
 samba-gtk6  6  0 
 samba_3_X_devel 26 21 0 
-samba_3_X_test 26 24 0 
-samba_4_0_test 29 24 0 
+samba_3_X_test 27 24 0 
+samba_4_0_test 29 23 0 
 smb-build30 4  0 
 talloc   30 5  0 
 tdb  31 12 0 


[SCM] Samba Shared Repository - branch v4-0-test updated - release-4-0-0alpha5-311-g27d07df

2008-08-18 Thread Andrew Bartlett
The branch, v4-0-test has been updated
   via  27d07df301d60e49d36efd003f2fd2305c83c3fe (commit)
   via  423db2468ba3dac89cebc59c8498c0b08c5f3d7b (commit)
   via  e26a5efd9a580ed3728e1f449e367b1cd4a73b5f (commit)
   via  0aebae91be0fba7ffa94d73946a94aea930a252a (commit)
   via  9643db1a011edc95aa903908cec708b3a3566e71 (commit)
   via  07107c45c35a11979bf68a14b2c4df9415880fcb (commit)
   via  fcb87e77860b449ac3483ccec5e6b5ed087540f2 (commit)
  from  f48dfd87badcddc64a1c0bf52939188a4a8f4add (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test


- Log -
commit 27d07df301d60e49d36efd003f2fd2305c83c3fe
Merge: 423db2468ba3dac89cebc59c8498c0b08c5f3d7b 
f48dfd87badcddc64a1c0bf52939188a4a8f4add
Author: Andrew Bartlett [EMAIL PROTECTED]
Date:   Tue Aug 19 14:10:53 2008 +1000

Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 
4-0-abartlet

commit 423db2468ba3dac89cebc59c8498c0b08c5f3d7b
Author: Andrew Bartlett [EMAIL PROTECTED]
Date:   Tue Aug 19 11:43:41 2008 +1000

Fix templates.ldb reprovision handling.

This sets the attributes in a seperate transaction, and allows a
forced delete of the whole file.

Andrew Bartlett

commit e26a5efd9a580ed3728e1f449e367b1cd4a73b5f
Author: Andrew Bartlett [EMAIL PROTECTED]
Date:   Mon Aug 18 20:30:27 2008 +1000

Note the ldb syntax for attribute syntaxes in the table.

This includes additional Samba-specific syntaxes made available from
the ldif_handlers code.

This commit also changes some table to use #defines, to ensure
consistancy in other parts of the code.

Andrew Bartlett

commit 0aebae91be0fba7ffa94d73946a94aea930a252a
Author: Andrew Bartlett [EMAIL PROTECTED]
Date:   Mon Aug 18 20:21:31 2008 +1000

Allow attributes to be overwritten, not just added to

commit 9643db1a011edc95aa903908cec708b3a3566e71
Author: Andrew Bartlett [EMAIL PROTECTED]
Date:   Mon Aug 18 20:20:24 2008 +1000

Fix segfaults when loading the schema fails.

commit 07107c45c35a11979bf68a14b2c4df9415880fcb
Author: Andrew Bartlett [EMAIL PROTECTED]
Date:   Mon Aug 18 15:12:08 2008 +1000

Ensure we fail to proceed if the schema won't load.

commit fcb87e77860b449ac3483ccec5e6b5ed087540f2
Author: Andrew Bartlett [EMAIL PROTECTED]
Date:   Mon Aug 18 12:01:27 2008 +1000

Remove references to the unused @SUBCLASS feature.

This was removed from ldb_tdb a while ago

Andrew Bartlett

---

Summary of changes:
 .gitignore   |2 +-
 source/dsdb/samdb/ldb_modules/schema_fsmo.c  |1 +
 source/dsdb/samdb/ldb_modules/tests/samba3sam.py |2 +-
 source/dsdb/samdb/samdb.h|1 +
 source/dsdb/schema/schema.h  |1 +
 source/dsdb/schema/schema_init.c |   27 ++--
 source/dsdb/schema/schema_syntax.c   |   47 -
 source/lib/ldb-samba/config.mk   |2 +-
 source/lib/ldb-samba/ldif_handlers.c |   25 +++
 source/lib/ldb-samba/ldif_handlers.h |   13 ++
 source/lib/ldb/common/ldb_attributes.c   |   14 +-
 source/lib/ldb/ldb_sqlite3/ldb_sqlite3.c |   37 +
 source/lib/ldb/ldb_sqlite3/schema|   35 
 source/lib/ldb/tests/test-attribs.ldif   |9 
 source/lib/ldb/tests/test-index.ldif |4 --
 source/scripting/python/samba/provision.py   |   12 +-
 source/setup/provision_templates.ldif|   10 -
 source/setup/provision_templates_init.ldif   |   10 +
 18 files changed, 109 insertions(+), 143 deletions(-)
 create mode 100644 source/lib/ldb-samba/ldif_handlers.h
 create mode 100644 source/setup/provision_templates_init.ldif


Changeset truncated at 500 lines:

diff --git a/.gitignore b/.gitignore
index 1e574f0..a216677 100644
--- a/.gitignore
+++ b/.gitignore
@@ -55,7 +55,7 @@ source/ldap_server/proto.h
 source/lib/db_wrap_proto.h
 source/lib/charset/charset_proto.h
 source/lib/cmdline/credentials.h
-source/lib/ldb/samba/ldif_handlers.h
+source/lib/ldb/samba/ldif_handlers_proto.h
 source/lib/registry/regf.h
 source/lib/registry/tdr_regf.c
 source/lib/registry/tdr_regf.h
diff --git a/source/dsdb/samdb/ldb_modules/schema_fsmo.c 
b/source/dsdb/samdb/ldb_modules/schema_fsmo.c
index 706b7b1..968b19c 100644
--- a/source/dsdb/samdb/ldb_modules/schema_fsmo.c
+++ b/source/dsdb/samdb/ldb_modules/schema_fsmo.c
@@ -125,6 +125,7 @@ static int schema_fsmo_init(struct ldb_module *module)
   schema_fsmo_init: dsdb_schema load 
failed: %s,
   error_string);
talloc_free(mem_ctx);
+   return ret;
}
 
/* dsdb_set_schema() steal 

[SCM] Samba Shared Repository - branch v4-0-test updated - release-4-0-0alpha5-314-gfc6b4f0

2008-08-18 Thread Andrew Bartlett
The branch, v4-0-test has been updated
   via  fc6b4f03ebba015a13a6ab93221b0bc3ef8ef2ed (commit)
   via  08257c6d6ce809fcd53f9b2b4d558fef616b74ce (commit)
   via  6ed0b3f2475022288f636605492ca27fde97cd52 (commit)
  from  27d07df301d60e49d36efd003f2fd2305c83c3fe (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test


- Log -
commit fc6b4f03ebba015a13a6ab93221b0bc3ef8ef2ed
Merge: 08257c6d6ce809fcd53f9b2b4d558fef616b74ce 
27d07df301d60e49d36efd003f2fd2305c83c3fe
Author: Andrew Bartlett [EMAIL PROTECTED]
Date:   Tue Aug 19 14:11:51 2008 +1000

Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 
4-0-abartlet

commit 08257c6d6ce809fcd53f9b2b4d558fef616b74ce
Author: Andrew Bartlett [EMAIL PROTECTED]
Date:   Tue Aug 19 14:10:14 2008 +1000

Fix up new OpenLDAP MMR code.

This changes the MMR password from hard-coded value of 'linux',
adds tests and fixes the Fedora DS backend.

Currently the MMR password matches the admin password, but we can
change this to be another random value if required.

Also require the port to be specified on the command line, so we don't
hard-code a port of 9000.

Andrew Bartlett

commit 6ed0b3f2475022288f636605492ca27fde97cd52
Author: Oliver Liebel [EMAIL PROTECTED]
Date:   Tue Aug 19 12:03:04 2008 +1000

Generate Multi-Master Replication configuration for OpenLDAP

This patches provision-backend and the related scripts to generate the
correct configuration blobs for N-way multi-master replication using
OpenLDAP.

Signed-off-by: Andrew Bartlett [EMAIL PROTECTED]

---

Summary of changes:
 source/scripting/python/samba/provision.py   |   69 --
 source/setup/mmr_serverids.conf  |2 +
 source/setup/mmr_syncrepl.conf   |   12 
 source/setup/provision-backend   |7 ++-
 source/setup/slapd.conf  |   36 ++-
 source/setup/tests/blackbox_provision-backend.sh |1 +
 6 files changed, 116 insertions(+), 11 deletions(-)
 create mode 100644 source/setup/mmr_serverids.conf
 create mode 100644 source/setup/mmr_syncrepl.conf


Changeset truncated at 500 lines:

diff --git a/source/scripting/python/samba/provision.py 
b/source/scripting/python/samba/provision.py
index 836509a..0855efe 100644
--- a/source/scripting/python/samba/provision.py
+++ b/source/scripting/python/samba/provision.py
@@ -76,7 +76,9 @@ class ProvisionPaths(object):
 self.memberofconf = None
 self.fedoradsinf = None
 self.fedoradspartitions = None
- 
+   self.olmmron = None
+   self.olmmrserveridsconf = None
+   self.olmmrsyncreplconf = None
 
 class ProvisionNames(object):
 def __init__(self):
@@ -241,9 +243,13 @@ def provision_paths_from_lp(lp, dnsdomain):
 paths.memberofconf = os.path.join(paths.ldapdir, 
   memberof.conf)
 paths.fedoradsinf = os.path.join(paths.ldapdir, 
-   fedorads.inf)
+ fedorads.inf)
 paths.fedoradspartitions = os.path.join(paths.ldapdir, 
 fedorads-partitions.ldif)
+paths.olmmrserveridsconf = os.path.join(paths.ldapdir, 
+mmr_serverids.conf)
+paths.olmmrsyncreplconf = os.path.join(paths.ldapdir, 
+   mmr_syncrepl.conf)
 paths.hklm = hklm.ldb
 paths.hkcr = hkcr.ldb
 paths.hkcu = hkcu.ldb
@@ -331,7 +337,7 @@ def guess_names(lp=None, hostname=None, domain=None, 
dnsdomain=None, serverrole=
 names.hostname = hostname
 names.sitename = sitename
 names.serverdn = CN=%s,CN=Servers,CN=%s,CN=Sites,%s % (netbiosname, 
sitename, configdn)
-
+ 
 return names
 
 
@@ -1151,7 +1157,8 @@ def provision_backend(setup_dir=None, message=None,
   smbconf=None, targetdir=None, realm=None, 
   rootdn=None, domaindn=None, schemadn=None, configdn=None,
   domain=None, hostname=None, adminpass=None, root=None, 
serverrole=None, 
-  ldap_backend_type=None, ldap_backend_port=None):
+  ldap_backend_type=None, ldap_backend_port=None,
+ ol_mmr_urls=None):
 
 def setup_path(file):
 return os.path.join(setup_dir, file)
@@ -1265,7 +1272,51 @@ def provision_backend(setup_dir=None, message=None,
 
 refint_config = read_and_sub_file(setup_path(refint.conf),
 { LINK_ATTRS : 
refint_attributes})
-
+
+# generate serverids, ldap-urls and syncrepl-blocks for mmr hosts
+   mmr_on_config = 
+   mmr_serverids_config = 
+mmr_syncrepl_schema_config =  
+