Re: [Samba] winbind and group permissions

2011-01-04 Thread Gaiseric Vandal
In my environment, I also support NFS services so keeping uid/gid's consistent 
between machines for both unix/nfs and samba/winbind users is key.   If a 
windows user jsmith connected to a samba server, unix permissions for 
jsmith were enforced  appropriately (samba would match up the name), and I 
could manage permissions with unix tools.  However, if I tried settings 
permissions via windows, samba would try to set permissions for the Windows 
jsmith you would have a UID from the winbind range and not the correct unix 
uid.Windows jsmith and unix jsmith were not treated as the same user.  
Obviously not an issue for you.


Initially my samba PDC was 3.0.x   I used winbind to support domain trust with 
a Windows 2003 PDC-based domain.I eventually switched to an LDAP backend 
for winbind to keep allocations consistent across all samba servers (DC's and 
member servers.)   Even with LDAP backend, there is some local caching in TBD 
files.   And tdbdump is a useful tool to diagnose the process.  What I found 
was that wbinfo -u and wbinfo -g would work, and when I ran getent passwd 
and getent group both the idmap table (in ldap in my case, prob winbind_idmap 
tdb file in your case) would get populated and a local idmap cache file would 
also get populated.   However, this seemd to be a one time thing.  Once the 
cache timeout expired, the local cache would not be repopulated.  I would have 
to delete the idmap entries in ldap and the appropriate tdb files.

When I upgraded to samba 3.4.x, the cache timeout issue went away.  However, 
what I found was that NEW idmap entries would not be created.   Since user list 
in the trusted domain almost never changes this didn't really matter-  if I 
added an account in the trusted domain I could manually use my ldap editor to 
add the corresponding idmap entry in ldap.   (A lot easier than editing and TBD 
file.) 

If you look at the man page for wbinfo, you will see there is an option to 
allocate uid's and gid's, and to manually set a uid-to-sid or gid-to-sid 
mapping. You may want to manually try creating a gid-to-sid mapping for one 
group and seeing if that group shows up in getent group.  It is not really a 
solution but it may provide some additional insight.




-Original Message-
From: Bob Miller [mailto:b...@computerisms.ca] 
Sent: Monday, January 03, 2011 10:51 PM
To: gaiseric.van...@gmail.com
Cc: samba@lists.samba.org
Subject: Re: [Samba] winbind and group permissions

Gaiseric,
thank you sooo much for the reply
I will make comments inline:

On Mon, 2011-01-03 at 20:06 -0500, Gaiseric Vandal wrote:
 Winbind is used for allowing unix things like file system access, getent
 passwd and getent group to handle windows users (windows users and groups
 get unix uid's and gid's allocated.)

To say this another way; getent maps users/groups and their respective
uids/gids/sids, winbind is what determines if those uids/gids have
permission to do what is being requested?

 I don't use winbind to login to a
 unix system as a windows user but I do use it to allow the unix file system
 on a samba server to handle file perms for windows users.  Winbind would
 have nothing to do with subnet issues.

So wbinfo commands are not affected by working across a vpn...

 WINS (Windows Internet Naming Service, or something like that) is really
 useful for having a windows client (e.g. an  XP machine) find a Windows
 server (a Samba server or a real Windows server)-   this is really useful
 when subnet issues are involved, and actually a WINS server should be a
 standard item even on a local network.

Understood and agreed, I always enable wins server even on the simplest
samba installs.

 Depending on your VPN, your
 remote client may have a virtual NIC on the office LAN.   

The VPN is an openswan site-to-site tunnel.  I have just spent the last
hour or two checking, double-checking, re-double-checking,
triple-checking, and re-triple-checking that everything is in order.
All traffic from several different protocols are travelling in both
directions without restriction.  I never say never with networks and
computers, but I am quite certain this is not the problem.

 The big problem I found with Samba member servers and winbind was that the
 Windows user on a member server might have a unix uid or gid that is not
 consistent with the PDC or other member servers.   But this doesn't seem to
 be your problem. 

As I understand it, having a map be consistent across multiple samba
servers is required in the case of BDCs and PDCs, where a BDC may be
required to authorize a user on behalf of the PDC.  In that case, the
BDC must have the same info as the PDC else a user may end up with
different access to different files depending on which member server it
connects too.  I also understand it to be that using ldap will nicely
work around this problem.  
In my case, there is only one PDC, and my member server is purely a
client that is not going to share 

Re: [Samba] Samba crashes floods logfiles: smbd/notify_inotify.c:244(inotify_handler) - No data on inotify fd?!

2011-01-04 Thread Tom H. Lautenbacher

Hello Andrew,

thank you for your time, too!!


3. Did I do anything wrong, or is this a problem with the standard
kernel included in openSUSE 11.2? Is there anything I can do about it?


This problem has been around for several years on RHEL as well - I
suspect it is a kernel-samba issue.


How come this affects only some users and not all?


http://forum.soft32.com/linux/Samba-Samba-logs-fill-disk-inotify-errors-
smbd-100-CPU-ftopict479508.html

Every box I build now has that setting turned on.  I occasionally turn
it off to see if there are still issues, and every time it comes back -
so it's still an issue AFAIK.


Andrew, Volker Lendecke answered to my problem in this thread, too, but 
with a different solution.
Which one should I prefer by your opinion in terms of the most solid 
server configuration possible?


Thank you for your time!!
Best regards
Tom
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba crashes floods logfiles: smbd/notify_inotify.c:244(inotify_handler) - No data on inotify fd?!

2011-01-04 Thread Tom H. Lautenbacher

Hello Volker!

Thank you very much for your time that you spent to help me!


1a). Is it correct that kernel change notify is a per share
setting and not in the [global] section, so that I will have to put

It's a global setting, putting it into [global] once is
enough.


Ok!



2. Is it correct that if I do insert kernel change notify = No to
my shares, that I won't be able to see changes in the folders from
my Windows Clients, but I will have to manually trigger a refresh
(F5) each time I want to see if changes have occured? E.g. if many
users save files to a share, I won't see those new files until I
trigger a refresh manually? Or is it only concerning the changes
that a linux-process might have performed, e.g. a cronjob that
copied a file into a share?


It's the latter. If other cifs clients change something,
it should still work.


I see.


3. Did I do anything wrong, or is this a problem with the standard
kernel included in openSUSE 11.2? Is there anything I can do about
it?


Not sure here. Very likely not your fault, but I would need
to see a box where this happens myself to be 100% sure.


Is this a common problem? I mean: why do I suffer from this and others not?

Volker, Andrew Masterson answered in this thread, that he has the same 
problem, as me and that he places notify:inotify = false in [global] 
to avoid the spamming in /var/log/messages.


If I understand correctly, with your solution I turn the problem off, 
but suffer from some compromise in functionality, while in Andrew's 
solution I actually do not turn the problem off, but just do not log it 
anymore.
What solution should I prefer by your opinion, in terms of a rocksolid 
server configuration?


Thank you for your help!
Best regards
Tom
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba crashes floods logfiles: smbd/notify_inotify.c:244(inotify_handler) - No data on inotify fd?!

2011-01-04 Thread Volker Lendecke
On Tue, Jan 04, 2011 at 02:56:27PM +0200, Tom H. Lautenbacher wrote:
 Hello Andrew,
 
 thank you for your time, too!!
 
 3. Did I do anything wrong, or is this a problem with the standard
 kernel included in openSUSE 11.2? Is there anything I can do about it?
 
 This problem has been around for several years on RHEL as well - I
 suspect it is a kernel-samba issue.
 
 How come this affects only some users and not all?
 
 http://forum.soft32.com/linux/Samba-Samba-logs-fill-disk-inotify-errors-
 smbd-100-CPU-ftopict479508.html
 
 Every box I build now has that setting turned on.  I occasionally turn
 it off to see if there are still issues, and every time it comes back -
 so it's still an issue AFAIK.
 
 Andrew, Volker Lendecke answered to my problem in this thread, too,
 but with a different solution.
 Which one should I prefer by your opinion in terms of the most solid
 server configuration possible?

Both kernel change notify = no and notify:inotify=false
are equivalent. They both disable the use of inotify.

With best regards,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba crashes floods logfiles: smbd/notify_inotify.c:244(inotify_handler) - No data on inotify fd?!

2011-01-04 Thread Volker Lendecke
On Tue, Jan 04, 2011 at 03:00:28PM +0200, Tom H. Lautenbacher wrote:
 If I understand correctly, with your solution I turn the problem
 off, but suffer from some compromise in functionality, while in
 Andrew's solution I actually do not turn the problem off, but just
 do not log it anymore.

notify:inotify=false also disables the functionality.

 What solution should I prefer by your opinion, in terms of a
 rocksolid server configuration?

Either.

With best regards,

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] %N 3.0.28 on centos/rhel 4.7 (wanting to split up the profile shares to multiple servers)

2011-01-04 Thread TAKAHASHI Motonobu
What version of Samba do you use?

What passdb (such as smbpasswd, tdbsam, ldapsam, ...) do you use?

Indeed %N is effective only in old passdb such as smbpasswd or ldapsam_compat.

2011/1/4 Jason Pyeron jpye...@pdinc.us:
 I am having a hard time finding documentation on the %N construct.

 I have /etc/auto.master loading /etc/auto.smb and in /etc/auto.smb it reads
 username        -fstype-smb,username=accountant ://otherhost/username

 In the log file I get:

 '/home/username' does not exist or ... Error was No such file or directory


 I am trying to move certain users' profiles to another server for load
 distribution. I am I going about this wrong or where do I get more information
 on making %N work for me.

 -Jason
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba 3.5.6 and AIO on Linux

2011-01-04 Thread Volker Lendecke
On Mon, Jan 03, 2011 at 11:13:32AM +0200, Ofer H wrote:
 I have been trying to enable AIO on ARMv5 Samba built with kernel headers
 2.6.31.8, the configure indicated that AIO is supported via kernel headers
 and all went smooth (regarding the build process).
 
 Once I added the smb.conf 'aio write size=1' and tried to perform a file
 copy to the Samba share I noticed that 32K of the file (of the 1GB file)
 have been copied to the share but the file copy stalled and did not finish.
 I had to restart Samba to see that share since it was stuck, I have
 experienced the same fenomenon with XPsp2 and W7 clients.
 
 I also noticed that the Samba daemon that was forked as root (not as nobody
 as it usually does) and stayed blocked on some FUTEX taken.
 
 Can anyone confirm that AIO actually works on Linux, I have seen xBSD
 related mail claiming that it does work and brings nice performance
 improvement.

Yes, I've used that many times. To be honest, this smells
like a problem in glibc on your system. You might want to
try

vfs objects = aio_fork

With best regards,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba crashes floods logfiles: smbd/notify_inotify.c:244(inotify_handler) - No data on inotify fd?!

2011-01-04 Thread Tom H. Lautenbacher

notify:inotify=false also disables the functionality.


What solution should I prefer by your opinion, in terms of a
rocksolid server configuration?


Either.


Ok!

Thank you very much, Volker!

Best regards from Greece
Tom
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] authentication using both ADS and smbpasswd

2011-01-04 Thread TAKAHASHI Motonobu
2011/1/4 Smith, Cathy cathy.sm...@pnl.gov:
 My Samba configuration uses ADS for user authentication.  I have a request to 
 grant users access who are not members of ADS.  Is it possible to set up both 
 smbpasswd and ADS authentication?

If you specify a user like Samba-Server\User style, then the user will
be authenticated
by the Samba server itself.

After Samba 3.4.0, if you specify a user like (simple) User style,
the user will be authenticated by Samba server itself.

Before Samba 3.3.X,

auth methods = guest sam winbind:ntdomain sam_ignoredomain

or

auth method = guest sam_ignoredomain winbind:ntdomain

may help you.

Former means that
 1st Guest authentication works.
 2nd the user is specified with Samba-Server\User style, then he is
authenticated
  by Samba Server,
  3rd the user is authenticated by Windows domain as DOMAIN\User,
regardless of the user's domain part.
  4th the user is authenticated by Samba Server as Samba-Server\User,
regardless of the user's domain part.

---
TAKAHASHI Motonobu mo...@samba.gr.jp
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Killed HP LJ4000 envelope feeder upgrading Ubuntu 9.04 -- 10.04 LTS

2011-01-04 Thread Michael Lueck

Greetings,

Already when the server was on Ubuntu 9.04, my Ubuntu workstation was having difficulties printing to the printer via a Samba connection. For example, Mozilla Thunderbird could print, but Firefox 
print jobs got lost to lala land. I found how to do a direct CUPS on the workstation to CUPS on the server connection, and that cleared all of the trouble up.


So I thought to see if I could to the same from Windows XP. Turns out MS calls that Internet Printing. So after the sample of my printer connection form my Linux machine, I made three connection to 
the CUPS queues, used the same drivers I recently re-published to Samba, and the Envelope Feeder again works properly.


This is very disappointing that, well I have been working with Samba since 
3.0.2 and printing works better in that ancient version than current versions.

I would think that Samba merely acts as a Spooler for Windows clients. 
Obviously not!

At least we have a cumbersome work-around to be able to get work done.

Sincerely,

--
Michael Lueck
Lueck Data Systems
http://www.lueckdatasystems.com/

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba 3.5.6 and AIO on Linux

2011-01-04 Thread TAKAHASHI Motonobu
2011/1/4 Volker Lendecke volker.lende...@sernet.de:
 Can anyone confirm that AIO actually works on Linux, I have seen xBSD
 related mail claiming that it does work and brings nice performance
 improvement.

 Yes, I've used that many times. To be honest, this smells
 like a problem in glibc on your system. You might want to
 try

 vfs objects = aio_fork

 With best regards,

 Volker Lendecke

Is there any documents mentioned about aio_fork?

As far as I looked at the source, enabling aio_fork, aio will execute in forked
processes simultaneously? And is it on the production level?

---
TAKAHASHI Motonobu mo...@samba.gr.jp
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Killed HP LJ4000 envelope feeder upgrading Ubuntu 9.04 -- 10.04 LTS

2011-01-04 Thread Michael Lueck

Michael Lueck wrote:

So I thought to see if I could to the same from Windows XP. Turns out MS calls that 
Internet Printing...


And I have taken the time to blog this solution here:

HOW-TO: Connect Windows to a CUPS Network Printer
http://www.lueckdatasystems.com/HOW-TO_Connect_Windows_to_a_CUPS_Network_Printer

--
Michael Lueck
Lueck Data Systems
http://www.lueckdatasystems.com/

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba 3.5.6 and AIO on Linux

2011-01-04 Thread Volker Lendecke
On Tue, Jan 04, 2011 at 11:02:46PM +0900, TAKAHASHI Motonobu wrote:
 2011/1/4 Volker Lendecke volker.lende...@sernet.de:
  Can anyone confirm that AIO actually works on Linux, I have seen xBSD
  related mail claiming that it does work and brings nice performance
  improvement.
 
  Yes, I've used that many times. To be honest, this smells
  like a problem in glibc on your system. You might want to
  try
 
  vfs objects = aio_fork
 
  With best regards,
 
  Volker Lendecke
 
 Is there any documents mentioned about aio_fork?

Not sure. Probably not, sorry.

 As far as I looked at the source, enabling aio_fork, aio will execute in 
 forked
 processes simultaneously? And is it on the production level?

It does fork for the async requests, it uses shared memory
for the data transfer and it passes the file descriptors via
a unix domain socket. Production level? Well, I've used it
in some pretty large installations already with no problems
attributed to it. That does not mean it's bug-free though.

With best regards,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Accessing files via symlink, does client see a difference?

2011-01-04 Thread TAKAHASHI Motonobu
Set log level parameter higher (10 is recommended) value and check the logs
whether there are some differences or not both in successed case and
failed case.

2011/1/3 Samba user samba.99.spamm...@spamgourmet.com:
 I have an ancient device, several actually, called an Audiotron that I use
 Samba for to access media files.

 Now, I realize these are old and finicky devices.

 For ease of management, I keep my media files separated into 4.5GB
 directories (easy to burn to DVD) and then
 I have a script that goes into each of those directories and creates one big
 directory full of symlinks pointing into each individual directory.

 I'm sure my configuration is correct (follow symlinks = yes, wide links =
 yes in my services) as modern programs such as WinAmp and VLC have no
 problems accessing the directory full of symlinks (about 2500 links).

 However, the Audiotron has issues.  If I try and play a file, sometimes it
 play, sometimes it won't.  If I try and play it again immediately, sometimes
 it will go, sometimes I'll have to select play several times before it'll
 play.

 If I create individual services for each of my media directories and have
 the Audiotron catalog them individually, they all work fine.

 So, my question is, does the client see any difference in accessing a file
 via SAMBA (3.5.6) if it's a symlink vs a real file?  I wouldn't think it
 would be able to, but the Audiotron certainly doesn't like them very well,
 yet Winamp has no issues.

 Thanks for any thoughts.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] winbind and group permissions

2011-01-04 Thread Michael Wood
On 4 January 2011 05:50, Bob Miller b...@computerisms.ca wrote:
 Gaiseric,
 thank you sooo much for the reply
 I will make comments inline:

 On Mon, 2011-01-03 at 20:06 -0500, Gaiseric Vandal wrote:
 Winbind is used for allowing unix things like file system access, getent
 passwd and getent group to handle windows users (windows users and groups
 get unix uid's and gid's allocated.)

 To say this another way; getent maps users/groups and their respective
 uids/gids/sids, winbind is what determines if those uids/gids have
 permission to do what is being requested?

That is not how I understand it at all.

getent passwd and getent group are basically front-ends to winbind
(when you have winbind specified in your nsswitch.conf.)  So winbind
does the talking to a Windows (or Samba) server and maps the uids/gids
to/from sids.

i.e. winbind maps uids/gids to/from sids/names.  getent passwd/group
maps between uids/gids and names (via winbind).

It's the local filesystem permissions/acls or your smb.conf that
determine whether a particular user/group has access to something.

I have never used winbind, but that's basically my understanding of it.

     I don't use winbind to login to a
 unix system as a windows user but I do use it to allow the unix file system
 on a samba server to handle file perms for windows users.  Winbind would
 have nothing to do with subnet issues.

 So wbinfo commands are not affected by working across a vpn...

I suppose if winbind can talk to the Windows (or Samba) server where
it gets its information, it should not matter if that server is on the
other end of a VPN link.

-- 
Michael Wood esiot...@gmail.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Pdbedit problem

2011-01-04 Thread Chris Smith
On Tue, Jan 4, 2011 at 9:30 AM, Michel, Loubert
lmic...@astoriafederal.com wrote:
 I think I am using passdb backend = smbpasswd.
 How do I change it to passdb backend = tdbsam in Solaris10?
 I am unable to find the passdb command even whithin Samba.

See the official docs:
http://samba.org/samba/docs/man/Samba-HOWTO-Collection/passdb.html#acctmgmttools
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Pdbedit problem

2011-01-04 Thread Gaiseric Vandal

testparm -v should show you the backend in use.

The pdbedit command has options for exporting and importing between formats.

On 01/04/2011 10:50 AM, Chris Smith wrote:

On Tue, Jan 4, 2011 at 9:30 AM, Michel, Loubert
lmic...@astoriafederal.com  wrote:
   

I think I am using passdb backend = smbpasswd.
How do I change it to passdb backend = tdbsam in Solaris10?
I am unable to find the passdb command even whithin Samba.
 

See the official docs:
http://samba.org/samba/docs/man/Samba-HOWTO-Collection/passdb.html#acctmgmttools
   


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] winbind and group permissions

2011-01-04 Thread Gaiseric Vandal

That sounds like a pretty good description of winbind and nsswitch.

The tricky party, depending on your configuration, is that one real 
user can end up with two uid's-  one from the unix account (e.g. 
/etc/passwd, nis or ldap) and one from winbind.Your DC's should not 
be using winbind for the local samba domain if the users already have 
unix accounts that are also being used for things like nfs or ssh.






On 01/04/2011 09:45 AM, Michael Wood wrote:

On 4 January 2011 05:50, Bob Millerb...@computerisms.ca  wrote:
   

Gaiseric,
thank you sooo much for the reply
I will make comments inline:

On Mon, 2011-01-03 at 20:06 -0500, Gaiseric Vandal wrote:
 

Winbind is used for allowing unix things like file system access, getent
passwd and getent group to handle windows users (windows users and groups
get unix uid's and gid's allocated.)
   

To say this another way; getent maps users/groups and their respective
uids/gids/sids, winbind is what determines if those uids/gids have
permission to do what is being requested?
 

That is not how I understand it at all.

getent passwd and getent group are basically front-ends to winbind
(when you have winbind specified in your nsswitch.conf.)  So winbind
does the talking to a Windows (or Samba) server and maps the uids/gids
to/from sids.

i.e. winbind maps uids/gids to/from sids/names.  getent passwd/group
maps between uids/gids and names (via winbind).

It's the local filesystem permissions/acls or your smb.conf that
determine whether a particular user/group has access to something.

I have never used winbind, but that's basically my understanding of it.

   

 I don't use winbind to login to a
unix system as a windows user but I do use it to allow the unix file system
on a samba server to handle file perms for windows users.  Winbind would
have nothing to do with subnet issues.
   

So wbinfo commands are not affected by working across a vpn...
 

I suppose if winbind can talk to the Windows (or Samba) server where
it gets its information, it should not matter if that server is on the
other end of a VPN link.

   


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] problem connecting DFS-share with winXP - successful with Vista 7

2011-01-04 Thread David Merhar

Anyone?

I am seeing the same behavior - DFS shares visible in Vista and 7, but  
not XP - though I have not spotted the same detail at session setup.


No problem with XP until recently when we applied a domain wide group  
policy update and latest windows updates.  Can't go backwards on the  
policy.


samba-3.5.4
security = ads

Thanks.

djm



On Dec 20, 2010, at 4:19 AM, Steffen Frömer wrote:



Hi,

i have problems connecting to DFS-Share from Client WindowsXP. Same  
configuration works fine for Windows Vista and 7. On Windows 7 the  
LMCompatibility Level is 3.


the striking point I see in logfile is following

2010/12/20 10:30:17,  1] smbd/service.c:make_connection_snum(1119)
 10.184.144.171 (10.184.144.171) signed connect to service applbin  
initially as user useracc (uid=45110, gid=45110) (pid 20312)

[2010/12/20 10:30:17,  3] smbd/sec_ctx.c:set_sec_ctx(324)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/12/20 10:30:17,  2] smbd/reply.c:reply_tcon_and_X(789)
 Serving applbin as a Dfs root
[2010/12/20 10:30:17,  3] smbd/reply.c:reply_tcon_and_X(794)
 tconX service=APPLBIN
[2010/12/20 10:30:17,  3] smbd/process.c:process_smb(1576)
 Transaction 3 of length 1404 (0 toread)
[2010/12/20 10:30:17,  3] smbd/process.c:switch_message(1393)
 switch message SMBsesssetupX (pid 20312) conn 0x0
[2010/12/20 10:30:17,  3] smbd/sec_ctx.c:set_sec_ctx(324)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/12/20 10:30:17,  3] smbd/sesssetup.c:reply_sesssetup_and_X(1412)
 wct=12 flg2=0xc807
[2010/12/20 10:30:17,  3] smbd/ 
sesssetup.c:reply_sesssetup_and_X_spnego(1175)

 Doing spnego session setup
[2010/12/20 10:30:17,  3] smbd/ 
sesssetup.c:reply_sesssetup_and_X_spnego(1210)
 NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows  
2002 5.1] PrimaryDomain=[]

[2010/12/20 10:30:17,  3] smbd/sesssetup.c:reply_spnego_negotiate(802)
 reply_spnego_negotiate: Got secblob of size 1172
[2010/12/20 10:30:17,  3] libads/authdata.c:decode_pac_data(301)
 Found account name from PAC: CLIENTXP$ []
[2010/12/20 10:30:17,  3] smbd/sesssetup.c:reply_spnego_kerberos(356)
 Ticket name is [client...@domain.local]
[2010/12/20 10:30:17,  1] smbd/sesssetup.c:reply_spnego_kerberos(474)
 Username DOMAIN00\CLIENTXP$ is invalid on this system
[2010/12/20 10:30:17,  3] smbd/error.c:error_packet_set(61)
 error packet at smbd/sesssetup.c(480) cmd=115 (SMBsesssetupX)  
NT_STATUS_LOGON_FAILURE



On Windows Vista the Same Section in logfile shows different account- 
name:


 Doing spnego session setup
[2010/12/20 09:12:29,  3] smbd/ 
sesssetup.c:reply_sesssetup_and_X_spnego(1210)

 NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2010/12/20 09:12:29,  3] smbd/sesssetup.c:reply_spnego_negotiate(802)
 reply_spnego_negotiate: Got secblob of size 6566
[2010/12/20 09:12:29,  3] libads/authdata.c:decode_pac_data(301)
 Found account name from PAC: USERACC [Nachname, Vorname]
[2010/12/20 09:12:29,  3] smbd/sesssetup.c:reply_spnego_kerberos(356)
 Ticket name is [user...@domain.local]


The difference i see, is that on windows XP the system don't take  
the username of connecting account, although it is grabbed in start  
of session-log.


[2010/12/20 10:30:17,  3] libads/authdata.c:decode_pac_data(301)
 Found account name from PAC: USERACC [Nachname, Vorname]
[2010/12/20 10:30:17,  3] smbd/sesssetup.c:reply_spnego_kerberos(356)
 Ticket name is [efro...@domain.local]

Has someone an idea, how i can fix this problem.
This problem only occurs, if i connect via DFS Master. If i connect  
directly to the Share, all is successful.




[complete Logfile]: http://paste.ubuntu.com/545870/
[config DFS-master]: http://paste.ubuntu.com/545874/
[config client]: http://paste.ubuntu.com/545873/


Regards,
Steffen
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] cant login with my samba password only with my linux password

2011-01-04 Thread Hartmut
On Sat, Dec 25, 2010 at 5:32 PM, Hartmut freeml...@googlemail.com wrote:
 Hello,

 I have a strange problem with my samba server. When I try to connect
 with my (Windows)client and samba ask for the password, it's only
 accepting my linux-user password, not my samba-user password (set with
 smbpasswd and as root with smbpasswd user).

 And now the strange about it. When i change my sambapassword with
 smbpasswd, and try to login from my client, then the samba-user password
 is accepted. But after a reboot of my samba server, the server accepts
 only the linux-user password. I have to (re)set the samba-user password
 again with smbpasswd and only after that, I can login with the
 samba-user password.

 Is there something wrong with my smb.conf (see below)? Or what else
 could be the problem?


 -
 smb.conf:
 [global]
 #       debuglevel = 1
       workgroup = Gruppe
       server string = Datastring
       wins support = no
       dns proxy = no

       interfaces = 192.168.1.0/24 127.0.0.1/8
       bind interfaces only = yes

       log file = /var/log/samba/log.%m
       max log size = 1000
       syslog = 0
       security = user
       encrypt passwords = true
       passdb backend = tdbsam
       obey pam restrictions = yes
       unix password sync = no
       pam password change = no
       map to guest = bad user
       domain logons = no
       load printers = no
       domain master = no
       usershare allow guests = no

       vfs objects = recycle
       recycle: repository = .trash.bin
       recycle: keeptree = Yes
       recycle:versions = Yes

 [lager]
       comment = Lager
       path = /media/lager_hdd
       public = no
       valid users = user1
       read only = no
       browseable = no
 -

 Greetings
 Hartmut


The problem still exist. Has no one a clue?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] What PAM service is used when compiled --with-pam ?

2011-01-04 Thread Jeff Blaine

What PAM 'service' is used when using --with-pam?  For example, sshd
with PAM support uses the 'sshd' PAM service/configuration in /etc/
pam.d/sshd (Linux).

I can't find mention of it anywhere.

Thanks
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] cant login with my samba password only with my linux password

2011-01-04 Thread Gaiseric Vandal

After you change the samba password for the 2nd time, does it stick?

When you change the password, does the  /etc/samba/smbpasswd change?

I can't imagine it matters, but why are you using passwd: compat 
instead of passwd: files  in nsswitch.conf ?


What happens if you run smbpasswd as root to change a user's password?




On 12/27/2010 12:30 PM, Hartmut wrote:

On Mon, Dec 27, 2010 at 2:16 AM, Gaiseric Vandal
gaiseric.van...@gmail.com  wrote:
   

I can't see any way that, with your configuration, samba could be
using your linux password as a samba password.  You would have to be
using plain text passwords in windows have samba authenticate it
against your linux password.Is it really using your linux
password, or at some point was your samba password the same as your
linux password?
 

The samba and linux passwords was always different.

   

Or did you configure pam or nsswitch.conf to have linux authenticate
against windows passwords?
 

No. I use ubuntu 10.10 and the default configuration. See below my
nsswitch.conf, but i think it's the default and does not matter.


   

Did you try running testparm -v in case there are some parameters
with unexpected defaults?
 

Did this, see output below. But i can't find a wrong or unexpected paramter.

   

Did you try disabling obey pam restrictions?  Maybe that is
preventing the password change?
 

Yes, i tried this. The same result :(


   

On Sat, Dec 25, 2010 at 11:32 AM, Hartmutfreeml...@googlemail.com  wrote:
 

Hello,

I have a strange problem with my samba server. When I try to connect
with my (Windows)client and samba ask for the password, it's only
accepting my linux-user password, not my samba-user password (set with
smbpasswd and as root with smbpasswduser).

And now the strange about it. When i change my sambapassword with
smbpasswd, and try to login from my client, then the samba-user password
is accepted. But after a reboot of my samba server, the server accepts
only the linux-user password. I have to (re)set the samba-user password
again with smbpasswd and only after that, I can login with the
samba-user password.

Is there something wrong with my smb.conf (see below)? Or what else
could be the problem?


-
smb.conf:
[global]
#   debuglevel = 1
   workgroup = Gruppe
   server string = Datastring
   wins support = no
   dns proxy = no

   interfaces = 192.168.1.0/24 127.0.0.1/8
   bind interfaces only = yes

   log file = /var/log/samba/log.%m
   max log size = 1000
   syslog = 0
   security = user
   encrypt passwords = true
   passdb backend = tdbsam
   obey pam restrictions = yes
   unix password sync = no
   pam password change = no
   map to guest = bad user
   domain logons = no
   load printers = no
   domain master = no
   usershare allow guests = no

   vfs objects = recycle
   recycle: repository = .trash.bin
   recycle: keeptree = Yes
   recycle:versions = Yes

[lager]
   comment = Lager
   path = /media/lager_hdd
   public = no
   valid users = user1
   read only = no
   browseable = no
-

Greetings
Hartmut
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

   

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

 


--
Load smb config files from /etc/samba/smb.conf
rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
Processing section [lager]
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions
[global]
 dos charset = CP850
 unix charset = UTF-8
 display charset = LOCALE
 workgroup = Gruppe
 realm =
 netbios name = SERVER1
 netbios aliases =
 netbios scope =
 server string = Datastring
 interfaces = 192.168.1.0/24, 127.0.0.1/8
 bind interfaces only = Yes
 security = USER
 auth methods =
 encrypt passwords = Yes
 update encrypted = No
 client schannel = Auto
 server schannel = Auto
 allow trusted domains = Yes
 map to guest = Bad User
 null passwords = No
 obey pam restrictions = Yes
 password server = *
 smb passwd file = /etc/samba/smbpasswd
 private dir = /etc/samba
 passdb backend = tdbsam
 algorithmic rid base = 1000
 root directory =
 guest account = nobody
 enable privileges = Yes
 pam password change = No
 passwd program =
 passwd chat = *new*password* %n\n *new*password* %n\n *changed*
 passwd chat debug = No
 passwd chat timeout = 2
 check password script =
 username map =
 password level = 0
 

[Samba] Samba 3.5.6 with Win7 failure (XP works)

2011-01-04 Thread Jeff Blaine

Hi all,

We're testing 3.5.6 as an upgrade to our old 3.0.x instance.

Our XP boxes can see our Samba 3.5.6 shares fine.

Our Win7 boxes cannot.

   The specified network name is no longer available.

Relevant config portion is as follows:

   log level = 20
   workgroup = OURCOMP
   security = ads
   encrypt passwords = yes
   realm = OURCOMP.ORG
   password server = DC1.OURCOMP.ORG
   client signing = mandatory

I've also tried client signing = auto to no avail.

Thanks for ANY advice!
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.5.6 with Win7 failure (XP works)

2011-01-04 Thread Gaiseric Vandal

this may be of help

http://wiki.samba.org/index.php/Windows7



On 01/04/2011 04:32 PM, Jeff Blaine wrote:

Hi all,

We're testing 3.5.6 as an upgrade to our old 3.0.x instance.

Our XP boxes can see our Samba 3.5.6 shares fine.

Our Win7 boxes cannot.

   The specified network name is no longer available.

Relevant config portion is as follows:

   log level = 20
   workgroup = OURCOMP
   security = ads
   encrypt passwords = yes
   realm = OURCOMP.ORG
   password server = DC1.OURCOMP.ORG
   client signing = mandatory

I've also tried client signing = auto to no avail.

Thanks for ANY advice!


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] cant login with my samba password only with my linux password

2011-01-04 Thread Daniel Müller
What about, 
unix password sync = yes instead of no
Did you try smbclient?
On some OS you need:
obey pam restrictions = no!?
How did you add your users?
First linux? Then samba?
did you: smbpasswd user -e

Good luck

Daniel
On Tue, 4 Jan 2011 21:16:08 +0100, Hartmut freeml...@googlemail.com
wrote:
 On Sat, Dec 25, 2010 at 5:32 PM, Hartmut freeml...@googlemail.com
wrote:
 Hello,

 I have a strange problem with my samba server. When I try to connect
 with my (Windows)client and samba ask for the password, it's only
 accepting my linux-user password, not my samba-user password (set with
 smbpasswd and as root with smbpasswd user).

 And now the strange about it. When i change my sambapassword with
 smbpasswd, and try to login from my client, then the samba-user
password
 is accepted. But after a reboot of my samba server, the server accepts
 only the linux-user password. I have to (re)set the samba-user password
 again with smbpasswd and only after that, I can login with the
 samba-user password.

 Is there something wrong with my smb.conf (see below)? Or what else
 could be the problem?


 -
 smb.conf:
 [global]
 #       debuglevel = 1
       workgroup = Gruppe
       server string = Datastring
       wins support = no
       dns proxy = no

       interfaces = 192.168.1.0/24 127.0.0.1/8
       bind interfaces only = yes

       log file = /var/log/samba/log.%m
       max log size = 1000
       syslog = 0
       security = user
       encrypt passwords = true
       passdb backend = tdbsam
       obey pam restrictions = yes
       unix password sync = no
       pam password change = no
       map to guest = bad user
       domain logons = no
       load printers = no
       domain master = no
       usershare allow guests = no

       vfs objects = recycle
       recycle: repository = .trash.bin
       recycle: keeptree = Yes
       recycle:versions = Yes

 [lager]
       comment = Lager
       path = /media/lager_hdd
       public = no
       valid users = user1
       read only = no
       browseable = no
 -

 Greetings
 Hartmut

 
 The problem still exist. Has no one a clue?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] What PAM service is used when compiled --with-pam ?

2011-01-04 Thread Volker Lendecke
On Tue, Jan 04, 2011 at 03:45:14PM -0500, Jeff Blaine wrote:
 What PAM 'service' is used when using --with-pam?  For example, sshd
 with PAM support uses the 'sshd' PAM service/configuration in /etc/
 pam.d/sshd (Linux).

samba

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.5.6 with Win7 failure (XP works)

2011-01-04 Thread Jeff Blaine

On 1/4/2011 4:35 PM, Gaiseric Vandal wrote:

this may be of help

http://wiki.samba.org/index.php/Windows7


Thanks Gaiseric.  FWIW, I *did* look at the wiki first, but
completely ignored the Developer section where this is
linked from.  IMO, it is not in the right section :)

At any rate, my problem isn't related to joining a Win7
box to a Samba-served domain, as far as I can tell.  I
am having trouble accessing a Samba share from Windows 7.

I tried the recommended registry modifications from the
wiki and rebooted. No luck.

However ...

I can get things to work if I disable Communications Signing
on the win7 box.  This is not acceptable to our corporate
information security folks though.

That at least pinpoints the problem.  Now I just need to get
Samba to accept communications signing from the client.
I don't see that I am doing anything wrong.

client signing = mandatory


On 01/04/2011 04:32 PM, Jeff Blaine wrote:

Hi all,

We're testing 3.5.6 as an upgrade to our old 3.0.x instance.

Our XP boxes can see our Samba 3.5.6 shares fine.

Our Win7 boxes cannot.

The specified network name is no longer available.

Relevant config portion is as follows:

log level = 20
workgroup = OURCOMP
security = ads
encrypt passwords = yes
realm = OURCOMP.ORG
password server = DC1.OURCOMP.ORG
client signing = mandatory

I've also tried client signing = auto to no avail.

Thanks for ANY advice!



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] log level = 20 not showing auth, etc...

2011-01-04 Thread Jeff Blaine

Samba 3.5.6

I must be really misunderstanding 'log level' somehow.  I have
tried all of the following and cannot get my logs to show
anything related to authentication or share accesses at all:

log level = 20

log level = all:20

log lovel = 3 auth:20

If I access one of the server's shares successfully, not a
single thing shows up in the log.  Yes, I am looking at the
right log, and yes other things do get written to the log
from smbd :)

Any help would be very welcome.

Jeff Blaine
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] log level = 20 not showing auth, etc...

2011-01-04 Thread Hoover, Tony
I believe that the max log level is 10 (e.g. you are setting an invalid
value).  Someone will correct me if I'm wrong, I'm sure. 


--
Tony Hoover, Network Administrator
KSU - Salina, College of Technology and Aviation
(785) 826-2660

Don't Blend in...
--
 
-Original Message-
From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
On Behalf Of Jeff Blaine
Sent: Tuesday, January 04, 2011 4:04 PM
To: samba@lists.samba.org
Subject: [Samba] log level = 20 not showing auth, etc...

Samba 3.5.6

I must be really misunderstanding 'log level' somehow.  I have tried all of
the following and cannot get my logs to show anything related to
authentication or share accesses at all:

 log level = 20

 log level = all:20

 log lovel = 3 auth:20

If I access one of the server's shares successfully, not a single thing
shows up in the log.  Yes, I am looking at the right log, and yes other
things do get written to the log from smbd :)

Any help would be very welcome.

Jeff Blaine
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] log level = 20 not showing auth, etc...

2011-01-04 Thread Jeff Blaine

It was worth a try, but I've just changed it to 10 and restarted
the service.  Same thing.  I get the initial daemon startup
messages and then nothing additional while I try the shares from
Windows boxes, use them, etc.

I even tried one of the examples from the man page:

log level = 3 passdb:5 auth:10 winbind:2

On 1/4/2011 5:30 PM, Hoover, Tony wrote:

I believe that the max log level is 10 (e.g. you are setting an invalid
value).  Someone will correct me if I'm wrong, I'm sure.


--
Tony Hoover, Network Administrator
KSU - Salina, College of Technology and Aviation
(785) 826-2660

Don't Blend in...
--

-Original Message-
From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
On Behalf Of Jeff Blaine
Sent: Tuesday, January 04, 2011 4:04 PM
To: samba@lists.samba.org
Subject: [Samba] log level = 20 not showing auth, etc...

Samba 3.5.6

I must be really misunderstanding 'log level' somehow.  I have tried all of
the following and cannot get my logs to show anything related to
authentication or share accesses at all:

  log level = 20

  log level = all:20

  log lovel = 3 auth:20

If I access one of the server's shares successfully, not a single thing
shows up in the log.  Yes, I am looking at the right log, and yes other
things do get written to the log from smbd :)

Any help would be very welcome.

Jeff Blaine
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] log level = 20 not showing auth, etc...

2011-01-04 Thread Volker Lendecke
On Tue, Jan 04, 2011 at 05:42:34PM -0500, Jeff Blaine wrote:
 It was worth a try, but I've just changed it to 10 and restarted
 the service.  Same thing.  I get the initial daemon startup
 messages and then nothing additional while I try the shares from
 Windows boxes, use them, etc.
 
 I even tried one of the examples from the man page:
 
 log level = 3 passdb:5 auth:10 winbind:2

Is it possible that you have

log file = /var/log/samba/log.%m

or something equivalent with a %-macro in you smb.conf? In
that case, the relevant logs will show up in different
files.

With best regards,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] log level = 20 not showing auth, etc...

2011-01-04 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Where are your logs supposed to go?

On 01/04/2011 05:42 PM, Jeff Blaine wrote:
 It was worth a try, but I've just changed it to 10 and restarted
 the service.  Same thing.  I get the initial daemon startup
 messages and then nothing additional while I try the shares from
 Windows boxes, use them, etc.
 
 I even tried one of the examples from the man page:
 
 log level = 3 passdb:5 auth:10 winbind:2
 
 On 1/4/2011 5:30 PM, Hoover, Tony wrote:
 I believe that the max log level is 10 (e.g. you are setting an invalid
 value).  Someone will correct me if I'm wrong, I'm sure.


 --
 Tony Hoover, Network Administrator
 KSU - Salina, College of Technology and Aviation
 (785) 826-2660

 Don't Blend in...
 --

 -Original Message-
 From: samba-boun...@lists.samba.org
 [mailto:samba-boun...@lists.samba.org]
 On Behalf Of Jeff Blaine
 Sent: Tuesday, January 04, 2011 4:04 PM
 To: samba@lists.samba.org
 Subject: [Samba] log level = 20 not showing auth, etc...

 Samba 3.5.6

 I must be really misunderstanding 'log level' somehow.  I have tried
 all of
 the following and cannot get my logs to show anything related to
 authentication or share accesses at all:

   log level = 20

   log level = all:20

   log lovel = 3 auth:20

 If I access one of the server's shares successfully, not a single thing
 shows up in the log.  Yes, I am looking at the right log, and yes other
 things do get written to the log from smbd :)

 Any help would be very welcome.

 Jeff Blaine
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba


- -- 
-  _  _ _  _ ___  _  _  _
|Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Sr. Systems Programmer
|$| |__| |  | |__/ | \| _| |novos...@umdnj.edu - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent.|IST/CST-Academic Svcs. - ADMC 450, Newark
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk0jpAQACgkQmb+gadEcsb73PwCaAhIp86N2DWxwGc/ac8JPebWH
VaAAn12oZUyGt+kiMkU41aJNA4iCqGhm
=bDxf
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] log level = 20 not showing auth, etc...

2011-01-04 Thread Ryan Novosielski
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I am fairly certain you are correct. A quick man 5 smb.conf ought to
answer it.

I don't know what happens if the value is set wrong.

On 01/04/2011 05:30 PM, Hoover, Tony wrote:
 I believe that the max log level is 10 (e.g. you are setting an invalid
 value).  Someone will correct me if I'm wrong, I'm sure. 
 
 
 --
 Tony Hoover, Network Administrator
 KSU - Salina, College of Technology and Aviation
 (785) 826-2660
 
 Don't Blend in...
 --
  
 -Original Message-
 From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
 On Behalf Of Jeff Blaine
 Sent: Tuesday, January 04, 2011 4:04 PM
 To: samba@lists.samba.org
 Subject: [Samba] log level = 20 not showing auth, etc...
 
 Samba 3.5.6
 
 I must be really misunderstanding 'log level' somehow.  I have tried all of
 the following and cannot get my logs to show anything related to
 authentication or share accesses at all:
 
  log level = 20
 
  log level = all:20
 
  log lovel = 3 auth:20
 
 If I access one of the server's shares successfully, not a single thing
 shows up in the log.  Yes, I am looking at the right log, and yes other
 things do get written to the log from smbd :)
 
 Any help would be very welcome.
 
 Jeff Blaine
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/options/samba


- -- 
-  _  _ _  _ ___  _  _  _
|Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Sr. Systems Programmer
|$| |__| |  | |__/ | \| _| |novos...@umdnj.edu - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent.|IST/CST-Academic Svcs. - ADMC 450, Newark
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk0joaUACgkQmb+gadEcsb7/HACgh2wP5KMiytLQiMMeCS0UHWXX
SNcAoLe/595LOhp3saYfpqrjMOxNsuY/
=sl8Y
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba] Problem with psexec (which is using the SMB2 protocol)

2011-01-04 Thread David Durant
Hi,

I tried writing to this list a couple of times before but got no
responses - am I posting in the wrong place? I'm here because the
errors I'm seeing seem to be happening in the SMB2 protocol exchanges
(see the Wireshark dumps). I've tried the psexec forums with no
success...

Anyway - this is the problem : http://http://bowsy.dontexist.net/PsExec_Problem/

Any help very gratefully received.

David Durant

-- 
Twitter : @cholten99
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 3.5.6 with Win7 failure (XP works)

2011-01-04 Thread Jeff Blaine

Figured it out.

server signing = auto


I can get things to work if I disable Communications Signing
on the win7 box. This is not acceptable to our corporate
information security folks though.

That at least pinpoints the problem. Now I just need to get
Samba to accept communications signing from the client.
I don't see that I am doing anything wrong.

client signing = mandatory


^ doesn't help a Windows 7 box with mandatory signing
  connect to this Samba server :)
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] e-pub or downloadable xhtml of the manuals?

2011-01-04 Thread Christ Schlacta

http://samba.org/samba/docs/man/Samba-HOWTO-Collection/

This document has provided more information to me than I can adequately 
express, and as masochistic as it sounds, I'd kinda like to pop a copy 
on my nook and devour it.  along with any of the other docs hosted on 
the samba website.  has anyone prepared epubs of the documentation?  if 
not epubs, than at least xhtml files in a zip suitable for use in 
converting to an epub?


If anyone has any of this or knows where I can download it, lemme know, 
I'll be muchly greatful!

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[SCM] Samba Shared Repository - branch master updated

2011-01-04 Thread Stefan Metzmacher
The branch, master has been updated
   via  b79c0e1 Revert nsswitch Add talloc depencency for nsstest
   via  ce113ea nsswitch: remove includes.h dependency from nsstest.c
  from  263642b dynconfig: Add extern to header, try to unbreak imini 
buildfarm host.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit b79c0e1adbe8ad591157d92b36106484c2c18313
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Jan 4 08:43:16 2011 +0100

Revert nsswitch Add talloc depencency for nsstest

This reverts commit 640028d158583825ea5ffd1266f099cf8776db5d.

This is not needed anymore.

metze

Autobuild-User: Stefan Metzmacher me...@samba.org
Autobuild-Date: Tue Jan  4 09:38:57 CET 2011 on sn-devel-104

commit ce113ea02980563133c547bb0693864951ce16a5
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Jan 4 08:42:16 2011 +0100

nsswitch: remove includes.h dependency from nsstest.c

metze

---

Summary of changes:
 nsswitch/nsstest.c |   25 +
 nsswitch/wscript_build |2 +-
 2 files changed, 10 insertions(+), 17 deletions(-)


Changeset truncated at 500 lines:

diff --git a/nsswitch/nsstest.c b/nsswitch/nsstest.c
index 8742b32..d84e028 100644
--- a/nsswitch/nsstest.c
+++ b/nsswitch/nsstest.c
@@ -18,16 +18,9 @@
along with this program.  If not, see http://www.gnu.org/licenses/.
 */
 
-#include includes.h
+#include replace.h
 #include nsswitch/nsstest.h
 
-#ifdef malloc
-#undef malloc
-#endif
-#ifdef realloc
-#undef realloc
-#endif
-
 static const char *so_path = /lib/libnss_winbind.so;
 static const char *nss_name = winbind;
 static int nss_errno;
@@ -55,10 +48,10 @@ static void *find_fn(const char *name)
if (!res) {
printf(Can't find function %s\n, s);
total_errors++;
-   SAFE_FREE(s);
+   free(s);
return NULL;
}
-   SAFE_FREE(s);
+   free(s);
return res;
 }
 
@@ -201,12 +194,12 @@ again:
goto again;
}
if (status == NSS_STATUS_NOTFOUND) {
-   SAFE_FREE(buf);
+   free(buf);
return NULL;
}
if (status != NSS_STATUS_SUCCESS) {
report_nss_error(getgrent, status);
-   SAFE_FREE(buf);
+   free(buf);
return NULL;
}
return grp;
@@ -239,12 +232,12 @@ again:
goto again;
}
if (status == NSS_STATUS_NOTFOUND) {
-   SAFE_FREE(buf);
+   free(buf);
return NULL;
}
if (status != NSS_STATUS_SUCCESS) {
report_nss_error(getgrnam, status);
-   SAFE_FREE(buf);
+   free(buf);
return NULL;
}
return grp;
@@ -278,12 +271,12 @@ again:
goto again;
}
if (status == NSS_STATUS_NOTFOUND) {
-   SAFE_FREE(buf);
+   free(buf);
return NULL;
}
if (status != NSS_STATUS_SUCCESS) {
report_nss_error(getgrgid, status);
-   SAFE_FREE(buf);
+   free(buf);
return NULL;
}
return grp;
diff --git a/nsswitch/wscript_build b/nsswitch/wscript_build
index d40e143..a9881bd 100644
--- a/nsswitch/wscript_build
+++ b/nsswitch/wscript_build
@@ -10,7 +10,7 @@ bld.SAMBA_LIBRARY('winbind-client',
 
 bld.SAMBA_BINARY('nsstest',
source='nsstest.c',
-   deps='replace talloc'
+   deps='replace'
)
 
 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch v3-6-test updated

2011-01-04 Thread Günther Deschner
The branch, v3-6-test has been updated
   via  5ea1dd5 s3-waf: fix the build.
  from  710b083 lib/crypto: add aes_cfb8_encrypt()

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test


- Log -
commit 5ea1dd5e79633a7d91e5c43f93446c3bc8a84e91
Author: Günther Deschner g...@samba.org
Date:   Mon Jan 3 16:53:00 2011 +0100

s3-waf: fix the build.

Guenther

Autobuild-User: Günther Deschner g...@samba.org
Autobuild-Date: Mon Jan  3 18:19:01 CET 2011 on sn-devel-104
(cherry picked from commit 4316895bc7eafde146541ee522ec4d575402d67d)

---

Summary of changes:
 source3/wscript_build |6 --
 1 files changed, 4 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/wscript_build b/source3/wscript_build
index f9f2466..77dda39 100644
--- a/source3/wscript_build
+++ b/source3/wscript_build
@@ -184,7 +184,8 @@ LIBSMB_SRC = '''libsmb/clientgen.c libsmb/cliconnect.c 
libsmb/clifile.c
  libsmb/clistr.c libsmb/cliquota.c libsmb/clifsinfo.c 
libsmb/clidfs.c
  libsmb/clioplock.c libsmb/clirap2.c
  libsmb/smb_seal.c libsmb/async_smb.c
- libsmb/cli_np_tstream.c'''
+ libsmb/cli_np_tstream.c
+ libsmb/smbsock_connect.c'''
 
 LIBMSRPC_SRC = '''
${SCHANNEL_SRC}
@@ -615,7 +616,8 @@ SMBTORTURE_SRC1 = '''torture/torture.c torture/nbio.c 
torture/scanner.c torture/
 torture/denytest.c torture/mangle_test.c
 torture/nbench.c
 torture/test_async_echo.c
-torture/test_posix_append.c'''
+torture/test_posix_append.c
+torture/test_smbsock_any_connect.c'''
 
 SMBTORTURE_SRC = '''${SMBTORTURE_SRC1}
 torture/wbc_async.c


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2011-01-04 Thread Günther Deschner
The branch, master has been updated
   via  0279422 s4-smbtorture: check driver_version equality as well.
   via  6457610 s4-smbtorture: always setup full driver level 8 in 
test_add_driver_arg().
   via  69174fe s4-smbtorture: in test_GetDriverInfo_winreg() always test 
level 6 for samba3 as well.
   via  19a295d s4-smbtorture: setup help and dependent files in spoolss 
driver unc path tests.
   via  8fc2881 s4-smbtorture: fix DriverDate and DriverVersion comparison 
checks against w2k3.
   via  9c46370 s4-smbtorture: add more tests for driver_dates.
  from  b79c0e1 Revert nsswitch Add talloc depencency for nsstest

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 0279422c83e42a6c903e82a069a5236dd01a0f21
Author: Günther Deschner g...@samba.org
Date:   Fri Dec 24 01:55:08 2010 +0100

s4-smbtorture: check driver_version equality as well.

Guenther

Autobuild-User: Günther Deschner g...@samba.org
Autobuild-Date: Tue Jan  4 11:22:09 CET 2011 on sn-devel-104

commit 64576106b10b8cde8970d82301fba66c0ee1995e
Author: Günther Deschner g...@samba.org
Date:   Fri Dec 24 01:25:49 2010 +0100

s4-smbtorture: always setup full driver level 8 in test_add_driver_arg().

Guenther

commit 69174fea5b2c580356693d33b2ab980a44a34259
Author: Günther Deschner g...@samba.org
Date:   Fri Dec 24 01:25:04 2010 +0100

s4-smbtorture: in test_GetDriverInfo_winreg() always test level 6 for 
samba3 as
well.

Guenther

commit 19a295dee8b9b9b9844c564fb5b856c7268f650a
Author: Günther Deschner g...@samba.org
Date:   Fri Dec 24 01:22:24 2010 +0100

s4-smbtorture: setup help and dependent files in spoolss driver unc path 
tests.

Guenther

commit 8fc28818b974042712b5c11776de0562755ed59d
Author: Günther Deschner g...@samba.org
Date:   Fri Dec 24 01:14:49 2010 +0100

s4-smbtorture: fix DriverDate and DriverVersion comparison checks against 
w2k3.

Guenther

commit 9c46370e915d8b32f0307eb0a491aeacd2b617b9
Author: Günther Deschner g...@samba.org
Date:   Thu Dec 23 23:50:23 2010 +0100

s4-smbtorture: add more tests for driver_dates.

Guenther

---

Summary of changes:
 source4/torture/rpc/spoolss.c |   79 ++---
 1 files changed, 66 insertions(+), 13 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/torture/rpc/spoolss.c b/source4/torture/rpc/spoolss.c
index 6ff2414..2dd7164 100644
--- a/source4/torture/rpc/spoolss.c
+++ b/source4/torture/rpc/spoolss.c
@@ -48,6 +48,7 @@
 #define TORTURE_DRIVER_ADOBE   torture_driver_adobe
 #define TORTURE_DRIVER_EX_ADOBEtorture_driver_ex_adobe
 #define TORTURE_DRIVER_ADOBE_CUPSADDSMB
torture_driver_adobe_cupsaddsmb
+#define TORTURE_DRIVER_TIMESTAMPS  torture_driver_timestamps
 
 #define TOP_LEVEL_PRINT_KEY SOFTWARE\\Microsoft\\Windows 
NT\\CurrentVersion\\Print
 #define TOP_LEVEL_PRINT_PRINTERS_KEY TOP_LEVEL_PRINT_KEY \\Printers
@@ -4653,11 +4654,8 @@ static bool test_GetDriverInfo_winreg(struct 
torture_context *tctx,
test_winreg_OpenKey(tctx, winreg_handle, hive_handle, 
driver_key, key_handle),
failed to open driver key);
 
-   if (torture_setting_bool(tctx, samba3, false)) {
-   goto try_level3;
-   }
-
-   if (torture_setting_bool(tctx, w2k3, false)) {
+   if (torture_setting_bool(tctx, samba3, false) ||
+   torture_setting_bool(tctx, w2k3, false)) {
goto try_level6;
}
 
@@ -4741,7 +4739,9 @@ static bool test_GetDriverInfo_winreg(struct 
torture_context *tctx,
test_sz(Driver,   driver_path);
if (torture_setting_bool(tctx, w2k3, false)) {
DATA_BLOB blob = data_blob_talloc_zero(tctx, 8);
+   push_nttime(blob.data, 0, info.info6.driver_date);
test_binary(DriverDate,   blob);
+   SBVAL(blob.data, 0, info.info6.driver_version);
test_binary(DriverVersion,blob);
} else {
test_sz(DriverDate,   driver_date);
@@ -4759,8 +4759,6 @@ static bool test_GetDriverInfo_winreg(struct 
torture_context *tctx,
test_dword(Version,   info.info6.version);
 /* test_dword(TempDir,   ?); */
 
- try_level3:
-
if (handle) {
torture_assert(tctx,
test_GetPrinterDriver2_level(tctx, b, handle, 
driver_name, environment, 3, version, 0, info, result),
@@ -8452,6 +8450,7 @@ static bool test_AddPrinterDriver_args_level_6(struct 
torture_context *tctx,
}
 
torture_assert_nttime_equal(tctx, info.info6.driver_date, 
info6.driver_date, driverdate mismatch);
+   torture_assert_u64_equal(tctx, info.info6.driver_version, 
info6.driver_version, 

talloc dep for talloc.h

2011-01-04 Thread Andrew Bartlett
On Tue, 2011-01-04 at 09:55 +0100, Jelmer Vernooij wrote:
 On Tue, 2011-01-04 at 05:40 +0100, Andrew Bartlett wrote:
  commit 640028d158583825ea5ffd1266f099cf8776db5d
  Author: Andrew Bartlett abart...@samba.org
  Date:   Tue Jan 4 14:41:38 2011 +1100
  
  nsswitch Add talloc depencency for nsstest
  
  nsstest does not use talloc, but it includes talloc.h via includes.h,
  and so without this it cannot find the right internal header.
  
  This wasn't noticed before, as most linux developer boxes have a 
  talloc.h.
  
  The issue was reported by Adam Tauno Williams awilliam at 
  whitemice.org
 I'm a bit puzzled by this, as e.g. sn doesn't have talloc.h installed
 either and neither have most of the build farm hosts. Perhaps it happens
 if talloc.h is installed but not in /usr/include ?

That is odd, but I reproduced it locally, by removing libtalloc-devel
from my Fedora 12 laptop.  I've tested it before and after this commit
(including a waf configure).

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org
Samba Developer, Cisco Inc.



[SCM] Samba Shared Repository - branch master updated

2011-01-04 Thread Andreas Schneider
The branch, master has been updated
   via  d2e93cc s3-waf: Fixed the static rpc service build.
   via  d4f5bf0 s3-smbd: Call the rpc service shutdown functions.
   via  8ece780 s3-build: Remove broken RPC modules support.
   via  9aa8763 s3-smbd: Call all the rpc services in the right order.
  from  0279422 s4-smbtorture: check driver_version equality as well.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit d2e93cce88b69bdf489984f34376ca30934684ad
Author: Andreas Schneider a...@samba.org
Date:   Mon Dec 20 14:29:34 2010 +0100

s3-waf: Fixed the static rpc service build.

Autobuild-User: Andreas Schneider a...@samba.org
Autobuild-Date: Tue Jan  4 12:09:48 CET 2011 on sn-devel-104

commit d4f5bf0c36e3d5a0a13d1a03e7c6fac956dbf954
Author: Andreas Schneider a...@samba.org
Date:   Mon Dec 20 11:42:17 2010 +0100

s3-smbd: Call the rpc service shutdown functions.

commit 8ece780d1b90125514a1afb3e145a413cc342b98
Author: Andreas Schneider a...@samba.org
Date:   Mon Dec 20 11:24:07 2010 +0100

s3-build: Remove broken RPC modules support.

With the current module support for rpc we're not able to call the init
functions with the rpc callback structure. So init functions and
shutdown functions aren't called. These init functions are needed to
setup pre requirements like migrating the printer databases and register
at the endpoint mapper. The shutdown functions cleanup memory and
deregister from the endpoint mapper.

commit 9aa876397601554df5f6b6e4b690755ed0eb405e
Author: Andreas Schneider a...@samba.org
Date:   Mon Dec 20 11:00:45 2010 +0100

s3-smbd: Call all the rpc services in the right order.

---

Summary of changes:
 source3/Makefile.in  |   14 ++--
 source3/configure.in |   17 
 source3/m4/aclocal.m4|8 --
 source3/rpc_server/wscript_build |  185 ++
 source3/smbd/server.c|   46 +-
 source3/smbd/server_exit.c   |   34 +++
 source3/wscript  |   30 ++
 source3/wscript_build|4 +-
 8 files changed, 163 insertions(+), 175 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/Makefile.in b/source3/Makefile.in
index 3e49869..cd0f376 100644
--- a/source3/Makefile.in
+++ b/source3/Makefile.in
@@ -249,13 +249,12 @@ SCRIPTS = $(srcdir)/script/smbtar 
$(builddir)/script/findsmb
 VFS_MODULES = @VFS_MODULES@
 PERFCOUNT_MODULES = @PERFCOUNT_MODULES@
 PDB_MODULES = @PDB_MODULES@
-RPC_MODULES = @RPC_MODULES@
 IDMAP_MODULES = @IDMAP_MODULES@
 CHARSET_MODULES = @CHARSET_MODULES@
 AUTH_MODULES = @AUTH_MODULES@
 NSS_INFO_MODULES = @NSS_INFO_MODULES@
 GPEXT_MODULES = @GPEXT_MODULES@
-MODULES = $(VFS_MODULES) $(PDB_MODULES) $(RPC_MODULES) $(IDMAP_MODULES) \
+MODULES = $(VFS_MODULES) $(PDB_MODULES) $(IDMAP_MODULES) \
   $(CHARSET_MODULES) $(AUTH_MODULES) $(NSS_INFO_MODULES) \
  $(GPEXT_MODULES) $(PERFCOUNT_MODULES)
 
@@ -729,8 +728,13 @@ RPC_PIPE_OBJ = rpc_server/srv_pipe.o 
rpc_server/srv_pipe_hnd.o \
 
 RPC_RPCECHO_OBJ = rpc_server/srv_echo_nt.o librpc/gen_ndr/srv_echo.o
 
-RPC_SERVER_OBJ = @RPC_STATIC@ $(RPC_PIPE_OBJ) $(NPA_TSTREAM_OBJ) \
- $(LIBCLI_SPOOLSS_OBJ) \
+RPC_SERVER_OBJ = $(RPC_LSARPC_OBJ) $(RPC_WINREG_OBJ) $(RPC_INITSHUTDOWN_OBJ) \
+$(RPC_DSSETUP_OBJ) $(RPC_WKSSVC_OBJ) $(RPC_SVCCTL_OBJ) \
+$(RPC_NTSVCS_OBJ) $(RPC_NETLOGON_OBJ) $(RPC_NETDFS_OBJ) \
+$(RPC_SRVSVC_OBJ) $(RPC_SPOOLSS_OBJ) $(RPC_EVENTLOG_OBJ) \
+$(RPC_SAMR_OBJ) $(RPC_RPCECHO_OBJ) \
+$(RPC_PIPE_OBJ) $(NPA_TSTREAM_OBJ) \
+$(LIBCLI_SPOOLSS_OBJ) \
 $(LIBCLI_WINREG_OBJ) \
 $(LIBCLI_SRVSVC_OBJ) \
 $(LIBCLI_LSA_OBJ) \
@@ -3164,7 +3168,6 @@ installbin:: all installdirs
 installmodules:: modules installdirs
@$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS_BIN) 
$(DESTDIR) $(prefix) $(VFSLIBDIR) $(VFS_MODULES)
@$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS_BIN) 
$(DESTDIR) $(prefix) $(PDBLIBDIR) $(PDB_MODULES)
-   @$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS_BIN) 
$(DESTDIR) $(prefix) $(RPCLIBDIR) $(RPC_MODULES)
@$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS_BIN) 
$(DESTDIR) $(prefix) $(IDMAPLIBDIR) $(IDMAP_MODULES)
@$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS_BIN) 
$(DESTDIR) $(prefix) $(NSSINFOLIBDIR) $(NSS_INFO_MODULES)
@$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS_BIN) 
$(DESTDIR) $(prefix) $(CHARSETLIBDIR) $(CHARSET_MODULES)
@@ -3252,7 +3255,6 @@ uninstallbin::
 uninstallmodules::
@$(SHELL) $(srcdir)/script/uninstallmodules.sh $(INSTALLPERMS_BIN) 
$(DESTDIR) $(prefix) 

[SCM] Samba Shared Repository - branch master updated

2011-01-04 Thread Günther Deschner
The branch, master has been updated
   via  4ebf2f9 s3-waf: convert SAMBA_VERSION into a subsystem.
   via  589d1bf s3-waf: convert PASSCHANGE into a subsystem.
   via  3459649 s3-waf: add UTIL_TDB subsystem.
  from  d2e93cc s3-waf: Fixed the static rpc service build.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 4ebf2f97459b4214748255aa1f40015f8dc511cc
Author: Günther Deschner g...@samba.org
Date:   Tue Jan 4 13:11:35 2011 +0100

s3-waf: convert SAMBA_VERSION into a subsystem.

Guenther

Autobuild-User: Günther Deschner g...@samba.org
Autobuild-Date: Tue Jan  4 15:10:52 CET 2011 on sn-devel-104

commit 589d1bf57eb8f561de3cf2a05990a5d2edf69095
Author: Günther Deschner g...@samba.org
Date:   Tue Jan 4 13:05:51 2011 +0100

s3-waf: convert PASSCHANGE into a subsystem.

Guenther

commit 34596493bada8ce9fb00fd7d4d60ac245a71d5e6
Author: Günther Deschner g...@samba.org
Date:   Tue Jan 4 12:56:29 2011 +0100

s3-waf: add UTIL_TDB subsystem.

Guenther

---

Summary of changes:
 source3/wscript_build |   39 ++-
 1 files changed, 26 insertions(+), 13 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/wscript_build b/source3/wscript_build
index 21da069..d670ecb 100644
--- a/source3/wscript_build
+++ b/source3/wscript_build
@@ -3,7 +3,7 @@
 from samba_utils import *
 import samba_version
 
-TDB_LIB_SRC = '''../lib/util/util_tdb.c
+TDB_LIB_SRC = '''
   lib/dbwrap.c lib/dbwrap_tdb.c
   lib/dbwrap_ctdb.c
   lib/g_lock.c
@@ -87,7 +87,7 @@ LIB_SRC = '''${LIBSAMBAUTIL_SRC}
   lib/serverid.c
   lib/util_transfer_file.c
   ${TDB_LIB_SRC}
-  ${VERSION_SRC} lib/debug.c lib/fault.c
+  lib/debug.c lib/fault.c
   lib/interface.c lib/pidfile.c
   lib/system.c lib/sendfile.c lib/recvfile.c lib/time.c
   lib/username.c
@@ -476,8 +476,7 @@ NMBD_SRC = '${NMBD_SRC1}'
 SWAT_SRC1 = '''web/cgi.c web/diagnose.c web/startstop.c web/statuspage.c
web/swat.c web/neg_lang.c'''
 
-SWAT_SRC = '''${SWAT_SRC1}
-   ${PASSCHANGE_SRC}'''
+SWAT_SRC = '''${SWAT_SRC1}'''
 
 STATUS_SRC = '''utils/status.c utils/status_profile.c'''
 
@@ -493,7 +492,7 @@ TEST_LP_LOAD_SRC = '''param/test_lp_load.c'''
 
 PASSWD_UTIL_SRC = 'utils/passwd_util.c'
 
-SMBPASSWD_SRC = '''utils/smbpasswd.c ${PASSCHANGE_SRC}'''
+SMBPASSWD_SRC = '''utils/smbpasswd.c'''
 
 PDBEDIT_SRC = '''utils/pdbedit.c'''
 
@@ -673,9 +672,7 @@ NTLM_AUTH_SRC = '''${NTLM_AUTH_SRC1}
 libsmb/clikrb5.c libads/kerberos.c'''
 
 
-VLP_SRC = '''printing/tests/vlp.c
-  ../lib/util/util_tdb.c
-  ${LIBSAMBAUTIL_SRC}'''
+VLP_SRC = '''printing/tests/vlp.c'''
 
 RPC_OPEN_TCP_SRC = 'torture/rpc_open_tcp.c'
 
@@ -866,7 +863,7 @@ bld.SAMBA_SUBSYSTEM('KRBCLIENT',
 
 bld.SAMBA_SUBSYSTEM('LIBS',
 source=LIB_SRC,
-deps='LIBCRYPTO ndr security NDR_SECURITY charset 
NDR_MESSAGING LIBASYNC_REQ tdb-wrap samba-util CHARSET',
+deps='LIBCRYPTO ndr security NDR_SECURITY charset 
NDR_MESSAGING LIBASYNC_REQ tdb-wrap samba-util CHARSET UTIL_TDB SAMBA_VERSION',
 vars=locals())
 
 bld.SAMBA_SUBSYSTEM('LIB_NONSMBD',
@@ -981,6 +978,12 @@ bld.SAMBA_SUBSYSTEM('FNAME_UTIL',
 source=FNAME_UTIL_SRC,
 vars=locals())
 
+bld.SAMBA_SUBSYSTEM('UTIL_TDB',
+   source='../lib/util/util_tdb.c',
+   local_include=False,
+   public_deps='tdb talloc'
+   )
+
 bld.SAMBA_SUBSYSTEM('LIBNET',
 source=LIBNET_SRC,
 deps='NDR_LIBNET_JOIN',
@@ -1019,6 +1022,15 @@ bld.SAMBA_SUBSYSTEM('PLAINTEXT_AUTH',
 deps='pam',
 vars=locals())
 
+bld.SAMBA_SUBSYSTEM('PASSCHANGE',
+source=PASSCHANGE_SRC,
+deps='LIBCLI_SAMR',
+vars=locals())
+
+bld.SAMBA_SUBSYSTEM('SAMBA_VERSION',
+source=VERSION_SRC,
+vars=locals())
+
 bld.SAMBA_SUBSYSTEM('SLCACHE',
 source=SLCACHE_SRC,
 vars=locals())
@@ -1219,7 +1231,7 @@ bld.SAMBA_BINARY('web/swat',
  deps='''talloc tevent cap LIBS LIBSMB wbclient PARAM
  LIB_NONSMBD resolv PASSDB POPT_SAMBA KRBCLIENT cups
  LIBMSRPC_GEN LIBMSRPC LOCKING PLAINTEXT_AUTH PRINTBASE 
PRINTING FNAME_UTIL
- LIBCLI_SAMR INIT_LSA''',
+ LIBCLI_SAMR INIT_LSA PASSCHANGE''',
  enabled=bld.env.build_swat,
  install_path='${SBINDIR}',
  vars=locals())
@@ -1304,7 +1316,7 @@ bld.SAMBA_BINARY('smbpasswd',
  source=SMBPASSWD_SRC,
  deps='''talloc 

[SCM] Samba Shared Repository - branch master updated

2011-01-04 Thread Anatoliy Atanasov
The branch, master has been updated
   via  1cbce84 s4/ldapcmp: Fix the parsing of the second set of credentials
  from  4ebf2f9 s3-waf: convert SAMBA_VERSION into a subsystem.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 1cbce84683ef4fa49b85d87988c5e8db7057530a
Author: Anatoliy Atanasov anatoliy.atana...@postpath.com
Date:   Tue Jan 4 16:50:03 2011 +0200

s4/ldapcmp: Fix the parsing of the second set of credentials

We need this second set of credentials so we can do comparison
between DCs in two different domains.

Autobuild-User: Anatoliy Atanasov anatoliy.atana...@postpath.com
Autobuild-Date: Tue Jan  4 16:36:06 CET 2011 on sn-devel-104

---

Summary of changes:
 source4/scripting/python/samba/netcmd/ldapcmp.py |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/scripting/python/samba/netcmd/ldapcmp.py 
b/source4/scripting/python/samba/netcmd/ldapcmp.py
index 1318457..1ecbda7 100755
--- a/source4/scripting/python/samba/netcmd/ldapcmp.py
+++ b/source4/scripting/python/samba/netcmd/ldapcmp.py
@@ -771,7 +771,7 @@ class cmd_ldapcmp(Command):
 credopts=None, sambaopts=None, versionopts=None):
 lp = sambaopts.get_loadparm()
 creds = credopts.get_credentials(lp, fallback_machine=True)
-creds2 = credopts.get_credentials2(lp, False)
+creds2 = credopts.get_credentials2(lp)
 if creds2.is_anonymous():
 creds2 = creds
 if not creds.authentication_requested():


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2011-01-04 Thread Stefan Metzmacher
The branch, master has been updated
   via  e1e8693 s3:build: don't use cli_ntsvcs.c any more.
   via  d99e9c3 s3:rpcclient: use dcerpc_binding_handle client stubs in 
cmd_ntsvcs.c
   via  fbcbeab s3:build: don't use cli_wbint.c any more
  from  1cbce84 s4/ldapcmp: Fix the parsing of the second set of credentials

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit e1e869352565b8e1d7865a2338f8f0f3ef154519
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Jan 4 10:55:48 2011 +0100

s3:build: don't use cli_ntsvcs.c any more.

metze

Autobuild-User: Stefan Metzmacher me...@samba.org
Autobuild-Date: Tue Jan  4 17:23:17 CET 2011 on sn-devel-104

commit d99e9c389b6c0d8ed84a7b36ccadd8b43e3b19f2
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Jan 4 10:52:14 2011 +0100

s3:rpcclient: use dcerpc_binding_handle client stubs in cmd_ntsvcs.c

metze

commit fbcbeabd655029309ee42627a0bb75d6a5820f50
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Jan 4 13:58:25 2011 +0100

s3:build: don't use cli_wbint.c any more

metze

---

Summary of changes:
 source3/Makefile.in|4 +---
 source3/librpc/wscript_build   |5 -
 source3/rpcclient/cmd_ntsvcs.c |   21 ++---
 source3/wscript_build  |8 ++--
 4 files changed, 17 insertions(+), 21 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/Makefile.in b/source3/Makefile.in
index cd0f376..968e2eb 100644
--- a/source3/Makefile.in
+++ b/source3/Makefile.in
@@ -349,8 +349,7 @@ LIBCLI_EVENTLOG_OBJ = librpc/gen_ndr/cli_eventlog.o \
 LIBCLI_WINREG_OBJ = librpc/gen_ndr/cli_winreg.o \
 librpc/gen_ndr/ndr_winreg_c.o
 
-LIBCLI_NTSVCS_OBJ = librpc/gen_ndr/cli_ntsvcs.o \
-   librpc/gen_ndr/ndr_ntsvcs_c.o
+LIBCLI_NTSVCS_OBJ = librpc/gen_ndr/ndr_ntsvcs_c.o
 
 LIBCLI_DRSUAPI_OBJ = librpc/gen_ndr/cli_drsuapi.o \
 librpc/gen_ndr/ndr_drsuapi_c.o
@@ -1328,7 +1327,6 @@ WINBINDD_OBJ1 = \
winbindd/winbindd_dual.o  \
winbindd/winbindd_dual_ndr.o  \
winbindd/winbindd_dual_srv.o  \
-   librpc/gen_ndr/cli_wbint.o \
librpc/gen_ndr/ndr_wbint_c.o \
librpc/gen_ndr/srv_wbint.o \
librpc/gen_ndr/ndr_wbint.o \
diff --git a/source3/librpc/wscript_build b/source3/librpc/wscript_build
index 0bb7322..5b30507 100644
--- a/source3/librpc/wscript_build
+++ b/source3/librpc/wscript_build
@@ -45,11 +45,6 @@ bld.SAMBA_SUBSYSTEM('RPC_NDR_WBINT',
public_deps='dcerpc NDR_WBINT'
)
 
-bld.SAMBA_SUBSYSTEM('RPCCLI_NDR_WBINT',
-   source='../librpc/gen_ndr/cli_wbint.c',
-   public_deps='RPC_NDR_WBINT'
-   )
-
 bld.SAMBA_SUBSYSTEM('SRV_NDR_WBINT',
source='../librpc/gen_ndr/srv_wbint.c',
public_deps='NDR_WBINT'
diff --git a/source3/rpcclient/cmd_ntsvcs.c b/source3/rpcclient/cmd_ntsvcs.c
index 95b905a..68135d5 100644
--- a/source3/rpcclient/cmd_ntsvcs.c
+++ b/source3/rpcclient/cmd_ntsvcs.c
@@ -27,11 +27,12 @@ static WERROR cmd_ntsvcs_get_version(struct rpc_pipe_client 
*cli,
 int argc,
 const char **argv)
 {
+   struct dcerpc_binding_handle *b = cli-binding_handle;
NTSTATUS status;
WERROR werr;
uint16_t version;
 
-   status = rpccli_PNP_GetVersion(cli, mem_ctx,
+   status = dcerpc_PNP_GetVersion(b, mem_ctx,
   version, werr);
if (!NT_STATUS_IS_OK(status)) {
return ntstatus_to_werror(status);
@@ -49,6 +50,7 @@ static WERROR cmd_ntsvcs_validate_dev_inst(struct 
rpc_pipe_client *cli,
   int argc,
   const char **argv)
 {
+   struct dcerpc_binding_handle *b = cli-binding_handle;
NTSTATUS status;
WERROR werr;
const char *devicepath = NULL;
@@ -65,7 +67,7 @@ static WERROR cmd_ntsvcs_validate_dev_inst(struct 
rpc_pipe_client *cli,
flags = atoi(argv[2]);
}
 
-   status = rpccli_PNP_ValidateDeviceInstance(cli, mem_ctx,
+   status = dcerpc_PNP_ValidateDeviceInstance(b, mem_ctx,
   devicepath,
   flags,
   werr);
@@ -81,6 +83,7 @@ static WERROR cmd_ntsvcs_hw_prof_flags(struct rpc_pipe_client 
*cli,
   int argc,
   const char **argv)
 {
+   struct dcerpc_binding_handle *b = cli-binding_handle;
NTSTATUS status;
WERROR werr;
const char *devicepath = NULL;
@@ -96,7 +99,7 @@ static WERROR 

[SCM] Samba Shared Repository - branch master updated

2011-01-04 Thread Anatoliy Atanasov
The branch, master has been updated
   via  f8275ba s4/ldapcmp: Check if creds2 is actualy set by the command 
line
  from  e1e8693 s3:build: don't use cli_ntsvcs.c any more.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit f8275bae5d7b471967be7222170d049c18b8882f
Author: Anatoliy Atanasov anatoliy.atana...@postpath.com
Date:   Tue Jan 4 17:45:16 2011 +0200

s4/ldapcmp: Check if creds2 is actualy set by the command line

When parsing the command line for the second set of credentials
the parser returns wrong user if the second set of parameters isn't set.
So check if the password is set instead.

Autobuild-User: Anatoliy Atanasov anatoliy.atana...@postpath.com
Autobuild-Date: Tue Jan  4 18:11:26 CET 2011 on sn-devel-104

---

Summary of changes:
 source4/scripting/python/samba/netcmd/ldapcmp.py |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/scripting/python/samba/netcmd/ldapcmp.py 
b/source4/scripting/python/samba/netcmd/ldapcmp.py
index 1ecbda7..76f7d95 100755
--- a/source4/scripting/python/samba/netcmd/ldapcmp.py
+++ b/source4/scripting/python/samba/netcmd/ldapcmp.py
@@ -772,7 +772,7 @@ class cmd_ldapcmp(Command):
 lp = sambaopts.get_loadparm()
 creds = credopts.get_credentials(lp, fallback_machine=True)
 creds2 = credopts.get_credentials2(lp)
-if creds2.is_anonymous():
+if credopts.no_pass2:
 creds2 = creds
 if not creds.authentication_requested():
 raise CommandError(You must supply at least one username/password 
pair)


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2011-01-04 Thread Andreas Schneider
The branch, master has been updated
   via  8925b03 s3-rpcecho: Only register rpcecho in the developer build.
  from  f8275ba s4/ldapcmp: Check if creds2 is actualy set by the command 
line

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 8925b03b5997d9e4fff604a2417eb1f4d8958e86
Author: Andreas Schneider a...@samba.org
Date:   Tue Jan 4 16:53:33 2011 +0100

s3-rpcecho: Only register rpcecho in the developer build.

Autobuild-User: Andreas Schneider a...@samba.org
Autobuild-Date: Tue Jan  4 18:56:38 CET 2011 on sn-devel-104

---

Summary of changes:
 source3/rpc_server/srv_echo_nt.c |4 
 source3/smbd/server.c|2 ++
 source3/smbd/server_exit.c   |2 ++
 3 files changed, 4 insertions(+), 4 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/rpc_server/srv_echo_nt.c b/source3/rpc_server/srv_echo_nt.c
index 87b2491..ef6204f 100644
--- a/source3/rpc_server/srv_echo_nt.c
+++ b/source3/rpc_server/srv_echo_nt.c
@@ -24,8 +24,6 @@
 #include includes.h
 #include ../librpc/gen_ndr/srv_echo.h
 
-#ifdef DEVELOPER
-
 #undef DBGC_CLASS
 #define DBGC_CLASS DBGC_RPC_SRV
 
@@ -121,5 +119,3 @@ uint16 _echo_TestDoublePointer(struct pipes_struct *p, 
struct echo_TestDoublePoi
p-rng_fault_state = True;
return 0;
 }
-
-#endif /* DEVELOPER */
diff --git a/source3/smbd/server.c b/source3/smbd/server.c
index 1b06851..1b9e793 100644
--- a/source3/smbd/server.c
+++ b/source3/smbd/server.c
@@ -1225,9 +1225,11 @@ extern void build_options(bool screen);
if (!NT_STATUS_IS_OK(rpc_netdfs_init(NULL))) {
exit(1);
}
+#ifdef DEVELOPER
if (!NT_STATUS_IS_OK(rpc_rpcecho_init(NULL))) {
exit(1);
}
+#endif
if (!NT_STATUS_IS_OK(rpc_dssetup_init(NULL))) {
exit(1);
}
diff --git a/source3/smbd/server_exit.c b/source3/smbd/server_exit.c
index 65151a1..ca906fa 100644
--- a/source3/smbd/server_exit.c
+++ b/source3/smbd/server_exit.c
@@ -131,7 +131,9 @@ static void exit_server_common(enum server_exit_reason how,
if (am_parent) {
rpc_wkssvc_shutdown();
rpc_dssetup_shutdown();
+#ifdef DEVELOPER
rpc_rpcecho_shutdown();
+#endif
rpc_netdfs_shutdown();
rpc_initshutdown_shutdown();
rpc_eventlog_shutdown();


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2011-01-04 Thread Stefan Metzmacher
The branch, master has been updated
   via  899adca s3:build: don't use cli_dssetup.c any more
   via  4c37257 s3:net_utils: use 
dcerpc_dssetup_DsRoleGetPrimaryDomainInformation()
   via  f016e4d s3:winbindd: use 
dcerpc_dssetup_DsRoleGetPrimaryDomainInformation()
   via  c6aedc9 s3:rpcclient: use dcerpc_binding_handle based client stubs 
in cmd_dssetup.c
   via  62aa019 s3:build: don't use cli_epmapper.c anymore
   via  6dd5ccd s3:rpcclient: improve epmmap output
   via  697d4ea s3:rpcclient: use dcerpc_binding_handle bases client stubs 
in cmd_epmapper.c
   via  fba2fdf s3:rpc_client: use dcerpc_epm_Map() and don't ignore 
'result' anymore.
  from  8925b03 s3-rpcecho: Only register rpcecho in the developer build.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 899adcaec97f5f8781507a221d0ffcbe73e59b0c
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Jan 4 13:56:05 2011 +0100

s3:build: don't use cli_dssetup.c any more

metze

Autobuild-User: Stefan Metzmacher me...@samba.org
Autobuild-Date: Tue Jan  4 22:21:48 CET 2011 on sn-devel-104

commit 4c37257f16cf2b34550a993f5423ee772254870f
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Jan 4 17:18:22 2011 +0100

s3:net_utils: use dcerpc_dssetup_DsRoleGetPrimaryDomainInformation()

metze

commit f016e4d4bd86d34a39822e9fdc0f83dbf67442b7
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Jan 4 13:55:15 2011 +0100

s3:winbindd: use dcerpc_dssetup_DsRoleGetPrimaryDomainInformation()

metze

commit c6aedc9750aff42a6d201addf0d4ed745743b9a2
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Jan 4 13:51:34 2011 +0100

s3:rpcclient: use dcerpc_binding_handle based client stubs in cmd_dssetup.c

metze

commit 62aa019a1b5b0ec17e0b4494de44e80ffc793fdd
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Jan 4 13:36:24 2011 +0100

s3:build: don't use cli_epmapper.c anymore

metze

commit 6dd5ccd04130a7d33bebca1a2340d339ab7b34c9
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Jan 4 21:24:17 2011 +0100

s3:rpcclient: improve epmmap output

metze

commit 697d4ea8fff6fbc48aa59b17fa0ecc91bf1d233d
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Jan 4 13:33:46 2011 +0100

s3:rpcclient: use dcerpc_binding_handle bases client stubs in cmd_epmapper.c

metze

commit fba2fdf2651bd4ffaabb41d5e0506cbf3bcb0699
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Jan 4 13:32:28 2011 +0100

s3:rpc_client: use dcerpc_epm_Map() and don't ignore 'result' anymore.

metze

---

Summary of changes:
 source3/Makefile.in  |6 +--
 source3/rpc_client/cli_pipe.c|   13 ++-
 source3/rpcclient/cmd_dssetup.c  |3 +-
 source3/rpcclient/cmd_epmapper.c |   72 +++---
 source3/utils/net_util.c |   10 -
 source3/winbindd/winbindd_cm.c   |5 ++-
 source3/wscript_build|   16 ++--
 7 files changed, 90 insertions(+), 35 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/Makefile.in b/source3/Makefile.in
index 968e2eb..cfcadce 100644
--- a/source3/Makefile.in
+++ b/source3/Makefile.in
@@ -363,8 +363,7 @@ LIBCLI_ECHO_OBJ = librpc/gen_ndr/cli_echo.o \
 LIBCLI_INITSHUTDOWN_OBJ = librpc/gen_ndr/cli_initshutdown.o \
  librpc/gen_ndr/ndr_initshutdown_c.o
 
-LIBCLI_DSSETUP_OBJ = librpc/gen_ndr/cli_dssetup.o \
-librpc/gen_ndr/ndr_dssetup_c.o
+LIBCLI_DSSETUP_OBJ = librpc/gen_ndr/ndr_dssetup_c.o
 
 LIBCLI_SVCCTL_OBJ = librpc/gen_ndr/cli_svcctl.o \
librpc/gen_ndr/ndr_svcctl_c.o
@@ -388,8 +387,7 @@ LIBCLI_NETLOGON_OBJ = librpc/gen_ndr/cli_netlogon.o \
  librpc/gen_ndr/ndr_netlogon_c.o \
  rpc_client/cli_netlogon.o
 
-LIBCLI_EPMAPPER_OBJ = librpc/gen_ndr/cli_epmapper.o \
- librpc/gen_ndr/ndr_epmapper_c.o
+LIBCLI_EPMAPPER_OBJ = librpc/gen_ndr/ndr_epmapper_c.o
 
 LIBNDR_GEN_OBJ = librpc/gen_ndr/ndr_wkssvc.o \
 $(LIBNDR_GEN_OBJ0) \
diff --git a/source3/rpc_client/cli_pipe.c b/source3/rpc_client/cli_pipe.c
index b59e9db..d7320c1 100644
--- a/source3/rpc_client/cli_pipe.c
+++ b/source3/rpc_client/cli_pipe.c
@@ -2464,6 +2464,7 @@ static NTSTATUS rpc_pipe_get_tcp_port(const char *host,
 {
NTSTATUS status;
struct rpc_pipe_client *epm_pipe = NULL;
+   struct dcerpc_binding_handle *epm_handle = NULL;
struct pipe_auth_data *auth = NULL;
struct dcerpc_binding *map_binding = NULL;
struct dcerpc_binding *res_binding = NULL;
@@ -2474,6 +2475,7 @@ static NTSTATUS rpc_pipe_get_tcp_port(const char *host,
uint32_t max_towers = 1;
struct epm_twr_p_t towers;
TALLOC_CTX *tmp_ctx = talloc_stackframe();
+   

[SCM] Samba Shared Repository - branch master updated

2011-01-04 Thread Jelmer Vernooij
The branch, master has been updated
   via  e80b322 s4-python: Allow setting TEST_DEBUG_LEVEL to override debug 
level for tests.
   via  733bc1c talloc: Clarify error message on access after free.
  from  899adca s3:build: don't use cli_dssetup.c any more

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit e80b322077d132c8973e85d25ef40c956e8f5b54
Author: Jelmer Vernooij jel...@samba.org
Date:   Wed Jan 5 01:09:25 2011 +0100

s4-python: Allow setting TEST_DEBUG_LEVEL to override debug level for tests.

Autobuild-User: Jelmer Vernooij jel...@samba.org
Autobuild-Date: Wed Jan  5 01:58:44 CET 2011 on sn-devel-104

commit 733bc1c1ca31df2b61d86f5ee8783ee9c3867faa
Author: Jelmer Vernooij jel...@samba.org
Date:   Wed Jan 5 01:01:28 2011 +0100

talloc: Clarify error message on access after free.

---

Summary of changes:
 lib/talloc/talloc.c  |8 
 source4/scripting/python/samba/tests/__init__.py |   10 ++
 2 files changed, 14 insertions(+), 4 deletions(-)


Changeset truncated at 500 lines:

diff --git a/lib/talloc/talloc.c b/lib/talloc/talloc.c
index ec67a46..d6115af 100644
--- a/lib/talloc/talloc.c
+++ b/lib/talloc/talloc.c
@@ -224,9 +224,9 @@ static void talloc_abort_magic(unsigned magic)
talloc_abort(Bad talloc magic value - wrong talloc version 
used/mixed);
 }
 
-static void talloc_abort_double_free(void)
+static void talloc_abort_access_after_free(void)
 {
-   talloc_abort(Bad talloc magic value - double free);
+   talloc_abort(Bad talloc magic value - access after free);
 }
 
 static void talloc_abort_unknown_value(void)
@@ -246,8 +246,8 @@ static inline struct talloc_chunk 
*talloc_chunk_from_ptr(const void *ptr)
}
 
if (tc-flags  TALLOC_FLAG_FREE) {
-   talloc_log(talloc: double free error - first free may 
be at %s\n, tc-name);
-   talloc_abort_double_free();
+   talloc_log(talloc: access after free error - first 
free may be at %s\n, tc-name);
+   talloc_abort_access_after_free();
return NULL;
} else {
talloc_abort_unknown_value();
diff --git a/source4/scripting/python/samba/tests/__init__.py 
b/source4/scripting/python/samba/tests/__init__.py
index 10826ab..d0362ef 100644
--- a/source4/scripting/python/samba/tests/__init__.py
+++ b/source4/scripting/python/samba/tests/__init__.py
@@ -36,6 +36,16 @@ from testtools.testcase import (
 
 
 class TestCase(TesttoolsTestCase):
+A Samba test case.
+
+def setUp(self):
+super(TestCase, self).setUp()
+test_debug_level = os.getenv(TEST_DEBUG_LEVEL)
+if test_debug_level is not None:
+test_debug_level = int(test_debug_level)
+self._old_debug_level = samba.get_debug_level()
+samba.set_debug_level(test_debug_level)
+self.addCleanup(samba.set_debug_level, test_debug_level)
 
 def get_loadparm(self):
 return env_loadparm()


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2011-01-04 Thread Jelmer Vernooij
The branch, master has been updated
   via  26c8a52 upgradeprovision: Fix use of dict.get().
  from  e80b322 s4-python: Allow setting TEST_DEBUG_LEVEL to override debug 
level for tests.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 26c8a520f3284391820424df2bf4158b276dd32b
Author: Jelmer Vernooij jel...@samba.org
Date:   Wed Jan 5 02:48:03 2011 +0100

upgradeprovision: Fix use of dict.get().

Avoid modifying list while iterating over it.

Autobuild-User: Jelmer Vernooij jel...@samba.org
Autobuild-Date: Wed Jan  5 03:37:35 CET 2011 on sn-devel-104

---

Summary of changes:
 source4/scripting/bin/upgradeprovision |   16 +---
 1 files changed, 5 insertions(+), 11 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/scripting/bin/upgradeprovision 
b/source4/scripting/bin/upgradeprovision
index 27e142b..36c99ee 100755
--- a/source4/scripting/bin/upgradeprovision
+++ b/source4/scripting/bin/upgradeprovision
@@ -855,19 +855,13 @@ def update_present(ref_samdb, samdb, basedn, listPresent, 
usns, invocationid):
 isFirst = 0
 txt = 
 
-for att in delta:
+for att in list(delta):
 if usns is not None:
 # We have updated by provision usn information so let's exploit
 # replMetadataProperties
 if att in forwardlinked:
-if current[0].get():
-curval = current[0][att]
-else:
-curval = ()
-if reference[0].get():
-refval = reference[0][att]
-else:
-refval = ()
+curval = current[0].get(att, ())
+refval = reference[0].get(att, ())
 handle_links(samdb, att, basedn, current[0][dn],
 curval, refval, delta)
 continue
@@ -1696,8 +1690,8 @@ if __name__ == '__main__':
 for att in deltaattr:
 if att.lower() == dn:
 continue
-if deltaattr.get(att) is not None \
-and deltaattr.get(att).flags() != FLAG_MOD_ADD:
+if (deltaattr.get(att) is not None
+and deltaattr.get(att).flags() != FLAG_MOD_ADD):
 doit = False
 elif deltaattr.get(att) is None:
 doit = False


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2011-01-04 Thread Andrew Tridgell
The branch, master has been updated
   via  6f51a1f talloc: fixed a use after free error
   via  66db49e talloc: added a test for the use after free Rusty found
  from  26c8a52 upgradeprovision: Fix use of dict.get().

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 6f51a1f45bf4de062cce7a562477e8140630a53d
Author: Andrew Tridgell tri...@samba.org
Date:   Wed Jan 5 16:33:13 2011 +1100

talloc: fixed a use after free error

this is the minimal fix for the problem Rusty found. I previously
thought that the best fix would be to change tc-parent to be valid
for all pointers, but that is expensive for realloc with large numbers
of child pointers, which is much more commmon than I expected it to
be.

Autobuild-User: Andrew Tridgell tri...@samba.org
Autobuild-Date: Wed Jan  5 07:22:27 CET 2011 on sn-devel-104

commit 66db49e35f87f0e0a9d82cfa661d2cc604758406
Author: Andrew Tridgell tri...@samba.org
Date:   Wed Dec 22 15:29:37 2010 +1100

talloc: added a test for the use after free Rusty found

---

Summary of changes:
 lib/talloc/talloc.c|   17 -
 lib/talloc/testsuite.c |   17 +
 2 files changed, 33 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/lib/talloc/talloc.c b/lib/talloc/talloc.c
index d6115af..c616f34 100644
--- a/lib/talloc/talloc.c
+++ b/lib/talloc/talloc.c
@@ -645,13 +645,28 @@ static inline int _talloc_free_internal(void *ptr, const 
char *location)
   final choice is the null context. */
void *child = TC_PTR_FROM_CHUNK(tc-child);
const void *new_parent = null_context;
+   struct talloc_chunk *old_parent = NULL;
if (unlikely(tc-child-refs)) {
struct talloc_chunk *p = 
talloc_parent_chunk(tc-child-refs);
if (p) new_parent = TC_PTR_FROM_CHUNK(p);
}
+   /* finding the parent here is potentially quite
+  expensive, but the alternative, which is to change
+  talloc to always have a valid tc-parent pointer,
+  makes realloc more expensive where there are a
+  large number of children.
+
+  The reason we need the parent pointer here is that
+  if _talloc_free_internal() fails due to references
+  or a failing destructor we need to re-parent, but
+  the free call can invalidate the prev pointer.
+   */
+   if (new_parent == null_context  (tc-child-refs || 
tc-child-destructor)) {
+   old_parent = talloc_parent_chunk(ptr);
+   }
if (unlikely(_talloc_free_internal(child, location) == -1)) {
if (new_parent == null_context) {
-   struct talloc_chunk *p = 
talloc_parent_chunk(ptr);
+   struct talloc_chunk *p = old_parent;
if (p) new_parent = TC_PTR_FROM_CHUNK(p);
}
_talloc_steal_internal(new_parent, child);
diff --git a/lib/talloc/testsuite.c b/lib/talloc/testsuite.c
index 0026931..ee6256b 100644
--- a/lib/talloc/testsuite.c
+++ b/lib/talloc/testsuite.c
@@ -1167,6 +1167,21 @@ static bool test_free_ref_null_context(void)
return true;
 }
 
+static bool test_rusty(void)
+{
+   void *root;
+   const char *p1;
+
+   talloc_enable_null_tracking();
+   root = talloc_new(NULL);
+   p1 = talloc_strdup(root, foo);
+   talloc_increase_ref_count(p1);
+   talloc_report_full(root, stdout);
+   talloc_free(root);
+   return true;
+}
+
+
 static void test_reset(void)
 {
talloc_set_log_fn(test_log_stdout);
@@ -1221,6 +1236,8 @@ bool torture_local_talloc(struct torture_context *tctx)
ret = test_pool();
test_reset();
ret = test_free_ref_null_context();
+   test_reset();
+   ret = test_rusty();
 
if (ret) {
test_reset();


-- 
Samba Shared Repository