Re: [Samba] allow trusted domains

2012-03-03 Thread Andrew Bartlett
On Mon, 2012-02-27 at 14:07 +0700, Victor Sudakov wrote:
 As written in 
 http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/idmapper.html
 
   Where winbindd is not used Samba (smbd) uses the underlying
   UNIX/Linux mechanisms to resolve the identity of incoming network
   traffic. This is done using the LoginID (account name) in the session
   setup request and passing it to the getpwnam() system function call.
   This call is implemented using the name service switch (NSS) mechanism
   on modern UNIX/Linux systems. By saying users and groups are local,
   we are implying that they are stored only on the local system, in the
   /etc/passwd and /etc/group respectively.
 
   For example, when the user BERYLIUM\WambatW tries to open a connection
   to a Samba server the incoming SessionSetupAndX request will make a
   system call to look up the user WambatW in the /etc/passwd file. 
 
 My question: if BERYLIUM trusts ANOTHERDOMAIN, and
 ANOTHERDOMAIN\WambatW tries to open a connection to my Samba server,
 what user will be looked up in /etc/passwd?

It should be:
ANOTHERDOMAIN\WambatW

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] allow trusted domains

2012-03-03 Thread Victor Sudakov
Andrew Bartlett wrote:
  As written in 
  http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/idmapper.html
  
  Where winbindd is not used Samba (smbd) uses the underlying
  UNIX/Linux mechanisms to resolve the identity of incoming network
  traffic. This is done using the LoginID (account name) in the session
  setup request and passing it to the getpwnam() system function call.
  This call is implemented using the name service switch (NSS) mechanism
  on modern UNIX/Linux systems. By saying users and groups are local,
  we are implying that they are stored only on the local system, in the
  /etc/passwd and /etc/group respectively.
  
  For example, when the user BERYLIUM\WambatW tries to open a connection
  to a Samba server the incoming SessionSetupAndX request will make a
  system call to look up the user WambatW in the /etc/passwd file. 
  
  My question: if BERYLIUM trusts ANOTHERDOMAIN, and
  ANOTHERDOMAIN\WambatW tries to open a connection to my Samba server,
  what user will be looked up in /etc/passwd?
 
 It should be:
 ANOTHERDOMAIN\WambatW

A Unix user with a slash in the login name? Sorry I doubt that because
I have a script in smb.conf:

add user script = /usr/sbin/pw useradd %u -m -Y -M 755

and the script's log shows that those users from trusted domains are
being created as WambatW, not ANOTHERDOMAIN\WambatW. 

How/where can I see/debug the actual mapping happening?

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:suda...@sibptus.tomsk.ru
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] demote samba4 dc and remove from existing 2k8r2 domain

2012-03-03 Thread sheydon
resolved this, just didn't google hard enough in the first place.

--
View this message in context: 
http://samba.2283325.n4.nabble.com/demote-samba4-dc-and-remove-from-existing-2k8r2-domain-tp4440654p4441042.html
Sent from the Samba - General mailing list archive at Nabble.com.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Can ntlm_auth version 3.5.10 be used to perform ntlmv2 authentication against a w2008 DC?

2012-03-03 Thread NdK
Il 03/03/2012 08:04, Andrew Bartlett ha scritto:

 I've recently setup a Squeeze box with FR and samba. Have had to use
 backports repo since 3.5.6 didn't work and (IIRC) even 3.5.10 gave
 troubles. Upgrading to 3.5.11 solved.
 The big issue here is that MSCHAPv2 is not NTLMv2.  It is only a little
 more secure than NTLM.  There is a flag in logon_parameters that the
FR runs ntlm_auth to obtain NT key. So, IIUC, it should do an NTLMv2
auth in the last step. Am I wrong?

BYtE,
 Diego.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] allow trusted domains

2012-03-03 Thread simo
On Sat, 2012-03-03 at 16:59 +0700, Victor Sudakov wrote: 
 Andrew Bartlett wrote:
   As written in 
   http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/idmapper.html
   
 Where winbindd is not used Samba (smbd) uses the underlying
 UNIX/Linux mechanisms to resolve the identity of incoming network
 traffic. This is done using the LoginID (account name) in the session
 setup request and passing it to the getpwnam() system function call.
 This call is implemented using the name service switch (NSS) mechanism
 on modern UNIX/Linux systems. By saying users and groups are local,
 we are implying that they are stored only on the local system, in the
 /etc/passwd and /etc/group respectively.
   
 For example, when the user BERYLIUM\WambatW tries to open a connection
 to a Samba server the incoming SessionSetupAndX request will make a
 system call to look up the user WambatW in the /etc/passwd file. 
   
   My question: if BERYLIUM trusts ANOTHERDOMAIN, and
   ANOTHERDOMAIN\WambatW tries to open a connection to my Samba server,
   what user will be looked up in /etc/passwd?
  
  It should be:
  ANOTHERDOMAIN\WambatW
 
 A Unix user with a slash in the login name? Sorry I doubt that because
 I have a script in smb.conf:
 
 add user script = /usr/sbin/pw useradd %u -m -Y -M 755
 
 and the script's log shows that those users from trusted domains are
 being created as WambatW, not ANOTHERDOMAIN\WambatW. 
 
 How/where can I see/debug the actual mapping happening?

When using trusted domains you should run winbindd, relying on add user
script is basically not supported/tested for trusted domain.

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer s...@samba.org
Principal Software Engineer at Red Hat, Inc. s...@redhat.com

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] allow trusted domains

2012-03-03 Thread Victor Sudakov
simo wrote:
[dd]

My question: if BERYLIUM trusts ANOTHERDOMAIN, and
ANOTHERDOMAIN\WambatW tries to open a connection to my Samba server,
what user will be looked up in /etc/passwd?
   
   It should be:
   ANOTHERDOMAIN\WambatW
  
  A Unix user with a slash in the login name? Sorry I doubt that because
  I have a script in smb.conf:
  
  add user script = /usr/sbin/pw useradd %u -m -Y -M 755
  
  and the script's log shows that those users from trusted domains are
  being created as WambatW, not ANOTHERDOMAIN\WambatW. 
  
  How/where can I see/debug the actual mapping happening?
 
 When using trusted domains you should run winbindd, relying on add user
 script is basically not supported/tested for trusted domain.

This is very sad news. My add user script creates users in the NIS
database which is made available to several Unix hosts. This is a very
reliable technology: once a user is created, it remains rock solid. I
feel very reluctant for the Unix user ids to depend upon some obscure
IDMAP databases prone to corruption, and the availability of Windows
domain controllers.

Is there a way to map all trusted domain users to the guest account?

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:suda...@sibptus.tomsk.ru
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Domain users are loosing there groups after some time.

2012-03-03 Thread Benedikt Schindler
Am 02.03.2012 19:59, schrieb Dale Schroeder:
 On 03/02/2012 5:39 AM, Benedikt Schindler wrote:
 Samba version : 3.6.3
 Filesystem :BTRFS
 Clients :   XP, Win7
 Log Level : 5


 When we start our samba server everything works fine.
 After a few days, some of our users are not allowed to connect to shares
 anymore. When we restart the clients they can connect for a short time
 and then say have the same problem again.

 When we restart the server everything works fine for a few days again.
 We set the winbind offline logon = yes and it slowed down the process,
 but didn't stop it.

 After a long search i think i found the problem.

 The user has 401217 as mapped ID,
 and should be in the groups
400513
401612
401609
401611

 But samba just put him into
400513
401612
401611

 So samba lost one group. And thats the reason the user is not allowed to
 connect to the share, because only the group 401609 has a read permisson.

 Any ideas how that could happen?


 Here is a log of a failed login:


 [2012/03/02 11:37:52.842978,  5]
 ../libcli/security/security_token.c:63(security_token_debug)
Security token SIDs (15):
  SID[  0]: S-1-5-21-1004336348-920026266-682003330-1217
  SID[  1]: S-1-5-21-1004336348-920026266-682003330-513
  SID[  2]: S-1-5-21-1004336348-920026266-682003330-1612
  SID[  3]: S-1-5-21-1004336348-920026266-682003330-1609
  SID[  4]: S-1-5-21-1004336348-920026266-682003330-1611
  SID[  5]: S-1-1-0
  SID[  6]: S-1-5-2
  SID[  7]: S-1-5-11
  SID[  8]: S-1-22-1-401217
  SID[  9]: S-1-22-2-400513
  SID[ 10]: S-1-22-2-401612
  SID[ 11]: S-1-22-2-401611
  SID[ 12]: S-1-22-2-7
  SID[ 13]: S-1-22-2-70002
  SID[ 14]: S-1-22-2-70011
 Privileges (0x   0):
 Rights (0x   0):
 [2012/03/02 11:37:52.843247,  5]
 auth/token_util.c:527(debug_unix_user_token)
UNIX token of user 401217
Primary group is 400513 and contains 6 supplementary groups
Group[  0]: 400513
Group[  1]: 401612
Group[  2]: 401611
Group[  3]: 7
Group[  4]: 70002
Group[  5]: 70011
 [2012/03/02 11:37:52.843372,  5] smbd/uid.c:317(change_to_user_internal)
Impersonated user: uid=(0,401217), gid=(0,400513)
 [2012/03/02 11:37:52.843408,  4] smbd/vfs.c:780(vfs_ChDir)
vfs_ChDir to /home/data
 [2012/03/02 11:37:52.843443,  4] smbd/vfs.c:780(vfs_ChDir)
vfs_ChDir to /home/data
 [2012/03/02 11:37:52.843476,  3] smbd/service.c:190(set_current_service)
chdir (/home/data) failed, reason: Keine Berechtigung
 [2012/03/02 11:37:52.843509,  3] smbd/error.c:81(error_packet_set)
error packet at smbd/process.c(1558) cmd=50 (SMBtrans2)
 NT_STATUS_ACCESS_DENIED




 Configuration parts that are maybe interresting:
 smb.conf:


 security = ADS

 socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
 nt acl support = yes
 vfs objects = acl_xattr

 winbind enum users = yes
  winbind enum groups = yes
  winbind offline logon = yes
  allow trusted domains = yes

  idmap config * : backend = rid
  idmap config * : range   = 7-9
  idmap config * : base_rid= 0

  idmap config A : backend = rid
  idmap config A : range   = 40-49
  idmap config A : base_rid= 0

  idmap config B : backend  = rid
  idmap config B : range= 30-39
  idmap config B : base_rid = 0
 
 Benedikt,
 
 Check this bug - https://bugzilla.samba.org/show_bug.cgi?id=8676 - to
 see if any of these symptoms match those of your systems when the group
 loss happens.
 
 Dale
 
 


Hello Dale,

none of these symptoms exists on our server.

And it's more like the existing connection is loosing the group.

The windows client is connected to \\server.domain.tld\data and this
connection broke after some time. (Because of the group)
You could open a second connection from the same computer to the same
server by using \\server\data with no problems. And it's not about
FQDN or not. It also appears the other way arround.

If you restart the client, the client could connect without any problems
... until it looses the group again.

best regards
Benedikt

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Can ntlm_auth version 3.5.10 be used to perform ntlmv2 authentication against a w2008 DC?

2012-03-03 Thread Andrew Bartlett
On Sat, 2012-03-03 at 12:16 +0100, NdK wrote:
 Il 03/03/2012 08:04, Andrew Bartlett ha scritto:
 
  I've recently setup a Squeeze box with FR and samba. Have had to use
  backports repo since 3.5.6 didn't work and (IIRC) even 3.5.10 gave
  troubles. Upgrading to 3.5.11 solved.
  The big issue here is that MSCHAPv2 is not NTLMv2.  It is only a little
  more secure than NTLM.  There is a flag in logon_parameters that the
 FR runs ntlm_auth to obtain NT key. So, IIUC, it should do an NTLMv2
 auth in the last step. Am I wrong?

MSCHAPv2 is a derivation of NTLM, not NTLMv2.  FreeRadius sends the
(effective) challenge (based on client and server chosen values, and
salt), and the NT response.  ntlm_auth returns the user session key to
allow FreeRADIUS's client (the VPN endpoint etc) to encrypt the
session. 

There is no way to 'upgrade' that to NTLMv2, as NTLMv2 is a different
cryptosystem on input and output. 

What you can however do is set a flag telling the DC 'pretend this was
NTLMv2 for the purposes of the NTLMv2 only rule'.  We need to work out
if this the right thing to do.

Andrew Bartlett

-- 
Andrew Bartletthttp://samba.org/~abartlet/
Authentication Developer, Samba Team   http://samba.org


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[SCM] Samba Shared Repository - branch master updated

2012-03-03 Thread Christian Ambach
The branch, master has been updated
   via  dc24e22 smb2_constants: fix a typo
   via  a1ac670 s3:smb2_server: use SMB2_WATCH_TREE
   via  583a538 smb2_constants: add SMB2_WATCH_TREE
   via  8b25bc8 s3:smb2_server fix a typo
  from  197c185 s3: Fix some blank line endings

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit dc24e229a55d07dfc199e302d9cea5377b627e8c
Author: Christian Ambach a...@samba.org
Date:   Fri Mar 2 21:35:22 2012 -0800

smb2_constants: fix a typo

Autobuild-User: Christian Ambach a...@samba.org
Autobuild-Date: Sat Mar  3 09:04:40 CET 2012 on sn-devel-104

commit a1ac670a8c69fff47bf120acdee4820081b54bc3
Author: Christian Ambach a...@samba.org
Date:   Fri Mar 2 21:34:32 2012 -0800

s3:smb2_server: use SMB2_WATCH_TREE

it makes the code easier to understand if it uses the names specified in 
MS-SMB2 instead
of just the underlying values

commit 583a53835b1709327c96f47466ca3db39a0b3d50
Author: Christian Ambach a...@samba.org
Date:   Fri Mar 2 21:33:28 2012 -0800

smb2_constants: add SMB2_WATCH_TREE

commit 8b25bc80c95ff79ac87b3db034203369dea959a5
Author: Christian Ambach a...@samba.org
Date:   Mon Feb 27 17:52:21 2012 -0800

s3:smb2_server fix a typo

---

Summary of changes:
 libcli/smb/smb2_constants.h |5 -
 source3/smbd/smb2_notify.c  |2 +-
 source3/smbd/smb2_server.c  |2 +-
 3 files changed, 6 insertions(+), 3 deletions(-)


Changeset truncated at 500 lines:

diff --git a/libcli/smb/smb2_constants.h b/libcli/smb/smb2_constants.h
index 6699dd7..b8180ce 100644
--- a/libcli/smb/smb2_constants.h
+++ b/libcli/smb/smb2_constants.h
@@ -113,7 +113,7 @@
 #define SMB2_SHAREFLAG_ACCESS_BASED_DIRECTORY_ENUM   0x0800
 #define SMB2_SHAREFLAG_ALL   0x0F33
 
-/* SMB2 share capafilities */
+/* SMB2 share capabilities */
 #define SMB2_SHARE_CAP_DFS 0x8
 
 /* SMB2 create security flags */
@@ -161,6 +161,9 @@
 #define SMB2_CREATE_TAG_QFID QFid
 #define SMB2_CREATE_TAG_RQLS RqLs
 
+/* SMB2 notify flags */
+#define SMB2_WATCH_TREE 0x0001
+
 /* SMB2 Create ignore some more create_options */
 #define SMB2_CREATE_OPTIONS_NOT_SUPPORTED_MASK 
(NTCREATEX_OPTIONS_TREE_CONNECTION | \
 NTCREATEX_OPTIONS_OPFILTER)
diff --git a/source3/smbd/smb2_notify.c b/source3/smbd/smb2_notify.c
index 49051bf..be56b18 100644
--- a/source3/smbd/smb2_notify.c
+++ b/source3/smbd/smb2_notify.c
@@ -192,7 +192,7 @@ static struct tevent_req *smbd_smb2_notify_send(TALLOC_CTX 
*mem_ctx,
struct smb_request *smbreq;
connection_struct *conn = smb2req-tcon-compat_conn;
files_struct *fsp;
-   bool recursive = (in_flags  0x0001) ? true : false;
+   bool recursive = (in_flags  SMB2_WATCH_TREE) ? true : false;
NTSTATUS status;
 
req = tevent_req_create(mem_ctx, state,
diff --git a/source3/smbd/smb2_server.c b/source3/smbd/smb2_server.c
index 7233e09..8533157 100644
--- a/source3/smbd/smb2_server.c
+++ b/source3/smbd/smb2_server.c
@@ -1288,7 +1288,7 @@ NTSTATUS smbd_smb2_request_verify_sizes(struct 
smbd_smb2_request *req,
/*
 * Now check the expected body size,
 * where the last byte might be in the
-* dynnamic section..
+* dynamic section..
 */
if (req-in.vector[i+1].iov_len != (expected_body_size  0xFFFE)) {
return NT_STATUS_INVALID_PARAMETER;


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2012-03-03 Thread Matthias Dieter Wallnöfer
The branch, master has been updated
   via  a66d0f3 s4:samba-tool domain level raise command - reference SAMDB 
object correctly
  from  dc24e22 smb2_constants: fix a typo

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit a66d0f33eefde8a28247991aa46ac533a63b7793
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Fri Mar 2 20:00:04 2012 +0100

s4:samba-tool domain level raise command - reference SAMDB object correctly

https://bugzilla.samba.org/show_bug.cgi?id=8787

Reviewed-by: Jelmer

Autobuild-User: Matthias Dieter Wallnöfer m...@samba.org
Autobuild-Date: Sat Mar  3 12:54:21 CET 2012 on sn-devel-104

---

Summary of changes:
 source4/scripting/python/samba/netcmd/domain.py |6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source4/scripting/python/samba/netcmd/domain.py 
b/source4/scripting/python/samba/netcmd/domain.py
index 992698d..4364fe8 100644
--- a/source4/scripting/python/samba/netcmd/domain.py
+++ b/source4/scripting/python/samba/netcmd/domain.py
@@ -578,7 +578,7 @@ class cmd_domain_level(Command):
 samdb.modify(m)
 # Under partitions
 m = ldb.Message()
-m.dn = ldb.Dn(samdb, CN= + lp.get(workgroup) + 
,CN=Partitions,%s % ldb.get_config_basedn())
+m.dn = ldb.Dn(samdb, CN= + lp.get(workgroup) + 
,CN=Partitions,%s % samdb.get_config_basedn())
 m[nTMixedDomain] = ldb.MessageElement(0,
   ldb.FLAG_MOD_REPLACE, nTMixedDomain)
 try:
@@ -597,7 +597,7 @@ class cmd_domain_level(Command):
 # Under partitions
 m = ldb.Message()
 m.dn = ldb.Dn(samdb, CN= + lp.get(workgroup)
-  + ,CN=Partitions,%s % ldb.get_config_basedn())
+  + ,CN=Partitions,%s % samdb.get_config_basedn())
 m[msDS-Behavior-Version]= ldb.MessageElement(
   str(new_level_domain), ldb.FLAG_MOD_REPLACE,
   msDS-Behavior-Version)
@@ -622,7 +622,7 @@ class cmd_domain_level(Command):
 if new_level_forest  level_domain:
 raise CommandError(Forest function level can't be higher 
than the domain function level(s). Please raise it/them first!)
 m = ldb.Message()
-m.dn = ldb.Dn(samdb, CN=Partitions,%s % 
ldb.get_config_basedn())
+m.dn = ldb.Dn(samdb, CN=Partitions,%s % 
samdb.get_config_basedn())
 m[msDS-Behavior-Version]= ldb.MessageElement(
   str(new_level_forest), ldb.FLAG_MOD_REPLACE,
   msDS-Behavior-Version)


-- 
Samba Shared Repository


autobuild: intermittent test failure detected

2012-03-03 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2012-03-03-1432/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-03-03-1432/samba3.stderr
   http://git.samba.org/autobuild.flakey/2012-03-03-1432/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-03-03-1432/samba4.stderr
   http://git.samba.org/autobuild.flakey/2012-03-03-1432/samba4.stdout
  
The top commit at the time of the failure was:

commit a66d0f33eefde8a28247991aa46ac533a63b7793
Author: Matthias Dieter Wallnöfer m...@samba.org
Date:   Fri Mar 2 20:00:04 2012 +0100

s4:samba-tool domain level raise command - reference SAMDB object correctly

https://bugzilla.samba.org/show_bug.cgi?id=8787

Reviewed-by: Jelmer

Autobuild-User: Matthias Dieter Wallnöfer m...@samba.org
Autobuild-Date: Sat Mar  3 12:54:21 CET 2012 on sn-devel-104


[SCM] Samba Shared Repository - branch master updated

2012-03-03 Thread Michael Adam
The branch, master has been updated
   via  58c26c2 selftest: more precisely skip durable-open, not durable.open
   via  e628380 s4:torture:smb2: start a testsuite for durable v2 handles: 
durable and persistent opens
   via  f6047af s4:libcli:smb2: set SMB2_CAP_ALL in the negprot
   via  8dc1873 s3:libsmb: pass smb2 capabilities and client guid in 
cli_state_create()
   via  1451e5f s4:libcli:smb2: store the share capabilites in the 
smb2_tree object
   via  ac43937 smbXcli: add the possiblilty to negotiate client 
capabilites in smb = 2.2
   via  5a5f98d s4:libcli:smb2: allow max protocol 0x0224
   via  a92b5f3 s4:libcli:smb2: add support for parsing the durable handle 
v2 response in smb2_create_recv()
   via  dfbf55b s4:libcli:smb2: add support durable handle reconnect v2 
blob in smb2_create_send
   via  b1a2ab1 s4:libcli:smb2: add support durable handle request v2 blob 
in smb2_create_send
   via  edeed15 s4:libcli:smb2: add durable handle v2 data to the 
smb2_create i/o structure
   via  76e6733 libcli:smb: define SMB2_DHANDLE_FLAG_PERSISTENT
   via  db632fd libcli:smb: add new SMB2 share flags
   via  6f86083 libcli:smb: upgrade SMB2_CAP_ALL to include the newly known 
caps
   via  8c5d288 libcli:smb: add defines for SMB2.2 share capabilities
   via  29eed63 libcli:smb: add defines for SMB2.2 global capabilities
   via  0bdd18e libcli:smb: define DH2Q and DH2C tags for smb2 extra create 
blobs
   via  57d99bc s4:torture:smb2: rename some of the durable-handle subtests 
more systematically
   via  72ab279 s4:torture:smb2:durable_open: update (C)
   via  4c92866 s4:torture:smb2:durable-open: skip the open-with-lease test 
on servers without lease support
   via  d276356 s4:torture:smb2: durable-open: make tables static
   via  79576df s4:test:smb2:durable_open: skip lease tests when the server 
does not support leases
   via  579bb0a s4:torture:smb2:durable_open: remove unused lease variables 
in the open-oplock test
   via  87fc8c0 s3:smbd:smb2_write: improve logging in the error case
  from  a66d0f3 s4:samba-tool domain level raise command - reference SAMDB 
object correctly

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 58c26c2fd43051bb3910e8b7012ab37604da3ef5
Author: Michael Adam ob...@samba.org
Date:   Sat Mar 3 17:01:38 2012 +0100

selftest: more precisely skip durable-open, not durable.open

Autobuild-User: Michael Adam ob...@samba.org
Autobuild-Date: Sat Mar  3 19:17:32 CET 2012 on sn-devel-104

commit e6283801f44c2782ba7906fec25c7ee382499a14
Author: Michael Adam ob...@samba.org
Date:   Mon Feb 27 22:56:37 2012 +0100

s4:torture:smb2: start a testsuite for durable v2 handles: durable and 
persistent opens

commit f6047afb2dfd64fc5c636ecadd66f6c4185e100a
Author: Michael Adam ob...@samba.org
Date:   Thu Mar 1 02:22:36 2012 +0100

s4:libcli:smb2: set SMB2_CAP_ALL in the negprot

commit 8dc1873ff530060850c48bd2bb3cff9ab86a6b95
Author: Stefan Metzmacher me...@samba.org
Date:   Thu Mar 1 01:38:09 2012 +0100

s3:libsmb: pass smb2 capabilities and client guid in cli_state_create()

metze

Signed-off-by: Michael Adam ob...@samba.org

commit 1451e5f66312e37b07d82e48a615b39fe63bd6e3
Author: Michael Adam ob...@samba.org
Date:   Thu Mar 1 00:29:51 2012 +0100

s4:libcli:smb2: store the share capabilites in the smb2_tree object

commit ac43937ce4d5100a82df9d76d50d72b97daaedd3
Author: Michael Adam ob...@samba.org
Date:   Wed Feb 29 02:02:29 2012 +0100

smbXcli: add the possiblilty to negotiate client capabilites in smb = 2.2

Pair-Programmed-With: Stefan Metzmacher me...@samba.org

commit 5a5f98dc70bcca088af061473b8cb465e5aa6ff0
Author: Michael Adam ob...@samba.org
Date:   Mon Feb 27 20:27:46 2012 +0100

s4:libcli:smb2: allow max protocol 0x0224

commit a92b5f33de6d5d961725f34104a132be1a8dcf52
Author: Michael Adam ob...@samba.org
Date:   Mon Feb 27 20:15:18 2012 +0100

s4:libcli:smb2: add support for parsing the durable handle v2 response in 
smb2_create_recv()

commit dfbf55bb36e2f5cc798079b3fea2b34cd727e1b3
Author: Michael Adam ob...@samba.org
Date:   Mon Feb 27 20:15:01 2012 +0100

s4:libcli:smb2: add support durable handle reconnect v2 blob in 
smb2_create_send

commit b1a2ab1fa9222f794217e5917aea193ecf591e3e
Author: Michael Adam ob...@samba.org
Date:   Mon Feb 27 20:15:01 2012 +0100

s4:libcli:smb2: add support durable handle request v2 blob in 
smb2_create_send

commit edeed1552d437b82e88288395d8e1db44ac2999a
Author: Michael Adam ob...@samba.org
Date:   Mon Feb 27 02:35:24 2012 +0100

s4:libcli:smb2: add durable handle v2 data to the smb2_create i/o structure

commit 76e6733344dc4d85a96ff108ca05279f44ffc79e
Author: Michael Adam ob...@samba.org
Date:   Fri Mar 2 22:01:01 2012 +0100

libcli:smb: define SMB2_DHANDLE_FLAG_PERSISTENT


[SCM] Samba Shared Repository - branch master updated

2012-03-03 Thread Volker Lendecke
The branch, master has been updated
   via  c887cb6 s3: Fix a bogus if (client_len  0)
  from  58c26c2 selftest: more precisely skip durable-open, not durable.open

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit c887cb6852ce6ec669f87c282d55267c6d3e
Author: Volker Lendecke v...@samba.org
Date:   Sat Mar 3 17:02:01 2012 +0100

s3: Fix a bogus if (client_len  0)

On some platforms socklen_t might be unsigned, so comparing for 0
always returns true. Also, tsocket_address_bsd_sockaddr returns
ssize_t.

Autobuild-User: Volker Lendecke v...@samba.org
Autobuild-Date: Sat Mar  3 23:38:31 CET 2012 on sn-devel-104

---

Summary of changes:
 source3/rpc_server/spoolss/srv_spoolss_nt.c |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/rpc_server/spoolss/srv_spoolss_nt.c 
b/source3/rpc_server/spoolss/srv_spoolss_nt.c
index ed5edcc..f66bea8 100644
--- a/source3/rpc_server/spoolss/srv_spoolss_nt.c
+++ b/source3/rpc_server/spoolss/srv_spoolss_nt.c
@@ -2677,7 +2677,7 @@ WERROR 
_spoolss_RemoteFindFirstPrinterChangeNotifyEx(struct pipes_struct *p,
int snum = -1;
struct spoolss_NotifyOption *option = r-in.notify_options;
struct sockaddr_storage client_ss;
-   socklen_t client_len;
+   ssize_t client_len;
 
/* store the notify value in the printer struct */
 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2012-03-03 Thread Jelmer Vernooij
The branch, master has been updated
   via  cc17dde samba.7: Remove references to long gone testprns and smbsh 
utilities.
  from  c887cb6 s3: Fix a bogus if (client_len  0)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit cc17ddeca178ef5b28375cdcb6e9a45e42038c09
Author: Jelmer Vernooij jel...@samba.org
Date:   Sat Mar 3 22:22:50 2012 +0100

samba.7: Remove references to long gone testprns and smbsh utilities.

Autobuild-User: Jelmer Vernooij jel...@samba.org
Autobuild-Date: Sun Mar  4 01:56:19 CET 2012 on sn-devel-104

---

Summary of changes:
 docs-xml/manpages-3/samba.7.xml |   18 --
 1 files changed, 0 insertions(+), 18 deletions(-)


Changeset truncated at 500 lines:

diff --git a/docs-xml/manpages-3/samba.7.xml b/docs-xml/manpages-3/samba.7.xml
index 95cbf07..1e1d71d 100644
--- a/docs-xml/manpages-3/samba.7.xml
+++ b/docs-xml/manpages-3/samba.7.xml
@@ -76,16 +76,6 @@
/varlistentry
 
varlistentry
-   termciterefentryrefentrytitletestprns/refentrytitle
-   manvolnum1/manvolnum/citerefentry/term
-   listitemparaThe commandtestprns/command
-   utility supports testing printer names defined 
-   in your filenameprintcap/filename file used 
-   by Samba./para
-   /listitem
-   /varlistentry
-
-   varlistentry
termciterefentryrefentrytitlesmbstatus/refentrytitle
manvolnum1/manvolnum/citerefentry/term
listitemparaThe commandsmbstatus/command
@@ -121,14 +111,6 @@
/varlistentry
 
varlistentry
-   termciterefentryrefentrytitlesmbsh/refentrytitle
-   manvolnum1/manvolnum/citerefentry/term
-   listitemparaThe commandsmbsh/command command is 
-   a program that allows you to run a unix shell with 
-   with an overloaded VFS./para/listitem
-   /varlistentry
-
-   varlistentry
termciterefentryrefentrytitlesmbtree/refentrytitle
manvolnum1/manvolnum/citerefentry/term
listitemparaThe commandsmbtree/command command 


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2012-03-03 Thread Jelmer Vernooij
The branch, master has been updated
   via  4a8d55c selftest: Remove unused vde functions.
   via  9654c61 selftest/README: Expand inconsistent tabs
   via  f75746e selftest: Remove outdated template.
   via  ed92f3d selftest: Remove unused and broken target 'windows'.
  from  cc17dde samba.7: Remove references to long gone testprns and smbsh 
utilities.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 4a8d55cd7d27fcce6f4bedb6af48a7698a3be86e
Author: Jelmer Vernooij jel...@samba.org
Date:   Sun Mar 4 05:08:26 2012 +0100

selftest: Remove unused vde functions.

Autobuild-User: Jelmer Vernooij jel...@samba.org
Autobuild-Date: Sun Mar  4 07:54:51 CET 2012 on sn-devel-104

commit 9654c61a9f1bb59ad3e59e59709b732635587993
Author: Jelmer Vernooij jel...@samba.org
Date:   Sun Mar 4 01:20:03 2012 +0100

selftest/README: Expand inconsistent tabs

commit f75746e353778113c9fa539336be145d3a12ce24
Author: Jelmer Vernooij jel...@samba.org
Date:   Sun Mar 4 01:19:17 2012 +0100

selftest: Remove outdated template.

commit ed92f3de63313eaa269f8f0aca1e7176fc87c18f
Author: Jelmer Vernooij jel...@samba.org
Date:   Sun Mar 4 01:18:58 2012 +0100

selftest: Remove unused and broken target 'windows'.

---

Summary of changes:
 selftest/README |   22 ++--
 selftest/selftest.pl|   31 
 selftest/target/Template.pm |   47 ---
 selftest/target/Windows.pm  |   40 
 4 files changed, 11 insertions(+), 129 deletions(-)
 delete mode 100644 selftest/target/Template.pm
 delete mode 100644 selftest/target/Windows.pm


Changeset truncated at 500 lines:

diff --git a/selftest/README b/selftest/README
index 206f864..c23d730 100644
--- a/selftest/README
+++ b/selftest/README
@@ -84,22 +84,22 @@ The environments are currently available include
be set:
 
  * USERNAME: Administrator user name
-* PASSWORD: Administrator password
-* DOMAIN: Domain name
-* REALM: Realm name
-* SERVER: DC host name 
-* SERVER_IP: DC IPv4 address
-* NETBIOSNAME: DC NetBIOS name
-* NETIOSALIAS: DC NetBIOS alias
+ * PASSWORD: Administrator password
+ * DOMAIN: Domain name
+ * REALM: Realm name
+ * SERVER: DC host name 
+ * SERVER_IP: DC IPv4 address
+ * NETBIOSNAME: DC NetBIOS name
+ * NETIOSALIAS: DC NetBIOS alias
 
  - member,s4member,s3member: Domain controller and member server that is 
joined to it set up. The
following environment variables will be set:
 
  * USERNAME: Domain administrator user name
-* PASSWORD: Domain administrator password
-* DOMAIN: Domain name
-* REALM: Realm name
-* SERVER: Name of the member server
+ * PASSWORD: Domain administrator password
+ * DOMAIN: Domain name
+ * REALM: Realm name
+ * SERVER: Name of the member server
 
 See Samba.pm, Samba3.pm and Samba4.pm for the full list.
 
diff --git a/selftest/selftest.pl b/selftest/selftest.pl
index a6d4e14..7328300 100755
--- a/selftest/selftest.pl
+++ b/selftest/selftest.pl
@@ -384,40 +384,9 @@ unless ($opt_list) {
$testenv_default = member;
require target::Samba3;
$target = new Samba3($bindir, \%binary_mapping, $srcdir_abs, 
$server_maxtime);
-   } elsif ($opt_target eq win) {
-   die(Windows tests will not run with socket wrapper enabled.) 
-   if ($opt_socket_wrapper);
-   $testenv_default = dc;
-   require target::Windows;
-   $target = new Windows();
}
 }
 
-#
-# Start a Virtual Distributed Ethernet Switch
-# Returns the pid of the switch.
-#
-sub start_vde_switch($)
-{
-   my ($path) = @_;
-
-   system(vde_switch --pidfile $path/vde.pid --sock $path/vde.sock 
--daemon);
-
-   open(PID, $path/vde.pid);
-   PID =~ /([0-9]+)/;
-   my $pid = $1;
-   close(PID);
-
-   return $pid;
-}
-
-# Stop a Virtual Distributed Ethernet Switch
-sub stop_vde_switch($)
-{
-   my ($pid) = @_;
-   kill 9, $pid;
-}
-
 sub read_test_regexes($)
 {
my ($name) = @_;
diff --git a/selftest/target/Template.pm b/selftest/target/Template.pm
deleted file mode 100644
index 2b47ad1..000
--- a/selftest/target/Template.pm
+++ /dev/null
@@ -1,47 +0,0 @@
-#!/usr/bin/perl
-# Copyright (C) 2009 Stefan Metzmacher me...@samba.org
-# Published under the GNU GPL, v3 or later.
-
-package Template;
-
-use strict;
-
-sub new($$) {
-   my ($classname) = @_;
-   my $self = {
-   classname = $classname
-   };
-   bless $self;
-   return $self;
-}
-
-sub teardown_env($$)
-{
-   my ($self, $envvars) = @_;
-
-   return 0;
-}
-
-sub getlog_env($$)